shield

type ApplicationLayerAutomaticResponse ¶

type ApplicationLayerAutomaticResponse struct {
	pulumi.CustomResourceState

	// One of `COUNT` or `BLOCK`
	Action pulumi.StringOutput `pulumi:"action"`
	// ARN of the resource to protect (Cloudfront Distributions and ALBs only at this time).
	ResourceArn pulumi.StringOutput                                `pulumi:"resourceArn"`
	Timeouts    ApplicationLayerAutomaticResponseTimeoutsPtrOutput `pulumi:"timeouts"`
}

Resource for managing an AWS Shield Application Layer Automatic Response for automatic DDoS mitigation.

## Example Usage

### Basic Usage

```go package main

import (

"fmt"

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := aws.GetRegion(ctx, &aws.GetRegionArgs{}, nil)
		if err != nil {
			return err
		}
		currentGetCallerIdentity, err := aws.GetCallerIdentity(ctx, &aws.GetCallerIdentityArgs{}, nil)
		if err != nil {
			return err
		}
		currentGetPartition, err := aws.GetPartition(ctx, &aws.GetPartitionArgs{}, nil)
		if err != nil {
			return err
		}
		cfg := config.New(ctx, "")
		// The Cloudfront Distribution on which to enable the Application Layer Automatic Response.
		distributionId := cfg.Require("distributionId")
		_, err = shield.NewApplicationLayerAutomaticResponse(ctx, "example", &shield.ApplicationLayerAutomaticResponseArgs{
			ResourceArn: pulumi.Sprintf("arn:%v:cloudfront:%v:distribution/%v", currentGetPartition.Partition, currentGetCallerIdentity.AccountId, distributionId),
			Action:      pulumi.String("COUNT"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

func GetApplicationLayerAutomaticResponse(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApplicationLayerAutomaticResponseState, opts ...pulumi.ResourceOption) (*ApplicationLayerAutomaticResponse, error)

func NewApplicationLayerAutomaticResponse(ctx *pulumi.Context,
	name string, args *ApplicationLayerAutomaticResponseArgs, opts ...pulumi.ResourceOption) (*ApplicationLayerAutomaticResponse, error)

func (*ApplicationLayerAutomaticResponse) ElementType() reflect.Type

func (i *ApplicationLayerAutomaticResponse) ToApplicationLayerAutomaticResponseOutput() ApplicationLayerAutomaticResponseOutput

func (i *ApplicationLayerAutomaticResponse) ToApplicationLayerAutomaticResponseOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseOutput

type ApplicationLayerAutomaticResponseArgs ¶

type ApplicationLayerAutomaticResponseArgs struct {
	// One of `COUNT` or `BLOCK`
	Action pulumi.StringInput
	// ARN of the resource to protect (Cloudfront Distributions and ALBs only at this time).
	ResourceArn pulumi.StringInput
	Timeouts    ApplicationLayerAutomaticResponseTimeoutsPtrInput
}

The set of arguments for constructing a ApplicationLayerAutomaticResponse resource.

func (ApplicationLayerAutomaticResponseArgs) ElementType() reflect.Type

type ApplicationLayerAutomaticResponseArray ¶

type ApplicationLayerAutomaticResponseArray []ApplicationLayerAutomaticResponseInput

func (ApplicationLayerAutomaticResponseArray) ElementType() reflect.Type

func (i ApplicationLayerAutomaticResponseArray) ToApplicationLayerAutomaticResponseArrayOutput() ApplicationLayerAutomaticResponseArrayOutput

func (i ApplicationLayerAutomaticResponseArray) ToApplicationLayerAutomaticResponseArrayOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseArrayOutput

type ApplicationLayerAutomaticResponseArrayInput ¶

type ApplicationLayerAutomaticResponseArrayInput interface {
	pulumi.Input

	ToApplicationLayerAutomaticResponseArrayOutput() ApplicationLayerAutomaticResponseArrayOutput
	ToApplicationLayerAutomaticResponseArrayOutputWithContext(context.Context) ApplicationLayerAutomaticResponseArrayOutput
}

ApplicationLayerAutomaticResponseArrayInput is an input type that accepts ApplicationLayerAutomaticResponseArray and ApplicationLayerAutomaticResponseArrayOutput values. You can construct a concrete instance of `ApplicationLayerAutomaticResponseArrayInput` via:

ApplicationLayerAutomaticResponseArray{ ApplicationLayerAutomaticResponseArgs{...} }

type ApplicationLayerAutomaticResponseArrayOutput ¶

type ApplicationLayerAutomaticResponseArrayOutput struct{ *pulumi.OutputState }

func (ApplicationLayerAutomaticResponseArrayOutput) ElementType() reflect.Type

func (o ApplicationLayerAutomaticResponseArrayOutput) Index(i pulumi.IntInput) ApplicationLayerAutomaticResponseOutput

func (o ApplicationLayerAutomaticResponseArrayOutput) ToApplicationLayerAutomaticResponseArrayOutput() ApplicationLayerAutomaticResponseArrayOutput

func (o ApplicationLayerAutomaticResponseArrayOutput) ToApplicationLayerAutomaticResponseArrayOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseArrayOutput

type ApplicationLayerAutomaticResponseInput ¶

type ApplicationLayerAutomaticResponseInput interface {
	pulumi.Input

	ToApplicationLayerAutomaticResponseOutput() ApplicationLayerAutomaticResponseOutput
	ToApplicationLayerAutomaticResponseOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseOutput
}

type ApplicationLayerAutomaticResponseMap ¶

type ApplicationLayerAutomaticResponseMap map[string]ApplicationLayerAutomaticResponseInput

func (ApplicationLayerAutomaticResponseMap) ElementType() reflect.Type

func (i ApplicationLayerAutomaticResponseMap) ToApplicationLayerAutomaticResponseMapOutput() ApplicationLayerAutomaticResponseMapOutput

func (i ApplicationLayerAutomaticResponseMap) ToApplicationLayerAutomaticResponseMapOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseMapOutput

type ApplicationLayerAutomaticResponseMapInput ¶

type ApplicationLayerAutomaticResponseMapInput interface {
	pulumi.Input

	ToApplicationLayerAutomaticResponseMapOutput() ApplicationLayerAutomaticResponseMapOutput
	ToApplicationLayerAutomaticResponseMapOutputWithContext(context.Context) ApplicationLayerAutomaticResponseMapOutput
}

ApplicationLayerAutomaticResponseMapInput is an input type that accepts ApplicationLayerAutomaticResponseMap and ApplicationLayerAutomaticResponseMapOutput values. You can construct a concrete instance of `ApplicationLayerAutomaticResponseMapInput` via:

ApplicationLayerAutomaticResponseMap{ "key": ApplicationLayerAutomaticResponseArgs{...} }

type ApplicationLayerAutomaticResponseMapOutput ¶

type ApplicationLayerAutomaticResponseMapOutput struct{ *pulumi.OutputState }

func (ApplicationLayerAutomaticResponseMapOutput) ElementType() reflect.Type

func (o ApplicationLayerAutomaticResponseMapOutput) MapIndex(k pulumi.StringInput) ApplicationLayerAutomaticResponseOutput

func (o ApplicationLayerAutomaticResponseMapOutput) ToApplicationLayerAutomaticResponseMapOutput() ApplicationLayerAutomaticResponseMapOutput

func (o ApplicationLayerAutomaticResponseMapOutput) ToApplicationLayerAutomaticResponseMapOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseMapOutput

type ApplicationLayerAutomaticResponseOutput ¶

type ApplicationLayerAutomaticResponseOutput struct{ *pulumi.OutputState }

func (o ApplicationLayerAutomaticResponseOutput) Action() pulumi.StringOutput

func (ApplicationLayerAutomaticResponseOutput) ElementType() reflect.Type

func (o ApplicationLayerAutomaticResponseOutput) ResourceArn() pulumi.StringOutput

func (o ApplicationLayerAutomaticResponseOutput) Timeouts() ApplicationLayerAutomaticResponseTimeoutsPtrOutput

func (o ApplicationLayerAutomaticResponseOutput) ToApplicationLayerAutomaticResponseOutput() ApplicationLayerAutomaticResponseOutput

func (o ApplicationLayerAutomaticResponseOutput) ToApplicationLayerAutomaticResponseOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseOutput

type ApplicationLayerAutomaticResponseState ¶

type ApplicationLayerAutomaticResponseState struct {
	// One of `COUNT` or `BLOCK`
	Action pulumi.StringPtrInput
	// ARN of the resource to protect (Cloudfront Distributions and ALBs only at this time).
	ResourceArn pulumi.StringPtrInput
	Timeouts    ApplicationLayerAutomaticResponseTimeoutsPtrInput
}

func (ApplicationLayerAutomaticResponseState) ElementType() reflect.Type

type ApplicationLayerAutomaticResponseTimeouts ¶

type ApplicationLayerAutomaticResponseTimeouts struct {
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Create *string `pulumi:"create"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
	Delete *string `pulumi:"delete"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Update *string `pulumi:"update"`
}

type ApplicationLayerAutomaticResponseTimeoutsArgs ¶

type ApplicationLayerAutomaticResponseTimeoutsArgs struct {
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Create pulumi.StringPtrInput `pulumi:"create"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
	Delete pulumi.StringPtrInput `pulumi:"delete"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Update pulumi.StringPtrInput `pulumi:"update"`
}

func (ApplicationLayerAutomaticResponseTimeoutsArgs) ElementType() reflect.Type

func (i ApplicationLayerAutomaticResponseTimeoutsArgs) ToApplicationLayerAutomaticResponseTimeoutsOutput() ApplicationLayerAutomaticResponseTimeoutsOutput

func (i ApplicationLayerAutomaticResponseTimeoutsArgs) ToApplicationLayerAutomaticResponseTimeoutsOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseTimeoutsOutput

func (i ApplicationLayerAutomaticResponseTimeoutsArgs) ToApplicationLayerAutomaticResponseTimeoutsPtrOutput() ApplicationLayerAutomaticResponseTimeoutsPtrOutput

func (i ApplicationLayerAutomaticResponseTimeoutsArgs) ToApplicationLayerAutomaticResponseTimeoutsPtrOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseTimeoutsPtrOutput

type ApplicationLayerAutomaticResponseTimeoutsInput ¶

type ApplicationLayerAutomaticResponseTimeoutsInput interface {
	pulumi.Input

	ToApplicationLayerAutomaticResponseTimeoutsOutput() ApplicationLayerAutomaticResponseTimeoutsOutput
	ToApplicationLayerAutomaticResponseTimeoutsOutputWithContext(context.Context) ApplicationLayerAutomaticResponseTimeoutsOutput
}

ApplicationLayerAutomaticResponseTimeoutsInput is an input type that accepts ApplicationLayerAutomaticResponseTimeoutsArgs and ApplicationLayerAutomaticResponseTimeoutsOutput values. You can construct a concrete instance of `ApplicationLayerAutomaticResponseTimeoutsInput` via:

ApplicationLayerAutomaticResponseTimeoutsArgs{...}

type ApplicationLayerAutomaticResponseTimeoutsOutput ¶

type ApplicationLayerAutomaticResponseTimeoutsOutput struct{ *pulumi.OutputState }

func (o ApplicationLayerAutomaticResponseTimeoutsOutput) Create() pulumi.StringPtrOutput

func (o ApplicationLayerAutomaticResponseTimeoutsOutput) Delete() pulumi.StringPtrOutput

func (ApplicationLayerAutomaticResponseTimeoutsOutput) ElementType() reflect.Type

func (o ApplicationLayerAutomaticResponseTimeoutsOutput) ToApplicationLayerAutomaticResponseTimeoutsOutput() ApplicationLayerAutomaticResponseTimeoutsOutput

func (o ApplicationLayerAutomaticResponseTimeoutsOutput) ToApplicationLayerAutomaticResponseTimeoutsOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseTimeoutsOutput

func (o ApplicationLayerAutomaticResponseTimeoutsOutput) ToApplicationLayerAutomaticResponseTimeoutsPtrOutput() ApplicationLayerAutomaticResponseTimeoutsPtrOutput

func (o ApplicationLayerAutomaticResponseTimeoutsOutput) ToApplicationLayerAutomaticResponseTimeoutsPtrOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseTimeoutsPtrOutput

func (o ApplicationLayerAutomaticResponseTimeoutsOutput) Update() pulumi.StringPtrOutput

type ApplicationLayerAutomaticResponseTimeoutsPtrInput ¶

type ApplicationLayerAutomaticResponseTimeoutsPtrInput interface {
	pulumi.Input

	ToApplicationLayerAutomaticResponseTimeoutsPtrOutput() ApplicationLayerAutomaticResponseTimeoutsPtrOutput
	ToApplicationLayerAutomaticResponseTimeoutsPtrOutputWithContext(context.Context) ApplicationLayerAutomaticResponseTimeoutsPtrOutput
}

ApplicationLayerAutomaticResponseTimeoutsPtrInput is an input type that accepts ApplicationLayerAutomaticResponseTimeoutsArgs, ApplicationLayerAutomaticResponseTimeoutsPtr and ApplicationLayerAutomaticResponseTimeoutsPtrOutput values. You can construct a concrete instance of `ApplicationLayerAutomaticResponseTimeoutsPtrInput` via:

        ApplicationLayerAutomaticResponseTimeoutsArgs{...}

or:

        nil

func ApplicationLayerAutomaticResponseTimeoutsPtr(v *ApplicationLayerAutomaticResponseTimeoutsArgs) ApplicationLayerAutomaticResponseTimeoutsPtrInput

type ApplicationLayerAutomaticResponseTimeoutsPtrOutput ¶

type ApplicationLayerAutomaticResponseTimeoutsPtrOutput struct{ *pulumi.OutputState }

func (o ApplicationLayerAutomaticResponseTimeoutsPtrOutput) Create() pulumi.StringPtrOutput

func (o ApplicationLayerAutomaticResponseTimeoutsPtrOutput) Delete() pulumi.StringPtrOutput

func (o ApplicationLayerAutomaticResponseTimeoutsPtrOutput) Elem() ApplicationLayerAutomaticResponseTimeoutsOutput

func (ApplicationLayerAutomaticResponseTimeoutsPtrOutput) ElementType() reflect.Type

func (o ApplicationLayerAutomaticResponseTimeoutsPtrOutput) ToApplicationLayerAutomaticResponseTimeoutsPtrOutput() ApplicationLayerAutomaticResponseTimeoutsPtrOutput

func (o ApplicationLayerAutomaticResponseTimeoutsPtrOutput) ToApplicationLayerAutomaticResponseTimeoutsPtrOutputWithContext(ctx context.Context) ApplicationLayerAutomaticResponseTimeoutsPtrOutput

func (o ApplicationLayerAutomaticResponseTimeoutsPtrOutput) Update() pulumi.StringPtrOutput

type DrtAccessLogBucketAssociation ¶

type DrtAccessLogBucketAssociation struct {
	pulumi.CustomResourceState

	// The Amazon S3 bucket that contains the logs that you want to share.
	LogBucket pulumi.StringOutput `pulumi:"logBucket"`
	// The ID of the Role Arn association used for allowing Shield DRT Access.
	RoleArnAssociationId pulumi.StringOutput                            `pulumi:"roleArnAssociationId"`
	Timeouts             DrtAccessLogBucketAssociationTimeoutsPtrOutput `pulumi:"timeouts"`
}

Resource for managing an AWS Shield DRT Access Log Bucket Association. Up to 10 log buckets can be associated for DRT Access sharing with the Shield Response Team (SRT).

## Example Usage

### Basic Usage

```go package main

import (

"fmt"

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		test, err := shield.NewDrtAccessRoleArnAssociation(ctx, "test", &shield.DrtAccessRoleArnAssociationArgs{
			RoleArn: pulumi.Sprintf("arn:aws:iam:%v:%v:%v", current.Region, currentAwsCallerIdentity.AccountId, shieldDrtAccessRoleName),
		})
		if err != nil {
			return err
		}
		_, err = shield.NewDrtAccessLogBucketAssociation(ctx, "test", &shield.DrtAccessLogBucketAssociationArgs{
			LogBucket:            pulumi.Any(shieldDrtAccessLogBucket),
			RoleArnAssociationId: test.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import Shield DRT access log bucket associations using the `log_bucket`. For example:

```sh $ pulumi import aws:shield/drtAccessLogBucketAssociation:DrtAccessLogBucketAssociation example example-bucket ```

func GetDrtAccessLogBucketAssociation(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DrtAccessLogBucketAssociationState, opts ...pulumi.ResourceOption) (*DrtAccessLogBucketAssociation, error)

func NewDrtAccessLogBucketAssociation(ctx *pulumi.Context,
	name string, args *DrtAccessLogBucketAssociationArgs, opts ...pulumi.ResourceOption) (*DrtAccessLogBucketAssociation, error)

func (*DrtAccessLogBucketAssociation) ElementType() reflect.Type

func (i *DrtAccessLogBucketAssociation) ToDrtAccessLogBucketAssociationOutput() DrtAccessLogBucketAssociationOutput

func (i *DrtAccessLogBucketAssociation) ToDrtAccessLogBucketAssociationOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationOutput

type DrtAccessLogBucketAssociationArgs ¶

type DrtAccessLogBucketAssociationArgs struct {
	// The Amazon S3 bucket that contains the logs that you want to share.
	LogBucket pulumi.StringInput
	// The ID of the Role Arn association used for allowing Shield DRT Access.
	RoleArnAssociationId pulumi.StringInput
	Timeouts             DrtAccessLogBucketAssociationTimeoutsPtrInput
}

The set of arguments for constructing a DrtAccessLogBucketAssociation resource.

func (DrtAccessLogBucketAssociationArgs) ElementType() reflect.Type

type DrtAccessLogBucketAssociationArray ¶

type DrtAccessLogBucketAssociationArray []DrtAccessLogBucketAssociationInput

func (DrtAccessLogBucketAssociationArray) ElementType() reflect.Type

func (i DrtAccessLogBucketAssociationArray) ToDrtAccessLogBucketAssociationArrayOutput() DrtAccessLogBucketAssociationArrayOutput

func (i DrtAccessLogBucketAssociationArray) ToDrtAccessLogBucketAssociationArrayOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationArrayOutput

type DrtAccessLogBucketAssociationArrayInput ¶

type DrtAccessLogBucketAssociationArrayInput interface {
	pulumi.Input

	ToDrtAccessLogBucketAssociationArrayOutput() DrtAccessLogBucketAssociationArrayOutput
	ToDrtAccessLogBucketAssociationArrayOutputWithContext(context.Context) DrtAccessLogBucketAssociationArrayOutput
}

DrtAccessLogBucketAssociationArrayInput is an input type that accepts DrtAccessLogBucketAssociationArray and DrtAccessLogBucketAssociationArrayOutput values. You can construct a concrete instance of `DrtAccessLogBucketAssociationArrayInput` via:

DrtAccessLogBucketAssociationArray{ DrtAccessLogBucketAssociationArgs{...} }

type DrtAccessLogBucketAssociationArrayOutput ¶

type DrtAccessLogBucketAssociationArrayOutput struct{ *pulumi.OutputState }

func (DrtAccessLogBucketAssociationArrayOutput) ElementType() reflect.Type

func (o DrtAccessLogBucketAssociationArrayOutput) Index(i pulumi.IntInput) DrtAccessLogBucketAssociationOutput

func (o DrtAccessLogBucketAssociationArrayOutput) ToDrtAccessLogBucketAssociationArrayOutput() DrtAccessLogBucketAssociationArrayOutput

func (o DrtAccessLogBucketAssociationArrayOutput) ToDrtAccessLogBucketAssociationArrayOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationArrayOutput

type DrtAccessLogBucketAssociationInput ¶

type DrtAccessLogBucketAssociationInput interface {
	pulumi.Input

	ToDrtAccessLogBucketAssociationOutput() DrtAccessLogBucketAssociationOutput
	ToDrtAccessLogBucketAssociationOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationOutput
}

type DrtAccessLogBucketAssociationMap ¶

type DrtAccessLogBucketAssociationMap map[string]DrtAccessLogBucketAssociationInput

func (DrtAccessLogBucketAssociationMap) ElementType() reflect.Type

func (i DrtAccessLogBucketAssociationMap) ToDrtAccessLogBucketAssociationMapOutput() DrtAccessLogBucketAssociationMapOutput

func (i DrtAccessLogBucketAssociationMap) ToDrtAccessLogBucketAssociationMapOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationMapOutput

type DrtAccessLogBucketAssociationMapInput ¶

type DrtAccessLogBucketAssociationMapInput interface {
	pulumi.Input

	ToDrtAccessLogBucketAssociationMapOutput() DrtAccessLogBucketAssociationMapOutput
	ToDrtAccessLogBucketAssociationMapOutputWithContext(context.Context) DrtAccessLogBucketAssociationMapOutput
}

DrtAccessLogBucketAssociationMapInput is an input type that accepts DrtAccessLogBucketAssociationMap and DrtAccessLogBucketAssociationMapOutput values. You can construct a concrete instance of `DrtAccessLogBucketAssociationMapInput` via:

DrtAccessLogBucketAssociationMap{ "key": DrtAccessLogBucketAssociationArgs{...} }

type DrtAccessLogBucketAssociationMapOutput ¶

type DrtAccessLogBucketAssociationMapOutput struct{ *pulumi.OutputState }

func (DrtAccessLogBucketAssociationMapOutput) ElementType() reflect.Type

func (o DrtAccessLogBucketAssociationMapOutput) MapIndex(k pulumi.StringInput) DrtAccessLogBucketAssociationOutput

func (o DrtAccessLogBucketAssociationMapOutput) ToDrtAccessLogBucketAssociationMapOutput() DrtAccessLogBucketAssociationMapOutput

func (o DrtAccessLogBucketAssociationMapOutput) ToDrtAccessLogBucketAssociationMapOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationMapOutput

type DrtAccessLogBucketAssociationOutput ¶

type DrtAccessLogBucketAssociationOutput struct{ *pulumi.OutputState }

func (DrtAccessLogBucketAssociationOutput) ElementType() reflect.Type

func (o DrtAccessLogBucketAssociationOutput) LogBucket() pulumi.StringOutput

func (o DrtAccessLogBucketAssociationOutput) RoleArnAssociationId() pulumi.StringOutput

func (o DrtAccessLogBucketAssociationOutput) Timeouts() DrtAccessLogBucketAssociationTimeoutsPtrOutput

func (o DrtAccessLogBucketAssociationOutput) ToDrtAccessLogBucketAssociationOutput() DrtAccessLogBucketAssociationOutput

func (o DrtAccessLogBucketAssociationOutput) ToDrtAccessLogBucketAssociationOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationOutput

type DrtAccessLogBucketAssociationState ¶

type DrtAccessLogBucketAssociationState struct {
	// The Amazon S3 bucket that contains the logs that you want to share.
	LogBucket pulumi.StringPtrInput
	// The ID of the Role Arn association used for allowing Shield DRT Access.
	RoleArnAssociationId pulumi.StringPtrInput
	Timeouts             DrtAccessLogBucketAssociationTimeoutsPtrInput
}

func (DrtAccessLogBucketAssociationState) ElementType() reflect.Type

type DrtAccessLogBucketAssociationTimeouts ¶

type DrtAccessLogBucketAssociationTimeouts struct {
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Create *string `pulumi:"create"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
	Delete *string `pulumi:"delete"`
}

type DrtAccessLogBucketAssociationTimeoutsArgs ¶

type DrtAccessLogBucketAssociationTimeoutsArgs struct {
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Create pulumi.StringPtrInput `pulumi:"create"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
	Delete pulumi.StringPtrInput `pulumi:"delete"`
}

func (DrtAccessLogBucketAssociationTimeoutsArgs) ElementType() reflect.Type

func (i DrtAccessLogBucketAssociationTimeoutsArgs) ToDrtAccessLogBucketAssociationTimeoutsOutput() DrtAccessLogBucketAssociationTimeoutsOutput

func (i DrtAccessLogBucketAssociationTimeoutsArgs) ToDrtAccessLogBucketAssociationTimeoutsOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationTimeoutsOutput

func (i DrtAccessLogBucketAssociationTimeoutsArgs) ToDrtAccessLogBucketAssociationTimeoutsPtrOutput() DrtAccessLogBucketAssociationTimeoutsPtrOutput

func (i DrtAccessLogBucketAssociationTimeoutsArgs) ToDrtAccessLogBucketAssociationTimeoutsPtrOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationTimeoutsPtrOutput

type DrtAccessLogBucketAssociationTimeoutsInput ¶

type DrtAccessLogBucketAssociationTimeoutsInput interface {
	pulumi.Input

	ToDrtAccessLogBucketAssociationTimeoutsOutput() DrtAccessLogBucketAssociationTimeoutsOutput
	ToDrtAccessLogBucketAssociationTimeoutsOutputWithContext(context.Context) DrtAccessLogBucketAssociationTimeoutsOutput
}

DrtAccessLogBucketAssociationTimeoutsInput is an input type that accepts DrtAccessLogBucketAssociationTimeoutsArgs and DrtAccessLogBucketAssociationTimeoutsOutput values. You can construct a concrete instance of `DrtAccessLogBucketAssociationTimeoutsInput` via:

DrtAccessLogBucketAssociationTimeoutsArgs{...}

type DrtAccessLogBucketAssociationTimeoutsOutput ¶

type DrtAccessLogBucketAssociationTimeoutsOutput struct{ *pulumi.OutputState }

func (o DrtAccessLogBucketAssociationTimeoutsOutput) Create() pulumi.StringPtrOutput

func (o DrtAccessLogBucketAssociationTimeoutsOutput) Delete() pulumi.StringPtrOutput

func (DrtAccessLogBucketAssociationTimeoutsOutput) ElementType() reflect.Type

func (o DrtAccessLogBucketAssociationTimeoutsOutput) ToDrtAccessLogBucketAssociationTimeoutsOutput() DrtAccessLogBucketAssociationTimeoutsOutput

func (o DrtAccessLogBucketAssociationTimeoutsOutput) ToDrtAccessLogBucketAssociationTimeoutsOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationTimeoutsOutput

func (o DrtAccessLogBucketAssociationTimeoutsOutput) ToDrtAccessLogBucketAssociationTimeoutsPtrOutput() DrtAccessLogBucketAssociationTimeoutsPtrOutput

func (o DrtAccessLogBucketAssociationTimeoutsOutput) ToDrtAccessLogBucketAssociationTimeoutsPtrOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationTimeoutsPtrOutput

type DrtAccessLogBucketAssociationTimeoutsPtrInput ¶

type DrtAccessLogBucketAssociationTimeoutsPtrInput interface {
	pulumi.Input

	ToDrtAccessLogBucketAssociationTimeoutsPtrOutput() DrtAccessLogBucketAssociationTimeoutsPtrOutput
	ToDrtAccessLogBucketAssociationTimeoutsPtrOutputWithContext(context.Context) DrtAccessLogBucketAssociationTimeoutsPtrOutput
}

DrtAccessLogBucketAssociationTimeoutsPtrInput is an input type that accepts DrtAccessLogBucketAssociationTimeoutsArgs, DrtAccessLogBucketAssociationTimeoutsPtr and DrtAccessLogBucketAssociationTimeoutsPtrOutput values. You can construct a concrete instance of `DrtAccessLogBucketAssociationTimeoutsPtrInput` via:

        DrtAccessLogBucketAssociationTimeoutsArgs{...}

or:

        nil

func DrtAccessLogBucketAssociationTimeoutsPtr(v *DrtAccessLogBucketAssociationTimeoutsArgs) DrtAccessLogBucketAssociationTimeoutsPtrInput

type DrtAccessLogBucketAssociationTimeoutsPtrOutput ¶

type DrtAccessLogBucketAssociationTimeoutsPtrOutput struct{ *pulumi.OutputState }

func (o DrtAccessLogBucketAssociationTimeoutsPtrOutput) Create() pulumi.StringPtrOutput

func (o DrtAccessLogBucketAssociationTimeoutsPtrOutput) Delete() pulumi.StringPtrOutput

func (o DrtAccessLogBucketAssociationTimeoutsPtrOutput) Elem() DrtAccessLogBucketAssociationTimeoutsOutput

func (DrtAccessLogBucketAssociationTimeoutsPtrOutput) ElementType() reflect.Type

func (o DrtAccessLogBucketAssociationTimeoutsPtrOutput) ToDrtAccessLogBucketAssociationTimeoutsPtrOutput() DrtAccessLogBucketAssociationTimeoutsPtrOutput

func (o DrtAccessLogBucketAssociationTimeoutsPtrOutput) ToDrtAccessLogBucketAssociationTimeoutsPtrOutputWithContext(ctx context.Context) DrtAccessLogBucketAssociationTimeoutsPtrOutput

type DrtAccessRoleArnAssociation ¶

type DrtAccessRoleArnAssociation struct {
	pulumi.CustomResourceState

	// The Amazon Resource Name (ARN) of the role the SRT will use to access your AWS account. Prior to making the AssociateDRTRole request, you must attach the `AWSShieldDRTAccessPolicy` managed policy to this role.
	RoleArn  pulumi.StringOutput                          `pulumi:"roleArn"`
	Timeouts DrtAccessRoleArnAssociationTimeoutsPtrOutput `pulumi:"timeouts"`
}

Authorizes the Shield Response Team (SRT) using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks. For more information see [Configure AWS SRT Support](https://docs.aws.amazon.com/waf/latest/developerguide/authorize-srt.html)

## Example Usage

### Basic Usage

```go package main

import (

"encoding/json"

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/iam"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"Version": "2012-10-17",
			"Statement": []map[string]interface{}{
				map[string]interface{}{
					"Sid":    "",
					"Effect": "Allow",
					"Principal": map[string]interface{}{
						"Service": "drt.shield.amazonaws.com",
					},
					"Action": "sts:AssumeRole",
				},
			},
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		exampleRole, err := iam.NewRole(ctx, "example", &iam.RoleArgs{
			Name:             pulumi.String("example-role"),
			AssumeRolePolicy: pulumi.String(json0),
		})
		if err != nil {
			return err
		}
		_, err = shield.NewDrtAccessRoleArnAssociation(ctx, "example", &shield.DrtAccessRoleArnAssociationArgs{
			RoleArn: exampleRole.Arn,
		})
		if err != nil {
			return err
		}
		_, err = iam.NewRolePolicyAttachment(ctx, "example", &iam.RolePolicyAttachmentArgs{
			Role:      exampleRole.Name,
			PolicyArn: pulumi.String("arn:aws:iam::aws:policy/service-role/AWSShieldDRTAccessPolicy"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import Shield DRT access role ARN association using the AWS account ID. For example:

```sh $ pulumi import aws:shield/drtAccessRoleArnAssociation:DrtAccessRoleArnAssociation example 123456789012 ```

func GetDrtAccessRoleArnAssociation(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DrtAccessRoleArnAssociationState, opts ...pulumi.ResourceOption) (*DrtAccessRoleArnAssociation, error)

func NewDrtAccessRoleArnAssociation(ctx *pulumi.Context,
	name string, args *DrtAccessRoleArnAssociationArgs, opts ...pulumi.ResourceOption) (*DrtAccessRoleArnAssociation, error)

func (*DrtAccessRoleArnAssociation) ElementType() reflect.Type

func (i *DrtAccessRoleArnAssociation) ToDrtAccessRoleArnAssociationOutput() DrtAccessRoleArnAssociationOutput

func (i *DrtAccessRoleArnAssociation) ToDrtAccessRoleArnAssociationOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationOutput

type DrtAccessRoleArnAssociationArgs ¶

type DrtAccessRoleArnAssociationArgs struct {
	// The Amazon Resource Name (ARN) of the role the SRT will use to access your AWS account. Prior to making the AssociateDRTRole request, you must attach the `AWSShieldDRTAccessPolicy` managed policy to this role.
	RoleArn  pulumi.StringInput
	Timeouts DrtAccessRoleArnAssociationTimeoutsPtrInput
}

The set of arguments for constructing a DrtAccessRoleArnAssociation resource.

func (DrtAccessRoleArnAssociationArgs) ElementType() reflect.Type

type DrtAccessRoleArnAssociationArray ¶

type DrtAccessRoleArnAssociationArray []DrtAccessRoleArnAssociationInput

func (DrtAccessRoleArnAssociationArray) ElementType() reflect.Type

func (i DrtAccessRoleArnAssociationArray) ToDrtAccessRoleArnAssociationArrayOutput() DrtAccessRoleArnAssociationArrayOutput

func (i DrtAccessRoleArnAssociationArray) ToDrtAccessRoleArnAssociationArrayOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationArrayOutput

type DrtAccessRoleArnAssociationArrayInput ¶

type DrtAccessRoleArnAssociationArrayInput interface {
	pulumi.Input

	ToDrtAccessRoleArnAssociationArrayOutput() DrtAccessRoleArnAssociationArrayOutput
	ToDrtAccessRoleArnAssociationArrayOutputWithContext(context.Context) DrtAccessRoleArnAssociationArrayOutput
}

DrtAccessRoleArnAssociationArrayInput is an input type that accepts DrtAccessRoleArnAssociationArray and DrtAccessRoleArnAssociationArrayOutput values. You can construct a concrete instance of `DrtAccessRoleArnAssociationArrayInput` via:

DrtAccessRoleArnAssociationArray{ DrtAccessRoleArnAssociationArgs{...} }

type DrtAccessRoleArnAssociationArrayOutput ¶

type DrtAccessRoleArnAssociationArrayOutput struct{ *pulumi.OutputState }

func (DrtAccessRoleArnAssociationArrayOutput) ElementType() reflect.Type

func (o DrtAccessRoleArnAssociationArrayOutput) Index(i pulumi.IntInput) DrtAccessRoleArnAssociationOutput

func (o DrtAccessRoleArnAssociationArrayOutput) ToDrtAccessRoleArnAssociationArrayOutput() DrtAccessRoleArnAssociationArrayOutput

func (o DrtAccessRoleArnAssociationArrayOutput) ToDrtAccessRoleArnAssociationArrayOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationArrayOutput

type DrtAccessRoleArnAssociationInput ¶

type DrtAccessRoleArnAssociationInput interface {
	pulumi.Input

	ToDrtAccessRoleArnAssociationOutput() DrtAccessRoleArnAssociationOutput
	ToDrtAccessRoleArnAssociationOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationOutput
}

type DrtAccessRoleArnAssociationMap ¶

type DrtAccessRoleArnAssociationMap map[string]DrtAccessRoleArnAssociationInput

func (DrtAccessRoleArnAssociationMap) ElementType() reflect.Type

func (i DrtAccessRoleArnAssociationMap) ToDrtAccessRoleArnAssociationMapOutput() DrtAccessRoleArnAssociationMapOutput

func (i DrtAccessRoleArnAssociationMap) ToDrtAccessRoleArnAssociationMapOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationMapOutput

type DrtAccessRoleArnAssociationMapInput ¶

type DrtAccessRoleArnAssociationMapInput interface {
	pulumi.Input

	ToDrtAccessRoleArnAssociationMapOutput() DrtAccessRoleArnAssociationMapOutput
	ToDrtAccessRoleArnAssociationMapOutputWithContext(context.Context) DrtAccessRoleArnAssociationMapOutput
}

DrtAccessRoleArnAssociationMapInput is an input type that accepts DrtAccessRoleArnAssociationMap and DrtAccessRoleArnAssociationMapOutput values. You can construct a concrete instance of `DrtAccessRoleArnAssociationMapInput` via:

DrtAccessRoleArnAssociationMap{ "key": DrtAccessRoleArnAssociationArgs{...} }

type DrtAccessRoleArnAssociationMapOutput ¶

type DrtAccessRoleArnAssociationMapOutput struct{ *pulumi.OutputState }

func (DrtAccessRoleArnAssociationMapOutput) ElementType() reflect.Type

func (o DrtAccessRoleArnAssociationMapOutput) MapIndex(k pulumi.StringInput) DrtAccessRoleArnAssociationOutput

func (o DrtAccessRoleArnAssociationMapOutput) ToDrtAccessRoleArnAssociationMapOutput() DrtAccessRoleArnAssociationMapOutput

func (o DrtAccessRoleArnAssociationMapOutput) ToDrtAccessRoleArnAssociationMapOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationMapOutput

type DrtAccessRoleArnAssociationOutput ¶

type DrtAccessRoleArnAssociationOutput struct{ *pulumi.OutputState }

func (DrtAccessRoleArnAssociationOutput) ElementType() reflect.Type

func (o DrtAccessRoleArnAssociationOutput) RoleArn() pulumi.StringOutput

func (o DrtAccessRoleArnAssociationOutput) Timeouts() DrtAccessRoleArnAssociationTimeoutsPtrOutput

func (o DrtAccessRoleArnAssociationOutput) ToDrtAccessRoleArnAssociationOutput() DrtAccessRoleArnAssociationOutput

func (o DrtAccessRoleArnAssociationOutput) ToDrtAccessRoleArnAssociationOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationOutput

type DrtAccessRoleArnAssociationState ¶

type DrtAccessRoleArnAssociationState struct {
	// The Amazon Resource Name (ARN) of the role the SRT will use to access your AWS account. Prior to making the AssociateDRTRole request, you must attach the `AWSShieldDRTAccessPolicy` managed policy to this role.
	RoleArn  pulumi.StringPtrInput
	Timeouts DrtAccessRoleArnAssociationTimeoutsPtrInput
}

func (DrtAccessRoleArnAssociationState) ElementType() reflect.Type

type DrtAccessRoleArnAssociationTimeouts ¶

type DrtAccessRoleArnAssociationTimeouts struct {
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Create *string `pulumi:"create"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
	Delete *string `pulumi:"delete"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Update *string `pulumi:"update"`
}

type DrtAccessRoleArnAssociationTimeoutsArgs ¶

type DrtAccessRoleArnAssociationTimeoutsArgs struct {
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Create pulumi.StringPtrInput `pulumi:"create"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
	Delete pulumi.StringPtrInput `pulumi:"delete"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Update pulumi.StringPtrInput `pulumi:"update"`
}

func (DrtAccessRoleArnAssociationTimeoutsArgs) ElementType() reflect.Type

func (i DrtAccessRoleArnAssociationTimeoutsArgs) ToDrtAccessRoleArnAssociationTimeoutsOutput() DrtAccessRoleArnAssociationTimeoutsOutput

func (i DrtAccessRoleArnAssociationTimeoutsArgs) ToDrtAccessRoleArnAssociationTimeoutsOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationTimeoutsOutput

func (i DrtAccessRoleArnAssociationTimeoutsArgs) ToDrtAccessRoleArnAssociationTimeoutsPtrOutput() DrtAccessRoleArnAssociationTimeoutsPtrOutput

func (i DrtAccessRoleArnAssociationTimeoutsArgs) ToDrtAccessRoleArnAssociationTimeoutsPtrOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationTimeoutsPtrOutput

type DrtAccessRoleArnAssociationTimeoutsInput ¶

type DrtAccessRoleArnAssociationTimeoutsInput interface {
	pulumi.Input

	ToDrtAccessRoleArnAssociationTimeoutsOutput() DrtAccessRoleArnAssociationTimeoutsOutput
	ToDrtAccessRoleArnAssociationTimeoutsOutputWithContext(context.Context) DrtAccessRoleArnAssociationTimeoutsOutput
}

DrtAccessRoleArnAssociationTimeoutsInput is an input type that accepts DrtAccessRoleArnAssociationTimeoutsArgs and DrtAccessRoleArnAssociationTimeoutsOutput values. You can construct a concrete instance of `DrtAccessRoleArnAssociationTimeoutsInput` via:

DrtAccessRoleArnAssociationTimeoutsArgs{...}

type DrtAccessRoleArnAssociationTimeoutsOutput ¶

type DrtAccessRoleArnAssociationTimeoutsOutput struct{ *pulumi.OutputState }

func (o DrtAccessRoleArnAssociationTimeoutsOutput) Create() pulumi.StringPtrOutput

func (o DrtAccessRoleArnAssociationTimeoutsOutput) Delete() pulumi.StringPtrOutput

func (DrtAccessRoleArnAssociationTimeoutsOutput) ElementType() reflect.Type

func (o DrtAccessRoleArnAssociationTimeoutsOutput) ToDrtAccessRoleArnAssociationTimeoutsOutput() DrtAccessRoleArnAssociationTimeoutsOutput

func (o DrtAccessRoleArnAssociationTimeoutsOutput) ToDrtAccessRoleArnAssociationTimeoutsOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationTimeoutsOutput

func (o DrtAccessRoleArnAssociationTimeoutsOutput) ToDrtAccessRoleArnAssociationTimeoutsPtrOutput() DrtAccessRoleArnAssociationTimeoutsPtrOutput

func (o DrtAccessRoleArnAssociationTimeoutsOutput) ToDrtAccessRoleArnAssociationTimeoutsPtrOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationTimeoutsPtrOutput

func (o DrtAccessRoleArnAssociationTimeoutsOutput) Update() pulumi.StringPtrOutput

type DrtAccessRoleArnAssociationTimeoutsPtrInput ¶

type DrtAccessRoleArnAssociationTimeoutsPtrInput interface {
	pulumi.Input

	ToDrtAccessRoleArnAssociationTimeoutsPtrOutput() DrtAccessRoleArnAssociationTimeoutsPtrOutput
	ToDrtAccessRoleArnAssociationTimeoutsPtrOutputWithContext(context.Context) DrtAccessRoleArnAssociationTimeoutsPtrOutput
}

DrtAccessRoleArnAssociationTimeoutsPtrInput is an input type that accepts DrtAccessRoleArnAssociationTimeoutsArgs, DrtAccessRoleArnAssociationTimeoutsPtr and DrtAccessRoleArnAssociationTimeoutsPtrOutput values. You can construct a concrete instance of `DrtAccessRoleArnAssociationTimeoutsPtrInput` via:

        DrtAccessRoleArnAssociationTimeoutsArgs{...}

or:

        nil

func DrtAccessRoleArnAssociationTimeoutsPtr(v *DrtAccessRoleArnAssociationTimeoutsArgs) DrtAccessRoleArnAssociationTimeoutsPtrInput

type DrtAccessRoleArnAssociationTimeoutsPtrOutput ¶

type DrtAccessRoleArnAssociationTimeoutsPtrOutput struct{ *pulumi.OutputState }

func (o DrtAccessRoleArnAssociationTimeoutsPtrOutput) Create() pulumi.StringPtrOutput

func (o DrtAccessRoleArnAssociationTimeoutsPtrOutput) Delete() pulumi.StringPtrOutput

func (o DrtAccessRoleArnAssociationTimeoutsPtrOutput) Elem() DrtAccessRoleArnAssociationTimeoutsOutput

func (DrtAccessRoleArnAssociationTimeoutsPtrOutput) ElementType() reflect.Type

func (o DrtAccessRoleArnAssociationTimeoutsPtrOutput) ToDrtAccessRoleArnAssociationTimeoutsPtrOutput() DrtAccessRoleArnAssociationTimeoutsPtrOutput

func (o DrtAccessRoleArnAssociationTimeoutsPtrOutput) ToDrtAccessRoleArnAssociationTimeoutsPtrOutputWithContext(ctx context.Context) DrtAccessRoleArnAssociationTimeoutsPtrOutput

func (o DrtAccessRoleArnAssociationTimeoutsPtrOutput) Update() pulumi.StringPtrOutput

type LookupProtectionArgs ¶

type LookupProtectionArgs struct {
	// Unique identifier for the protection.
	ProtectionId *string `pulumi:"protectionId"`
	// ARN (Amazon Resource Name) of the resource being protected.
	//
	// > Exactly one of `protectionId` or `resourceArn` is required.
	ResourceArn *string `pulumi:"resourceArn"`
}

A collection of arguments for invoking getProtection.

type LookupProtectionOutputArgs ¶

type LookupProtectionOutputArgs struct {
	// Unique identifier for the protection.
	ProtectionId pulumi.StringPtrInput `pulumi:"protectionId"`
	// ARN (Amazon Resource Name) of the resource being protected.
	//
	// > Exactly one of `protectionId` or `resourceArn` is required.
	ResourceArn pulumi.StringPtrInput `pulumi:"resourceArn"`
}

A collection of arguments for invoking getProtection.

func (LookupProtectionOutputArgs) ElementType() reflect.Type

type LookupProtectionResult ¶

type LookupProtectionResult struct {
	Id string `pulumi:"id"`
	// Name of the protection.
	Name string `pulumi:"name"`
	// ARN of the protection.
	ProtectionArn string `pulumi:"protectionArn"`
	ProtectionId  string `pulumi:"protectionId"`
	ResourceArn   string `pulumi:"resourceArn"`
}

A collection of values returned by getProtection.

func LookupProtection(ctx *pulumi.Context, args *LookupProtectionArgs, opts ...pulumi.InvokeOption) (*LookupProtectionResult, error)

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := shield.LookupProtection(ctx, &shield.LookupProtectionArgs{
			ProtectionId: pulumi.StringRef("abc123"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := shield.LookupProtection(ctx, &shield.LookupProtectionArgs{
			ResourceArn: pulumi.StringRef("arn:aws:globalaccelerator::123456789012:accelerator/1234abcd-abcd-1234-abcd-1234abcdefgh"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

type LookupProtectionResultOutput ¶

type LookupProtectionResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getProtection.

func LookupProtectionOutput(ctx *pulumi.Context, args LookupProtectionOutputArgs, opts ...pulumi.InvokeOption) LookupProtectionResultOutput

func (LookupProtectionResultOutput) ElementType() reflect.Type

func (o LookupProtectionResultOutput) Id() pulumi.StringOutput

func (o LookupProtectionResultOutput) Name() pulumi.StringOutput

func (o LookupProtectionResultOutput) ProtectionArn() pulumi.StringOutput

func (o LookupProtectionResultOutput) ProtectionId() pulumi.StringOutput

func (o LookupProtectionResultOutput) ResourceArn() pulumi.StringOutput

func (o LookupProtectionResultOutput) ToLookupProtectionResultOutput() LookupProtectionResultOutput

func (o LookupProtectionResultOutput) ToLookupProtectionResultOutputWithContext(ctx context.Context) LookupProtectionResultOutput

type ProactiveEngagement ¶

type ProactiveEngagement struct {
	pulumi.CustomResourceState

	// One or more emergency contacts. You must provide at least one phone number in the emergency contact list. See `emergencyContacts`.
	EmergencyContacts ProactiveEngagementEmergencyContactArrayOutput `pulumi:"emergencyContacts"`
	// Boolean value indicating if Proactive Engagement should be enabled or not.
	Enabled pulumi.BoolOutput `pulumi:"enabled"`
}

Resource for managing a AWS Shield Proactive Engagement. Proactive engagement authorizes the Shield Response Team (SRT) to use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.

## Example Usage

### Basic Usage

```go package main

import (

"encoding/json"

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/iam"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"Version": "2012-10-17",
			"Statement": []map[string]interface{}{
				map[string]interface{}{
					"Sid":    "",
					"Effect": "Allow",
					"Principal": map[string]interface{}{
						"Service": "drt.shield.amazonaws.com",
					},
					"Action": "sts:AssumeRole",
				},
			},
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		exampleRole, err := iam.NewRole(ctx, "example", &iam.RoleArgs{
			Name:             pulumi.String("example-role"),
			AssumeRolePolicy: pulumi.String(json0),
		})
		if err != nil {
			return err
		}
		exampleDrtAccessRoleArnAssociation, err := shield.NewDrtAccessRoleArnAssociation(ctx, "example", &shield.DrtAccessRoleArnAssociationArgs{
			RoleArn: exampleRole.Arn,
		})
		if err != nil {
			return err
		}
		_, err = shield.NewProactiveEngagement(ctx, "example", &shield.ProactiveEngagementArgs{
			Enabled: pulumi.Bool(true),
			EmergencyContacts: shield.ProactiveEngagementEmergencyContactArray{
				&shield.ProactiveEngagementEmergencyContactArgs{
					ContactNotes: pulumi.String("Notes"),
					EmailAddress: pulumi.String("contact1@example.com"),
					PhoneNumber:  pulumi.String("+12358132134"),
				},
				&shield.ProactiveEngagementEmergencyContactArgs{
					ContactNotes: pulumi.String("Notes 2"),
					EmailAddress: pulumi.String("contact2@example.com"),
					PhoneNumber:  pulumi.String("+12358132134"),
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleDrtAccessRoleArnAssociation,
		}))
		if err != nil {
			return err
		}
		_, err = iam.NewRolePolicyAttachment(ctx, "example", &iam.RolePolicyAttachmentArgs{
			Role:      exampleRole.Name,
			PolicyArn: pulumi.String("arn:aws:iam::aws:policy/service-role/AWSShieldDRTAccessPolicy"),
		})
		if err != nil {
			return err
		}
		_, err = shield.NewProtectionGroup(ctx, "example", &shield.ProtectionGroupArgs{
			ProtectionGroupId: pulumi.String("example"),
			Aggregation:       pulumi.String("MAX"),
			Pattern:           pulumi.String("ALL"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import Shield proactive engagement using the AWS account ID. For example:

```sh $ pulumi import aws:shield/proactiveEngagement:ProactiveEngagement example 123456789012 ```

func GetProactiveEngagement(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ProactiveEngagementState, opts ...pulumi.ResourceOption) (*ProactiveEngagement, error)

func NewProactiveEngagement(ctx *pulumi.Context,
	name string, args *ProactiveEngagementArgs, opts ...pulumi.ResourceOption) (*ProactiveEngagement, error)

func (*ProactiveEngagement) ElementType() reflect.Type

func (i *ProactiveEngagement) ToProactiveEngagementOutput() ProactiveEngagementOutput

func (i *ProactiveEngagement) ToProactiveEngagementOutputWithContext(ctx context.Context) ProactiveEngagementOutput

type ProactiveEngagementArgs ¶

type ProactiveEngagementArgs struct {
	// One or more emergency contacts. You must provide at least one phone number in the emergency contact list. See `emergencyContacts`.
	EmergencyContacts ProactiveEngagementEmergencyContactArrayInput
	// Boolean value indicating if Proactive Engagement should be enabled or not.
	Enabled pulumi.BoolInput
}

The set of arguments for constructing a ProactiveEngagement resource.

func (ProactiveEngagementArgs) ElementType() reflect.Type

type ProactiveEngagementArray ¶

type ProactiveEngagementArray []ProactiveEngagementInput

func (ProactiveEngagementArray) ElementType() reflect.Type

func (i ProactiveEngagementArray) ToProactiveEngagementArrayOutput() ProactiveEngagementArrayOutput

func (i ProactiveEngagementArray) ToProactiveEngagementArrayOutputWithContext(ctx context.Context) ProactiveEngagementArrayOutput

type ProactiveEngagementArrayInput ¶

type ProactiveEngagementArrayInput interface {
	pulumi.Input

	ToProactiveEngagementArrayOutput() ProactiveEngagementArrayOutput
	ToProactiveEngagementArrayOutputWithContext(context.Context) ProactiveEngagementArrayOutput
}

ProactiveEngagementArrayInput is an input type that accepts ProactiveEngagementArray and ProactiveEngagementArrayOutput values. You can construct a concrete instance of `ProactiveEngagementArrayInput` via:

ProactiveEngagementArray{ ProactiveEngagementArgs{...} }

type ProactiveEngagementArrayOutput ¶

type ProactiveEngagementArrayOutput struct{ *pulumi.OutputState }

func (ProactiveEngagementArrayOutput) ElementType() reflect.Type

func (o ProactiveEngagementArrayOutput) Index(i pulumi.IntInput) ProactiveEngagementOutput

func (o ProactiveEngagementArrayOutput) ToProactiveEngagementArrayOutput() ProactiveEngagementArrayOutput

func (o ProactiveEngagementArrayOutput) ToProactiveEngagementArrayOutputWithContext(ctx context.Context) ProactiveEngagementArrayOutput

type ProactiveEngagementEmergencyContact ¶

type ProactiveEngagementEmergencyContact struct {
	// Additional notes regarding the contact.
	ContactNotes *string `pulumi:"contactNotes"`
	// A valid email address that will be used for this contact.
	EmailAddress string `pulumi:"emailAddress"`
	// A phone number, starting with `+` and up to 15 digits that will be used for this contact.
	PhoneNumber *string `pulumi:"phoneNumber"`
}

type ProactiveEngagementEmergencyContactArgs ¶

type ProactiveEngagementEmergencyContactArgs struct {
	// Additional notes regarding the contact.
	ContactNotes pulumi.StringPtrInput `pulumi:"contactNotes"`
	// A valid email address that will be used for this contact.
	EmailAddress pulumi.StringInput `pulumi:"emailAddress"`
	// A phone number, starting with `+` and up to 15 digits that will be used for this contact.
	PhoneNumber pulumi.StringPtrInput `pulumi:"phoneNumber"`
}

func (ProactiveEngagementEmergencyContactArgs) ElementType() reflect.Type

func (i ProactiveEngagementEmergencyContactArgs) ToProactiveEngagementEmergencyContactOutput() ProactiveEngagementEmergencyContactOutput

func (i ProactiveEngagementEmergencyContactArgs) ToProactiveEngagementEmergencyContactOutputWithContext(ctx context.Context) ProactiveEngagementEmergencyContactOutput

type ProactiveEngagementEmergencyContactArray ¶

type ProactiveEngagementEmergencyContactArray []ProactiveEngagementEmergencyContactInput

func (ProactiveEngagementEmergencyContactArray) ElementType() reflect.Type

func (i ProactiveEngagementEmergencyContactArray) ToProactiveEngagementEmergencyContactArrayOutput() ProactiveEngagementEmergencyContactArrayOutput

func (i ProactiveEngagementEmergencyContactArray) ToProactiveEngagementEmergencyContactArrayOutputWithContext(ctx context.Context) ProactiveEngagementEmergencyContactArrayOutput

type ProactiveEngagementEmergencyContactArrayInput ¶

type ProactiveEngagementEmergencyContactArrayInput interface {
	pulumi.Input

	ToProactiveEngagementEmergencyContactArrayOutput() ProactiveEngagementEmergencyContactArrayOutput
	ToProactiveEngagementEmergencyContactArrayOutputWithContext(context.Context) ProactiveEngagementEmergencyContactArrayOutput
}

ProactiveEngagementEmergencyContactArrayInput is an input type that accepts ProactiveEngagementEmergencyContactArray and ProactiveEngagementEmergencyContactArrayOutput values. You can construct a concrete instance of `ProactiveEngagementEmergencyContactArrayInput` via:

ProactiveEngagementEmergencyContactArray{ ProactiveEngagementEmergencyContactArgs{...} }

type ProactiveEngagementEmergencyContactArrayOutput ¶

type ProactiveEngagementEmergencyContactArrayOutput struct{ *pulumi.OutputState }

func (ProactiveEngagementEmergencyContactArrayOutput) ElementType() reflect.Type

func (o ProactiveEngagementEmergencyContactArrayOutput) Index(i pulumi.IntInput) ProactiveEngagementEmergencyContactOutput

func (o ProactiveEngagementEmergencyContactArrayOutput) ToProactiveEngagementEmergencyContactArrayOutput() ProactiveEngagementEmergencyContactArrayOutput

func (o ProactiveEngagementEmergencyContactArrayOutput) ToProactiveEngagementEmergencyContactArrayOutputWithContext(ctx context.Context) ProactiveEngagementEmergencyContactArrayOutput

type ProactiveEngagementEmergencyContactInput ¶

type ProactiveEngagementEmergencyContactInput interface {
	pulumi.Input

	ToProactiveEngagementEmergencyContactOutput() ProactiveEngagementEmergencyContactOutput
	ToProactiveEngagementEmergencyContactOutputWithContext(context.Context) ProactiveEngagementEmergencyContactOutput
}

ProactiveEngagementEmergencyContactInput is an input type that accepts ProactiveEngagementEmergencyContactArgs and ProactiveEngagementEmergencyContactOutput values. You can construct a concrete instance of `ProactiveEngagementEmergencyContactInput` via:

ProactiveEngagementEmergencyContactArgs{...}

type ProactiveEngagementEmergencyContactOutput ¶

type ProactiveEngagementEmergencyContactOutput struct{ *pulumi.OutputState }

func (o ProactiveEngagementEmergencyContactOutput) ContactNotes() pulumi.StringPtrOutput

func (ProactiveEngagementEmergencyContactOutput) ElementType() reflect.Type

func (o ProactiveEngagementEmergencyContactOutput) EmailAddress() pulumi.StringOutput

func (o ProactiveEngagementEmergencyContactOutput) PhoneNumber() pulumi.StringPtrOutput

func (o ProactiveEngagementEmergencyContactOutput) ToProactiveEngagementEmergencyContactOutput() ProactiveEngagementEmergencyContactOutput

func (o ProactiveEngagementEmergencyContactOutput) ToProactiveEngagementEmergencyContactOutputWithContext(ctx context.Context) ProactiveEngagementEmergencyContactOutput

type ProactiveEngagementInput ¶

type ProactiveEngagementInput interface {
	pulumi.Input

	ToProactiveEngagementOutput() ProactiveEngagementOutput
	ToProactiveEngagementOutputWithContext(ctx context.Context) ProactiveEngagementOutput
}

type ProactiveEngagementMap ¶

type ProactiveEngagementMap map[string]ProactiveEngagementInput

func (ProactiveEngagementMap) ElementType() reflect.Type

func (i ProactiveEngagementMap) ToProactiveEngagementMapOutput() ProactiveEngagementMapOutput

func (i ProactiveEngagementMap) ToProactiveEngagementMapOutputWithContext(ctx context.Context) ProactiveEngagementMapOutput

type ProactiveEngagementMapInput ¶

type ProactiveEngagementMapInput interface {
	pulumi.Input

	ToProactiveEngagementMapOutput() ProactiveEngagementMapOutput
	ToProactiveEngagementMapOutputWithContext(context.Context) ProactiveEngagementMapOutput
}

ProactiveEngagementMapInput is an input type that accepts ProactiveEngagementMap and ProactiveEngagementMapOutput values. You can construct a concrete instance of `ProactiveEngagementMapInput` via:

ProactiveEngagementMap{ "key": ProactiveEngagementArgs{...} }

type ProactiveEngagementMapOutput ¶

type ProactiveEngagementMapOutput struct{ *pulumi.OutputState }

func (ProactiveEngagementMapOutput) ElementType() reflect.Type

func (o ProactiveEngagementMapOutput) MapIndex(k pulumi.StringInput) ProactiveEngagementOutput

func (o ProactiveEngagementMapOutput) ToProactiveEngagementMapOutput() ProactiveEngagementMapOutput

func (o ProactiveEngagementMapOutput) ToProactiveEngagementMapOutputWithContext(ctx context.Context) ProactiveEngagementMapOutput

type ProactiveEngagementOutput ¶

type ProactiveEngagementOutput struct{ *pulumi.OutputState }

func (ProactiveEngagementOutput) ElementType() reflect.Type

func (o ProactiveEngagementOutput) EmergencyContacts() ProactiveEngagementEmergencyContactArrayOutput

func (o ProactiveEngagementOutput) Enabled() pulumi.BoolOutput

func (o ProactiveEngagementOutput) ToProactiveEngagementOutput() ProactiveEngagementOutput

func (o ProactiveEngagementOutput) ToProactiveEngagementOutputWithContext(ctx context.Context) ProactiveEngagementOutput

type ProactiveEngagementState ¶

type ProactiveEngagementState struct {
	// One or more emergency contacts. You must provide at least one phone number in the emergency contact list. See `emergencyContacts`.
	EmergencyContacts ProactiveEngagementEmergencyContactArrayInput
	// Boolean value indicating if Proactive Engagement should be enabled or not.
	Enabled pulumi.BoolPtrInput
}

func (ProactiveEngagementState) ElementType() reflect.Type

type Protection ¶

type Protection struct {
	pulumi.CustomResourceState

	// The ARN of the Protection.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// A friendly name for the Protection you are creating.
	Name pulumi.StringOutput `pulumi:"name"`
	// The ARN (Amazon Resource Name) of the resource to be protected.
	ResourceArn pulumi.StringOutput `pulumi:"resourceArn"`
	// Key-value map of resource tags. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Elastic Load Balancing load balancer, AWS Global Accelerator accelerator, Elastic IP Address, or an Amazon Route 53 hosted zone.

## Example Usage

### Create protection

```go package main

import (

"fmt"

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ec2"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := aws.GetAvailabilityZones(ctx, &aws.GetAvailabilityZonesArgs{}, nil)
		if err != nil {
			return err
		}
		current, err := aws.GetRegion(ctx, &aws.GetRegionArgs{}, nil)
		if err != nil {
			return err
		}
		currentGetCallerIdentity, err := aws.GetCallerIdentity(ctx, &aws.GetCallerIdentityArgs{}, nil)
		if err != nil {
			return err
		}
		example, err := ec2.NewEip(ctx, "example", &ec2.EipArgs{
			Domain: pulumi.String("vpc"),
		})
		if err != nil {
			return err
		}
		_, err = shield.NewProtection(ctx, "example", &shield.ProtectionArgs{
			Name: pulumi.String("example"),
			ResourceArn: example.ID().ApplyT(func(id string) (string, error) {
				return fmt.Sprintf("arn:aws:ec2:%v:%v:eip-allocation/%v", current.Region, currentGetCallerIdentity.AccountId, id), nil
			}).(pulumi.StringOutput),
			Tags: pulumi.StringMap{
				"Environment": pulumi.String("Dev"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import Shield protection resources using specifying their ID. For example:

```sh $ pulumi import aws:shield/protection:Protection example ff9592dc-22f3-4e88-afa1-7b29fde9669a ```

func GetProtection(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ProtectionState, opts ...pulumi.ResourceOption) (*Protection, error)

func NewProtection(ctx *pulumi.Context,
	name string, args *ProtectionArgs, opts ...pulumi.ResourceOption) (*Protection, error)

func (*Protection) ElementType() reflect.Type

func (i *Protection) ToProtectionOutput() ProtectionOutput

func (i *Protection) ToProtectionOutputWithContext(ctx context.Context) ProtectionOutput

type ProtectionArgs ¶

type ProtectionArgs struct {
	// A friendly name for the Protection you are creating.
	Name pulumi.StringPtrInput
	// The ARN (Amazon Resource Name) of the resource to be protected.
	ResourceArn pulumi.StringInput
	// Key-value map of resource tags. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a Protection resource.

func (ProtectionArgs) ElementType() reflect.Type

type ProtectionArray ¶

type ProtectionArray []ProtectionInput

func (ProtectionArray) ElementType() reflect.Type

func (i ProtectionArray) ToProtectionArrayOutput() ProtectionArrayOutput

func (i ProtectionArray) ToProtectionArrayOutputWithContext(ctx context.Context) ProtectionArrayOutput

type ProtectionArrayInput ¶

type ProtectionArrayInput interface {
	pulumi.Input

	ToProtectionArrayOutput() ProtectionArrayOutput
	ToProtectionArrayOutputWithContext(context.Context) ProtectionArrayOutput
}

ProtectionArrayInput is an input type that accepts ProtectionArray and ProtectionArrayOutput values. You can construct a concrete instance of `ProtectionArrayInput` via:

ProtectionArray{ ProtectionArgs{...} }

type ProtectionArrayOutput ¶

type ProtectionArrayOutput struct{ *pulumi.OutputState }

func (ProtectionArrayOutput) ElementType() reflect.Type

func (o ProtectionArrayOutput) Index(i pulumi.IntInput) ProtectionOutput

func (o ProtectionArrayOutput) ToProtectionArrayOutput() ProtectionArrayOutput

func (o ProtectionArrayOutput) ToProtectionArrayOutputWithContext(ctx context.Context) ProtectionArrayOutput

type ProtectionGroup ¶

type ProtectionGroup struct {
	pulumi.CustomResourceState

	// Defines how AWS Shield combines resource data for the group in order to detect, mitigate, and report events.
	Aggregation pulumi.StringOutput `pulumi:"aggregation"`
	// The Amazon Resource Names (ARNs) of the resources to include in the protection group. You must set this when you set `pattern` to ARBITRARY and you must not set it for any other `pattern` setting.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The criteria to use to choose the protected resources for inclusion in the group.
	Pattern pulumi.StringOutput `pulumi:"pattern"`
	// The ARN (Amazon Resource Name) of the protection group.
	ProtectionGroupArn pulumi.StringOutput `pulumi:"protectionGroupArn"`
	// The name of the protection group.
	ProtectionGroupId pulumi.StringOutput `pulumi:"protectionGroupId"`
	// The resource type to include in the protection group. You must set this when you set `pattern` to BY_RESOURCE_TYPE and you must not set it for any other `pattern` setting.
	ResourceType pulumi.StringPtrOutput `pulumi:"resourceType"`
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

Creates a grouping of protected resources so they can be handled as a collective. This resource grouping improves the accuracy of detection and reduces false positives. For more information see [Managing AWS Shield Advanced protection groups](https://docs.aws.amazon.com/waf/latest/developerguide/manage-protection-group.html)

## Example Usage

### Create protection group for all resources

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := shield.NewProtectionGroup(ctx, "example", &shield.ProtectionGroupArgs{
			ProtectionGroupId: pulumi.String("example"),
			Aggregation:       pulumi.String("MAX"),
			Pattern:           pulumi.String("ALL"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

### Create protection group for arbitrary number of resources

```go package main

import (

"fmt"

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ec2"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := aws.GetRegion(ctx, &aws.GetRegionArgs{}, nil)
		if err != nil {
			return err
		}
		currentGetCallerIdentity, err := aws.GetCallerIdentity(ctx, &aws.GetCallerIdentityArgs{}, nil)
		if err != nil {
			return err
		}
		example, err := ec2.NewEip(ctx, "example", &ec2.EipArgs{
			Domain: pulumi.String("vpc"),
		})
		if err != nil {
			return err
		}
		exampleProtection, err := shield.NewProtection(ctx, "example", &shield.ProtectionArgs{
			Name: pulumi.String("example"),
			ResourceArn: example.ID().ApplyT(func(id string) (string, error) {
				return fmt.Sprintf("arn:aws:ec2:%v:%v:eip-allocation/%v", current.Region, currentGetCallerIdentity.AccountId, id), nil
			}).(pulumi.StringOutput),
		})
		if err != nil {
			return err
		}
		_, err = shield.NewProtectionGroup(ctx, "example", &shield.ProtectionGroupArgs{
			ProtectionGroupId: pulumi.String("example"),
			Aggregation:       pulumi.String("MEAN"),
			Pattern:           pulumi.String("ARBITRARY"),
			Members: pulumi.StringArray{
				example.ID().ApplyT(func(id string) (string, error) {
					return fmt.Sprintf("arn:aws:ec2:%v:%v:eip-allocation/%v", current.Region, currentGetCallerIdentity.AccountId, id), nil
				}).(pulumi.StringOutput),
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleProtection,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

```

### Create protection group for a type of resource

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := shield.NewProtectionGroup(ctx, "example", &shield.ProtectionGroupArgs{
			ProtectionGroupId: pulumi.String("example"),
			Aggregation:       pulumi.String("SUM"),
			Pattern:           pulumi.String("BY_RESOURCE_TYPE"),
			ResourceType:      pulumi.String("ELASTIC_IP_ALLOCATION"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import Shield protection group resources using their protection group id. For example:

```sh $ pulumi import aws:shield/protectionGroup:ProtectionGroup example example ```

func GetProtectionGroup(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ProtectionGroupState, opts ...pulumi.ResourceOption) (*ProtectionGroup, error)

func NewProtectionGroup(ctx *pulumi.Context,
	name string, args *ProtectionGroupArgs, opts ...pulumi.ResourceOption) (*ProtectionGroup, error)

func (*ProtectionGroup) ElementType() reflect.Type

func (i *ProtectionGroup) ToProtectionGroupOutput() ProtectionGroupOutput

func (i *ProtectionGroup) ToProtectionGroupOutputWithContext(ctx context.Context) ProtectionGroupOutput

type ProtectionGroupArgs ¶

type ProtectionGroupArgs struct {
	// Defines how AWS Shield combines resource data for the group in order to detect, mitigate, and report events.
	Aggregation pulumi.StringInput
	// The Amazon Resource Names (ARNs) of the resources to include in the protection group. You must set this when you set `pattern` to ARBITRARY and you must not set it for any other `pattern` setting.
	Members pulumi.StringArrayInput
	// The criteria to use to choose the protected resources for inclusion in the group.
	Pattern pulumi.StringInput
	// The name of the protection group.
	ProtectionGroupId pulumi.StringInput
	// The resource type to include in the protection group. You must set this when you set `pattern` to BY_RESOURCE_TYPE and you must not set it for any other `pattern` setting.
	ResourceType pulumi.StringPtrInput
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a ProtectionGroup resource.

func (ProtectionGroupArgs) ElementType() reflect.Type

type ProtectionGroupArray ¶

type ProtectionGroupArray []ProtectionGroupInput

func (ProtectionGroupArray) ElementType() reflect.Type

func (i ProtectionGroupArray) ToProtectionGroupArrayOutput() ProtectionGroupArrayOutput

func (i ProtectionGroupArray) ToProtectionGroupArrayOutputWithContext(ctx context.Context) ProtectionGroupArrayOutput

type ProtectionGroupArrayInput ¶

type ProtectionGroupArrayInput interface {
	pulumi.Input

	ToProtectionGroupArrayOutput() ProtectionGroupArrayOutput
	ToProtectionGroupArrayOutputWithContext(context.Context) ProtectionGroupArrayOutput
}

ProtectionGroupArrayInput is an input type that accepts ProtectionGroupArray and ProtectionGroupArrayOutput values. You can construct a concrete instance of `ProtectionGroupArrayInput` via:

ProtectionGroupArray{ ProtectionGroupArgs{...} }

type ProtectionGroupArrayOutput ¶

type ProtectionGroupArrayOutput struct{ *pulumi.OutputState }

func (ProtectionGroupArrayOutput) ElementType() reflect.Type

func (o ProtectionGroupArrayOutput) Index(i pulumi.IntInput) ProtectionGroupOutput

func (o ProtectionGroupArrayOutput) ToProtectionGroupArrayOutput() ProtectionGroupArrayOutput

func (o ProtectionGroupArrayOutput) ToProtectionGroupArrayOutputWithContext(ctx context.Context) ProtectionGroupArrayOutput

type ProtectionGroupInput ¶

type ProtectionGroupInput interface {
	pulumi.Input

	ToProtectionGroupOutput() ProtectionGroupOutput
	ToProtectionGroupOutputWithContext(ctx context.Context) ProtectionGroupOutput
}

type ProtectionGroupMap ¶

type ProtectionGroupMap map[string]ProtectionGroupInput

func (ProtectionGroupMap) ElementType() reflect.Type

func (i ProtectionGroupMap) ToProtectionGroupMapOutput() ProtectionGroupMapOutput

func (i ProtectionGroupMap) ToProtectionGroupMapOutputWithContext(ctx context.Context) ProtectionGroupMapOutput

type ProtectionGroupMapInput ¶

type ProtectionGroupMapInput interface {
	pulumi.Input

	ToProtectionGroupMapOutput() ProtectionGroupMapOutput
	ToProtectionGroupMapOutputWithContext(context.Context) ProtectionGroupMapOutput
}

ProtectionGroupMapInput is an input type that accepts ProtectionGroupMap and ProtectionGroupMapOutput values. You can construct a concrete instance of `ProtectionGroupMapInput` via:

ProtectionGroupMap{ "key": ProtectionGroupArgs{...} }

type ProtectionGroupMapOutput ¶

type ProtectionGroupMapOutput struct{ *pulumi.OutputState }

func (ProtectionGroupMapOutput) ElementType() reflect.Type

func (o ProtectionGroupMapOutput) MapIndex(k pulumi.StringInput) ProtectionGroupOutput

func (o ProtectionGroupMapOutput) ToProtectionGroupMapOutput() ProtectionGroupMapOutput

func (o ProtectionGroupMapOutput) ToProtectionGroupMapOutputWithContext(ctx context.Context) ProtectionGroupMapOutput

type ProtectionGroupOutput ¶

type ProtectionGroupOutput struct{ *pulumi.OutputState }

func (o ProtectionGroupOutput) Aggregation() pulumi.StringOutput

func (ProtectionGroupOutput) ElementType() reflect.Type

func (o ProtectionGroupOutput) Members() pulumi.StringArrayOutput

func (o ProtectionGroupOutput) Pattern() pulumi.StringOutput

func (o ProtectionGroupOutput) ProtectionGroupArn() pulumi.StringOutput

func (o ProtectionGroupOutput) ProtectionGroupId() pulumi.StringOutput

func (o ProtectionGroupOutput) ResourceType() pulumi.StringPtrOutput

func (o ProtectionGroupOutput) Tags() pulumi.StringMapOutput

func (o ProtectionGroupOutput) TagsAll() pulumi.StringMapOutput

func (o ProtectionGroupOutput) ToProtectionGroupOutput() ProtectionGroupOutput

func (o ProtectionGroupOutput) ToProtectionGroupOutputWithContext(ctx context.Context) ProtectionGroupOutput

type ProtectionGroupState ¶

type ProtectionGroupState struct {
	// Defines how AWS Shield combines resource data for the group in order to detect, mitigate, and report events.
	Aggregation pulumi.StringPtrInput
	// The Amazon Resource Names (ARNs) of the resources to include in the protection group. You must set this when you set `pattern` to ARBITRARY and you must not set it for any other `pattern` setting.
	Members pulumi.StringArrayInput
	// The criteria to use to choose the protected resources for inclusion in the group.
	Pattern pulumi.StringPtrInput
	// The ARN (Amazon Resource Name) of the protection group.
	ProtectionGroupArn pulumi.StringPtrInput
	// The name of the protection group.
	ProtectionGroupId pulumi.StringPtrInput
	// The resource type to include in the protection group. You must set this when you set `pattern` to BY_RESOURCE_TYPE and you must not set it for any other `pattern` setting.
	ResourceType pulumi.StringPtrInput
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapInput
}

func (ProtectionGroupState) ElementType() reflect.Type

type ProtectionHealthCheckAssociation ¶

type ProtectionHealthCheckAssociation struct {
	pulumi.CustomResourceState

	// The ARN (Amazon Resource Name) of the Route53 Health Check resource which will be associated to the protected resource.
	HealthCheckArn pulumi.StringOutput `pulumi:"healthCheckArn"`
	// The ID of the protected resource.
	ShieldProtectionId pulumi.StringOutput `pulumi:"shieldProtectionId"`
}

Creates an association between a Route53 Health Check and a Shield Advanced protected resource. This association uses the health of your applications to improve responsiveness and accuracy in attack detection and mitigation.

Blog post: [AWS Shield Advanced now supports Health Based Detection](https://aws.amazon.com/about-aws/whats-new/2020/02/aws-shield-advanced-now-supports-health-based-detection/)

## Example Usage

### Create an association between a protected EIP and a Route53 Health Check

```go package main

import (

"fmt"

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ec2"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/route53"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := aws.GetRegion(ctx, &aws.GetRegionArgs{}, nil)
		if err != nil {
			return err
		}
		currentGetCallerIdentity, err := aws.GetCallerIdentity(ctx, &aws.GetCallerIdentityArgs{}, nil)
		if err != nil {
			return err
		}
		currentGetPartition, err := aws.GetPartition(ctx, &aws.GetPartitionArgs{}, nil)
		if err != nil {
			return err
		}
		example, err := ec2.NewEip(ctx, "example", &ec2.EipArgs{
			Domain: pulumi.String("vpc"),
			Tags: pulumi.StringMap{
				"Name": pulumi.String("example"),
			},
		})
		if err != nil {
			return err
		}
		exampleProtection, err := shield.NewProtection(ctx, "example", &shield.ProtectionArgs{
			Name: pulumi.String("example-protection"),
			ResourceArn: example.ID().ApplyT(func(id string) (string, error) {
				return fmt.Sprintf("arn:%v:ec2:%v:%v:eip-allocation/%v", currentGetPartition.Partition, current.Region, currentGetCallerIdentity.AccountId, id), nil
			}).(pulumi.StringOutput),
		})
		if err != nil {
			return err
		}
		exampleHealthCheck, err := route53.NewHealthCheck(ctx, "example", &route53.HealthCheckArgs{
			IpAddress:        example.PublicIp,
			Port:             pulumi.Int(80),
			Type:             pulumi.String("HTTP"),
			ResourcePath:     pulumi.String("/ready"),
			FailureThreshold: pulumi.Int(3),
			RequestInterval:  pulumi.Int(30),
			Tags: pulumi.StringMap{
				"Name": pulumi.String("tf-example-health-check"),
			},
		})
		if err != nil {
			return err
		}
		_, err = shield.NewProtectionHealthCheckAssociation(ctx, "example", &shield.ProtectionHealthCheckAssociationArgs{
			HealthCheckArn:     exampleHealthCheck.Arn,
			ShieldProtectionId: exampleProtection.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import Shield protection health check association resources using the `shield_protection_id` and `health_check_arn`. For example:

```sh $ pulumi import aws:shield/protectionHealthCheckAssociation:ProtectionHealthCheckAssociation example ff9592dc-22f3-4e88-afa1-7b29fde9669a+arn:aws:route53:::healthcheck/3742b175-edb9-46bc-9359-f53e3b794b1b ```

func GetProtectionHealthCheckAssociation(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ProtectionHealthCheckAssociationState, opts ...pulumi.ResourceOption) (*ProtectionHealthCheckAssociation, error)

func NewProtectionHealthCheckAssociation(ctx *pulumi.Context,
	name string, args *ProtectionHealthCheckAssociationArgs, opts ...pulumi.ResourceOption) (*ProtectionHealthCheckAssociation, error)

func (*ProtectionHealthCheckAssociation) ElementType() reflect.Type

func (i *ProtectionHealthCheckAssociation) ToProtectionHealthCheckAssociationOutput() ProtectionHealthCheckAssociationOutput

func (i *ProtectionHealthCheckAssociation) ToProtectionHealthCheckAssociationOutputWithContext(ctx context.Context) ProtectionHealthCheckAssociationOutput

type ProtectionHealthCheckAssociationArgs ¶

type ProtectionHealthCheckAssociationArgs struct {
	// The ARN (Amazon Resource Name) of the Route53 Health Check resource which will be associated to the protected resource.
	HealthCheckArn pulumi.StringInput
	// The ID of the protected resource.
	ShieldProtectionId pulumi.StringInput
}

The set of arguments for constructing a ProtectionHealthCheckAssociation resource.

func (ProtectionHealthCheckAssociationArgs) ElementType() reflect.Type

type ProtectionHealthCheckAssociationArray ¶

type ProtectionHealthCheckAssociationArray []ProtectionHealthCheckAssociationInput

func (ProtectionHealthCheckAssociationArray) ElementType() reflect.Type

func (i ProtectionHealthCheckAssociationArray) ToProtectionHealthCheckAssociationArrayOutput() ProtectionHealthCheckAssociationArrayOutput

func (i ProtectionHealthCheckAssociationArray) ToProtectionHealthCheckAssociationArrayOutputWithContext(ctx context.Context) ProtectionHealthCheckAssociationArrayOutput

type ProtectionHealthCheckAssociationArrayInput ¶

type ProtectionHealthCheckAssociationArrayInput interface {
	pulumi.Input

	ToProtectionHealthCheckAssociationArrayOutput() ProtectionHealthCheckAssociationArrayOutput
	ToProtectionHealthCheckAssociationArrayOutputWithContext(context.Context) ProtectionHealthCheckAssociationArrayOutput
}

ProtectionHealthCheckAssociationArrayInput is an input type that accepts ProtectionHealthCheckAssociationArray and ProtectionHealthCheckAssociationArrayOutput values. You can construct a concrete instance of `ProtectionHealthCheckAssociationArrayInput` via:

ProtectionHealthCheckAssociationArray{ ProtectionHealthCheckAssociationArgs{...} }

type ProtectionHealthCheckAssociationArrayOutput ¶

type ProtectionHealthCheckAssociationArrayOutput struct{ *pulumi.OutputState }

func (ProtectionHealthCheckAssociationArrayOutput) ElementType() reflect.Type

func (o ProtectionHealthCheckAssociationArrayOutput) Index(i pulumi.IntInput) ProtectionHealthCheckAssociationOutput

func (o ProtectionHealthCheckAssociationArrayOutput) ToProtectionHealthCheckAssociationArrayOutput() ProtectionHealthCheckAssociationArrayOutput

func (o ProtectionHealthCheckAssociationArrayOutput) ToProtectionHealthCheckAssociationArrayOutputWithContext(ctx context.Context) ProtectionHealthCheckAssociationArrayOutput

type ProtectionHealthCheckAssociationInput ¶

type ProtectionHealthCheckAssociationInput interface {
	pulumi.Input

	ToProtectionHealthCheckAssociationOutput() ProtectionHealthCheckAssociationOutput
	ToProtectionHealthCheckAssociationOutputWithContext(ctx context.Context) ProtectionHealthCheckAssociationOutput
}

type ProtectionHealthCheckAssociationMap ¶

type ProtectionHealthCheckAssociationMap map[string]ProtectionHealthCheckAssociationInput

func (ProtectionHealthCheckAssociationMap) ElementType() reflect.Type

func (i ProtectionHealthCheckAssociationMap) ToProtectionHealthCheckAssociationMapOutput() ProtectionHealthCheckAssociationMapOutput

func (i ProtectionHealthCheckAssociationMap) ToProtectionHealthCheckAssociationMapOutputWithContext(ctx context.Context) ProtectionHealthCheckAssociationMapOutput

type ProtectionHealthCheckAssociationMapInput ¶

type ProtectionHealthCheckAssociationMapInput interface {
	pulumi.Input

	ToProtectionHealthCheckAssociationMapOutput() ProtectionHealthCheckAssociationMapOutput
	ToProtectionHealthCheckAssociationMapOutputWithContext(context.Context) ProtectionHealthCheckAssociationMapOutput
}

ProtectionHealthCheckAssociationMapInput is an input type that accepts ProtectionHealthCheckAssociationMap and ProtectionHealthCheckAssociationMapOutput values. You can construct a concrete instance of `ProtectionHealthCheckAssociationMapInput` via:

ProtectionHealthCheckAssociationMap{ "key": ProtectionHealthCheckAssociationArgs{...} }

type ProtectionHealthCheckAssociationMapOutput ¶

type ProtectionHealthCheckAssociationMapOutput struct{ *pulumi.OutputState }

func (ProtectionHealthCheckAssociationMapOutput) ElementType() reflect.Type

func (o ProtectionHealthCheckAssociationMapOutput) MapIndex(k pulumi.StringInput) ProtectionHealthCheckAssociationOutput

func (o ProtectionHealthCheckAssociationMapOutput) ToProtectionHealthCheckAssociationMapOutput() ProtectionHealthCheckAssociationMapOutput

func (o ProtectionHealthCheckAssociationMapOutput) ToProtectionHealthCheckAssociationMapOutputWithContext(ctx context.Context) ProtectionHealthCheckAssociationMapOutput

type ProtectionHealthCheckAssociationOutput ¶

type ProtectionHealthCheckAssociationOutput struct{ *pulumi.OutputState }

func (ProtectionHealthCheckAssociationOutput) ElementType() reflect.Type

func (o ProtectionHealthCheckAssociationOutput) HealthCheckArn() pulumi.StringOutput

func (o ProtectionHealthCheckAssociationOutput) ShieldProtectionId() pulumi.StringOutput

func (o ProtectionHealthCheckAssociationOutput) ToProtectionHealthCheckAssociationOutput() ProtectionHealthCheckAssociationOutput

func (o ProtectionHealthCheckAssociationOutput) ToProtectionHealthCheckAssociationOutputWithContext(ctx context.Context) ProtectionHealthCheckAssociationOutput

type ProtectionHealthCheckAssociationState ¶

type ProtectionHealthCheckAssociationState struct {
	// The ARN (Amazon Resource Name) of the Route53 Health Check resource which will be associated to the protected resource.
	HealthCheckArn pulumi.StringPtrInput
	// The ID of the protected resource.
	ShieldProtectionId pulumi.StringPtrInput
}

func (ProtectionHealthCheckAssociationState) ElementType() reflect.Type

type ProtectionInput ¶

type ProtectionInput interface {
	pulumi.Input

	ToProtectionOutput() ProtectionOutput
	ToProtectionOutputWithContext(ctx context.Context) ProtectionOutput
}

type ProtectionMap ¶

type ProtectionMap map[string]ProtectionInput

func (ProtectionMap) ElementType() reflect.Type

func (i ProtectionMap) ToProtectionMapOutput() ProtectionMapOutput

func (i ProtectionMap) ToProtectionMapOutputWithContext(ctx context.Context) ProtectionMapOutput

type ProtectionMapInput ¶

type ProtectionMapInput interface {
	pulumi.Input

	ToProtectionMapOutput() ProtectionMapOutput
	ToProtectionMapOutputWithContext(context.Context) ProtectionMapOutput
}

ProtectionMapInput is an input type that accepts ProtectionMap and ProtectionMapOutput values. You can construct a concrete instance of `ProtectionMapInput` via:

ProtectionMap{ "key": ProtectionArgs{...} }

type ProtectionMapOutput ¶

type ProtectionMapOutput struct{ *pulumi.OutputState }

func (ProtectionMapOutput) ElementType() reflect.Type

func (o ProtectionMapOutput) MapIndex(k pulumi.StringInput) ProtectionOutput

func (o ProtectionMapOutput) ToProtectionMapOutput() ProtectionMapOutput

func (o ProtectionMapOutput) ToProtectionMapOutputWithContext(ctx context.Context) ProtectionMapOutput

type ProtectionOutput ¶

type ProtectionOutput struct{ *pulumi.OutputState }

func (o ProtectionOutput) Arn() pulumi.StringOutput

func (ProtectionOutput) ElementType() reflect.Type

func (o ProtectionOutput) Name() pulumi.StringOutput

func (o ProtectionOutput) ResourceArn() pulumi.StringOutput

func (o ProtectionOutput) Tags() pulumi.StringMapOutput

func (o ProtectionOutput) TagsAll() pulumi.StringMapOutput

func (o ProtectionOutput) ToProtectionOutput() ProtectionOutput

func (o ProtectionOutput) ToProtectionOutputWithContext(ctx context.Context) ProtectionOutput

type ProtectionState ¶

type ProtectionState struct {
	// The ARN of the Protection.
	Arn pulumi.StringPtrInput
	// A friendly name for the Protection you are creating.
	Name pulumi.StringPtrInput
	// The ARN (Amazon Resource Name) of the resource to be protected.
	ResourceArn pulumi.StringPtrInput
	// Key-value map of resource tags. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapInput
}

func (ProtectionState) ElementType() reflect.Type

type Subscription ¶

type Subscription struct {
	pulumi.CustomResourceState

	// Toggle for automated renewal of the subscription. Valid values are `ENABLED` or `DISABLED`. Default is `ENABLED`.
	AutoRenew pulumi.StringOutput `pulumi:"autoRenew"`
	// Skip attempting to disable automated renewal upon destruction. If set to `true`, the `autoRenew` value will be left as-is and the resource will simply be removed from state.
	SkipDestroy pulumi.BoolPtrOutput `pulumi:"skipDestroy"`
}

Resource for managing an AWS Shield Subscription.

> This resource creates a subscription to AWS Shield Advanced, which requires a 1 year subscription commitment with a monthly fee. Refer to the [AWS Shield Pricing](https://aws.amazon.com/shield/pricing/) page for more details.

> Destruction of this resource will set `autoRenew` to `DISABLED`. Automatic renewal can only be disabled during the last 30 days of a subscription. To unsubscribe outside of this window, you must contact AWS Support. Set `skipDestroy` to `true` to skip modifying the `autoRenew` argument during destruction.

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/shield"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := shield.NewSubscription(ctx, "example", &shield.SubscriptionArgs{
			AutoRenew: pulumi.String("ENABLED"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import Shield Subscription using the `id`. For example:

```sh $ pulumi import aws:shield/subscription:Subscription example 123456789012 ```

func GetSubscription(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SubscriptionState, opts ...pulumi.ResourceOption) (*Subscription, error)

func NewSubscription(ctx *pulumi.Context,
	name string, args *SubscriptionArgs, opts ...pulumi.ResourceOption) (*Subscription, error)

func (*Subscription) ElementType() reflect.Type

func (i *Subscription) ToSubscriptionOutput() SubscriptionOutput

func (i *Subscription) ToSubscriptionOutputWithContext(ctx context.Context) SubscriptionOutput

type SubscriptionArgs ¶

type SubscriptionArgs struct {
	// Toggle for automated renewal of the subscription. Valid values are `ENABLED` or `DISABLED`. Default is `ENABLED`.
	AutoRenew pulumi.StringPtrInput
	// Skip attempting to disable automated renewal upon destruction. If set to `true`, the `autoRenew` value will be left as-is and the resource will simply be removed from state.
	SkipDestroy pulumi.BoolPtrInput
}

The set of arguments for constructing a Subscription resource.

func (SubscriptionArgs) ElementType() reflect.Type

type SubscriptionArray ¶

type SubscriptionArray []SubscriptionInput

func (SubscriptionArray) ElementType() reflect.Type

func (i SubscriptionArray) ToSubscriptionArrayOutput() SubscriptionArrayOutput

func (i SubscriptionArray) ToSubscriptionArrayOutputWithContext(ctx context.Context) SubscriptionArrayOutput

type SubscriptionArrayInput ¶

type SubscriptionArrayInput interface {
	pulumi.Input

	ToSubscriptionArrayOutput() SubscriptionArrayOutput
	ToSubscriptionArrayOutputWithContext(context.Context) SubscriptionArrayOutput
}

SubscriptionArrayInput is an input type that accepts SubscriptionArray and SubscriptionArrayOutput values. You can construct a concrete instance of `SubscriptionArrayInput` via:

SubscriptionArray{ SubscriptionArgs{...} }

type SubscriptionArrayOutput ¶

type SubscriptionArrayOutput struct{ *pulumi.OutputState }

func (SubscriptionArrayOutput) ElementType() reflect.Type

func (o SubscriptionArrayOutput) Index(i pulumi.IntInput) SubscriptionOutput

func (o SubscriptionArrayOutput) ToSubscriptionArrayOutput() SubscriptionArrayOutput

func (o SubscriptionArrayOutput) ToSubscriptionArrayOutputWithContext(ctx context.Context) SubscriptionArrayOutput

type SubscriptionInput ¶

type SubscriptionInput interface {
	pulumi.Input

	ToSubscriptionOutput() SubscriptionOutput
	ToSubscriptionOutputWithContext(ctx context.Context) SubscriptionOutput
}

type SubscriptionMap ¶

type SubscriptionMap map[string]SubscriptionInput

func (SubscriptionMap) ElementType() reflect.Type

func (i SubscriptionMap) ToSubscriptionMapOutput() SubscriptionMapOutput

func (i SubscriptionMap) ToSubscriptionMapOutputWithContext(ctx context.Context) SubscriptionMapOutput

type SubscriptionMapInput ¶

type SubscriptionMapInput interface {
	pulumi.Input

	ToSubscriptionMapOutput() SubscriptionMapOutput
	ToSubscriptionMapOutputWithContext(context.Context) SubscriptionMapOutput
}

SubscriptionMapInput is an input type that accepts SubscriptionMap and SubscriptionMapOutput values. You can construct a concrete instance of `SubscriptionMapInput` via:

SubscriptionMap{ "key": SubscriptionArgs{...} }

type SubscriptionMapOutput ¶

type SubscriptionMapOutput struct{ *pulumi.OutputState }

func (SubscriptionMapOutput) ElementType() reflect.Type

func (o SubscriptionMapOutput) MapIndex(k pulumi.StringInput) SubscriptionOutput

func (o SubscriptionMapOutput) ToSubscriptionMapOutput() SubscriptionMapOutput

func (o SubscriptionMapOutput) ToSubscriptionMapOutputWithContext(ctx context.Context) SubscriptionMapOutput

type SubscriptionOutput ¶

type SubscriptionOutput struct{ *pulumi.OutputState }

func (o SubscriptionOutput) AutoRenew() pulumi.StringOutput

func (SubscriptionOutput) ElementType() reflect.Type

func (o SubscriptionOutput) SkipDestroy() pulumi.BoolPtrOutput

func (o SubscriptionOutput) ToSubscriptionOutput() SubscriptionOutput

func (o SubscriptionOutput) ToSubscriptionOutputWithContext(ctx context.Context) SubscriptionOutput

type SubscriptionState ¶

type SubscriptionState struct {
	// Toggle for automated renewal of the subscription. Valid values are `ENABLED` or `DISABLED`. Default is `ENABLED`.
	AutoRenew pulumi.StringPtrInput
	// Skip attempting to disable automated renewal upon destruction. If set to `true`, the `autoRenew` value will be left as-is and the resource will simply be removed from state.
	SkipDestroy pulumi.BoolPtrInput
}

func (SubscriptionState) ElementType() reflect.Type