Creating a new resource aws-redshiftserverless-endpointaccess for CFN Redshift Serverless.

aws-redshiftserverless-endpointaccess/.gitignore

@@ -0,0 +1,23 @@
+# macOS
+.DS_Store
+._*
+
+# Maven outputs
+.classpath
+
+# IntelliJ
+*.iml
+.idea
+out.java
+out/
+.settings
+.project
+
+# auto-generated files
+target/
+
+# our logs
+rpdk.log*
+
+# contains credentials
+sam-tests/

aws-redshiftserverless-endpointaccess/.rpdk-config

@@ -0,0 +1,28 @@
+{
+    "artifact_type": "RESOURCE",
+    "typeName": "AWS::RedshiftServerless::EndpointAccess",
+    "language": "java",
+    "runtime": "java8",
+    "entrypoint": "software.amazon.redshiftserverless.endpointaccess.HandlerWrapper::handleRequest",
+    "testEntrypoint": "software.amazon.redshiftserverless.endpointaccess.HandlerWrapper::testEntrypoint",
+    "settings": {
+        "version": false,
+        "subparser_name": null,
+        "verbose": 0,
+        "force": false,
+        "type_name": null,
+        "artifact_type": null,
+        "endpoint_url": null,
+        "region": null,
+        "target_schemas": [],
+        "namespace": [
+            "software",
+            "amazon",
+            "redshiftserverless",
+            "endpointaccess"
+        ],
+        "codegen_template_path": "guided_aws",
+        "protocolVersion": "2.0.0"
+    },
+    "executableEntrypoint": "software.amazon.redshiftserverless.endpointaccess.HandlerWrapperExecutable"
+}

aws-redshiftserverless-endpointaccess/README.md

@@ -0,0 +1,12 @@
+# AWS::RedshiftServerless::EndpointAccess
+
+Congratulations on starting development! Next steps:
+
+1. Write the JSON schema describing your resource, `aws-redshiftserverless-endpointaccess.json`
+1. Implement your resource handlers.
+
+The RPDK will automatically generate the correct resource model from the schema whenever the project is built via Maven. You can also do this manually with the following command: `cfn generate`.
+
+> Please don't modify files under `target/generated-sources/rpdk`, as they will be automatically overwritten.
+
+The code uses [Lombok](https://projectlombok.org/), and [you may have to install IDE integrations](https://projectlombok.org/setup/overview) to enable auto-complete for Lombok-annotated classes.

aws-redshiftserverless-endpointaccess/aws-redshiftserverless-endpointaccess.json

@@ -0,0 +1,221 @@
+{
+    "typeName": "AWS::RedshiftServerless::EndpointAccess",
+    "description": "Resource schema for a Redshift Serverless managed VPC endpoint.",
+    "sourceUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-redshift-serverless",
+    "definitions": {
+        "VpcSecurityGroupMembership": {
+            "description": "Describes the members of a VPC security group associated with the workgroup.",
+            "type": "object",
+            "properties": {
+                "VpcSecurityGroupId": {
+                    "type": "string",
+                    "description": "The identifier of the VPC security group."
+                },
+                "Status": {
+                    "type": "string",
+                    "description": "The status of the VPC security group."
+                }
+            },
+            "additionalProperties": false
+        },
+        "NetworkInterface": {
+            "description": "Describes a network interface.",
+            "type": "object",
+            "properties": {
+                "NetworkInterfaceId": {
+                    "type": "string",
+                    "description": "The network interface identifier."
+                },
+                "SubnetId": {
+                    "type": "string",
+                    "description": "The subnet identifier."
+                },
+                "PrivateIpAddress": {
+                    "type": "string",
+                    "description": "The IPv4 address of the network interface within the subnet."
+                },
+                "AvailabilityZone": {
+                    "type": "string",
+                    "description": "The Availability Zone."
+                }
+            },
+            "additionalProperties": false
+        }
+    },
+    "properties": {
+        "EndpointName": {
+            "description": "The name of the endpoint.",
+            "type": "string",
+            "pattern": "^(?=^[a-z][a-z0-9]*(-[a-z0-9]+)*$).{1,30}$"
+        },
+        "EndpointStatus": {
+            "description": "The status of the VPC endpoint.",
+            "type": "string"
+        },
+        "WorkgroupName": {
+            "description": "The name of the workgroup.",
+            "type": "string",
+            "pattern": "^(?=^[a-z0-9-]+$).{3,64}$",
+            "maxLength": 64,
+            "minLength": 3
+        },
+        "EndpointCreateTime": {
+            "description": "The time (UTC) that the endpoint was created.",
+            "type": "string"
+        },
+        "Port": {
+            "description": "The port number on which Amazon Redshift Serverless accepts incoming connections.",
+            "type": "integer"
+        },
+        "Address": {
+            "description": "The DNS address of the endpoint.",
+            "type": "string"
+        },
+        "SubnetIds": {
+            "description": "The unique identifier of subnets where Amazon Redshift Serverless choose to deploy the VPC endpoint.",
+            "type": "array",
+            "items": {
+                "type": "string",
+                "pattern": "^sg-[0-9a-fA-F]{8,}$",
+                "maxLength": 255,
+                "minLength": 0
+            },
+            "insertionOrder": false
+        },
+        "VpcSecurityGroups": {
+            "description": "A list of Virtual Private Cloud (VPC) security groups to be associated with the endpoint.",
+            "type": "array",
+            "items": {
+                "$ref": "#/definitions/VpcSecurityGroupMembership"
+            },
+            "insertionOrder": false
+        },
+        "VpcEndpoint": {
+            "description": "The connection endpoint for connecting to Amazon Redshift Serverless.",
+            "type": "object",
+            "properties": {
+                "VpcEndpointId": {
+                    "type": "string",
+                    "description": "The connection endpoint ID for connecting to Amazon Redshift Serverless."
+                },
+                "VpcId": {
+                    "type": "string",
+                    "description": "The VPC identifier that the endpoint is associated with."
+                },
+                "NetworkInterfaces": {
+                    "type": "array",
+                    "description": "One or more network interfaces of the endpoint. Also known as an interface endpoint.",
+                    "items": {
+                        "$ref": "#/definitions/NetworkInterface"
+                    },
+                    "insertionOrder": false
+                }
+            },
+            "additionalProperties": false
+        },
+        "EndpointArn": {
+            "description": "The Amazon Resource Name (ARN) of the VPC endpoint.",
+            "type": "string"
+        },
+        "OwnerAccount": {
+            "description": "Account Id of the resource owner",
+            "type": "string"
+        },
+        "VpcSecurityGroupIds": {
+            "description": "A list of VPC security group IDs to associate with the workgroup.",
+            "type": "array",
+            "insertionOrder": false,
+            "items": {
+                "type": "string",
+                "pattern": "^sg-[0-9a-fA-F]{8,}$",
+                "maxLength": 255,
+                "minLength": 0
+            }
+        },
+        "VpcId": {
+            "type": "string"
+        }
+    },
+    "tagging": {
+        "taggable": false
+    },
+    "additionalProperties": false,
+    "required": [
+        "EndpointName"
+    ],
+    "primaryIdentifier": [
+        "/properties/EndpointName"
+    ],
+    "createOnlyProperties": [
+        "/properties/EndpointName"
+    ],
+    "readOnlyProperties": [
+        "/properties/Address",
+        "/properties/EndpointStatus",
+        "/properties/EndpointCreateTime",
+        "/properties/Port",
+        "/properties/VpcSecurityGroups",
+        "/properties/VpcEndpoint",
+        "/properties/EndpointArn"
+    ],
+    "handlers": {
+        "create": {
+            "permissions": [
+                "redshift-serverless:CreateEndpointAccess",
+                "ec2:CreateClientVpnEndpoint",
+                "ec2:DescribeVpcAttribute",
+                "ec2:DescribeSecurityGroups",
+                "ec2:DescribeAddresses",
+                "ec2:DescribeInternetGateways",
+                "ec2:DescribeSubnets"
+            ],
+            "timeoutInMinutes": 60
+        },
+        "read": {
+            "permissions": [
+                "redshift-serverless:GetEndpointAccess",
+                "ec2:DescribeClientVpnEndpoints",
+                "ec2:DescribeVpcAttribute",
+                "ec2:DescribeSecurityGroups",
+                "ec2:DescribeAddresses",
+                "ec2:DescribeInternetGateways",
+                "ec2:DescribeSubnets"
+            ]
+        },
+        "update": {
+            "permissions": [
+                "redshift-serverless:UpdateEndpointAccess",
+                "ec2:ModifyClientVpnEndpoint",
+                "ec2:DescribeVpcAttribute",
+                "ec2:DescribeSecurityGroups",
+                "ec2:DescribeAddresses",
+                "ec2:DescribeInternetGateways",
+                "ec2:DescribeSubnets"
+            ],
+            "timeoutInMinutes": 60
+        },
+        "delete": {
+            "permissions": [
+                "redshift-serverless:DeleteEndpointAccess",
+                "ec2:DeleteClientVpnEndpoint",
+                "ec2:DescribeVpcAttribute",
+                "ec2:DescribeSecurityGroups",
+                "ec2:DescribeAddresses",
+                "ec2:DescribeInternetGateways",
+                "ec2:DescribeSubnets"
+            ],
+            "timeoutInMinutes": 60
+        },
+        "list": {
+            "permissions": [
+                "redshift-serverless:ListEndpointAccess",
+                "ec2:DescribeClientVpnEndpoints",
+                "ec2:DescribeVpcAttribute",
+                "ec2:DescribeSecurityGroups",
+                "ec2:DescribeAddresses",
+                "ec2:DescribeInternetGateways",
+                "ec2:DescribeSubnets"
+            ]
+        }
+    }
+}