@aws-cdk/mixins-preview 2.243.0-alpha.0 → 2.244.0-alpha.0

package/lib/services/aws-logs/logs-delivery.js

@@ -26,7 +26,7 @@ var S3LogsDeliveryPermissionsVersion;
  * Delivers vended logs to an S3 Bucket.
  */
 class S3LogsDelivery {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.S3LogsDelivery", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.S3LogsDelivery", version: "2.244.0-alpha.0" };
     bucket;
     permissions;
     kmsKey;
@@ -86,7 +86,7 @@ exports.S3LogsDelivery = S3LogsDelivery;
  * Delivers vended logs to a Firehose Delivery Stream.
  */
 class FirehoseLogsDelivery {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.FirehoseLogsDelivery", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.FirehoseLogsDelivery", version: "2.244.0-alpha.0" };
     deliveryStream;
     outputFormat;
     providedFields;
@@ -140,7 +140,7 @@ exports.FirehoseLogsDelivery = FirehoseLogsDelivery;
  * Delivers vended logs to a CloudWatch Log Group.
  */
 class LogGroupLogsDelivery {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.LogGroupLogsDelivery", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.LogGroupLogsDelivery", version: "2.244.0-alpha.0" };
     logGroup;
     outputFormat;
     providedFields;
@@ -195,7 +195,7 @@ exports.LogGroupLogsDelivery = LogGroupLogsDelivery;
  * Delivers vended logs to AWS X-Ray.
  */
 class XRayLogsDelivery {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.XRayLogsDelivery", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.XRayLogsDelivery", version: "2.244.0-alpha.0" };
     providedFields;
     mandatoryFields;
     /**
@@ -243,7 +243,7 @@ exports.XRayLogsDelivery = XRayLogsDelivery;
  * Delivers vended logs to a CfnDeliveryDestination specified by an arn.
  */
 class DestinationLogsDelivery {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.DestinationLogsDelivery", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.DestinationLogsDelivery", version: "2.244.0-alpha.0" };
     providedFields;
     mandatoryFields;
     /**

package/lib/services/aws-logs/logs-destination.d.ts

@@ -1,7 +1,7 @@
 import * as logs from 'aws-cdk-lib/aws-logs';
 import * as s3 from 'aws-cdk-lib/aws-s3';
 import type { Construct } from 'constructs';
-import type { IKeyRef } from 'aws-cdk-lib/aws-kms';
+import { type IKeyRef } from 'aws-cdk-lib/aws-kms';
 import type { IDeliveryStreamRef } from 'aws-cdk-lib/aws-kinesisfirehose';
 import { S3LogsDeliveryPermissionsVersion } from './logs-delivery';
 /**
@@ -78,21 +78,13 @@ export interface XRayDeliveryDestinationProps {
 export declare class S3DeliveryDestination extends logs.CfnDeliveryDestination {
     private readonly bucket;
     private readonly permissions;
-    private readonly kmsKey;
     private readonly sourceAccount;
     constructor(scope: Construct, id: string, props: S3DeliveryDestinationProps);
-    /**
-     * Gets or creates a bucket policy for the S3 destination Bucket.
-     * @param scope - The construct scope
-     * @returns The bucket policy
-     */
-    private getOrCreateBucketPolicy;
     /**
      * Grants permissions for log delivery to the bucket policy.
      * @param policy - The bucket policy
      */
     private grantLogsDelivery;
-    private findEncryptionKey;
     private addToEncryptionKeyPolicy;
 }
 /**
@@ -107,12 +99,6 @@ export declare class FirehoseDeliveryDestination extends logs.CfnDeliveryDestina
 export declare class CloudwatchDeliveryDestination extends logs.CfnDeliveryDestination {
     private readonly logGroup;
     constructor(scope: Construct, id: string, props: CloudwatchDeliveryDestinationProps);
-    /**
-     * Gets or creates a singleton Logs Resource Policy.
-     * @param scope - The construct scope
-     * @returns The resource policy
-     */
-    private getOrCreateLogsResourcePolicy;
     /**
      * Grants permissions for log delivery to the resource policy.
      * @param policy - The resource policy

package/lib/services/aws-logs/logs-destination.js

@@ -6,18 +6,17 @@ const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
 const core_1 = require("aws-cdk-lib/core");
 const logs = require("aws-cdk-lib/aws-logs");
 const s3 = require("aws-cdk-lib/aws-s3");
-const reflections_1 = require("./reflections");
 const aws_iam_1 = require("aws-cdk-lib/aws-iam");
+const aws_kms_1 = require("aws-cdk-lib/aws-kms");
 const xray = require("./xray-policy");
 const logs_delivery_1 = require("./logs-delivery");
 /**
  * Creates an S3 delivery destination for CloudWatch Logs.
  */
 class S3DeliveryDestination extends logs.CfnDeliveryDestination {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.S3DeliveryDestination", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.S3DeliveryDestination", version: "2.244.0-alpha.0" };
     bucket;
     permissions;
-    kmsKey;
     sourceAccount;
     constructor(scope, id, props) {
         super(scope, id, {
@@ -40,114 +39,62 @@ class S3DeliveryDestination extends logs.CfnDeliveryDestination {
         }
         this.bucket = props.bucket;
         this.permissions = props.permissionsVersion ? props.permissionsVersion : logs_delivery_1.S3LogsDeliveryPermissionsVersion.V2;
-        this.kmsKey = props.encryptionKey;
         this.sourceAccount = props.sourceAccountId;
-        const bucketPolicy = this.getOrCreateBucketPolicy(scope);
-        this.grantLogsDelivery(bucketPolicy);
+        const bucketPolicy = this.grantLogsDelivery();
         this.node.addDependency(bucketPolicy);
-        const kmsKey = this.findEncryptionKey();
-        if (kmsKey) {
-            this.addToEncryptionKeyPolicy(kmsKey);
-        }
-    }
-    /**
-     * Gets or creates a bucket policy for the S3 destination Bucket.
-     * @param scope - The construct scope
-     * @returns The bucket policy
-     */
-    getOrCreateBucketPolicy(scope) {
-        const existingPolicy = (0, reflections_1.tryFindBucketPolicyForBucket)(this.bucket);
-        return existingPolicy ?? new s3.CfnBucketPolicy(scope, 'BucketPolicy', {
-            bucket: this.bucket.bucketRef.bucketName,
-            policyDocument: {
-                Version: '2012-10-17',
-                Statement: [],
-            },
-        });
+        this.addToEncryptionKeyPolicy(aws_iam_1.EncryptedResources.of(this.bucket));
     }
     /**
      * Grants permissions for log delivery to the bucket policy.
      * @param policy - The bucket policy
      */
-    grantLogsDelivery(policy) {
-        const stack = core_1.Stack.of(policy);
-        const account = this.sourceAccount ? this.sourceAccount : stack.account;
-        // always required permissions
-        const statements = [
-            new aws_iam_1.PolicyStatement({
-                effect: aws_iam_1.Effect.ALLOW,
-                principals: [new aws_iam_1.ServicePrincipal('delivery.logs.amazonaws.com')],
-                actions: ['s3:PutObject'],
-                resources: [`${this.bucket.bucketRef.bucketArn}/AWSLogs/${account}/*`],
-                conditions: {
-                    StringEquals: {
-                        's3:x-amz-acl': 'bucket-owner-full-control',
-                        'aws:SourceAccount': account,
-                    },
-                    ArnLike: {
-                        'aws:SourceArn': `arn:${stack.partition}:logs:${stack.region}:${account}:delivery-source:*`,
-                    },
-                },
-            }),
-        ];
+    grantLogsDelivery() {
+        const account = this.sourceAccount ? this.sourceAccount : this.bucket.env.account;
+        const principal = new aws_iam_1.PrincipalWithConditions(new aws_iam_1.ServicePrincipal('delivery.logs.amazonaws.com'), {
+            StringEquals: {
+                's3:x-amz-acl': 'bucket-owner-full-control',
+                'aws:SourceAccount': account,
+            },
+            ArnLike: {
+                'aws:SourceArn': `arn:${core_1.Aws.PARTITION}:logs:${this.bucket.env.region}:${account}:delivery-source:*`,
+            },
+        });
+        const bucketGrants = s3.BucketGrants.fromBucket(this.bucket).actionsOnObjectKeys(principal, `AWSLogs/${account}/*`, 's3:PutObject');
         if (this.permissions == 'V1') {
-            statements.push(new aws_iam_1.PolicyStatement({
-                effect: aws_iam_1.Effect.ALLOW,
-                principals: [new aws_iam_1.ServicePrincipal('delivery.logs.amazonaws.com')],
-                actions: ['s3:GetBucketAcl', 's3:ListBucket'],
-                resources: [this.bucket.bucketRef.bucketArn],
-                conditions: {
-                    StringEquals: {
-                        'aws:SourceAccount': account,
-                    },
-                    ArnLike: {
-                        'aws:SourceArn': `arn:${stack.partition}:logs:${stack.region}:${account}:*`,
-                    },
+            const v1Principal = new aws_iam_1.PrincipalWithConditions(new aws_iam_1.ServicePrincipal('delivery.logs.amazonaws.com'), {
+                StringEquals: {
+                    'aws:SourceAccount': account,
+                },
+                ArnLike: {
+                    'aws:SourceArn': `arn:${core_1.Aws.PARTITION}:logs:${this.bucket.env.region}:${account}:*`,
                 },
-            }));
+            });
+            s3.BucketGrants.fromBucket(this.bucket).actionsOnBucketAndObjectKeys(v1Principal, undefined, 's3:GetBucketAcl', 's3:ListBucket');
         }
-        core_1.Mixins.of(policy, core_1.ConstructSelector.onlyItself())
-            .apply(new s3.mixins.BucketPolicyStatements(statements));
+        return bucketGrants;
     }
-    findEncryptionKey() {
-        if (this.kmsKey) {
-            return (0, reflections_1.tryFindKmsKeyConstruct)(this.kmsKey);
+    addToEncryptionKeyPolicy(encryptedKey) {
+        if (!encryptedKey) {
+            return;
         }
-        return (0, reflections_1.tryFindKmsKeyforBucket)(this.bucket);
-    }
-    addToEncryptionKeyPolicy(key) {
-        const existingKeyPolicy = key.keyPolicy;
         const sourceArnPostfix = this.permissions === logs_delivery_1.S3LogsDeliveryPermissionsVersion.V1 ? '*' : 'delivery-source:*';
-        const account = this.sourceAccount ? this.sourceAccount : key.env.account;
-        const actions = this.sourceAccount ? ['kms:GenerateDataKey*'] : ['kms:Encrypt', 'kms:Decrypt', 'kms:ReEncrypt*', 'kms:GenerateDataKey*', 'kms:DescribeKey'];
-        const sid = 'AWS CDK: Allow Logs Delivery to use the key';
-        const keyStatement = new aws_iam_1.PolicyStatement({
-            sid,
-            effect: aws_iam_1.Effect.ALLOW,
-            principals: [new aws_iam_1.ServicePrincipal('delivery.logs.amazonaws.com')],
-            actions,
-            resources: ['*'],
-            conditions: {
-                StringEquals: {
-                    'aws:SourceAccount': [account],
-                },
-                ArnLike: {
-                    'aws:SourceArn': [`arn:${core_1.Aws.PARTITION}:logs:${key.env.region}:${account}:${sourceArnPostfix}`],
-                },
+        const account = this.sourceAccount ? this.sourceAccount : encryptedKey.env.account;
+        const principal = new aws_iam_1.PrincipalWithConditions(new aws_iam_1.ServicePrincipal('delivery.logs.amazonaws.com'), {
+            StringEquals: {
+                'aws:SourceAccount': [account],
+            },
+            ArnLike: {
+                'aws:SourceArn': [`arn:${core_1.Aws.PARTITION}:logs:${encryptedKey.env.region}:${account}:${sourceArnPostfix}`],
             },
         });
-        if (!existingKeyPolicy) {
-            key.keyPolicy = new aws_iam_1.PolicyDocument({
-                statements: [keyStatement],
-            });
-            return;
+        const actions = this.sourceAccount ? ['kms:GenerateDataKey*'] : ['kms:Encrypt', 'kms:Decrypt', 'kms:ReEncrypt*', 'kms:GenerateDataKey*', 'kms:DescribeKey'];
+        if (encryptedKey instanceof aws_kms_1.CfnKey) {
+            const keyGrant = aws_kms_1.KeyGrants.fromKey(encryptedKey);
+            keyGrant.actions(principal, ...actions);
         }
-        // Check if a statement with this SID already exists
-        const hasDuplicateSid = existingKeyPolicy.statements.some((stmt) => stmt.sid === sid);
-        if (hasDuplicateSid) {
-            return;
+        else {
+            encryptedKey.grantOnKey(principal, ...actions);
         }
-        existingKeyPolicy.addStatements(keyStatement);
     }
 }
 exports.S3DeliveryDestination = S3DeliveryDestination;
@@ -155,7 +102,7 @@ exports.S3DeliveryDestination = S3DeliveryDestination;
  * Firehose delivery destination for CloudWatch Logs.
  */
 class FirehoseDeliveryDestination extends logs.CfnDeliveryDestination {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.FirehoseDeliveryDestination", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.FirehoseDeliveryDestination", version: "2.244.0-alpha.0" };
     constructor(scope, id, props) {
         super(scope, id, {
             destinationResourceArn: props.deliveryStream.deliveryStreamRef.deliveryStreamArn,
@@ -183,7 +130,7 @@ exports.FirehoseDeliveryDestination = FirehoseDeliveryDestination;
  * CloudWatch delivery destination for CloudWatch Logs.
  */
 class CloudwatchDeliveryDestination extends logs.CfnDeliveryDestination {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.CloudwatchDeliveryDestination", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.CloudwatchDeliveryDestination", version: "2.244.0-alpha.0" };
     logGroup;
     constructor(scope, id, props) {
         super(scope, id, {
@@ -202,44 +149,25 @@ class CloudwatchDeliveryDestination extends logs.CfnDeliveryDestination {
             throw error;
         }
         this.logGroup = props.logGroup;
-        const logGroupPolicy = this.getOrCreateLogsResourcePolicy(scope);
-        this.grantLogsDelivery(logGroupPolicy);
-        this.node.addDependency(logGroupPolicy);
-    }
-    /**
-     * Gets or creates a singleton Logs Resource Policy.
-     * @param scope - The construct scope
-     * @returns The resource policy
-     */
-    getOrCreateLogsResourcePolicy(scope) {
-        const stack = core_1.Stack.of(scope);
-        const policyId = 'CdkLogGroupLogsDeliveryPolicy';
-        // Singleton policy per stack
-        const existingPolicy = stack.node.tryFindChild(policyId);
-        return existingPolicy ?? new logs.ResourcePolicy(stack, policyId, {
-            resourcePolicyName: core_1.Names.uniqueResourceName(scope, { maxLength: 255 }),
-        });
+        const logPolicy = this.grantLogsDelivery();
+        this.node.addDependency(logPolicy);
     }
     /**
      * Grants permissions for log delivery to the resource policy.
      * @param policy - The resource policy
      */
-    grantLogsDelivery(policy) {
-        const stack = core_1.Stack.of(policy);
-        policy.document.addStatements(new aws_iam_1.PolicyStatement({
-            effect: aws_iam_1.Effect.ALLOW,
-            principals: [new aws_iam_1.ServicePrincipal('delivery.logs.amazonaws.com')],
-            actions: ['logs:CreateLogStream', 'logs:PutLogEvents'],
-            resources: [`${this.logGroup.logGroupRef.logGroupArn}:log-stream:*`],
-            conditions: {
-                StringEquals: {
-                    'aws:SourceAccount': stack.account,
-                },
-                ArnLike: {
-                    'aws:SourceArn': `arn:${stack.partition}:logs:${stack.region}:${stack.account}:*`,
-                },
+    grantLogsDelivery() {
+        const stack = core_1.Stack.of(this.logGroup);
+        const principal = new aws_iam_1.PrincipalWithConditions(new aws_iam_1.ServicePrincipal('delivery.logs.amazonaws.com'), {
+            StringEquals: {
+                'aws:SourceAccount': stack.account,
             },
-        }));
+            ArnLike: {
+                'aws:SourceArn': `arn:${stack.partition}:logs:${stack.region}:${stack.account}:*`,
+            },
+        });
+        const logGrants = logs.LogGroupGrants.fromLogGroup(this.logGroup);
+        return logGrants.write(principal);
     }
 }
 exports.CloudwatchDeliveryDestination = CloudwatchDeliveryDestination;
@@ -247,7 +175,7 @@ exports.CloudwatchDeliveryDestination = CloudwatchDeliveryDestination;
  * XRay delivery destination for XRay traces.
  */
 class XRayDeliveryDestination extends logs.CfnDeliveryDestination {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.XRayDeliveryDestination", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_logs.XRayDeliveryDestination", version: "2.244.0-alpha.0" };
     constructor(scope, id, props) {
         super(scope, id, {
             name: deliveryDestName('xray', id, scope),

package/lib/services/aws-logs/reflections.d.ts

@@ -1,21 +1,3 @@
-/**
- * ATTENTION: these functions are partly copied from the aws-cdk-lib package, because
- * they are not exported from there. Before mixins goes GA, vended logs should be
- * updated to use resource traits instead and duplicate reflections removed.
- */
 import type { IConstruct } from 'constructs';
-import type { CfnBucketPolicy } from 'aws-cdk-lib/aws-s3';
-import { type IBucketRef } from 'aws-cdk-lib/aws-s3';
 import type { CfnDeliverySource } from 'aws-cdk-lib/aws-logs';
-import type { CfnKey, IKeyRef } from 'aws-cdk-lib/aws-kms';
-/**
- * Attempts to find an existing bucket policy for the specified S3 bucket.
- * Finds the closest matching policy to the specified bucket.
- *
- * @param bucket - The S3 bucket reference to search for an associated bucket policy
- * @returns The bucket policy if found, undefined otherwise
- */
-export declare function tryFindBucketPolicyForBucket(bucket: IBucketRef): CfnBucketPolicy | undefined;
 export declare function tryFindDeliverySourceForResource(source: IConstruct, sourceArn: string, logType: string): CfnDeliverySource | undefined;
-export declare function tryFindKmsKeyforBucket(bucket: IBucketRef): CfnKey | undefined;
-export declare function tryFindKmsKeyConstruct(kmsKey: IKeyRef): CfnKey | undefined;

package/lib/services/aws-logs/reflections.js

@@ -1,39 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.tryFindBucketPolicyForBucket = tryFindBucketPolicyForBucket;
 exports.tryFindDeliverySourceForResource = tryFindDeliverySourceForResource;
-exports.tryFindKmsKeyforBucket = tryFindKmsKeyforBucket;
-exports.tryFindKmsKeyConstruct = tryFindKmsKeyConstruct;
 const helpers_internal_1 = require("aws-cdk-lib/core/lib/helpers-internal");
-/**
- * Attempts to find an existing bucket policy for the specified S3 bucket.
- * Finds the closest matching policy to the specified bucket.
- *
- * @param bucket - The S3 bucket reference to search for an associated bucket policy
- * @returns The bucket policy if found, undefined otherwise
- */
-function tryFindBucketPolicyForBucket(bucket) {
-    return (0, helpers_internal_1.findClosestRelatedResource)(bucket, 'AWS::S3::BucketPolicy', (b, policy) => {
-        const possibleRefs = new Set([b.ref, b.bucketName, b.bucketArn, b.bucketRef?.bucketName, b.bucketRef?.bucketArn].filter(Boolean));
-        return possibleRefs.has(policy.bucket) || String(policy.bucket).includes(b.node.id);
-    });
-}
 function tryFindDeliverySourceForResource(source, sourceArn, logType) {
     return (0, helpers_internal_1.findClosestRelatedResource)(source, 'AWS::Logs::DeliverySource', (_, deliverySource) => deliverySource.resourceArn === sourceArn && deliverySource.logType === logType);
 }
-function tryFindKmsKeyforBucket(bucket) {
-    const cfnBucket = tryFindBucketConstruct(bucket);
-    const kmsMasterKeyId = cfnBucket && Array.isArray(cfnBucket.bucketEncryption?.serverSideEncryptionConfiguration) ?
-        cfnBucket.bucketEncryption.serverSideEncryptionConfiguration[0]?.serverSideEncryptionByDefault?.kmsMasterKeyId
-        : undefined;
-    if (!kmsMasterKeyId) {
-        return undefined;
-    }
-    return (0, helpers_internal_1.findClosestRelatedResource)(bucket, 'AWS::KMS::Key', (_, key) => key.ref === kmsMasterKeyId || key.attrKeyId === kmsMasterKeyId || key.attrArn === kmsMasterKeyId);
-}
-function tryFindKmsKeyConstruct(kmsKey) {
-    return (0, helpers_internal_1.findL1FromRef)(kmsKey, 'AWS::KMS::Key', (cfn, ref) => ref.keyRef === cfn.keyRef);
-}
-function tryFindBucketConstruct(bucket) {
-    return (0, helpers_internal_1.findL1FromRef)(bucket, 'AWS::S3::Bucket', (cfn, ref) => ref.bucketRef == cfn.bucketRef);
-}

package/lib/services/aws-m2/logs-delivery-mixins.generated.js

@@ -15,7 +15,7 @@ const service = require("aws-cdk-lib/aws-m2");
  * @stability external
  */
 class CfnApplicationConfigLogs {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationConfigLogs", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationConfigLogs", version: "2.244.0-alpha.0" };
     /**
      * Send logs to an S3 Bucket
      *
@@ -112,7 +112,7 @@ exports.CfnApplicationConfigLogs = CfnApplicationConfigLogs;
  * @stability external
  */
 class CfnApplicationBatchJobLogs {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationBatchJobLogs", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationBatchJobLogs", version: "2.244.0-alpha.0" };
     /**
      * Send logs to an S3 Bucket
      *
@@ -209,7 +209,7 @@ exports.CfnApplicationBatchJobLogs = CfnApplicationBatchJobLogs;
  * @stability external
  */
 class CfnApplicationConsoleLogs {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationConsoleLogs", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationConsoleLogs", version: "2.244.0-alpha.0" };
     /**
      * Send logs to an S3 Bucket
      *
@@ -306,7 +306,7 @@ exports.CfnApplicationConsoleLogs = CfnApplicationConsoleLogs;
  * @stability external
  */
 class CfnApplicationDatasetImportLogs {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationDatasetImportLogs", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationDatasetImportLogs", version: "2.244.0-alpha.0" };
     /**
      * Send logs to an S3 Bucket
      *
@@ -406,7 +406,7 @@ exports.CfnApplicationDatasetImportLogs = CfnApplicationDatasetImportLogs;
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-m2-application.html
  */
 class CfnApplicationLogsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationLogsMixin", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationLogsMixin", version: "2.244.0-alpha.0" };
     static CONFIG_LOGS = new CfnApplicationConfigLogs();
     static BATCH_JOB_LOGS = new CfnApplicationBatchJobLogs();
     static CONSOLE_LOGS = new CfnApplicationConsoleLogs();
@@ -455,7 +455,7 @@ exports.CfnApplicationLogsMixin = CfnApplicationLogsMixin;
  * Output Format options for each destination of CfnApplicationConfigLogs.
  */
 class CfnApplicationConfigLogsOutputFormat {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationConfigLogsOutputFormat", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationConfigLogsOutputFormat", version: "2.244.0-alpha.0" };
 }
 exports.CfnApplicationConfigLogsOutputFormat = CfnApplicationConfigLogsOutputFormat;
 (function (CfnApplicationConfigLogsOutputFormat) {
@@ -482,7 +482,7 @@ exports.CfnApplicationConfigLogsOutputFormat = CfnApplicationConfigLogsOutputFor
  * Output Format options for each destination of CfnApplicationBatchJobLogs.
  */
 class CfnApplicationBatchJobLogsOutputFormat {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationBatchJobLogsOutputFormat", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationBatchJobLogsOutputFormat", version: "2.244.0-alpha.0" };
 }
 exports.CfnApplicationBatchJobLogsOutputFormat = CfnApplicationBatchJobLogsOutputFormat;
 (function (CfnApplicationBatchJobLogsOutputFormat) {
@@ -509,7 +509,7 @@ exports.CfnApplicationBatchJobLogsOutputFormat = CfnApplicationBatchJobLogsOutpu
  * Output Format options for each destination of CfnApplicationConsoleLogs.
  */
 class CfnApplicationConsoleLogsOutputFormat {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationConsoleLogsOutputFormat", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationConsoleLogsOutputFormat", version: "2.244.0-alpha.0" };
 }
 exports.CfnApplicationConsoleLogsOutputFormat = CfnApplicationConsoleLogsOutputFormat;
 (function (CfnApplicationConsoleLogsOutputFormat) {
@@ -536,7 +536,7 @@ exports.CfnApplicationConsoleLogsOutputFormat = CfnApplicationConsoleLogsOutputF
  * Output Format options for each destination of CfnApplicationDatasetImportLogs.
  */
 class CfnApplicationDatasetImportLogsOutputFormat {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationDatasetImportLogsOutputFormat", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_m2.mixins.CfnApplicationDatasetImportLogsOutputFormat", version: "2.244.0-alpha.0" };
 }
 exports.CfnApplicationDatasetImportLogsOutputFormat = CfnApplicationDatasetImportLogsOutputFormat;
 (function (CfnApplicationDatasetImportLogsOutputFormat) {

package/lib/services/aws-managedblockchain/events.generated.js

@@ -7,7 +7,7 @@ const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
  * EventBridge event pattern for aws.managedblockchain@ManagedBlockchainInvitationStatusChange
  */
 class ManagedBlockchainInvitationStatusChange {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_managedblockchain.events.ManagedBlockchainInvitationStatusChange", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_managedblockchain.events.ManagedBlockchainInvitationStatusChange", version: "2.244.0-alpha.0" };
     /**
      * EventBridge event pattern for Managed Blockchain Invitation Status Change
      */
@@ -57,7 +57,7 @@ function convertManagedBlockchainInvitationStatusChangeDetailToEventPattern(obj)
  * EventBridge event pattern for aws.managedblockchain@ManagedBlockchainProposalStatusChange
  */
 class ManagedBlockchainProposalStatusChange {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_managedblockchain.events.ManagedBlockchainProposalStatusChange", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_managedblockchain.events.ManagedBlockchainProposalStatusChange", version: "2.244.0-alpha.0" };
     /**
      * EventBridge event pattern for Managed Blockchain Proposal Status Change
      */

package/lib/services/aws-medialive/events.generated.js

@@ -7,7 +7,7 @@ const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
  * EventBridge event pattern for aws.medialive@MediaLiveChannelAlert
  */
 class MediaLiveChannelAlert {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.MediaLiveChannelAlert", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.MediaLiveChannelAlert", version: "2.244.0-alpha.0" };
     /**
      * EventBridge event pattern for MediaLive Channel Alert
      */
@@ -55,7 +55,7 @@ function convertMediaLiveChannelAlertDetailToEventPattern(obj) {
  * EventBridge event pattern for aws.medialive@MediaLiveChannelStateChange
  */
 class MediaLiveChannelStateChange {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.MediaLiveChannelStateChange", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.MediaLiveChannelStateChange", version: "2.244.0-alpha.0" };
     /**
      * EventBridge event pattern for MediaLive Channel State Change
      */
@@ -102,7 +102,7 @@ function convertMediaLiveChannelStateChangeDetailToEventPattern(obj) {
  * EventBridge event pattern for aws.medialive@MediaLiveMultiplexAlert
  */
 class MediaLiveMultiplexAlert {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.MediaLiveMultiplexAlert", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.MediaLiveMultiplexAlert", version: "2.244.0-alpha.0" };
     /**
      * EventBridge event pattern for MediaLive Multiplex Alert
      */
@@ -148,7 +148,7 @@ function convertMediaLiveMultiplexAlertDetailToEventPattern(obj) {
  * EventBridge event pattern for aws.medialive@MediaLiveMultiplexStateChange
  */
 class MediaLiveMultiplexStateChange {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.MediaLiveMultiplexStateChange", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.MediaLiveMultiplexStateChange", version: "2.244.0-alpha.0" };
     /**
      * EventBridge event pattern for MediaLive Multiplex State Change
      */
@@ -193,7 +193,7 @@ function convertMediaLiveMultiplexStateChangeDetailToEventPattern(obj) {
  * EventBridge event pattern for aws.medialive@MediaLiveChannelInputChange
  */
 class MediaLiveChannelInputChange {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.MediaLiveChannelInputChange", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.MediaLiveChannelInputChange", version: "2.244.0-alpha.0" };
     /**
      * EventBridge event pattern for MediaLive Channel Input Change
      */
@@ -240,7 +240,7 @@ function convertMediaLiveChannelInputChangeDetailToEventPattern(obj, iRef) {
  * EventBridge event patterns for Channel
  */
 class ChannelEvents {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.ChannelEvents", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_medialive.events.ChannelEvents", version: "2.244.0-alpha.0" };
     /**
      * Create ChannelEvents from a Channel reference
      */

package/lib/services/aws-mediapackagev2/logs-delivery-mixins.generated.js

@@ -15,7 +15,7 @@ const service = require("aws-cdk-lib/aws-mediapackagev2");
  * @stability external
  */
 class CfnChannelGroupEgressAccessLogs {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_mediapackagev2.mixins.CfnChannelGroupEgressAccessLogs", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_mediapackagev2.mixins.CfnChannelGroupEgressAccessLogs", version: "2.244.0-alpha.0" };
     /**
      * Send logs to an S3 Bucket
      *
@@ -123,7 +123,7 @@ exports.CfnChannelGroupEgressAccessLogs = CfnChannelGroupEgressAccessLogs;
  * @stability external
  */
 class CfnChannelGroupIngressAccessLogs {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_mediapackagev2.mixins.CfnChannelGroupIngressAccessLogs", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_mediapackagev2.mixins.CfnChannelGroupIngressAccessLogs", version: "2.244.0-alpha.0" };
     /**
      * Send logs to an S3 Bucket
      *
@@ -232,7 +232,7 @@ exports.CfnChannelGroupIngressAccessLogs = CfnChannelGroupIngressAccessLogs;
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-channelgroup.html
  */
 class CfnChannelGroupLogsMixin extends cdk.Mixin {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_mediapackagev2.mixins.CfnChannelGroupLogsMixin", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_mediapackagev2.mixins.CfnChannelGroupLogsMixin", version: "2.244.0-alpha.0" };
     static EGRESS_ACCESS_LOGS = new CfnChannelGroupEgressAccessLogs();
     static INGRESS_ACCESS_LOGS = new CfnChannelGroupIngressAccessLogs();
     logType;
@@ -279,7 +279,7 @@ exports.CfnChannelGroupLogsMixin = CfnChannelGroupLogsMixin;
  * Output Format options for each destination of CfnChannelGroupEgressAccessLogs.
  */
 class CfnChannelGroupEgressAccessLogsOutputFormat {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_mediapackagev2.mixins.CfnChannelGroupEgressAccessLogsOutputFormat", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_mediapackagev2.mixins.CfnChannelGroupEgressAccessLogsOutputFormat", version: "2.244.0-alpha.0" };
 }
 exports.CfnChannelGroupEgressAccessLogsOutputFormat = CfnChannelGroupEgressAccessLogsOutputFormat;
 (function (CfnChannelGroupEgressAccessLogsOutputFormat) {
@@ -331,7 +331,7 @@ var CfnChannelGroupEgressAccessLogsRecordFields;
  * Output Format options for each destination of CfnChannelGroupIngressAccessLogs.
  */
 class CfnChannelGroupIngressAccessLogsOutputFormat {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_mediapackagev2.mixins.CfnChannelGroupIngressAccessLogsOutputFormat", version: "2.243.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/mixins-preview.aws_mediapackagev2.mixins.CfnChannelGroupIngressAccessLogsOutputFormat", version: "2.244.0-alpha.0" };
 }
 exports.CfnChannelGroupIngressAccessLogsOutputFormat = CfnChannelGroupIngressAccessLogsOutputFormat;
 (function (CfnChannelGroupIngressAccessLogsOutputFormat) {