@aws-cdk/aws-glue-alpha 2.268.0-alpha.0 → 2.269.0-alpha.0

package/.jsii

@@ -8,7 +8,7 @@
     "url": "https://aws.amazon.com"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.268.0",
+    "aws-cdk-lib": "^2.269.0",
     "constructs": "^10.5.0"
   },
   "dependencyClosure": {
@@ -3262,6 +3262,19 @@
             }
           }
         },
+        "aws-cdk-lib.aws_pricingplanmanager": {
+          "targets": {
+            "dotnet": {
+              "namespace": "Amazon.CDK.AWS.PricingPlanManager"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.services.pricingplanmanager"
+            },
+            "python": {
+              "module": "aws_cdk.aws_pricingplanmanager"
+            }
+          }
+        },
         "aws-cdk-lib.aws_proton": {
           "targets": {
             "dotnet": {
@@ -8095,6 +8108,22 @@
             }
           }
         },
+        "aws-cdk-lib.interfaces.aws_pricingplanmanager": {
+          "targets": {
+            "dotnet": {
+              "namespace": "Amazon.CDK.Interfaces.PricingPlanManager"
+            },
+            "go": {
+              "packageName": "interfacesawspricingplanmanager"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.interfaces.pricingplanmanager"
+            },
+            "python": {
+              "module": "aws_cdk.interfaces.aws_pricingplanmanager"
+            }
+          }
+        },
         "aws-cdk-lib.interfaces.aws_proton": {
           "targets": {
             "dotnet": {
@@ -9583,7 +9612,7 @@
   },
   "name": "@aws-cdk/aws-glue-alpha",
   "readme": {
-    "markdown": "# AWS Glue Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nThis module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.\n\n## README\n\n[AWS Glue](https://aws.amazon.com/glue/) is a serverless data integration\nservice that makes it easier to discover, prepare, move, and integrate data\nfrom multiple sources for analytics, machine learning (ML), and application\ndevelopment.\n\nThe Glue L2 construct has convenience methods working backwards from common\nuse cases and sets required parameters to defaults that align with recommended\nbest practices for each job type. It also provides customers with a balance\nbetween flexibility via optional parameter overrides, and opinionated\ninterfaces that discouraging anti-patterns, resulting in reduced time to develop\nand deploy new resources.\n\n### References\n\n* [Glue Launch Announcement](https://aws.amazon.com/blogs/aws/launch-aws-glue-now-generally-available/)\n* [Glue Documentation](https://docs.aws.amazon.com/glue/index.html)\n* [Glue L1 (CloudFormation) Constructs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Glue.html)\n* Prior version of the [@aws-cdk/aws-glue-alpha module](https://github.com/aws/aws-cdk/blob/v2.51.1/packages/%40aws-cdk/aws-glue/README.md)\n\n## Create a Glue Job\n\nA Job encapsulates a script that connects to data sources, processes\nthem, and then writes output to a data target. There are four types of Glue\nJobs: Spark (ETL and Streaming), Python Shell, and Flex Jobs. Most\nof the required parameters for these jobs are common across all types,\nbut there are a few differences depending on the languages supported\nand features provided by each type. For all job types, the L2 defaults\nto AWS best practice recommendations, such as:\n\n* Use of Secrets Manager for Connection JDBC strings\n* Glue job autoscaling\n* Default parameter values for Glue job creation\n\nThis iteration of the L2 construct introduces breaking changes to\nthe existing glue-alpha-module, but these changes streamline the developer\nexperience, introduce new constants for defaults, and replacing synth-time\nvalidations with interface contracts for enforcement of the parameter combinations\nthat Glue supports. As an opinionated construct, the Glue L2 construct does\nnot allow developers to create resources that use non-current versions\nof Glue or deprecated language dependencies (e.g. deprecated versions of Python).\nAs always, L1s allow you to specify a wider range of parameters if you need\nor want to use alternative configurations.\n\nOptional and required parameters for each job are enforced via interface\nrather than validation; see [Glue's public documentation](https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api.html)\nfor more granular details.\n\n### Spark Jobs\n\n#### ETL Jobs\n\nETL jobs support pySpark and Scala languages, for which there are separate but\nsimilar constructors. ETL jobs default to the G1 worker type, but you can\noverride this default with other supported worker type values (G1, G2, G4\nand G8). ETL jobs defaults to Glue version 4.0, which you can override to 3.0.\nThe following ETL features are enabled by default:\n`—enable-metrics, —enable-continuous-cloudwatch-log.`\nThe Spark UI (`—enable-spark-ui`) is off by default; enable it by setting the\n`sparkUI` prop.\nYou can find more details about version, worker type and other features in\n[Glue's public documentation](https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-job.html).\n\nReference the pyspark-etl-jobs.test.ts and scalaspark-etl-jobs.test.ts unit tests\nfor examples of required-only and optional job parameters when creating these\ntypes of jobs.\n\nFor the sake of brevity, examples are shown using the pySpark job variety.\n\nExample with only required parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkEtlJob(stack, 'PySparkETLJob', {\n  role,\n  script,\n  jobName: 'PySparkETLJob',\n});\n```\n\nExample with optional override parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkEtlJob(stack, 'PySparkETLJob', {\n  jobName: 'PySparkETLJobCustomName',\n  description: 'This is a description',\n  role,\n  script,\n  glueVersion: glue.GlueVersion.V5_1,\n  continuousLogging: { enabled: false },\n  workerConfiguration: {\n    workerType: glue.WorkerType.G_2X,\n    numberOfWorkers: 2,\n  },\n  maxConcurrentRuns: 100,\n  timeout: cdk.Duration.hours(2),\n  connections: [glue.Connection.fromConnectionName(stack, 'Connection', 'connectionName')],\n  securityConfiguration: glue.SecurityConfiguration.fromSecurityConfigurationName(stack, 'SecurityConfig', 'securityConfigName'),\n  tags: {\n    FirstTagName: 'FirstTagValue',\n    SecondTagName: 'SecondTagValue',\n    XTagName: 'XTagValue',\n  },\n  maxRetries: 2,\n});\n```\n\n#### Streaming Jobs\n\nStreaming jobs are similar to ETL jobs, except that they perform ETL on data\nstreams using the Apache Spark Structured Streaming framework. Some Spark\njob features are not available to Streaming ETL jobs. They support Scala\nand pySpark languages. PySpark streaming jobs run on Python 3. It\ndefaults to the G1 worker type and Glue 4.0, both of which you can override.\nThe following best practice features are enabled by default:\n`—enable-metrics, —enable-continuous-cloudwatch-log`.\nThe Spark UI (`—enable-spark-ui`) is off by default; enable it by setting the\n`sparkUI` prop.\n\nReference the pyspark-streaming-jobs.test.ts and scalaspark-streaming-jobs.test.ts\nunit tests for examples of required-only and optional job parameters when creating\nthese types of jobs.\n\nExample with only required parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkStreamingJob(stack, 'ImportedJob', { role, script });\n```\n\nExample with optional override parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkStreamingJob(stack, 'PySparkStreamingJob', {\n  jobName: 'PySparkStreamingJobCustomName',\n  description: 'This is a description',\n  role,\n  script,\n  glueVersion: glue.GlueVersion.V5_1,\n  continuousLogging: { enabled: false },\n  workerConfiguration: {\n    workerType: glue.WorkerType.G_2X,\n    numberOfWorkers: 2,\n  },\n  maxConcurrentRuns: 100,\n  timeout: cdk.Duration.hours(2),\n  connections: [glue.Connection.fromConnectionName(stack, 'Connection', 'connectionName')],\n  securityConfiguration: glue.SecurityConfiguration.fromSecurityConfigurationName(stack, 'SecurityConfig', 'securityConfigName'),\n  tags: {\n    FirstTagName: 'FirstTagValue',\n    SecondTagName: 'SecondTagValue',\n    XTagName: 'XTagValue',\n  },\n  maxRetries: 2,\n});\n```\n\n#### Flex Jobs\n\nThe flexible execution class is appropriate for non-urgent jobs such as\npre-production jobs, testing, and one-time data loads. Flexible jobs default\nto Glue version 5.0 and worker type `G_1X`. The following best practice\nfeatures are enabled by default:\n`—enable-metrics, —enable-continuous-cloudwatch-log`\nThe Spark UI (`—enable-spark-ui`) is off by default; enable it by setting the\n`sparkUI` prop.\n\nReference the pyspark-flex-etl-jobs.test.ts and scalaspark-flex-etl-jobs.test.ts\nunit tests for examples of required-only and optional job parameters when creating\nthese types of jobs.\n\nExample with only required parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkFlexEtlJob(stack, 'ImportedJob', { role, script });\n```\n\nExample with optional override parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkFlexEtlJob(stack, 'pySparkFlexEtlJob', {\n  jobName: 'pySparkFlexEtlJob',\n  description: 'This is a description',\n  role,\n  script,\n  glueVersion: glue.GlueVersion.V5_1,\n  continuousLogging: { enabled: false },\n  workerConfiguration: {\n    workerType: glue.WorkerType.G_2X,\n    numberOfWorkers: 2,\n  },\n  maxConcurrentRuns: 100,\n  timeout: cdk.Duration.hours(2),\n  connections: [glue.Connection.fromConnectionName(stack, 'Connection', 'connectionName')],\n  securityConfiguration: glue.SecurityConfiguration.fromSecurityConfigurationName(stack, 'SecurityConfig', 'securityConfigName'),\n  tags: {\n    FirstTagName: 'FirstTagValue',\n    SecondTagName: 'SecondTagValue',\n    XTagName: 'XTagValue',\n  },\n  maxRetries: 2,\n});\n```\n\n### Python Shell Jobs\n\nPython shell jobs support a Python version that depends on the AWS Glue\nversion you use. These can be used to schedule and run tasks that don't\nrequire an Apache Spark environment. Python shell jobs default to\nPython 3.9 and a MaxCapacity of `0.0625`. Python 3.9 supports pre-loaded\nanalytics libraries using the `library-set=analytics` flag, which is\nenabled by default.\n\nReference the pyspark-shell-job.test.ts unit tests for examples of\nrequired-only and optional job parameters when creating these types of jobs.\n\nExample with only required parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PythonShellJob(stack, 'ImportedJob', { role, script });\n```\n\nExample with optional override parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\ndeclare const extraPythonFile: glue.Code;\nnew glue.PythonShellJob(stack, 'PythonShellJob', {\n  jobName: 'PythonShellJobCustomName',\n  description: 'This is a description',\n  pythonVersion: glue.PythonVersion.THREE_NINE,\n  maxCapacity: glue.MaxCapacity.DPU_1,\n  role,\n  script,\n  extraPythonFiles: [extraPythonFile],\n  glueVersion: glue.GlueVersion.V3_0,\n  continuousLogging: { enabled: false },\n  maxConcurrentRuns: 100,\n  timeout: cdk.Duration.hours(2),\n  connections: [glue.Connection.fromConnectionName(stack, 'Connection', 'connectionName')],\n  securityConfiguration: glue.SecurityConfiguration.fromSecurityConfigurationName(stack, 'SecurityConfig', 'securityConfigName'),\n  tags: {\n    FirstTagName: 'FirstTagValue',\n    SecondTagName: 'SecondTagValue',\n    XTagName: 'XTagValue',\n  },\n  maxRetries: 2,\n});\n```\n\n### Ray Jobs\n\n> **⚠️ DEPRECATED:** AWS Glue for Ray is closed to new customers as of April 30, 2026 and is in maintenance mode.\n> Migrate to [Amazon EKS with KubeRay Operator](https://docs.aws.amazon.com/glue/latest/dg/awsglue-ray-jobs-availability-change.html).\n\nThe `RayJob` construct, `Runtime.RAY_TWO_FOUR`, and `JobType.RAY` are deprecated and will be removed in a future release.\n\n### Metrics Control\n\nBy default, Glue jobs enable CloudWatch metrics (`--enable-metrics`) and observability metrics (`--enable-observability-metrics`) for monitoring and debugging. You can disable these metrics to reduce CloudWatch costs:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Disable both metrics for cost optimization\nnew glue.PySparkEtlJob(stack, 'CostOptimizedJob', {\n  role,\n  script,\n  enableMetrics: false,\n  enableObservabilityMetrics: false,\n});\n\n// Selective control - keep observability, disable profiling\nnew glue.PySparkEtlJob(stack, 'SelectiveJob', {\n  role,\n  script,\n  enableMetrics: false,\n  // enableObservabilityMetrics defaults to true\n});\n```\n\nThis feature is available for all Spark job types (ETL, Streaming, Flex).\n\n### Enable Job Run Queuing\n\nAWS Glue job queuing monitors your account level quotas and limits. If quotas or limits are insufficient to start a Glue job run, AWS Glue will automatically queue the job and wait for limits to free up. Once limits become available, AWS Glue will retry the job run. Glue jobs will queue for limits like max concurrent job runs per account, max concurrent Data Processing Units (DPU), and resource unavailable due to IP address exhaustion in Amazon Virtual Private Cloud (Amazon VPC).\n\nEnable job run queuing by setting the `jobRunQueuingEnabled` property to `true`.\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkEtlJob(stack, 'PySparkETLJob', {\n  role,\n  script,\n  jobName: 'PySparkETLJob',\n  jobRunQueuingEnabled: true\n});\n```\n\n### Uploading scripts from the CDK app repository to S3\n\nSimilar to other L2 constructs, the Glue L2 automates uploading local\nscripts to S3. Use `glue.Code.fromAsset(path)` to point at a script in your\nlocal file structure; it is uploaded to the CDK-managed asset bucket. To\nreference a script that already exists in S3, use\n`glue.Code.fromBucket(bucket, key)`, which performs no upload. A `script` is\nrequired for every job.\n\nReference the unit tests for examples of repo and S3 code target examples.\n\n### Workflow Triggers\n\nYou can use Glue workflows to create and visualize complex\nextract, transform, and load (ETL) activities involving multiple crawlers,\njobs, and triggers. Standalone triggers are an anti-pattern, so you must\ncreate triggers from within a workflow using the L2 construct.\n\nWithin a workflow object, there are functions to create different\ntypes of triggers with actions and predicates. You add triggers to the\nworkflow, and each trigger references the jobs or crawlers it runs as its\nactions.\n\n`startOnCreation` applies to scheduled triggers (and, via\n`ConditionalTriggerOptions`, conditional triggers) only. It defaults to `false`,\nbut you can override it if you prefer for your trigger to start on creation.\n\nReference the workflow-triggers.test.ts unit tests for examples of creating\nworkflows and triggers.\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [{ job }],\n});\n```\n\n#### **1. On-Demand Triggers**\n\nOn-demand triggers can start glue jobs or crawlers. This construct provides\nconvenience functions to create on-demand crawler or job triggers. The constructor\ntakes an optional description parameter, but abstracts the requirement of an\nactions list using the job or crawler objects using conditional types.\n\n#### **2. Scheduled Triggers**\n\nYou can create scheduled triggers using cron expressions. This construct\nprovides daily and weekly convenience functions,\nas well as a custom function that allows you to create your own\ncustom timing using the [existing event Schedule class](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_events.Schedule.html)\nwithout having to build your own cron expressions. The L2 extracts\nthe expression that Glue requires from the Schedule object. The constructor\ntakes an optional description and a list of jobs or crawlers as actions.\n\n#### **3. Notify  Event Triggers**\n\nThere are two types of notify event triggers: batching and non-batching.\nFor batching triggers, you must specify `BatchSize`. For non-batching\ntriggers, `BatchSize` defaults to 1. For both triggers, `BatchWindow`\ndefaults to 900 seconds, but you can override the window to align with\nyour workload's requirements.\n\n#### **4. Conditional Triggers**\n\nConditional triggers have a predicate and actions associated with them.\nThe trigger actions are executed when the predicateCondition is true.\n\n### Connection Properties\n\nA `Connection` allows Glue jobs, crawlers and development endpoints to access\ncertain types of data stores.\n\n* **Secrets Management**\n    Manage JDBC connection credentials in Secrets Manager and pass the secret\n    to the connection via the `secret` property (see the example below), rather\n    than embedding credentials in `properties`.\n\n* **Networking - the CDK determines the best fit subnet for Glue connection\nconfiguration**\n    You can specify the exact subnet of the Connection when it's defined, but\n    you are not required to. Instead, you can provide a `vpc` and, optionally, a\n    `vpcSubnets` selection, and the L2 leverages the existing\n    [EC2 Subnet Selection](https://docs.aws.amazon.com/cdk/api/v2/python/aws_cdk.aws_ec2/SubnetSelection.html)\n    library to make the best choice selection for the subnet. A Glue connection\n    targets a single subnet, so the first subnet of the selection is used.\n    `subnet` and `vpc` are mutually exclusive.\n\nPin the connection to a specific subnet:\n\n```ts\ndeclare const securityGroup: ec2.SecurityGroup;\ndeclare const subnet: ec2.Subnet;\nnew glue.Connection(this, 'MyConnection', {\n  type: glue.ConnectionType.NETWORK,\n  // The security groups granting AWS Glue inbound access to the data source within the VPC\n  securityGroups: [securityGroup],\n  // The VPC subnet which contains the data source\n  subnet,\n});\n```\n\nOr let the CDK select a subnet from a VPC:\n\n```ts\ndeclare const securityGroup: ec2.SecurityGroup;\ndeclare const vpc: ec2.Vpc;\nnew glue.Connection(this, 'MyConnection', {\n  type: glue.ConnectionType.NETWORK,\n  securityGroups: [securityGroup],\n  vpc,\n  // Optional - defaults to private subnets\n  vpcSubnets: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS },\n});\n```\n\nFor RDS `Connection` by JDBC, it is recommended to manage credentials using AWS Secrets Manager. Pass the secret via the `secret` property: Glue reads the credentials at runtime through the connection's `SECRET_ID`, so the secret value never enters the template. Note that in this case, the subnet must have a route to the AWS Secrets Manager VPC endpoint or to the AWS Secrets Manager endpoint through a NAT gateway.\n\n```ts\ndeclare const securityGroup: ec2.SecurityGroup;\ndeclare const subnet: ec2.Subnet;\ndeclare const db: rds.DatabaseCluster;\nnew glue.Connection(this, \"RdsConnection\", {\n  type: glue.ConnectionType.JDBC,\n  securityGroups: [securityGroup],\n  subnet,\n  secret: db.secret,\n  properties: {\n    JDBC_CONNECTION_URL: `jdbc:mysql://${db.clusterEndpoint.socketAddress}/databasename`,\n    JDBC_ENFORCE_SSL: \"false\",\n  },\n});\n```\n\nPrefer the `secret` property over placing credentials in `properties`. Connection\n`properties` are emitted verbatim into the CloudFormation template, so any\ncredential placed there in plaintext is stored in plaintext in the template,\n`cdk.out`, and source control. If a property key looks like a credential (for\nexample `PASSWORD`, `SECRET`, or `TOKEN`) and holds a plaintext literal, the\nconstruct emits a synthesis-time warning.\n\nIf you need to use a connection type that doesn't exist as a static member on `ConnectionType`, you can instantiate a `ConnectionType` object, e.g: `new glue.ConnectionType('NEW_TYPE')`.\n\nSee [Adding a Connection to Your Data Store](https://docs.aws.amazon.com/glue/latest/dg/populate-add-connection.html) and [Connection Structure](https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-connections.html#aws-glue-api-catalog-connections-Connection) documentation for more information on the supported data stores and their configurations.\n\n## SecurityConfiguration\n\nA `SecurityConfiguration` is a set of security properties that can be used by AWS Glue to encrypt data at rest.\n\nEach encryption config is built with a factory that pairs the encryption mode\nwith its key, so illegal combinations (such as an S3-managed encryption carrying\na KMS key) cannot be expressed:\n\n```ts\nnew glue.SecurityConfiguration(this, 'MySecurityConfiguration', {\n  cloudWatchEncryption: glue.CloudWatchEncryption.kms(),\n  jobBookmarksEncryption: glue.JobBookmarksEncryption.clientSideKms(),\n  s3Encryption: glue.S3Encryption.kms(),\n});\n```\n\nBy default, a shared KMS key is created for use with the encryption configurations that require one. You can also supply your own key to any factory, for example, for CloudWatch encryption:\n\n```ts\ndeclare const key: kms.Key;\nnew glue.SecurityConfiguration(this, 'MySecurityConfiguration', {\n  cloudWatchEncryption: glue.CloudWatchEncryption.kms(key),\n});\n```\n\nUse `glue.S3Encryption.s3Managed()` for S3-managed (SSE-S3) encryption, which takes no key.\n\nSee [documentation](https://docs.aws.amazon.com/glue/latest/dg/encryption-security-configuration.html) for more info for Glue encrypting data written by Crawlers, Jobs, and Development Endpoints.\n\n## Catalog\n\nThe Glue Data Catalog is a persistent metadata store for your data assets. Every\naccount has an implicit, account-wide catalog that always exists, and you can also\ncreate additional catalogs as `AWS::Glue::Catalog` resources (for example, to\nfederate to another metastore).\n\nA catalog's encryption is fixed when the catalog is created: a catalog either\ncarries encryption settings or it does not. This keeps its configuration easy to\nreason about — there are no mutation methods that change encryption after the fact.\n\n### The account-wide catalog\n\nUse `Catalog.forAccount(scope)` to obtain the implicit account catalog. It is not\na CloudFormation resource — it always exists. Repeated calls within the same stack\nreturn the same instance:\n\n```ts\nconst catalog = glue.Catalog.forAccount(this);\n```\n\nTo configure Data Catalog encryption for the account, use\n`Catalog.encryptAccount(scope, options)`:\n\n```ts\ndeclare const key: kms.Key;\nglue.Catalog.encryptAccount(this, {\n  encryptionAtRest: glue.DataCatalogEncryptionAtRest.kms(key),\n});\n```\n\nBecause encryption is fixed at construction, `encryptAccount` must be called\n*before* the account catalog is first used in the stack — before any\n`Catalog.forAccount(this)` call, and before any `Database` that uses the account\ncatalog. Calling it after the account catalog has been materialized throws.\n\nThe account catalog's encryption is an account- and region-wide setting, managed\nthrough the singleton `PutDataCatalogEncryptionSettings` API. Configure it in\nexactly one stack. Configuring it from multiple stacks in the same account and\nregion makes those stacks overwrite one another at deploy time, and the result is\norder-dependent. Unlike duplicate settings within a single stack (which\nCloudFormation rejects), this cross-stack conflict is not caught at synthesis\ntime, because each stack synthesizes to its own template.\n\n### Creating a catalog\n\nTo create a new catalog resource, use the `Catalog` constructor. Encryption is\nconfigured through the `encryptionAtRest` and `connectionPasswordEncryption` props:\n\n```ts\nnew glue.Catalog(this, 'MyCatalog', {\n  catalogName: 'my-catalog',\n  description: 'my catalog description',\n});\n```\n\n### Encryption at rest\n\nConfigure Data Catalog encryption at rest through the `encryptionAtRest` option\n(on `Catalog.encryptAccount` or the `Catalog` constructor).\nIt accepts a `DataCatalogEncryptionAtRest` describing the mode:\n\n```ts\ndeclare const key: kms.Key;\n\n// SSE-KMS with a customer-managed key\nglue.Catalog.encryptAccount(this, {\n  encryptionAtRest: glue.DataCatalogEncryptionAtRest.kms(key),\n});\n\n// SSE-KMS with an AWS-managed key (omit the key)\nnew glue.Catalog(this, 'ManagedKeyCatalog', {\n  catalogName: 'managed-key-catalog',\n  encryptionAtRest: glue.DataCatalogEncryptionAtRest.kms(),\n});\n\n// Disable encryption at rest\nnew glue.Catalog(this, 'PlaintextCatalog', {\n  catalogName: 'plaintext-catalog',\n  encryptionAtRest: glue.DataCatalogEncryptionAtRest.disabled(),\n});\n```\n\nWhen you use `SSE-KMS-WITH-SERVICE-ROLE`, AWS Glue accesses the KMS key through a\nservice role you provide. If you pass a customer-managed key, the role is\nautomatically granted the permissions it needs to encrypt and decrypt catalog data:\n\n```ts\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const key: kms.Key;\ndeclare const role: iam.IRole;\nglue.Catalog.encryptAccount(this, {\n  encryptionAtRest: glue.DataCatalogEncryptionAtRest.kmsWithServiceRole(role, key),\n});\n```\n\nThe customer-managed key, when configured, is exposed on the catalog as\n`encryptionKey` (and the connection-password key as `connectionPasswordKey`), so\nyou can reference it to grant additional access. It is undefined when encryption is\ndisabled or an AWS-managed key is used.\n\n### Connection password encryption\n\nIndependently from encryption at rest, the Data Catalog can encrypt the passwords\nstored in connection properties. Configure it through the\n`connectionPasswordEncryption` option:\n\n```ts\ndeclare const key: kms.Key;\nglue.Catalog.encryptAccount(this, {\n  connectionPasswordEncryption: {\n    kmsKey: key,\n    // Whether GetConnection/GetConnections return the password encrypted (default: true)\n    returnConnectionPasswordEncrypted: true,\n  },\n});\n```\n\nThe two encryption blocks are independent: enabling one does not require the other,\nand each may use a different KMS key. The customer-managed key for connection\npasswords is exposed as `connectionPasswordKey`.\n\n### Importing a catalog\n\nYou can import an existing catalog by ARN or by id. An imported catalog is a pure\nidentity handle — it emits no resources and does not manage the catalog's\nencryption:\n\n```ts\nconst byId = glue.Catalog.fromCatalogId(this, 'ById', 'my-catalog-id');\nconst byArn = glue.Catalog.fromCatalogArn(this, 'ByArn', 'arn:aws:glue:us-east-1:123456789012:catalog/my-catalog-id');\n```\n\nTo manage the Data Catalog encryption of a catalog you did not create in this\nstack, add a `CfnDataCatalogEncryptionSettings` resource targeting its id\ndirectly. Do this from exactly one stack: like the account catalog, a catalog has\na single encryption configuration, so two settings resources targeting the same id\nrace to overwrite one another at deploy time. Within a single stack this is caught\nby CloudFormation template validation (E3019, duplicate primary identifiers);\nacross stacks it is not, since each stack synthesizes to its own template.\n\n```ts\nimport { CfnDataCatalogEncryptionSettings } from 'aws-cdk-lib/aws-glue';\n\nnew CfnDataCatalogEncryptionSettings(this, 'Encryption', {\n  catalogId: 'my-catalog-id',\n  dataCatalogEncryptionSettings: {\n    encryptionAtRest: { catalogEncryptionMode: 'SSE-KMS' },\n  },\n});\n```\n\n## Database\n\nA `Database` is a logical grouping of `Tables` in the Glue Catalog.\n\n```ts\nnew glue.Database(this, 'MyDatabase', {\n  databaseName: 'my_database',\n  description: 'my_database_description',\n});\n```\n\nBecause a database is a container for tables and their metadata, it is retained\nby default when removed from the stack, to avoid accidental data loss. Set\n`removalPolicy` to `RemovalPolicy.DESTROY` to have it deleted instead:\n\n```ts\nimport { RemovalPolicy } from 'aws-cdk-lib';\n\nnew glue.Database(this, 'MyDatabase', {\n  databaseName: 'my_database',\n  removalPolicy: RemovalPolicy.DESTROY,\n});\n```\n\n## Table\n\nA Glue table describes a table of data in S3: its structure (column names and types), location of data (S3 objects with a common prefix in a S3 bucket), and format for the files (Json, Avro, Parquet, etc.):\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }, {\n    name: 'col2',\n    type: glue.Schema.array(glue.Schema.STRING),\n    comment: 'col2 is an array of strings' // comment is optional\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nBy default, a S3 bucket will be created to store the table's data but you can bring your own with `S3TableStorage.fromBucket` and set an `s3Prefix`:\n\n```ts\ndeclare const myBucket: s3.Bucket;\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  storage: glue.S3TableStorage.fromBucket(myBucket),\n  s3Prefix: 'my-table/',\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nGlue tables can be configured to contain user-defined properties, to describe the physical storage of table data, through the `storageParameters` property:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  storageParameters: [\n    glue.StorageParameter.skipHeaderLineCount(1),\n    glue.StorageParameter.compressionType(glue.CompressionType.GZIP),\n    glue.StorageParameter.custom('separatorChar', ',')\n  ],\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nGlue tables can also be configured to contain user-defined table properties through the [`parameters`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-table-tableinput.html#cfn-glue-table-tableinput-parameters) property:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  parameters: {\n    key1: 'val1',\n    key2: 'val2',\n  },\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\n### Partition Keys\n\nTo improve query performance, a table can specify `partitionKeys` on which data is stored and queried separately. For example, you might partition a table by `year` and `month` to optimize queries based on a time window:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'year',\n    type: glue.Schema.SMALL_INT,\n  }, {\n    name: 'month',\n    type: glue.Schema.SMALL_INT,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\n### Partition Indexes\n\nAnother way to improve query performance is to specify partition indexes. If no partition indexes are\npresent on the table, AWS Glue loads all partitions of the table and filters the loaded partitions using\nthe query expression. The query takes more time to run as the number of partitions increase. With an\nindex, the query will try to fetch a subset of the partitions instead of loading all partitions of the\ntable.\n\nThe keys of a partition index must be a subset of the partition keys of the table. You can have a\nmaximum of 3 partition indexes per table. To specify a partition index, you can use the `partitionIndexes`\nproperty:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'year',\n    type: glue.Schema.SMALL_INT,\n  }, {\n    name: 'month',\n    type: glue.Schema.SMALL_INT,\n  }],\n  partitionIndexes: [{\n    indexName: 'my-index', // optional\n    keyNames: ['year'],\n  }], // supply up to 3 indexes\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nAlternatively, you can call the `addPartitionIndex()` function on a table:\n\n```ts\ndeclare const myTable: glue.S3Table;\nmyTable.addPartitionIndex({\n  indexName: 'my-index',\n  keyNames: ['year'],\n});\n```\n\n### Partition Filtering\n\nIf you have a table with a large number of partitions that grows over time, consider using AWS Glue partition indexing and filtering.\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n      name: 'col1',\n      type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n      name: 'year',\n      type: glue.Schema.SMALL_INT,\n  }, {\n      name: 'month',\n      type: glue.Schema.SMALL_INT,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  enablePartitionFiltering: true,\n});\n```\n\n### Partition Projection\n\nPartition projection allows Athena to automatically add new partitions as new data arrives, without requiring `ALTER TABLE ADD PARTITION` statements. This improves query performance and reduces management overhead by eliminating the need to manually manage partition metadata.\n\nFor more information, see the [AWS documentation on partition projection](https://docs.aws.amazon.com/athena/latest/ug/partition-projection.html).\n\n#### INTEGER Projection\n\nFor partition keys with sequential numeric values:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'year',\n    type: glue.Schema.INTEGER,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    year: glue.PartitionProjectionConfiguration.integer({\n      min: 2020,\n      max: 2023,\n      interval: 1,  // optional, defaults to 1\n      digits: 4,    // optional, pads with leading zeros\n    }),\n  },\n});\n```\n\n#### DATE Projection\n\nFor partition keys with date or timestamp values. Supports both fixed dates and relative dates using `NOW`:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      interval: 1,  // optional, defaults to 1\n      intervalUnit: glue.DateIntervalUnit.DAYS,  // optional: YEARS, MONTHS, WEEKS, DAYS, HOURS, MINUTES, SECONDS\n    }),\n  },\n});\n```\n\nYou can also use relative dates with `NOW`:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: 'NOW-3YEARS',\n      max: 'NOW',\n      format: 'yyyy-MM-dd',\n    }),\n  },\n});\n```\n\n#### ENUM Projection\n\nFor partition keys with a known set of values:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'region',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    region: glue.PartitionProjectionConfiguration.enum({\n      values: ['us-east-1', 'us-west-2', 'eu-west-1'],\n    }),\n  },\n});\n```\n\n#### INJECTED Projection\n\nFor custom partition values injected at query time:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'custom',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    custom: glue.PartitionProjectionConfiguration.injected(),\n  },\n});\n```\n\n#### Multiple Partition Projections\n\nYou can configure partition projection for multiple partition keys:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [\n    {\n      name: 'year',\n      type: glue.Schema.INTEGER,\n    },\n    {\n      name: 'month',\n      type: glue.Schema.INTEGER,\n    },\n    {\n      name: 'region',\n      type: glue.Schema.STRING,\n    },\n  ],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    year: glue.PartitionProjectionConfiguration.integer({\n      min: 2020,\n      max: 2023,\n    }),\n    month: glue.PartitionProjectionConfiguration.integer({\n      min: 1,\n      max: 12,\n      digits: 2,\n    }),\n    region: glue.PartitionProjectionConfiguration.enum({\n      values: ['us-east-1', 'us-west-2'],\n    }),\n  },\n});\n```\n\n### Glue Connections\n\nGlue connections allow external data connections to third party databases and data warehouses. However, these connections can also be assigned to Glue Tables, allowing you to query external data sources using the Glue Data Catalog.\n\nWhereas `S3Table` will point to (and if needed, create) a bucket to store the tables' data, `ExternalTable` will point to an existing table in a data source. For example, to create a table in Glue that points to a table in Redshift:\n\n```ts\ndeclare const myConnection: glue.Connection;\ndeclare const myDatabase: glue.Database;\nnew glue.ExternalTable(this, 'MyTable', {\n  connection: myConnection,\n  externalDataLocation: 'default_db_public_example', // A table in Redshift\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\n## Data Quality Ruleset\n\nA `DataQualityRuleset` defines a set of data quality rules — authored in Glue's\nData Quality Definition Language (DQDL) — that are evaluated against a table in\nthe Data Catalog.\n\n```ts\ndeclare const database: glue.IDatabase;\nnew glue.DataQualityRuleset(this, 'MyRuleset', {\n  rulesetName: 'my_ruleset',\n  dqdl: glue.Dqdl.fromString('Rules = [ RowCount > 100, IsComplete \"order_id\" ]'),\n  targetTable: glue.DataQualityTargetTable.fromTableName(database, 'my_table'),\n});\n```\n\nBuild the DQDL document with `Dqdl.fromString(...)`. Glue parses and validates the\nDQDL when the ruleset is deployed; see the\n[DQDL reference](https://docs.aws.amazon.com/glue/latest/dg/dqdl.html) for the\nfull rule syntax.\n\n## [Encryption](https://docs.aws.amazon.com/athena/latest/ug/encryption.html)\n\nWhen the table creates its own S3 bucket (`S3TableStorage.managedBucket`, the default), that bucket enforces SSL: a bucket policy denies any request made over plain HTTP. If you bring your own bucket with `S3TableStorage.fromBucket`, enabling `enforceSSL` on it is your responsibility.\n\nServer-side encryption applies only to a bucket the table manages. Choose it with\n`storage: glue.S3TableStorage.managedBucket(...)`:\n\n* [S3Managed](https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html) - (default) Server side encryption (`SSE-S3`) with an Amazon S3-managed key.\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  storage: glue.S3TableStorage.managedBucket(glue.S3TableEncryption.s3Managed()),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\n* [Kms](https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingKMSEncryption.html) - Server-side encryption (`SSE-KMS`) with an AWS KMS Key managed by the account owner.\n\n```ts\ndeclare const myDatabase: glue.Database;\n// KMS key is created automatically\nnew glue.S3Table(this, 'MyTable', {\n  storage: glue.S3TableStorage.managedBucket(glue.S3TableEncryption.kms()),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n\n// with an explicit KMS key\nnew glue.S3Table(this, 'MyTable', {\n  storage: glue.S3TableStorage.managedBucket(glue.S3TableEncryption.kms(new kms.Key(this, 'MyKey'))),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\n* [KmsManaged](https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingKMSEncryption.html) - Server-side encryption (`SSE-KMS`), like `Kms`, except with an AWS KMS Key managed by the AWS Key Management Service.\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  storage: glue.S3TableStorage.managedBucket(glue.S3TableEncryption.kmsManaged()),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nClient-side encryption ([CSE-KMS](https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html#client-side-encryption-kms-managed-master-key-intro)) is independent of the bucket's server-side encryption and works with either a managed or an existing bucket. Configure it with `clientSideEncryption`:\n\n```ts\ndeclare const myDatabase: glue.Database;\n// KMS key is created automatically\nnew glue.S3Table(this, 'MyTable', {\n  clientSideEncryption: glue.TableClientSideEncryption.kms(),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n\n// with an explicit KMS key\nnew glue.S3Table(this, 'MyTable', {\n  clientSideEncryption: glue.TableClientSideEncryption.kms(new kms.Key(this, 'MyKey')),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nTo store the table's data in an existing bucket, use `glue.S3TableStorage.fromBucket(bucket)`. CDK does not manage that bucket's server-side encryption, so an encryption choice can never be paired with a provided bucket — but client-side encryption still applies.\n\n### Marking table data as encrypted\n\nBoth `S3Table` and `ExternalTable` set the `has_encrypted_data` table parameter, which\nAthena reads when querying client-side (`CSE-KMS`) encrypted datasets. It defaults to `true`.\nSet `hasEncryptedData` to `false` when the underlying data is not encrypted:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  hasEncryptedData: false,\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nDo not set `has_encrypted_data` through the free-form `parameters` map as well - a value\nthere that conflicts with `hasEncryptedData` is rejected at synthesis time.\n\n## Types\n\nA table's schema is a collection of columns, each of which have a `name` and a `type`. Types are recursive structures, consisting of primitive and complex types:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  columns: [{\n    name: 'primitive_column',\n    type: glue.Schema.STRING,\n  }, {\n    name: 'array_column',\n    type: glue.Schema.array(glue.Schema.INTEGER),\n    comment: 'array<integer>',\n  }, {\n    name: 'map_column',\n    type: glue.Schema.map(\n      glue.Schema.STRING,\n      glue.Schema.TIMESTAMP),\n    comment: 'map<string,timestamp>',\n  }, {\n    name: 'struct_column',\n    type: glue.Schema.struct([{\n      name: 'nested_column',\n      type: glue.Schema.DATE,\n      comment: 'nested comment',\n    }]),\n    comment: \"struct<nested_column:date COMMENT 'nested comment'>\",\n  }],\n  // ...\n  database: myDatabase,\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nFor a type the `Schema` factories don't model, use `glue.Schema.custom('...')`, which takes the raw Glue input string.\n\n## Public FAQ\n\n### What are we launching today?\n\nWe’re launching new features to an AWS CDK Glue L2 Construct to provide\nbest-practice defaults and convenience methods to create Glue Jobs, Connections,\nTriggers, Workflows, and the underlying permissions and configuration.\n\n### Why should I use this Construct?\n\nDevelopers should use this Construct to reduce the amount of boilerplate\ncode and complexity each individual has to navigate, and make it easier to\ncreate best-practice Glue resources.\n\n### What’s not in scope?\n\nGlue Crawlers and other resources that are now managed by the AWS LakeFormation\nteam are not in scope for this effort. Developers should use existing methods\nto create these resources, and the new Glue L2 construct assumes they already\nexist as inputs. While best practice is for application and infrastructure code\nto be as close as possible for teams using fully-implemented DevOps mechanisms,\nin practice these ETL scripts are likely managed by a data science team who\nknow Python or Scala and don’t necessarily own or manage their own\ninfrastructure deployments. We want to meet developers where they are, and not\nassume that all of the code resides in the same repository, Developers can\nautomate this themselves via the CDK, however, if they do own both.\n\nValidating Glue version and feature use per AWS region at synth time is also\nnot in scope. AWS’ intention is for all features to eventually be propagated to\nall Global regions, so the complexity involved in creating and updating region-\nspecific configuration to match shifting feature sets does not out-weigh the\nlikelihood that a developer will use this construct to deploy resources to a\nregion without a particular new feature to a region that doesn’t yet support\nit without researching or manually attempting to use that feature before\ndeveloping it via IaC. The developer will, of course, still get feedback from\nthe underlying Glue APIs as CloudFormation deploys the resources similar to the\ncurrent CDK L1 Glue experience.\n"
+    "markdown": "# AWS Glue Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nThis module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.\n\n## README\n\n[AWS Glue](https://aws.amazon.com/glue/) is a serverless data integration\nservice that makes it easier to discover, prepare, move, and integrate data\nfrom multiple sources for analytics, machine learning (ML), and application\ndevelopment.\n\nThe Glue L2 construct has convenience methods working backwards from common\nuse cases and sets required parameters to defaults that align with recommended\nbest practices for each job type. It also provides customers with a balance\nbetween flexibility via optional parameter overrides, and opinionated\ninterfaces that discouraging anti-patterns, resulting in reduced time to develop\nand deploy new resources.\n\n### References\n\n* [Glue Launch Announcement](https://aws.amazon.com/blogs/aws/launch-aws-glue-now-generally-available/)\n* [Glue Documentation](https://docs.aws.amazon.com/glue/index.html)\n* [Glue L1 (CloudFormation) Constructs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Glue.html)\n* Prior version of the [@aws-cdk/aws-glue-alpha module](https://github.com/aws/aws-cdk/blob/v2.51.1/packages/%40aws-cdk/aws-glue/README.md)\n\n## Create a Glue Job\n\nA Job encapsulates a script that connects to data sources, processes\nthem, and then writes output to a data target. There are four types of Glue\nJobs: Spark (ETL and Streaming), Python Shell, and Flex Jobs. Most\nof the required parameters for these jobs are common across all types,\nbut there are a few differences depending on the languages supported\nand features provided by each type. For all job types, the L2 defaults\nto AWS best practice recommendations, such as:\n\n* Use of Secrets Manager for Connection JDBC strings\n* Glue job autoscaling\n* Default parameter values for Glue job creation\n\nThis iteration of the L2 construct introduces breaking changes to\nthe existing glue-alpha-module, but these changes streamline the developer\nexperience, introduce new constants for defaults, and replacing synth-time\nvalidations with interface contracts for enforcement of the parameter combinations\nthat Glue supports. As an opinionated construct, the Glue L2 construct does\nnot allow developers to create resources that use non-current versions\nof Glue or deprecated language dependencies (e.g. deprecated versions of Python).\nAs always, L1s allow you to specify a wider range of parameters if you need\nor want to use alternative configurations.\n\nOptional and required parameters for each job are enforced via interface\nrather than validation; see [Glue's public documentation](https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api.html)\nfor more granular details.\n\n### Spark Jobs\n\n#### ETL Jobs\n\nETL jobs support pySpark and Scala languages, for which there are separate but\nsimilar constructors. ETL jobs default to the G1 worker type, but you can\noverride this default with other supported worker type values (G1, G2, G4\nand G8). ETL jobs defaults to Glue version 4.0, which you can override to 3.0.\nThe following ETL features are enabled by default:\n`—enable-metrics, —enable-continuous-cloudwatch-log.`\nThe Spark UI (`—enable-spark-ui`) is off by default; enable it by setting the\n`sparkUI` prop.\nYou can find more details about version, worker type and other features in\n[Glue's public documentation](https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-job.html).\n\n> **Note on continuous logging and encryption:** Because continuous logging is\n> enabled by default, job driver and executor stdout/stderr are streamed to\n> CloudWatch. Unless you attach a [`SecurityConfiguration`](#securityconfiguration)\n> with `cloudWatchEncryption`, these logs are written to the account-shared,\n> default Glue log group (`/aws-glue/jobs/logs-v2/`), which is **not** encrypted\n> with a customer-managed key. Since job logs can contain sensitive runtime data\n> (SQL statements, row values, error stack traces), attach a `SecurityConfiguration`\n> with `cloudWatchEncryption` for regulated workloads. The construct emits a\n> synthesis-time warning when continuous logging is on and no `SecurityConfiguration`\n> is attached.\n\nReference the pyspark-etl-jobs.test.ts and scalaspark-etl-jobs.test.ts unit tests\nfor examples of required-only and optional job parameters when creating these\ntypes of jobs.\n\nFor the sake of brevity, examples are shown using the pySpark job variety.\n\nExample with only required parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkEtlJob(stack, 'PySparkETLJob', {\n  role,\n  script,\n  jobName: 'PySparkETLJob',\n});\n```\n\nExample with optional override parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkEtlJob(stack, 'PySparkETLJob', {\n  jobName: 'PySparkETLJobCustomName',\n  description: 'This is a description',\n  role,\n  script,\n  glueVersion: glue.GlueVersion.V5_1,\n  continuousLogging: { enabled: false },\n  workerConfiguration: {\n    workerType: glue.WorkerType.G_2X,\n    numberOfWorkers: 2,\n  },\n  maxConcurrentRuns: 100,\n  timeout: cdk.Duration.hours(2),\n  connections: [glue.Connection.fromConnectionName(stack, 'Connection', 'connectionName')],\n  securityConfiguration: glue.SecurityConfiguration.fromSecurityConfigurationName(stack, 'SecurityConfig', 'securityConfigName'),\n  tags: {\n    FirstTagName: 'FirstTagValue',\n    SecondTagName: 'SecondTagValue',\n    XTagName: 'XTagValue',\n  },\n  maxRetries: 2,\n});\n```\n\n#### Streaming Jobs\n\nStreaming jobs are similar to ETL jobs, except that they perform ETL on data\nstreams using the Apache Spark Structured Streaming framework. Some Spark\njob features are not available to Streaming ETL jobs. They support Scala\nand pySpark languages. PySpark streaming jobs run on Python 3. It\ndefaults to the G1 worker type and Glue 4.0, both of which you can override.\nThe following best practice features are enabled by default:\n`—enable-metrics, —enable-continuous-cloudwatch-log`.\nThe Spark UI (`—enable-spark-ui`) is off by default; enable it by setting the\n`sparkUI` prop.\n\nReference the pyspark-streaming-jobs.test.ts and scalaspark-streaming-jobs.test.ts\nunit tests for examples of required-only and optional job parameters when creating\nthese types of jobs.\n\nExample with only required parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkStreamingJob(stack, 'ImportedJob', { role, script });\n```\n\nExample with optional override parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkStreamingJob(stack, 'PySparkStreamingJob', {\n  jobName: 'PySparkStreamingJobCustomName',\n  description: 'This is a description',\n  role,\n  script,\n  glueVersion: glue.GlueVersion.V5_1,\n  continuousLogging: { enabled: false },\n  workerConfiguration: {\n    workerType: glue.WorkerType.G_2X,\n    numberOfWorkers: 2,\n  },\n  maxConcurrentRuns: 100,\n  timeout: cdk.Duration.hours(2),\n  connections: [glue.Connection.fromConnectionName(stack, 'Connection', 'connectionName')],\n  securityConfiguration: glue.SecurityConfiguration.fromSecurityConfigurationName(stack, 'SecurityConfig', 'securityConfigName'),\n  tags: {\n    FirstTagName: 'FirstTagValue',\n    SecondTagName: 'SecondTagValue',\n    XTagName: 'XTagValue',\n  },\n  maxRetries: 2,\n});\n```\n\n#### Flex Jobs\n\nThe flexible execution class is appropriate for non-urgent jobs such as\npre-production jobs, testing, and one-time data loads. Flexible jobs default\nto Glue version 5.0 and worker type `G_1X`. The following best practice\nfeatures are enabled by default:\n`—enable-metrics, —enable-continuous-cloudwatch-log`\nThe Spark UI (`—enable-spark-ui`) is off by default; enable it by setting the\n`sparkUI` prop.\n\nReference the pyspark-flex-etl-jobs.test.ts and scalaspark-flex-etl-jobs.test.ts\nunit tests for examples of required-only and optional job parameters when creating\nthese types of jobs.\n\nExample with only required parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkFlexEtlJob(stack, 'ImportedJob', { role, script });\n```\n\nExample with optional override parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkFlexEtlJob(stack, 'pySparkFlexEtlJob', {\n  jobName: 'pySparkFlexEtlJob',\n  description: 'This is a description',\n  role,\n  script,\n  glueVersion: glue.GlueVersion.V5_1,\n  continuousLogging: { enabled: false },\n  workerConfiguration: {\n    workerType: glue.WorkerType.G_2X,\n    numberOfWorkers: 2,\n  },\n  maxConcurrentRuns: 100,\n  timeout: cdk.Duration.hours(2),\n  connections: [glue.Connection.fromConnectionName(stack, 'Connection', 'connectionName')],\n  securityConfiguration: glue.SecurityConfiguration.fromSecurityConfigurationName(stack, 'SecurityConfig', 'securityConfigName'),\n  tags: {\n    FirstTagName: 'FirstTagValue',\n    SecondTagName: 'SecondTagValue',\n    XTagName: 'XTagValue',\n  },\n  maxRetries: 2,\n});\n```\n\n### Python Shell Jobs\n\nPython shell jobs support a Python version that depends on the AWS Glue\nversion you use. These can be used to schedule and run tasks that don't\nrequire an Apache Spark environment. Python shell jobs default to\nPython 3.9 and a MaxCapacity of `0.0625`. Python 3.9 supports pre-loaded\nanalytics libraries, enabled by default (`librarySet: glue.LibrarySet.ANALYTICS`).\nSet `librarySet: glue.LibrarySet.NONE` when your libraries are custom or\nconflict with the pre-installed ones.\n\nReference the pyspark-shell-job.test.ts unit tests for examples of\nrequired-only and optional job parameters when creating these types of jobs.\n\nExample with only required parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PythonShellJob(stack, 'ImportedJob', { role, script });\n```\n\nExample with optional override parameters:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\ndeclare const extraPythonFile: glue.Code;\nnew glue.PythonShellJob(stack, 'PythonShellJob', {\n  jobName: 'PythonShellJobCustomName',\n  description: 'This is a description',\n  pythonVersion: glue.PythonVersion.THREE_NINE,\n  maxCapacity: glue.MaxCapacity.DPU_1,\n  role,\n  script,\n  extraPythonFiles: [extraPythonFile],\n  glueVersion: glue.GlueVersion.V3_0,\n  continuousLogging: { enabled: false },\n  maxConcurrentRuns: 100,\n  timeout: cdk.Duration.hours(2),\n  connections: [glue.Connection.fromConnectionName(stack, 'Connection', 'connectionName')],\n  securityConfiguration: glue.SecurityConfiguration.fromSecurityConfigurationName(stack, 'SecurityConfig', 'securityConfigName'),\n  tags: {\n    FirstTagName: 'FirstTagValue',\n    SecondTagName: 'SecondTagValue',\n    XTagName: 'XTagValue',\n  },\n  maxRetries: 2,\n});\n```\n\n### Ray Jobs\n\n> **⚠️ DEPRECATED:** AWS Glue for Ray is closed to new customers as of April 30, 2026 and is in maintenance mode.\n> Migrate to [Amazon EKS with KubeRay Operator](https://docs.aws.amazon.com/glue/latest/dg/awsglue-ray-jobs-availability-change.html).\n\nThe `RayJob` construct, `Runtime.RAY_TWO_FOUR`, and `JobType.RAY` are deprecated and will be removed in a future release.\n\n### Metrics Control\n\nBy default, Glue jobs enable CloudWatch metrics (`--enable-metrics`) and observability metrics (`--enable-observability-metrics`) for monitoring and debugging. You can disable these metrics to reduce CloudWatch costs:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Disable both metrics for cost optimization\nnew glue.PySparkEtlJob(stack, 'CostOptimizedJob', {\n  role,\n  script,\n  enableMetrics: false,\n  enableObservabilityMetrics: false,\n});\n\n// Selective control - keep observability, disable profiling\nnew glue.PySparkEtlJob(stack, 'SelectiveJob', {\n  role,\n  script,\n  enableMetrics: false,\n  // enableObservabilityMetrics defaults to true\n});\n```\n\nThis feature is available for all Spark job types (ETL, Streaming, Flex).\n\n### Job Arguments\n\nGlue jobs are configured through a map of name-value arguments (`DefaultArguments`). This construct\nmanages several of these arguments on your behalf and exposes each one through a dedicated,\nstrongly-typed prop:\n\n| Managed argument(s)                                                      | Prop                                                            |\n|--------------------------------------------------------------------------|-----------------------------------------------------------------|\n| `--enable-continuous-cloudwatch-log`, `--continuous-log-*`               | `continuousLogging`                                             |\n| `--enable-metrics`                                                       | `enableMetrics`                                                 |\n| `--enable-observability-metrics`                                         | `enableObservabilityMetrics`                                    |\n| `--enable-spark-ui`, `--spark-event-logs-path`                           | `sparkUI`                                                       |\n| `--job-language`, `--class`                                              | job class / `className`                                         |\n| `--extra-jars`, `--user-jars-first`, `--extra-py-files`, `--extra-files` | `extraJars`, `extraJarsFirst`, `extraPythonFiles`, `extraFiles` |\n| `library-set`                                                            | `librarySet` (Python Shell)                                     |\n\nThe `defaultArguments` prop is the escape hatch for arguments this construct does **not** model.\nUse it for any argument without a dedicated prop:\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\nnew glue.PySparkEtlJob(stack, 'PySparkETLJob', {\n  role,\n  script,\n  defaultArguments: {\n    // an argument this construct does not manage\n    '--enable-glue-datacatalog': 'true',\n  },\n});\n```\n\nTo keep a single, unambiguous way to express each intent, setting a **construct-managed** argument\n(any argument in the table above) or a **Glue-reserved** argument (`--debug`, `--mode`,\n`--JOB_NAME`, `--endpoint`) through `defaultArguments` throws at synthesis time. This holds even\nwhen the feature is turned off — for example, `enableMetrics: false` combined with\n`defaultArguments: { '--enable-metrics': '' }` throws rather than silently re-enabling metrics.\nConfigure managed arguments through their dedicated prop instead — for example, use\n`continuousLogging: { enabled: false }` rather than\n`defaultArguments: { '--enable-continuous-cloudwatch-log': 'false' }`.\n\n### Enable Job Run Queuing\n\nAWS Glue job queuing monitors your account level quotas and limits. If quotas or limits are insufficient to start a Glue job run, AWS Glue will automatically queue the job and wait for limits to free up. Once limits become available, AWS Glue will retry the job run. Glue jobs will queue for limits like max concurrent job runs per account, max concurrent Data Processing Units (DPU), and resource unavailable due to IP address exhaustion in Amazon Virtual Private Cloud (Amazon VPC).\n\nEnable job run queuing by setting the `jobRunQueuingEnabled` property to `true`.\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nnew glue.PySparkEtlJob(stack, 'PySparkETLJob', {\n  role,\n  script,\n  jobName: 'PySparkETLJob',\n  jobRunQueuingEnabled: true\n});\n```\n\n### Uploading scripts from the CDK app repository to S3\n\nSimilar to other L2 constructs, the Glue L2 automates uploading local\nscripts to S3. Use `glue.Code.fromAsset(path)` to point at a script in your\nlocal file structure; it is uploaded to the CDK-managed asset bucket. To\nreference a script that already exists in S3, use\n`glue.Code.fromBucket(bucket, key)`, which performs no upload. A `script` is\nrequired for every job.\n\nReference the unit tests for examples of repo and S3 code target examples.\n\n### Workflow Triggers\n\nYou can use Glue workflows to create and visualize complex\nextract, transform, and load (ETL) activities involving multiple crawlers,\njobs, and triggers. Standalone triggers are an anti-pattern, so you must\ncreate triggers from within a workflow using the L2 construct.\n\nWithin a workflow object, there are functions to create different\ntypes of triggers with actions and predicates. You add triggers to the\nworkflow, and each trigger references the jobs or crawlers it runs as its\nactions.\n\n`startOnCreation` applies to scheduled triggers (and, via\n`ConditionalTriggerOptions`, conditional triggers) only. It defaults to `false`,\nbut you can override it if you prefer for your trigger to start on creation.\n\nReference the workflow-triggers.test.ts unit tests for examples of creating\nworkflows and triggers.\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [glue.Action.job(job)],\n});\n```\n\n#### **1. On-Demand Triggers**\n\nOn-demand triggers can start glue jobs or crawlers. This construct provides\nconvenience functions to create on-demand crawler or job triggers. The constructor\ntakes an optional description parameter, but abstracts the requirement of an\nactions list using the job or crawler objects using conditional types.\n\n#### **2. Scheduled Triggers**\n\nUse `addScheduledTrigger` with a `TriggerSchedule` to fire on a cron schedule.\n`TriggerSchedule.daily()` and `TriggerSchedule.weekly()` are convenience\nfactories; `TriggerSchedule.cron(...)` lets you build any schedule from the\n[existing event Schedule class](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_events.Schedule.html)\nwithout writing raw cron expressions. The L2 extracts the expression that Glue\nrequires from the `TriggerSchedule`.\n\n```ts\nimport * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\nconst workflow = new glue.Workflow(stack, 'Workflow');\n\nworkflow.addScheduledTrigger('WeeklyTrigger', {\n  actions: [glue.Action.job(job)],\n  schedule: glue.TriggerSchedule.weekly(),\n});\n```\n\n#### **3. Event Triggers**\n\nUse `addEventTrigger` for EventBridge event-based triggers. There are two types:\nbatching and non-batching. For batching triggers, you must specify `batchSize`.\nFor non-batching triggers, `batchSize` defaults to 1. For both, `batchWindow`\ndefaults to 900 seconds, but you can override the window to align with your\nworkload's requirements.\n\n#### **4. Conditional Triggers**\n\nConditional triggers have a predicate and actions associated with them.\nThe trigger actions are executed when the predicateCondition is true.\n\n### Connection Properties\n\nA `Connection` allows Glue jobs, crawlers and development endpoints to access\ncertain types of data stores.\n\n* **Secrets Management**\n    Manage JDBC connection credentials in Secrets Manager and pass the secret\n    to the connection via the `secret` property (see the example below), rather\n    than embedding credentials in `properties`.\n\n* **Networking - the CDK determines the best fit subnet for Glue connection\nconfiguration**\n    Configure VPC placement through the `network` property, built with\n    `ConnectionNetwork.subnet(subnet)` to pin a specific subnet, or\n    `ConnectionNetwork.vpc(vpc, vpcSubnets?)` to let the L2 select one via the\n    existing\n    [EC2 Subnet Selection](https://docs.aws.amazon.com/cdk/api/v2/python/aws_cdk.aws_ec2/SubnetSelection.html)\n    library. A Glue connection targets a single subnet, so the first subnet of\n    the selection is used. The two factories are mutually exclusive, so a subnet\n    and a VPC can never be combined.\n\nPin the connection to a specific subnet:\n\n```ts\ndeclare const securityGroup: ec2.SecurityGroup;\ndeclare const subnet: ec2.Subnet;\nnew glue.Connection(this, 'MyConnection', {\n  type: glue.ConnectionType.NETWORK,\n  // The security groups granting AWS Glue inbound access to the data source within the VPC\n  securityGroups: [securityGroup],\n  // The VPC subnet which contains the data source\n  network: glue.ConnectionNetwork.subnet(subnet),\n});\n```\n\nOr let the CDK select a subnet from a VPC:\n\n```ts\ndeclare const securityGroup: ec2.SecurityGroup;\ndeclare const vpc: ec2.Vpc;\nnew glue.Connection(this, 'MyConnection', {\n  type: glue.ConnectionType.NETWORK,\n  securityGroups: [securityGroup],\n  // vpcSubnets is optional - defaults to private subnets\n  network: glue.ConnectionNetwork.vpc(vpc, { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }),\n});\n```\n\nFor RDS `Connection` by JDBC, it is recommended to manage credentials using AWS Secrets Manager. Pass the secret via the `secret` property: Glue reads the credentials at runtime through the connection's `SECRET_ID`, so the secret value never enters the template. Note that in this case, the subnet must have a route to the AWS Secrets Manager VPC endpoint or to the AWS Secrets Manager endpoint through a NAT gateway.\n\n```ts\ndeclare const securityGroup: ec2.SecurityGroup;\ndeclare const subnet: ec2.Subnet;\ndeclare const db: rds.DatabaseCluster;\nnew glue.Connection(this, \"RdsConnection\", {\n  type: glue.ConnectionType.JDBC,\n  securityGroups: [securityGroup],\n  network: glue.ConnectionNetwork.subnet(subnet),\n  secret: db.secret,\n  properties: {\n    JDBC_CONNECTION_URL: `jdbc:mysql://${db.clusterEndpoint.socketAddress}/databasename`,\n    JDBC_ENFORCE_SSL: \"false\",\n  },\n});\n```\n\nPrefer the `secret` property over placing credentials in `properties`. Connection\n`properties` are emitted verbatim into the CloudFormation template, so any\ncredential placed there in plaintext is stored in plaintext in the template,\n`cdk.out`, and source control. If a property key looks like a credential (for\nexample `PASSWORD`, `SECRET`, or `TOKEN`) and holds a plaintext literal, the\nconstruct emits a synthesis-time warning.\n\nIf you need to use a connection type that doesn't exist as a static member on `ConnectionType`, you can instantiate a `ConnectionType` object, e.g: `new glue.ConnectionType('NEW_TYPE')`.\n\nSee [Adding a Connection to Your Data Store](https://docs.aws.amazon.com/glue/latest/dg/populate-add-connection.html) and [Connection Structure](https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-connections.html#aws-glue-api-catalog-connections-Connection) documentation for more information on the supported data stores and their configurations.\n\n## SecurityConfiguration\n\nA `SecurityConfiguration` is a set of security properties that can be used by AWS Glue to encrypt data at rest.\n\nEach encryption config is built with a factory that pairs the encryption mode\nwith its key, so illegal combinations (such as an S3-managed encryption carrying\na KMS key) cannot be expressed:\n\n```ts\nnew glue.SecurityConfiguration(this, 'MySecurityConfiguration', {\n  cloudWatchEncryption: glue.CloudWatchEncryption.kms(),\n  jobBookmarksEncryption: glue.JobBookmarksEncryption.clientSideKms(),\n  s3Encryption: glue.S3Encryption.kms(),\n});\n```\n\nBy default, a shared KMS key is created for use with the encryption configurations that require one. You can also supply your own key to any factory, for example, for CloudWatch encryption:\n\n```ts\ndeclare const key: kms.Key;\nnew glue.SecurityConfiguration(this, 'MySecurityConfiguration', {\n  cloudWatchEncryption: glue.CloudWatchEncryption.kms(key),\n});\n```\n\nUse `glue.S3Encryption.s3Managed()` for S3-managed (SSE-S3) encryption, which takes no key.\n\nSee [documentation](https://docs.aws.amazon.com/glue/latest/dg/encryption-security-configuration.html) for more info for Glue encrypting data written by Crawlers, Jobs, and Development Endpoints.\n\n## Catalog\n\nThe Glue Data Catalog is a persistent metadata store for your data assets. Every\naccount has an implicit, account-wide catalog that always exists, and you can also\ncreate additional catalogs as `AWS::Glue::Catalog` resources (for example, to\nfederate to another metastore).\n\nA catalog's encryption is fixed when the catalog is created: a catalog either\ncarries encryption settings or it does not. This keeps its configuration easy to\nreason about — there are no mutation methods that change encryption after the fact.\n\n### The account-wide catalog\n\nUse `Catalog.forAccount(scope)` to obtain the implicit account catalog. It is not\na CloudFormation resource — it always exists. Repeated calls within the same stack\nreturn the same instance:\n\n```ts\nconst catalog = glue.Catalog.forAccount(this);\n```\n\nTo configure Data Catalog encryption for the account, use\n`Catalog.encryptAccount(scope, options)`:\n\n```ts\ndeclare const key: kms.Key;\nglue.Catalog.encryptAccount(this, {\n  encryptionAtRest: glue.DataCatalogEncryptionAtRest.kms(key),\n});\n```\n\nBecause encryption is fixed at construction, `encryptAccount` must be called\n*before* the account catalog is first used in the stack — before any\n`Catalog.forAccount(this)` call, and before any `Database` that uses the account\ncatalog. Calling it after the account catalog has been materialized throws.\n\nThe account catalog's encryption is an account- and region-wide setting, managed\nthrough the singleton `PutDataCatalogEncryptionSettings` API. Configure it in\nexactly one stack. Configuring it from multiple stacks in the same account and\nregion makes those stacks overwrite one another at deploy time, and the result is\norder-dependent. Unlike duplicate settings within a single stack (which\nCloudFormation rejects), this cross-stack conflict is not caught at synthesis\ntime, because each stack synthesizes to its own template.\n\n### Creating a catalog\n\nTo create a new catalog resource, use the `Catalog` constructor. Encryption is\nconfigured through the `encryptionAtRest` and `connectionPasswordEncryption` props:\n\n```ts\nnew glue.Catalog(this, 'MyCatalog', {\n  catalogName: 'my-catalog',\n  description: 'my catalog description',\n});\n```\n\n### Encryption at rest\n\nConfigure Data Catalog encryption at rest through the `encryptionAtRest` option\n(on `Catalog.encryptAccount` or the `Catalog` constructor).\nIt accepts a `DataCatalogEncryptionAtRest` describing the mode:\n\n```ts\ndeclare const key: kms.Key;\n\n// SSE-KMS with a customer-managed key\nglue.Catalog.encryptAccount(this, {\n  encryptionAtRest: glue.DataCatalogEncryptionAtRest.kms(key),\n});\n\n// SSE-KMS with an AWS-managed key (omit the key)\nnew glue.Catalog(this, 'ManagedKeyCatalog', {\n  catalogName: 'managed-key-catalog',\n  encryptionAtRest: glue.DataCatalogEncryptionAtRest.kms(),\n});\n\n// Disable encryption at rest\nnew glue.Catalog(this, 'PlaintextCatalog', {\n  catalogName: 'plaintext-catalog',\n  encryptionAtRest: glue.DataCatalogEncryptionAtRest.disabled(),\n});\n```\n\nWhen you use `SSE-KMS-WITH-SERVICE-ROLE`, AWS Glue accesses the KMS key through a\nservice role you provide. If you pass a customer-managed key, the role is\nautomatically granted the permissions it needs to encrypt and decrypt catalog data:\n\n```ts\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const key: kms.Key;\ndeclare const role: iam.IRole;\nglue.Catalog.encryptAccount(this, {\n  encryptionAtRest: glue.DataCatalogEncryptionAtRest.kmsWithServiceRole(role, key),\n});\n```\n\nThe customer-managed key, when configured, is exposed on the catalog as\n`encryptionKey` (and the connection-password key as `connectionPasswordKey`), so\nyou can reference it to grant additional access. It is undefined when encryption is\ndisabled or an AWS-managed key is used.\n\n### Connection password encryption\n\nIndependently from encryption at rest, the Data Catalog can encrypt the passwords\nstored in connection properties. Configure it through the\n`connectionPasswordEncryption` option:\n\n```ts\ndeclare const key: kms.Key;\nglue.Catalog.encryptAccount(this, {\n  connectionPasswordEncryption: {\n    kmsKey: key,\n    // Whether GetConnection/GetConnections return the password encrypted (default: true)\n    returnConnectionPasswordEncrypted: true,\n  },\n});\n```\n\nThe two encryption blocks are independent: enabling one does not require the other,\nand each may use a different KMS key. The customer-managed key for connection\npasswords is exposed as `connectionPasswordKey`.\n\n### Importing a catalog\n\nYou can import an existing catalog by ARN or by id. An imported catalog is a pure\nidentity handle — it emits no resources and does not manage the catalog's\nencryption:\n\n```ts\nconst byId = glue.Catalog.fromCatalogId(this, 'ById', 'my-catalog-id');\nconst byArn = glue.Catalog.fromCatalogArn(this, 'ByArn', 'arn:aws:glue:us-east-1:123456789012:catalog/my-catalog-id');\n```\n\nTo manage the Data Catalog encryption of a catalog you did not create in this\nstack, add a `CfnDataCatalogEncryptionSettings` resource targeting its id\ndirectly. Do this from exactly one stack: like the account catalog, a catalog has\na single encryption configuration, so two settings resources targeting the same id\nrace to overwrite one another at deploy time. Within a single stack this is caught\nby CloudFormation template validation (E3019, duplicate primary identifiers);\nacross stacks it is not, since each stack synthesizes to its own template.\n\n```ts\nimport { CfnDataCatalogEncryptionSettings } from 'aws-cdk-lib/aws-glue';\n\nnew CfnDataCatalogEncryptionSettings(this, 'Encryption', {\n  catalogId: 'my-catalog-id',\n  dataCatalogEncryptionSettings: {\n    encryptionAtRest: { catalogEncryptionMode: 'SSE-KMS' },\n  },\n});\n```\n\n## Database\n\nA `Database` is a logical grouping of `Tables` in the Glue Catalog.\n\n```ts\nnew glue.Database(this, 'MyDatabase', {\n  databaseName: 'my_database',\n  description: 'my_database_description',\n});\n```\n\nBecause a database is a container for tables and their metadata, it is retained\nby default when removed from the stack, to avoid accidental data loss. Set\n`removalPolicy` to `RemovalPolicy.DESTROY` to have it deleted instead:\n\n```ts\nimport { RemovalPolicy } from 'aws-cdk-lib';\n\nnew glue.Database(this, 'MyDatabase', {\n  databaseName: 'my_database',\n  removalPolicy: RemovalPolicy.DESTROY,\n});\n```\n\n## Table\n\nA Glue table describes a table of data in S3: its structure (column names and types), location of data (S3 objects with a common prefix in a S3 bucket), and format for the files (Json, Avro, Parquet, etc.):\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }, {\n    name: 'col2',\n    type: glue.Schema.array(glue.Schema.STRING),\n    comment: 'col2 is an array of strings' // comment is optional\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nBy default, a S3 bucket will be created to store the table's data but you can bring your own with `S3TableStorage.fromBucket` and set an `s3Prefix`:\n\n```ts\ndeclare const myBucket: s3.Bucket;\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  storage: glue.S3TableStorage.fromBucket(myBucket),\n  s3Prefix: 'my-table/',\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nGlue tables can be configured to contain user-defined properties, to describe the physical storage of table data, through the `storageParameters` property:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  storageParameters: [\n    glue.StorageParameter.skipHeaderLineCount(1),\n    glue.StorageParameter.compressionType(glue.CompressionType.GZIP),\n    glue.StorageParameter.custom('separatorChar', ',')\n  ],\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nGlue tables can also be configured to contain user-defined table properties through the [`parameters`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-table-tableinput.html#cfn-glue-table-tableinput-parameters) property:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  parameters: {\n    key1: 'val1',\n    key2: 'val2',\n  },\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\n### Partition Keys\n\nTo improve query performance, a table can specify `partitionKeys` on which data is stored and queried separately. For example, you might partition a table by `year` and `month` to optimize queries based on a time window:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'year',\n    type: glue.Schema.SMALL_INT,\n  }, {\n    name: 'month',\n    type: glue.Schema.SMALL_INT,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\n### Partition Indexes\n\nAnother way to improve query performance is to specify partition indexes. If no partition indexes are\npresent on the table, AWS Glue loads all partitions of the table and filters the loaded partitions using\nthe query expression. The query takes more time to run as the number of partitions increase. With an\nindex, the query will try to fetch a subset of the partitions instead of loading all partitions of the\ntable.\n\nThe keys of a partition index must be a subset of the partition keys of the table. You can have a\nmaximum of 3 partition indexes per table. To specify a partition index, you can use the `partitionIndexes`\nproperty:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'year',\n    type: glue.Schema.SMALL_INT,\n  }, {\n    name: 'month',\n    type: glue.Schema.SMALL_INT,\n  }],\n  partitionIndexes: [{\n    indexName: 'my-index', // optional\n    keyNames: ['year'],\n  }], // supply up to 3 indexes\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nAlternatively, you can call the `addPartitionIndex()` function on a table:\n\n```ts\ndeclare const myTable: glue.S3Table;\nmyTable.addPartitionIndex({\n  indexName: 'my-index',\n  keyNames: ['year'],\n});\n```\n\n### Partition Filtering\n\nIf you have a table with a large number of partitions that grows over time, consider using AWS Glue partition indexing and filtering.\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n      name: 'col1',\n      type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n      name: 'year',\n      type: glue.Schema.SMALL_INT,\n  }, {\n      name: 'month',\n      type: glue.Schema.SMALL_INT,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  enablePartitionFiltering: true,\n});\n```\n\n### Partition Projection\n\nPartition projection allows Athena to automatically add new partitions as new data arrives, without requiring `ALTER TABLE ADD PARTITION` statements. This improves query performance and reduces management overhead by eliminating the need to manually manage partition metadata.\n\nFor more information, see the [AWS documentation on partition projection](https://docs.aws.amazon.com/athena/latest/ug/partition-projection.html).\n\n#### INTEGER Projection\n\nFor partition keys with sequential numeric values:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'year',\n    type: glue.Schema.INTEGER,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    year: glue.PartitionProjectionConfiguration.integer({\n      min: 2020,\n      max: 2023,\n      interval: 1,  // optional, defaults to 1\n      digits: 4,    // optional, pads with leading zeros\n    }),\n  },\n});\n```\n\n#### DATE Projection\n\nFor partition keys with date or timestamp values. Supports both fixed dates and relative dates using `NOW`:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      // `step` bundles interval + unit (supply both or neither). Optional at day\n      // precision or coarser; required when the format is sub-day (e.g. hours).\n      step: { interval: 1, intervalUnit: glue.DateIntervalUnit.DAYS },\n    }),\n  },\n});\n```\n\nYou can also use relative dates with `NOW`:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: 'NOW-3YEARS',\n      max: 'NOW',\n      format: 'yyyy-MM-dd',\n    }),\n  },\n});\n```\n\n#### ENUM Projection\n\nFor partition keys with a known set of values:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'region',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    region: glue.PartitionProjectionConfiguration.enum({\n      values: ['us-east-1', 'us-west-2', 'eu-west-1'],\n    }),\n  },\n});\n```\n\n#### INJECTED Projection\n\nFor custom partition values injected at query time:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'custom',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    custom: glue.PartitionProjectionConfiguration.injected(),\n  },\n});\n```\n\n#### Multiple Partition Projections\n\nYou can configure partition projection for multiple partition keys:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [\n    {\n      name: 'year',\n      type: glue.Schema.INTEGER,\n    },\n    {\n      name: 'month',\n      type: glue.Schema.INTEGER,\n    },\n    {\n      name: 'region',\n      type: glue.Schema.STRING,\n    },\n  ],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    year: glue.PartitionProjectionConfiguration.integer({\n      min: 2020,\n      max: 2023,\n    }),\n    month: glue.PartitionProjectionConfiguration.integer({\n      min: 1,\n      max: 12,\n      digits: 2,\n    }),\n    region: glue.PartitionProjectionConfiguration.enum({\n      values: ['us-east-1', 'us-west-2'],\n    }),\n  },\n});\n```\n\n### Glue Connections\n\nGlue connections allow external data connections to third party databases and data warehouses. However, these connections can also be assigned to Glue Tables, allowing you to query external data sources using the Glue Data Catalog.\n\nWhereas `S3Table` will point to (and if needed, create) a bucket to store the tables' data, `ExternalTable` will point to an existing table in a data source. For example, to create a table in Glue that points to a table in Redshift:\n\n```ts\ndeclare const myConnection: glue.Connection;\ndeclare const myDatabase: glue.Database;\nnew glue.ExternalTable(this, 'MyTable', {\n  connection: myConnection,\n  externalDataLocation: 'default_db_public_example', // A table in Redshift\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\n## Data Quality Ruleset\n\nA `DataQualityRuleset` defines a set of data quality rules — authored in Glue's\nData Quality Definition Language (DQDL) — that are evaluated against a table in\nthe Data Catalog.\n\n```ts\ndeclare const database: glue.IDatabase;\nnew glue.DataQualityRuleset(this, 'MyRuleset', {\n  rulesetName: 'my_ruleset',\n  dqdl: glue.Dqdl.fromString('Rules = [ RowCount > 100, IsComplete \"order_id\" ]'),\n  targetTable: glue.DataQualityTargetTable.fromTableName(database, 'my_table'),\n});\n```\n\nBuild the DQDL document with `Dqdl.fromString(...)`. Glue parses and validates the\nDQDL when the ruleset is deployed; see the\n[DQDL reference](https://docs.aws.amazon.com/glue/latest/dg/dqdl.html) for the\nfull rule syntax.\n\n## [Encryption](https://docs.aws.amazon.com/athena/latest/ug/encryption.html)\n\nWhen the table creates its own S3 bucket (`S3TableStorage.managedBucket`, the default), that bucket enforces SSL: a bucket policy denies any request made over plain HTTP. If you bring your own bucket with `S3TableStorage.fromBucket`, enabling `enforceSSL` on it is your responsibility.\n\nServer-side encryption applies only to a bucket the table manages. Choose it with\n`storage: glue.S3TableStorage.managedBucket(...)`:\n\n* [S3Managed](https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html) - (default) Server side encryption (`SSE-S3`) with an Amazon S3-managed key.\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  storage: glue.S3TableStorage.managedBucket(glue.S3TableEncryption.s3Managed()),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\n* [Kms](https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingKMSEncryption.html) - Server-side encryption (`SSE-KMS`) with an AWS KMS Key managed by the account owner.\n\n```ts\ndeclare const myDatabase: glue.Database;\n// KMS key is created automatically\nnew glue.S3Table(this, 'MyTable', {\n  storage: glue.S3TableStorage.managedBucket(glue.S3TableEncryption.kms()),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n\n// with an explicit KMS key\nnew glue.S3Table(this, 'MyTable', {\n  storage: glue.S3TableStorage.managedBucket(glue.S3TableEncryption.kms(new kms.Key(this, 'MyKey'))),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\n* [KmsManaged](https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingKMSEncryption.html) - Server-side encryption (`SSE-KMS`), like `Kms`, except with an AWS KMS Key managed by the AWS Key Management Service.\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  storage: glue.S3TableStorage.managedBucket(glue.S3TableEncryption.kmsManaged()),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nClient-side encryption ([CSE-KMS](https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html#client-side-encryption-kms-managed-master-key-intro)) is independent of the bucket's server-side encryption and works with either a managed or an existing bucket. Configure it with `clientSideEncryption`:\n\n```ts\ndeclare const myDatabase: glue.Database;\n// KMS key is created automatically\nnew glue.S3Table(this, 'MyTable', {\n  clientSideEncryption: glue.TableClientSideEncryption.kms(),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n\n// with an explicit KMS key\nnew glue.S3Table(this, 'MyTable', {\n  clientSideEncryption: glue.TableClientSideEncryption.kms(new kms.Key(this, 'MyKey')),\n  // ...\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nTo store the table's data in an existing bucket, use `glue.S3TableStorage.fromBucket(bucket)`. CDK does not manage that bucket's server-side encryption, so an encryption choice can never be paired with a provided bucket — but client-side encryption still applies.\n\n### Marking table data as encrypted\n\nBoth `S3Table` and `ExternalTable` set the `has_encrypted_data` table parameter, which\nAthena reads when querying client-side (`CSE-KMS`) encrypted datasets. It defaults to `true`.\nSet `hasEncryptedData` to `false` when the underlying data is not encrypted:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  hasEncryptedData: false,\n  database: myDatabase,\n  columns: [{\n    name: 'col1',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nDo not set `has_encrypted_data` through the free-form `parameters` map as well - a value\nthere that conflicts with `hasEncryptedData` is rejected at synthesis time.\n\n## Types\n\nA table's schema is a collection of columns, each of which have a `name` and a `type`. Types are recursive structures, consisting of primitive and complex types:\n\n```ts\ndeclare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  columns: [{\n    name: 'primitive_column',\n    type: glue.Schema.STRING,\n  }, {\n    name: 'array_column',\n    type: glue.Schema.array(glue.Schema.INTEGER),\n    comment: 'array<integer>',\n  }, {\n    name: 'map_column',\n    type: glue.Schema.map(\n      glue.Schema.STRING,\n      glue.Schema.TIMESTAMP),\n    comment: 'map<string,timestamp>',\n  }, {\n    name: 'struct_column',\n    type: glue.Schema.struct([{\n      name: 'nested_column',\n      type: glue.Schema.DATE,\n      comment: 'nested comment',\n    }]),\n    comment: \"struct<nested_column:date COMMENT 'nested comment'>\",\n  }],\n  // ...\n  database: myDatabase,\n  dataFormat: glue.DataFormat.JSON,\n});\n```\n\nFor a type the `Schema` factories don't model, use `glue.Schema.custom('...')`, which takes the raw Glue input string.\n\n## Public FAQ\n\n### What are we launching today?\n\nWe’re launching new features to an AWS CDK Glue L2 Construct to provide\nbest-practice defaults and convenience methods to create Glue Jobs, Connections,\nTriggers, Workflows, and the underlying permissions and configuration.\n\n### Why should I use this Construct?\n\nDevelopers should use this Construct to reduce the amount of boilerplate\ncode and complexity each individual has to navigate, and make it easier to\ncreate best-practice Glue resources.\n\n### What’s not in scope?\n\nGlue Crawlers and other resources that are now managed by the AWS LakeFormation\nteam are not in scope for this effort. Developers should use existing methods\nto create these resources, and the new Glue L2 construct assumes they already\nexist as inputs. While best practice is for application and infrastructure code\nto be as close as possible for teams using fully-implemented DevOps mechanisms,\nin practice these ETL scripts are likely managed by a data science team who\nknow Python or Scala and don’t necessarily own or manage their own\ninfrastructure deployments. We want to meet developers where they are, and not\nassume that all of the code resides in the same repository, Developers can\nautomate this themselves via the CDK, however, if they do own both.\n\nValidating Glue version and feature use per AWS region at synth time is also\nnot in scope. AWS’ intention is for all features to eventually be propagated to\nall Global regions, so the complexity involved in creating and updating region-\nspecific configuration to match shifting feature sets does not out-weigh the\nlikelihood that a developer will use this construct to deploy resources to a\nregion without a particular new feature to a region that doesn’t yet support\nit without researching or manually attempting to use that feature before\ndeveloping it via IaC. The developer will, of course, still get feedback from\nthe underlying Glue APIs as CloudFormation deploys the resources similar to the\ncurrent CDK L1 Glue experience.\n"
   },
   "repository": {
     "directory": "packages/@aws-cdk/aws-glue-alpha",
@@ -9622,121 +9651,107 @@
   },
   "types": {
     "@aws-cdk/aws-glue-alpha.Action": {
+      "abstract": true,
       "assembly": "@aws-cdk/aws-glue-alpha",
-      "datatype": true,
       "docs": {
+        "remarks": "An action runs exactly one target: use {@link Action.job} to run a job or\n{@link Action.crawler} to run a crawler. Because these are separate factory\nmethods, an action can never target both or neither.",
         "stability": "experimental",
-        "summary": "Represents a trigger action.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport * as cdk from 'aws-cdk-lib';\nimport { aws_glue as glue } from 'aws-cdk-lib';\n\ndeclare const cfnCrawler: glue.CfnCrawler;\ndeclare const job: glue_alpha.Job;\ndeclare const securityConfiguration: glue_alpha.SecurityConfiguration;\nconst action: glue_alpha.Action = {\n  arguments: {\n    argumentsKey: 'arguments',\n  },\n  crawler: cfnCrawler,\n  job: job,\n  securityConfiguration: securityConfiguration,\n  timeout: cdk.Duration.minutes(30),\n};",
+        "summary": "An action initiated by a trigger.",
+        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [glue.Action.job(job)],\n});",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
+          "exampleMetadata": "infused"
         }
       },
       "fqn": "@aws-cdk/aws-glue-alpha.Action",
-      "kind": "interface",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        }
+      },
+      "kind": "class",
       "locationInModule": {
         "filename": "lib/triggers/trigger-options.ts",
-        "line": 11
+        "line": 67
       },
-      "name": "Action",
-      "properties": [
+      "methods": [
         {
-          "abstract": true,
           "docs": {
-            "default": "- no arguments are passed to the job",
             "stability": "experimental",
-            "summary": "The job arguments used when this trigger fires."
+            "summary": "Create an action that runs a crawler."
           },
-          "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 24
+            "line": 84
           },
-          "name": "arguments",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "primitive": "string"
+          "name": "crawler",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "the crawler to run when the trigger fires."
               },
-              "kind": "map"
+              "name": "crawler",
+              "type": {
+                "fqn": "aws-cdk-lib.interfaces.aws_glue.ICrawlerRef"
+              }
+            },
+            {
+              "docs": {
+                "summary": "additional options for the action."
+              },
+              "name": "options",
+              "optional": true,
+              "type": {
+                "fqn": "@aws-cdk/aws-glue-alpha.CrawlerActionOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-glue-alpha.Action"
             }
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "- no crawler is used",
-            "stability": "experimental",
-            "summary": "The name of the crawler to be used with this action."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/triggers/trigger-options.ts",
-            "line": 45
           },
-          "name": "crawler",
-          "optional": true,
-          "type": {
-            "fqn": "aws-cdk-lib.aws_glue.CfnCrawler"
-          }
+          "static": true
         },
         {
-          "abstract": true,
           "docs": {
-            "default": "- no job is executed",
             "stability": "experimental",
-            "summary": "The job to be executed."
+            "summary": "Create an action that runs a job."
           },
-          "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 17
+            "line": 74
           },
           "name": "job",
-          "optional": true,
-          "type": {
-            "fqn": "@aws-cdk/aws-glue-alpha.IJob"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "- no security configuration is used",
-            "stability": "experimental",
-            "summary": "The `SecurityConfiguration` to be used with this action."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/triggers/trigger-options.ts",
-            "line": 38
-          },
-          "name": "securityConfiguration",
-          "optional": true,
-          "type": {
-            "fqn": "@aws-cdk/aws-glue-alpha.ISecurityConfiguration"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "- the default timeout value set in the job definition",
-            "remarks": "This is the maximum time that a job run can consume resources before it is terminated and enters TIMEOUT status.",
-            "stability": "experimental",
-            "summary": "The job run timeout."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/triggers/trigger-options.ts",
-            "line": 31
+          "parameters": [
+            {
+              "docs": {
+                "summary": "the job to run when the trigger fires."
+              },
+              "name": "job",
+              "type": {
+                "fqn": "aws-cdk-lib.interfaces.aws_glue.IJobRef"
+              }
+            },
+            {
+              "docs": {
+                "summary": "additional options for the action."
+              },
+              "name": "options",
+              "optional": true,
+              "type": {
+                "fqn": "@aws-cdk/aws-glue-alpha.JobActionOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-glue-alpha.Action"
+            }
           },
-          "name": "timeout",
-          "optional": true,
-          "type": {
-            "fqn": "aws-cdk-lib.Duration"
-          }
+          "static": true
         }
       ],
+      "name": "Action",
       "symbolId": "lib/triggers/trigger-options:Action"
     },
     "@aws-cdk/aws-glue-alpha.AssetCode": {
@@ -10588,7 +10603,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Represents a Glue Job's Code assets (an asset can be a scripts, a jar, a python file or any other file).",
-        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [{ job }],\n});",
+        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [glue.Action.job(job)],\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -10920,78 +10935,170 @@
       "symbolId": "lib/storage-parameter:CompressionType"
     },
     "@aws-cdk/aws-glue-alpha.Condition": {
+      "abstract": true,
       "assembly": "@aws-cdk/aws-glue-alpha",
-      "datatype": true,
       "docs": {
+        "remarks": "A condition watches exactly one target in exactly one state: use\n{@link Condition.job} to watch a job or {@link Condition.crawler} to watch a\ncrawler. Because the state is a required argument of each factory, a condition\ncan never reference a target without its state, or both a job and a crawler.",
         "stability": "experimental",
-        "summary": "Represents a trigger condition.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\n\ndeclare const job: glue_alpha.Job;\nconst condition: glue_alpha.Condition = {\n  crawlerName: 'crawlerName',\n  crawlState: glue_alpha.CrawlerState.RUNNING,\n  job: job,\n  logicalOperator: glue_alpha.ConditionLogicalOperator.EQUALS,\n  state: glue_alpha.JobState.SUCCEEDED,\n};",
+        "summary": "A condition that determines when a conditional trigger fires.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport { aws_glue as interfaces_glue } from 'aws-cdk-lib/interfaces';\n\ndeclare const crawlerRef: interfaces_glue.ICrawlerRef;\nconst condition = glue_alpha.Condition.crawler(crawlerRef, glue_alpha.CrawlerState.RUNNING, /* all optional props */ {\n  logicalOperator: glue_alpha.ConditionLogicalOperator.EQUALS,\n});",
         "custom": {
           "exampleMetadata": "fixture=_generated"
         }
       },
       "fqn": "@aws-cdk/aws-glue-alpha.Condition",
-      "kind": "interface",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        }
+      },
+      "kind": "class",
       "locationInModule": {
         "filename": "lib/triggers/trigger-options.ts",
-        "line": 100
+        "line": 219
       },
-      "name": "Condition",
-      "properties": [
+      "methods": [
         {
-          "abstract": true,
           "docs": {
-            "default": "- no crawler is specified",
             "stability": "experimental",
-            "summary": "The name of the crawler to which this condition applies."
+            "summary": "Create a condition on the state of a crawler."
           },
-          "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 127
+            "line": 238
           },
-          "name": "crawlerName",
-          "optional": true,
-          "type": {
-            "primitive": "string"
-          }
+          "name": "crawler",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "the crawler to watch."
+              },
+              "name": "crawler",
+              "type": {
+                "fqn": "aws-cdk-lib.interfaces.aws_glue.ICrawlerRef"
+              }
+            },
+            {
+              "docs": {
+                "summary": "the crawler state that satisfies the condition."
+              },
+              "name": "crawlState",
+              "type": {
+                "fqn": "@aws-cdk/aws-glue-alpha.CrawlerState"
+              }
+            },
+            {
+              "docs": {
+                "summary": "additional options for the condition."
+              },
+              "name": "options",
+              "optional": true,
+              "type": {
+                "fqn": "@aws-cdk/aws-glue-alpha.ConditionOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-glue-alpha.Condition"
+            }
+          },
+          "static": true
         },
         {
-          "abstract": true,
           "docs": {
-            "default": "- no crawler state is specified",
             "stability": "experimental",
-            "summary": "The condition crawler state."
+            "summary": "Create a condition on the state of a job."
           },
-          "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 134
+            "line": 227
           },
-          "name": "crawlState",
-          "optional": true,
-          "type": {
-            "fqn": "@aws-cdk/aws-glue-alpha.CrawlerState"
-          }
-        },
+          "name": "job",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "the job to watch."
+              },
+              "name": "job",
+              "type": {
+                "fqn": "aws-cdk-lib.interfaces.aws_glue.IJobRef"
+              }
+            },
+            {
+              "docs": {
+                "summary": "the job state that satisfies the condition."
+              },
+              "name": "state",
+              "type": {
+                "fqn": "@aws-cdk/aws-glue-alpha.JobState"
+              }
+            },
+            {
+              "docs": {
+                "summary": "additional options for the condition."
+              },
+              "name": "options",
+              "optional": true,
+              "type": {
+                "fqn": "@aws-cdk/aws-glue-alpha.ConditionOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-glue-alpha.Condition"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "Condition",
+      "symbolId": "lib/triggers/trigger-options:Condition"
+    },
+    "@aws-cdk/aws-glue-alpha.ConditionLogicalOperator": {
+      "assembly": "@aws-cdk/aws-glue-alpha",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Represents the logical operator for evaluating a single condition in the Glue Trigger API."
+      },
+      "fqn": "@aws-cdk/aws-glue-alpha.ConditionLogicalOperator",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "lib/constants.ts",
+        "line": 360
+      },
+      "members": [
         {
-          "abstract": true,
           "docs": {
-            "default": "- no job is specified",
             "stability": "experimental",
-            "summary": "The job to which this condition applies."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/triggers/trigger-options.ts",
-            "line": 113
+            "summary": "The condition is true if the values are equal."
           },
-          "name": "job",
-          "optional": true,
-          "type": {
-            "fqn": "@aws-cdk/aws-glue-alpha.IJob"
-          }
-        },
+          "name": "EQUALS"
+        }
+      ],
+      "name": "ConditionLogicalOperator",
+      "symbolId": "lib/constants:ConditionLogicalOperator"
+    },
+    "@aws-cdk/aws-glue-alpha.ConditionOptions": {
+      "assembly": "@aws-cdk/aws-glue-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Options shared by all trigger conditions.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nconst conditionOptions: glue_alpha.ConditionOptions = {\n  logicalOperator: glue_alpha.ConditionLogicalOperator.EQUALS,\n};",
+        "custom": {
+          "exampleMetadata": "fixture=_generated"
+        }
+      },
+      "fqn": "@aws-cdk/aws-glue-alpha.ConditionOptions",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/triggers/trigger-options.ts",
+        "line": 202
+      },
+      "name": "ConditionOptions",
+      "properties": [
         {
           "abstract": true,
           "docs": {
@@ -11002,58 +11109,16 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 106
+            "line": 208
           },
           "name": "logicalOperator",
           "optional": true,
           "type": {
             "fqn": "@aws-cdk/aws-glue-alpha.ConditionLogicalOperator"
           }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "- no job state is specified",
-            "stability": "experimental",
-            "summary": "The condition job state."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/triggers/trigger-options.ts",
-            "line": 120
-          },
-          "name": "state",
-          "optional": true,
-          "type": {
-            "fqn": "@aws-cdk/aws-glue-alpha.JobState"
-          }
-        }
-      ],
-      "symbolId": "lib/triggers/trigger-options:Condition"
-    },
-    "@aws-cdk/aws-glue-alpha.ConditionLogicalOperator": {
-      "assembly": "@aws-cdk/aws-glue-alpha",
-      "docs": {
-        "stability": "experimental",
-        "summary": "Represents the logical operator for evaluating a single condition in the Glue Trigger API."
-      },
-      "fqn": "@aws-cdk/aws-glue-alpha.ConditionLogicalOperator",
-      "kind": "enum",
-      "locationInModule": {
-        "filename": "lib/constants.ts",
-        "line": 341
-      },
-      "members": [
-        {
-          "docs": {
-            "stability": "experimental",
-            "summary": "The condition is true if the values are equal."
-          },
-          "name": "EQUALS"
         }
       ],
-      "name": "ConditionLogicalOperator",
-      "symbolId": "lib/constants:ConditionLogicalOperator"
+      "symbolId": "lib/triggers/trigger-options:ConditionOptions"
     },
     "@aws-cdk/aws-glue-alpha.ConditionalTriggerOptions": {
       "assembly": "@aws-cdk/aws-glue-alpha",
@@ -11061,19 +11126,19 @@
       "docs": {
         "stability": "experimental",
         "summary": "Properties for configuring a Condition (Predicate) based Glue Trigger.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport * as cdk from 'aws-cdk-lib';\nimport { aws_glue as glue } from 'aws-cdk-lib';\n\ndeclare const cfnCrawler: glue.CfnCrawler;\ndeclare const job: glue_alpha.Job;\ndeclare const securityConfiguration: glue_alpha.SecurityConfiguration;\nconst conditionalTriggerOptions: glue_alpha.ConditionalTriggerOptions = {\n  actions: [{\n    arguments: {\n      argumentsKey: 'arguments',\n    },\n    crawler: cfnCrawler,\n    job: job,\n    securityConfiguration: securityConfiguration,\n    timeout: cdk.Duration.minutes(30),\n  }],\n  predicate: {\n    conditions: [{\n      crawlerName: 'crawlerName',\n      crawlState: glue_alpha.CrawlerState.RUNNING,\n      job: job,\n      logicalOperator: glue_alpha.ConditionLogicalOperator.EQUALS,\n      state: glue_alpha.JobState.SUCCEEDED,\n    }],\n    logical: glue_alpha.PredicateLogical.AND,\n  },\n\n  // the properties below are optional\n  description: 'description',\n  name: 'name',\n  startOnCreation: false,\n};",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\n\ndeclare const action: glue_alpha.Action;\ndeclare const condition: glue_alpha.Condition;\nconst conditionalTriggerOptions: glue_alpha.ConditionalTriggerOptions = {\n  actions: [action],\n  predicate: {\n    conditions: [condition],\n    logical: glue_alpha.PredicateLogical.AND,\n  },\n\n  // the properties below are optional\n  description: 'description',\n  name: 'name',\n  startOnCreation: false,\n};",
         "custom": {
           "exampleMetadata": "fixture=_generated"
         }
       },
       "fqn": "@aws-cdk/aws-glue-alpha.ConditionalTriggerOptions",
       "interfaces": [
-        "@aws-cdk/aws-glue-alpha.DailyScheduleTriggerOptions"
+        "@aws-cdk/aws-glue-alpha.StartableTriggerOptions"
       ],
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/triggers/trigger-options.ts",
-        "line": 225
+        "line": 378
       },
       "name": "ConditionalTriggerOptions",
       "properties": [
@@ -11086,7 +11151,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 229
+            "line": 382
           },
           "name": "predicate",
           "type": {
@@ -11114,7 +11179,7 @@
         },
         "locationInModule": {
           "filename": "lib/connection.ts",
-          "line": 397
+          "line": 441
         },
         "parameters": [
           {
@@ -11143,7 +11208,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/connection.ts",
-        "line": 349
+        "line": 393
       },
       "methods": [
         {
@@ -11153,7 +11218,7 @@
           },
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 361
+            "line": 405
           },
           "name": "fromConnectionArn",
           "parameters": [
@@ -11199,7 +11264,7 @@
           },
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 377
+            "line": 421
           },
           "name": "fromConnectionName",
           "parameters": [
@@ -11245,7 +11310,7 @@
           },
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 504
+            "line": 516
           },
           "name": "addProperty",
           "parameters": [
@@ -11281,7 +11346,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 352
+            "line": 396
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -11297,7 +11362,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 494
+            "line": 506
           },
           "name": "connectionArn",
           "overrides": "@aws-cdk/aws-glue-alpha.IConnection",
@@ -11313,7 +11378,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 486
+            "line": 498
           },
           "name": "connectionName",
           "overrides": "@aws-cdk/aws-glue-alpha.IConnection",
@@ -11324,13 +11389,103 @@
       ],
       "symbolId": "lib/connection:Connection"
     },
+    "@aws-cdk/aws-glue-alpha.ConnectionNetwork": {
+      "assembly": "@aws-cdk/aws-glue-alpha",
+      "docs": {
+        "remarks": "A Glue connection targets a single subnet. Choose the placement with one of\nthe mutually-exclusive factories — an explicit subnet, or a VPC to select one\nfrom — so a subnet paired with a VPC, or a subnet selection without a VPC,\ncannot be expressed.",
+        "stability": "experimental",
+        "summary": "VPC network placement for a Glue `Connection`.",
+        "example": "declare const securityGroup: ec2.SecurityGroup;\ndeclare const vpc: ec2.Vpc;\nnew glue.Connection(this, 'MyConnection', {\n  type: glue.ConnectionType.NETWORK,\n  securityGroups: [securityGroup],\n  // vpcSubnets is optional - defaults to private subnets\n  network: glue.ConnectionNetwork.vpc(vpc, { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }),\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-glue-alpha.ConnectionNetwork",
+      "kind": "class",
+      "locationInModule": {
+        "filename": "lib/connection.ts",
+        "line": 264
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Pin the connection to a specific subnet."
+          },
+          "locationInModule": {
+            "filename": "lib/connection.ts",
+            "line": 270
+          },
+          "name": "subnet",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "the subnet the connection targets."
+              },
+              "name": "subnet",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_ec2.ISubnet"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-glue-alpha.ConnectionNetwork"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "default": "vpcSubnets - private subnets",
+            "remarks": "Since a Glue connection targets\na single subnet, the first subnet of the selection is used.",
+            "stability": "experimental",
+            "summary": "Select the connection's subnet from a VPC."
+          },
+          "locationInModule": {
+            "filename": "lib/connection.ts",
+            "line": 282
+          },
+          "name": "vpc",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "the VPC to select a subnet from."
+              },
+              "name": "vpc",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+              }
+            },
+            {
+              "docs": {
+                "summary": "which subnets to select from."
+              },
+              "name": "vpcSubnets",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-glue-alpha.ConnectionNetwork"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "ConnectionNetwork",
+      "symbolId": "lib/connection:ConnectionNetwork"
+    },
     "@aws-cdk/aws-glue-alpha.ConnectionOptions": {
       "assembly": "@aws-cdk/aws-glue-alpha",
       "datatype": true,
       "docs": {
         "stability": "experimental",
         "summary": "Base Connection Options.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport { aws_ec2 as ec2 } from 'aws-cdk-lib';\nimport { aws_secretsmanager as interfaces_secretsmanager } from 'aws-cdk-lib/interfaces';\n\ndeclare const secretRef: interfaces_secretsmanager.ISecretRef;\ndeclare const securityGroup: ec2.SecurityGroup;\ndeclare const subnet: ec2.Subnet;\ndeclare const subnetFilter: ec2.SubnetFilter;\ndeclare const vpc: ec2.Vpc;\nconst connectionOptions: glue_alpha.ConnectionOptions = {\n  connectionName: 'connectionName',\n  description: 'description',\n  matchCriteria: ['matchCriteria'],\n  properties: {\n    propertiesKey: 'properties',\n  },\n  secret: secretRef,\n  securityGroups: [securityGroup],\n  subnet: subnet,\n  vpc: vpc,\n  vpcSubnets: {\n    availabilityZones: ['availabilityZones'],\n    onePerAz: false,\n    subnetFilters: [subnetFilter],\n    subnetGroupName: 'subnetGroupName',\n    subnets: [subnet],\n    subnetType: ec2.SubnetType.PRIVATE_ISOLATED,\n  },\n};",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport { aws_ec2 as ec2 } from 'aws-cdk-lib';\nimport { aws_secretsmanager as interfaces_secretsmanager } from 'aws-cdk-lib/interfaces';\n\ndeclare const connectionNetwork: glue_alpha.ConnectionNetwork;\ndeclare const secretRef: interfaces_secretsmanager.ISecretRef;\ndeclare const securityGroup: ec2.SecurityGroup;\nconst connectionOptions: glue_alpha.ConnectionOptions = {\n  connectionName: 'connectionName',\n  description: 'description',\n  matchCriteria: ['matchCriteria'],\n  network: connectionNetwork,\n  properties: {\n    propertiesKey: 'properties',\n  },\n  secret: secretRef,\n  securityGroups: [securityGroup],\n};",
         "custom": {
           "exampleMetadata": "fixture=_generated"
         }
@@ -11339,7 +11494,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/connection.ts",
-        "line": 259
+        "line": 323
       },
       "name": "ConnectionOptions",
       "properties": [
@@ -11353,7 +11508,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 264
+            "line": 328
           },
           "name": "connectionName",
           "optional": true,
@@ -11371,7 +11526,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 270
+            "line": 334
           },
           "name": "description",
           "optional": true,
@@ -11390,7 +11545,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 296
+            "line": 360
           },
           "name": "matchCriteria",
           "optional": true,
@@ -11403,6 +11558,25 @@
             }
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no VPC network placement",
+            "remarks": "Build it with `ConnectionNetwork.subnet(subnet)` to pin a specific subnet,\nor `ConnectionNetwork.vpc(vpc, vpcSubnets?)` to let the CDK select one.",
+            "stability": "experimental",
+            "summary": "The VPC network placement for this connection, so it can reach resources inside a VPC. See more at https://docs.aws.amazon.com/glue/latest/dg/start-connecting.html."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/connection.ts",
+            "line": 377
+          },
+          "name": "network",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-glue-alpha.ConnectionNetwork"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -11414,7 +11588,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 277
+            "line": 341
           },
           "name": "properties",
           "optional": true,
@@ -11438,7 +11612,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 289
+            "line": 353
           },
           "name": "secret",
           "optional": true,
@@ -11456,7 +11630,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 302
+            "line": 366
           },
           "name": "securityGroups",
           "optional": true,
@@ -11468,63 +11642,6 @@
               "kind": "array"
             }
           }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "- no subnet, unless `vpc` is provided",
-            "remarks": "Mutually exclusive with `vpc`: provide `subnet` to pin the connection to a\nspecific subnet, or provide `vpc` (optionally with `vpcSubnets`) to let the\nCDK select one for you.",
-            "stability": "experimental",
-            "summary": "The VPC subnet to connect to resources within a VPC. See more at https://docs.aws.amazon.com/glue/latest/dg/start-connecting.html."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/connection.ts",
-            "line": 313
-          },
-          "name": "subnet",
-          "optional": true,
-          "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.ISubnet"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "- no VPC, the subnet is taken from `subnet` if provided",
-            "remarks": "When provided, the CDK selects a\nsubnet from this VPC using `vpcSubnets`. A Glue connection targets a single\nsubnet, so the first subnet of the selection is used.\n\nMutually exclusive with `subnet`.",
-            "stability": "experimental",
-            "summary": "The VPC to connect to resources within."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/connection.ts",
-            "line": 324
-          },
-          "name": "vpc",
-          "optional": true,
-          "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "- private subnets",
-            "remarks": "Only used when\n`vpc` is provided. Since a Glue connection targets a single subnet, the\nfirst subnet of the selection is used.",
-            "stability": "experimental",
-            "summary": "Which subnets of `vpc` to select the connection subnet from."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/connection.ts",
-            "line": 333
-          },
-          "name": "vpcSubnets",
-          "optional": true,
-          "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
-          }
         }
       ],
       "symbolId": "lib/connection:ConnectionOptions"
@@ -11596,7 +11713,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Construction properties for `Connection`.",
-        "example": "declare const securityGroup: ec2.SecurityGroup;\ndeclare const vpc: ec2.Vpc;\nnew glue.Connection(this, 'MyConnection', {\n  type: glue.ConnectionType.NETWORK,\n  securityGroups: [securityGroup],\n  vpc,\n  // Optional - defaults to private subnets\n  vpcSubnets: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS },\n});",
+        "example": "declare const securityGroup: ec2.SecurityGroup;\ndeclare const vpc: ec2.Vpc;\nnew glue.Connection(this, 'MyConnection', {\n  type: glue.ConnectionType.NETWORK,\n  securityGroups: [securityGroup],\n  // vpcSubnets is optional - defaults to private subnets\n  network: glue.ConnectionNetwork.vpc(vpc, { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }),\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -11608,7 +11725,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/connection.ts",
-        "line": 339
+        "line": 383
       },
       "name": "ConnectionProps",
       "properties": [
@@ -11621,7 +11738,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/connection.ts",
-            "line": 343
+            "line": 387
           },
           "name": "type",
           "type": {
@@ -11638,7 +11755,7 @@
         "see": "https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-connection-connectioninput.html#cfn-glue-connection-connectioninput-connectiontype",
         "stability": "experimental",
         "summary": "The type of the glue connection.",
-        "example": "declare const securityGroup: ec2.SecurityGroup;\ndeclare const vpc: ec2.Vpc;\nnew glue.Connection(this, 'MyConnection', {\n  type: glue.ConnectionType.NETWORK,\n  securityGroups: [securityGroup],\n  vpc,\n  // Optional - defaults to private subnets\n  vpcSubnets: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS },\n});",
+        "example": "declare const securityGroup: ec2.SecurityGroup;\ndeclare const vpc: ec2.Vpc;\nnew glue.Connection(this, 'MyConnection', {\n  type: glue.ConnectionType.NETWORK,\n  securityGroups: [securityGroup],\n  // vpcSubnets is optional - defaults to private subnets\n  network: glue.ConnectionNetwork.vpc(vpc, { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }),\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -12400,7 +12517,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/jobs/job.ts",
-        "line": 92
+        "line": 93
       },
       "name": "ContinuousLoggingProps",
       "properties": [
@@ -12413,7 +12530,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 96
+            "line": 97
           },
           "name": "enabled",
           "type": {
@@ -12431,7 +12548,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 126
+            "line": 127
           },
           "name": "conversionPattern",
           "optional": true,
@@ -12449,7 +12566,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 103
+            "line": 104
           },
           "name": "logGroup",
           "optional": true,
@@ -12467,7 +12584,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 110
+            "line": 111
           },
           "name": "logStreamPrefix",
           "optional": true,
@@ -12485,7 +12602,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 117
+            "line": 118
           },
           "name": "quiet",
           "optional": true,
@@ -12496,6 +12613,88 @@
       ],
       "symbolId": "lib/jobs/job:ContinuousLoggingProps"
     },
+    "@aws-cdk/aws-glue-alpha.CrawlerActionOptions": {
+      "assembly": "@aws-cdk/aws-glue-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Options for the execution of a crawler.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport * as cdk from 'aws-cdk-lib';\n\ndeclare const securityConfiguration: glue_alpha.SecurityConfiguration;\nconst crawlerActionOptions: glue_alpha.CrawlerActionOptions = {\n  arguments: {\n    argumentsKey: 'arguments',\n  },\n  securityConfiguration: securityConfiguration,\n  timeout: cdk.Duration.minutes(30),\n};",
+        "custom": {
+          "exampleMetadata": "fixture=_generated"
+        }
+      },
+      "fqn": "@aws-cdk/aws-glue-alpha.CrawlerActionOptions",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/triggers/trigger-options.ts",
+        "line": 11
+      },
+      "name": "CrawlerActionOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no arguments are passed to the job",
+            "stability": "experimental",
+            "summary": "The arguments used when this trigger fires."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/triggers/trigger-options.ts",
+            "line": 17
+          },
+          "name": "arguments",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "map"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no security configuration is used",
+            "stability": "experimental",
+            "summary": "The `SecurityConfiguration` to be used with this action."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/triggers/trigger-options.ts",
+            "line": 31
+          },
+          "name": "securityConfiguration",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-glue-alpha.ISecurityConfiguration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- the default timeout value set in the job definition",
+            "remarks": "This is the maximum time that a run can consume resources before it is terminated and enters TIMEOUT status.",
+            "stability": "experimental",
+            "summary": "The run timeout."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/triggers/trigger-options.ts",
+            "line": 24
+          },
+          "name": "timeout",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        }
+      ],
+      "symbolId": "lib/triggers/trigger-options:CrawlerActionOptions"
+    },
     "@aws-cdk/aws-glue-alpha.CrawlerState": {
       "assembly": "@aws-cdk/aws-glue-alpha",
       "docs": {
@@ -12506,7 +12705,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/constants.ts",
-        "line": 349
+        "line": 368
       },
       "members": [
         {
@@ -12555,90 +12754,6 @@
       "name": "CrawlerState",
       "symbolId": "lib/constants:CrawlerState"
     },
-    "@aws-cdk/aws-glue-alpha.CustomScheduledTriggerOptions": {
-      "assembly": "@aws-cdk/aws-glue-alpha",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental",
-        "summary": "Properties for configuring a custom-scheduled Glue Trigger.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport * as cdk from 'aws-cdk-lib';\nimport { aws_glue as glue } from 'aws-cdk-lib';\n\ndeclare const cfnCrawler: glue.CfnCrawler;\ndeclare const job: glue_alpha.Job;\ndeclare const securityConfiguration: glue_alpha.SecurityConfiguration;\ndeclare const triggerSchedule: glue_alpha.TriggerSchedule;\nconst customScheduledTriggerOptions: glue_alpha.CustomScheduledTriggerOptions = {\n  actions: [{\n    arguments: {\n      argumentsKey: 'arguments',\n    },\n    crawler: cfnCrawler,\n    job: job,\n    securityConfiguration: securityConfiguration,\n    timeout: cdk.Duration.minutes(30),\n  }],\n  schedule: triggerSchedule,\n\n  // the properties below are optional\n  description: 'description',\n  name: 'name',\n  startOnCreation: false,\n};",
-        "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
-      },
-      "fqn": "@aws-cdk/aws-glue-alpha.CustomScheduledTriggerOptions",
-      "interfaces": [
-        "@aws-cdk/aws-glue-alpha.WeeklyScheduleTriggerOptions"
-      ],
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "lib/triggers/trigger-options.ts",
-        "line": 203
-      },
-      "name": "CustomScheduledTriggerOptions",
-      "properties": [
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "experimental",
-            "summary": "The custom schedule for the trigger."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/triggers/trigger-options.ts",
-            "line": 207
-          },
-          "name": "schedule",
-          "type": {
-            "fqn": "@aws-cdk/aws-glue-alpha.TriggerSchedule"
-          }
-        }
-      ],
-      "symbolId": "lib/triggers/trigger-options:CustomScheduledTriggerOptions"
-    },
-    "@aws-cdk/aws-glue-alpha.DailyScheduleTriggerOptions": {
-      "assembly": "@aws-cdk/aws-glue-alpha",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental",
-        "summary": "Properties for configuring a daily-scheduled Glue Trigger.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport * as cdk from 'aws-cdk-lib';\nimport { aws_glue as glue } from 'aws-cdk-lib';\n\ndeclare const cfnCrawler: glue.CfnCrawler;\ndeclare const job: glue_alpha.Job;\ndeclare const securityConfiguration: glue_alpha.SecurityConfiguration;\nconst dailyScheduleTriggerOptions: glue_alpha.DailyScheduleTriggerOptions = {\n  actions: [{\n    arguments: {\n      argumentsKey: 'arguments',\n    },\n    crawler: cfnCrawler,\n    job: job,\n    securityConfiguration: securityConfiguration,\n    timeout: cdk.Duration.minutes(30),\n  }],\n\n  // the properties below are optional\n  description: 'description',\n  name: 'name',\n  startOnCreation: false,\n};",
-        "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
-      },
-      "fqn": "@aws-cdk/aws-glue-alpha.DailyScheduleTriggerOptions",
-      "interfaces": [
-        "@aws-cdk/aws-glue-alpha.TriggerOptions"
-      ],
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "lib/triggers/trigger-options.ts",
-        "line": 186
-      },
-      "name": "DailyScheduleTriggerOptions",
-      "properties": [
-        {
-          "abstract": true,
-          "docs": {
-            "default": "- false",
-            "stability": "experimental",
-            "summary": "Whether to start the trigger on creation or not."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/triggers/trigger-options.ts",
-            "line": 192
-          },
-          "name": "startOnCreation",
-          "optional": true,
-          "type": {
-            "primitive": "boolean"
-          }
-        }
-      ],
-      "symbolId": "lib/triggers/trigger-options:DailyScheduleTriggerOptions"
-    },
     "@aws-cdk/aws-glue-alpha.DataCatalogEncryptionAtRest": {
       "assembly": "@aws-cdk/aws-glue-alpha",
       "docs": {
@@ -12803,7 +12918,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Defines the input/output formats and ser/de for a single DataFormat.",
-        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      interval: 1,  // optional, defaults to 1\n      intervalUnit: glue.DateIntervalUnit.DAYS,  // optional: YEARS, MONTHS, WEEKS, DAYS, HOURS, MINUTES, SECONDS\n    }),\n  },\n});",
+        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: 'NOW-3YEARS',\n      max: 'NOW',\n      format: 'yyyy-MM-dd',\n    }),\n  },\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -13899,7 +14014,7 @@
         "see": "https://docs.aws.amazon.com/athena/latest/ug/partition-projection-supported-types.html#partition-projection-date-type",
         "stability": "experimental",
         "summary": "Date interval unit for partition projection.",
-        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      interval: 1,  // optional, defaults to 1\n      intervalUnit: glue.DateIntervalUnit.DAYS,  // optional: YEARS, MONTHS, WEEKS, DAYS, HOURS, MINUTES, SECONDS\n    }),\n  },\n});",
+        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      // `step` bundles interval + unit (supply both or neither). Optional at day\n      // precision or coarser; required when the format is sub-day (e.g. hours).\n      step: { interval: 1, intervalUnit: glue.DateIntervalUnit.DAYS },\n    }),\n  },\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -13970,7 +14085,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Properties for DATE partition projection configuration.",
-        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      interval: 1,  // optional, defaults to 1\n      intervalUnit: glue.DateIntervalUnit.DAYS,  // optional: YEARS, MONTHS, WEEKS, DAYS, HOURS, MINUTES, SECONDS\n    }),\n  },\n});",
+        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      // `step` bundles interval + unit (supply both or neither). Optional at day\n      // precision or coarser; required when the format is sub-day (e.g. hours).\n      step: { interval: 1, intervalUnit: glue.DateIntervalUnit.DAYS },\n    }),\n  },\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -13979,7 +14094,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/partition-projection.ts",
-        "line": 109
+        "line": 127
       },
       "name": "DatePartitionProjectionConfigurationProps",
       "properties": [
@@ -13994,7 +14109,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/partition-projection.ts",
-            "line": 141
+            "line": 159
           },
           "name": "format",
           "type": {
@@ -14011,7 +14126,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/partition-projection.ts",
-            "line": 132
+            "line": 150
           },
           "name": "max",
           "type": {
@@ -14029,7 +14144,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/partition-projection.ts",
-            "line": 121
+            "line": 139
           },
           "name": "min",
           "type": {
@@ -14040,17 +14155,56 @@
           "abstract": true,
           "docs": {
             "default": "- Athena's default step for the format's precision; required when `format` is sub-day precision",
-            "remarks": "Required (together with `intervalUnit`) when `format` carries sub-day\nprecision — i.e. a field finer than a day, such as hours or AM/PM. At day\nor coarser precision Athena defaults the step, so it is optional.",
+            "remarks": "The two are supplied together, so a partial step cannot be expressed.\nRequired when `format` carries sub-day precision — a field finer than a\nday, such as hours or AM/PM; at day or coarser precision Athena defaults\nthe step, so it may be omitted.",
+            "stability": "experimental",
+            "summary": "Interval step (`interval` + `intervalUnit`) between partition values."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/partition-projection.ts",
+            "line": 171
+          },
+          "name": "step",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-glue-alpha.DateProjectionStep"
+          }
+        }
+      ],
+      "symbolId": "lib/partition-projection:DatePartitionProjectionConfigurationProps"
+    },
+    "@aws-cdk/aws-glue-alpha.DateProjectionStep": {
+      "assembly": "@aws-cdk/aws-glue-alpha",
+      "datatype": true,
+      "docs": {
+        "remarks": "Bundling `interval` and `intervalUnit` into one value makes a partial step\n(one without the other) unrepresentable.",
+        "stability": "experimental",
+        "summary": "A required-together interval step for DATE partition projection.",
+        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      // `step` bundles interval + unit (supply both or neither). Optional at day\n      // precision or coarser; required when the format is sub-day (e.g. hours).\n      step: { interval: 1, intervalUnit: glue.DateIntervalUnit.DAYS },\n    }),\n  },\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-glue-alpha.DateProjectionStep",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/partition-projection.ts",
+        "line": 112
+      },
+      "name": "DateProjectionStep",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
             "stability": "experimental",
             "summary": "Interval between partition values."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/partition-projection.ts",
-            "line": 152
+            "line": 116
           },
           "name": "interval",
-          "optional": true,
           "type": {
             "primitive": "number"
           }
@@ -14058,24 +14212,21 @@
         {
           "abstract": true,
           "docs": {
-            "default": "- Athena's default unit for the format's precision; required when `format` is sub-day precision",
-            "remarks": "Required (together with `interval`) when `format` carries sub-day\nprecision — i.e. a field finer than a day, such as hours or AM/PM. At day\nor coarser precision Athena defaults the step, so it is optional.",
             "stability": "experimental",
             "summary": "Unit for the interval."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/partition-projection.ts",
-            "line": 163
+            "line": 121
           },
           "name": "intervalUnit",
-          "optional": true,
           "type": {
             "fqn": "@aws-cdk/aws-glue-alpha.DateIntervalUnit"
           }
         }
       ],
-      "symbolId": "lib/partition-projection:DatePartitionProjectionConfigurationProps"
+      "symbolId": "lib/partition-projection:DateProjectionStep"
     },
     "@aws-cdk/aws-glue-alpha.Dqdl": {
       "assembly": "@aws-cdk/aws-glue-alpha",
@@ -14143,7 +14294,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/partition-projection.ts",
-        "line": 169
+        "line": 177
       },
       "name": "EnumPartitionProjectionConfigurationProps",
       "properties": [
@@ -14157,7 +14308,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/partition-projection.ts",
-            "line": 175
+            "line": 183
           },
           "name": "values",
           "type": {
@@ -14187,7 +14338,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/triggers/trigger-options.ts",
-        "line": 140
+        "line": 295
       },
       "name": "EventBatchingCondition",
       "properties": [
@@ -14200,7 +14351,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 144
+            "line": 299
           },
           "name": "batchSize",
           "type": {
@@ -14217,7 +14368,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 151
+            "line": 306
           },
           "name": "batchWindow",
           "optional": true,
@@ -14228,6 +14379,49 @@
       ],
       "symbolId": "lib/triggers/trigger-options:EventBatchingCondition"
     },
+    "@aws-cdk/aws-glue-alpha.EventTriggerOptions": {
+      "assembly": "@aws-cdk/aws-glue-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Properties for configuring an Event Bridge based Glue Trigger.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport * as cdk from 'aws-cdk-lib';\n\ndeclare const action: glue_alpha.Action;\nconst eventTriggerOptions: glue_alpha.EventTriggerOptions = {\n  actions: [action],\n\n  // the properties below are optional\n  description: 'description',\n  eventBatchingCondition: {\n    batchSize: 123,\n\n    // the properties below are optional\n    batchWindow: cdk.Duration.minutes(30),\n  },\n  name: 'name',\n};",
+        "custom": {
+          "exampleMetadata": "fixture=_generated"
+        }
+      },
+      "fqn": "@aws-cdk/aws-glue-alpha.EventTriggerOptions",
+      "interfaces": [
+        "@aws-cdk/aws-glue-alpha.TriggerOptions"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/triggers/trigger-options.ts",
+        "line": 366
+      },
+      "name": "EventTriggerOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no batch condition",
+            "stability": "experimental",
+            "summary": "Batch condition for the trigger."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/triggers/trigger-options.ts",
+            "line": 372
+          },
+          "name": "eventBatchingCondition",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-glue-alpha.EventBatchingCondition"
+          }
+        }
+      ],
+      "symbolId": "lib/triggers/trigger-options:EventTriggerOptions"
+    },
     "@aws-cdk/aws-glue-alpha.ExecutionClass": {
       "assembly": "@aws-cdk/aws-glue-alpha",
       "docs": {
@@ -14923,12 +15117,13 @@
       "fqn": "@aws-cdk/aws-glue-alpha.IJob",
       "interfaces": [
         "aws-cdk-lib.IResource",
-        "aws-cdk-lib.aws_iam.IGrantable"
+        "aws-cdk-lib.aws_iam.IGrantable",
+        "aws-cdk-lib.interfaces.aws_glue.IJobRef"
       ],
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/jobs/job.ts",
-        "line": 18
+        "line": 19
       },
       "methods": [
         {
@@ -14940,7 +15135,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 68
+            "line": 69
           },
           "name": "metric",
           "parameters": [
@@ -14987,7 +15182,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 78
+            "line": 79
           },
           "name": "metricFailure",
           "parameters": [
@@ -15013,7 +15208,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 73
+            "line": 74
           },
           "name": "metricSuccess",
           "parameters": [
@@ -15039,7 +15234,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 83
+            "line": 84
           },
           "name": "metricTimeout",
           "parameters": [
@@ -15066,7 +15261,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 36
+            "line": 37
           },
           "name": "onEvent",
           "parameters": [
@@ -15099,7 +15294,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 50
+            "line": 51
           },
           "name": "onFailure",
           "parameters": [
@@ -15132,7 +15327,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 43
+            "line": 44
           },
           "name": "onSuccess",
           "parameters": [
@@ -15165,7 +15360,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 57
+            "line": 58
           },
           "name": "onTimeout",
           "parameters": [
@@ -15204,7 +15399,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 29
+            "line": 30
           },
           "name": "jobArn",
           "type": {
@@ -15223,7 +15418,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 23
+            "line": 24
           },
           "name": "jobName",
           "type": {
@@ -15341,20 +15536,21 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/triggers/workflow.ts",
-        "line": 30
+        "line": 24
       },
       "methods": [
         {
           "abstract": true,
           "docs": {
+            "returns": "a reference to the created trigger.",
             "stability": "experimental",
-            "summary": "Add an custom-scheduled trigger to the workflow."
+            "summary": "Add a conditional (predicate-based) trigger to the workflow."
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 61
+            "line": 63
           },
-          "name": "addCustomScheduledTrigger",
+          "name": "addConditionalTrigger",
           "parameters": [
             {
               "name": "id",
@@ -15365,27 +15561,28 @@
             {
               "name": "options",
               "type": {
-                "fqn": "@aws-cdk/aws-glue-alpha.CustomScheduledTriggerOptions"
+                "fqn": "@aws-cdk/aws-glue-alpha.ConditionalTriggerOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "aws-cdk-lib.aws_glue.CfnTrigger"
+              "fqn": "aws-cdk-lib.interfaces.aws_glue.ITriggerRef"
             }
           }
         },
         {
           "abstract": true,
           "docs": {
+            "returns": "a reference to the created trigger.",
             "stability": "experimental",
-            "summary": "Add an daily-scheduled trigger to the workflow."
+            "summary": "Add an EventBridge event-based trigger to the workflow."
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 51
+            "line": 56
           },
-          "name": "addDailyScheduledTrigger",
+          "name": "addEventTrigger",
           "parameters": [
             {
               "name": "id",
@@ -15396,25 +15593,26 @@
             {
               "name": "options",
               "type": {
-                "fqn": "@aws-cdk/aws-glue-alpha.DailyScheduleTriggerOptions"
+                "fqn": "@aws-cdk/aws-glue-alpha.EventTriggerOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "aws-cdk-lib.aws_glue.CfnTrigger"
+              "fqn": "aws-cdk-lib.interfaces.aws_glue.ITriggerRef"
             }
           }
         },
         {
           "abstract": true,
           "docs": {
+            "returns": "a reference to the created trigger.",
             "stability": "experimental",
             "summary": "Add an on-demand trigger to the workflow."
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 46
+            "line": 42
           },
           "name": "addOnDemandTrigger",
           "parameters": [
@@ -15433,21 +15631,22 @@
           ],
           "returns": {
             "type": {
-              "fqn": "aws-cdk-lib.aws_glue.CfnTrigger"
+              "fqn": "aws-cdk-lib.interfaces.aws_glue.ITriggerRef"
             }
           }
         },
         {
           "abstract": true,
           "docs": {
+            "returns": "a reference to the created trigger.",
             "stability": "experimental",
-            "summary": "Add an weekly-scheduled trigger to the workflow."
+            "summary": "Add a scheduled trigger to the workflow."
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 56
+            "line": 49
           },
-          "name": "addWeeklyScheduledTrigger",
+          "name": "addScheduledTrigger",
           "parameters": [
             {
               "name": "id",
@@ -15458,13 +15657,13 @@
             {
               "name": "options",
               "type": {
-                "fqn": "@aws-cdk/aws-glue-alpha.WeeklyScheduleTriggerOptions"
+                "fqn": "@aws-cdk/aws-glue-alpha.ScheduledTriggerOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "aws-cdk-lib.aws_glue.CfnTrigger"
+              "fqn": "aws-cdk-lib.interfaces.aws_glue.ITriggerRef"
             }
           }
         }
@@ -15483,7 +15682,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 41
+            "line": 35
           },
           "name": "workflowArn",
           "type": {
@@ -15502,7 +15701,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 35
+            "line": 29
           },
           "name": "workflowName",
           "type": {
@@ -15846,7 +16045,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/jobs/job.ts",
-        "line": 439
+        "line": 456
       },
       "methods": [
         {
@@ -15856,7 +16055,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 448
+            "line": 465
           },
           "name": "fromJobAttributes",
           "parameters": [
@@ -15897,17 +16096,45 @@
         },
         {
           "docs": {
+            "stability": "experimental"
+          },
+          "locationInModule": {
+            "filename": "lib/jobs/job.ts",
+            "line": 626
+          },
+          "name": "codeS3ObjectUrl",
+          "parameters": [
+            {
+              "name": "code",
+              "type": {
+                "fqn": "@aws-cdk/aws-glue-alpha.Code"
+              }
+            }
+          ],
+          "protected": true,
+          "returns": {
+            "type": {
+              "primitive": "string"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "The construct owns every argument it emits — whether the value comes from a dedicated typed\nprop (e.g. `continuousLogging`, `enableMetrics`, `sparkUI`) or from the job class itself\n(e.g. `--job-language`). Those arguments, plus the arguments Glue reserves for its own use,\nMUST be configured through their dedicated props rather than the untyped `defaultArguments`\nmap, so there is exactly one way to express each intent. Passing such a key through\n`defaultArguments` therefore throws instead of silently winning or being silently dropped.\n\nA managed key whose supplied value is identical to the construct's value is not contradictory,\nso it is allowed rather than rejected (auto-correcting config is preferred over errors).\nGlue-reserved keys are never emitted by the construct, so there is no value to reconcile and\nthey always throw.\n\nThe reserved set is `_managedArgumentKeys` — every key the construct declared through\n{@link setManagedArgument}, whether or not a value was emitted for it. It is deliberately NOT\nderived from the keys that carry a value: a typed prop that turns a feature *off* (e.g.\n`enableMetrics: false`) emits no value but still reserves its key, so `defaultArguments` cannot\nsilently re-enable it.\n\nConflict detection relies on string equality of the argument keys, which cannot see through\nunresolved tokens (e.g. a key produced by `CfnJson` that only resolves at deploy time). If a\nkey is a token, the check is skipped for that key and a synthesis-time warning is emitted, so\nthe (rare) case where a token key resolves to a managed argument at deploy time — in which the\nconstruct-managed value would silently take precedence — is surfaced rather than hidden.",
             "see": "https://docs.aws.amazon.com/glue/latest/dg/aws-glue-programming-etl-glue-arguments.html",
             "stability": "experimental",
-            "summary": "Check no usage of reserved arguments."
+            "summary": "Merge the customer-supplied `defaultArguments` with the arguments this construct manages."
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 468
+            "line": 556
           },
-          "name": "checkNoReservedArgs",
+          "name": "mergeDefaultArguments",
           "parameters": [
             {
+              "docs": {
+                "summary": "the caller-supplied escape-hatch arguments, if any."
+              },
               "name": "defaultArguments",
               "optional": true,
               "type": {
@@ -15922,7 +16149,6 @@
           ],
           "protected": true,
           "returns": {
-            "optional": true,
             "type": {
               "collection": {
                 "elementtype": {
@@ -15935,43 +16161,53 @@
         },
         {
           "docs": {
-            "stability": "experimental"
+            "remarks": "This is the single sink for every argument a job construct derives from its typed props (or\nfrom the job class itself). Call it once per managed key, passing `undefined` as the value when\nthe corresponding feature is turned off or unset — the key is still reserved from\n`defaultArguments` either way, so a disabled feature cannot be re-enabled through the escape\nhatch. There is deliberately no other way for a subclass to emit a managed argument, so the\nreserved set can never drift from what is emitted.",
+            "stability": "experimental",
+            "summary": "Declare `key` as construct-managed and, when `value` is defined, emit it into the job's arguments."
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 524
+            "line": 519
           },
-          "name": "codeS3ObjectUrl",
+          "name": "setManagedArgument",
           "parameters": [
             {
-              "name": "code",
+              "docs": {
+                "summary": "the Glue argument key, e.g. `--enable-metrics`."
+              },
+              "name": "key",
               "type": {
-                "fqn": "@aws-cdk/aws-glue-alpha.Code"
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "the value to emit, or `undefined` to reserve the key without emitting it."
+              },
+              "name": "value",
+              "optional": true,
+              "type": {
+                "primitive": "string"
               }
             }
           ],
-          "protected": true,
-          "returns": {
-            "type": {
-              "primitive": "string"
-            }
-          }
+          "protected": true
         },
         {
           "docs": {
-            "returns": "String containing the args for the continuous logging command",
+            "remarks": "All five continuous-logging keys are reserved on every job type regardless of configuration:\nthey are always registered through {@link setManagedArgument}, and carry a value only when\nlogging is enabled. This keeps `defaultArguments` from re-enabling logging a user turned off.",
             "stability": "experimental",
-            "summary": "Setup Continuous Logging Properties."
+            "summary": "Register (and, when enabled, emit) the continuous-logging arguments this job manages."
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 492
+            "line": 599
           },
           "name": "setupContinuousLogging",
           "parameters": [
             {
               "docs": {
-                "summary": "The IAM role to use for continuous logging."
+                "summary": "The IAM role to grant write access to a custom log group, if one is provided."
               },
               "name": "role",
               "type": {
@@ -15987,14 +16223,19 @@
               "type": {
                 "fqn": "@aws-cdk/aws-glue-alpha.ContinuousLoggingProps"
               }
+            },
+            {
+              "docs": {
+                "summary": "The security configuration attached to the job, if any."
+              },
+              "name": "securityConfiguration",
+              "optional": true,
+              "type": {
+                "fqn": "@aws-cdk/aws-glue-alpha.ISecurityConfiguration"
+              }
             }
           ],
-          "protected": true,
-          "returns": {
-            "type": {
-              "primitive": "any"
-            }
-          }
+          "protected": true
         }
       ],
       "name": "Job",
@@ -16008,7 +16249,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 461
+            "line": 487
           },
           "name": "role",
           "type": {
@@ -16018,6 +16259,88 @@
       ],
       "symbolId": "lib/jobs/job:Job"
     },
+    "@aws-cdk/aws-glue-alpha.JobActionOptions": {
+      "assembly": "@aws-cdk/aws-glue-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Options for the execution of a job.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport * as cdk from 'aws-cdk-lib';\n\ndeclare const securityConfiguration: glue_alpha.SecurityConfiguration;\nconst jobActionOptions: glue_alpha.JobActionOptions = {\n  arguments: {\n    argumentsKey: 'arguments',\n  },\n  securityConfiguration: securityConfiguration,\n  timeout: cdk.Duration.minutes(30),\n};",
+        "custom": {
+          "exampleMetadata": "fixture=_generated"
+        }
+      },
+      "fqn": "@aws-cdk/aws-glue-alpha.JobActionOptions",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/triggers/trigger-options.ts",
+        "line": 37
+      },
+      "name": "JobActionOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no arguments are passed to the job",
+            "stability": "experimental",
+            "summary": "The arguments used when this trigger fires."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/triggers/trigger-options.ts",
+            "line": 43
+          },
+          "name": "arguments",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "map"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no security configuration is used",
+            "stability": "experimental",
+            "summary": "The `SecurityConfiguration` to be used with this action."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/triggers/trigger-options.ts",
+            "line": 57
+          },
+          "name": "securityConfiguration",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-glue-alpha.ISecurityConfiguration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- the default timeout value set in the job definition",
+            "remarks": "This is the maximum time that a run can consume resources before it is terminated and enters TIMEOUT status.",
+            "stability": "experimental",
+            "summary": "The run timeout."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/triggers/trigger-options.ts",
+            "line": 50
+          },
+          "name": "timeout",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        }
+      ],
+      "symbolId": "lib/triggers/trigger-options:JobActionOptions"
+    },
     "@aws-cdk/aws-glue-alpha.JobAttributes": {
       "assembly": "@aws-cdk/aws-glue-alpha",
       "datatype": true,
@@ -16034,7 +16357,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/jobs/job.ts",
-        "line": 291
+        "line": 299
       },
       "name": "JobAttributes",
       "properties": [
@@ -16047,7 +16370,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 295
+            "line": 303
           },
           "name": "jobName",
           "type": {
@@ -16064,7 +16387,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 302
+            "line": 310
           },
           "name": "role",
           "optional": true,
@@ -16121,7 +16444,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/jobs/job.ts",
-        "line": 136
+        "line": 137
       },
       "methods": [
         {
@@ -16131,7 +16454,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 277
+            "line": 285
           },
           "name": "buildJobArn",
           "parameters": [
@@ -16163,7 +16486,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 224
+            "line": 232
           },
           "name": "metric",
           "overrides": "@aws-cdk/aws-glue-alpha.IJob",
@@ -16211,7 +16534,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 251
+            "line": 259
           },
           "name": "metricFailure",
           "overrides": "@aws-cdk/aws-glue-alpha.IJob",
@@ -16238,7 +16561,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 242
+            "line": 250
           },
           "name": "metricSuccess",
           "overrides": "@aws-cdk/aws-glue-alpha.IJob",
@@ -16265,7 +16588,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 260
+            "line": 268
           },
           "name": "metricTimeout",
           "overrides": "@aws-cdk/aws-glue-alpha.IJob",
@@ -16292,7 +16615,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 152
+            "line": 160
           },
           "name": "onEvent",
           "overrides": "@aws-cdk/aws-glue-alpha.IJob",
@@ -16331,7 +16654,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 201
+            "line": 209
           },
           "name": "onFailure",
           "overrides": "@aws-cdk/aws-glue-alpha.IJob",
@@ -16370,7 +16693,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 172
+            "line": 180
           },
           "name": "onStateChange",
           "parameters": [
@@ -16417,7 +16740,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 191
+            "line": 199
           },
           "name": "onSuccess",
           "overrides": "@aws-cdk/aws-glue-alpha.IJob",
@@ -16456,7 +16779,7 @@
           },
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 211
+            "line": 219
           },
           "name": "onTimeout",
           "overrides": "@aws-cdk/aws-glue-alpha.IJob",
@@ -16500,7 +16823,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 139
+            "line": 140
           },
           "name": "grantPrincipal",
           "overrides": "aws-cdk-lib.aws_iam.IGrantable",
@@ -16517,7 +16840,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 137
+            "line": 138
           },
           "name": "jobArn",
           "overrides": "@aws-cdk/aws-glue-alpha.IJob",
@@ -16534,13 +16857,29 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 138
+            "line": 139
           },
           "name": "jobName",
           "overrides": "@aws-cdk/aws-glue-alpha.IJob",
           "type": {
             "primitive": "string"
           }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "A reference to this Job resource, for use with the generated L1 ref interface."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/jobs/job.ts",
+            "line": 145
+          },
+          "name": "jobRef",
+          "overrides": "aws-cdk-lib.interfaces.aws_glue.IJobRef",
+          "type": {
+            "fqn": "aws-cdk-lib.interfaces.aws_glue.JobReference"
+          }
         }
       ],
       "symbolId": "lib/jobs/job:JobBase"
@@ -16644,7 +16983,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/jobs/job.ts",
-        "line": 309
+        "line": 317
       },
       "name": "JobProps",
       "properties": [
@@ -16658,7 +16997,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 328
+            "line": 336
           },
           "name": "role",
           "type": {
@@ -16675,7 +17014,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 316
+            "line": 324
           },
           "name": "script",
           "type": {
@@ -16692,7 +17031,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 380
+            "line": 397
           },
           "name": "connections",
           "optional": true,
@@ -16716,7 +17055,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 432
+            "line": 449
           },
           "name": "continuousLogging",
           "optional": true,
@@ -16728,7 +17067,7 @@
           "abstract": true,
           "docs": {
             "default": "- no arguments",
-            "remarks": "These are emitted verbatim into the CloudFormation template, so avoid\nplacing secrets here in plaintext. Pass secrets to the job at runtime\nthrough AWS Secrets Manager instead. A synthesis-time warning is emitted\nwhen an argument key looks like a credential and holds a plaintext literal.",
+            "remarks": "This map is the escape hatch for Glue job arguments that this construct does not model. It\nMUST NOT be used to set arguments that already have a dedicated prop — configure those through\nthe corresponding prop instead (`continuousLogging`, `enableMetrics`,\n`enableObservabilityMetrics`, `sparkUI`, `className`, `extraJars`, `extraJarsFirst`,\n`extraPythonFiles`, `extraFiles`). Passing a construct-managed argument (e.g.\n`--enable-continuous-cloudwatch-log`, `--enable-metrics`, `--enable-spark-ui`,\n`--job-language`) or a Glue-reserved argument (`--debug`, `--mode`, `--JOB_NAME`, `--endpoint`)\nhere throws at synthesis time, so there is exactly one way to express each intent.\n\nAlso note that these are emitted verbatim into the CloudFormation template, so avoid\nplacing secrets here in plaintext. Pass secrets to the job at runtime\nthrough AWS Secrets Manager instead. A synthesis-time warning is emitted\nwhen an argument key looks like a credential and holds a plaintext literal.",
             "see": "https://docs.aws.amazon.com/glue/latest/dg/aws-glue-programming-etl-glue-arguments.html\nfor a list of reserved parameters",
             "stability": "experimental",
             "summary": "Default Arguments (optional) The default arguments for every run of this Glue job, specified as name-value pairs."
@@ -16736,7 +17075,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 371
+            "line": 388
           },
           "name": "defaultArguments",
           "optional": true,
@@ -16759,7 +17098,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 344
+            "line": 352
           },
           "name": "description",
           "optional": true,
@@ -16777,7 +17116,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 422
+            "line": 439
           },
           "name": "glueVersion",
           "optional": true,
@@ -16795,7 +17134,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 336
+            "line": 344
           },
           "name": "jobName",
           "optional": true,
@@ -16814,7 +17153,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 355
+            "line": 363
           },
           "name": "maxConcurrentRuns",
           "optional": true,
@@ -16832,7 +17171,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 388
+            "line": 405
           },
           "name": "maxRetries",
           "optional": true,
@@ -16850,7 +17189,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 406
+            "line": 423
           },
           "name": "securityConfiguration",
           "optional": true,
@@ -16868,7 +17207,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 414
+            "line": 431
           },
           "name": "tags",
           "optional": true,
@@ -16892,7 +17231,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/job.ts",
-            "line": 398
+            "line": 415
           },
           "name": "timeout",
           "optional": true,
@@ -16980,7 +17319,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/constants.ts",
-        "line": 281
+        "line": 300
       },
       "members": [
         {
@@ -17016,6 +17355,39 @@
       "name": "JobType",
       "symbolId": "lib/constants:JobType"
     },
+    "@aws-cdk/aws-glue-alpha.LibrarySet": {
+      "assembly": "@aws-cdk/aws-glue-alpha",
+      "docs": {
+        "see": "https://docs.aws.amazon.com/glue/latest/dg/add-job-python.html#python-shell-supported-library",
+        "stability": "experimental",
+        "summary": "The set of pre-installed Python libraries available to a Python shell job running Python 3.9."
+      },
+      "fqn": "@aws-cdk/aws-glue-alpha.LibrarySet",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "lib/constants.ts",
+        "line": 269
+      },
+      "members": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Include the common analytics libraries for Python 3.9 (e.g. pandas, numpy, scikit-learn, awswrangler)."
+          },
+          "name": "ANALYTICS"
+        },
+        {
+          "docs": {
+            "remarks": "Use this when your libraries are custom or conflict\nwith the pre-installed ones.",
+            "stability": "experimental",
+            "summary": "Do not install the common library set."
+          },
+          "name": "NONE"
+        }
+      ],
+      "name": "LibrarySet",
+      "symbolId": "lib/constants:LibrarySet"
+    },
     "@aws-cdk/aws-glue-alpha.MaxCapacity": {
       "assembly": "@aws-cdk/aws-glue-alpha",
       "docs": {
@@ -17031,7 +17403,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/constants.ts",
-        "line": 311
+        "line": 330
       },
       "members": [
         {
@@ -17084,49 +17456,6 @@
       "name": "MetricType",
       "symbolId": "lib/constants:MetricType"
     },
-    "@aws-cdk/aws-glue-alpha.NotifyEventTriggerOptions": {
-      "assembly": "@aws-cdk/aws-glue-alpha",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental",
-        "summary": "Properties for configuring an Event Bridge based Glue Trigger.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport * as cdk from 'aws-cdk-lib';\nimport { aws_glue as glue } from 'aws-cdk-lib';\n\ndeclare const cfnCrawler: glue.CfnCrawler;\ndeclare const job: glue_alpha.Job;\ndeclare const securityConfiguration: glue_alpha.SecurityConfiguration;\nconst notifyEventTriggerOptions: glue_alpha.NotifyEventTriggerOptions = {\n  actions: [{\n    arguments: {\n      argumentsKey: 'arguments',\n    },\n    crawler: cfnCrawler,\n    job: job,\n    securityConfiguration: securityConfiguration,\n    timeout: cdk.Duration.minutes(30),\n  }],\n\n  // the properties below are optional\n  description: 'description',\n  eventBatchingCondition: {\n    batchSize: 123,\n\n    // the properties below are optional\n    batchWindow: cdk.Duration.minutes(30),\n  },\n  name: 'name',\n};",
-        "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
-      },
-      "fqn": "@aws-cdk/aws-glue-alpha.NotifyEventTriggerOptions",
-      "interfaces": [
-        "@aws-cdk/aws-glue-alpha.TriggerOptions"
-      ],
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "lib/triggers/trigger-options.ts",
-        "line": 213
-      },
-      "name": "NotifyEventTriggerOptions",
-      "properties": [
-        {
-          "abstract": true,
-          "docs": {
-            "default": "- no batch condition",
-            "stability": "experimental",
-            "summary": "Batch condition for the trigger."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/triggers/trigger-options.ts",
-            "line": 219
-          },
-          "name": "eventBatchingCondition",
-          "optional": true,
-          "type": {
-            "fqn": "@aws-cdk/aws-glue-alpha.EventBatchingCondition"
-          }
-        }
-      ],
-      "symbolId": "lib/triggers/trigger-options:NotifyEventTriggerOptions"
-    },
     "@aws-cdk/aws-glue-alpha.NumericOverflowHandlingAction": {
       "assembly": "@aws-cdk/aws-glue-alpha",
       "docs": {
@@ -17179,7 +17508,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Properties for configuring an on-demand Glue Trigger.",
-        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [{ job }],\n});",
+        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [glue.Action.job(job)],\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -17191,7 +17520,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/triggers/trigger-options.ts",
-        "line": 181
+        "line": 336
       },
       "name": "OnDemandTriggerOptions",
       "symbolId": "lib/triggers/trigger-options:OnDemandTriggerOptions"
@@ -17419,7 +17748,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Factory class for creating partition projection configurations.",
-        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      interval: 1,  // optional, defaults to 1\n      intervalUnit: glue.DateIntervalUnit.DAYS,  // optional: YEARS, MONTHS, WEEKS, DAYS, HOURS, MINUTES, SECONDS\n    }),\n  },\n});",
+        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      // `step` bundles interval + unit (supply both or neither). Optional at day\n      // precision or coarser; required when the format is sub-day (e.g. hours).\n      step: { interval: 1, intervalUnit: glue.DateIntervalUnit.DAYS },\n    }),\n  },\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -17428,7 +17757,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/partition-projection.ts",
-        "line": 269
+        "line": 277
       },
       "methods": [
         {
@@ -17438,7 +17767,7 @@
           },
           "locationInModule": {
             "filename": "lib/partition-projection.ts",
-            "line": 327
+            "line": 335
           },
           "name": "date",
           "parameters": [
@@ -17463,7 +17792,7 @@
           },
           "locationInModule": {
             "filename": "lib/partition-projection.ts",
-            "line": 424
+            "line": 432
           },
           "name": "enum",
           "parameters": [
@@ -17490,7 +17819,7 @@
           },
           "locationInModule": {
             "filename": "lib/partition-projection.ts",
-            "line": 464
+            "line": 472
           },
           "name": "injected",
           "returns": {
@@ -17507,7 +17836,7 @@
           },
           "locationInModule": {
             "filename": "lib/partition-projection.ts",
-            "line": 273
+            "line": 281
           },
           "name": "integer",
           "parameters": [
@@ -17536,141 +17865,12 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/partition-projection.ts",
-            "line": 473
+            "line": 481
           },
           "name": "type",
           "type": {
             "fqn": "@aws-cdk/aws-glue-alpha.PartitionProjectionType"
           }
-        },
-        {
-          "docs": {
-            "remarks": "Array of [start, end] as date strings.",
-            "stability": "experimental",
-            "summary": "Range of partition values for DATE type."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/partition-projection.ts",
-            "line": 487
-          },
-          "name": "dateRange",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "primitive": "string"
-              },
-              "kind": "array"
-            }
-          }
-        },
-        {
-          "docs": {
-            "stability": "experimental",
-            "summary": "Number of digits to pad INTEGER partition values."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/partition-projection.ts",
-            "line": 497
-          },
-          "name": "digits",
-          "optional": true,
-          "type": {
-            "primitive": "number"
-          }
-        },
-        {
-          "docs": {
-            "stability": "experimental",
-            "summary": "Date format for DATE partition values (Java SimpleDateFormat)."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/partition-projection.ts",
-            "line": 502
-          },
-          "name": "format",
-          "optional": true,
-          "type": {
-            "primitive": "string"
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Array of [min, max] as numbers.",
-            "stability": "experimental",
-            "summary": "Range of partition values for INTEGER type."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/partition-projection.ts",
-            "line": 480
-          },
-          "name": "integerRange",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "primitive": "number"
-              },
-              "kind": "array"
-            }
-          }
-        },
-        {
-          "docs": {
-            "stability": "experimental",
-            "summary": "Interval between partition values."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/partition-projection.ts",
-            "line": 492
-          },
-          "name": "interval",
-          "optional": true,
-          "type": {
-            "primitive": "number"
-          }
-        },
-        {
-          "docs": {
-            "stability": "experimental",
-            "summary": "Unit for DATE partition interval."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/partition-projection.ts",
-            "line": 507
-          },
-          "name": "intervalUnit",
-          "optional": true,
-          "type": {
-            "fqn": "@aws-cdk/aws-glue-alpha.DateIntervalUnit"
-          }
-        },
-        {
-          "docs": {
-            "stability": "experimental",
-            "summary": "Explicit list of values for ENUM partitions."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/partition-projection.ts",
-            "line": 512
-          },
-          "name": "values",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "primitive": "string"
-              },
-              "kind": "array"
-            }
-          }
         }
       ],
       "symbolId": "lib/partition-projection:PartitionProjectionConfiguration"
@@ -17728,7 +17928,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Represents a trigger predicate.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\n\ndeclare const job: glue_alpha.Job;\nconst predicate: glue_alpha.Predicate = {\n  conditions: [{\n    crawlerName: 'crawlerName',\n    crawlState: glue_alpha.CrawlerState.RUNNING,\n    job: job,\n    logicalOperator: glue_alpha.ConditionLogicalOperator.EQUALS,\n    state: glue_alpha.JobState.SUCCEEDED,\n  }],\n  logical: glue_alpha.PredicateLogical.AND,\n};",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\n\ndeclare const condition: glue_alpha.Condition;\nconst predicate: glue_alpha.Predicate = {\n  conditions: [condition],\n  logical: glue_alpha.PredicateLogical.AND,\n};",
         "custom": {
           "exampleMetadata": "fixture=_generated"
         }
@@ -17737,7 +17937,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/triggers/trigger-options.ts",
-        "line": 81
+        "line": 183
       },
       "name": "Predicate",
       "properties": [
@@ -17751,7 +17951,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 94
+            "line": 196
           },
           "name": "conditions",
           "optional": true,
@@ -17774,7 +17974,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 87
+            "line": 189
           },
           "name": "logical",
           "optional": true,
@@ -17794,7 +17994,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/constants.ts",
-        "line": 326
+        "line": 345
       },
       "members": [
         {
@@ -17822,7 +18022,7 @@
         "remarks": "ETL jobs support pySpark and Scala languages, for which there are separate\nbut similar constructors. ETL jobs default to the G1 worker type, but you\ncan override this default with other supported worker type values\n(G1, G2, G4 and G8). ETL jobs defaults to Glue version 4.0, which you can\noverride to 3.0. The following ETL features are enabled by default:\n--enable-metrics, --enable-continuous-cloudwatch-log. The Spark UI\n(--enable-spark-ui) is off by default; enable it by setting the `sparkUI` prop.\nYou can find more details about version, worker type and other features\nin Glue's public documentation.",
         "stability": "experimental",
         "summary": "PySpark ETL Jobs class.",
-        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [{ job }],\n});",
+        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [glue.Action.job(job)],\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -17890,7 +18090,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/pyspark-etl-job.ts",
-            "line": 132
+            "line": 131
           },
           "name": "jobArn",
           "overrides": "@aws-cdk/aws-glue-alpha.JobBase",
@@ -17906,7 +18106,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/pyspark-etl-job.ts",
-            "line": 137
+            "line": 136
           },
           "name": "jobName",
           "overrides": "@aws-cdk/aws-glue-alpha.JobBase",
@@ -17923,7 +18123,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Properties for creating a Python Spark ETL job.",
-        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [{ job }],\n});",
+        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [glue.Action.job(job)],\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -18144,7 +18344,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/pyspark-flex-etl-job.ts",
-            "line": 116
+            "line": 115
           },
           "name": "jobArn",
           "overrides": "@aws-cdk/aws-glue-alpha.JobBase",
@@ -18160,7 +18360,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/pyspark-flex-etl-job.ts",
-            "line": 121
+            "line": 120
           },
           "name": "jobName",
           "overrides": "@aws-cdk/aws-glue-alpha.JobBase",
@@ -18379,7 +18579,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/pyspark-streaming-job.ts",
-            "line": 117
+            "line": 116
           },
           "name": "jobArn",
           "overrides": "@aws-cdk/aws-glue-alpha.JobBase",
@@ -18395,7 +18595,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/pyspark-streaming-job.ts",
-            "line": 122
+            "line": 121
           },
           "name": "jobName",
           "overrides": "@aws-cdk/aws-glue-alpha.JobBase",
@@ -18559,7 +18759,7 @@
         },
         "locationInModule": {
           "filename": "lib/jobs/python-shell-job.ts",
-          "line": 72
+          "line": 89
         },
         "parameters": [
           {
@@ -18585,7 +18785,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/jobs/python-shell-job.ts",
-        "line": 61
+        "line": 78
       },
       "name": "PythonShellJob",
       "properties": [
@@ -18598,7 +18798,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/python-shell-job.ts",
-            "line": 64
+            "line": 81
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -18614,7 +18814,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/python-shell-job.ts",
-            "line": 66
+            "line": 83
           },
           "name": "grantPrincipal",
           "overrides": "@aws-cdk/aws-glue-alpha.JobBase",
@@ -18630,7 +18830,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/python-shell-job.ts",
-            "line": 127
+            "line": 151
           },
           "name": "jobArn",
           "overrides": "@aws-cdk/aws-glue-alpha.JobBase",
@@ -18646,7 +18846,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/python-shell-job.ts",
-            "line": 132
+            "line": 156
           },
           "name": "jobName",
           "overrides": "@aws-cdk/aws-glue-alpha.JobBase",
@@ -18662,7 +18862,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/python-shell-job.ts",
-            "line": 65
+            "line": 82
           },
           "name": "role",
           "overrides": "@aws-cdk/aws-glue-alpha.Job",
@@ -18691,7 +18891,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/jobs/python-shell-job.ts",
-        "line": 15
+        "line": 16
       },
       "name": "PythonShellJobProps",
       "properties": [
@@ -18707,7 +18907,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/python-shell-job.ts",
-            "line": 39
+            "line": 56
           },
           "name": "extraPythonFiles",
           "optional": true,
@@ -18731,7 +18931,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/python-shell-job.ts",
-            "line": 51
+            "line": 68
           },
           "name": "jobRunQueuingEnabled",
           "optional": true,
@@ -18739,6 +18939,26 @@
             "primitive": "boolean"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "LibrarySet.ANALYTICS when running Python 3.9, otherwise no library set is configured",
+            "remarks": "Only applies to jobs running Python 3.9. Set to `LibrarySet.NONE` when your libraries are\ncustom or conflict with the pre-installed ones.",
+            "see": "https://docs.aws.amazon.com/glue/latest/dg/add-job-python.html#python-shell-supported-library",
+            "stability": "experimental",
+            "summary": "The set of pre-installed Python libraries to make available to the job."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/jobs/python-shell-job.ts",
+            "line": 45
+          },
+          "name": "librarySet",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-glue-alpha.LibrarySet"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -18749,7 +18969,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/python-shell-job.ts",
-            "line": 28
+            "line": 33
           },
           "name": "maxCapacity",
           "optional": true,
@@ -18760,14 +18980,15 @@
         {
           "abstract": true,
           "docs": {
-            "default": "3.9 for Shell Jobs",
+            "default": "PythonVersion.THREE_NINE",
+            "remarks": "Python shell jobs only support `PythonVersion.THREE_NINE`. The older `PythonVersion.TWO`\n(Python 2.7) and `PythonVersion.THREE` (Python 3.6) runtimes have been retired by AWS Glue\nand are no longer available for Python shell jobs.",
             "stability": "experimental",
-            "summary": "Python Version The version of Python to use to execute this job."
+            "summary": "The version of Python to use to execute this job."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/python-shell-job.ts",
-            "line": 21
+            "line": 26
           },
           "name": "pythonVersion",
           "optional": true,
@@ -18912,7 +19133,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/ray-job.ts",
-            "line": 138
+            "line": 133
           },
           "name": "jobArn",
           "overrides": "@aws-cdk/aws-glue-alpha.JobBase",
@@ -18928,7 +19149,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/jobs/ray-job.ts",
-            "line": 143
+            "line": 138
           },
           "name": "jobName",
           "overrides": "@aws-cdk/aws-glue-alpha.JobBase",
@@ -19086,7 +19307,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/constants.ts",
-        "line": 271
+        "line": 290
       },
       "members": [
         {
@@ -19291,7 +19512,7 @@
         },
         "stability": "experimental",
         "summary": "A Glue table that targets a S3 dataset.",
-        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      interval: 1,  // optional, defaults to 1\n      intervalUnit: glue.DateIntervalUnit.DAYS,  // optional: YEARS, MONTHS, WEEKS, DAYS, HOURS, MINUTES, SECONDS\n    }),\n  },\n});"
+        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: 'NOW-3YEARS',\n      max: 'NOW',\n      format: 'yyyy-MM-dd',\n    }),\n  },\n});"
       },
       "fqn": "@aws-cdk/aws-glue-alpha.S3Table",
       "initializer": {
@@ -19663,7 +19884,7 @@
       "datatype": true,
       "docs": {
         "stability": "experimental",
-        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      interval: 1,  // optional, defaults to 1\n      intervalUnit: glue.DateIntervalUnit.DAYS,  // optional: YEARS, MONTHS, WEEKS, DAYS, HOURS, MINUTES, SECONDS\n    }),\n  },\n});",
+        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: 'NOW-3YEARS',\n      max: 'NOW',\n      format: 'yyyy-MM-dd',\n    }),\n  },\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -20504,24 +20725,66 @@
         {
           "abstract": true,
           "docs": {
-            "default": "- no job run queuing",
-            "remarks": "A value of true means job run queuing is enabled for the job runs.\nIf false or not populated, the job runs will not be considered for queueing.\nIf this field does not match the value set in the job run, then the value from\nthe job run field will be used. This property must be set to false for flex jobs.\nIf this property is enabled, maxRetries must be set to zero.",
+            "default": "- no job run queuing",
+            "remarks": "A value of true means job run queuing is enabled for the job runs.\nIf false or not populated, the job runs will not be considered for queueing.\nIf this field does not match the value set in the job run, then the value from\nthe job run field will be used. This property must be set to false for flex jobs.\nIf this property is enabled, maxRetries must be set to zero.",
+            "stability": "experimental",
+            "summary": "Specifies whether job run queuing is enabled for the job runs for this job."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/jobs/scala-spark-streaming-job.ts",
+            "line": 57
+          },
+          "name": "jobRunQueuingEnabled",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        }
+      ],
+      "symbolId": "lib/jobs/scala-spark-streaming-job:ScalaSparkStreamingJobProps"
+    },
+    "@aws-cdk/aws-glue-alpha.ScheduledTriggerOptions": {
+      "assembly": "@aws-cdk/aws-glue-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Properties for configuring a scheduled Glue Trigger.",
+        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\nconst workflow = new glue.Workflow(stack, 'Workflow');\n\nworkflow.addScheduledTrigger('WeeklyTrigger', {\n  actions: [glue.Action.job(job)],\n  schedule: glue.TriggerSchedule.weekly(),\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-glue-alpha.ScheduledTriggerOptions",
+      "interfaces": [
+        "@aws-cdk/aws-glue-alpha.StartableTriggerOptions"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/triggers/trigger-options.ts",
+        "line": 353
+      },
+      "name": "ScheduledTriggerOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Build one with {@link TriggerSchedule.daily}, {@link TriggerSchedule.weekly},\n{@link TriggerSchedule.cron}, or {@link TriggerSchedule.expression}.",
             "stability": "experimental",
-            "summary": "Specifies whether job run queuing is enabled for the job runs for this job."
+            "summary": "The schedule on which this trigger fires."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/jobs/scala-spark-streaming-job.ts",
-            "line": 57
+            "filename": "lib/triggers/trigger-options.ts",
+            "line": 360
           },
-          "name": "jobRunQueuingEnabled",
-          "optional": true,
+          "name": "schedule",
           "type": {
-            "primitive": "boolean"
+            "fqn": "@aws-cdk/aws-glue-alpha.TriggerSchedule"
           }
         }
       ],
-      "symbolId": "lib/jobs/scala-spark-streaming-job:ScalaSparkStreamingJobProps"
+      "symbolId": "lib/triggers/trigger-options:ScheduledTriggerOptions"
     },
     "@aws-cdk/aws-glue-alpha.Schema": {
       "assembly": "@aws-cdk/aws-glue-alpha",
@@ -21649,11 +21912,13 @@
       "methods": [
         {
           "docs": {
-            "stability": "experimental"
+            "remarks": "These are owned by the construct\n(derived from typed props). Each key is declared via {@link setManagedArgument} whether or not\nthe current configuration emits a value, so a disabled feature (e.g. `enableMetrics: false`)\ncannot be silently re-enabled through `defaultArguments`.",
+            "stability": "experimental",
+            "summary": "Register the arguments this construct manages for a Spark job."
           },
           "locationInModule": {
             "filename": "lib/jobs/spark-job.ts",
-            "line": 183
+            "line": 189
           },
           "name": "nonExecutableCommonArguments",
           "parameters": [
@@ -21664,40 +21929,19 @@
               }
             }
           ],
-          "protected": true,
-          "returns": {
-            "type": {
-              "collection": {
-                "elementtype": {
-                  "primitive": "string"
-                },
-                "kind": "map"
-              }
-            }
-          }
+          "protected": true
         },
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Set the arguments for extra {@link Code}-related properties."
+            "summary": "Register the arguments for extra {@link Code}-related properties."
           },
           "locationInModule": {
             "filename": "lib/jobs/spark-job.ts",
-            "line": 209
+            "line": 210
           },
           "name": "setupExtraCodeArguments",
           "parameters": [
-            {
-              "name": "args",
-              "type": {
-                "collection": {
-                  "elementtype": {
-                    "primitive": "string"
-                  },
-                  "kind": "map"
-                }
-              }
-            },
             {
               "name": "props",
               "type": {
@@ -21979,6 +22223,49 @@
       ],
       "symbolId": "lib/jobs/spark-job:SparkUIProps"
     },
+    "@aws-cdk/aws-glue-alpha.StartableTriggerOptions": {
+      "assembly": "@aws-cdk/aws-glue-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Base options for triggers that can be started when they are created.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\n\ndeclare const action: glue_alpha.Action;\nconst startableTriggerOptions: glue_alpha.StartableTriggerOptions = {\n  actions: [action],\n\n  // the properties below are optional\n  description: 'description',\n  name: 'name',\n  startOnCreation: false,\n};",
+        "custom": {
+          "exampleMetadata": "fixture=_generated"
+        }
+      },
+      "fqn": "@aws-cdk/aws-glue-alpha.StartableTriggerOptions",
+      "interfaces": [
+        "@aws-cdk/aws-glue-alpha.TriggerOptions"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/triggers/trigger-options.ts",
+        "line": 341
+      },
+      "name": "StartableTriggerOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- false",
+            "stability": "experimental",
+            "summary": "Whether to start the trigger on creation or not."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/triggers/trigger-options.ts",
+            "line": 347
+          },
+          "name": "startOnCreation",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        }
+      ],
+      "symbolId": "lib/triggers/trigger-options:StartableTriggerOptions"
+    },
     "@aws-cdk/aws-glue-alpha.StorageParameter": {
       "assembly": "@aws-cdk/aws-glue-alpha",
       "docs": {
@@ -23691,7 +23978,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Properties for configuring a Glue Trigger.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport * as cdk from 'aws-cdk-lib';\nimport { aws_glue as glue } from 'aws-cdk-lib';\n\ndeclare const cfnCrawler: glue.CfnCrawler;\ndeclare const job: glue_alpha.Job;\ndeclare const securityConfiguration: glue_alpha.SecurityConfiguration;\nconst triggerOptions: glue_alpha.TriggerOptions = {\n  actions: [{\n    arguments: {\n      argumentsKey: 'arguments',\n    },\n    crawler: cfnCrawler,\n    job: job,\n    securityConfiguration: securityConfiguration,\n    timeout: cdk.Duration.minutes(30),\n  }],\n\n  // the properties below are optional\n  description: 'description',\n  name: 'name',\n};",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\n\ndeclare const action: glue_alpha.Action;\nconst triggerOptions: glue_alpha.TriggerOptions = {\n  actions: [action],\n\n  // the properties below are optional\n  description: 'description',\n  name: 'name',\n};",
         "custom": {
           "exampleMetadata": "fixture=_generated"
         }
@@ -23700,7 +23987,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/triggers/trigger-options.ts",
-        "line": 157
+        "line": 312
       },
       "name": "TriggerOptions",
       "properties": [
@@ -23713,7 +24000,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 175
+            "line": 330
           },
           "name": "actions",
           "type": {
@@ -23735,7 +24022,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 170
+            "line": 325
           },
           "name": "description",
           "optional": true,
@@ -23753,7 +24040,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 163
+            "line": 318
           },
           "name": "name",
           "optional": true,
@@ -23769,16 +24056,16 @@
       "docs": {
         "stability": "experimental",
         "summary": "Represents a trigger schedule.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nconst triggerSchedule = glue_alpha.TriggerSchedule.cron({\n  day: 'day',\n  hour: 'hour',\n  minute: 'minute',\n  month: 'month',\n  weekDay: 'weekDay',\n  year: 'year',\n});",
+        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\nconst workflow = new glue.Workflow(stack, 'Workflow');\n\nworkflow.addScheduledTrigger('WeeklyTrigger', {\n  actions: [glue.Action.job(job)],\n  schedule: glue.TriggerSchedule.weekly(),\n});",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
+          "exampleMetadata": "infused"
         }
       },
       "fqn": "@aws-cdk/aws-glue-alpha.TriggerSchedule",
       "kind": "class",
       "locationInModule": {
         "filename": "lib/triggers/trigger-options.ts",
-        "line": 51
+        "line": 135
       },
       "methods": [
         {
@@ -23789,7 +24076,7 @@
           },
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 58
+            "line": 142
           },
           "name": "cron",
           "parameters": [
@@ -23810,6 +24097,24 @@
           },
           "static": true
         },
+        {
+          "docs": {
+            "returns": "A new TriggerSchedule instance.",
+            "stability": "experimental",
+            "summary": "Creates a schedule that fires once a day, at midnight UTC."
+          },
+          "locationInModule": {
+            "filename": "lib/triggers/trigger-options.ts",
+            "line": 161
+          },
+          "name": "daily",
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-glue-alpha.TriggerSchedule"
+            }
+          },
+          "static": true
+        },
         {
           "docs": {
             "returns": "A new TriggerSchedule instance.",
@@ -23818,7 +24123,7 @@
           },
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 68
+            "line": 152
           },
           "name": "expression",
           "parameters": [
@@ -23838,6 +24143,24 @@
             }
           },
           "static": true
+        },
+        {
+          "docs": {
+            "returns": "A new TriggerSchedule instance.",
+            "stability": "experimental",
+            "summary": "Creates a schedule that fires once a week, at midnight UTC on Sunday."
+          },
+          "locationInModule": {
+            "filename": "lib/triggers/trigger-options.ts",
+            "line": 170
+          },
+          "name": "weekly",
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-glue-alpha.TriggerSchedule"
+            }
+          },
+          "static": true
         }
       ],
       "name": "TriggerSchedule",
@@ -23850,7 +24173,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/trigger-options.ts",
-            "line": 75
+            "line": 177
           },
           "name": "expressionString",
           "type": {
@@ -23866,7 +24189,7 @@
         "remarks": "Instances are opaque: obtain one from a `Schema` factory (for example\n`Schema.STRING`, `Schema.decimal(...)`, `Schema.array(...)`) or, for a type the\n`Schema` factories don't model, from `Schema.custom(...)`.",
         "stability": "experimental",
         "summary": "The type of a column in a table schema.",
-        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: '2020-01-01',\n      max: '2023-12-31',\n      format: 'yyyy-MM-dd',\n      interval: 1,  // optional, defaults to 1\n      intervalUnit: glue.DateIntervalUnit.DAYS,  // optional: YEARS, MONTHS, WEEKS, DAYS, HOURS, MINUTES, SECONDS\n    }),\n  },\n});",
+        "example": "declare const myDatabase: glue.Database;\nnew glue.S3Table(this, 'MyTable', {\n  database: myDatabase,\n  columns: [{\n    name: 'data',\n    type: glue.Schema.STRING,\n  }],\n  partitionKeys: [{\n    name: 'date',\n    type: glue.Schema.STRING,\n  }],\n  dataFormat: glue.DataFormat.JSON,\n  partitionProjection: {\n    date: glue.PartitionProjectionConfiguration.date({\n      min: 'NOW-3YEARS',\n      max: 'NOW',\n      format: 'yyyy-MM-dd',\n    }),\n  },\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -23912,29 +24235,6 @@
       ],
       "symbolId": "lib/schema:Type"
     },
-    "@aws-cdk/aws-glue-alpha.WeeklyScheduleTriggerOptions": {
-      "assembly": "@aws-cdk/aws-glue-alpha",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental",
-        "summary": "Properties for configuring a weekly-scheduled Glue Trigger.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as glue_alpha from '@aws-cdk/aws-glue-alpha';\nimport * as cdk from 'aws-cdk-lib';\nimport { aws_glue as glue } from 'aws-cdk-lib';\n\ndeclare const cfnCrawler: glue.CfnCrawler;\ndeclare const job: glue_alpha.Job;\ndeclare const securityConfiguration: glue_alpha.SecurityConfiguration;\nconst weeklyScheduleTriggerOptions: glue_alpha.WeeklyScheduleTriggerOptions = {\n  actions: [{\n    arguments: {\n      argumentsKey: 'arguments',\n    },\n    crawler: cfnCrawler,\n    job: job,\n    securityConfiguration: securityConfiguration,\n    timeout: cdk.Duration.minutes(30),\n  }],\n\n  // the properties below are optional\n  description: 'description',\n  name: 'name',\n  startOnCreation: false,\n};",
-        "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
-      },
-      "fqn": "@aws-cdk/aws-glue-alpha.WeeklyScheduleTriggerOptions",
-      "interfaces": [
-        "@aws-cdk/aws-glue-alpha.DailyScheduleTriggerOptions"
-      ],
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "lib/triggers/trigger-options.ts",
-        "line": 198
-      },
-      "name": "WeeklyScheduleTriggerOptions",
-      "symbolId": "lib/triggers/trigger-options:WeeklyScheduleTriggerOptions"
-    },
     "@aws-cdk/aws-glue-alpha.WorkerConfiguration": {
       "assembly": "@aws-cdk/aws-glue-alpha",
       "datatype": true,
@@ -24109,10 +24409,10 @@
       "base": "@aws-cdk/aws-glue-alpha.WorkflowBase",
       "docs": {
         "remarks": "AWS Glue Workflows are orchestration services that allow you to create, manage, and monitor complex extract, transform, and load (ETL) activities involving multiple crawlers, jobs, and triggers. Workflows are designed to allow you to manage interdependent jobs and crawlers as a single unit, making it easier to orchestrate and monitor complex ETL pipelines.\n\nTriggers are used to initiate an AWS Glue Workflow. You can configure different types of triggers, such as on-demand, scheduled, event-based, or conditional triggers, to start your Workflow based on specific conditions or events.",
-        "see": "https://docs.aws.amazon.com/glue/latest/dg/about-triggers.html\n\n## Usage Example\n\n```ts\nconst app = new App();\nconst stack = new Stack(app, 'TestStack');\n\n// Create a Glue Job\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nconst job = new glue.PySparkStreamingJob(stack, 'ImportedJob', { role, script });\n\n// Create a Glue Workflow\nconst workflow = new glue.Workflow(stack, 'TestWorkflow');\n\n// Add an on-demand trigger to the Workflow\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\nactions: [{ job: job }],\n});\n```",
+        "see": "https://docs.aws.amazon.com/glue/latest/dg/about-triggers.html\n\n## Usage Example\n\n```ts\nconst app = new App();\nconst stack = new Stack(app, 'TestStack');\n\n// Create a Glue Job\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\nconst job = new glue.PySparkStreamingJob(stack, 'ImportedJob', { role, script });\n\n// Create a Glue Workflow\nconst workflow = new glue.Workflow(stack, 'TestWorkflow');\n\n// Add an on-demand trigger to the Workflow\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\nactions: [glue.Action.job(job)],\n});\n```",
         "stability": "experimental",
         "summary": "This module defines a construct for creating and managing AWS Glue Workflows and Triggers.",
-        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [{ job }],\n});",
+        "example": "import * as cdk from 'aws-cdk-lib';\nimport * as iam from 'aws-cdk-lib/aws-iam';\ndeclare const stack: cdk.Stack;\ndeclare const role: iam.IRole;\ndeclare const script: glue.Code;\n\n// Create a job to run from the workflow\nconst job = new glue.PySparkEtlJob(stack, 'Job', { role, script });\n\n// Create a workflow and add a trigger that runs the job\nconst workflow = new glue.Workflow(stack, 'Workflow');\nworkflow.addOnDemandTrigger('OnDemandTrigger', {\n  actions: [glue.Action.job(job)],\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -24124,7 +24424,7 @@
         },
         "locationInModule": {
           "filename": "lib/triggers/workflow.ts",
-          "line": 414
+          "line": 306
         },
         "parameters": [
           {
@@ -24151,7 +24451,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/triggers/workflow.ts",
-        "line": 376
+        "line": 268
       },
       "methods": [
         {
@@ -24161,7 +24461,7 @@
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 393
+            "line": 285
           },
           "name": "fromWorkflowArn",
           "parameters": [
@@ -24198,7 +24498,7 @@
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 403
+            "line": 295
           },
           "name": "fromWorkflowAttributes",
           "parameters": [
@@ -24235,7 +24535,7 @@
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 384
+            "line": 276
           },
           "name": "fromWorkflowName",
           "parameters": [
@@ -24277,7 +24577,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 379
+            "line": 271
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -24293,7 +24593,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 434
+            "line": 326
           },
           "name": "workflowArn",
           "overrides": "@aws-cdk/aws-glue-alpha.WorkflowBase",
@@ -24309,7 +24609,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 429
+            "line": 321
           },
           "name": "workflowName",
           "overrides": "@aws-cdk/aws-glue-alpha.WorkflowBase",
@@ -24335,7 +24635,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/triggers/workflow.ts",
-        "line": 67
+        "line": 69
       },
       "name": "WorkflowAttributes",
       "properties": [
@@ -24348,7 +24648,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 71
+            "line": 73
           },
           "name": "workflowName",
           "type": {
@@ -24365,7 +24665,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 77
+            "line": 79
           },
           "name": "workflowArn",
           "optional": true,
@@ -24422,7 +24722,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/triggers/workflow.ts",
-        "line": 118
+        "line": 120
       },
       "methods": [
         {
@@ -24432,7 +24732,7 @@
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 122
+            "line": 124
           },
           "name": "extractNameFromArn",
           "parameters": [
@@ -24459,58 +24759,15 @@
         },
         {
           "docs": {
-            "custom": {
-              "throws": "If a job is provided without a job state, or if a crawler is provided without a crawler state for any condition."
-            },
-            "returns": "The created CfnTrigger resource.",
+            "returns": "a reference to the created trigger.",
             "stability": "experimental",
-            "summary": "Add a Condition (Predicate) based trigger to the workflow."
+            "summary": "Add a conditional (predicate-based) trigger to the workflow."
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 255
+            "line": 193
           },
           "name": "addConditionalTrigger",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "The id of the trigger."
-              },
-              "name": "id",
-              "type": {
-                "primitive": "string"
-              }
-            },
-            {
-              "docs": {
-                "summary": "Additional options for the trigger."
-              },
-              "name": "options",
-              "type": {
-                "fqn": "@aws-cdk/aws-glue-alpha.ConditionalTriggerOptions"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "aws-cdk-lib.aws_glue.CfnTrigger"
-            }
-          }
-        },
-        {
-          "docs": {
-            "custom": {
-              "throws": "If both job and crawler are provided, or if neither job nor crawler is provided."
-            },
-            "returns": "The created CfnTrigger resource.",
-            "stability": "experimental",
-            "summary": "Add a custom-scheduled trigger to the workflow."
-          },
-          "locationInModule": {
-            "filename": "lib/triggers/workflow.ts",
-            "line": 212
-          },
-          "name": "addCustomScheduledTrigger",
           "overrides": "@aws-cdk/aws-glue-alpha.IWorkflow",
           "parameters": [
             {
@@ -24528,30 +24785,27 @@
               },
               "name": "options",
               "type": {
-                "fqn": "@aws-cdk/aws-glue-alpha.CustomScheduledTriggerOptions"
+                "fqn": "@aws-cdk/aws-glue-alpha.ConditionalTriggerOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "aws-cdk-lib.aws_glue.CfnTrigger"
+              "fqn": "aws-cdk-lib.interfaces.aws_glue.ITriggerRef"
             }
           }
         },
         {
           "docs": {
-            "custom": {
-              "throws": "If both job and crawler are provided, or if neither job nor crawler is provided."
-            },
-            "returns": "The created CfnTrigger resource.",
+            "returns": "a reference to the created trigger.",
             "stability": "experimental",
-            "summary": "Add a daily-scheduled trigger to the workflow."
+            "summary": "Add an EventBridge event-based trigger to the workflow."
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 159
+            "line": 175
           },
-          "name": "addDailyScheduledTrigger",
+          "name": "addEventTrigger",
           "overrides": "@aws-cdk/aws-glue-alpha.IWorkflow",
           "parameters": [
             {
@@ -24569,68 +24823,25 @@
               },
               "name": "options",
               "type": {
-                "fqn": "@aws-cdk/aws-glue-alpha.DailyScheduleTriggerOptions"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "aws-cdk-lib.aws_glue.CfnTrigger"
-            }
-          }
-        },
-        {
-          "docs": {
-            "custom": {
-              "throws": "If both job and crawler are provided, or if neither job nor crawler is provided."
-            },
-            "returns": "The created CfnTrigger resource.",
-            "stability": "experimental",
-            "summary": "Add an Event Bridge based trigger to the workflow."
-          },
-          "locationInModule": {
-            "filename": "lib/triggers/workflow.ts",
-            "line": 233
-          },
-          "name": "addNotifyEventTrigger",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "The id of the trigger."
-              },
-              "name": "id",
-              "type": {
-                "primitive": "string"
-              }
-            },
-            {
-              "docs": {
-                "summary": "Additional options for the trigger."
-              },
-              "name": "options",
-              "type": {
-                "fqn": "@aws-cdk/aws-glue-alpha.NotifyEventTriggerOptions"
+                "fqn": "@aws-cdk/aws-glue-alpha.EventTriggerOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "aws-cdk-lib.aws_glue.CfnTrigger"
+              "fqn": "aws-cdk-lib.interfaces.aws_glue.ITriggerRef"
             }
           }
         },
         {
           "docs": {
-            "custom": {
-              "throws": "If both job and crawler are provided, or if neither job nor crawler is provided."
-            },
-            "returns": "The created CfnTrigger resource.",
+            "returns": "a reference to the created trigger.",
             "stability": "experimental",
             "summary": "Add an on-demand trigger to the workflow."
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 139
+            "line": 140
           },
           "name": "addOnDemandTrigger",
           "overrides": "@aws-cdk/aws-glue-alpha.IWorkflow",
@@ -24656,24 +24867,21 @@
           ],
           "returns": {
             "type": {
-              "fqn": "aws-cdk-lib.aws_glue.CfnTrigger"
+              "fqn": "aws-cdk-lib.interfaces.aws_glue.ITriggerRef"
             }
           }
         },
         {
           "docs": {
-            "custom": {
-              "throws": "If both job and crawler are provided, or if neither job nor crawler is provided."
-            },
-            "returns": "The created CfnTrigger resource.",
+            "returns": "a reference to the created trigger.",
             "stability": "experimental",
-            "summary": "Add a weekly-scheduled trigger to the workflow."
+            "summary": "Add a scheduled trigger to the workflow."
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 185
+            "line": 157
           },
-          "name": "addWeeklyScheduledTrigger",
+          "name": "addScheduledTrigger",
           "overrides": "@aws-cdk/aws-glue-alpha.IWorkflow",
           "parameters": [
             {
@@ -24687,17 +24895,17 @@
             },
             {
               "docs": {
-                "summary": "Additional options for the trigger."
+                "summary": "Additional options for the trigger, including the schedule."
               },
               "name": "options",
               "type": {
-                "fqn": "@aws-cdk/aws-glue-alpha.WeeklyScheduleTriggerOptions"
+                "fqn": "@aws-cdk/aws-glue-alpha.ScheduledTriggerOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "aws-cdk-lib.aws_glue.CfnTrigger"
+              "fqn": "aws-cdk-lib.interfaces.aws_glue.ITriggerRef"
             }
           }
         },
@@ -24707,7 +24915,7 @@
           },
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 337
+            "line": 229
           },
           "name": "buildWorkflowArn",
           "parameters": [
@@ -24743,7 +24951,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 129
+            "line": 131
           },
           "name": "workflowArn",
           "overrides": "@aws-cdk/aws-glue-alpha.IWorkflow",
@@ -24760,7 +24968,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 128
+            "line": 130
           },
           "name": "workflowName",
           "overrides": "@aws-cdk/aws-glue-alpha.IWorkflow",
@@ -24786,7 +24994,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/triggers/workflow.ts",
-        "line": 83
+        "line": 85
       },
       "name": "WorkflowProps",
       "properties": [
@@ -24800,7 +25008,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 103
+            "line": 105
           },
           "name": "defaultRunProperties",
           "optional": true,
@@ -24823,7 +25031,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 96
+            "line": 98
           },
           "name": "description",
           "optional": true,
@@ -24841,7 +25049,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 110
+            "line": 112
           },
           "name": "maxConcurrentRuns",
           "optional": true,
@@ -24859,7 +25067,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/triggers/workflow.ts",
-            "line": 89
+            "line": 91
           },
           "name": "workflowName",
           "optional": true,
@@ -24904,6 +25112,6 @@
       "symbolId": "lib/storage-parameter:WriteParallel"
     }
   },
-  "version": "2.268.0-alpha.0",
+  "version": "2.269.0-alpha.0",
   "fingerprint": "**********"
 }