cdk-twingate/lib/index.d.ts

 [](https://www.npmjs.com/package

import { AmazonLinuxCpuType, Instance, InstanceType, ISecurityGroup, IVpc, SubnetSelection } from 'aws-cdk-lib/aws-ec2';
import { ISecret } from 'aws-cdk-lib/aws-secretsmanager';
import { Construct } from 'constructs';
export interface SecretsManagerKeys {
    /**
    * Secret manager location where the twingate auth key is stored. Must be in the standard key/value JSON format.
    */
    readonly secret: ISecret;
    /**
     * The key of the access token value located within the provided secret.
     */
    readonly accessTokenKey: string;
    /**
     * The key of the refresh token value located within the provided secret.
     */
    readonly refreshTokenKey: string;
}
export interface UnsafeStringKeys {
    /**
     * Provides an access token as a plaintext string.
     */
    readonly accessToken: string;
    /**
   * Provides an api key as a plaintext string.
   */
    readonly refreshToken: string;
}
export interface TwingateCredentials {
    /**
     * Fetches the credentials from secrets manager. This value will be fetched during EC2 startup.
     */
    readonly secretsManager?: SecretsManagerKeys;
    /**
     * Provides credentials as plaintext strings.
     * CAUTION: This option will expose the credentials in your CDK template.
     */
    readonly unsafeStringKeys?: UnsafeStringKeys;
}
export interface TwingateConnectorProps {
    /**
      * VPC to launch the instance in.
      */
    readonly vpc: IVpc;
    /**
     * The full domain of your Twingate instance, ie https://mycompany.twingate.com
     */
    readonly twingateDomain: string;
    /**
     * Credential settings for the twingate auth keys. One type must be used.
     */
    readonly twingateCredentials: TwingateCredentials;
    /**
     * In which AZ to place the instance within the VPC.
     *
     * @default - Random zone.
     */
    readonly availabilityZone?: string;
    /**
     * The name of the instance.
     *
     * @default RandomlyGenerated
     */
    readonly instanceName?: string;
    /**
     * Select the subnets to run the EC2 in.
     * PUBLIC subnets are used by default to support P2P connections.
     *
     * @default - PUBLIC subnets of the supplied VPC
     */
    readonly subnetSelection?: SubnetSelection;
    /**
     * Security Group to assign to this instance.
     *
     * @default - Creates a new security group with all outbound traffic permitted.
     */
    readonly securityGroup?: ISecurityGroup;
    /**
     * Type of instance to launch.
     *
     * @default 't3a.micro'
     */
    readonly instanceType?: InstanceType;
    /**
     *  CPU Type of the instance.
     *
     *  @default AmazonLinuxCpuType.X86_64
     */
    readonly cpuType?: AmazonLinuxCpuType;
}
export declare class TwingateConnector extends Construct {
    readonly bastion: Instance;
    constructor(scope: Construct, id: string, props: TwingateConnectorProps);
    private computeCredentials;
}