@aws-cdk/cfn-property-mixins 2.267.0 → 2.269.0

package/lib/services/aws-lambda/cfn-props-mixins.generated.d.ts

@@ -1283,6 +1283,10 @@ export declare namespace CfnFunctionPropsMixin {
          */
         readonly s3Key?: string;
         /**
+         * Specifies the storage mode for the deployment package.
+         *
+         * Use ``COPY`` to store the package in LAMlong-managed storage. Use ``REFERENCE`` to read the package directly from the Amazon S3 bucket. If omitted, the default is ``COPY``.
+         *
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-s3objectstoragemode
          */
         readonly s3ObjectStorageMode?: string;
@@ -1333,6 +1337,23 @@ export declare namespace CfnFunctionPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-filesystemconfig.html#cfn-lambda-function-filesystemconfig-localmountpath
          */
         readonly localMountPath?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-filesystemconfig.html#cfn-lambda-function-filesystemconfig-s3filesconfig
+         */
+        readonly s3FilesConfig?: cdk.IResolvable | CfnFunctionPropsMixin.S3FilesConfigProperty;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-s3filesconfig.html
+     */
+    interface S3FilesConfigProperty {
+        /**
+         * Specifies if a function reads from the file system for the lowest latency, or through Amazon S3 Files feature "direct Amazon S3 bucket reads" for the highest throughput.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-s3filesconfig.html#cfn-lambda-function-s3filesconfig-directs3read
+         */
+        readonly directS3Read?: string;
     }
     /**
      * A function's environment variable settings.
@@ -1408,6 +1429,8 @@ export declare namespace CfnFunctionPropsMixin {
          */
         readonly executionTimeout?: number;
         /**
+         * The ARN of the KMSlong (KMS) customer managed key that is used to encrypt your durable execution's payload data, including input, output, and error payloads.
+         *
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-durableconfig.html#cfn-lambda-function-durableconfig-kmskeyarn
          */
         readonly kmsKeyArn?: string;
@@ -2557,6 +2580,8 @@ export declare namespace CfnCapacityProviderPropsMixin {
      */
     interface CapacityProviderTelemetryConfigProperty {
         /**
+         * The capacity provider's Amazon CloudWatch Logs configuration settings.
+         *
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-capacityprovider-capacityprovidertelemetryconfig.html#cfn-lambda-capacityprovider-capacityprovidertelemetryconfig-loggingconfig
          */
         readonly loggingConfig?: CfnCapacityProviderPropsMixin.CapacityProviderLoggingConfigProperty | cdk.IResolvable;
@@ -2570,10 +2595,18 @@ export declare namespace CfnCapacityProviderPropsMixin {
      */
     interface CapacityProviderLoggingConfigProperty {
         /**
+         * The name of the Amazon CloudWatch log group the capacity provider sends logs to.
+         *
+         * By default, Lambda capacity providers send logs to a default log group named ``/aws/lambda/capacity-provider/<capacity provider name>``. To use a different log group, enter an existing log group or enter a new log group name.
+         *
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-capacityprovider-capacityproviderloggingconfig.html#cfn-lambda-capacityprovider-capacityproviderloggingconfig-loggroup
          */
         readonly logGroup?: string;
         /**
+         * Set this property to filter the system logs for your capacity provider that Lambda sends to CloudWatch.
+         *
+         * Lambda only sends system logs at the selected level of detail and lower, where ``DEBUG`` is the highest level and ``WARN`` is the lowest.
+         *
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-capacityprovider-capacityproviderloggingconfig.html#cfn-lambda-capacityprovider-capacityproviderloggingconfig-systemloglevel
          */
         readonly systemLogLevel?: string;
@@ -2628,6 +2661,8 @@ export interface CfnCapacityProviderMixinProps {
      */
     readonly tags?: Array<cdk.CfnTag>;
     /**
+     * Configuration that specifies the telemetry collection for the capacity provider.
+     *
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-capacityprovider.html#cfn-lambda-capacityprovider-telemetryconfig
      */
     readonly telemetryConfig?: CfnCapacityProviderPropsMixin.CapacityProviderTelemetryConfigProperty | cdk.IResolvable;
@@ -3040,3 +3075,71 @@ export interface CfnNetworkConnectorMixinProps {
      */
     readonly tags?: Array<cdk.CfnTag>;
 }
+/**
+ * Use the ``AWS::Lambda::ResourcePolicy`` resource to attach a resource-based policy to a LAM resource.
+ *
+ * A resource-based policy applies to a single LAM resource, for example, a function, function version, or function alias. To learn more about using resource-based policies with LAM, see [Working with resource-based policies in](https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html) in the *Developer Guide*.
+ *  You can use resource-based policies to grant permissions to other AWS services, AWS accounts and organizations, and IAM users and roles to access your LAM resource. You can also deny access to specific entities, and use the full range of IAM global condition keys to further restrict who has access to your LAM resource. For example, you can limit access to calls originating from a specified IP address or VPC.
+ *  A resource-based policy is a JSON document containing a number of statements. Each statement defines the entities you want to grant permission to, the API actions you want to allow or deny, and the LAM resource you want the statement to apply to. A statement can also optionally include an array of logical conditions using the IAM global condition keys.
+ *  To use the ``AWS::Lambda::ResourcePolicy`` resource, make sure that you have the [resource-based policy permissions for Lambda](https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html#access-control-resource-based-permissions).
+ *  To learn more about creating resource-based policies, see [Policies and permissions in](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html) in the *User Guide*. For more information about example policies for providing permissions to AWS services, other AWS accounts, and IAM users and roles, see [Example resource-based policies for functions](https://docs.aws.amazon.com/lambda/latest/dg/permissions-function-examples.html) in the *Developer Guide*.
+ *   **Avoid mixing permission resource types**
+ *  To grant permissions to access your function, we recommend using the ``AWS::Lambda::ResourcePolicy`` resource to set access permissions. With this resource, you have more flexibility and fine-grained control than ``AWS::Lambda::Permission``. This resource grants an AWS service or another account permission to call a particular API action on a function.
+ *  You can also use the ``AWS::Lambda::Permission`` resource, however using both ``AWS::Lambda::Permission`` and ``AWS::Lambda::ResourcePolicy`` to set permissions on a function can result in errors. Permissions defined in ``AWS::Lambda::Permission`` can be unintentionally overwritten, whether in a single CFN stack or across multiple stacks. Don't use both resource types to set permissions on a function.
+ *  To migrate existing permissions for a function from ``AWS::Lambda::Permission`` to ``AWS::Lambda::ResourcePolicy``, do the following:
+ *   1.  Set a ``Retain``[deletion policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) on the ``AWS::Lambda::Permission`` resources you want to migrate. This is necessary so that Lambda does not delete statements with the same statement ID when you delete these resources.
+ *   1.  Use the [GetResourcePolicy](https://docs.aws.amazon.com/lambda/latest/api/API_GetResourcePolicy.html)LAM API to retrieve the resource-based policy currently attached to the function.
+ *   1.  Use this policy to create a new ``AWS::Lambda::ResourcePolicy`` resource.
+ *   1.  Delete all the existing ``AWS::Lambda::Permission`` resources for the function.
+ *
+ * @cloudformationResource AWS::Lambda::ResourcePolicy
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-resourcepolicy.html
+ */
+export declare class CfnResourcePolicyPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnResourcePolicyMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Lambda::ResourcePolicy`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnResourcePolicyMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnResourcePolicy;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnResourcePolicyPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-resourcepolicy.html
+ */
+export interface CfnResourcePolicyMixinProps {
+    /**
+     * The policy document you want to add to your LAM resource.
+     *
+     * This is formatted as a JSON string.
+     *  For more information, see [Working with resource-based policies in](https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html) in the *Developer Guide*.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-resourcepolicy.html#cfn-lambda-resourcepolicy-policydocument
+     */
+    readonly policyDocument?: any | cdk.IResolvable;
+    /**
+     * The Amazon Resource Name (ARN) of the LAM resource you want to add the policy to.
+     *
+     * For a function, you can use a qualified or an unqualified ARN. The value must be a complete ARN, and the operation does not accept wildcard characters.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-resourcepolicy.html#cfn-lambda-resourcepolicy-resourcearn
+     */
+    readonly resourceArn?: string;
+}

package/lib/services/aws-lambda/cfn-props-mixins.generated.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CfnNetworkConnectorPropsMixin = exports.CfnMicrovmImagePropsMixin = exports.CfnCapacityProviderPropsMixin = exports.CfnVersionPropsMixin = exports.CfnUrlPropsMixin = exports.CfnPermissionPropsMixin = exports.CfnLayerVersionPermissionPropsMixin = exports.CfnLayerVersionPropsMixin = exports.CfnFunctionPropsMixin = exports.CfnEventSourceMappingPropsMixin = exports.CfnEventInvokeConfigPropsMixin = exports.CfnCodeSigningConfigPropsMixin = exports.CfnAliasPropsMixin = void 0;
+exports.CfnResourcePolicyPropsMixin = exports.CfnNetworkConnectorPropsMixin = exports.CfnMicrovmImagePropsMixin = exports.CfnCapacityProviderPropsMixin = exports.CfnVersionPropsMixin = exports.CfnUrlPropsMixin = exports.CfnPermissionPropsMixin = exports.CfnLayerVersionPermissionPropsMixin = exports.CfnLayerVersionPropsMixin = exports.CfnFunctionPropsMixin = exports.CfnEventSourceMappingPropsMixin = exports.CfnEventInvokeConfigPropsMixin = exports.CfnCodeSigningConfigPropsMixin = exports.CfnAliasPropsMixin = void 0;
 const jsiiDeprecationWarnings = require("../../../.warnings.jsii.js");
 const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
 /* eslint-disable @stylistic/max-len, eol-last */
@@ -50,7 +50,7 @@ const service = __importStar(require("aws-cdk-lib/aws-lambda"));
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-alias.html
  */
 class CfnAliasPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnAliasPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnAliasPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["description", "functionName", "functionVersion", "name", "provisionedConcurrencyConfig", "routingConfig"];
     props;
     strategy;
@@ -112,7 +112,7 @@ function flattenCfnAliasMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-codesigningconfig.html
  */
 class CfnCodeSigningConfigPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnCodeSigningConfigPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnCodeSigningConfigPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["allowedPublishers", "codeSigningPolicies", "description", "tags"];
     props;
     strategy;
@@ -182,7 +182,7 @@ function flattenCfnCodeSigningConfigMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventinvokeconfig.html
  */
 class CfnEventInvokeConfigPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnEventInvokeConfigPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnEventInvokeConfigPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["destinationConfig", "functionName", "maximumEventAgeInSeconds", "maximumRetryAttempts", "qualifier"];
     props;
     strategy;
@@ -283,7 +283,7 @@ function flattenCfnEventInvokeConfigMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html
  */
 class CfnEventSourceMappingPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnEventSourceMappingPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnEventSourceMappingPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["amazonManagedKafkaEventSourceConfig", "batchSize", "bisectBatchOnFunctionError", "destinationConfig", "documentDbEventSourceConfig", "enabled", "eventSourceArn", "filterCriteria", "functionName", "functionResponseTypes", "kmsKeyArn", "loggingConfig", "maximumBatchingWindowInSeconds", "maximumRecordAgeInSeconds", "maximumRetryAttempts", "metricsConfig", "parallelizationFactor", "provisionedPollerConfig", "queues", "scalingConfig", "selfManagedEventSource", "selfManagedKafkaEventSourceConfig", "sourceAccessConfigurations", "startingPosition", "startingPositionTimestamp", "tags", "topics", "tumblingWindowInSeconds"];
     props;
     strategy;
@@ -377,7 +377,7 @@ function flattenCfnEventSourceMappingMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html
  */
 class CfnFunctionPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnFunctionPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnFunctionPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["architectures", "capacityProviderConfig", "code", "codeSigningConfigArn", "deadLetterConfig", "description", "durableConfig", "environment", "ephemeralStorage", "fileSystemConfigs", "functionName", "functionScalingConfig", "handler", "imageConfig", "kmsKeyArn", "layers", "loggingConfig", "memorySize", "packageType", "publishToLatestPublished", "recursiveLoop", "reservedConcurrentExecutions", "role", "runtime", "runtimeManagementConfig", "snapStart", "tags", "tenancyConfig", "timeout", "tracingConfig", "vpcConfig"];
     props;
     strategy;
@@ -459,7 +459,8 @@ function flattenCfnFunctionPropsMixinFileSystemConfigProperty(props) {
         return props;
     return {
         arn: (!props.arn ? undefined : cdk.getRefProperty(props.arn?.accessPointRef, 'accessPointArn') ?? cdk.ensureStringOrUndefined(props.arn, "arn", "efs.IAccessPointRef | string")),
-        localMountPath: (!props.localMountPath ? undefined : props.localMountPath)
+        localMountPath: (!props.localMountPath ? undefined : props.localMountPath),
+        s3FilesConfig: (!props.s3FilesConfig ? undefined : props.s3FilesConfig)
     };
 }
 // @ts-ignore TS6133
@@ -505,7 +506,7 @@ function flattenCfnFunctionMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-layerversion.html
  */
 class CfnLayerVersionPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnLayerVersionPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnLayerVersionPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["compatibleArchitectures", "compatibleRuntimes", "content", "description", "layerName", "licenseInfo"];
     props;
     strategy;
@@ -578,7 +579,7 @@ function flattenCfnLayerVersionMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-layerversionpermission.html
  */
 class CfnLayerVersionPermissionPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnLayerVersionPermissionPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnLayerVersionPermissionPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["action", "layerVersionArn", "organizationId", "principal"];
     props;
     strategy;
@@ -646,7 +647,7 @@ function flattenCfnLayerVersionPermissionMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html
  */
 class CfnPermissionPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnPermissionPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnPermissionPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["action", "eventSourceToken", "functionName", "functionUrlAuthType", "invokedViaFunctionUrl", "principal", "principalOrgId", "sourceAccount", "sourceArn"];
     props;
     strategy;
@@ -712,7 +713,7 @@ function flattenCfnPermissionMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-url.html
  */
 class CfnUrlPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnUrlPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnUrlPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["authType", "cors", "invokeMode", "qualifier", "targetFunctionArn"];
     props;
     strategy;
@@ -772,7 +773,7 @@ function flattenCfnUrlMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-version.html
  */
 class CfnVersionPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnVersionPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnVersionPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["codeSha256", "description", "functionName", "functionScalingConfig", "provisionedConcurrencyConfig", "runtimePolicy"];
     props;
     strategy;
@@ -832,7 +833,7 @@ function flattenCfnVersionMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-capacityprovider.html
  */
 class CfnCapacityProviderPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnCapacityProviderPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnCapacityProviderPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["capacityProviderName", "capacityProviderScalingConfig", "instanceRequirements", "kmsKeyArn", "permissionsConfig", "propagateTags", "tags", "telemetryConfig", "vpcConfig"];
     props;
     strategy;
@@ -882,7 +883,7 @@ exports.CfnCapacityProviderPropsMixin = CfnCapacityProviderPropsMixin;
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-microvmimage.html
  */
 class CfnMicrovmImagePropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnMicrovmImagePropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnMicrovmImagePropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["additionalOsCapabilities", "baseImageArn", "baseImageVersion", "buildRoleArn", "codeArtifact", "cpuConfigurations", "description", "egressNetworkConnectors", "environmentVariables", "hooks", "logging", "name", "resources", "tags"];
     props;
     strategy;
@@ -932,7 +933,7 @@ exports.CfnMicrovmImagePropsMixin = CfnMicrovmImagePropsMixin;
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-networkconnector.html
  */
 class CfnNetworkConnectorPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnNetworkConnectorPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnNetworkConnectorPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["configuration", "name", "operatorRole", "tags"];
     props;
     strategy;
@@ -973,3 +974,67 @@ class CfnNetworkConnectorPropsMixin extends cdk.Mixin {
     }
 }
 exports.CfnNetworkConnectorPropsMixin = CfnNetworkConnectorPropsMixin;
+/**
+ * Use the ``AWS::Lambda::ResourcePolicy`` resource to attach a resource-based policy to a LAM resource.
+ *
+ * A resource-based policy applies to a single LAM resource, for example, a function, function version, or function alias. To learn more about using resource-based policies with LAM, see [Working with resource-based policies in](https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html) in the *Developer Guide*.
+ *  You can use resource-based policies to grant permissions to other AWS services, AWS accounts and organizations, and IAM users and roles to access your LAM resource. You can also deny access to specific entities, and use the full range of IAM global condition keys to further restrict who has access to your LAM resource. For example, you can limit access to calls originating from a specified IP address or VPC.
+ *  A resource-based policy is a JSON document containing a number of statements. Each statement defines the entities you want to grant permission to, the API actions you want to allow or deny, and the LAM resource you want the statement to apply to. A statement can also optionally include an array of logical conditions using the IAM global condition keys.
+ *  To use the ``AWS::Lambda::ResourcePolicy`` resource, make sure that you have the [resource-based policy permissions for Lambda](https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html#access-control-resource-based-permissions).
+ *  To learn more about creating resource-based policies, see [Policies and permissions in](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html) in the *User Guide*. For more information about example policies for providing permissions to AWS services, other AWS accounts, and IAM users and roles, see [Example resource-based policies for functions](https://docs.aws.amazon.com/lambda/latest/dg/permissions-function-examples.html) in the *Developer Guide*.
+ *   **Avoid mixing permission resource types**
+ *  To grant permissions to access your function, we recommend using the ``AWS::Lambda::ResourcePolicy`` resource to set access permissions. With this resource, you have more flexibility and fine-grained control than ``AWS::Lambda::Permission``. This resource grants an AWS service or another account permission to call a particular API action on a function.
+ *  You can also use the ``AWS::Lambda::Permission`` resource, however using both ``AWS::Lambda::Permission`` and ``AWS::Lambda::ResourcePolicy`` to set permissions on a function can result in errors. Permissions defined in ``AWS::Lambda::Permission`` can be unintentionally overwritten, whether in a single CFN stack or across multiple stacks. Don't use both resource types to set permissions on a function.
+ *  To migrate existing permissions for a function from ``AWS::Lambda::Permission`` to ``AWS::Lambda::ResourcePolicy``, do the following:
+ *   1.  Set a ``Retain``[deletion policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) on the ``AWS::Lambda::Permission`` resources you want to migrate. This is necessary so that Lambda does not delete statements with the same statement ID when you delete these resources.
+ *   1.  Use the [GetResourcePolicy](https://docs.aws.amazon.com/lambda/latest/api/API_GetResourcePolicy.html)LAM API to retrieve the resource-based policy currently attached to the function.
+ *   1.  Use this policy to create a new ``AWS::Lambda::ResourcePolicy`` resource.
+ *   1.  Delete all the existing ``AWS::Lambda::Permission`` resources for the function.
+ *
+ * @cloudformationResource AWS::Lambda::ResourcePolicy
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-resourcepolicy.html
+ */
+class CfnResourcePolicyPropsMixin extends cdk.Mixin {
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lambda.CfnResourcePolicyPropsMixin", version: "2.269.0" };
+    static CFN_PROPERTY_KEYS = ["policyDocument", "resourceArn"];
+    props;
+    strategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Lambda::ResourcePolicy`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props, options = {}) {
+        super();
+        try {
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_aws_lambda_CfnResourcePolicyMixinProps(props);
+            jsiiDeprecationWarnings._aws_cdk_cfn_property_mixins_CfnPropertyMixinOptions(options);
+        }
+        catch (error) {
+            if (process.env.JSII_DEBUG !== "1" && error.name === "DeprecationError") {
+                Error.captureStackTrace(error, CfnResourcePolicyPropsMixin);
+            }
+            throw error;
+        }
+        this.props = props;
+        this.strategy = (options.strategy ?? cdk.PropertyMergeStrategy.combine());
+    }
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct) {
+        return (cdk.CfnResource.isCfnResource(construct) && service.CfnResourcePolicy.isCfnResourcePolicy(construct));
+    }
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct) {
+        if (this.supports(construct)) {
+            this.strategy.apply(construct, this.props, CfnResourcePolicyPropsMixin.CFN_PROPERTY_KEYS);
+        }
+    }
+}
+exports.CfnResourcePolicyPropsMixin = CfnResourcePolicyPropsMixin;

package/lib/services/aws-launchwizard/cfn-props-mixins.generated.js

@@ -50,7 +50,7 @@ const service = __importStar(require("aws-cdk-lib/aws-launchwizard"));
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-launchwizard-deployment.html
  */
 class CfnDeploymentPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_launchwizard.CfnDeploymentPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_launchwizard.CfnDeploymentPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["deploymentPatternName", "name", "specifications", "tags", "workloadName"];
     props;
     strategy;

package/lib/services/aws-lex/cfn-props-mixins.generated.d.ts

@@ -3173,6 +3173,45 @@ export declare namespace CfnBotPropsMixin {
          */
         readonly replicaRegions?: Array<string>;
     }
+    /**
+     * A bot that is a member of a bot network.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-botmember.html
+     */
+    interface BotMemberProperty {
+        /**
+         * The alias ID of a bot that is a member of this network of bots.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-botmember.html#cfn-lex-bot-botmember-botmemberaliasid
+         */
+        readonly botMemberAliasId?: string;
+        /**
+         * The alias name of a bot that is a member of this network of bots.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-botmember.html#cfn-lex-bot-botmember-botmemberaliasname
+         */
+        readonly botMemberAliasName?: string;
+        /**
+         * The unique ID of a bot that is a member of this network of bots.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-botmember.html#cfn-lex-bot-botmember-botmemberid
+         */
+        readonly botMemberId?: string;
+        /**
+         * The unique name of a bot that is a member of this network of bots.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-botmember.html#cfn-lex-bot-botmember-botmembername
+         */
+        readonly botMemberName?: string;
+        /**
+         * The version of a bot that is a member of this network of bots.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-botmember.html#cfn-lex-bot-botmember-botmemberversion
+         */
+        readonly botMemberVersion?: string;
+    }
 }
 /**
  * Properties for CfnBotPropsMixin
@@ -3202,6 +3241,12 @@ export interface CfnBotMixinProps {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-bot.html#cfn-lex-bot-botlocales
      */
     readonly botLocales?: Array<CfnBotPropsMixin.BotLocaleProperty | cdk.IResolvable> | cdk.IResolvable;
+    /**
+     * The list of bot members in a network to be created.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-bot.html#cfn-lex-bot-botmembers
+     */
+    readonly botMembers?: Array<CfnBotPropsMixin.BotMemberProperty | cdk.IResolvable> | cdk.IResolvable;
     /**
      * A list of tags to add to the bot.
      *
@@ -3210,6 +3255,13 @@ export interface CfnBotMixinProps {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-bot.html#cfn-lex-bot-bottags
      */
     readonly botTags?: Array<cdk.CfnTag>;
+    /**
+     * The type of a bot to create.
+     *
+     * @default - "Bot"
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-bot.html#cfn-lex-bot-bottype
+     */
+    readonly botType?: string;
     /**
      * By default, data stored by Amazon Lex is encrypted.
      *

package/lib/services/aws-lex/cfn-props-mixins.generated.js

@@ -52,8 +52,8 @@ const service = __importStar(require("aws-cdk-lib/aws-lex"));
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-bot.html
  */
 class CfnBotPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lex.CfnBotPropsMixin", version: "2.267.0" };
-    static CFN_PROPERTY_KEYS = ["autoBuildBotLocales", "botFileS3Location", "botLocales", "botTags", "dataPrivacy", "description", "errorLogSettings", "idleSessionTtlInSeconds", "name", "replication", "roleArn", "testBotAliasSettings", "testBotAliasTags"];
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lex.CfnBotPropsMixin", version: "2.269.0" };
+    static CFN_PROPERTY_KEYS = ["autoBuildBotLocales", "botFileS3Location", "botLocales", "botMembers", "botTags", "botType", "dataPrivacy", "description", "errorLogSettings", "idleSessionTtlInSeconds", "name", "replication", "roleArn", "testBotAliasSettings", "testBotAliasTags"];
     props;
     strategy;
     /**
@@ -116,7 +116,7 @@ function flattenCfnBotMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-botalias.html
  */
 class CfnBotAliasPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lex.CfnBotAliasPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lex.CfnBotAliasPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["botAliasLocaleSettings", "botAliasName", "botAliasTags", "botId", "botVersion", "conversationLogSettings", "description", "sentimentAnalysisSettings"];
     props;
     strategy;
@@ -279,7 +279,7 @@ function flattenCfnBotAliasMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-botversion.html
  */
 class CfnBotVersionPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lex.CfnBotVersionPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lex.CfnBotVersionPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["botId", "botVersionLocaleSpecification", "description"];
     props;
     strategy;
@@ -341,7 +341,7 @@ function flattenCfnBotVersionMixinProps(props) {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-resourcepolicy.html
  */
 class CfnResourcePolicyPropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lex.CfnResourcePolicyPropsMixin", version: "2.267.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/cfn-property-mixins.aws_lex.CfnResourcePolicyPropsMixin", version: "2.269.0" };
     static CFN_PROPERTY_KEYS = ["policy", "resourceArn"];
     props;
     strategy;