UNPKG

@enfo/aws-cdkompliance

Version:

Tagging and compliant resources using the CDK

63 lines 2.21 kB
import { Bucket } from 'aws-cdk-lib/aws-s3'; import { Construct } from 'constructs'; /** * Available Backup plans. Availability depends on your agreement with Enfo */ export declare enum BackupPlan { /** * Creates backups in the region of the resource */ STANDARD = "Standard", /** * Creates backups in the region of the resource, and copies of those backups in eu-north-1, the Stockholm region */ STOCKHOLM = "StandardCrossRegionStockholm", /** * Creates backups in the region of the resource, and copies of those backups in eu-west-1, the Ireland region */ IRELAND = "StandardCrossRegionIreland", /** * Creates backups in the region of the resource, and copies of those backups in eu-central-1, the Frankfurt region */ FRANKFURT = "StandardCrossRegionFrankfurt" } /** * Tags a CDK Construct to enable Enfo Standard Backups. * If an a stack is supplied this will be applied to all resources within the stack. * See README for examples * * Backups only applies to databases. The following types of resources will be affected: * Aurora * RDS * DynamoDB * EBS * EC2 * EFS * FSx * Storage Gateway * DocumentDB * Neptune * * @param construct * A CDK Construct * @param backupPlan * Which BackupPlan to use. Defaults to STANDARD */ export declare const enableBackups: (construct: Construct, backupPlan?: BackupPlan) => void; /** * Static value used for exemption tags */ export declare const ExemptionValue = "Exempt"; /** * Tags a Bucket as exempt from the auto fixing of https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp-controls.html#fsbp-s3-2 which is handled within Enfo managed accounts * @param bucket * CDK Bucket Construct */ export declare const exemptBucketFromBlockPublicAutoFix: (bucket: Bucket) => void; /** * Tags a Bucket as exempt from the auto fixing of https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp-controls.html#fsbp-s3-5 which is handled within Enfo managed accounts * @param bucket * CDK Bucket Construct */ export declare const exemptBucketFromSslAutoFix: (bucket: Bucket) => void; //# sourceMappingURL=tags.d.ts.map