@aws-cdk/cfn-property-mixins 2.243.0

package/lib/services/aws-iam/cfn-props-mixins.generated.js

@@ -0,0 +1,964 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CfnVirtualMFADevicePropsMixin = exports.CfnUserToGroupAdditionPropsMixin = exports.CfnUserPolicyPropsMixin = exports.CfnUserPropsMixin = exports.CfnServiceLinkedRolePropsMixin = exports.CfnServerCertificatePropsMixin = exports.CfnSAMLProviderPropsMixin = exports.CfnRolePolicyPropsMixin = exports.CfnRolePropsMixin = exports.CfnPolicyPropsMixin = exports.CfnOIDCProviderPropsMixin = exports.CfnManagedPolicyPropsMixin = exports.CfnInstanceProfilePropsMixin = exports.CfnGroupPolicyPropsMixin = exports.CfnGroupPropsMixin = exports.CfnAccessKeyPropsMixin = void 0;
+const jsiiDeprecationWarnings = require("../../../.warnings.jsii.js");
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+/* eslint-disable @stylistic/max-len, eol-last */
+const cdk = require("aws-cdk-lib/core");
+const service = require("aws-cdk-lib/aws-iam");
+/**
+ * Creates a new AWS secret access key and corresponding AWS access key ID for the specified user.
+ *
+ * The default status for new keys is `Active` .
+ *
+ * For information about quotas on the number of keys you can create, see [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide* .
+ *
+ * > To ensure the security of your AWS account , the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can rotate access keys by increasing the value of the `serial` property.
+ *
+ * @cloudformationResource AWS::IAM::AccessKey
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-accesskey.html
+ */
+class CfnAccessKeyPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnAccessKeyPropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["serial", "status", "userName"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::AccessKey`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnAccessKeyMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnAccessKeyPropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnAccessKey.isCfnAccessKey(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnAccessKeyPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnAccessKeyPropsMixin = CfnAccessKeyPropsMixin;
+/**
+ * Creates a new group.
+ *
+ * For information about the number of groups you can create, see [Limitations on IAM Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *IAM User Guide* .
+ *
+ * @cloudformationResource AWS::IAM::Group
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-group.html
+ */
+class CfnGroupPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnGroupPropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["groupName", "managedPolicyArns", "path", "policies"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::Group`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnGroupMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnGroupPropsMixin);
+            }
+            throw error;
+        }
+        this.props = {
+            ...props,
+            ...flattenCfnGroupMixinProps(props)
+        };
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnGroup.isCfnGroup(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnGroupPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnGroupPropsMixin = CfnGroupPropsMixin;
+// @ts-ignore TS6133
+function flattenCfnGroupMixinProps(props) {
+    const ret = {};
+    if ((props.managedPolicyArns !== undefined))
+        ret.managedPolicyArns = cdk.mapArrayInPlace(props.managedPolicyArns, (item) => cdk.getRefProperty(item?.managedPolicyRef, 'policyArn') ?? cdk.ensureStringOrUndefined(item, "managedPolicyArns", "iam.IManagedPolicyRef | string"));
+    return ret;
+}
+/**
+ * Adds or updates an inline policy document that is embedded in the specified IAM group.
+ *
+ * A group can also have managed policies attached to it. To attach a managed policy to a group, use [`AWS::IAM::Group`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-group.html) . To create a new managed policy, use [`AWS::IAM::ManagedPolicy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html) . For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide* .
+ *
+ * For information about the maximum number of inline policies that you can embed in a group, see [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide* .
+ *
+ * @cloudformationResource AWS::IAM::GroupPolicy
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-grouppolicy.html
+ */
+class CfnGroupPolicyPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnGroupPolicyPropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["groupName", "policyDocument", "policyName"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::GroupPolicy`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnGroupPolicyMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnGroupPolicyPropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnGroupPolicy.isCfnGroupPolicy(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnGroupPolicyPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnGroupPolicyPropsMixin = CfnGroupPolicyPropsMixin;
+/**
+ * Creates a new instance profile. For information about instance profiles, see [Using instance profiles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2_instance-profiles.html) .
+ *
+ * For information about the number of instance profiles you can create, see [IAM object quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide* .
+ *
+ * @cloudformationResource AWS::IAM::InstanceProfile
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html
+ */
+class CfnInstanceProfilePropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnInstanceProfilePropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["instanceProfileName", "path", "roles"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::InstanceProfile`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnInstanceProfileMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnInstanceProfilePropsMixin);
+            }
+            throw error;
+        }
+        this.props = {
+            ...props,
+            ...flattenCfnInstanceProfileMixinProps(props)
+        };
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnInstanceProfile.isCfnInstanceProfile(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnInstanceProfilePropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnInstanceProfilePropsMixin = CfnInstanceProfilePropsMixin;
+// @ts-ignore TS6133
+function flattenCfnInstanceProfileMixinProps(props) {
+    const ret = {};
+    if ((props.roles !== undefined))
+        ret.roles = cdk.mapArrayInPlace(props.roles, (item) => cdk.getRefProperty(item?.roleRef, 'roleName') ?? cdk.ensureStringOrUndefined(item, "roles", "iam.IRoleRef | string"));
+    return ret;
+}
+/**
+ * Creates a new managed policy for your AWS account .
+ *
+ * This operation creates a policy version with a version identifier of `v1` and sets v1 as the policy's default version. For more information about policy versions, see [Versioning for managed policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-versions.html) in the *IAM User Guide* .
+ *
+ * As a best practice, you can validate your IAM policies. To learn more, see [Validating IAM policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_policy-validator.html) in the *IAM User Guide* .
+ *
+ * For more information about managed policies in general, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide* .
+ *
+ * @cloudformationResource AWS::IAM::ManagedPolicy
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html
+ */
+class CfnManagedPolicyPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnManagedPolicyPropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["description", "groups", "managedPolicyName", "path", "policyDocument", "roles", "users"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::ManagedPolicy`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnManagedPolicyMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnManagedPolicyPropsMixin);
+            }
+            throw error;
+        }
+        this.props = {
+            ...props,
+            ...flattenCfnManagedPolicyMixinProps(props)
+        };
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnManagedPolicy.isCfnManagedPolicy(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnManagedPolicyPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnManagedPolicyPropsMixin = CfnManagedPolicyPropsMixin;
+// @ts-ignore TS6133
+function flattenCfnManagedPolicyMixinProps(props) {
+    const ret = {};
+    if ((props.groups !== undefined))
+        ret.groups = cdk.mapArrayInPlace(props.groups, (item) => cdk.getRefProperty(item?.groupRef, 'groupName') ?? cdk.ensureStringOrUndefined(item, "groups", "iam.IGroupRef | string"));
+    if ((props.roles !== undefined))
+        ret.roles = cdk.mapArrayInPlace(props.roles, (item) => cdk.getRefProperty(item?.roleRef, 'roleName') ?? cdk.ensureStringOrUndefined(item, "roles", "iam.IRoleRef | string"));
+    if ((props.users !== undefined))
+        ret.users = cdk.mapArrayInPlace(props.users, (item) => cdk.getRefProperty(item?.userRef, 'userName') ?? cdk.ensureStringOrUndefined(item, "users", "iam.IUserRef | string"));
+    return ret;
+}
+/**
+ * Creates or updates an IAM entity to describe an identity provider (IdP) that supports [OpenID Connect (OIDC)](https://docs.aws.amazon.com/http://openid.net/connect/) .
+ *
+ * The OIDC provider that you create with this operation can be used as a principal in a role's trust policy. Such a policy establishes a trust relationship between AWS and the OIDC provider.
+ *
+ * When you create the IAM OIDC provider, you specify the following:
+ *
+ * - The URL of the OIDC identity provider (IdP) to trust
+ * - A list of client IDs (also known as audiences) that identify the application or applications that are allowed to authenticate using the OIDC provider
+ * - A list of tags that are attached to the specified IAM OIDC provider
+ * - A list of thumbprints of one or more server certificates that the IdP uses
+ *
+ * You get all of this information from the OIDC IdP that you want to use to access AWS .
+ *
+ * When you update the IAM OIDC provider, you specify the following:
+ *
+ * - The URL of the OIDC identity provider (IdP) to trust
+ * - A list of client IDs (also known as audiences) that replaces the existing list of client IDs associated with the OIDC IdP
+ * - A list of tags that replaces the existing list of tags attached to the specified IAM OIDC provider
+ * - A list of thumbprints that replaces the existing list of server certificates thumbprints that the IdP uses
+ *
+ * > The trust for the OIDC provider is derived from the IAM provider that this operation creates. Therefore, it is best to limit access to the [CreateOpenIDConnectProvider](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html) operation to highly privileged users.
+ *
+ * @cloudformationResource AWS::IAM::OIDCProvider
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-oidcprovider.html
+ */
+class CfnOIDCProviderPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnOIDCProviderPropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["clientIdList", "tags", "thumbprintList", "url"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::OIDCProvider`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnOIDCProviderMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnOIDCProviderPropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnOIDCProvider.isCfnOIDCProvider(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnOIDCProviderPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnOIDCProviderPropsMixin = CfnOIDCProviderPropsMixin;
+/**
+ * Adds or updates an inline policy document that is embedded in the specified IAM group, user or role.
+ *
+ * An IAM user can also have a managed policy attached to it. For information about policies, see [Managed Policies and Inline Policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide* .
+ *
+ * The Groups, Roles, and Users properties are optional. However, you must specify at least one of these properties.
+ *
+ * For information about policy documents, see [Creating IAM policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html) in the *IAM User Guide* .
+ *
+ * For information about limits on the number of inline policies that you can embed in an identity, see [Limitations on IAM Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *IAM User Guide* .
+ *
+ * > This resource does not support [drift detection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html) . The following inline policy resource types support drift detection:
+ * >
+ * > - [`AWS::IAM::GroupPolicy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-grouppolicy.html)
+ * > - [`AWS::IAM::RolePolicy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-rolepolicy.html)
+ * > - [`AWS::IAM::UserPolicy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-userpolicy.html)
+ *
+ * @cloudformationResource AWS::IAM::Policy
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html
+ */
+class CfnPolicyPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnPolicyPropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["groups", "policyDocument", "policyName", "roles", "users"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::Policy`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnPolicyMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnPolicyPropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnPolicy.isCfnPolicy(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnPolicyPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnPolicyPropsMixin = CfnPolicyPropsMixin;
+/**
+ * Creates a new role for your AWS account .
+ *
+ * For more information about roles, see [IAM roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html) in the *IAM User Guide* . For information about quotas for role names and the number of roles you can create, see [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide* .
+ *
+ * @cloudformationResource AWS::IAM::Role
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html
+ */
+class CfnRolePropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnRolePropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["assumeRolePolicyDocument", "description", "managedPolicyArns", "maxSessionDuration", "path", "permissionsBoundary", "policies", "roleName", "tags"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::Role`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnRoleMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnRolePropsMixin);
+            }
+            throw error;
+        }
+        this.props = {
+            ...props,
+            ...flattenCfnRoleMixinProps(props)
+        };
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnRole.isCfnRole(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnRolePropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnRolePropsMixin = CfnRolePropsMixin;
+// @ts-ignore TS6133
+function flattenCfnRoleMixinProps(props) {
+    const ret = {};
+    if ((props.managedPolicyArns !== undefined))
+        ret.managedPolicyArns = cdk.mapArrayInPlace(props.managedPolicyArns, (item) => cdk.getRefProperty(item?.managedPolicyRef, 'policyArn') ?? cdk.ensureStringOrUndefined(item, "managedPolicyArns", "iam.IManagedPolicyRef | string"));
+    if ((props.permissionsBoundary !== undefined))
+        ret.permissionsBoundary = cdk.getRefProperty(props.permissionsBoundary?.managedPolicyRef, 'policyArn') ?? cdk.ensureStringOrUndefined(props.permissionsBoundary, "permissionsBoundary", "iam.IManagedPolicyRef | string");
+    return ret;
+}
+/**
+ * Adds or updates an inline policy document that is embedded in the specified IAM role.
+ *
+ * When you embed an inline policy in a role, the inline policy is used as part of the role's access (permissions) policy. The role's trust policy is created at the same time as the role, using [`CreateRole`](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateRole.html) . You can update a role's trust policy using [`UpdateAssumeRolePolicy`](https://docs.aws.amazon.com/IAM/latest/APIReference/API_UpdateAssumeRolePolicy.html) . For information about roles, see [IAM roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/roles-toplevel.html) in the *IAM User Guide* .
+ *
+ * A role can also have a managed policy attached to it. To attach a managed policy to a role, use [`AWS::IAM::Role`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html) . To create a new managed policy, use [`AWS::IAM::ManagedPolicy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html) . For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide* .
+ *
+ * For information about the maximum number of inline policies that you can embed with a role, see [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide* .
+ *
+ * @cloudformationResource AWS::IAM::RolePolicy
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-rolepolicy.html
+ */
+class CfnRolePolicyPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnRolePolicyPropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["policyDocument", "policyName", "roleName"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::RolePolicy`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnRolePolicyMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnRolePolicyPropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnRolePolicy.isCfnRolePolicy(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnRolePolicyPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnRolePolicyPropsMixin = CfnRolePolicyPropsMixin;
+/**
+ * Creates an IAM resource that describes an identity provider (IdP) that supports SAML 2.0.
+ *
+ * The SAML provider resource that you create with this operation can be used as a principal in an IAM role's trust policy. Such a policy can enable federated users who sign in using the SAML IdP to assume the role. You can create an IAM role that supports Web-based single sign-on (SSO) to the AWS Management Console or one that supports API access to AWS .
+ *
+ * When you create the SAML provider resource, you upload a SAML metadata document that you get from your IdP. That document includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that the IdP sends. You must generate the metadata document using the identity management software that is used as your organization's IdP.
+ *
+ * > This operation requires [Signature Version 4](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html) .
+ *
+ * For more information, see [Enabling SAML 2.0 federated users to access the AWS Management Console](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-saml.html) and [About SAML 2.0-based federation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_saml.html) in the *IAM User Guide* .
+ *
+ * @cloudformationResource AWS::IAM::SAMLProvider
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-samlprovider.html
+ */
+class CfnSAMLProviderPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnSAMLProviderPropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["addPrivateKey", "assertionEncryptionMode", "name", "privateKeyList", "removePrivateKey", "samlMetadataDocument", "tags"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::SAMLProvider`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnSAMLProviderMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnSAMLProviderPropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnSAMLProvider.isCfnSAMLProvider(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnSAMLProviderPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnSAMLProviderPropsMixin = CfnSAMLProviderPropsMixin;
+/**
+ * Uploads a server certificate entity for the AWS account .
+ *
+ * The server certificate entity includes a public key certificate, a private key, and an optional certificate chain, which should all be PEM-encoded.
+ *
+ * We recommend that you use [Certificate Manager](https://docs.aws.amazon.com/acm/) to provision, manage, and deploy your server certificates. With ACM you can request a certificate, deploy it to AWS resources, and let ACM handle certificate renewals for you. Certificates provided by ACM are free. For more information about using ACM, see the [Certificate Manager User Guide](https://docs.aws.amazon.com/acm/latest/userguide/) .
+ *
+ * For more information about working with server certificates, see [Working with server certificates](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html) in the *IAM User Guide* . This topic includes a list of AWS services that can use the server certificates that you manage with IAM.
+ *
+ * For information about the number of server certificates you can upload, see [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide* .
+ *
+ * > Because the body of the public key certificate, private key, and the certificate chain can be large, you should use POST rather than GET when calling `UploadServerCertificate` . For information about setting up signatures and authorization through the API, see [Signing AWS API requests](https://docs.aws.amazon.com/general/latest/gr/signing_aws_api_requests.html) in the *AWS General Reference* . For general information about using the Query API with IAM, see [Calling the API by making HTTP query requests](https://docs.aws.amazon.com/IAM/latest/UserGuide/programming.html) in the *IAM User Guide* .
+ *
+ * @cloudformationResource AWS::IAM::ServerCertificate
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-servercertificate.html
+ */
+class CfnServerCertificatePropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnServerCertificatePropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["certificateBody", "certificateChain", "path", "privateKey", "serverCertificateName", "tags"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::ServerCertificate`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnServerCertificateMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnServerCertificatePropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnServerCertificate.isCfnServerCertificate(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnServerCertificatePropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnServerCertificatePropsMixin = CfnServerCertificatePropsMixin;
+/**
+ * Creates an IAM role that is linked to a specific AWS service.
+ *
+ * The service controls the attached policies and when the role can be deleted. This helps ensure that the service is not broken by an unexpectedly changed or deleted role, which could put your AWS resources into an unknown state. Allowing the service to control the role helps improve service stability and proper cleanup when a service and its role are no longer needed. For more information, see [Using service-linked roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html) in the *IAM User Guide* .
+ *
+ * To attach a policy to this service-linked role, you must make the request using the AWS service that depends on this role.
+ *
+ * @cloudformationResource AWS::IAM::ServiceLinkedRole
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-servicelinkedrole.html
+ */
+class CfnServiceLinkedRolePropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnServiceLinkedRolePropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["awsServiceName", "customSuffix", "description"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::ServiceLinkedRole`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnServiceLinkedRoleMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnServiceLinkedRolePropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnServiceLinkedRole.isCfnServiceLinkedRole(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnServiceLinkedRolePropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnServiceLinkedRolePropsMixin = CfnServiceLinkedRolePropsMixin;
+/**
+ * Creates a new IAM user for your AWS account .
+ *
+ * For information about quotas for the number of IAM users you can create, see [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide* .
+ *
+ * @cloudformationResource AWS::IAM::User
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-user.html
+ */
+class CfnUserPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnUserPropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["groups", "loginProfile", "managedPolicyArns", "path", "permissionsBoundary", "policies", "tags", "userName"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::User`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnUserMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnUserPropsMixin);
+            }
+            throw error;
+        }
+        this.props = {
+            ...props,
+            ...flattenCfnUserMixinProps(props)
+        };
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnUser.isCfnUser(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnUserPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnUserPropsMixin = CfnUserPropsMixin;
+// @ts-ignore TS6133
+function flattenCfnUserMixinProps(props) {
+    const ret = {};
+    if ((props.groups !== undefined))
+        ret.groups = cdk.mapArrayInPlace(props.groups, (item) => cdk.getRefProperty(item?.groupRef, 'groupName') ?? cdk.ensureStringOrUndefined(item, "groups", "iam.IGroupRef | string"));
+    if ((props.managedPolicyArns !== undefined))
+        ret.managedPolicyArns = cdk.mapArrayInPlace(props.managedPolicyArns, (item) => cdk.getRefProperty(item?.managedPolicyRef, 'policyArn') ?? cdk.ensureStringOrUndefined(item, "managedPolicyArns", "iam.IManagedPolicyRef | string"));
+    if ((props.permissionsBoundary !== undefined))
+        ret.permissionsBoundary = cdk.getRefProperty(props.permissionsBoundary?.managedPolicyRef, 'policyArn') ?? cdk.ensureStringOrUndefined(props.permissionsBoundary, "permissionsBoundary", "iam.IManagedPolicyRef | string");
+    return ret;
+}
+/**
+ * Adds or updates an inline policy document that is embedded in the specified IAM user.
+ *
+ * An IAM user can also have a managed policy attached to it. To attach a managed policy to a user, use [`AWS::IAM::User`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html) . To create a new managed policy, use [`AWS::IAM::ManagedPolicy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html) . For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide* .
+ *
+ * For information about the maximum number of inline policies that you can embed in a user, see [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide* .
+ *
+ * @cloudformationResource AWS::IAM::UserPolicy
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-userpolicy.html
+ */
+class CfnUserPolicyPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnUserPolicyPropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["policyDocument", "policyName", "userName"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::UserPolicy`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnUserPolicyMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnUserPolicyPropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnUserPolicy.isCfnUserPolicy(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnUserPolicyPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnUserPolicyPropsMixin = CfnUserPolicyPropsMixin;
+/**
+ * Adds the specified user to the specified group.
+ *
+ * @cloudformationResource AWS::IAM::UserToGroupAddition
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-usertogroupaddition.html
+ */
+class CfnUserToGroupAdditionPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnUserToGroupAdditionPropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["groupName", "users"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::UserToGroupAddition`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnUserToGroupAdditionMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnUserToGroupAdditionPropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnUserToGroupAddition.isCfnUserToGroupAddition(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnUserToGroupAdditionPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnUserToGroupAdditionPropsMixin = CfnUserToGroupAdditionPropsMixin;
+/**
+ * Creates a new virtual MFA device for the AWS account .
+ *
+ * After creating the virtual MFA, use [EnableMFADevice](https://docs.aws.amazon.com/IAM/latest/APIReference/API_EnableMFADevice.html) to attach the MFA device to an IAM user. For more information about creating and working with virtual MFA devices, see [Using a virtual MFA device](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_VirtualMFA.html) in the *IAM User Guide* .
+ *
+ * For information about the maximum number of MFA devices you can create, see [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide* .
+ *
+ * > The seed information contained in the QR code and the Base32 string should be treated like any other secret access information. In other words, protect the seed information as you would your AWS access keys or your passwords. After you provision your virtual device, you should ensure that the information is destroyed following secure procedures.
+ *
+ * @cloudformationResource AWS::IAM::VirtualMFADevice
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-virtualmfadevice.html
+ */
+class CfnVirtualMFADevicePropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_iam.CfnVirtualMFADevicePropsMixin", version: "2.243.0" };
+    static CFN_PROPERTY_KEYS = ["path", "tags", "users", "virtualMfaDeviceName"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::IAM::VirtualMFADevice`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_iam_CfnVirtualMFADeviceMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnVirtualMFADevicePropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnVirtualMFADevice.isCfnVirtualMFADevice(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnVirtualMFADevicePropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnVirtualMFADevicePropsMixin = CfnVirtualMFADevicePropsMixin;