1
+ {
2
+ "Resources" : {
3
+ "Bucket83908E77" : {
4
+ "Type" : " AWS::S3::Bucket" ,
5
+ "UpdateReplacePolicy" : " Delete" ,
6
+ "DeletionPolicy" : " Delete"
7
+ },
8
+ "Role1ABCC5F0" : {
9
+ "Type" : " AWS::IAM::Role" ,
10
+ "Properties" : {
11
+ "AssumeRolePolicyDocument" : {
12
+ "Statement" : [
13
+ {
14
+ "Action" : " sts:AssumeRole" ,
15
+ "Effect" : " Allow" ,
16
+ "Principal" : {
17
+ "Service" : " firehose.amazonaws.com"
18
+ }
19
+ }
20
+ ],
21
+ "Version" : " 2012-10-17"
22
+ }
23
+ }
24
+ },
25
+ "RoleDefaultPolicy5FFB7DAB" : {
26
+ "Type" : " AWS::IAM::Policy" ,
27
+ "Properties" : {
28
+ "PolicyDocument" : {
29
+ "Statement" : [
30
+ {
31
+ "Action" : [
32
+ " s3:Abort*" ,
33
+ " s3:DeleteObject*" ,
34
+ " s3:GetBucket*" ,
35
+ " s3:GetObject*" ,
36
+ " s3:List*" ,
37
+ " s3:PutObject" ,
38
+ " s3:PutObjectLegalHold" ,
39
+ " s3:PutObjectRetention" ,
40
+ " s3:PutObjectTagging" ,
41
+ " s3:PutObjectVersionTagging"
42
+ ],
43
+ "Effect" : " Allow" ,
44
+ "Resource" : [
45
+ {
46
+ "Fn::GetAtt" : [
47
+ " Bucket83908E77" ,
48
+ " Arn"
49
+ ]
50
+ },
51
+ {
52
+ "Fn::Join" : [
53
+ " " ,
54
+ [
55
+ {
56
+ "Fn::GetAtt" : [
57
+ " Bucket83908E77" ,
58
+ " Arn"
59
+ ]
60
+ },
61
+ " /*"
62
+ ]
63
+ ]
64
+ }
65
+ ]
66
+ }
67
+ ],
68
+ "Version" : " 2012-10-17"
69
+ },
70
+ "PolicyName" : " RoleDefaultPolicy5FFB7DAB" ,
71
+ "Roles" : [
72
+ {
73
+ "Ref" : " Role1ABCC5F0"
74
+ }
75
+ ]
76
+ }
77
+ },
78
+ "Key961B73FD" : {
79
+ "Type" : " AWS::KMS::Key" ,
80
+ "Properties" : {
81
+ "KeyPolicy" : {
82
+ "Statement" : [
83
+ {
84
+ "Action" : " kms:*" ,
85
+ "Effect" : " Allow" ,
86
+ "Principal" : {
87
+ "AWS" : {
88
+ "Fn::Join" : [
89
+ " " ,
90
+ [
91
+ " arn:" ,
92
+ {
93
+ "Ref" : " AWS::Partition"
94
+ },
95
+ " :iam::" ,
96
+ {
97
+ "Ref" : " AWS::AccountId"
98
+ },
99
+ " :root"
100
+ ]
101
+ ]
102
+ }
103
+ },
104
+ "Resource" : " *"
105
+ }
106
+ ],
107
+ "Version" : " 2012-10-17"
108
+ }
109
+ },
110
+ "UpdateReplacePolicy" : " Delete" ,
111
+ "DeletionPolicy" : " Delete"
112
+ },
113
+ "DeliveryStreamServiceRole964EEBCC" : {
114
+ "Type" : " AWS::IAM::Role" ,
115
+ "Properties" : {
116
+ "AssumeRolePolicyDocument" : {
117
+ "Statement" : [
118
+ {
119
+ "Action" : " sts:AssumeRole" ,
120
+ "Effect" : " Allow" ,
121
+ "Principal" : {
122
+ "Service" : " firehose.amazonaws.com"
123
+ }
124
+ }
125
+ ],
126
+ "Version" : " 2012-10-17"
127
+ }
128
+ }
129
+ },
130
+ "DeliveryStreamServiceRoleDefaultPolicyB87D9ACF" : {
131
+ "Type" : " AWS::IAM::Policy" ,
132
+ "Properties" : {
133
+ "PolicyDocument" : {
134
+ "Statement" : [
135
+ {
136
+ "Action" : [
137
+ " kms:Decrypt" ,
138
+ " kms:Encrypt" ,
139
+ " kms:GenerateDataKey*" ,
140
+ " kms:ReEncrypt*"
141
+ ],
142
+ "Effect" : " Allow" ,
143
+ "Resource" : {
144
+ "Fn::GetAtt" : [
145
+ " Key961B73FD" ,
146
+ " Arn"
147
+ ]
148
+ }
149
+ }
150
+ ],
151
+ "Version" : " 2012-10-17"
152
+ },
153
+ "PolicyName" : " DeliveryStreamServiceRoleDefaultPolicyB87D9ACF" ,
154
+ "Roles" : [
155
+ {
156
+ "Ref" : " DeliveryStreamServiceRole964EEBCC"
157
+ }
158
+ ]
159
+ }
160
+ },
161
+ "DeliveryStreamF6D5572D" : {
162
+ "Type" : " AWS::KinesisFirehose::DeliveryStream" ,
163
+ "Properties" : {
164
+ "DeliveryStreamEncryptionConfigurationInput" : {
165
+ "KeyARN" : {
166
+ "Fn::GetAtt" : [
167
+ " Key961B73FD" ,
168
+ " Arn"
169
+ ]
170
+ },
171
+ "KeyType" : " CUSTOMER_MANAGED_CMK"
172
+ },
173
+ "DeliveryStreamType" : " DirectPut" ,
174
+ "ExtendedS3DestinationConfiguration" : {
175
+ "BucketARN" : {
176
+ "Fn::GetAtt" : [
177
+ " Bucket83908E77" ,
178
+ " Arn"
179
+ ]
180
+ },
181
+ "RoleARN" : {
182
+ "Fn::GetAtt" : [
183
+ " Role1ABCC5F0" ,
184
+ " Arn"
185
+ ]
186
+ }
187
+ }
188
+ },
189
+ "DependsOn" : [
190
+ " RoleDefaultPolicy5FFB7DAB"
191
+ ]
192
+ },
193
+ "DeliveryStreamNoSourceOrEncryptionKey0E4AAB82" : {
194
+ "Type" : " AWS::KinesisFirehose::DeliveryStream" ,
195
+ "Properties" : {
196
+ "DeliveryStreamType" : " DirectPut" ,
197
+ "ExtendedS3DestinationConfiguration" : {
198
+ "BucketARN" : {
199
+ "Fn::GetAtt" : [
200
+ " Bucket83908E77" ,
201
+ " Arn"
202
+ ]
203
+ },
204
+ "RoleARN" : {
205
+ "Fn::GetAtt" : [
206
+ " Role1ABCC5F0" ,
207
+ " Arn"
208
+ ]
209
+ }
210
+ }
211
+ },
212
+ "DependsOn" : [
213
+ " RoleDefaultPolicy5FFB7DAB"
214
+ ]
215
+ }
216
+ },
217
+ "Mappings" : {
218
+ "awscdkawskinesisfirehoseCidrBlocks" : {
219
+ "af-south-1" : {
220
+ "FirehoseCidrBlock" : " 13.244.121.224/27"
221
+ },
222
+ "ap-east-1" : {
223
+ "FirehoseCidrBlock" : " 18.162.221.32/27"
224
+ },
225
+ "ap-northeast-1" : {
226
+ "FirehoseCidrBlock" : " 13.113.196.224/27"
227
+ },
228
+ "ap-northeast-2" : {
229
+ "FirehoseCidrBlock" : " 13.209.1.64/27"
230
+ },
231
+ "ap-northeast-3" : {
232
+ "FirehoseCidrBlock" : " 13.208.177.192/27"
233
+ },
234
+ "ap-south-1" : {
235
+ "FirehoseCidrBlock" : " 13.232.67.32/27"
236
+ },
237
+ "ap-south-2" : {
238
+ "FirehoseCidrBlock" : " 18.60.192.128/27"
239
+ },
240
+ "ap-southeast-1" : {
241
+ "FirehoseCidrBlock" : " 13.228.64.192/27"
242
+ },
243
+ "ap-southeast-2" : {
244
+ "FirehoseCidrBlock" : " 13.210.67.224/27"
245
+ },
246
+ "ap-southeast-3" : {
247
+ "FirehoseCidrBlock" : " 108.136.221.64/27"
248
+ },
249
+ "ap-southeast-4" : {
250
+ "FirehoseCidrBlock" : " 16.50.161.128/27"
251
+ },
252
+ "ca-central-1" : {
253
+ "FirehoseCidrBlock" : " 35.183.92.128/27"
254
+ },
255
+ "ca-west-1" : {
256
+ "FirehoseCidrBlock" : " 40.176.98.192/27"
257
+ },
258
+ "cn-north-1" : {
259
+ "FirehoseCidrBlock" : " 52.81.151.32/27"
260
+ },
261
+ "cn-northwest-1" : {
262
+ "FirehoseCidrBlock" : " 161.189.23.64/27"
263
+ },
264
+ "eu-central-1" : {
265
+ "FirehoseCidrBlock" : " 35.158.127.160/27"
266
+ },
267
+ "eu-central-2" : {
268
+ "FirehoseCidrBlock" : " 16.62.183.32/27"
269
+ },
270
+ "eu-north-1" : {
271
+ "FirehoseCidrBlock" : " 13.53.63.224/27"
272
+ },
273
+ "eu-south-1" : {
274
+ "FirehoseCidrBlock" : " 15.161.135.128/27"
275
+ },
276
+ "eu-south-2" : {
277
+ "FirehoseCidrBlock" : " 18.100.71.96/27"
278
+ },
279
+ "eu-west-1" : {
280
+ "FirehoseCidrBlock" : " 52.19.239.192/27"
281
+ },
282
+ "eu-west-2" : {
283
+ "FirehoseCidrBlock" : " 18.130.1.96/27"
284
+ },
285
+ "eu-west-3" : {
286
+ "FirehoseCidrBlock" : " 35.180.1.96/27"
287
+ },
288
+ "il-central-1" : {
289
+ "FirehoseCidrBlock" : " 51.16.102.0/27"
290
+ },
291
+ "me-central-1" : {
292
+ "FirehoseCidrBlock" : " 3.28.159.32/27"
293
+ },
294
+ "me-south-1" : {
295
+ "FirehoseCidrBlock" : " 15.185.91.0/27"
296
+ },
297
+ "sa-east-1" : {
298
+ "FirehoseCidrBlock" : " 18.228.1.128/27"
299
+ },
300
+ "us-east-1" : {
301
+ "FirehoseCidrBlock" : " 52.70.63.192/27"
302
+ },
303
+ "us-east-2" : {
304
+ "FirehoseCidrBlock" : " 13.58.135.96/27"
305
+ },
306
+ "us-gov-east-1" : {
307
+ "FirehoseCidrBlock" : " 18.253.138.96/27"
308
+ },
309
+ "us-gov-west-1" : {
310
+ "FirehoseCidrBlock" : " 52.61.204.160/27"
311
+ },
312
+ "us-west-1" : {
313
+ "FirehoseCidrBlock" : " 13.57.135.192/27"
314
+ },
315
+ "us-west-2" : {
316
+ "FirehoseCidrBlock" : " 52.89.255.224/27"
317
+ }
318
+ }
319
+ },
320
+ "Parameters" : {
321
+ "BootstrapVersion" : {
322
+ "Type" : " AWS::SSM::Parameter::Value<String>" ,
323
+ "Default" : " /cdk-bootstrap/hnb659fds/version" ,
324
+ "Description" : " Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
325
+ }
326
+ },
327
+ "Rules" : {
328
+ "CheckBootstrapVersion" : {
329
+ "Assertions" : [
330
+ {
331
+ "Assert" : {
332
+ "Fn::Not" : [
333
+ {
334
+ "Fn::Contains" : [
335
+ [
336
+ " 1" ,
337
+ " 2" ,
338
+ " 3" ,
339
+ " 4" ,
340
+ " 5"
341
+ ],
342
+ {
343
+ "Ref" : " BootstrapVersion"
344
+ }
345
+ ]
346
+ }
347
+ ]
348
+ },
349
+ "AssertDescription" : " CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
350
+ }
351
+ ]
352
+ }
353
+ }
354
+ }
0 commit comments