@aws-cdk/aws-s3tables-alpha 2.195.0-alpha.0 → 2.196.1-alpha.0

package/.jsii

@@ -8,7 +8,7 @@
     "url": "https://aws.amazon.com"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.195.0",
+    "aws-cdk-lib": "^2.196.1",
     "constructs": "^10.0.0"
   },
   "dependencyClosure": {
@@ -3965,7 +3965,7 @@
     "stability": "experimental"
   },
   "homepage": "https://github.com/aws/aws-cdk",
-  "jsiiVersion": "5.7.10 (build 5114b23)",
+  "jsiiVersion": "5.7.15 (build 8c2933f)",
   "keywords": [
     "aws",
     "cdk",
@@ -3988,7 +3988,7 @@
   },
   "name": "@aws-cdk/aws-s3tables-alpha",
   "readme": {
-    "markdown": "# Amazon S3 Tables Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\n## Amazon S3 Tables\n\nAmazon S3 Tables deliver the first cloud object store with built-in Apache Iceberg support and streamline storing tabular data at scale.\n\n[Product Page](https://aws.amazon.com/s3/features/tables/) | [User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables.html)\n\n\n## Usage\n\n### Define an S3 Table Bucket\n\n```ts\n// Build a Table bucket\nconst sampleTableBucket = new TableBucket(scope, 'ExampleTableBucket', {\n    tableBucketName: 'example-bucket-1',\n    // optional fields:\n    unreferencedFileRemoval: {\n        status: UnreferencedFileRemovalStatus.ENABLED,\n        noncurrentDays: 20,\n        unreferencedDays: 20,\n    }\n});\n```\n\nLearn more about table buckets maintenance operations and default behavior from the [S3 Tables User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-table-buckets-maintenance.html)\n\n### Controlling Table Bucket Permissions\n\n```ts\n// Grant the principal read permissions to the bucket and all tables within\nconst accountId = '123456789012'\ntableBucket.grantRead(new iam.AccountPrincipal(accountId), '*');\n// Grant the role write permissions to the bucket and all tables within\nconst role = new iam.Role(stack, 'MyRole', { assumedBy: new iam.ServicePrincipal('sample') });\ntableBucket.grantWrite(role, '*');\n// Grant the user read and write permissions to the bucket and all tables within\ntableBucket.grantReadWrite(new iam.User(stack, 'MyUser'), '*');\n\n// Grant permissions to the bucket and a particular table within it\nconst tableId = '6ba046b2-26de-44cf-9144-0c7862593a7b'\ntableBucket.grantReadWrite(new iam.AccountPrincipal(accountId), tableId);\n\n// Add custom resource policy statements\nconst permissions = new iam.PolicyStatement({\n    effect: iam.Effect.ALLOW,\n    actions: ['s3tables:*'],\n    principals: [ new iam.ServicePrincipal('example.aws.internal') ],\n    resources: ['*']\n});\n\ntableBucket.addToResourcePolicy(permissions);\n```\n\n## Coming Soon\n\nL2 Construct support for:\n\n- Namespaces\n- Tables\n"
+    "markdown": "# Amazon S3 Tables Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\n## Amazon S3 Tables\n\nAmazon S3 Tables deliver the first cloud object store with built-in Apache Iceberg support and streamline storing tabular data at scale.\n\n[Product Page](https://aws.amazon.com/s3/features/tables/) | [User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables.html)\n\n\n## Usage\n\n### Define an S3 Table Bucket\n\n```ts\n// Build a Table bucket\nconst sampleTableBucket = new TableBucket(scope, 'ExampleTableBucket', {\n    tableBucketName: 'example-bucket-1',\n    // optional fields:\n    unreferencedFileRemoval: {\n        status: UnreferencedFileRemovalStatus.ENABLED,\n        noncurrentDays: 20,\n        unreferencedDays: 20,\n    }\n});\n```\n\nLearn more about table buckets maintenance operations and default behavior from the [S3 Tables User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-table-buckets-maintenance.html)\n\n### Controlling Table Bucket Permissions\n\n```ts\n// Grant the principal read permissions to the bucket and all tables within\nconst accountId = '123456789012'\ntableBucket.grantRead(new iam.AccountPrincipal(accountId), '*');\n\n// Grant the role write permissions to the bucket and all tables within\nconst role = new iam.Role(stack, 'MyRole', { assumedBy: new iam.ServicePrincipal('sample') });\ntableBucket.grantWrite(role, '*');\n\n// Grant the user read and write permissions to the bucket and all tables within\ntableBucket.grantReadWrite(new iam.User(stack, 'MyUser'), '*');\n\n// Grant permissions to the bucket and a particular table within it\nconst tableId = '6ba046b2-26de-44cf-9144-0c7862593a7b'\ntableBucket.grantReadWrite(new iam.AccountPrincipal(accountId), tableId);\n\n// Add custom resource policy statements\nconst permissions = new iam.PolicyStatement({\n    effect: iam.Effect.ALLOW,\n    actions: ['s3tables:*'],\n    principals: [ new iam.ServicePrincipal('example.aws.internal') ],\n    resources: ['*']\n});\n\ntableBucket.addToResourcePolicy(permissions);\n```\n\n### Controlling Table Bucket Encryption Settings\n\nS3 TableBuckets have SSE (server-side encryption with AES-256) enabled by default with S3 managed keys.\nYou can also bring your own KMS key for KMS-SSE or have S3 create a KMS key for you.\n\nIf a bucket is encrypted with KMS, grant functions on the bucket will also grant access\nto the TableBucket's associated KMS key.\n\n```ts\n// Provide a user defined KMS Key:\nconst key = new kms.Key(scope, 'UserKey', {});\nconst encryptedBucket = new TableBucket(scope, 'EncryptedTableBucket', {\n    tableBucketName: 'table-bucket-1',\n    encryption: TableBucketEncryption.KMS,\n    encryptionKey: key,\n});\n// This account principal will also receive kms:Decrypt access to the KMS key\nencryptedBucket.grantRead(new iam.AccountPrincipal('123456789012'), '*');\n\n// Use S3 managed server side encryption (default)\nconst encryptedBucketDefault = new TableBucket(scope, 'EncryptedTableBucketDefault', {\n    tableBucketName: 'table-bucket-3',\n    encryption: TableBucketEncryption.S3_MANAGED, // Uses AES-256 encryption by default\n});\n```\n\nWhen using KMS encryption (`TableBucketEncryption.KMS`), if no encryption key is provided, CDK will automatically create a new KMS key for the table bucket with necessary permissions.\n\n```ts\n// If no key is provided, one will be created automatically\nconst encryptedBucketAuto = new TableBucket(scope, 'EncryptedTableBucketAuto', {\n    tableBucketName: 'table-bucket-2',\n    encryption: TableBucketEncryption.KMS,\n});\n```\n\n## Coming Soon\n\nL2 Construct support for:\n\n- Namespaces\n- Tables\n"
   },
   "repository": {
     "directory": "packages/@aws-cdk/aws-s3tables-alpha",
@@ -4035,7 +4035,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/table-bucket.ts",
-        "line": 14
+        "line": 16
       },
       "methods": [
         {
@@ -4044,11 +4044,11 @@
             "remarks": "Note that the policy statement may or may not be added to the policy.\nFor example, when an `ITableBucket` is created from an existing table bucket,\nit's not possible to tell whether the bucket already has a policy\nattached, let alone to re-use that policy to add more statements to it.\nSo it's safest to do nothing in these cases.",
             "returns": "metadata about the execution of this method. If the policy\nwas not added, the value of `statementAdded` will be `false`. You\nshould always check this value to make sure that the operation was\nactually carried out. Otherwise, synthesis and deploy will terminate\nsilently, which may be confusing.",
             "stability": "experimental",
-            "summary": "Adds a statement to the resource policy for a principal (i.e. account/role/service) to perform actions on this table bucket and/or its contents. Use `tableBucketArn` and `arnForObjects(keys)` to obtain ARNs for this bucket or objects."
+            "summary": "Adds a statement to the resource policy for a principal (i.e. account/role/service) to perform actions on this table bucket and/or its tables."
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 59
+            "line": 65
           },
           "name": "addToResourcePolicy",
           "parameters": [
@@ -4071,12 +4071,13 @@
         {
           "abstract": true,
           "docs": {
+            "remarks": "If encryption is used, permission to use the key to decrypt the contents\nof the bucket will also be granted to the same principal.",
             "stability": "experimental",
             "summary": "Grant read permissions for this table bucket and its tables to an IAM principal (Role/Group/User)."
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 68
+            "line": 77
           },
           "name": "grantRead",
           "parameters": [
@@ -4108,12 +4109,13 @@
         {
           "abstract": true,
           "docs": {
+            "remarks": "If encryption is used, permission to use the key to encrypt/decrypt the contents\nof the bucket will also be granted to the same principal.",
             "stability": "experimental",
             "summary": "Grant read and write permissions for this table bucket and its tables to an IAM principal (Role/Group/User)."
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 86
+            "line": 101
           },
           "name": "grantReadWrite",
           "parameters": [
@@ -4145,12 +4147,13 @@
         {
           "abstract": true,
           "docs": {
+            "remarks": "If encryption is used, permission to use the key to encrypt the contents\nof the bucket will also be granted to the same principal.",
             "stability": "experimental",
             "summary": "Grant write permissions for this table bucket and its tables to an IAM principal (Role/Group/User)."
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 77
+            "line": 89
           },
           "name": "grantWrite",
           "parameters": [
@@ -4194,7 +4197,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 19
+            "line": 21
           },
           "name": "tableBucketArn",
           "type": {
@@ -4213,7 +4216,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 25
+            "line": 27
           },
           "name": "tableBucketName",
           "type": {
@@ -4232,7 +4235,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 31
+            "line": 33
           },
           "name": "account",
           "optional": true,
@@ -4240,6 +4243,23 @@
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Optional KMS encryption key associated with this table bucket."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/table-bucket.ts",
+            "line": 44
+          },
+          "name": "encryptionKey",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_kms.IKey"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -4252,7 +4272,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 37
+            "line": 39
           },
           "name": "region",
           "optional": true,
@@ -4282,7 +4302,7 @@
         },
         "locationInModule": {
           "filename": "lib/table-bucket.ts",
-          "line": 483
+          "line": 580
         },
         "parameters": [
           {
@@ -4311,7 +4331,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/table-bucket.ts",
-        "line": 308
+        "line": 398
       },
       "methods": [
         {
@@ -4321,7 +4341,7 @@
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 316
+            "line": 410
           },
           "name": "fromTableBucketArn",
           "parameters": [
@@ -4367,7 +4387,7 @@
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 327
+            "line": 421
           },
           "name": "fromTableBucketAttributes",
           "parameters": [
@@ -4414,7 +4434,7 @@
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 362
+            "line": 457
           },
           "name": "validateTableBucketName",
           "parameters": [
@@ -4438,7 +4458,7 @@
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 418
+            "line": 513
           },
           "name": "validateUnreferencedFileRemoval",
           "parameters": [
@@ -4464,7 +4484,7 @@
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 171
+            "line": 204
           },
           "name": "addToResourcePolicy",
           "overrides": "@aws-cdk/aws-s3tables-alpha.ITableBucket",
@@ -4487,12 +4507,13 @@
         },
         {
           "docs": {
+            "remarks": "If encryption is used, permission to use the key to decrypt the contents\nof the bucket will also be granted to the same principal.",
             "stability": "experimental",
             "summary": "Grant read permissions for this table bucket and its tables to an IAM principal (Role/Group/User)."
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 188
+            "line": 221
           },
           "name": "grantRead",
           "overrides": "@aws-cdk/aws-s3tables-alpha.ITableBucket",
@@ -4518,12 +4539,13 @@
         },
         {
           "docs": {
+            "remarks": "If encryption is used, permission to use the key to encrypt/decrypt the contents\nof the bucket will also be granted to the same principal.",
             "stability": "experimental",
             "summary": "Grant read and write permissions for this table bucket and its tables to an IAM principal (Role/Group/User)."
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 196
+            "line": 241
           },
           "name": "grantReadWrite",
           "overrides": "@aws-cdk/aws-s3tables-alpha.ITableBucket",
@@ -4549,12 +4571,13 @@
         },
         {
           "docs": {
+            "remarks": "If encryption is used, permission to use the key to encrypt the contents\nof the bucket will also be granted to the same principal.",
             "stability": "experimental",
             "summary": "Grant write permissions for this table bucket and its tables to an IAM principal (Role/Group/User)."
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 192
+            "line": 231
           },
           "name": "grantWrite",
           "overrides": "@aws-cdk/aws-s3tables-alpha.ITableBucket",
@@ -4581,6 +4604,23 @@
       ],
       "name": "TableBucket",
       "properties": [
+        {
+          "const": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Uniquely identifies this class."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/table-bucket.ts",
+            "line": 401
+          },
+          "name": "PROPERTY_INJECTION_ID",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
           "docs": {
             "stability": "experimental",
@@ -4589,7 +4629,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 474
+            "line": 569
           },
           "name": "tableBucketArn",
           "overrides": "@aws-cdk/aws-s3tables-alpha.ITableBucket",
@@ -4605,7 +4645,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 479
+            "line": 574
           },
           "name": "tableBucketName",
           "overrides": "@aws-cdk/aws-s3tables-alpha.ITableBucket",
@@ -4613,6 +4653,23 @@
             "primitive": "string"
           }
         },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Optional KMS encryption key associated with this table bucket."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/table-bucket.ts",
+            "line": 576
+          },
+          "name": "encryptionKey",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-s3tables-alpha.ITableBucket",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_kms.IKey"
+          }
+        },
         {
           "docs": {
             "stability": "experimental",
@@ -4621,7 +4678,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 469
+            "line": 564
           },
           "name": "tableBucketPolicy",
           "optional": true,
@@ -4636,7 +4693,7 @@
           },
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 481
+            "line": 578
           },
           "name": "autoCreatePolicy",
           "protected": true,
@@ -4653,8 +4710,8 @@
       "docs": {
         "remarks": "The tableBucketName, region, and account can be provided explicitly\nor will be inferred from the tableBucketArn",
         "stability": "experimental",
-        "summary": "Everything needed to reference a specific table bucket.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as s3tables_alpha from '@aws-cdk/aws-s3tables-alpha';\nconst tableBucketAttributes: s3tables_alpha.TableBucketAttributes = {\n  account: 'account',\n  region: 'region',\n  tableBucketArn: 'tableBucketArn',\n  tableBucketName: 'tableBucketName',\n};",
+        "summary": "A reference to a table bucket outside this stack.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as s3tables_alpha from '@aws-cdk/aws-s3tables-alpha';\nimport { aws_kms as kms } from 'aws-cdk-lib';\n\ndeclare const key: kms.Key;\nconst tableBucketAttributes: s3tables_alpha.TableBucketAttributes = {\n  account: 'account',\n  encryptionKey: key,\n  region: 'region',\n  tableBucketArn: 'tableBucketArn',\n  tableBucketName: 'tableBucketName',\n};",
         "custom": {
           "exampleMetadata": "fixture=_generated"
         }
@@ -4663,7 +4720,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/table-bucket.ts",
-        "line": 268
+        "line": 349
       },
       "name": "TableBucketAttributes",
       "properties": [
@@ -4677,7 +4734,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 278
+            "line": 360
           },
           "name": "account",
           "optional": true,
@@ -4685,6 +4742,24 @@
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- undefined",
+            "stability": "experimental",
+            "summary": "Optional KMS encryption key associated with this bucket."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/table-bucket.ts",
+            "line": 378
+          },
+          "name": "encryptionKey",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_kms.IKey"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -4695,7 +4770,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 273
+            "line": 354
           },
           "name": "region",
           "optional": true,
@@ -4713,7 +4788,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 288
+            "line": 372
           },
           "name": "tableBucketArn",
           "optional": true,
@@ -4731,7 +4806,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 283
+            "line": 366
           },
           "name": "tableBucketName",
           "optional": true,
@@ -4742,6 +4817,41 @@
       ],
       "symbolId": "lib/table-bucket:TableBucketAttributes"
     },
+    "@aws-cdk/aws-s3tables-alpha.TableBucketEncryption": {
+      "assembly": "@aws-cdk/aws-s3tables-alpha",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Controls Server Side Encryption (SSE) for this TableBucket.",
+        "example": "// Provide a user defined KMS Key:\nconst key = new kms.Key(scope, 'UserKey', {});\nconst encryptedBucket = new TableBucket(scope, 'EncryptedTableBucket', {\n    tableBucketName: 'table-bucket-1',\n    encryption: TableBucketEncryption.KMS,\n    encryptionKey: key,\n});\n// This account principal will also receive kms:Decrypt access to the KMS key\nencryptedBucket.grantRead(new iam.AccountPrincipal('123456789012'), '*');\n\n// Use S3 managed server side encryption (default)\nconst encryptedBucketDefault = new TableBucket(scope, 'EncryptedTableBucketDefault', {\n    tableBucketName: 'table-bucket-3',\n    encryption: TableBucketEncryption.S3_MANAGED, // Uses AES-256 encryption by default\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-s3tables-alpha.TableBucketEncryption",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "lib/table-bucket.ts",
+        "line": 151
+      },
+      "members": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Use a customer defined KMS key for encryption If `encryptionKey` is specified, this key will be used, otherwise, one will be defined."
+          },
+          "name": "KMS"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Use S3 managed encryption keys with AES256 encryption."
+          },
+          "name": "S3_MANAGED"
+        }
+      ],
+      "name": "TableBucketEncryption",
+      "symbolId": "lib/table-bucket:TableBucketEncryption"
+    },
     "@aws-cdk/aws-s3tables-alpha.TableBucketPolicy": {
       "assembly": "@aws-cdk/aws-s3tables-alpha",
       "base": "aws-cdk-lib.Resource",
@@ -4761,7 +4871,7 @@
         },
         "locationInModule": {
           "filename": "lib/table-bucket-policy.ts",
-          "line": 45
+          "line": 49
         },
         "parameters": [
           {
@@ -4787,20 +4897,37 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/table-bucket-policy.ts",
-        "line": 35
+        "line": 36
       },
       "name": "TableBucketPolicy",
       "properties": [
         {
+          "const": true,
           "docs": {
             "stability": "experimental",
-            "summary": "The IAM PolicyDocument containing permissions represented by this policy."
+            "summary": "Uniquely identifies this class."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket-policy.ts",
             "line": 39
           },
+          "name": "PROPERTY_INJECTION_ID",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The IAM PolicyDocument containing permissions represented by this policy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/table-bucket-policy.ts",
+            "line": 43
+          },
           "name": "document",
           "type": {
             "fqn": "aws-cdk-lib.aws_iam.PolicyDocument"
@@ -4824,7 +4951,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/table-bucket-policy.ts",
-        "line": 11
+        "line": 12
       },
       "name": "TableBucketPolicyProps",
       "properties": [
@@ -4837,7 +4964,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket-policy.ts",
-            "line": 15
+            "line": 16
           },
           "name": "tableBucket",
           "type": {
@@ -4854,7 +4981,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket-policy.ts",
-            "line": 26
+            "line": 27
           },
           "name": "removalPolicy",
           "optional": true,
@@ -4872,7 +4999,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket-policy.ts",
-            "line": 20
+            "line": 21
           },
           "name": "resourcePolicy",
           "optional": true,
@@ -4898,7 +5025,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/table-bucket.ts",
-        "line": 226
+        "line": 285
       },
       "name": "TableBucketProps",
       "properties": [
@@ -4914,7 +5041,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 231
+            "line": 290
           },
           "name": "tableBucketName",
           "type": {
@@ -4931,7 +5058,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 253
+            "line": 312
           },
           "name": "account",
           "optional": true,
@@ -4939,6 +5066,44 @@
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- `KMS` if `encryptionKey` is specified, or `S3_MANAGED` otherwise.",
+            "remarks": "If you choose KMS, you can specify a KMS key via `encryptionKey`. If\nencryption key is not specified, a key will automatically be created.",
+            "stability": "experimental",
+            "summary": "The kind of server-side encryption to apply to this bucket."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/table-bucket.ts",
+            "line": 322
+          },
+          "name": "encryption",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-s3tables-alpha.TableBucketEncryption"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- If `encryption` is set to `KMS` and this property is undefined,\na new KMS key will be created and associated with this bucket.",
+            "remarks": "The `encryption` property must be either not specified or set to `KMS`.\nAn error will be emitted if `encryption` is set to `S3_MANAGED`.",
+            "stability": "experimental",
+            "summary": "External KMS key to use for bucket encryption."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/table-bucket.ts",
+            "line": 333
+          },
+          "name": "encryptionKey",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_kms.IKey"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -4949,7 +5114,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 246
+            "line": 305
           },
           "name": "region",
           "optional": true,
@@ -4967,7 +5132,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 260
+            "line": 340
           },
           "name": "removalPolicy",
           "optional": true,
@@ -4989,7 +5154,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 239
+            "line": 298
           },
           "name": "unreferencedFileRemoval",
           "optional": true,
@@ -5015,7 +5180,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/table-bucket.ts",
-        "line": 92
+        "line": 107
       },
       "name": "UnreferencedFileRemoval",
       "properties": [
@@ -5031,7 +5196,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 99
+            "line": 114
           },
           "name": "noncurrentDays",
           "optional": true,
@@ -5051,7 +5216,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 107
+            "line": 122
           },
           "name": "status",
           "optional": true,
@@ -5071,7 +5236,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/table-bucket.ts",
-            "line": 115
+            "line": 130
           },
           "name": "unreferencedDays",
           "optional": true,
@@ -5096,7 +5261,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/table-bucket.ts",
-        "line": 121
+        "line": 136
       },
       "members": [
         {
@@ -5118,6 +5283,6 @@
       "symbolId": "lib/table-bucket:UnreferencedFileRemovalStatus"
     }
   },
-  "version": "2.195.0-alpha.0",
+  "version": "2.196.1-alpha.0",
   "fingerprint": "**********"
 }