@aws-cdk/mixins-preview 2.241.0-alpha.0 → 2.242.0-alpha.0

package/lib/services/aws-datapipeline/.mixins.jsiirc.json

@@ -4,8 +4,7 @@
       "package": "software.amazon.awscdk.mixins.preview.services.datapipeline.mixins"
     },
     "dotnet": {
-      "namespace": "Amazon.CDK.Mixins.Preview.AWS.DataPipeline.Mixins",
-      "packageId": "Amazon.CDK.Mixins.Preview.AWS.DataPipeline.Mixins"
+      "namespace": "Amazon.CDK.Mixins.Preview.AWS.DataPipeline.Mixins"
     },
     "python": {
       "module": "aws_cdk.mixins_preview.aws_datapipeline.mixins"

package/lib/services/aws-datapipeline/cfn-props-mixins.generated.d.ts

@@ -2,6 +2,7 @@ import * as cdk from "aws-cdk-lib/core";
 import * as constructs from "constructs";
 import * as mixins from "../../mixins";
 import * as service from "aws-cdk-lib/aws-datapipeline";
+import { aws_ec2 as ec2Refs, aws_iam as iamRefs, aws_sns as snsRefs } from "aws-cdk-lib/interfaces";
 /**
  * The AWS::DataPipeline::Pipeline resource specifies a data pipeline that you can use to automate the movement and transformation of data.
  *
@@ -28,7 +29,7 @@ import * as service from "aws-cdk-lib/aws-datapipeline";
 export declare class CfnPipelinePropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnPipelineMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataPipeline::Pipeline`.
      *
@@ -179,7 +180,7 @@ export declare namespace CfnPipelinePropsMixin {
          *
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datapipeline-pipeline-field.html#cfn-datapipeline-pipeline-field-stringvalue
          */
-        readonly stringValue?: string;
+        readonly stringValue?: iamRefs.IInstanceProfileRef | iamRefs.IRoleRef | snsRefs.ITopicRef | string;
     }
     /**
      * A value or list of parameter values.
@@ -200,7 +201,7 @@ export declare namespace CfnPipelinePropsMixin {
          *
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datapipeline-pipeline-parametervalue.html#cfn-datapipeline-pipeline-parametervalue-stringvalue
          */
-        readonly stringValue?: string;
+        readonly stringValue?: ec2Refs.ISubnetRef | string;
     }
 }
 /**

package/lib/services/aws-datapipeline/cfn-props-mixins.generated.js

@@ -6,7 +6,6 @@ const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
 /* eslint-disable @stylistic/max-len, eol-last */
 const cdk = require("aws-cdk-lib/core");
 const mixins = require("../../mixins");
-const helpers = require("../../util/property-mixins");
 const service = require("aws-cdk-lib/aws-datapipeline");
 /**
  * The AWS::DataPipeline::Pipeline resource specifies a data pipeline that you can use to automate the movement and transformation of data.
@@ -32,7 +31,7 @@ const service = require("aws-cdk-lib/aws-datapipeline");
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datapipeline-pipeline.html
  */
 class CfnPipelinePropsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_datapipeline.mixins.CfnPipelinePropsMixin", version: "2.241.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_datapipeline.mixins.CfnPipelinePropsMixin", version: "2.242.0-alpha.0" };
     static CFN_PROPERTY_KEYS = ["activate", "description", "name", "parameterObjects", "parameterValues", "pipelineObjects", "pipelineTags"];
     props;
     strategy;
@@ -54,8 +53,11 @@ class CfnPipelinePropsMixin extends cdk.Mixin {
             }
             throw error;
         }
-        this.props = props;
-        this.strategy = (options.strategy ?? mixins.PropertyMergeStrategy.MERGE);
+        this.props = {
+            ...props,
+            ...flattenCfnPipelineMixinProps(props)
+        };
+        this.strategy = (options.strategy ?? mixins.PropertyMergeStrategy.combine());
     }
     /**
      * Check if this mixin supports the given construct
@@ -68,13 +70,46 @@ class CfnPipelinePropsMixin extends cdk.Mixin {
      */
     applyTo(construct) {
         if (this.supports(construct)) {
-            if ((this.strategy === mixins.PropertyMergeStrategy.MERGE)) {
-                helpers.deepMerge(construct, this.props, CfnPipelinePropsMixin.CFN_PROPERTY_KEYS);
-            }
-            else {
-                helpers.shallowAssign(construct, this.props, CfnPipelinePropsMixin.CFN_PROPERTY_KEYS);
-            }
+            this.strategy.apply(construct, this.props, CfnPipelinePropsMixin.CFN_PROPERTY_KEYS);
         }
     }
 }
 exports.CfnPipelinePropsMixin = CfnPipelinePropsMixin;
+// @ts-ignore TS6133
+function flattenCfnPipelinePropsMixinFieldProperty(props) {
+    if (cdk.isResolvableObject(props))
+        return props;
+    return {
+        key: (!props.key ? undefined : props.key),
+        refValue: (!props.refValue ? undefined : props.refValue),
+        stringValue: (!props.stringValue ? undefined : cdk.getRefProperty(props.stringValue?.topicRef, 'topicArn') ?? cdk.getRefProperty(props.stringValue?.roleRef, 'roleName') ?? cdk.getRefProperty(props.stringValue?.instanceProfileRef, 'instanceProfileName') ?? cdk.ensureStringOrUndefined(props.stringValue, "stringValue", "sns.ITopicRef | iam.IRoleRef | iam.IInstanceProfileRef | string"))
+    };
+}
+// @ts-ignore TS6133
+function flattenCfnPipelinePropsMixinPipelineObjectProperty(props) {
+    if (cdk.isResolvableObject(props))
+        return props;
+    return {
+        fields: (!props.fields ? undefined : (cdk.isResolvableObject(props.fields) ? props.fields : cdk.mapArrayInPlace(props.fields, (item) => flattenCfnPipelinePropsMixinFieldProperty(item)))),
+        id: (!props.id ? undefined : props.id),
+        name: (!props.name ? undefined : props.name)
+    };
+}
+// @ts-ignore TS6133
+function flattenCfnPipelinePropsMixinParameterValueProperty(props) {
+    if (cdk.isResolvableObject(props))
+        return props;
+    return {
+        id: (!props.id ? undefined : props.id),
+        stringValue: (!props.stringValue ? undefined : cdk.getRefProperty(props.stringValue?.subnetRef, 'subnetId') ?? cdk.ensureStringOrUndefined(props.stringValue, "stringValue", "ec2.ISubnetRef | string"))
+    };
+}
+// @ts-ignore TS6133
+function flattenCfnPipelineMixinProps(props) {
+    const ret = {};
+    if ((props.parameterValues !== undefined))
+        ret.parameterValues = (cdk.isResolvableObject(props.parameterValues) ? props.parameterValues : cdk.mapArrayInPlace(props.parameterValues, (item) => flattenCfnPipelinePropsMixinParameterValueProperty(item)));
+    if ((props.pipelineObjects !== undefined))
+        ret.pipelineObjects = (cdk.isResolvableObject(props.pipelineObjects) ? props.pipelineObjects : cdk.mapArrayInPlace(props.pipelineObjects, (item) => flattenCfnPipelinePropsMixinPipelineObjectProperty(item)));
+    return ret;
+}

package/lib/services/aws-datasync/.events.jsiirc.json

@@ -0,0 +1,16 @@
+{
+  "targets": {
+    "java": {
+      "package": "software.amazon.awscdk.mixins.preview.services.datasync.events"
+    },
+    "dotnet": {
+      "namespace": "Amazon.CDK.Mixins.Preview.AWS.DataSync.Events"
+    },
+    "python": {
+      "module": "aws_cdk.mixins_preview.aws_datasync.events"
+    },
+    "go": {
+      "packageName": "previewawsdatasyncevents"
+    }
+  }
+}

package/lib/services/aws-datasync/.jsiirc.json

@@ -4,8 +4,7 @@
       "package": "software.amazon.awscdk.mixins.preview.services.datasync"
     },
     "dotnet": {
-      "namespace": "Amazon.CDK.Mixins.Preview.AWS.DataSync",
-      "packageId": "Amazon.CDK.Mixins.Preview.AWS.DataSync"
+      "namespace": "Amazon.CDK.Mixins.Preview.AWS.DataSync"
     },
     "python": {
       "module": "aws_cdk.mixins_preview.aws_datasync"

package/lib/services/aws-datasync/.mixins.jsiirc.json

@@ -4,8 +4,7 @@
       "package": "software.amazon.awscdk.mixins.preview.services.datasync.mixins"
     },
     "dotnet": {
-      "namespace": "Amazon.CDK.Mixins.Preview.AWS.DataSync.Mixins",
-      "packageId": "Amazon.CDK.Mixins.Preview.AWS.DataSync.Mixins"
+      "namespace": "Amazon.CDK.Mixins.Preview.AWS.DataSync.Mixins"
     },
     "python": {
       "module": "aws_cdk.mixins_preview.aws_datasync.mixins"

package/lib/services/aws-datasync/cfn-props-mixins.generated.d.ts

@@ -2,6 +2,7 @@ import * as cdk from "aws-cdk-lib/core";
 import * as constructs from "constructs";
 import * as mixins from "../../mixins";
 import * as service from "aws-cdk-lib/aws-datasync";
+import { aws_datasync as dataSyncRefs, aws_efs as efsRefs, aws_iam as iamRefs, aws_logs as logsRefs, aws_s3 as s3Refs } from "aws-cdk-lib/interfaces";
 /**
  * The `AWS::DataSync::Agent` resource activates an AWS DataSync agent that you've deployed for storage discovery or data transfers.
  *
@@ -21,7 +22,7 @@ import * as service from "aws-cdk-lib/aws-datasync";
 export declare class CfnAgentPropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnAgentMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::Agent`.
      *
@@ -116,7 +117,7 @@ export interface CfnAgentMixinProps {
 export declare class CfnLocationAzureBlobPropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnLocationAzureBlobMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::LocationAzureBlob`.
      *
@@ -332,7 +333,7 @@ export interface CfnLocationAzureBlobMixinProps {
 export declare class CfnLocationEFSPropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnLocationEFSMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::LocationEFS`.
      *
@@ -406,7 +407,7 @@ export interface CfnLocationEFSMixinProps {
      *
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationefs.html#cfn-datasync-locationefs-efsfilesystemarn
      */
-    readonly efsFilesystemArn?: string;
+    readonly efsFilesystemArn?: efsRefs.IFileSystemRef | string;
     /**
      * Specifies an AWS Identity and Access Management (IAM) role that allows DataSync to access your Amazon EFS file system.
      *
@@ -453,7 +454,7 @@ export interface CfnLocationEFSMixinProps {
 export declare class CfnLocationFSxLustrePropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnLocationFSxLustreMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::LocationFSxLustre`.
      *
@@ -524,7 +525,7 @@ export interface CfnLocationFSxLustreMixinProps {
 export declare class CfnLocationFSxONTAPPropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnLocationFSxONTAPMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::LocationFSxONTAP`.
      *
@@ -573,6 +574,18 @@ export declare namespace CfnLocationFSxONTAPPropsMixin {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-smb.html
      */
     interface SMBProperty {
+        /**
+         * Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-smb.html#cfn-datasync-locationfsxontap-smb-cmksecretconfig
+         */
+        readonly cmkSecretConfig?: CfnLocationFSxONTAPPropsMixin.CmkSecretConfigProperty | cdk.IResolvable;
+        /**
+         * Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-smb.html#cfn-datasync-locationfsxontap-smb-customsecretconfig
+         */
+        readonly customSecretConfig?: CfnLocationFSxONTAPPropsMixin.CustomSecretConfigProperty | cdk.IResolvable;
         /**
          * Specifies the name of the Windows domain that your storage virtual machine (SVM) belongs to.
          *
@@ -583,6 +596,14 @@ export declare namespace CfnLocationFSxONTAPPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-smb.html#cfn-datasync-locationfsxontap-smb-domain
          */
         readonly domain?: string;
+        /**
+         * Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location.
+         *
+         * DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-smb.html#cfn-datasync-locationfsxontap-smb-managedsecretconfig
+         */
+        readonly managedSecretConfig?: cdk.IResolvable | CfnLocationFSxONTAPPropsMixin.ManagedSecretConfigProperty;
         /**
          * Specifies how DataSync can access a location using the SMB protocol.
          *
@@ -641,6 +662,67 @@ export declare namespace CfnLocationFSxONTAPPropsMixin {
          */
         readonly version?: string;
     }
+    /**
+     * Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-cmksecretconfig.html
+     */
+    interface CmkSecretConfigProperty {
+        /**
+         * Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn.
+         *
+         * DataSync provides this key to AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-cmksecretconfig.html#cfn-datasync-locationfsxontap-cmksecretconfig-kmskeyarn
+         */
+        readonly kmsKeyArn?: string;
+        /**
+         * Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-cmksecretconfig.html#cfn-datasync-locationfsxontap-cmksecretconfig-secretarn
+         */
+        readonly secretArn?: string;
+    }
+    /**
+     * Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-customsecretconfig.html
+     */
+    interface CustomSecretConfigProperty {
+        /**
+         * Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-customsecretconfig.html#cfn-datasync-locationfsxontap-customsecretconfig-secretaccessrolearn
+         */
+        readonly secretAccessRoleArn?: string;
+        /**
+         * Specifies the ARN for a customer created AWS Secrets Manager secret.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-customsecretconfig.html#cfn-datasync-locationfsxontap-customsecretconfig-secretarn
+         */
+        readonly secretArn?: string;
+    }
+    /**
+     * Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location.
+     *
+     * DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-managedsecretconfig.html
+     */
+    interface ManagedSecretConfigProperty {
+        /**
+         * Specifies the ARN for an AWS Secrets Manager secret.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxontap-managedsecretconfig.html#cfn-datasync-locationfsxontap-managedsecretconfig-secretarn
+         */
+        readonly secretArn?: string;
+    }
     /**
      * Specifies the Network File System (NFS) protocol configuration that AWS DataSync uses to access a storage virtual machine (SVM) on your Amazon FSx for NetApp ONTAP file system.
      *
@@ -748,7 +830,7 @@ export interface CfnLocationFSxONTAPMixinProps {
 export declare class CfnLocationFSxOpenZFSPropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnLocationFSxOpenZFSMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::LocationFSxOpenZFS`.
      *
@@ -878,7 +960,7 @@ export interface CfnLocationFSxOpenZFSMixinProps {
 export declare class CfnLocationFSxWindowsPropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnLocationFSxWindowsMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::LocationFSxWindows`.
      *
@@ -895,6 +977,69 @@ export declare class CfnLocationFSxWindowsPropsMixin extends cdk.Mixin implement
      */
     applyTo(construct: constructs.IConstruct): void;
 }
+export declare namespace CfnLocationFSxWindowsPropsMixin {
+    /**
+     * Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxwindows-cmksecretconfig.html
+     */
+    interface CmkSecretConfigProperty {
+        /**
+         * Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn.
+         *
+         * DataSync provides this key to AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxwindows-cmksecretconfig.html#cfn-datasync-locationfsxwindows-cmksecretconfig-kmskeyarn
+         */
+        readonly kmsKeyArn?: string;
+        /**
+         * Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxwindows-cmksecretconfig.html#cfn-datasync-locationfsxwindows-cmksecretconfig-secretarn
+         */
+        readonly secretArn?: string;
+    }
+    /**
+     * Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxwindows-customsecretconfig.html
+     */
+    interface CustomSecretConfigProperty {
+        /**
+         * Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxwindows-customsecretconfig.html#cfn-datasync-locationfsxwindows-customsecretconfig-secretaccessrolearn
+         */
+        readonly secretAccessRoleArn?: string;
+        /**
+         * Specifies the ARN for a customer created AWS Secrets Manager secret.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxwindows-customsecretconfig.html#cfn-datasync-locationfsxwindows-customsecretconfig-secretarn
+         */
+        readonly secretArn?: string;
+    }
+    /**
+     * Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location.
+     *
+     * DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxwindows-managedsecretconfig.html
+     */
+    interface ManagedSecretConfigProperty {
+        /**
+         * Specifies the ARN for an AWS Secrets Manager secret.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationfsxwindows-managedsecretconfig.html#cfn-datasync-locationfsxwindows-managedsecretconfig-secretarn
+         */
+        readonly secretArn?: string;
+    }
+}
 /**
  * Properties for CfnLocationFSxWindowsPropsMixin
  *
@@ -903,6 +1048,18 @@ export declare class CfnLocationFSxWindowsPropsMixin extends cdk.Mixin implement
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationfsxwindows.html
  */
 export interface CfnLocationFSxWindowsMixinProps {
+    /**
+     * Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationfsxwindows.html#cfn-datasync-locationfsxwindows-cmksecretconfig
+     */
+    readonly cmkSecretConfig?: CfnLocationFSxWindowsPropsMixin.CmkSecretConfigProperty | cdk.IResolvable;
+    /**
+     * Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationfsxwindows.html#cfn-datasync-locationfsxwindows-customsecretconfig
+     */
+    readonly customSecretConfig?: CfnLocationFSxWindowsPropsMixin.CustomSecretConfigProperty | cdk.IResolvable;
     /**
      * Specifies the name of the Windows domain that the FSx for Windows File Server file system belongs to.
      *
@@ -969,7 +1126,7 @@ export interface CfnLocationFSxWindowsMixinProps {
 export declare class CfnLocationHDFSPropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnLocationHDFSMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::LocationHDFS`.
      *
@@ -1039,6 +1196,67 @@ export declare namespace CfnLocationHDFSPropsMixin {
          */
         readonly port?: number;
     }
+    /**
+     * Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationhdfs-cmksecretconfig.html
+     */
+    interface CmkSecretConfigProperty {
+        /**
+         * Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn.
+         *
+         * DataSync provides this key to AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationhdfs-cmksecretconfig.html#cfn-datasync-locationhdfs-cmksecretconfig-kmskeyarn
+         */
+        readonly kmsKeyArn?: string;
+        /**
+         * Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationhdfs-cmksecretconfig.html#cfn-datasync-locationhdfs-cmksecretconfig-secretarn
+         */
+        readonly secretArn?: string;
+    }
+    /**
+     * Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationhdfs-customsecretconfig.html
+     */
+    interface CustomSecretConfigProperty {
+        /**
+         * Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationhdfs-customsecretconfig.html#cfn-datasync-locationhdfs-customsecretconfig-secretaccessrolearn
+         */
+        readonly secretAccessRoleArn?: string;
+        /**
+         * Specifies the ARN for a customer created AWS Secrets Manager secret.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationhdfs-customsecretconfig.html#cfn-datasync-locationhdfs-customsecretconfig-secretarn
+         */
+        readonly secretArn?: string;
+    }
+    /**
+     * Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location.
+     *
+     * DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationhdfs-managedsecretconfig.html
+     */
+    interface ManagedSecretConfigProperty {
+        /**
+         * Specifies the ARN for an AWS Secrets Manager secret.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationhdfs-managedsecretconfig.html#cfn-datasync-locationhdfs-managedsecretconfig-secretarn
+         */
+        readonly secretArn?: string;
+    }
 }
 /**
  * Properties for CfnLocationHDFSPropsMixin
@@ -1068,6 +1286,18 @@ export interface CfnLocationHDFSMixinProps {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationhdfs.html#cfn-datasync-locationhdfs-blocksize
      */
     readonly blockSize?: number;
+    /**
+     * Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationhdfs.html#cfn-datasync-locationhdfs-cmksecretconfig
+     */
+    readonly cmkSecretConfig?: CfnLocationHDFSPropsMixin.CmkSecretConfigProperty | cdk.IResolvable;
+    /**
+     * Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationhdfs.html#cfn-datasync-locationhdfs-customsecretconfig
+     */
+    readonly customSecretConfig?: CfnLocationHDFSPropsMixin.CustomSecretConfigProperty | cdk.IResolvable;
     /**
      * The Kerberos key table (keytab) that contains mappings between the defined Kerberos principal and the encrypted keys.
      *
@@ -1157,7 +1387,7 @@ export interface CfnLocationHDFSMixinProps {
 export declare class CfnLocationNFSPropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnLocationNFSMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::LocationNFS`.
      *
@@ -1216,7 +1446,7 @@ export declare namespace CfnLocationNFSPropsMixin {
          *
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationnfs-onpremconfig.html#cfn-datasync-locationnfs-onpremconfig-agentarns
          */
-        readonly agentArns?: Array<string>;
+        readonly agentArns?: Array<dataSyncRefs.IAgentRef | string>;
     }
 }
 /**
@@ -1277,7 +1507,7 @@ export interface CfnLocationNFSMixinProps {
 export declare class CfnLocationObjectStoragePropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnLocationObjectStorageMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::LocationObjectStorage`.
      *
@@ -1495,7 +1725,7 @@ export interface CfnLocationObjectStorageMixinProps {
 export declare class CfnLocationS3PropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnLocationS3MixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::LocationS3`.
      *
@@ -1528,7 +1758,7 @@ export declare namespace CfnLocationS3PropsMixin {
          *
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locations3-s3config.html#cfn-datasync-locations3-s3config-bucketaccessrolearn
          */
-        readonly bucketAccessRoleArn?: string;
+        readonly bucketAccessRoleArn?: iamRefs.IRoleRef | string;
     }
 }
 /**
@@ -1544,7 +1774,7 @@ export interface CfnLocationS3MixinProps {
      *
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locations3.html#cfn-datasync-locations3-s3bucketarn
      */
-    readonly s3BucketArn?: string;
+    readonly s3BucketArn?: s3Refs.IBucketRef | string;
     /**
      * The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that is used to access an Amazon S3 bucket.
      *
@@ -1597,7 +1827,7 @@ export interface CfnLocationS3MixinProps {
 export declare class CfnLocationSMBPropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnLocationSMBMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::LocationSMB`.
      *
@@ -1858,7 +2088,7 @@ export interface CfnLocationSMBMixinProps {
 export declare class CfnTaskPropsMixin extends cdk.Mixin implements constructs.IMixin {
     protected static readonly CFN_PROPERTY_KEYS: Array<string>;
     protected readonly props: CfnTaskMixinProps;
-    protected readonly strategy: mixins.PropertyMergeStrategy;
+    protected readonly strategy: mixins.IMergeStrategy;
     /**
      * Create a mixin to apply properties to `AWS::DataSync::Task`.
      *
@@ -2446,13 +2676,13 @@ export interface CfnTaskMixinProps {
      *
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-task.html#cfn-datasync-task-cloudwatchloggrouparn
      */
-    readonly cloudWatchLogGroupArn?: string;
+    readonly cloudWatchLogGroupArn?: logsRefs.ILogGroupRef | string;
     /**
      * The Amazon Resource Name (ARN) of an AWS storage resource's location.
      *
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-task.html#cfn-datasync-task-destinationlocationarn
      */
-    readonly destinationLocationArn?: string;
+    readonly destinationLocationArn?: dataSyncRefs.ILocationEFSRef | dataSyncRefs.ILocationS3Ref | string;
     /**
      * Specifies exclude filters that define the files, objects, and folders in your source location that you don't want DataSync to transfer.
      *
@@ -2502,7 +2732,7 @@ export interface CfnTaskMixinProps {
      *
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-task.html#cfn-datasync-task-sourcelocationarn
      */
-    readonly sourceLocationArn?: string;
+    readonly sourceLocationArn?: dataSyncRefs.ILocationNFSRef | dataSyncRefs.ILocationS3Ref | string;
     /**
      * Specifies the tags that you want to apply to your task.
      *