@aws-cdk/aws-iot-alpha 2.161.0-alpha.0 → 2.162.0-alpha.0

package/.jsii

@@ -8,7 +8,7 @@
     "url": "https://aws.amazon.com"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.161.0",
+    "aws-cdk-lib": "^2.162.0",
     "constructs": "^10.0.0"
   },
   "dependencyClosure": {
@@ -3882,7 +3882,7 @@
   },
   "name": "@aws-cdk/aws-iot-alpha",
   "readme": {
-    "markdown": "# AWS IoT Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nAWS IoT Core lets you connect billions of IoT devices and route trillions of\nmessages to AWS services without managing infrastructure.\n\n## `TopicRule`\n\nCreate a topic rule that give your devices the ability to interact with AWS services.\nYou can create a topic rule with an action that invoke the Lambda action as following:\n\n```ts\nconst func = new lambda.Function(this, 'MyFunction', {\n  runtime: lambda.Runtime.NODEJS_LATEST,\n  handler: 'index.handler',\n  code: lambda.Code.fromInline(`\n    exports.handler = (event) => {\n      console.log(\"It is test for lambda action of AWS IoT Rule.\", event);\n    };`\n  ),\n});\n\nnew iot.TopicRule(this, 'TopicRule', {\n  topicRuleName: 'MyTopicRule', // optional\n  description: 'invokes the lambda function', // optional\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  actions: [new actions.LambdaFunctionAction(func)],\n});\n```\n\nOr, you can add an action after constructing the `TopicRule` instance as following:\n\n```ts\ndeclare const func: lambda.Function;\n\nconst topicRule = new iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n});\ntopicRule.addAction(new actions.LambdaFunctionAction(func));\n```\n\nYou can also supply `errorAction` as following,\nand the IoT Rule will trigger it if a rule's action is unable to perform:\n\n```ts\nimport * as logs from 'aws-cdk-lib/aws-logs';\n\nconst logGroup = new logs.LogGroup(this, 'MyLogGroup');\n\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  errorAction: new actions.CloudWatchLogsAction(logGroup),\n});\n```\n\nIf you wanna make the topic rule disable, add property `enabled: false` as following:\n\n```ts\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  enabled: false,\n});\n```\n\nSee also [@aws-cdk/aws-iot-actions-alpha](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-iot-actions-alpha-readme.html) for other actions.\n\n## Logging\n\nAWS IoT provides a [logging feature](https://docs.aws.amazon.com/iot/latest/developerguide/configure-logging.html) that allows you to monitor and log AWS IoT activity.\n\nYou can enable IoT logging with the following code:\n\n```ts\nnew iot.Logging(this, 'Logging', {\n  logLevel: iot.LogLevel.INFO,\n});\n```\n\n**Note**: All logs are forwarded to the `AWSIotLogsV2` log group in CloudWatch.\n"
+    "markdown": "# AWS IoT Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nAWS IoT Core lets you connect billions of IoT devices and route trillions of\nmessages to AWS services without managing infrastructure.\n\n## `TopicRule`\n\nCreate a topic rule that give your devices the ability to interact with AWS services.\nYou can create a topic rule with an action that invoke the Lambda action as following:\n\n```ts\nconst func = new lambda.Function(this, 'MyFunction', {\n  runtime: lambda.Runtime.NODEJS_LATEST,\n  handler: 'index.handler',\n  code: lambda.Code.fromInline(`\n    exports.handler = (event) => {\n      console.log(\"It is test for lambda action of AWS IoT Rule.\", event);\n    };`\n  ),\n});\n\nnew iot.TopicRule(this, 'TopicRule', {\n  topicRuleName: 'MyTopicRule', // optional\n  description: 'invokes the lambda function', // optional\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  actions: [new actions.LambdaFunctionAction(func)],\n});\n```\n\nOr, you can add an action after constructing the `TopicRule` instance as following:\n\n```ts\ndeclare const func: lambda.Function;\n\nconst topicRule = new iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n});\ntopicRule.addAction(new actions.LambdaFunctionAction(func));\n```\n\nYou can also supply `errorAction` as following,\nand the IoT Rule will trigger it if a rule's action is unable to perform:\n\n```ts\nimport * as logs from 'aws-cdk-lib/aws-logs';\n\nconst logGroup = new logs.LogGroup(this, 'MyLogGroup');\n\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  errorAction: new actions.CloudWatchLogsAction(logGroup),\n});\n```\n\nIf you wanna make the topic rule disable, add property `enabled: false` as following:\n\n```ts\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  enabled: false,\n});\n```\n\nSee also [@aws-cdk/aws-iot-actions-alpha](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-iot-actions-alpha-readme.html) for other actions.\n\n## Logging\n\nAWS IoT provides a [logging feature](https://docs.aws.amazon.com/iot/latest/developerguide/configure-logging.html) that allows you to monitor and log AWS IoT activity.\n\nYou can enable IoT logging with the following code:\n\n```ts\nnew iot.Logging(this, 'Logging', {\n  logLevel: iot.LogLevel.INFO,\n});\n```\n\n**Note**: All logs are forwarded to the `AWSIotLogsV2` log group in CloudWatch.\n\n## Audit\n\nAn [AWS IoT Device Defender audit looks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit.html) at account- and device-related settings and policies to ensure security measures are in place.\nAn audit can help you detect any drifts from security best practices or access policies.\n\n### Account Audit Configuration\n\nThe IoT audit includes [various audit checks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit-checks.html), and it is necessary to configure settings to enable those checks.\n\nYou can enable an account audit configuration with the following code:\n\n```ts\n// Audit notification are sent to the SNS topic\ndeclare const targetTopic: sns.ITopic;\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  targetTopic,\n});\n```\n\nBy default, all audit checks are enabled, but it is also possible to enable only specific audit checks.\n\n```ts\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  checkConfiguration: {\n    // enabled\n    authenticatedCognitoRoleOverlyPermissiveCheck: true,\n    // enabled by default\n    caCertificateExpiringCheck: undefined,\n    // disabled\n    caCertificateKeyQualityCheck: false,\n    conflictingClientIdsCheck: false,\n    deviceCertificateExpiringCheck: false,\n    deviceCertificateKeyQualityCheck: false,\n    deviceCertificateSharedCheck: false,\n    intermediateCaRevokedForActiveDeviceCertificatesCheck: false,\n    ioTPolicyPotentialMisConfigurationCheck: false,\n    iotPolicyOverlyPermissiveCheck: false,\n    iotRoleAliasAllowsAccessToUnusedServicesCheck: false,\n    iotRoleAliasOverlyPermissiveCheck: false,\n    loggingDisabledCheck: false,\n    revokedCaCertificateStillActiveCheck: false,\n    revokedDeviceCertificateStillActiveCheck: false,\n    unauthenticatedCognitoRoleOverlyPermissiveCheck: false,\n  },\n});\n```\n"
   },
   "repository": {
     "directory": "packages/@aws-cdk/aws-iot-alpha",
@@ -3920,6 +3920,186 @@
     }
   },
   "types": {
+    "@aws-cdk/aws-iot-alpha.AccountAuditConfiguration": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "base": "aws-cdk-lib.Resource",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Defines AWS IoT Audit Configuration.",
+        "example": "// Audit notification are sent to the SNS topic\ndeclare const targetTopic: sns.ITopic;\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  targetTopic,\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.AccountAuditConfiguration",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "lib/audit-configuration.ts",
+          "line": 198
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "optional": true,
+            "type": {
+              "fqn": "@aws-cdk/aws-iot-alpha.AccountAuditConfigurationProps"
+            }
+          }
+        ]
+      },
+      "interfaces": [
+        "@aws-cdk/aws-iot-alpha.IAccountAuditConfiguration"
+      ],
+      "kind": "class",
+      "locationInModule": {
+        "filename": "lib/audit-configuration.ts",
+        "line": 177
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Import an existing AWS IoT Audit Configuration."
+          },
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 185
+          },
+          "name": "fromAccountId",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The parent creating construct (usually `this`)."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The construct's name."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The account ID."
+              },
+              "name": "accountId",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-iot-alpha.IAccountAuditConfiguration"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "AccountAuditConfiguration",
+      "properties": [
+        {
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The account ID."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 196
+          },
+          "name": "accountId",
+          "overrides": "@aws-cdk/aws-iot-alpha.IAccountAuditConfiguration",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "lib/audit-configuration:AccountAuditConfiguration"
+    },
+    "@aws-cdk/aws-iot-alpha.AccountAuditConfigurationProps": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Properties for defining AWS IoT Audit Configuration.",
+        "example": "// Audit notification are sent to the SNS topic\ndeclare const targetTopic: sns.ITopic;\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  targetTopic,\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.AccountAuditConfigurationProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/audit-configuration.ts",
+        "line": 158
+      },
+      "name": "AccountAuditConfigurationProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- all checks are enabled",
+            "stability": "experimental",
+            "summary": "Specifies which audit checks are enabled and disabled for this account."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 171
+          },
+          "name": "checkConfiguration",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-iot-alpha.CheckConfiguration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no notifications are sent",
+            "stability": "experimental",
+            "summary": "The target SNS topic to which audit notifications are sent."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 164
+          },
+          "name": "targetTopic",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_sns.ITopic"
+          }
+        }
+      ],
+      "symbolId": "lib/audit-configuration:AccountAuditConfigurationProps"
+    },
     "@aws-cdk/aws-iot-alpha.ActionConfig": {
       "assembly": "@aws-cdk/aws-iot-alpha",
       "datatype": true,
@@ -3958,6 +4138,362 @@
       ],
       "symbolId": "lib/action:ActionConfig"
     },
+    "@aws-cdk/aws-iot-alpha.CheckConfiguration": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "datatype": true,
+      "docs": {
+        "see": "https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit-checks.html",
+        "stability": "experimental",
+        "summary": "The types of audit checks.",
+        "example": "new iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  checkConfiguration: {\n    // enabled\n    authenticatedCognitoRoleOverlyPermissiveCheck: true,\n    // enabled by default\n    caCertificateExpiringCheck: undefined,\n    // disabled\n    caCertificateKeyQualityCheck: false,\n    conflictingClientIdsCheck: false,\n    deviceCertificateExpiringCheck: false,\n    deviceCertificateKeyQualityCheck: false,\n    deviceCertificateSharedCheck: false,\n    intermediateCaRevokedForActiveDeviceCertificatesCheck: false,\n    ioTPolicyPotentialMisConfigurationCheck: false,\n    iotPolicyOverlyPermissiveCheck: false,\n    iotRoleAliasAllowsAccessToUnusedServicesCheck: false,\n    iotRoleAliasOverlyPermissiveCheck: false,\n    loggingDisabledCheck: false,\n    revokedCaCertificateStillActiveCheck: false,\n    revokedDeviceCertificateStillActiveCheck: false,\n    unauthenticatedCognitoRoleOverlyPermissiveCheck: false,\n  },\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.CheckConfiguration",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/audit-configuration.ts",
+        "line": 23
+      },
+      "name": "CheckConfiguration",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "remarks": "For this check, AWS IoT Device Defender audits all Amazon Cognito identity pools that have been used to connect to the AWS IoT message broker\nduring the 31 days before the audit is performed.",
+            "stability": "experimental",
+            "summary": "Checks the permissiveness of an authenticated Amazon Cognito identity pool role."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 32
+          },
+          "name": "authenticatedCognitoRoleOverlyPermissiveCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "remarks": "This check applies to CA certificates expiring within 30 days or that have expired.",
+            "stability": "experimental",
+            "summary": "Checks if a CA certificate is expiring."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 41
+          },
+          "name": "caCertificateExpiringCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "remarks": "The quality checks if the key is in a valid format, not expired, and if the key meets a minimum required size.\n\nThis check applies to CA certificates that are ACTIVE or PENDING_TRANSFER.",
+            "stability": "experimental",
+            "summary": "Checks the quality of the CA certificate key."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 52
+          },
+          "name": "caCertificateKeyQualityCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Checks if multiple devices connect using the same client ID."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 59
+          },
+          "name": "conflictingClientIdsCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "remarks": "This check applies to device certificates expiring within 30 days or that have expired.",
+            "stability": "experimental",
+            "summary": "Checks if a device certificate is expiring."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 68
+          },
+          "name": "deviceCertificateExpiringCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "remarks": "The quality checks if the key is in a valid format, not expired, signed by a registered certificate authority,\nand if the key meets a minimum required size.",
+            "stability": "experimental",
+            "summary": "Checks the quality of the device certificate key."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 78
+          },
+          "name": "deviceCertificateKeyQualityCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Checks if multiple concurrent connections use the same X.509 certificate to authenticate with AWS IoT."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 85
+          },
+          "name": "deviceCertificateSharedCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Checks if device certificates are still active despite being revoked by an intermediate CA."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 92
+          },
+          "name": "intermediateCaRevokedForActiveDeviceCertificatesCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Checks the permissiveness of a policy attached to an authenticated Amazon Cognito identity pool role."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 99
+          },
+          "name": "iotPolicyOverlyPermissiveCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "remarks": "Misconfigured policies, including overly permissive policies, can cause security incidents like allowing devices access to unintended resources.\n\nThis check is a warning for you to make sure that only intended actions are allowed before updating the policy.",
+            "stability": "experimental",
+            "summary": "Checks if an AWS IoT policy is potentially misconfigured."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 110
+          },
+          "name": "ioTPolicyPotentialMisConfigurationCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Checks if a role alias has access to services that haven't been used for the AWS IoT device in the last year."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 117
+          },
+          "name": "iotRoleAliasAllowsAccessToUnusedServicesCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Checks if the temporary credentials provided by AWS IoT role aliases are overly permissive."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 124
+          },
+          "name": "iotRoleAliasOverlyPermissiveCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Checks if AWS IoT logs are disabled."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 131
+          },
+          "name": "loggingDisabledCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Checks if a revoked CA certificate is still active."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 138
+          },
+          "name": "revokedCaCertificateStillActiveCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Checks if a revoked device certificate is still active."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 145
+          },
+          "name": "revokedDeviceCertificateStillActiveCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Checks if policy attached to an unauthenticated Amazon Cognito identity pool role is too permissive."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 152
+          },
+          "name": "unauthenticatedCognitoRoleOverlyPermissiveCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        }
+      ],
+      "symbolId": "lib/audit-configuration:CheckConfiguration"
+    },
+    "@aws-cdk/aws-iot-alpha.IAccountAuditConfiguration": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Represents AWS IoT Audit Configuration."
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.IAccountAuditConfiguration",
+      "interfaces": [
+        "aws-cdk-lib.IResource"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/audit-configuration.ts",
+        "line": 10
+      },
+      "name": "IAccountAuditConfiguration",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The account ID."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 15
+          },
+          "name": "accountId",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "lib/audit-configuration:IAccountAuditConfiguration"
+    },
     "@aws-cdk/aws-iot-alpha.IAction": {
       "assembly": "@aws-cdk/aws-iot-alpha",
       "docs": {
@@ -4783,6 +5319,6 @@
       "symbolId": "lib/topic-rule:TopicRuleProps"
     }
   },
-  "version": "2.161.0-alpha.0",
+  "version": "2.162.0-alpha.0",
   "fingerprint": "**********"
 }

package/.warnings.jsii.js

@@ -2,6 +2,24 @@ function _aws_cdk_aws_iot_alpha_IAction(p) {
 }
 function _aws_cdk_aws_iot_alpha_ActionConfig(p) {
 }
+function _aws_cdk_aws_iot_alpha_IAccountAuditConfiguration(p) {
+}
+function _aws_cdk_aws_iot_alpha_CheckConfiguration(p) {
+}
+function _aws_cdk_aws_iot_alpha_AccountAuditConfigurationProps(p) {
+    if (p == null)
+        return;
+    visitedObjects.add(p);
+    try {
+        if (!visitedObjects.has(p.checkConfiguration))
+            _aws_cdk_aws_iot_alpha_CheckConfiguration(p.checkConfiguration);
+    }
+    finally {
+        visitedObjects.delete(p);
+    }
+}
+function _aws_cdk_aws_iot_alpha_AccountAuditConfiguration(p) {
+}
 function _aws_cdk_aws_iot_alpha_IotSqlConfig(p) {
 }
 function _aws_cdk_aws_iot_alpha_IotSql(p) {
@@ -82,4 +100,4 @@ class DeprecationError extends Error {
         });
     }
 }
-module.exports = { print, getPropertyDescriptor, DeprecationError, _aws_cdk_aws_iot_alpha_IAction, _aws_cdk_aws_iot_alpha_ActionConfig, _aws_cdk_aws_iot_alpha_IotSqlConfig, _aws_cdk_aws_iot_alpha_IotSql, _aws_cdk_aws_iot_alpha_ILogging, _aws_cdk_aws_iot_alpha_LogLevel, _aws_cdk_aws_iot_alpha_LoggingProps, _aws_cdk_aws_iot_alpha_Logging, _aws_cdk_aws_iot_alpha_ITopicRule, _aws_cdk_aws_iot_alpha_TopicRuleProps, _aws_cdk_aws_iot_alpha_TopicRule };
+module.exports = { print, getPropertyDescriptor, DeprecationError, _aws_cdk_aws_iot_alpha_IAction, _aws_cdk_aws_iot_alpha_ActionConfig, _aws_cdk_aws_iot_alpha_IAccountAuditConfiguration, _aws_cdk_aws_iot_alpha_CheckConfiguration, _aws_cdk_aws_iot_alpha_AccountAuditConfigurationProps, _aws_cdk_aws_iot_alpha_AccountAuditConfiguration, _aws_cdk_aws_iot_alpha_IotSqlConfig, _aws_cdk_aws_iot_alpha_IotSql, _aws_cdk_aws_iot_alpha_ILogging, _aws_cdk_aws_iot_alpha_LogLevel, _aws_cdk_aws_iot_alpha_LoggingProps, _aws_cdk_aws_iot_alpha_Logging, _aws_cdk_aws_iot_alpha_ITopicRule, _aws_cdk_aws_iot_alpha_TopicRuleProps, _aws_cdk_aws_iot_alpha_TopicRule };

package/README.md

@@ -91,3 +91,51 @@ new iot.Logging(this, 'Logging', {
 ```
 
 **Note**: All logs are forwarded to the `AWSIotLogsV2` log group in CloudWatch.
+
+## Audit
+
+An [AWS IoT Device Defender audit looks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit.html) at account- and device-related settings and policies to ensure security measures are in place.
+An audit can help you detect any drifts from security best practices or access policies.
+
+### Account Audit Configuration
+
+The IoT audit includes [various audit checks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit-checks.html), and it is necessary to configure settings to enable those checks.
+
+You can enable an account audit configuration with the following code:
+
+```ts
+// Audit notification are sent to the SNS topic
+declare const targetTopic: sns.ITopic;
+
+new iot.AccountAuditConfiguration(this, 'AuditConfiguration', {
+  targetTopic,
+});
+```
+
+By default, all audit checks are enabled, but it is also possible to enable only specific audit checks.
+
+```ts
+new iot.AccountAuditConfiguration(this, 'AuditConfiguration', {
+  checkConfiguration: {
+    // enabled
+    authenticatedCognitoRoleOverlyPermissiveCheck: true,
+    // enabled by default
+    caCertificateExpiringCheck: undefined,
+    // disabled
+    caCertificateKeyQualityCheck: false,
+    conflictingClientIdsCheck: false,
+    deviceCertificateExpiringCheck: false,
+    deviceCertificateKeyQualityCheck: false,
+    deviceCertificateSharedCheck: false,
+    intermediateCaRevokedForActiveDeviceCertificatesCheck: false,
+    ioTPolicyPotentialMisConfigurationCheck: false,
+    iotPolicyOverlyPermissiveCheck: false,
+    iotRoleAliasAllowsAccessToUnusedServicesCheck: false,
+    iotRoleAliasOverlyPermissiveCheck: false,
+    loggingDisabledCheck: false,
+    revokedCaCertificateStillActiveCheck: false,
+    revokedDeviceCertificateStillActiveCheck: false,
+    unauthenticatedCognitoRoleOverlyPermissiveCheck: false,
+  },
+});
+```

package/awslint.json

@@ -1,6 +1,7 @@
 {
   "exclude": [
     "no-unused-type:@aws-cdk/aws-iot-alpha.ActionConfig",
-    "props-physical-name:@aws-cdk/aws-iot-alpha.LoggingProps"
+    "props-physical-name:@aws-cdk/aws-iot-alpha.LoggingProps",
+    "props-physical-name:@aws-cdk/aws-iot-alpha.AccountAuditConfigurationProps"
   ]
 }

package/lib/audit-configuration.d.ts

@@ -0,0 +1,182 @@
+import { Resource, IResource } from 'aws-cdk-lib/core';
+import { Construct } from 'constructs';
+import * as sns from 'aws-cdk-lib/aws-sns';
+/**
+ * Represents AWS IoT Audit Configuration
+ */
+export interface IAccountAuditConfiguration extends IResource {
+    /**
+     * The account ID
+     * @attribute
+     */
+    readonly accountId: string;
+}
+/**
+ * The types of audit checks
+ *
+ * @see https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit-checks.html
+ */
+export interface CheckConfiguration {
+    /**
+     * Checks the permissiveness of an authenticated Amazon Cognito identity pool role.
+     *
+     * For this check, AWS IoT Device Defender audits all Amazon Cognito identity pools that have been used to connect to the AWS IoT message broker
+     * during the 31 days before the audit is performed.
+     *
+     * @default true
+     */
+    readonly authenticatedCognitoRoleOverlyPermissiveCheck?: boolean;
+    /**
+     * Checks if a CA certificate is expiring.
+     *
+     * This check applies to CA certificates expiring within 30 days or that have expired.
+     *
+     * @default true
+     */
+    readonly caCertificateExpiringCheck?: boolean;
+    /**
+     * Checks the quality of the CA certificate key.
+     *
+     * The quality checks if the key is in a valid format, not expired, and if the key meets a minimum required size.
+     *
+     * This check applies to CA certificates that are ACTIVE or PENDING_TRANSFER.
+     *
+     * @default true
+     */
+    readonly caCertificateKeyQualityCheck?: boolean;
+    /**
+     * Checks if multiple devices connect using the same client ID.
+     *
+     * @default true
+     */
+    readonly conflictingClientIdsCheck?: boolean;
+    /**
+     * Checks if a device certificate is expiring.
+     *
+     * This check applies to device certificates expiring within 30 days or that have expired.
+     *
+     * @default true
+     */
+    readonly deviceCertificateExpiringCheck?: boolean;
+    /**
+     * Checks the quality of the device certificate key.
+     *
+     * The quality checks if the key is in a valid format, not expired, signed by a registered certificate authority,
+     * and if the key meets a minimum required size.
+     *
+     * @default true
+     */
+    readonly deviceCertificateKeyQualityCheck?: boolean;
+    /**
+     * Checks if multiple concurrent connections use the same X.509 certificate to authenticate with AWS IoT.
+     *
+     * @default true
+     */
+    readonly deviceCertificateSharedCheck?: boolean;
+    /**
+     * Checks if device certificates are still active despite being revoked by an intermediate CA.
+     *
+     * @default true
+     */
+    readonly intermediateCaRevokedForActiveDeviceCertificatesCheck?: boolean;
+    /**
+     * Checks the permissiveness of a policy attached to an authenticated Amazon Cognito identity pool role.
+     *
+     * @default true
+     */
+    readonly iotPolicyOverlyPermissiveCheck?: boolean;
+    /**
+     * Checks if an AWS IoT policy is potentially misconfigured.
+     *
+     * Misconfigured policies, including overly permissive policies, can cause security incidents like allowing devices access to unintended resources.
+     *
+     * This check is a warning for you to make sure that only intended actions are allowed before updating the policy.
+     *
+     * @default true
+     */
+    readonly ioTPolicyPotentialMisConfigurationCheck?: boolean;
+    /**
+     * Checks if a role alias has access to services that haven't been used for the AWS IoT device in the last year.
+     *
+     * @default true
+     */
+    readonly iotRoleAliasAllowsAccessToUnusedServicesCheck?: boolean;
+    /**
+     * Checks if the temporary credentials provided by AWS IoT role aliases are overly permissive.
+     *
+     * @default true
+     */
+    readonly iotRoleAliasOverlyPermissiveCheck?: boolean;
+    /**
+     * Checks if AWS IoT logs are disabled.
+     *
+     * @default true
+     */
+    readonly loggingDisabledCheck?: boolean;
+    /**
+     * Checks if a revoked CA certificate is still active.
+     *
+     * @default true
+     */
+    readonly revokedCaCertificateStillActiveCheck?: boolean;
+    /**
+     * Checks if a revoked device certificate is still active.
+     *
+     * @default true
+     */
+    readonly revokedDeviceCertificateStillActiveCheck?: boolean;
+    /**
+     * Checks if policy attached to an unauthenticated Amazon Cognito identity pool role is too permissive.
+     *
+     * @default true
+     */
+    readonly unauthenticatedCognitoRoleOverlyPermissiveCheck?: boolean;
+}
+/**
+ * Properties for defining AWS IoT Audit Configuration
+ */
+export interface AccountAuditConfigurationProps {
+    /**
+     * The target SNS topic to which audit notifications are sent.
+     *
+     * @default - no notifications are sent
+     */
+    readonly targetTopic?: sns.ITopic;
+    /**
+     * Specifies which audit checks are enabled and disabled for this account.
+     *
+     * @default - all checks are enabled
+     */
+    readonly checkConfiguration?: CheckConfiguration;
+}
+/**
+ * Defines AWS IoT Audit Configuration
+ */
+export declare class AccountAuditConfiguration extends Resource implements IAccountAuditConfiguration {
+    /**
+     * Import an existing AWS IoT Audit Configuration
+     *
+     * @param scope The parent creating construct (usually `this`)
+     * @param id The construct's name
+     * @param accountId The account ID
+     */
+    static fromAccountId(scope: Construct, id: string, accountId: string): IAccountAuditConfiguration;
+    /**
+     * The account ID
+     * @attribute
+     */
+    readonly accountId: string;
+    constructor(scope: Construct, id: string, props?: AccountAuditConfigurationProps);
+    /**
+     * Render the audit notification target configurations
+     */
+    private renderAuditNotificationTargetConfigurations;
+    /**
+     * Render the audit check configurations
+     */
+    private renderAuditCheckConfigurations;
+    /**
+     * Render the audit check configuration
+     */
+    private renderAuditCheckConfiguration;
+}

package/lib/audit-configuration.js

@@ -0,0 +1,116 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccountAuditConfiguration = void 0;
+const jsiiDeprecationWarnings = require("../.warnings.jsii.js");
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const core_1 = require("aws-cdk-lib/core");
+const iot = require("aws-cdk-lib/aws-iot");
+const iam = require("aws-cdk-lib/aws-iam");
+/**
+ * Defines AWS IoT Audit Configuration
+ */
+class AccountAuditConfiguration extends core_1.Resource {
+    /**
+     * Import an existing AWS IoT Audit Configuration
+     *
+     * @param scope The parent creating construct (usually `this`)
+     * @param id The construct's name
+     * @param accountId The account ID
+     */
+    static fromAccountId(scope, id, accountId) {
+        class Import extends core_1.Resource {
+            constructor() {
+                super(...arguments);
+                this.accountId = accountId;
+            }
+        }
+        return new Import(scope, id);
+    }
+    constructor(scope, id, props) {
+        super(scope, id);
+        try {
+            jsiiDeprecationWarnings._aws_cdk_aws_iot_alpha_AccountAuditConfigurationProps(props);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, AccountAuditConfiguration);
+            }
+            throw error;
+        }
+        this.accountId = core_1.Stack.of(this).account;
+        const auditRole = new iam.Role(this, 'AuditRole', {
+            assumedBy: new iam.ServicePrincipal('iot.amazonaws.com'),
+            managedPolicies: [
+                iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSIoTDeviceDefenderAudit'),
+            ],
+        });
+        new iot.CfnAccountAuditConfiguration(this, 'Resource', {
+            accountId: this.accountId,
+            auditCheckConfigurations: this.renderAuditCheckConfigurations(props?.checkConfiguration),
+            auditNotificationTargetConfigurations: this.renderAuditNotificationTargetConfigurations(props?.targetTopic),
+            roleArn: auditRole.roleArn,
+        });
+    }
+    /**
+     * Render the audit notification target configurations
+     */
+    renderAuditNotificationTargetConfigurations(targetTopic) {
+        if (!targetTopic) {
+            return undefined;
+        }
+        const notificationRole = new iam.Role(this, 'NotificationRole', {
+            assumedBy: new iam.ServicePrincipal('iot.amazonaws.com'),
+            inlinePolicies: {
+                NotificationPolicy: new iam.PolicyDocument({
+                    statements: [
+                        new iam.PolicyStatement({
+                            actions: ['sns:Publish'],
+                            resources: [targetTopic.topicArn],
+                        }),
+                    ],
+                }),
+            },
+        });
+        return {
+            sns: {
+                enabled: true,
+                targetArn: targetTopic.topicArn,
+                roleArn: notificationRole.roleArn,
+            },
+        };
+    }
+    /**
+     * Render the audit check configurations
+     */
+    renderAuditCheckConfigurations(checkConfiguration) {
+        return {
+            authenticatedCognitoRoleOverlyPermissiveCheck: this.renderAuditCheckConfiguration(checkConfiguration?.authenticatedCognitoRoleOverlyPermissiveCheck),
+            caCertificateExpiringCheck: this.renderAuditCheckConfiguration(checkConfiguration?.caCertificateExpiringCheck),
+            caCertificateKeyQualityCheck: this.renderAuditCheckConfiguration(checkConfiguration?.caCertificateKeyQualityCheck),
+            conflictingClientIdsCheck: this.renderAuditCheckConfiguration(checkConfiguration?.conflictingClientIdsCheck),
+            deviceCertificateExpiringCheck: this.renderAuditCheckConfiguration(checkConfiguration?.deviceCertificateExpiringCheck),
+            deviceCertificateKeyQualityCheck: this.renderAuditCheckConfiguration(checkConfiguration?.deviceCertificateKeyQualityCheck),
+            deviceCertificateSharedCheck: this.renderAuditCheckConfiguration(checkConfiguration?.deviceCertificateSharedCheck),
+            intermediateCaRevokedForActiveDeviceCertificatesCheck: this.renderAuditCheckConfiguration(checkConfiguration?.intermediateCaRevokedForActiveDeviceCertificatesCheck),
+            iotPolicyOverlyPermissiveCheck: this.renderAuditCheckConfiguration(checkConfiguration?.iotPolicyOverlyPermissiveCheck),
+            ioTPolicyPotentialMisConfigurationCheck: this.renderAuditCheckConfiguration(checkConfiguration?.ioTPolicyPotentialMisConfigurationCheck),
+            iotRoleAliasAllowsAccessToUnusedServicesCheck: this.renderAuditCheckConfiguration(checkConfiguration?.iotRoleAliasAllowsAccessToUnusedServicesCheck),
+            iotRoleAliasOverlyPermissiveCheck: this.renderAuditCheckConfiguration(checkConfiguration?.iotRoleAliasOverlyPermissiveCheck),
+            loggingDisabledCheck: this.renderAuditCheckConfiguration(checkConfiguration?.loggingDisabledCheck),
+            revokedCaCertificateStillActiveCheck: this.renderAuditCheckConfiguration(checkConfiguration?.revokedCaCertificateStillActiveCheck),
+            revokedDeviceCertificateStillActiveCheck: this.renderAuditCheckConfiguration(checkConfiguration?.revokedDeviceCertificateStillActiveCheck),
+            unauthenticatedCognitoRoleOverlyPermissiveCheck: this.renderAuditCheckConfiguration(checkConfiguration?.unauthenticatedCognitoRoleOverlyPermissiveCheck),
+        };
+    }
+    /**
+     * Render the audit check configuration
+     */
+    renderAuditCheckConfiguration(check) {
+        return check === false ? undefined : { enabled: true };
+    }
+}
+exports.AccountAuditConfiguration = AccountAuditConfiguration;
+_a = JSII_RTTI_SYMBOL_1;
+AccountAuditConfiguration[_a] = { fqn: "@aws-cdk/aws-iot-alpha.AccountAuditConfiguration", version: "2.162.0-alpha.0" };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/index.d.ts

@@ -1,4 +1,5 @@
 export * from './action';
+export * from './audit-configuration';
 export * from './iot-sql';
 export * from './logging';
 export * from './topic-rule';

package/lib/index.js

@@ -15,8 +15,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./action"), exports);
+__exportStar(require("./audit-configuration"), exports);
 __exportStar(require("./iot-sql"), exports);
 __exportStar(require("./logging"), exports);
 __exportStar(require("./topic-rule"), exports);
 // AWS::IoT CloudFormation Resources:
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyJpbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7O0FBQUEsMkNBQXlCO0FBQ3pCLDRDQUEwQjtBQUMxQiw0Q0FBMEI7QUFDMUIsK0NBQTZCO0FBRTdCLHFDQUFxQyIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gJy4vYWN0aW9uJztcbmV4cG9ydCAqIGZyb20gJy4vaW90LXNxbCc7XG5leHBvcnQgKiBmcm9tICcuL2xvZ2dpbmcnO1xuZXhwb3J0ICogZnJvbSAnLi90b3BpYy1ydWxlJztcblxuLy8gQVdTOjpJb1QgQ2xvdWRGb3JtYXRpb24gUmVzb3VyY2VzOlxuIl19
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyJpbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7O0FBQUEsMkNBQXlCO0FBQ3pCLHdEQUFzQztBQUN0Qyw0Q0FBMEI7QUFDMUIsNENBQTBCO0FBQzFCLCtDQUE2QjtBQUU3QixxQ0FBcUMiLCJzb3VyY2VzQ29udGVudCI6WyJleHBvcnQgKiBmcm9tICcuL2FjdGlvbic7XG5leHBvcnQgKiBmcm9tICcuL2F1ZGl0LWNvbmZpZ3VyYXRpb24nO1xuZXhwb3J0ICogZnJvbSAnLi9pb3Qtc3FsJztcbmV4cG9ydCAqIGZyb20gJy4vbG9nZ2luZyc7XG5leHBvcnQgKiBmcm9tICcuL3RvcGljLXJ1bGUnO1xuXG4vLyBBV1M6OklvVCBDbG91ZEZvcm1hdGlvbiBSZXNvdXJjZXM6XG4iXX0=

package/lib/iot-sql.js

@@ -38,7 +38,7 @@ class IotSql {
 }
 exports.IotSql = IotSql;
 _a = JSII_RTTI_SYMBOL_1;
-IotSql[_a] = { fqn: "@aws-cdk/aws-iot-alpha.IotSql", version: "2.161.0-alpha.0" };
+IotSql[_a] = { fqn: "@aws-cdk/aws-iot-alpha.IotSql", version: "2.162.0-alpha.0" };
 class IotSqlImpl extends IotSql {
     constructor(version, sql) {
         super();

package/lib/logging.js

@@ -118,5 +118,5 @@ class Logging extends core_1.Resource {
 }
 exports.Logging = Logging;
 _a = JSII_RTTI_SYMBOL_1;
-Logging[_a] = { fqn: "@aws-cdk/aws-iot-alpha.Logging", version: "2.161.0-alpha.0" };
+Logging[_a] = { fqn: "@aws-cdk/aws-iot-alpha.Logging", version: "2.162.0-alpha.0" };
 //# sourceMappingURL=data:application/json;base64,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

package/lib/topic-rule.js

@@ -98,5 +98,5 @@ class TopicRule extends core_1.Resource {
 }
 exports.TopicRule = TopicRule;
 _a = JSII_RTTI_SYMBOL_1;
-TopicRule[_a] = { fqn: "@aws-cdk/aws-iot-alpha.TopicRule", version: "2.161.0-alpha.0" };
+TopicRule[_a] = { fqn: "@aws-cdk/aws-iot-alpha.TopicRule", version: "2.162.0-alpha.0" };
 //# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-cdk/aws-iot-alpha",
-  "version": "2.161.0-alpha.0",
+  "version": "2.162.0-alpha.0",
   "private": false,
   "description": "The CDK Construct Library for AWS::IoT",
   "main": "lib/index.js",
@@ -81,19 +81,19 @@
   },
   "license": "Apache-2.0",
   "devDependencies": {
-    "@aws-cdk/cdk-build-tools": "2.161.0-alpha.0",
-    "@aws-cdk/integ-runner": "2.161.0-alpha.0",
-    "@aws-cdk/pkglint": "2.161.0-alpha.0",
+    "@aws-cdk/cdk-build-tools": "2.162.0-alpha.0",
+    "@aws-cdk/integ-runner": "2.162.0-alpha.0",
+    "@aws-cdk/pkglint": "2.162.0-alpha.0",
     "@types/jest": "^29.5.12",
     "jest": "^29.7.0",
-    "aws-cdk-lib": "2.161.0",
+    "aws-cdk-lib": "2.162.0",
     "constructs": "^10.0.0",
-    "@aws-cdk/integ-tests-alpha": "2.161.0-alpha.0"
+    "@aws-cdk/integ-tests-alpha": "2.162.0-alpha.0"
   },
   "dependencies": {},
   "homepage": "https://github.com/aws/aws-cdk",
   "peerDependencies": {
-    "aws-cdk-lib": "^2.161.0",
+    "aws-cdk-lib": "^2.162.0",
     "constructs": "^10.0.0"
   },
   "engines": {

package/rosetta/default.ts-fixture

@@ -5,6 +5,7 @@ import * as actions from '@aws-cdk/aws-iot-actions-alpha';
 import * as iot from '@aws-cdk/aws-iot-alpha';
 import * as lambda from 'aws-cdk-lib/aws-lambda';
 import * as s3 from 'aws-cdk-lib/aws-s3';
+import * as sns from 'aws-cdk-lib/aws-sns'
 
 class Fixture extends Stack {
   constructor(scope: Construct, id: string) {