Skip to content

Commit 3d01dde

Browse files
authored
Merge pull request #283 from stackql/dev
new `aws`
2 parents 4e1037e + 953f54a commit 3d01dde

File tree

229 files changed

+214492
-31846
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

229 files changed

+214492
-31846
lines changed

providers/src/aws/v00.00.00000/provider.yaml

Lines changed: 126 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,15 @@ providerServices:
2020
title: acmpca
2121
version: v00.00.00000
2222
description: acmpca
23+
amazonmq:
24+
id: amazonmq:v00.00.00000
25+
name: amazonmq
26+
preferred: true
27+
service:
28+
$ref: aws/v00.00.00000/services/amazonmq.yaml
29+
title: amazonmq
30+
version: v00.00.00000
31+
description: amazonmq
2332
amplify:
2433
id: amplify:v00.00.00000
2534
name: amplify
@@ -101,6 +110,15 @@ providerServices:
101110
title: applicationinsights
102111
version: v00.00.00000
103112
description: applicationinsights
113+
applicationsignals:
114+
id: applicationsignals:v00.00.00000
115+
name: applicationsignals
116+
preferred: true
117+
service:
118+
$ref: aws/v00.00.00000/services/applicationsignals.yaml
119+
title: applicationsignals
120+
version: v00.00.00000
121+
description: applicationsignals
104122
apprunner:
105123
id: apprunner:v00.00.00000
106124
name: apprunner
@@ -128,6 +146,15 @@ providerServices:
128146
title: appsync
129147
version: v00.00.00000
130148
description: appsync
149+
apptest:
150+
id: apptest:v00.00.00000
151+
name: apptest
152+
preferred: true
153+
service:
154+
$ref: aws/v00.00.00000/services/apptest.yaml
155+
title: apptest
156+
version: v00.00.00000
157+
description: apptest
131158
aps:
132159
id: aps:v00.00.00000
133160
name: aps
@@ -461,6 +488,15 @@ providerServices:
461488
title: connectcampaigns
462489
version: v00.00.00000
463490
description: connectcampaigns
491+
connectcampaignsv2:
492+
id: connectcampaignsv2:v00.00.00000
493+
name: connectcampaignsv2
494+
preferred: true
495+
service:
496+
$ref: aws/v00.00.00000/services/connectcampaignsv2.yaml
497+
title: connectcampaignsv2
498+
version: v00.00.00000
499+
description: connectcampaignsv2
464500
controltower:
465501
id: controltower:v00.00.00000
466502
name: controltower
@@ -911,6 +947,15 @@ providerServices:
911947
title: internetmonitor
912948
version: v00.00.00000
913949
description: internetmonitor
950+
invoicing:
951+
id: invoicing:v00.00.00000
952+
name: invoicing
953+
preferred: true
954+
service:
955+
$ref: aws/v00.00.00000/services/invoicing.yaml
956+
title: invoicing
957+
version: v00.00.00000
958+
description: invoicing
914959
iot:
915960
id: iot:v00.00.00000
916961
name: iot
@@ -1100,6 +1145,15 @@ providerServices:
11001145
title: lambda
11011146
version: v00.00.00000
11021147
description: lambda
1148+
launchwizard:
1149+
id: launchwizard:v00.00.00000
1150+
name: launchwizard
1151+
preferred: true
1152+
service:
1153+
$ref: aws/v00.00.00000/services/launchwizard.yaml
1154+
title: launchwizard
1155+
version: v00.00.00000
1156+
description: launchwizard
11031157
lex:
11041158
id: lex:v00.00.00000
11051159
name: lex
@@ -1307,15 +1361,6 @@ providerServices:
13071361
title: networkmanager
13081362
version: v00.00.00000
13091363
description: networkmanager
1310-
nimblestudio:
1311-
id: nimblestudio:v00.00.00000
1312-
name: nimblestudio
1313-
preferred: true
1314-
service:
1315-
$ref: aws/v00.00.00000/services/nimblestudio.yaml
1316-
title: nimblestudio
1317-
version: v00.00.00000
1318-
description: nimblestudio
13191364
oam:
13201365
id: oam:v00.00.00000
13211366
name: oam
@@ -1406,6 +1451,24 @@ providerServices:
14061451
title: pcaconnectorad
14071452
version: v00.00.00000
14081453
description: pcaconnectorad
1454+
pcaconnectorscep:
1455+
id: pcaconnectorscep:v00.00.00000
1456+
name: pcaconnectorscep
1457+
preferred: true
1458+
service:
1459+
$ref: aws/v00.00.00000/services/pcaconnectorscep.yaml
1460+
title: pcaconnectorscep
1461+
version: v00.00.00000
1462+
description: pcaconnectorscep
1463+
pcs:
1464+
id: pcs:v00.00.00000
1465+
name: pcs
1466+
preferred: true
1467+
service:
1468+
$ref: aws/v00.00.00000/services/pcs.yaml
1469+
title: pcs
1470+
version: v00.00.00000
1471+
description: pcs
14091472
personalize:
14101473
id: personalize:v00.00.00000
14111474
name: personalize
@@ -1478,6 +1541,15 @@ providerServices:
14781541
title: ram
14791542
version: v00.00.00000
14801543
description: ram
1544+
rbin:
1545+
id: rbin:v00.00.00000
1546+
name: rbin
1547+
preferred: true
1548+
service:
1549+
$ref: aws/v00.00.00000/services/rbin.yaml
1550+
title: rbin
1551+
version: v00.00.00000
1552+
description: rbin
14811553
rds:
14821554
id: rds:v00.00.00000
14831555
name: rds
@@ -1658,6 +1730,15 @@ providerServices:
16581730
title: s3outposts
16591731
version: v00.00.00000
16601732
description: s3outposts
1733+
s3tables:
1734+
id: s3tables:v00.00.00000
1735+
name: s3tables
1736+
preferred: true
1737+
service:
1738+
$ref: aws/v00.00.00000/services/s3tables.yaml
1739+
title: s3tables
1740+
version: v00.00.00000
1741+
description: s3tables
16611742
sagemaker:
16621743
id: sagemaker:v00.00.00000
16631744
name: sagemaker
@@ -1802,6 +1883,15 @@ providerServices:
18021883
title: ssmincidents
18031884
version: v00.00.00000
18041885
description: ssmincidents
1886+
ssmquicksetup:
1887+
id: ssmquicksetup:v00.00.00000
1888+
name: ssmquicksetup
1889+
preferred: true
1890+
service:
1891+
$ref: aws/v00.00.00000/services/ssmquicksetup.yaml
1892+
title: ssmquicksetup
1893+
version: v00.00.00000
1894+
description: ssmquicksetup
18051895
sso:
18061896
id: sso:v00.00.00000
18071897
name: sso
@@ -1964,6 +2054,33 @@ providerServices:
19642054
title: cloudhsm
19652055
version: v00.00.00000
19662056
description: cloudhsm
2057+
ec2_native:
2058+
id: ec2_native:v00.00.00000
2059+
name: ec2_native
2060+
preferred: true
2061+
service:
2062+
$ref: aws/v00.00.00000/services/ec2_native.yaml
2063+
title: ec2_native
2064+
version: v00.00.00000
2065+
description: ec2_native
2066+
iam_native:
2067+
id: iam_native:v00.00.00000
2068+
name: iam_native
2069+
preferred: true
2070+
service:
2071+
$ref: aws/v00.00.00000/services/iam_native.yaml
2072+
title: iam_native
2073+
version: v00.00.00000
2074+
description: iam_native
2075+
global_inventory:
2076+
id: global_inventory:v00.00.00000
2077+
name: global_inventory
2078+
preferred: true
2079+
service:
2080+
$ref: aws/v00.00.00000/services/global_inventory.yaml
2081+
title: global_inventory
2082+
version: v00.00.00000
2083+
description: global_inventory
19672084
config:
19682085
auth:
19692086
type: aws_signing_v4

providers/src/aws/v00.00.00000/services/accessanalyzer.yaml

Lines changed: 54 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -438,22 +438,61 @@ components:
438438
maxLength: 127
439439
Value:
440440
type: string
441-
description: 'The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. '
442-
minLength: 1
441+
description: 'The value for the tag. You can specify a value that is 0 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. '
442+
minLength: 0
443443
maxLength: 255
444444
required:
445445
- Key
446-
- Value
446+
additionalProperties: false
447+
Tags:
448+
type: array
449+
x-insertionOrder: false
450+
uniqueItems: true
451+
description: An array of key-value pairs to apply to this resource.
452+
items:
453+
$ref: '#/components/schemas/Tag'
454+
AnalysisRuleCriteria:
455+
description: The criteria for an analysis rule for an analyzer.
456+
type: object
457+
properties:
458+
AccountIds:
459+
description: A list of AWS account IDs to apply to the analysis rule criteria. The accounts cannot include the organization analyzer owner account. Account IDs can only be applied to the analysis rule criteria for organization-level analyzers.
460+
type: array
461+
x-insertionOrder: false
462+
items:
463+
type: string
464+
ResourceTags:
465+
description: |-
466+
An array of key-value pairs to match for your resources. You can use the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
467+
468+
For the tag key, you can specify a value that is 1 to 128 characters in length and cannot be prefixed with aws:.
469+
470+
For the tag value, you can specify a value that is 0 to 256 characters in length. If the specified tag value is 0 characters, the rule is applied to all principals with the specified tag key.
471+
type: array
472+
x-insertionOrder: false
473+
items:
474+
$ref: '#/components/schemas/Tags'
447475
additionalProperties: false
448476
UnusedAccessConfiguration:
449477
description: The Configuration for Unused Access Analyzer
450478
type: object
451479
properties:
452480
UnusedAccessAge:
453-
description: The specified access age in days for which to generate findings for unused access. For example, if you specify 90 days, the analyzer will generate findings for IAM entities within the accounts of the selected organization for any access that hasn't been used in 90 or more days since the analyzer's last scan. You can choose a value between 1 and 180 days.
481+
description: The specified access age in days for which to generate findings for unused access. For example, if you specify 90 days, the analyzer will generate findings for IAM entities within the accounts of the selected organization for any access that hasn't been used in 90 or more days since the analyzer's last scan. You can choose a value between 1 and 365 days.
454482
type: integer
455483
minimum: 1
456-
maximum: 180
484+
maximum: 365
485+
AnalysisRule:
486+
description: Contains information about rules for the analyzer.
487+
type: object
488+
properties:
489+
Exclusions:
490+
description: A list of rules for the analyzer containing criteria to exclude from analysis. Entities that meet the rule criteria will not generate findings.
491+
type: array
492+
x-insertionOrder: false
493+
items:
494+
$ref: '#/components/schemas/AnalysisRuleCriteria'
495+
additionalProperties: false
457496
additionalProperties: false
458497
Analyzer:
459498
type: object
@@ -503,6 +542,7 @@ components:
503542
x-create-only-properties:
504543
- AnalyzerName
505544
- Type
545+
x-conditional-create-only-properties:
506546
- AnalyzerConfiguration
507547
x-read-only-properties:
508548
- Arn
@@ -514,6 +554,10 @@ components:
514554
tagUpdatable: true
515555
cloudFormationSystemTags: true
516556
tagProperty: /properties/Tags
557+
permissions:
558+
- access-analyzer:UntagResource
559+
- access-analyzer:TagResource
560+
- access-analyzer:ListTagsForResource
517561
x-required-permissions:
518562
create:
519563
- access-analyzer:CreateAnalyzer
@@ -531,6 +575,7 @@ components:
531575
- access-analyzer:ListAnalyzers
532576
- access-analyzer:TagResource
533577
- access-analyzer:UntagResource
578+
- access-analyzer:UpdateAnalyzer
534579
- access-analyzer:UpdateArchiveRule
535580
delete:
536581
- access-analyzer:DeleteAnalyzer
@@ -680,7 +725,7 @@ components:
680725
JSON_EXTRACT(detail.Properties, '$.Type') as type,
681726
JSON_EXTRACT(detail.Properties, '$.AnalyzerConfiguration') as analyzer_configuration
682727
FROM aws.cloud_control.resources listing
683-
LEFT OUTER JOIN aws.cloud_control.resource detail
728+
INNER JOIN aws.cloud_control.resource detail
684729
ON detail.data__Identifier = listing.Identifier
685730
AND detail.region = listing.region
686731
WHERE listing.data__TypeName = 'AWS::AccessAnalyzer::Analyzer'
@@ -713,7 +758,7 @@ components:
713758
json_extract_path_text(detail.Properties, 'Type') as type,
714759
json_extract_path_text(detail.Properties, 'AnalyzerConfiguration') as analyzer_configuration
715760
FROM aws.cloud_control.resources listing
716-
LEFT OUTER JOIN aws.cloud_control.resource detail
761+
INNER JOIN aws.cloud_control.resource detail
717762
ON detail.data__Identifier = listing.Identifier
718763
AND detail.region = listing.region
719764
WHERE listing.data__TypeName = 'AWS::AccessAnalyzer::Analyzer'
@@ -776,7 +821,7 @@ components:
776821
JSON_EXTRACT(detail.Properties, '$.Type') as type,
777822
JSON_EXTRACT(detail.Properties, '$.AnalyzerConfiguration') as analyzer_configuration
778823
FROM aws.cloud_control.resources listing
779-
LEFT OUTER JOIN aws.cloud_control.resource detail
824+
INNER JOIN aws.cloud_control.resource detail
780825
ON detail.data__Identifier = listing.Identifier
781826
AND detail.region = listing.region
782827
,json_each(JSON_EXTRACT(detail.Properties, '$.Tags'))
@@ -796,7 +841,7 @@ components:
796841
json_extract_path_text(detail.Properties, 'Type') as type,
797842
json_extract_path_text(detail.Properties, 'AnalyzerConfiguration') as analyzer_configuration
798843
FROM aws.cloud_control.resources listing
799-
LEFT OUTER JOIN aws.cloud_control.resource detail
844+
INNER JOIN aws.cloud_control.resource detail
800845
ON detail.data__Identifier = listing.Identifier
801846
AND detail.region = listing.region
802847
,json_array_elements_text(json_extract_path_text(detail.Properties, 'Tags'))

providers/src/aws/v00.00.00000/services/acmpca.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1399,7 +1399,7 @@ components:
13991399
JSON_EXTRACT(detail.Properties, '$.KeyStorageSecurityStandard') as key_storage_security_standard,
14001400
JSON_EXTRACT(detail.Properties, '$.UsageMode') as usage_mode
14011401
FROM aws.cloud_control.resources listing
1402-
LEFT OUTER JOIN aws.cloud_control.resource detail
1402+
INNER JOIN aws.cloud_control.resource detail
14031403
ON detail.data__Identifier = listing.Identifier
14041404
AND detail.region = listing.region
14051405
WHERE listing.data__TypeName = 'AWS::ACMPCA::CertificateAuthority'
@@ -1442,7 +1442,7 @@ components:
14421442
json_extract_path_text(detail.Properties, 'KeyStorageSecurityStandard') as key_storage_security_standard,
14431443
json_extract_path_text(detail.Properties, 'UsageMode') as usage_mode
14441444
FROM aws.cloud_control.resources listing
1445-
LEFT OUTER JOIN aws.cloud_control.resource detail
1445+
INNER JOIN aws.cloud_control.resource detail
14461446
ON detail.data__Identifier = listing.Identifier
14471447
AND detail.region = listing.region
14481448
WHERE listing.data__TypeName = 'AWS::ACMPCA::CertificateAuthority'
@@ -1510,7 +1510,7 @@ components:
15101510
JSON_EXTRACT(detail.Properties, '$.KeyStorageSecurityStandard') as key_storage_security_standard,
15111511
JSON_EXTRACT(detail.Properties, '$.UsageMode') as usage_mode
15121512
FROM aws.cloud_control.resources listing
1513-
LEFT OUTER JOIN aws.cloud_control.resource detail
1513+
INNER JOIN aws.cloud_control.resource detail
15141514
ON detail.data__Identifier = listing.Identifier
15151515
AND detail.region = listing.region
15161516
,json_each(JSON_EXTRACT(detail.Properties, '$.Tags'))
@@ -1535,7 +1535,7 @@ components:
15351535
json_extract_path_text(detail.Properties, 'KeyStorageSecurityStandard') as key_storage_security_standard,
15361536
json_extract_path_text(detail.Properties, 'UsageMode') as usage_mode
15371537
FROM aws.cloud_control.resources listing
1538-
LEFT OUTER JOIN aws.cloud_control.resource detail
1538+
INNER JOIN aws.cloud_control.resource detail
15391539
ON detail.data__Identifier = listing.Identifier
15401540
AND detail.region = listing.region
15411541
,json_array_elements_text(json_extract_path_text(detail.Properties, 'Tags'))

0 commit comments

Comments
 (0)