@aws-cdk/aws-iot-alpha 2.163.1-alpha.0 → 2.164.1-alpha.0

package/.jsii

@@ -8,7 +8,7 @@
     "url": "https://aws.amazon.com"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.163.1",
+    "aws-cdk-lib": "^2.164.1",
     "constructs": "^10.0.0"
   },
   "dependencyClosure": {
@@ -3882,7 +3882,7 @@
   },
   "name": "@aws-cdk/aws-iot-alpha",
   "readme": {
-    "markdown": "# AWS IoT Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nAWS IoT Core lets you connect billions of IoT devices and route trillions of\nmessages to AWS services without managing infrastructure.\n\n## `TopicRule`\n\nCreate a topic rule that give your devices the ability to interact with AWS services.\nYou can create a topic rule with an action that invoke the Lambda action as following:\n\n```ts\nconst func = new lambda.Function(this, 'MyFunction', {\n  runtime: lambda.Runtime.NODEJS_LATEST,\n  handler: 'index.handler',\n  code: lambda.Code.fromInline(`\n    exports.handler = (event) => {\n      console.log(\"It is test for lambda action of AWS IoT Rule.\", event);\n    };`\n  ),\n});\n\nnew iot.TopicRule(this, 'TopicRule', {\n  topicRuleName: 'MyTopicRule', // optional\n  description: 'invokes the lambda function', // optional\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  actions: [new actions.LambdaFunctionAction(func)],\n});\n```\n\nOr, you can add an action after constructing the `TopicRule` instance as following:\n\n```ts\ndeclare const func: lambda.Function;\n\nconst topicRule = new iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n});\ntopicRule.addAction(new actions.LambdaFunctionAction(func));\n```\n\nYou can also supply `errorAction` as following,\nand the IoT Rule will trigger it if a rule's action is unable to perform:\n\n```ts\nimport * as logs from 'aws-cdk-lib/aws-logs';\n\nconst logGroup = new logs.LogGroup(this, 'MyLogGroup');\n\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  errorAction: new actions.CloudWatchLogsAction(logGroup),\n});\n```\n\nIf you wanna make the topic rule disable, add property `enabled: false` as following:\n\n```ts\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  enabled: false,\n});\n```\n\nSee also [@aws-cdk/aws-iot-actions-alpha](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-iot-actions-alpha-readme.html) for other actions.\n\n## Logging\n\nAWS IoT provides a [logging feature](https://docs.aws.amazon.com/iot/latest/developerguide/configure-logging.html) that allows you to monitor and log AWS IoT activity.\n\nYou can enable IoT logging with the following code:\n\n```ts\nnew iot.Logging(this, 'Logging', {\n  logLevel: iot.LogLevel.INFO,\n});\n```\n\n**Note**: All logs are forwarded to the `AWSIotLogsV2` log group in CloudWatch.\n\n## Audit\n\nAn [AWS IoT Device Defender audit looks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit.html) at account- and device-related settings and policies to ensure security measures are in place.\nAn audit can help you detect any drifts from security best practices or access policies.\n\n### Account Audit Configuration\n\nThe IoT audit includes [various audit checks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit-checks.html), and it is necessary to configure settings to enable those checks.\n\nYou can enable an account audit configuration with the following code:\n\n```ts\n// Audit notification are sent to the SNS topic\ndeclare const targetTopic: sns.ITopic;\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  targetTopic,\n});\n```\n\nBy default, all audit checks are enabled, but it is also possible to enable only specific audit checks.\n\n```ts\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  checkConfiguration: {\n    // enabled\n    authenticatedCognitoRoleOverlyPermissiveCheck: true,\n    // enabled by default\n    caCertificateExpiringCheck: undefined,\n    // disabled\n    caCertificateKeyQualityCheck: false,\n    conflictingClientIdsCheck: false,\n    deviceCertificateExpiringCheck: false,\n    deviceCertificateKeyQualityCheck: false,\n    deviceCertificateSharedCheck: false,\n    intermediateCaRevokedForActiveDeviceCertificatesCheck: false,\n    ioTPolicyPotentialMisConfigurationCheck: false,\n    iotPolicyOverlyPermissiveCheck: false,\n    iotRoleAliasAllowsAccessToUnusedServicesCheck: false,\n    iotRoleAliasOverlyPermissiveCheck: false,\n    loggingDisabledCheck: false,\n    revokedCaCertificateStillActiveCheck: false,\n    revokedDeviceCertificateStillActiveCheck: false,\n    unauthenticatedCognitoRoleOverlyPermissiveCheck: false,\n  },\n});\n```\n"
+    "markdown": "# AWS IoT Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nAWS IoT Core lets you connect billions of IoT devices and route trillions of\nmessages to AWS services without managing infrastructure.\n\n## `TopicRule`\n\nCreate a topic rule that give your devices the ability to interact with AWS services.\nYou can create a topic rule with an action that invoke the Lambda action as following:\n\n```ts\nconst func = new lambda.Function(this, 'MyFunction', {\n  runtime: lambda.Runtime.NODEJS_LATEST,\n  handler: 'index.handler',\n  code: lambda.Code.fromInline(`\n    exports.handler = (event) => {\n      console.log(\"It is test for lambda action of AWS IoT Rule.\", event);\n    };`\n  ),\n});\n\nnew iot.TopicRule(this, 'TopicRule', {\n  topicRuleName: 'MyTopicRule', // optional\n  description: 'invokes the lambda function', // optional\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  actions: [new actions.LambdaFunctionAction(func)],\n});\n```\n\nOr, you can add an action after constructing the `TopicRule` instance as following:\n\n```ts\ndeclare const func: lambda.Function;\n\nconst topicRule = new iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n});\ntopicRule.addAction(new actions.LambdaFunctionAction(func));\n```\n\nYou can also supply `errorAction` as following,\nand the IoT Rule will trigger it if a rule's action is unable to perform:\n\n```ts\nimport * as logs from 'aws-cdk-lib/aws-logs';\n\nconst logGroup = new logs.LogGroup(this, 'MyLogGroup');\n\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  errorAction: new actions.CloudWatchLogsAction(logGroup),\n});\n```\n\nIf you wanna make the topic rule disable, add property `enabled: false` as following:\n\n```ts\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  enabled: false,\n});\n```\n\nSee also [@aws-cdk/aws-iot-actions-alpha](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-iot-actions-alpha-readme.html) for other actions.\n\n## Logging\n\nAWS IoT provides a [logging feature](https://docs.aws.amazon.com/iot/latest/developerguide/configure-logging.html) that allows you to monitor and log AWS IoT activity.\n\nYou can enable IoT logging with the following code:\n\n```ts\nnew iot.Logging(this, 'Logging', {\n  logLevel: iot.LogLevel.INFO,\n});\n```\n\n**Note**: All logs are forwarded to the `AWSIotLogsV2` log group in CloudWatch.\n\n## Audit\n\nAn [AWS IoT Device Defender audit looks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit.html) at account- and device-related settings and policies to ensure security measures are in place.\nAn audit can help you detect any drifts from security best practices or access policies.\n\n### Account Audit Configuration\n\nThe IoT audit includes [various audit checks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit-checks.html), and it is necessary to configure settings to enable those checks.\n\nYou can enable an account audit configuration with the following code:\n\n```ts\n// Audit notification are sent to the SNS topic\ndeclare const targetTopic: sns.ITopic;\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  targetTopic,\n});\n```\n\nBy default, all audit checks are enabled, but it is also possible to enable only specific audit checks.\n\n```ts\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  checkConfiguration: {\n    // enabled\n    authenticatedCognitoRoleOverlyPermissiveCheck: true,\n    // enabled by default\n    caCertificateExpiringCheck: undefined,\n    // disabled\n    caCertificateKeyQualityCheck: false,\n    conflictingClientIdsCheck: false,\n    deviceCertificateExpiringCheck: false,\n    deviceCertificateKeyQualityCheck: false,\n    deviceCertificateSharedCheck: false,\n    intermediateCaRevokedForActiveDeviceCertificatesCheck: false,\n    ioTPolicyPotentialMisConfigurationCheck: false,\n    iotPolicyOverlyPermissiveCheck: false,\n    iotRoleAliasAllowsAccessToUnusedServicesCheck: false,\n    iotRoleAliasOverlyPermissiveCheck: false,\n    loggingDisabledCheck: false,\n    revokedCaCertificateStillActiveCheck: false,\n    revokedDeviceCertificateStillActiveCheck: false,\n    unauthenticatedCognitoRoleOverlyPermissiveCheck: false,\n  },\n});\n```\n\n### Scheduled Audit\n\nYou can create a [scheduled audit](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/AuditCommands.html#device-defender-AuditCommandsManageSchedules) that is run at a specified time interval. Checks must be enabled for your account by creating `AccountAuditConfiguration`.\n\n```ts\ndeclare const config: iot.AccountAuditConfiguration;\n\n// Daily audit\nconst dailyAudit = new iot.ScheduledAudit(this, 'DailyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.DAILY,\n  auditChecks: [\n    iot.AuditCheck.AUTHENTICATED_COGNITO_ROLE_OVERLY_PERMISSIVE_CHECK,\n  ],\n})\n\n// Weekly audit\nconst weeklyAudit = new iot.ScheduledAudit(this, 'WeeklyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.WEEKLY,\n  dayOfWeek: iot.DayOfWeek.SUNDAY,\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_EXPIRING_CHECK,\n  ],\n});\n\n// Monthly audit\nconst monthlyAudit = new iot.ScheduledAudit(this, 'MonthlyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.MONTHLY,\n  dayOfMonth: iot.DayOfMonth.of(1),\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_KEY_QUALITY_CHECK,\n  ],\n});\n```\n"
   },
   "repository": {
     "directory": "packages/@aws-cdk/aws-iot-alpha",
@@ -4138,6 +4138,131 @@
       ],
       "symbolId": "lib/action:ActionConfig"
     },
+    "@aws-cdk/aws-iot-alpha.AuditCheck": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "docs": {
+        "see": "https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit-checks.html",
+        "stability": "experimental",
+        "summary": "The AWS IoT Device Defender audit checks.",
+        "example": "declare const config: iot.AccountAuditConfiguration;\n\n// Daily audit\nconst dailyAudit = new iot.ScheduledAudit(this, 'DailyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.DAILY,\n  auditChecks: [\n    iot.AuditCheck.AUTHENTICATED_COGNITO_ROLE_OVERLY_PERMISSIVE_CHECK,\n  ],\n})\n\n// Weekly audit\nconst weeklyAudit = new iot.ScheduledAudit(this, 'WeeklyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.WEEKLY,\n  dayOfWeek: iot.DayOfWeek.SUNDAY,\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_EXPIRING_CHECK,\n  ],\n});\n\n// Monthly audit\nconst monthlyAudit = new iot.ScheduledAudit(this, 'MonthlyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.MONTHLY,\n  dayOfMonth: iot.DayOfMonth.of(1),\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_KEY_QUALITY_CHECK,\n  ],\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.AuditCheck",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "lib/scheduled-audit.ts",
+        "line": 43
+      },
+      "members": [
+        {
+          "docs": {
+            "remarks": "For this check, AWS IoT Device Defender audits all Amazon Cognito identity pools that have been used to connect to the AWS IoT message broker\nduring the 31 days before the audit is performed.",
+            "stability": "experimental",
+            "summary": "Checks the permissiveness of an authenticated Amazon Cognito identity pool role."
+          },
+          "name": "AUTHENTICATED_COGNITO_ROLE_OVERLY_PERMISSIVE_CHECK"
+        },
+        {
+          "docs": {
+            "remarks": "This check applies to CA certificates expiring within 30 days or that have expired.",
+            "stability": "experimental",
+            "summary": "Checks if a CA certificate is expiring."
+          },
+          "name": "CA_CERTIFICATE_EXPIRING_CHECK"
+        },
+        {
+          "docs": {
+            "remarks": "The quality checks if the key is in a valid format, not expired, and if the key meets a minimum required size.\n\nThis check applies to CA certificates that are ACTIVE or PENDING_TRANSFER.",
+            "stability": "experimental",
+            "summary": "Checks the quality of the CA certificate key."
+          },
+          "name": "CA_CERTIFICATE_KEY_QUALITY_CHECK"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if multiple devices connect using the same client ID."
+          },
+          "name": "CONFLICTING_CLIENT_IDS_CHECK"
+        },
+        {
+          "docs": {
+            "remarks": "This check applies to device certificates expiring within 30 days or that have expired.",
+            "stability": "experimental",
+            "summary": "Checks if a device certificate is expiring."
+          },
+          "name": "DEVICE_CERTIFICATE_EXPIRING_CHECK"
+        },
+        {
+          "docs": {
+            "remarks": "The quality checks if the key is in a valid format, not expired, signed by a registered certificate authority,\nand if the key meets a minimum required size.",
+            "stability": "experimental",
+            "summary": "Checks the quality of the device certificate key."
+          },
+          "name": "DEVICE_CERTIFICATE_KEY_QUALITY_CHECK"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if multiple concurrent connections use the same X.509 certificate to authenticate with AWS IoT."
+          },
+          "name": "DEVICE_CERTIFICATE_SHARED_CHECK"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks the permissiveness of a policy attached to an authenticated Amazon Cognito identity pool role."
+          },
+          "name": "IOT_POLICY_OVERLY_PERMISSIVE_CHECK"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if a role alias has access to services that haven't been used for the AWS IoT device in the last year."
+          },
+          "name": "IOT_ROLE_ALIAS_ALLOWS_ACCESS_TO_UNUSED_SERVICES_CHECK"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if the temporary credentials provided by AWS IoT role aliases are overly permissive."
+          },
+          "name": "IOT_ROLE_ALIAS_OVERLY_PERMISSIVE_CHECK"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if AWS IoT logs are disabled."
+          },
+          "name": "LOGGING_DISABLED_CHECK"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if a revoked CA certificate is still active."
+          },
+          "name": "REVOKED_CA_CERTIFICATE_STILL_ACTIVE_CHECK"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if a revoked device certificate is still active."
+          },
+          "name": "REVOKED_DEVICE_CERTIFICATE_STILL_ACTIVE_CHECK"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if policy attached to an unauthenticated Amazon Cognito identity pool role is too permissive."
+          },
+          "name": "UNAUTHENTICATED_COGNITO_ROLE_OVERLY_PERMISSIVE_CHECK"
+        }
+      ],
+      "name": "AuditCheck",
+      "symbolId": "lib/scheduled-audit:AuditCheck"
+    },
     "@aws-cdk/aws-iot-alpha.CheckConfiguration": {
       "assembly": "@aws-cdk/aws-iot-alpha",
       "datatype": true,
@@ -4455,6 +4580,208 @@
       ],
       "symbolId": "lib/audit-configuration:CheckConfiguration"
     },
+    "@aws-cdk/aws-iot-alpha.DayOfMonth": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "docs": {
+        "stability": "experimental",
+        "summary": "The day of the month on which the scheduled audit takes place.",
+        "example": "declare const config: iot.AccountAuditConfiguration;\n\n// Daily audit\nconst dailyAudit = new iot.ScheduledAudit(this, 'DailyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.DAILY,\n  auditChecks: [\n    iot.AuditCheck.AUTHENTICATED_COGNITO_ROLE_OVERLY_PERMISSIVE_CHECK,\n  ],\n})\n\n// Weekly audit\nconst weeklyAudit = new iot.ScheduledAudit(this, 'WeeklyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.WEEKLY,\n  dayOfWeek: iot.DayOfWeek.SUNDAY,\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_EXPIRING_CHECK,\n  ],\n});\n\n// Monthly audit\nconst monthlyAudit = new iot.ScheduledAudit(this, 'MonthlyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.MONTHLY,\n  dayOfMonth: iot.DayOfMonth.of(1),\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_KEY_QUALITY_CHECK,\n  ],\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.DayOfMonth",
+      "kind": "class",
+      "locationInModule": {
+        "filename": "lib/scheduled-audit.ts",
+        "line": 172
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Custom day of the month."
+          },
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 182
+          },
+          "name": "of",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "the day of the month."
+              },
+              "name": "day",
+              "type": {
+                "primitive": "number"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-iot-alpha.DayOfMonth"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "DayOfMonth",
+      "properties": [
+        {
+          "const": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The last day of the month."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 176
+          },
+          "name": "LAST_DAY",
+          "static": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-iot-alpha.DayOfMonth"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The day of the month."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 196
+          },
+          "name": "day",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "lib/scheduled-audit:DayOfMonth"
+    },
+    "@aws-cdk/aws-iot-alpha.DayOfWeek": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "docs": {
+        "stability": "experimental",
+        "summary": "The day of the week on which the scheduled audit takes place.",
+        "example": "declare const config: iot.AccountAuditConfiguration;\n\n// Daily audit\nconst dailyAudit = new iot.ScheduledAudit(this, 'DailyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.DAILY,\n  auditChecks: [\n    iot.AuditCheck.AUTHENTICATED_COGNITO_ROLE_OVERLY_PERMISSIVE_CHECK,\n  ],\n})\n\n// Weekly audit\nconst weeklyAudit = new iot.ScheduledAudit(this, 'WeeklyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.WEEKLY,\n  dayOfWeek: iot.DayOfWeek.SUNDAY,\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_EXPIRING_CHECK,\n  ],\n});\n\n// Monthly audit\nconst monthlyAudit = new iot.ScheduledAudit(this, 'MonthlyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.MONTHLY,\n  dayOfMonth: iot.DayOfMonth.of(1),\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_KEY_QUALITY_CHECK,\n  ],\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.DayOfWeek",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "lib/scheduled-audit.ts",
+        "line": 132
+      },
+      "members": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Sunday."
+          },
+          "name": "SUNDAY"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Monday."
+          },
+          "name": "MONDAY"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Tuesday."
+          },
+          "name": "TUESDAY"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Wednesday."
+          },
+          "name": "WEDNESDAY"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Thursday."
+          },
+          "name": "THURSDAY"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Friday."
+          },
+          "name": "FRIDAY"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Saturday."
+          },
+          "name": "SATURDAY"
+        }
+      ],
+      "name": "DayOfWeek",
+      "symbolId": "lib/scheduled-audit:DayOfWeek"
+    },
+    "@aws-cdk/aws-iot-alpha.Frequency": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "docs": {
+        "stability": "experimental",
+        "summary": "The frequency at which the scheduled audit takes place.",
+        "example": "declare const config: iot.AccountAuditConfiguration;\n\n// Daily audit\nconst dailyAudit = new iot.ScheduledAudit(this, 'DailyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.DAILY,\n  auditChecks: [\n    iot.AuditCheck.AUTHENTICATED_COGNITO_ROLE_OVERLY_PERMISSIVE_CHECK,\n  ],\n})\n\n// Weekly audit\nconst weeklyAudit = new iot.ScheduledAudit(this, 'WeeklyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.WEEKLY,\n  dayOfWeek: iot.DayOfWeek.SUNDAY,\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_EXPIRING_CHECK,\n  ],\n});\n\n// Monthly audit\nconst monthlyAudit = new iot.ScheduledAudit(this, 'MonthlyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.MONTHLY,\n  dayOfMonth: iot.DayOfMonth.of(1),\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_KEY_QUALITY_CHECK,\n  ],\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.Frequency",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "lib/scheduled-audit.ts",
+        "line": 202
+      },
+      "members": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Daily."
+          },
+          "name": "DAILY"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Weekly."
+          },
+          "name": "WEEKLY"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Bi-weekly."
+          },
+          "name": "BI_WEEKLY"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Monthly."
+          },
+          "name": "MONTHLY"
+        }
+      ],
+      "name": "Frequency",
+      "symbolId": "lib/scheduled-audit:Frequency"
+    },
     "@aws-cdk/aws-iot-alpha.IAccountAuditConfiguration": {
       "assembly": "@aws-cdk/aws-iot-alpha",
       "docs": {
@@ -4548,22 +4875,22 @@
       ],
       "symbolId": "lib/logging:ILogging"
     },
-    "@aws-cdk/aws-iot-alpha.ITopicRule": {
+    "@aws-cdk/aws-iot-alpha.IScheduledAudit": {
       "assembly": "@aws-cdk/aws-iot-alpha",
       "docs": {
         "stability": "experimental",
-        "summary": "Represents an AWS IoT Rule."
+        "summary": "Represents AWS IoT Scheduled Audit."
       },
-      "fqn": "@aws-cdk/aws-iot-alpha.ITopicRule",
+      "fqn": "@aws-cdk/aws-iot-alpha.IScheduledAudit",
       "interfaces": [
         "aws-cdk-lib.IResource"
       ],
       "kind": "interface",
       "locationInModule": {
-        "filename": "lib/topic-rule.ts",
-        "line": 10
+        "filename": "lib/scheduled-audit.ts",
+        "line": 9
       },
-      "name": "ITopicRule",
+      "name": "IScheduledAudit",
       "properties": [
         {
           "abstract": true,
@@ -4572,14 +4899,14 @@
               "attribute": "true"
             },
             "stability": "experimental",
-            "summary": "The value of the topic rule Amazon Resource Name (ARN), such as arn:aws:iot:us-east-2:123456789012:rule/rule_name."
+            "summary": "The ARN of the scheduled audit."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/topic-rule.ts",
-            "line": 17
+            "filename": "lib/scheduled-audit.ts",
+            "line": 20
           },
-          "name": "topicRuleArn",
+          "name": "scheduledAuditArn",
           "type": {
             "primitive": "string"
           }
@@ -4591,12 +4918,70 @@
               "attribute": "true"
             },
             "stability": "experimental",
-            "summary": "The name topic rule."
+            "summary": "The scheduled audit name."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/topic-rule.ts",
-            "line": 24
+            "filename": "lib/scheduled-audit.ts",
+            "line": 14
+          },
+          "name": "scheduledAuditName",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "lib/scheduled-audit:IScheduledAudit"
+    },
+    "@aws-cdk/aws-iot-alpha.ITopicRule": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Represents an AWS IoT Rule."
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.ITopicRule",
+      "interfaces": [
+        "aws-cdk-lib.IResource"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/topic-rule.ts",
+        "line": 10
+      },
+      "name": "ITopicRule",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The value of the topic rule Amazon Resource Name (ARN), such as arn:aws:iot:us-east-2:123456789012:rule/rule_name."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/topic-rule.ts",
+            "line": 17
+          },
+          "name": "topicRuleArn",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The name topic rule."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/topic-rule.ts",
+            "line": 24
           },
           "name": "topicRuleName",
           "type": {
@@ -5022,6 +5407,378 @@
       ],
       "symbolId": "lib/logging:LoggingProps"
     },
+    "@aws-cdk/aws-iot-alpha.ScheduledAudit": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "base": "aws-cdk-lib.Resource",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Defines AWS IoT Scheduled Audit.",
+        "example": "declare const config: iot.AccountAuditConfiguration;\n\n// Daily audit\nconst dailyAudit = new iot.ScheduledAudit(this, 'DailyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.DAILY,\n  auditChecks: [\n    iot.AuditCheck.AUTHENTICATED_COGNITO_ROLE_OVERLY_PERMISSIVE_CHECK,\n  ],\n})\n\n// Weekly audit\nconst weeklyAudit = new iot.ScheduledAudit(this, 'WeeklyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.WEEKLY,\n  dayOfWeek: iot.DayOfWeek.SUNDAY,\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_EXPIRING_CHECK,\n  ],\n});\n\n// Monthly audit\nconst monthlyAudit = new iot.ScheduledAudit(this, 'MonthlyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.MONTHLY,\n  dayOfMonth: iot.DayOfMonth.of(1),\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_KEY_QUALITY_CHECK,\n  ],\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.ScheduledAudit",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "lib/scheduled-audit.ts",
+          "line": 318
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "type": {
+              "fqn": "@aws-cdk/aws-iot-alpha.ScheduledAuditProps"
+            }
+          }
+        ]
+      },
+      "interfaces": [
+        "@aws-cdk/aws-iot-alpha.IScheduledAudit"
+      ],
+      "kind": "class",
+      "locationInModule": {
+        "filename": "lib/scheduled-audit.ts",
+        "line": 274
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Import an existing AWS IoT Scheduled Audit from its ARN."
+          },
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 282
+          },
+          "name": "fromScheduledAuditArn",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The parent creating construct (usually `this`)."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The construct's name."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The ARN of the scheduled audit."
+              },
+              "name": "scheduledAuditArn",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-iot-alpha.IScheduledAudit"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Import an existing AWS IoT Scheduled Audit from its attributes."
+          },
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 298
+          },
+          "name": "fromScheduledAuditAttributes",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The parent creating construct (usually `this`)."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The construct's name."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The scheduled audit attributes."
+              },
+              "name": "attrs",
+              "type": {
+                "fqn": "@aws-cdk/aws-iot-alpha.ScheduledAuditAttributes"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-iot-alpha.IScheduledAudit"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "ScheduledAudit",
+      "properties": [
+        {
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The ARN of the scheduled audit."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 316
+          },
+          "name": "scheduledAuditArn",
+          "overrides": "@aws-cdk/aws-iot-alpha.IScheduledAudit",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The scheduled audit name."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 310
+          },
+          "name": "scheduledAuditName",
+          "overrides": "@aws-cdk/aws-iot-alpha.IScheduledAudit",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "lib/scheduled-audit:ScheduledAudit"
+    },
+    "@aws-cdk/aws-iot-alpha.ScheduledAuditAttributes": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Construction properties for a Scheduled Audit.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as iot_alpha from '@aws-cdk/aws-iot-alpha';\nconst scheduledAuditAttributes: iot_alpha.ScheduledAuditAttributes = {\n  scheduledAuditArn: 'scheduledAuditArn',\n  scheduledAuditName: 'scheduledAuditName',\n};",
+        "custom": {
+          "exampleMetadata": "fixture=_generated"
+        }
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.ScheduledAuditAttributes",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/scheduled-audit.ts",
+        "line": 26
+      },
+      "name": "ScheduledAuditAttributes",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The ARN of the scheduled audit."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 35
+          },
+          "name": "scheduledAuditArn",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The scheduled audit name."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 30
+          },
+          "name": "scheduledAuditName",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "lib/scheduled-audit:ScheduledAuditAttributes"
+    },
+    "@aws-cdk/aws-iot-alpha.ScheduledAuditProps": {
+      "assembly": "@aws-cdk/aws-iot-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Properties for defining AWS IoT Scheduled Audit.",
+        "example": "declare const config: iot.AccountAuditConfiguration;\n\n// Daily audit\nconst dailyAudit = new iot.ScheduledAudit(this, 'DailyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.DAILY,\n  auditChecks: [\n    iot.AuditCheck.AUTHENTICATED_COGNITO_ROLE_OVERLY_PERMISSIVE_CHECK,\n  ],\n})\n\n// Weekly audit\nconst weeklyAudit = new iot.ScheduledAudit(this, 'WeeklyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.WEEKLY,\n  dayOfWeek: iot.DayOfWeek.SUNDAY,\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_EXPIRING_CHECK,\n  ],\n});\n\n// Monthly audit\nconst monthlyAudit = new iot.ScheduledAudit(this, 'MonthlyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.MONTHLY,\n  dayOfMonth: iot.DayOfMonth.of(1),\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_KEY_QUALITY_CHECK,\n  ],\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-iot-alpha.ScheduledAuditProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/scheduled-audit.ts",
+        "line": 227
+      },
+      "name": "ScheduledAuditProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "The audit checks specified in `auditChecks` must be enabled in this configuration.",
+            "stability": "experimental",
+            "summary": "Account audit configuration."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 240
+          },
+          "name": "accountAuditConfiguration",
+          "type": {
+            "fqn": "@aws-cdk/aws-iot-alpha.IAccountAuditConfiguration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Checks must be enabled for your account.",
+            "stability": "experimental",
+            "summary": "Which checks are performed during the scheduled audit."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 233
+          },
+          "name": "auditChecks",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@aws-cdk/aws-iot-alpha.AuditCheck"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "How often the scheduled audit occurs."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 261
+          },
+          "name": "frequency",
+          "type": {
+            "fqn": "@aws-cdk/aws-iot-alpha.Frequency"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- required if frequency is \"MONTHLY\", not allowed otherwise",
+            "remarks": "If days 29-31 are specified, and the month does not have that many days, the audit takes place on the \"LAST\" day of the month.",
+            "stability": "experimental",
+            "summary": "The day of the month on which the scheduled audit is run (if the frequency is \"MONTHLY\")."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 256
+          },
+          "name": "dayOfMonth",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-iot-alpha.DayOfMonth"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- required if frequency is \"WEEKLY\" or \"BIWEEKLY\", not allowed otherwise",
+            "stability": "experimental",
+            "summary": "The day of the week on which the scheduled audit is run (if the frequency is \"WEEKLY\" or \"BIWEEKLY\")."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 247
+          },
+          "name": "dayOfWeek",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-iot-alpha.DayOfWeek"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- auto generated name",
+            "stability": "experimental",
+            "summary": "The name of the scheduled audit."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 268
+          },
+          "name": "scheduledAuditName",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "lib/scheduled-audit:ScheduledAuditProps"
+    },
     "@aws-cdk/aws-iot-alpha.TopicRule": {
       "assembly": "@aws-cdk/aws-iot-alpha",
       "base": "aws-cdk-lib.Resource",
@@ -5319,6 +6076,6 @@
       "symbolId": "lib/topic-rule:TopicRuleProps"
     }
   },
-  "version": "2.163.1-alpha.0",
+  "version": "2.164.1-alpha.0",
   "fingerprint": "**********"
 }