@aws-cdk/cfn-property-mixins 2.243.0

package/lib/services/aws-athena/cfn-props-mixins.generated.d.ts

@@ -0,0 +1,1079 @@
+import * as cdk from "aws-cdk-lib/core";
+import * as constructs from "constructs";
+import * as mixins from "../../mixins";
+import * as service from "aws-cdk-lib/aws-athena";
+import { aws_athena as athenaRefs, aws_iam as iamRefs, aws_kms as kmsRefs } from "aws-cdk-lib/interfaces";
+/**
+ * Specifies a capacity reservation with the provided name and number of requested data processing units.
+ *
+ * @cloudformationResource AWS::Athena::CapacityReservation
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-capacityreservation.html
+ */
+export declare class CfnCapacityReservationPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnCapacityReservationMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Athena::CapacityReservation`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnCapacityReservationMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnCapacityReservation;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnCapacityReservationPropsMixin {
+    /**
+     * Assigns Athena workgroups (and hence their queries) to capacity reservations.
+     *
+     * A capacity reservation can have only one capacity assignment configuration, but the capacity assignment configuration can be made up of multiple individual assignments. Each assignment specifies how Athena queries can consume capacity from the capacity reservation that their workgroup is mapped to.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-capacityreservation-capacityassignmentconfiguration.html
+     */
+    interface CapacityAssignmentConfigurationProperty {
+        /**
+         * The list of assignments that make up the capacity assignment configuration.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-capacityreservation-capacityassignmentconfiguration.html#cfn-athena-capacityreservation-capacityassignmentconfiguration-capacityassignments
+         */
+        readonly capacityAssignments?: Array<CfnCapacityReservationPropsMixin.CapacityAssignmentProperty | cdk.IResolvable> | cdk.IResolvable;
+    }
+    /**
+     * A mapping between one or more workgroups and a capacity reservation.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-capacityreservation-capacityassignment.html
+     */
+    interface CapacityAssignmentProperty {
+        /**
+         * The list of workgroup names for the capacity assignment.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-capacityreservation-capacityassignment.html#cfn-athena-capacityreservation-capacityassignment-workgroupnames
+         */
+        readonly workgroupNames?: Array<string>;
+    }
+}
+/**
+ * Properties for CfnCapacityReservationPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-capacityreservation.html
+ */
+export interface CfnCapacityReservationMixinProps {
+    /**
+     * Assigns Athena workgroups (and hence their queries) to capacity reservations.
+     *
+     * A capacity reservation can have only one capacity assignment configuration, but the capacity assignment configuration can be made up of multiple individual assignments. Each assignment specifies how Athena queries can consume capacity from the capacity reservation that their workgroup is mapped to.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-capacityreservation.html#cfn-athena-capacityreservation-capacityassignmentconfiguration
+     */
+    readonly capacityAssignmentConfiguration?: CfnCapacityReservationPropsMixin.CapacityAssignmentConfigurationProperty | cdk.IResolvable;
+    /**
+     * The name of the capacity reservation.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-capacityreservation.html#cfn-athena-capacityreservation-name
+     */
+    readonly name?: string;
+    /**
+     * An array of key-value pairs to apply to the capacity reservation.
+     *
+     * For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-capacityreservation.html#cfn-athena-capacityreservation-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+    /**
+     * The number of data processing units requested.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-capacityreservation.html#cfn-athena-capacityreservation-targetdpus
+     */
+    readonly targetDpus?: number;
+}
+/**
+ * The AWS::Athena::DataCatalog resource specifies an Amazon Athena data catalog, which contains a name, description, type, parameters, and tags.
+ *
+ * For more information, see [DataCatalog](https://docs.aws.amazon.com/athena/latest/APIReference/API_DataCatalog.html) in the *Amazon Athena API Reference* .
+ *
+ * @cloudformationResource AWS::Athena::DataCatalog
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-datacatalog.html
+ */
+export declare class CfnDataCatalogPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnDataCatalogMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Athena::DataCatalog`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnDataCatalogMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnDataCatalog;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnDataCatalogPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-datacatalog.html
+ */
+export interface CfnDataCatalogMixinProps {
+    /**
+     * The type of connection for a `FEDERATED` data catalog (for example, `REDSHIFT` , `MYSQL` , or `SQLSERVER` ).
+     *
+     * For information about individual connectors, see [Available data source connectors](https://docs.aws.amazon.com/athena/latest/ug/connectors-available.html) .
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-datacatalog.html#cfn-athena-datacatalog-connectiontype
+     */
+    readonly connectionType?: string;
+    /**
+     * A description of the data catalog.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-datacatalog.html#cfn-athena-datacatalog-description
+     */
+    readonly description?: string;
+    /**
+     * Text of the error that occurred during data catalog creation or deletion.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-datacatalog.html#cfn-athena-datacatalog-error
+     */
+    readonly error?: string;
+    /**
+     * The name of the data catalog.
+     *
+     * The catalog name must be unique for the AWS account and can use a maximum of 128 alphanumeric, underscore, at sign, or hyphen characters.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-datacatalog.html#cfn-athena-datacatalog-name
+     */
+    readonly name?: string;
+    /**
+     * Specifies the Lambda function or functions to use for creating the data catalog.
+     *
+     * This is a mapping whose values depend on the catalog type.
+     *
+     * - For the `HIVE` data catalog type, use the following syntax. The `metadata-function` parameter is required. `The sdk-version` parameter is optional and defaults to the currently supported version.
+     *
+     * `metadata-function= *lambda_arn* , sdk-version= *version_number*`
+     * - For the `LAMBDA` data catalog type, use one of the following sets of required parameters, but not both.
+     *
+     * - If you have one Lambda function that processes metadata and another for reading the actual data, use the following syntax. Both parameters are required.
+     *
+     * `metadata-function= *lambda_arn* , record-function= *lambda_arn*`
+     * - If you have a composite Lambda function that processes both metadata and data, use the following syntax to specify your Lambda function.
+     *
+     * `function= *lambda_arn*`
+     * - The `GLUE` type takes a catalog ID parameter and is required. The `*catalog_id*` is the account ID of the AWS account to which the AWS Glue Data Catalog belongs.
+     *
+     * `catalog-id= *catalog_id*`
+     *
+     * - The `GLUE` data catalog type also applies to the default `AwsDataCatalog` that already exists in your account, of which you can have only one and cannot modify.
+     * - The `FEDERATED` data catalog type uses one of the following parameters, but not both. Use `connection-arn` for an existing AWS Glue connection. Use `connection-type` and `connection-properties` to specify the configuration setting for a new connection.
+     *
+     * - `connection-arn: *<glue_connection_arn_to_reuse>*`
+     * - `lambda-role-arn` (optional): The execution role to use for the Lambda function. If not provided, one is created.
+     * - `connection-type:MYSQL|REDSHIFT|...., connection-properties:" *<json_string>* "`
+     *
+     * For *`<json_string>`* , use escaped JSON text, as in the following example.
+     *
+     * `"{\"spill_bucket\":\"my_spill\",\"spill_prefix\":\"athena-spill\",\"host\":\"abc12345.snowflakecomputing.com\",\"port\":\"1234\",\"warehouse\":\"DEV_WH\",\"database\":\"TEST\",\"schema\":\"PUBLIC\",\"SecretArn\":\"arn:aws:secretsmanager:ap-south-1:111122223333:secret:snowflake-XHb67j\"}"`
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-datacatalog.html#cfn-athena-datacatalog-parameters
+     */
+    readonly parameters?: cdk.IResolvable | Record<string, string>;
+    /**
+     * The status of the creation or deletion of the data catalog.
+     *
+     * - The `LAMBDA` , `GLUE` , and `HIVE` data catalog types are created synchronously. Their status is either `CREATE_COMPLETE` or `CREATE_FAILED` .
+     * - The `FEDERATED` data catalog type is created asynchronously.
+     *
+     * Data catalog creation status:
+     *
+     * - `CREATE_IN_PROGRESS` : Federated data catalog creation in progress.
+     * - `CREATE_COMPLETE` : Data catalog creation complete.
+     * - `CREATE_FAILED` : Data catalog could not be created.
+     * - `CREATE_FAILED_CLEANUP_IN_PROGRESS` : Federated data catalog creation failed and is being removed.
+     * - `CREATE_FAILED_CLEANUP_COMPLETE` : Federated data catalog creation failed and was removed.
+     * - `CREATE_FAILED_CLEANUP_FAILED` : Federated data catalog creation failed but could not be removed.
+     *
+     * Data catalog deletion status:
+     *
+     * - `DELETE_IN_PROGRESS` : Federated data catalog deletion in progress.
+     * - `DELETE_COMPLETE` : Federated data catalog deleted.
+     * - `DELETE_FAILED` : Federated data catalog could not be deleted.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-datacatalog.html#cfn-athena-datacatalog-status
+     */
+    readonly status?: string;
+    /**
+     * The tags (key-value pairs) to associate with this resource.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-datacatalog.html#cfn-athena-datacatalog-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+    /**
+     * The type of data catalog: `LAMBDA` for a federated catalog, `GLUE` for AWS Glue Catalog, or `HIVE` for an external hive metastore.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-datacatalog.html#cfn-athena-datacatalog-type
+     */
+    readonly type?: string;
+}
+/**
+ * The `AWS::Athena::NamedQuery` resource specifies an Amazon Athena saved query, where `QueryString` contains the SQL query statements that make up the query.
+ *
+ * @cloudformationResource AWS::Athena::NamedQuery
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-namedquery.html
+ */
+export declare class CfnNamedQueryPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnNamedQueryMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Athena::NamedQuery`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnNamedQueryMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnNamedQuery;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnNamedQueryPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-namedquery.html
+ */
+export interface CfnNamedQueryMixinProps {
+    /**
+     * The database to which the query belongs.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-namedquery.html#cfn-athena-namedquery-database
+     */
+    readonly database?: string;
+    /**
+     * The query description.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-namedquery.html#cfn-athena-namedquery-description
+     */
+    readonly description?: string;
+    /**
+     * The query name.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-namedquery.html#cfn-athena-namedquery-name
+     */
+    readonly name?: string;
+    /**
+     * The SQL statements that make up the query.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-namedquery.html#cfn-athena-namedquery-querystring
+     */
+    readonly queryString?: string;
+    /**
+     * The name of the workgroup that contains the named query.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-namedquery.html#cfn-athena-namedquery-workgroup
+     */
+    readonly workGroup?: athenaRefs.IWorkGroupRef | string;
+}
+/**
+ * Specifies a prepared statement for use with SQL queries in Athena.
+ *
+ * @cloudformationResource AWS::Athena::PreparedStatement
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-preparedstatement.html
+ */
+export declare class CfnPreparedStatementPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnPreparedStatementMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Athena::PreparedStatement`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnPreparedStatementMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnPreparedStatement;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnPreparedStatementPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-preparedstatement.html
+ */
+export interface CfnPreparedStatementMixinProps {
+    /**
+     * The description of the prepared statement.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-preparedstatement.html#cfn-athena-preparedstatement-description
+     */
+    readonly description?: string;
+    /**
+     * The query string for the prepared statement.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-preparedstatement.html#cfn-athena-preparedstatement-querystatement
+     */
+    readonly queryStatement?: string;
+    /**
+     * The name of the prepared statement.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-preparedstatement.html#cfn-athena-preparedstatement-statementname
+     */
+    readonly statementName?: string;
+    /**
+     * The workgroup to which the prepared statement belongs.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-preparedstatement.html#cfn-athena-preparedstatement-workgroup
+     */
+    readonly workGroup?: athenaRefs.IWorkGroupRef | string;
+}
+/**
+ * The AWS::Athena::WorkGroup resource specifies an Amazon Athena workgroup, which contains a name, description, creation time, state, and other configuration, listed under `WorkGroupConfiguration` .
+ *
+ * Each workgroup enables you to isolate queries for you or your group from other queries in the same account. For more information, see [CreateWorkGroup](https://docs.aws.amazon.com/athena/latest/APIReference/API_CreateWorkGroup.html) in the *Amazon Athena API Reference* .
+ *
+ * @cloudformationResource AWS::Athena::WorkGroup
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-workgroup.html
+ */
+export declare class CfnWorkGroupPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnWorkGroupMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Athena::WorkGroup`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnWorkGroupMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnWorkGroup;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnWorkGroupPropsMixin {
+    /**
+     * The configuration of the workgroup, which includes the location in Amazon S3 where query results are stored, the encryption option, if any, used for query results, whether Amazon CloudWatch Metrics are enabled for the workgroup, and the limit for the amount of bytes scanned (cutoff) per query, if it is specified.
+     *
+     * The `EnforceWorkGroupConfiguration` option determines whether workgroup settings override client-side query settings.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html
+     */
+    interface WorkGroupConfigurationProperty {
+        /**
+         * Specifies a user defined JSON string that is passed to the session engine.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-additionalconfiguration
+         */
+        readonly additionalConfiguration?: string;
+        /**
+         * The upper limit (cutoff) for the amount of bytes a single query in a workgroup is allowed to scan.
+         *
+         * No default is defined.
+         *
+         * > This property currently supports integer types. Support for long values is planned.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-bytesscannedcutoffperquery
+         */
+        readonly bytesScannedCutoffPerQuery?: number;
+        /**
+         * Specifies the KMS key that is used to encrypt the user's data stores in Athena.
+         *
+         * This setting does not apply to Athena SQL workgroups.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-customercontentencryptionconfiguration
+         */
+        readonly customerContentEncryptionConfiguration?: CfnWorkGroupPropsMixin.CustomerContentEncryptionConfigurationProperty | cdk.IResolvable;
+        /**
+         * If set to "true", the settings for the workgroup override client-side settings.
+         *
+         * If set to "false", client-side settings are used. For more information, see [Override client-side settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration
+         */
+        readonly enforceWorkGroupConfiguration?: boolean | cdk.IResolvable;
+        /**
+         * The engine configuration for running queries.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-engineconfiguration
+         */
+        readonly engineConfiguration?: CfnWorkGroupPropsMixin.EngineConfigurationProperty | cdk.IResolvable;
+        /**
+         * The engine version that all queries running on the workgroup use.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-engineversion
+         */
+        readonly engineVersion?: CfnWorkGroupPropsMixin.EngineVersionProperty | cdk.IResolvable;
+        /**
+         * Role used to access user resources in an Athena for Apache Spark session.
+         *
+         * This property applies only to Spark-enabled workgroups in Athena.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-executionrole
+         */
+        readonly executionRole?: iamRefs.IRoleRef | string;
+        /**
+         * The configuration for storing results in Athena owned storage, which includes whether this feature is enabled;
+         *
+         * whether encryption configuration, if any, is used for encrypting query results.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-managedqueryresultsconfiguration
+         */
+        readonly managedQueryResultsConfiguration?: cdk.IResolvable | CfnWorkGroupPropsMixin.ManagedQueryResultsConfigurationProperty;
+        /**
+         * Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-monitoringconfiguration
+         */
+        readonly monitoringConfiguration?: cdk.IResolvable | CfnWorkGroupPropsMixin.MonitoringConfigurationProperty;
+        /**
+         * Indicates that the Amazon CloudWatch metrics are enabled for the workgroup.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-publishcloudwatchmetricsenabled
+         */
+        readonly publishCloudWatchMetricsEnabled?: boolean | cdk.IResolvable;
+        /**
+         * If set to `true` , allows members assigned to a workgroup to reference Amazon S3 Requester Pays buckets in queries.
+         *
+         * If set to `false` , workgroup members cannot query data from Requester Pays buckets, and queries that retrieve data from Requester Pays buckets cause an error. The default is `false` . For more information about Requester Pays buckets, see [Requester Pays Buckets](https://docs.aws.amazon.com/AmazonS3/latest/dev/RequesterPaysBuckets.html) in the *Amazon Simple Storage Service Developer Guide* .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-requesterpaysenabled
+         */
+        readonly requesterPaysEnabled?: boolean | cdk.IResolvable;
+        /**
+         * Specifies the location in Amazon S3 where query results are stored and the encryption option, if any, used for query results.
+         *
+         * For more information, see [Work with query results and recent queries](https://docs.aws.amazon.com/athena/latest/ug/querying.html) .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-resultconfiguration
+         */
+        readonly resultConfiguration?: cdk.IResolvable | CfnWorkGroupPropsMixin.ResultConfigurationProperty;
+    }
+    /**
+     * The Athena engine version for running queries, or the PySpark engine version for running sessions.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-engineversion.html
+     */
+    interface EngineVersionProperty {
+        /**
+         * Read only.
+         *
+         * The engine version on which the query runs. If the user requests a valid engine version other than Auto, the effective engine version is the same as the engine version that the user requested. If the user requests Auto, the effective engine version is chosen by Athena. When a request to update the engine version is made by a `CreateWorkGroup` or `UpdateWorkGroup` operation, the `EffectiveEngineVersion` field is ignored.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-engineversion.html#cfn-athena-workgroup-engineversion-effectiveengineversion
+         */
+        readonly effectiveEngineVersion?: string;
+        /**
+         * The engine version requested by the user.
+         *
+         * Possible values are determined by the output of `ListEngineVersions` , including AUTO. The default is AUTO.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-engineversion.html#cfn-athena-workgroup-engineversion-selectedengineversion
+         */
+        readonly selectedEngineVersion?: string;
+    }
+    /**
+     * The location in Amazon S3 where query and calculation results are stored and the encryption option, if any, used for query and calculation results.
+     *
+     * These are known as "client-side settings". If workgroup settings override client-side settings, then the query uses the workgroup settings.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfiguration.html
+     */
+    interface ResultConfigurationProperty {
+        /**
+         * Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results.
+         *
+         * Currently the only supported canned ACL is `BUCKET_OWNER_FULL_CONTROL` . This is a client-side setting. If workgroup settings override client-side settings, then the query uses the ACL configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See `EnforceWorkGroupConfiguration` .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-aclconfiguration
+         */
+        readonly aclConfiguration?: CfnWorkGroupPropsMixin.AclConfigurationProperty | cdk.IResolvable;
+        /**
+         * If query results are encrypted in Amazon S3, indicates the encryption option used (for example, `SSE_KMS` or `CSE_KMS` ) and key information.
+         *
+         * This is a client-side setting. If workgroup settings override client-side settings, then the query uses the encryption configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See `EnforceWorkGroupConfiguration` and [Override client-side settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-encryptionconfiguration
+         */
+        readonly encryptionConfiguration?: CfnWorkGroupPropsMixin.EncryptionConfigurationProperty | cdk.IResolvable;
+        /**
+         * The account ID that you expect to be the owner of the Amazon S3 bucket specified by `ResultConfiguration:OutputLocation` .
+         *
+         * If set, Athena uses the value for `ExpectedBucketOwner` when it makes Amazon S3 calls to your specified output location. If the `ExpectedBucketOwner` account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error.
+         *
+         * This is a client-side setting. If workgroup settings override client-side settings, then the query uses the `ExpectedBucketOwner` setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See `EnforceWorkGroupConfiguration` .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-expectedbucketowner
+         */
+        readonly expectedBucketOwner?: string;
+        /**
+         * The location in Amazon S3 where your query results are stored, such as `s3://path/to/query/bucket/` .
+         *
+         * To run a query, you must specify the query results location using either a client-side setting for individual queries or a location specified by the workgroup. If workgroup settings override client-side settings, then the query uses the location specified for the workgroup. If no query location is set, Athena issues an error. For more information, see [Work with query results and recent queries](https://docs.aws.amazon.com/athena/latest/ug/querying.html) and `EnforceWorkGroupConfiguration` .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-outputlocation
+         */
+        readonly outputLocation?: string;
+    }
+    /**
+     * If query results are encrypted in Amazon S3, indicates the encryption option used (for example, `SSE_KMS` or `CSE_KMS` ) and key information.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-encryptionconfiguration.html
+     */
+    interface EncryptionConfigurationProperty {
+        /**
+         * Indicates whether Amazon S3 server-side encryption with Amazon S3-managed keys ( `SSE_S3` ), server-side encryption with KMS-managed keys ( `SSE_KMS` ), or client-side encryption with KMS-managed keys ( `CSE_KMS` ) is used.
+         *
+         * If a query runs in a workgroup and the workgroup overrides client-side settings, then the workgroup's setting for encryption is used. It specifies whether query results must be encrypted, for all queries that run in this workgroup.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-encryptionconfiguration.html#cfn-athena-workgroup-encryptionconfiguration-encryptionoption
+         */
+        readonly encryptionOption?: string;
+        /**
+         * For `SSE_KMS` and `CSE_KMS` , this is the KMS key ARN or ID.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-encryptionconfiguration.html#cfn-athena-workgroup-encryptionconfiguration-kmskey
+         */
+        readonly kmsKey?: kmsRefs.IKeyRef | string;
+    }
+    /**
+     * Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results, including data files inserted by Athena as the result of statements like CTAS or INSERT INTO.
+     *
+     * When Athena stores query results in Amazon S3, the canned ACL is set with the `x-amz-acl` request header. For more information about S3 Object Ownership, see [Object Ownership settings](https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html#object-ownership-overview) in the *Amazon S3 User Guide* .
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-aclconfiguration.html
+     */
+    interface AclConfigurationProperty {
+        /**
+         * The Amazon S3 canned ACL that Athena should specify when storing query results, including data files inserted by Athena as the result of statements like CTAS or INSERT INTO.
+         *
+         * Currently the only supported canned ACL is `BUCKET_OWNER_FULL_CONTROL` . If a query runs in a workgroup and the workgroup overrides client-side settings, then the Amazon S3 canned ACL specified in the workgroup's settings is used for all queries that run in the workgroup. For more information about Amazon S3 canned ACLs, see [Canned ACL](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#canned-acl) in the *Amazon S3 User Guide* .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-aclconfiguration.html#cfn-athena-workgroup-aclconfiguration-s3acloption
+         */
+        readonly s3AclOption?: string;
+    }
+    /**
+     * Specifies the customer managed KMS key that is used to encrypt the user's data stores in Athena.
+     *
+     * When an AWS managed key is used, this value is null. This setting does not apply to Athena SQL workgroups.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-customercontentencryptionconfiguration.html
+     */
+    interface CustomerContentEncryptionConfigurationProperty {
+        /**
+         * The customer managed KMS key that is used to encrypt the user's data stores in Athena.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-customercontentencryptionconfiguration.html#cfn-athena-workgroup-customercontentencryptionconfiguration-kmskey
+         */
+        readonly kmsKey?: kmsRefs.IKeyRef | string;
+    }
+    /**
+     * The configuration for storing results in Athena owned storage, which includes whether this feature is enabled;
+     *
+     * whether encryption configuration, if any, is used for encrypting query results.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedqueryresultsconfiguration.html
+     */
+    interface ManagedQueryResultsConfigurationProperty {
+        /**
+         * If set to true, allows you to store query results in Athena owned storage.
+         *
+         * If set to false, workgroup member stores query results in location specified under `ResultConfiguration$OutputLocation` . The default is false. A workgroup cannot have the `ResultConfiguration$OutputLocation` parameter when you set this field to true.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedqueryresultsconfiguration.html#cfn-athena-workgroup-managedqueryresultsconfiguration-enabled
+         */
+        readonly enabled?: boolean | cdk.IResolvable;
+        /**
+         * If you encrypt query and calculation results in Athena owned storage, this field indicates the encryption option (for example, SSE_KMS or CSE_KMS) and key information.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedqueryresultsconfiguration.html#cfn-athena-workgroup-managedqueryresultsconfiguration-encryptionconfiguration
+         */
+        readonly encryptionConfiguration?: cdk.IResolvable | CfnWorkGroupPropsMixin.ManagedStorageEncryptionConfigurationProperty;
+    }
+    /**
+     * Indicates the encryption configuration for Athena Managed Storage.
+     *
+     * If not setting this field, Managed Storage will encrypt the query results with Athena's encryption key
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedstorageencryptionconfiguration.html
+     */
+    interface ManagedStorageEncryptionConfigurationProperty {
+        /**
+         * For SSE-KMS and CSE-KMS, this is the KMS key ARN or ID.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedstorageencryptionconfiguration.html#cfn-athena-workgroup-managedstorageencryptionconfiguration-kmskey
+         */
+        readonly kmsKey?: string;
+    }
+    /**
+     * The engine configuration for the workgroup, which includes the minimum/maximum number of Data Processing Units (DPU) that queries should use when running in provisioned capacity.
+     *
+     * If not specified, Athena uses default values (Default value for min is 4 and for max is Minimum of 124 and allocated DPUs).
+     *
+     * To specify DPU values for PC queries the WG containing EngineConfiguration should have the following values: The name of the Classifications should be `athena-query-engine-properties` , with the only allowed properties as `max-dpu-count` and `min-dpu-count` .
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-engineconfiguration.html
+     */
+    interface EngineConfigurationProperty {
+        /**
+         * Contains additional notebook engine `MAP<string, string>` parameter mappings in the form of key-value pairs.
+         *
+         * To specify an Athena notebook that the Jupyter server will download and serve, specify a value for the `StartSessionRequest$NotebookVersion` field, and then add a key named `NotebookId` to `AdditionalConfigs` that has the value of the Athena notebook ID.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-engineconfiguration.html#cfn-athena-workgroup-engineconfiguration-additionalconfigs
+         */
+        readonly additionalConfigs?: cdk.IResolvable | Record<string, string>;
+        /**
+         * The configuration classifications that can be specified for the engine.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-engineconfiguration.html#cfn-athena-workgroup-engineconfiguration-classifications
+         */
+        readonly classifications?: Array<CfnWorkGroupPropsMixin.ClassificationProperty | cdk.IResolvable> | cdk.IResolvable;
+        /**
+         * The number of DPUs to use for the coordinator.
+         *
+         * A coordinator is a special executor that orchestrates processing work and manages other executors in a notebook session. The default is 1.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-engineconfiguration.html#cfn-athena-workgroup-engineconfiguration-coordinatordpusize
+         */
+        readonly coordinatorDpuSize?: number;
+        /**
+         * The default number of DPUs to use for executors.
+         *
+         * An executor is the smallest unit of compute that a notebook session can request from Athena. The default is 1.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-engineconfiguration.html#cfn-athena-workgroup-engineconfiguration-defaultexecutordpusize
+         */
+        readonly defaultExecutorDpuSize?: number;
+        /**
+         * The maximum number of DPUs that can run concurrently.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-engineconfiguration.html#cfn-athena-workgroup-engineconfiguration-maxconcurrentdpus
+         */
+        readonly maxConcurrentDpus?: number;
+        /**
+         * Specifies custom jar files and Spark properties for use cases like cluster encryption, table formats, and general Spark tuning.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-engineconfiguration.html#cfn-athena-workgroup-engineconfiguration-sparkproperties
+         */
+        readonly sparkProperties?: cdk.IResolvable | Record<string, string>;
+    }
+    /**
+     * A classification refers to a set of specific configurations.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-classification.html
+     */
+    interface ClassificationProperty {
+        /**
+         * The name of the configuration classification.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-classification.html#cfn-athena-workgroup-classification-name
+         */
+        readonly name?: string;
+        /**
+         * A set of properties specified within a configuration classification.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-classification.html#cfn-athena-workgroup-classification-properties
+         */
+        readonly properties?: cdk.IResolvable | Record<string, string>;
+    }
+    /**
+     * Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-monitoringconfiguration.html
+     */
+    interface MonitoringConfigurationProperty {
+        /**
+         * Configuration settings for delivering logs to Amazon CloudWatch log groups.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-monitoringconfiguration.html#cfn-athena-workgroup-monitoringconfiguration-cloudwatchloggingconfiguration
+         */
+        readonly cloudWatchLoggingConfiguration?: CfnWorkGroupPropsMixin.CloudWatchLoggingConfigurationProperty | cdk.IResolvable;
+        /**
+         * Configuration settings for managed log persistence.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-monitoringconfiguration.html#cfn-athena-workgroup-monitoringconfiguration-managedloggingconfiguration
+         */
+        readonly managedLoggingConfiguration?: cdk.IResolvable | CfnWorkGroupPropsMixin.ManagedLoggingConfigurationProperty;
+        /**
+         * Configuration settings for delivering logs to Amazon S3 buckets.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-monitoringconfiguration.html#cfn-athena-workgroup-monitoringconfiguration-s3loggingconfiguration
+         */
+        readonly s3LoggingConfiguration?: cdk.IResolvable | CfnWorkGroupPropsMixin.S3LoggingConfigurationProperty;
+    }
+    /**
+     * Configuration settings for delivering logs to Amazon CloudWatch log groups.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-cloudwatchloggingconfiguration.html
+     */
+    interface CloudWatchLoggingConfigurationProperty {
+        /**
+         * Enables CloudWatch logging.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-cloudwatchloggingconfiguration.html#cfn-athena-workgroup-cloudwatchloggingconfiguration-enabled
+         */
+        readonly enabled?: boolean | cdk.IResolvable;
+        /**
+         * The name of the log group in Amazon CloudWatch Logs where you want to publish your logs.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-cloudwatchloggingconfiguration.html#cfn-athena-workgroup-cloudwatchloggingconfiguration-loggroup
+         */
+        readonly logGroup?: string;
+        /**
+         * Prefix for the CloudWatch log stream name.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-cloudwatchloggingconfiguration.html#cfn-athena-workgroup-cloudwatchloggingconfiguration-logstreamnameprefix
+         */
+        readonly logStreamNamePrefix?: string;
+        /**
+         * The types of logs that you want to publish to CloudWatch.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-cloudwatchloggingconfiguration.html#cfn-athena-workgroup-cloudwatchloggingconfiguration-logtypes
+         */
+        readonly logTypes?: cdk.IResolvable | Record<string, Array<string>>;
+    }
+    /**
+     * Configuration settings for delivering logs to Amazon S3 buckets.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedloggingconfiguration.html
+     */
+    interface ManagedLoggingConfigurationProperty {
+        /**
+         * Enables mamanged log persistence.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedloggingconfiguration.html#cfn-athena-workgroup-managedloggingconfiguration-enabled
+         */
+        readonly enabled?: boolean | cdk.IResolvable;
+        /**
+         * The KMS key ARN to encrypt the logs stored in managed log persistence.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedloggingconfiguration.html#cfn-athena-workgroup-managedloggingconfiguration-kmskey
+         */
+        readonly kmsKey?: string;
+    }
+    /**
+     * Configuration settings for delivering logs to Amazon S3 buckets.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-s3loggingconfiguration.html
+     */
+    interface S3LoggingConfigurationProperty {
+        /**
+         * Enables S3 log delivery.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-s3loggingconfiguration.html#cfn-athena-workgroup-s3loggingconfiguration-enabled
+         */
+        readonly enabled?: boolean | cdk.IResolvable;
+        /**
+         * The KMS key ARN to encrypt the logs published to the given Amazon S3 destination.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-s3loggingconfiguration.html#cfn-athena-workgroup-s3loggingconfiguration-kmskey
+         */
+        readonly kmsKey?: string;
+        /**
+         * The Amazon S3 destination URI for log publishing.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-s3loggingconfiguration.html#cfn-athena-workgroup-s3loggingconfiguration-loglocation
+         */
+        readonly logLocation?: string;
+    }
+    /**
+     * The configuration information that will be updated for this workgroup, which includes the location in Amazon S3 where query results are stored, the encryption option, if any, used for query results, whether the Amazon CloudWatch Metrics are enabled for the workgroup, whether the workgroup settings override the client-side settings, and the data usage limit for the amount of bytes scanned per query, if it is specified.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html
+     */
+    interface WorkGroupConfigurationUpdatesProperty {
+        /**
+         * Additional Configuration that are passed to Athena Spark Calculations running in this workgroup.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-additionalconfiguration
+         */
+        readonly additionalConfiguration?: string;
+        /**
+         * The upper data usage limit (cutoff) for the amount of bytes a single query in a workgroup is allowed to scan.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-bytesscannedcutoffperquery
+         */
+        readonly bytesScannedCutoffPerQuery?: number;
+        /**
+         * Indicates the KMS key for encrypting notebook content.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-customercontentencryptionconfiguration
+         */
+        readonly customerContentEncryptionConfiguration?: CfnWorkGroupPropsMixin.CustomerContentEncryptionConfigurationProperty | cdk.IResolvable;
+        /**
+         * If set to "true", the settings for the workgroup override client-side settings.
+         *
+         * If set to "false", client-side settings are used
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-enforceworkgroupconfiguration
+         */
+        readonly enforceWorkGroupConfiguration?: boolean | cdk.IResolvable;
+        /**
+         * The engine configuration for running queries.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-engineconfiguration
+         */
+        readonly engineConfiguration?: CfnWorkGroupPropsMixin.EngineConfigurationProperty | cdk.IResolvable;
+        /**
+         * The Athena engine version for running queries.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-engineversion
+         */
+        readonly engineVersion?: CfnWorkGroupPropsMixin.EngineVersionProperty | cdk.IResolvable;
+        /**
+         * The ARN of the execution role used to access user resources for Spark sessions and Identity Center enabled workgroups.
+         *
+         * This property applies only to Spark enabled workgroups and Identity Center enabled workgroups.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-executionrole
+         */
+        readonly executionRole?: iamRefs.IRoleRef | string;
+        /**
+         * The configuration for the managed query results and encryption option.
+         *
+         * ResultConfiguration and ManagedQueryResultsConfiguration cannot be set at the same time
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-managedqueryresultsconfiguration
+         */
+        readonly managedQueryResultsConfiguration?: cdk.IResolvable | CfnWorkGroupPropsMixin.ManagedQueryResultsConfigurationProperty;
+        /**
+         * Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-monitoringconfiguration
+         */
+        readonly monitoringConfiguration?: cdk.IResolvable | CfnWorkGroupPropsMixin.MonitoringConfigurationProperty;
+        /**
+         * Indicates that the Amazon CloudWatch metrics are enabled for the workgroup.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-publishcloudwatchmetricsenabled
+         */
+        readonly publishCloudWatchMetricsEnabled?: boolean | cdk.IResolvable;
+        /**
+         * Indicates that the data usage control limit per query is removed.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-removebytesscannedcutoffperquery
+         */
+        readonly removeBytesScannedCutoffPerQuery?: boolean | cdk.IResolvable;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-removecustomercontentencryptionconfiguration
+         */
+        readonly removeCustomerContentEncryptionConfiguration?: boolean | cdk.IResolvable;
+        /**
+         * If set to true, allows members assigned to a workgroup to reference Amazon S3 Requester Pays buckets in queries.
+         *
+         * If set to false, workgroup members cannot query data from Requester Pays buckets, and queries that retrieve data from Requester Pays buckets cause an error.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-requesterpaysenabled
+         */
+        readonly requesterPaysEnabled?: boolean | cdk.IResolvable;
+        /**
+         * The result configuration information about the queries in this workgroup that will be updated.
+         *
+         * Includes the updated results location and an updated option for encrypting query results.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-resultconfigurationupdates
+         */
+        readonly resultConfigurationUpdates?: cdk.IResolvable | CfnWorkGroupPropsMixin.ResultConfigurationUpdatesProperty;
+    }
+    /**
+     * The information about the updates in the query results, such as output location and encryption configuration for the query results.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfigurationupdates.html
+     */
+    interface ResultConfigurationUpdatesProperty {
+        /**
+         * The ACL configuration for the query results.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfigurationupdates.html#cfn-athena-workgroup-resultconfigurationupdates-aclconfiguration
+         */
+        readonly aclConfiguration?: CfnWorkGroupPropsMixin.AclConfigurationProperty | cdk.IResolvable;
+        /**
+         * The encryption configuration for the query results.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfigurationupdates.html#cfn-athena-workgroup-resultconfigurationupdates-encryptionconfiguration
+         */
+        readonly encryptionConfiguration?: CfnWorkGroupPropsMixin.EncryptionConfigurationProperty | cdk.IResolvable;
+        /**
+         * The AWS account ID that you expect to be the owner of the Amazon S3 bucket specified by [](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-outputlocation) . If set, Athena uses the value for `ExpectedBucketOwner` when it makes Amazon S3 calls to your specified output location. If the `ExpectedBucketOwner` AWS account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error.
+         *
+         * If workgroup settings override client-side settings, then the query uses the `ExpectedBucketOwner` setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See [](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration) and [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfigurationupdates.html#cfn-athena-workgroup-resultconfigurationupdates-expectedbucketowner
+         */
+        readonly expectedBucketOwner?: string;
+        /**
+         * The location in Amazon S3 where your query results are stored, such as `s3://path/to/query/bucket/` .
+         *
+         * For more information, see [Query Results](https://docs.aws.amazon.com/athena/latest/ug/querying.html) If workgroup settings override client-side settings, then the query uses the location for the query results and the encryption configuration that are specified for the workgroup. The "workgroup settings override" is specified in EnforceWorkGroupConfiguration (true/false) in the WorkGroupConfiguration. See `EnforceWorkGroupConfiguration` .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfigurationupdates.html#cfn-athena-workgroup-resultconfigurationupdates-outputlocation
+         */
+        readonly outputLocation?: string;
+        /**
+         * If set to `true` , indicates that the previously-specified ACL configuration for queries in this workgroup should be ignored and set to null.
+         *
+         * If set to `false` or not set, and a value is present in the `AclConfiguration` of `ResultConfigurationUpdates` , the `AclConfiguration` in the workgroup's `ResultConfiguration` is updated with the new value. For more information, see [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfigurationupdates.html#cfn-athena-workgroup-resultconfigurationupdates-removeaclconfiguration
+         */
+        readonly removeAclConfiguration?: boolean | cdk.IResolvable;
+        /**
+         * If set to "true", indicates that the previously-specified encryption configuration (also known as the client-side setting) for queries in this workgroup should be ignored and set to null.
+         *
+         * If set to "false" or not set, and a value is present in the EncryptionConfiguration in ResultConfigurationUpdates (the client-side setting), the EncryptionConfiguration in the workgroup's ResultConfiguration will be updated with the new value. For more information, see [Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfigurationupdates.html#cfn-athena-workgroup-resultconfigurationupdates-removeencryptionconfiguration
+         */
+        readonly removeEncryptionConfiguration?: boolean | cdk.IResolvable;
+        /**
+         * If set to "true", removes the AWS account ID previously specified for [](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-expectedbucketowner) . If set to "false" or not set, and a value is present in the `ExpectedBucketOwner` in `ResultConfigurationUpdates` (the client-side setting), the `ExpectedBucketOwner` in the workgroup's `ResultConfiguration` is updated with the new value. For more information, see [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfigurationupdates.html#cfn-athena-workgroup-resultconfigurationupdates-removeexpectedbucketowner
+         */
+        readonly removeExpectedBucketOwner?: boolean | cdk.IResolvable;
+        /**
+         * If set to "true", indicates that the previously-specified query results location (also known as a client-side setting) for queries in this workgroup should be ignored and set to null.
+         *
+         * If set to "false" or not set, and a value is present in the OutputLocation in ResultConfigurationUpdates (the client-side setting), the OutputLocation in the workgroup's ResultConfiguration will be updated with the new value. For more information, see [Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfigurationupdates.html#cfn-athena-workgroup-resultconfigurationupdates-removeoutputlocation
+         */
+        readonly removeOutputLocation?: boolean | cdk.IResolvable;
+    }
+}
+/**
+ * Properties for CfnWorkGroupPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-workgroup.html
+ */
+export interface CfnWorkGroupMixinProps {
+    /**
+     * The workgroup description.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-workgroup.html#cfn-athena-workgroup-description
+     */
+    readonly description?: string;
+    /**
+     * The workgroup name.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-workgroup.html#cfn-athena-workgroup-name
+     */
+    readonly name?: string;
+    /**
+     * The option to delete a workgroup and its contents even if the workgroup contains any named queries.
+     *
+     * The default is false.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-workgroup.html#cfn-athena-workgroup-recursivedeleteoption
+     */
+    readonly recursiveDeleteOption?: boolean | cdk.IResolvable;
+    /**
+     * The state of the workgroup: ENABLED or DISABLED.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-workgroup.html#cfn-athena-workgroup-state
+     */
+    readonly state?: string;
+    /**
+     * The tags (key-value pairs) to associate with this resource.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-workgroup.html#cfn-athena-workgroup-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+    /**
+     * The configuration of the workgroup, which includes the location in Amazon S3 where query results are stored, the encryption option, if any, used for query results, whether Amazon CloudWatch Metrics are enabled for the workgroup, and the limit for the amount of bytes scanned (cutoff) per query, if it is specified.
+     *
+     * The `EnforceWorkGroupConfiguration` option determines whether workgroup settings override client-side query settings.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-workgroup.html#cfn-athena-workgroup-workgroupconfiguration
+     */
+    readonly workGroupConfiguration?: cdk.IResolvable | CfnWorkGroupPropsMixin.WorkGroupConfigurationProperty;
+    /**
+     * The configuration information that will be updated for this workgroup, which includes the location in Amazon S3 where query results are stored, the encryption option, if any, used for query results, whether the Amazon CloudWatch Metrics are enabled for the workgroup, whether the workgroup settings override the client-side settings, and the data usage limit for the amount of bytes scanned per query, if it is specified.
+     *
+     * @deprecated this property has been deprecated
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-workgroup.html#cfn-athena-workgroup-workgroupconfigurationupdates
+     */
+    readonly workGroupConfigurationUpdates?: cdk.IResolvable | CfnWorkGroupPropsMixin.WorkGroupConfigurationUpdatesProperty;
+}