AwsAccountDefaultsArgs

interface AwsAccountDefaultsArgs {
defaultSecurityGroups?: Record<string, AwsAccountDefaultsDefaultSecurityGroupsArgs>;
defaultVpcCleanup?: AwsAccountDefaultsDefaultVpcCleanupArgs;
grafanaAccessRole?: AwsAccountDefaultsGrafanaAccessRoleArgs;
identity: string;
pulumiDeploymentRole?: AwsAccountDefaultsPulumiDeploymentRoleArgs;
rdsAndDocdbSubnetGroup?: AwsAccountDefaultsRdsAndDocdbSubnetGroupArgs;
serverlessDeploymentRole?: AwsAccountDefaultsServerlessDeploymentRoleArgs;
}

Input arguments for AwsAccountDefaults.

Example

CODE

const args: AwsAccountDefaultsArgs = {
  identity: 'account-defaults',
  defaultVpcCleanup: {
    regions: { 'eu-west-1': {}, 'eu-central-1': {} },
  },
  pulumiDeploymentRole: {
    policyDocument: {
      path: 'policies/pulumi-deployment-default.json',
    },
  },
  serverlessDeploymentRole: {
    regions: { 'eu-central-1': {}, 'eu-west-1': {} },
    policyDocument: {
      path: 'policies/serverless-deployment-default.json',
    },
  },
};

const defaults = new AwsAccountDefaults(args);

Properties

`defaultSecurityGroups: Record<string, AwsAccountDefaultsDefaultSecurityGroupsArgs>`

Optional default security-group capability entries keyed by target VPC Name tag value.

`defaultVpcCleanup: AwsAccountDefaultsDefaultVpcCleanupArgs`

Optional default VPC cleanup capability.

`grafanaAccessRole: AwsAccountDefaultsGrafanaAccessRoleArgs`

Optional Grafana access role capability.

`identity: string`

Stable identity segment used to derive Pulumi logical names.

Remarks

This value derives the component logical name as ${env}-${projectHash}-account-defaults-${sanitiseNamePart(identity)}. It must be a plain, non-empty, synchronous string, and must not be a pulumi.Input, pulumi.Output, or promise-derived value.

After sanitisation, the segment must still be non-empty, otherwise the constructor throws. Keep this value stable for the component lifetime because changing it renames Pulumi logical resources and can require replacements or explicit state moves.

`pulumiDeploymentRole: AwsAccountDefaultsPulumiDeploymentRoleArgs`

Optional Pulumi deployment role capability.

`rdsAndDocdbSubnetGroup: AwsAccountDefaultsRdsAndDocdbSubnetGroupArgs`

Optional shared RDS/DocDB DB subnet group capability.

`serverlessDeploymentRole: AwsAccountDefaultsServerlessDeploymentRoleArgs`

Optional Serverless Framework deployment role and regional deployment-artifact bucket capability.

Remarks

The role and artifact buckets use component-owned providers and the ambient AWS session credentials. Callers must not supply options.provider or options.providers for this capability.