@aws-cdk/aws-iot-alpha 2.194.0-alpha.0 → 2.196.0-alpha.0

package/.jsii

@@ -8,7 +8,7 @@
     "url": "https://aws.amazon.com"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.194.0",
+    "aws-cdk-lib": "^2.196.0",
     "constructs": "^10.0.0"
   },
   "dependencyClosure": {
@@ -3516,6 +3516,19 @@
             }
           }
         },
+        "aws-cdk-lib.aws_ssmguiconnect": {
+          "targets": {
+            "dotnet": {
+              "package": "Amazon.CDK.AWS.SSMGuiConnect"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.services.ssmguiconnect"
+            },
+            "python": {
+              "module": "aws_cdk.aws_ssmguiconnect"
+            }
+          }
+        },
         "aws-cdk-lib.aws_ssmincidents": {
           "targets": {
             "dotnet": {
@@ -3952,7 +3965,7 @@
     "stability": "experimental"
   },
   "homepage": "https://github.com/aws/aws-cdk",
-  "jsiiVersion": "5.7.10 (build 5114b23)",
+  "jsiiVersion": "5.7.15 (build 8c2933f)",
   "keywords": [
     "aws",
     "cdk",
@@ -3973,7 +3986,7 @@
   },
   "name": "@aws-cdk/aws-iot-alpha",
   "readme": {
-    "markdown": "# AWS IoT Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nAWS IoT Core lets you connect billions of IoT devices and route trillions of\nmessages to AWS services without managing infrastructure.\n\n## `TopicRule`\n\nCreate a topic rule that give your devices the ability to interact with AWS services.\nYou can create a topic rule with an action that invoke the Lambda action as following:\n\n```ts\nconst func = new lambda.Function(this, 'MyFunction', {\n  runtime: lambda.Runtime.NODEJS_LATEST,\n  handler: 'index.handler',\n  code: lambda.Code.fromInline(`\n    exports.handler = (event) => {\n      console.log(\"It is test for lambda action of AWS IoT Rule.\", event);\n    };`\n  ),\n});\n\nnew iot.TopicRule(this, 'TopicRule', {\n  topicRuleName: 'MyTopicRule', // optional\n  description: 'invokes the lambda function', // optional\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  actions: [new actions.LambdaFunctionAction(func)],\n});\n```\n\nOr, you can add an action after constructing the `TopicRule` instance as following:\n\n```ts\ndeclare const func: lambda.Function;\n\nconst topicRule = new iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n});\ntopicRule.addAction(new actions.LambdaFunctionAction(func));\n```\n\nYou can also supply `errorAction` as following,\nand the IoT Rule will trigger it if a rule's action is unable to perform:\n\n```ts\nimport * as logs from 'aws-cdk-lib/aws-logs';\n\nconst logGroup = new logs.LogGroup(this, 'MyLogGroup');\n\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  errorAction: new actions.CloudWatchLogsAction(logGroup),\n});\n```\n\nIf you wanna make the topic rule disable, add property `enabled: false` as following:\n\n```ts\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  enabled: false,\n});\n```\n\nSee also [@aws-cdk/aws-iot-actions-alpha](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-iot-actions-alpha-readme.html) for other actions.\n\n## Logging\n\nAWS IoT provides a [logging feature](https://docs.aws.amazon.com/iot/latest/developerguide/configure-logging.html) that allows you to monitor and log AWS IoT activity.\n\nYou can enable IoT logging with the following code:\n\n```ts\nnew iot.Logging(this, 'Logging', {\n  logLevel: iot.LogLevel.INFO,\n});\n```\n\n**Note**: All logs are forwarded to the `AWSIotLogsV2` log group in CloudWatch.\n\n## Audit\n\nAn [AWS IoT Device Defender audit looks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit.html) at account- and device-related settings and policies to ensure security measures are in place.\nAn audit can help you detect any drifts from security best practices or access policies.\n\n### Account Audit Configuration\n\nThe IoT audit includes [various audit checks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit-checks.html), and it is necessary to configure settings to enable those checks.\n\nYou can enable an account audit configuration with the following code:\n\n```ts\n// Audit notification are sent to the SNS topic\ndeclare const targetTopic: sns.ITopic;\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  targetTopic,\n});\n```\n\nBy default, all audit checks are enabled, but it is also possible to enable only specific audit checks.\n\n```ts\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  checkConfiguration: {\n    // enabled\n    authenticatedCognitoRoleOverlyPermissiveCheck: true,\n    // enabled by default\n    caCertificateExpiringCheck: undefined,\n    // disabled\n    caCertificateKeyQualityCheck: false,\n    conflictingClientIdsCheck: false,\n    deviceCertificateExpiringCheck: false,\n    deviceCertificateKeyQualityCheck: false,\n    deviceCertificateSharedCheck: false,\n    intermediateCaRevokedForActiveDeviceCertificatesCheck: false,\n    ioTPolicyPotentialMisConfigurationCheck: false,\n    iotPolicyOverlyPermissiveCheck: false,\n    iotRoleAliasAllowsAccessToUnusedServicesCheck: false,\n    iotRoleAliasOverlyPermissiveCheck: false,\n    loggingDisabledCheck: false,\n    revokedCaCertificateStillActiveCheck: false,\n    revokedDeviceCertificateStillActiveCheck: false,\n    unauthenticatedCognitoRoleOverlyPermissiveCheck: false,\n  },\n});\n```\n\n### Scheduled Audit\n\nYou can create a [scheduled audit](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/AuditCommands.html#device-defender-AuditCommandsManageSchedules) that is run at a specified time interval. Checks must be enabled for your account by creating `AccountAuditConfiguration`.\n\n```ts\ndeclare const config: iot.AccountAuditConfiguration;\n\n// Daily audit\nconst dailyAudit = new iot.ScheduledAudit(this, 'DailyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.DAILY,\n  auditChecks: [\n    iot.AuditCheck.AUTHENTICATED_COGNITO_ROLE_OVERLY_PERMISSIVE_CHECK,\n  ],\n})\n\n// Weekly audit\nconst weeklyAudit = new iot.ScheduledAudit(this, 'WeeklyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.WEEKLY,\n  dayOfWeek: iot.DayOfWeek.SUNDAY,\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_EXPIRING_CHECK,\n  ],\n});\n\n// Monthly audit\nconst monthlyAudit = new iot.ScheduledAudit(this, 'MonthlyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.MONTHLY,\n  dayOfMonth: iot.DayOfMonth.of(1),\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_KEY_QUALITY_CHECK,\n  ],\n});\n```\n"
+    "markdown": "# AWS IoT Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nAWS IoT Core lets you connect billions of IoT devices and route trillions of\nmessages to AWS services without managing infrastructure.\n\n## `TopicRule`\n\nCreate a topic rule that give your devices the ability to interact with AWS services.\nYou can create a topic rule with an action that invoke the Lambda action as following:\n\n```ts\nconst func = new lambda.Function(this, 'MyFunction', {\n  runtime: lambda.Runtime.NODEJS_LATEST,\n  handler: 'index.handler',\n  code: lambda.Code.fromInline(`\n    exports.handler = (event) => {\n      console.log(\"It is test for lambda action of AWS IoT Rule.\", event);\n    };`\n  ),\n});\n\nnew iot.TopicRule(this, 'TopicRule', {\n  topicRuleName: 'MyTopicRule', // optional\n  description: 'invokes the lambda function', // optional\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  actions: [new actions.LambdaFunctionAction(func)],\n});\n```\n\nOr, you can add an action after constructing the `TopicRule` instance as following:\n\n```ts\ndeclare const func: lambda.Function;\n\nconst topicRule = new iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n});\ntopicRule.addAction(new actions.LambdaFunctionAction(func));\n```\n\nYou can also supply `errorAction` as following,\nand the IoT Rule will trigger it if a rule's action is unable to perform:\n\n```ts\nimport * as logs from 'aws-cdk-lib/aws-logs';\n\nconst logGroup = new logs.LogGroup(this, 'MyLogGroup');\n\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  errorAction: new actions.CloudWatchLogsAction(logGroup),\n});\n```\n\nIf you wanna make the topic rule disable, add property `enabled: false` as following:\n\n```ts\nnew iot.TopicRule(this, 'TopicRule', {\n  sql: iot.IotSql.fromStringAsVer20160323(\"SELECT topic(2) as device_id, timestamp() as timestamp FROM 'device/+/data'\"),\n  enabled: false,\n});\n```\n\nSee also [@aws-cdk/aws-iot-actions-alpha](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-iot-actions-alpha-readme.html) for other actions.\n\n## Logging\n\nAWS IoT provides a [logging feature](https://docs.aws.amazon.com/iot/latest/developerguide/configure-logging.html) that allows you to monitor and log AWS IoT activity.\n\nYou can enable IoT logging with the following code:\n\n```ts\nnew iot.Logging(this, 'Logging', {\n  logLevel: iot.LogLevel.INFO,\n});\n```\n\n**Note**: All logs are forwarded to the `AWSIotLogsV2` log group in CloudWatch.\n\n## Audit\n\nAn [AWS IoT Device Defender audit looks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit.html) at account- and device-related settings and policies to ensure security measures are in place.\nAn audit can help you detect any drifts from security best practices or access policies.\n\n### Account Audit Configuration\n\nThe IoT audit includes [various audit checks](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit-checks.html), and it is necessary to configure settings to enable those checks.\n\nYou can enable an account audit configuration with the following code:\n\n```ts\n// Audit notification are sent to the SNS topic\ndeclare const targetTopic: sns.ITopic;\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  targetTopic,\n});\n```\n\nBy default, all audit checks are enabled, but it is also possible to enable only specific audit checks.\n\n```ts\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  checkConfiguration: {\n    // enabled\n    authenticatedCognitoRoleOverlyPermissiveCheck: true,\n    // enabled by default\n    caCertificateExpiringCheck: undefined,\n    // disabled\n    caCertificateKeyQualityCheck: false,\n    conflictingClientIdsCheck: false,\n    deviceCertificateAgeCheck: false,\n    deviceCertificateExpiringCheck: false,\n    deviceCertificateKeyQualityCheck: false,\n    deviceCertificateSharedCheck: false,\n    intermediateCaRevokedForActiveDeviceCertificatesCheck: false,\n    ioTPolicyPotentialMisConfigurationCheck: false,\n    iotPolicyOverlyPermissiveCheck: false,\n    iotRoleAliasAllowsAccessToUnusedServicesCheck: false,\n    iotRoleAliasOverlyPermissiveCheck: false,\n    loggingDisabledCheck: false,\n    revokedCaCertificateStillActiveCheck: false,\n    revokedDeviceCertificateStillActiveCheck: false,\n    unauthenticatedCognitoRoleOverlyPermissiveCheck: false,\n  },\n});\n```\n\nTo configure [the device certificate age check](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-certificate-age-check.html), you can specify the duration for the check:\n\n```ts\nimport { Duration } from 'aws-cdk-lib';\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  checkConfiguration: {\n    deviceCertificateAgeCheck: true,\n    // The default value is 365 days\n    // Valid values range from 30 days (minimum) to 3652 days (10 years, maximum)\n    deviceCertificateAgeCheckDuration: Duration.days(365),\n  },\n});\n```\n\n### Scheduled Audit\n\nYou can create a [scheduled audit](https://docs.aws.amazon.com/iot-device-defender/latest/devguide/AuditCommands.html#device-defender-AuditCommandsManageSchedules) that is run at a specified time interval. Checks must be enabled for your account by creating `AccountAuditConfiguration`.\n\n```ts\ndeclare const config: iot.AccountAuditConfiguration;\n\n// Daily audit\nconst dailyAudit = new iot.ScheduledAudit(this, 'DailyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.DAILY,\n  auditChecks: [\n    iot.AuditCheck.AUTHENTICATED_COGNITO_ROLE_OVERLY_PERMISSIVE_CHECK,\n  ],\n})\n\n// Weekly audit\nconst weeklyAudit = new iot.ScheduledAudit(this, 'WeeklyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.WEEKLY,\n  dayOfWeek: iot.DayOfWeek.SUNDAY,\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_EXPIRING_CHECK,\n  ],\n});\n\n// Monthly audit\nconst monthlyAudit = new iot.ScheduledAudit(this, 'MonthlyAudit', {\n  accountAuditConfiguration: config,\n  frequency: iot.Frequency.MONTHLY,\n  dayOfMonth: iot.DayOfMonth.of(1),\n  auditChecks: [\n    iot.AuditCheck.CA_CERTIFICATE_KEY_QUALITY_CHECK,\n  ],\n});\n```\n"
   },
   "repository": {
     "directory": "packages/@aws-cdk/aws-iot-alpha",
@@ -4017,7 +4030,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Defines AWS IoT Audit Configuration.",
-        "example": "// Audit notification are sent to the SNS topic\ndeclare const targetTopic: sns.ITopic;\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  targetTopic,\n});",
+        "example": "import { Duration } from 'aws-cdk-lib';\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  checkConfiguration: {\n    deviceCertificateAgeCheck: true,\n    // The default value is 365 days\n    // Valid values range from 30 days (minimum) to 3652 days (10 years, maximum)\n    deviceCertificateAgeCheckDuration: Duration.days(365),\n  },\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -4029,7 +4042,7 @@
         },
         "locationInModule": {
           "filename": "lib/audit-configuration.ts",
-          "line": 199
+          "line": 223
         },
         "parameters": [
           {
@@ -4059,7 +4072,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/audit-configuration.ts",
-        "line": 178
+        "line": 198
       },
       "methods": [
         {
@@ -4069,7 +4082,7 @@
           },
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 186
+            "line": 210
           },
           "name": "fromAccountId",
           "parameters": [
@@ -4111,6 +4124,23 @@
       ],
       "name": "AccountAuditConfiguration",
       "properties": [
+        {
+          "const": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Uniquely identifies this class."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 201
+          },
+          "name": "PROPERTY_INJECTION_ID",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
           "docs": {
             "custom": {
@@ -4122,7 +4152,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 197
+            "line": 221
           },
           "name": "accountId",
           "overrides": "@aws-cdk/aws-iot-alpha.IAccountAuditConfiguration",
@@ -4139,7 +4169,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Properties for defining AWS IoT Audit Configuration.",
-        "example": "// Audit notification are sent to the SNS topic\ndeclare const targetTopic: sns.ITopic;\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  targetTopic,\n});",
+        "example": "import { Duration } from 'aws-cdk-lib';\n\nnew iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  checkConfiguration: {\n    deviceCertificateAgeCheck: true,\n    // The default value is 365 days\n    // Valid values range from 30 days (minimum) to 3652 days (10 years, maximum)\n    deviceCertificateAgeCheckDuration: Duration.days(365),\n  },\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -4148,7 +4178,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/audit-configuration.ts",
-        "line": 159
+        "line": 179
       },
       "name": "AccountAuditConfigurationProps",
       "properties": [
@@ -4162,7 +4192,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 172
+            "line": 192
           },
           "name": "checkConfiguration",
           "optional": true,
@@ -4180,7 +4210,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 165
+            "line": 185
           },
           "name": "targetTopic",
           "optional": true,
@@ -4244,7 +4274,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/scheduled-audit.ts",
-        "line": 44
+        "line": 45
       },
       "members": [
         {
@@ -4361,7 +4391,7 @@
         "see": "https://docs.aws.amazon.com/iot-device-defender/latest/devguide/device-defender-audit-checks.html",
         "stability": "experimental",
         "summary": "The types of audit checks.",
-        "example": "new iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  checkConfiguration: {\n    // enabled\n    authenticatedCognitoRoleOverlyPermissiveCheck: true,\n    // enabled by default\n    caCertificateExpiringCheck: undefined,\n    // disabled\n    caCertificateKeyQualityCheck: false,\n    conflictingClientIdsCheck: false,\n    deviceCertificateExpiringCheck: false,\n    deviceCertificateKeyQualityCheck: false,\n    deviceCertificateSharedCheck: false,\n    intermediateCaRevokedForActiveDeviceCertificatesCheck: false,\n    ioTPolicyPotentialMisConfigurationCheck: false,\n    iotPolicyOverlyPermissiveCheck: false,\n    iotRoleAliasAllowsAccessToUnusedServicesCheck: false,\n    iotRoleAliasOverlyPermissiveCheck: false,\n    loggingDisabledCheck: false,\n    revokedCaCertificateStillActiveCheck: false,\n    revokedDeviceCertificateStillActiveCheck: false,\n    unauthenticatedCognitoRoleOverlyPermissiveCheck: false,\n  },\n});",
+        "example": "new iot.AccountAuditConfiguration(this, 'AuditConfiguration', {\n  checkConfiguration: {\n    // enabled\n    authenticatedCognitoRoleOverlyPermissiveCheck: true,\n    // enabled by default\n    caCertificateExpiringCheck: undefined,\n    // disabled\n    caCertificateKeyQualityCheck: false,\n    conflictingClientIdsCheck: false,\n    deviceCertificateAgeCheck: false,\n    deviceCertificateExpiringCheck: false,\n    deviceCertificateKeyQualityCheck: false,\n    deviceCertificateSharedCheck: false,\n    intermediateCaRevokedForActiveDeviceCertificatesCheck: false,\n    ioTPolicyPotentialMisConfigurationCheck: false,\n    iotPolicyOverlyPermissiveCheck: false,\n    iotRoleAliasAllowsAccessToUnusedServicesCheck: false,\n    iotRoleAliasOverlyPermissiveCheck: false,\n    loggingDisabledCheck: false,\n    revokedCaCertificateStillActiveCheck: false,\n    revokedDeviceCertificateStillActiveCheck: false,\n    unauthenticatedCognitoRoleOverlyPermissiveCheck: false,\n  },\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -4370,7 +4400,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/audit-configuration.ts",
-        "line": 24
+        "line": 25
       },
       "name": "CheckConfiguration",
       "properties": [
@@ -4385,7 +4415,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 33
+            "line": 34
           },
           "name": "authenticatedCognitoRoleOverlyPermissiveCheck",
           "optional": true,
@@ -4404,7 +4434,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 42
+            "line": 43
           },
           "name": "caCertificateExpiringCheck",
           "optional": true,
@@ -4423,7 +4453,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 53
+            "line": 54
           },
           "name": "caCertificateKeyQualityCheck",
           "optional": true,
@@ -4441,7 +4471,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 60
+            "line": 61
           },
           "name": "conflictingClientIdsCheck",
           "optional": true,
@@ -4449,6 +4479,43 @@
             "primitive": "boolean"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Checks when a device certificate has been active for a number of days greater than or equal to the number you specify."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 68
+          },
+          "name": "deviceCertificateAgeCheck",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- 365 days",
+            "remarks": "Valid values range from 30 days (minimum) to 3652 days (10 years, maximum).\n\nYou cannot specify a value for this check if `deviceCertificateAgeCheck` is set to `false`.",
+            "stability": "experimental",
+            "summary": "The duration used to check if a device certificate has been active for a number of days greater than or equal to the number you specify."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/audit-configuration.ts",
+            "line": 80
+          },
+          "name": "deviceCertificateAgeCheckDuration",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -4460,7 +4527,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 69
+            "line": 89
           },
           "name": "deviceCertificateExpiringCheck",
           "optional": true,
@@ -4479,7 +4546,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 79
+            "line": 99
           },
           "name": "deviceCertificateKeyQualityCheck",
           "optional": true,
@@ -4497,7 +4564,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 86
+            "line": 106
           },
           "name": "deviceCertificateSharedCheck",
           "optional": true,
@@ -4515,7 +4582,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 93
+            "line": 113
           },
           "name": "intermediateCaRevokedForActiveDeviceCertificatesCheck",
           "optional": true,
@@ -4533,7 +4600,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 100
+            "line": 120
           },
           "name": "iotPolicyOverlyPermissiveCheck",
           "optional": true,
@@ -4552,7 +4619,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 111
+            "line": 131
           },
           "name": "ioTPolicyPotentialMisConfigurationCheck",
           "optional": true,
@@ -4570,7 +4637,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 118
+            "line": 138
           },
           "name": "iotRoleAliasAllowsAccessToUnusedServicesCheck",
           "optional": true,
@@ -4588,7 +4655,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 125
+            "line": 145
           },
           "name": "iotRoleAliasOverlyPermissiveCheck",
           "optional": true,
@@ -4606,7 +4673,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 132
+            "line": 152
           },
           "name": "loggingDisabledCheck",
           "optional": true,
@@ -4624,7 +4691,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 139
+            "line": 159
           },
           "name": "revokedCaCertificateStillActiveCheck",
           "optional": true,
@@ -4642,7 +4709,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 146
+            "line": 166
           },
           "name": "revokedDeviceCertificateStillActiveCheck",
           "optional": true,
@@ -4660,7 +4727,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 153
+            "line": 173
           },
           "name": "unauthenticatedCognitoRoleOverlyPermissiveCheck",
           "optional": true,
@@ -4685,7 +4752,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/scheduled-audit.ts",
-        "line": 178
+        "line": 179
       },
       "methods": [
         {
@@ -4695,7 +4762,7 @@
           },
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 188
+            "line": 189
           },
           "name": "of",
           "parameters": [
@@ -4728,7 +4795,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 182
+            "line": 183
           },
           "name": "LAST_DAY",
           "static": true,
@@ -4744,7 +4811,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 202
+            "line": 203
           },
           "name": "day",
           "type": {
@@ -4768,7 +4835,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/scheduled-audit.ts",
-        "line": 133
+        "line": 134
       },
       "members": [
         {
@@ -4845,7 +4912,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/scheduled-audit.ts",
-        "line": 208
+        "line": 209
       },
       "members": [
         {
@@ -4893,7 +4960,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/audit-configuration.ts",
-        "line": 11
+        "line": 12
       },
       "name": "IAccountAuditConfiguration",
       "properties": [
@@ -4909,7 +4976,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/audit-configuration.ts",
-            "line": 16
+            "line": 17
           },
           "name": "accountId",
           "type": {
@@ -4947,7 +5014,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/logging.ts",
-        "line": 10
+        "line": 11
       },
       "name": "ILogging",
       "properties": [
@@ -4963,7 +5030,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/logging.ts",
-            "line": 15
+            "line": 16
           },
           "name": "logId",
           "type": {
@@ -4986,7 +5053,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/scheduled-audit.ts",
-        "line": 10
+        "line": 11
       },
       "name": "IScheduledAudit",
       "properties": [
@@ -5002,7 +5069,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 21
+            "line": 22
           },
           "name": "scheduledAuditArn",
           "type": {
@@ -5021,7 +5088,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 15
+            "line": 16
           },
           "name": "scheduledAuditName",
           "type": {
@@ -5044,7 +5111,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/topic-rule.ts",
-        "line": 11
+        "line": 12
       },
       "name": "ITopicRule",
       "properties": [
@@ -5060,7 +5127,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 18
+            "line": 19
           },
           "name": "topicRuleArn",
           "type": {
@@ -5079,7 +5146,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 25
+            "line": 26
           },
           "name": "topicRuleName",
           "type": {
@@ -5297,7 +5364,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/logging.ts",
-        "line": 21
+        "line": 22
       },
       "members": [
         {
@@ -5361,7 +5428,7 @@
         },
         "locationInModule": {
           "filename": "lib/logging.ts",
-          "line": 92
+          "line": 97
         },
         "parameters": [
           {
@@ -5391,7 +5458,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/logging.ts",
-        "line": 71
+        "line": 72
       },
       "methods": [
         {
@@ -5401,7 +5468,7 @@
           },
           "locationInModule": {
             "filename": "lib/logging.ts",
-            "line": 79
+            "line": 84
           },
           "name": "fromLogId",
           "parameters": [
@@ -5443,6 +5510,23 @@
       ],
       "name": "Logging",
       "properties": [
+        {
+          "const": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Uniquely identifies this class."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/logging.ts",
+            "line": 75
+          },
+          "name": "PROPERTY_INJECTION_ID",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
           "docs": {
             "custom": {
@@ -5454,7 +5538,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/logging.ts",
-            "line": 90
+            "line": 95
           },
           "name": "logId",
           "overrides": "@aws-cdk/aws-iot-alpha.ILogging",
@@ -5480,7 +5564,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/logging.ts",
-        "line": 59
+        "line": 60
       },
       "name": "LoggingProps",
       "properties": [
@@ -5494,7 +5578,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/logging.ts",
-            "line": 65
+            "line": 66
           },
           "name": "logLevel",
           "optional": true,
@@ -5523,7 +5607,7 @@
         },
         "locationInModule": {
           "filename": "lib/scheduled-audit.ts",
-          "line": 324
+          "line": 329
         },
         "parameters": [
           {
@@ -5552,7 +5636,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/scheduled-audit.ts",
-        "line": 280
+        "line": 281
       },
       "methods": [
         {
@@ -5562,7 +5646,7 @@
           },
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 288
+            "line": 293
           },
           "name": "fromScheduledAuditArn",
           "parameters": [
@@ -5608,7 +5692,7 @@
           },
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 304
+            "line": 309
           },
           "name": "fromScheduledAuditAttributes",
           "parameters": [
@@ -5650,6 +5734,23 @@
       ],
       "name": "ScheduledAudit",
       "properties": [
+        {
+          "const": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Uniquely identifies this class."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/scheduled-audit.ts",
+            "line": 284
+          },
+          "name": "PROPERTY_INJECTION_ID",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
           "docs": {
             "custom": {
@@ -5661,7 +5762,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 322
+            "line": 327
           },
           "name": "scheduledAuditArn",
           "overrides": "@aws-cdk/aws-iot-alpha.IScheduledAudit",
@@ -5680,7 +5781,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 316
+            "line": 321
           },
           "name": "scheduledAuditName",
           "overrides": "@aws-cdk/aws-iot-alpha.IScheduledAudit",
@@ -5706,7 +5807,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/scheduled-audit.ts",
-        "line": 27
+        "line": 28
       },
       "name": "ScheduledAuditAttributes",
       "properties": [
@@ -5719,7 +5820,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 36
+            "line": 37
           },
           "name": "scheduledAuditArn",
           "type": {
@@ -5735,7 +5836,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 31
+            "line": 32
           },
           "name": "scheduledAuditName",
           "type": {
@@ -5760,7 +5861,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/scheduled-audit.ts",
-        "line": 233
+        "line": 234
       },
       "name": "ScheduledAuditProps",
       "properties": [
@@ -5774,7 +5875,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 246
+            "line": 247
           },
           "name": "accountAuditConfiguration",
           "type": {
@@ -5791,7 +5892,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 239
+            "line": 240
           },
           "name": "auditChecks",
           "type": {
@@ -5812,7 +5913,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 267
+            "line": 268
           },
           "name": "frequency",
           "type": {
@@ -5830,7 +5931,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 262
+            "line": 263
           },
           "name": "dayOfMonth",
           "optional": true,
@@ -5848,7 +5949,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 253
+            "line": 254
           },
           "name": "dayOfWeek",
           "optional": true,
@@ -5866,7 +5967,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/scheduled-audit.ts",
-            "line": 274
+            "line": 275
           },
           "name": "scheduledAuditName",
           "optional": true,
@@ -5895,7 +5996,7 @@
         },
         "locationInModule": {
           "filename": "lib/topic-rule.ts",
-          "line": 115
+          "line": 120
         },
         "parameters": [
           {
@@ -5924,7 +6025,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/topic-rule.ts",
-        "line": 77
+        "line": 78
       },
       "methods": [
         {
@@ -5934,7 +6035,7 @@
           },
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 85
+            "line": 90
           },
           "name": "fromTopicRuleArn",
           "parameters": [
@@ -5980,7 +6081,7 @@
           },
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 153
+            "line": 158
           },
           "name": "addAction",
           "parameters": [
@@ -5998,6 +6099,23 @@
       ],
       "name": "TopicRule",
       "properties": [
+        {
+          "const": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Uniquely identifies this class."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/topic-rule.ts",
+            "line": 81
+          },
+          "name": "PROPERTY_INJECTION_ID",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
           "docs": {
             "custom": {
@@ -6009,7 +6127,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 105
+            "line": 110
           },
           "name": "topicRuleArn",
           "overrides": "@aws-cdk/aws-iot-alpha.ITopicRule",
@@ -6028,7 +6146,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 111
+            "line": 116
           },
           "name": "topicRuleName",
           "overrides": "@aws-cdk/aws-iot-alpha.ITopicRule",
@@ -6054,7 +6172,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/topic-rule.ts",
-        "line": 31
+        "line": 32
       },
       "name": "TopicRuleProps",
       "properties": [
@@ -6068,7 +6186,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 71
+            "line": 72
           },
           "name": "sql",
           "type": {
@@ -6085,7 +6203,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 43
+            "line": 44
           },
           "name": "actions",
           "optional": true,
@@ -6108,7 +6226,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 50
+            "line": 51
           },
           "name": "description",
           "optional": true,
@@ -6126,7 +6244,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 64
+            "line": 65
           },
           "name": "enabled",
           "optional": true,
@@ -6144,7 +6262,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 57
+            "line": 58
           },
           "name": "errorAction",
           "optional": true,
@@ -6162,7 +6280,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/topic-rule.ts",
-            "line": 36
+            "line": 37
           },
           "name": "topicRuleName",
           "optional": true,
@@ -6174,6 +6292,6 @@
       "symbolId": "lib/topic-rule:TopicRuleProps"
     }
   },
-  "version": "2.194.0-alpha.0",
+  "version": "2.196.0-alpha.0",
   "fingerprint": "**********"
 }