@rio-cloud/cdk-v2-constructs 6.12.0 → 6.12.2

package/.jsii

@@ -14,13 +14,13 @@
     "@aws-sdk/client-organizations": "^3.675.0",
     "@aws-sdk/client-secrets-manager": "^3.675.0",
     "@aws-sdk/client-ssm": "^3.675.0",
-    "@datadog/datadog-api-client": "^1.24.0",
+    "@datadog/datadog-api-client": "^1.29.0",
     "aws-lambda": "^1.0.7",
     "js-yaml": "~4.1.0"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.161.1",
-    "constructs": "^10.3.0"
+    "aws-cdk-lib": "^2.163.0",
+    "constructs": "^10.4.2"
   },
   "dependencyClosure": {
     "@aws-cdk/asset-awscli-v1": {
@@ -3872,7 +3872,7 @@
     "stability": "stable"
   },
   "homepage": "https://bitbucket.collaboration-man.com/projects/RIODEV/repos/cdk-v2-constructs/",
-  "jsiiVersion": "5.5.2 (build 51c1bde)",
+  "jsiiVersion": "5.5.4 (build 1378d94)",
   "keywords": [
     "cdk"
   ],
@@ -3966,7 +3966,7 @@
         },
         "locationInModule": {
           "filename": "src/construct.ts",
-          "line": 498
+          "line": 481
         },
         "parameters": [
           {
@@ -5200,6 +5200,638 @@
       "name": "Criticality",
       "symbolId": "src/backup/backup-policy:Criticality"
     },
+    "@rio-cloud/cdk-v2-constructs.CspConfig": {
+      "assembly": "@rio-cloud/cdk-v2-constructs",
+      "datatype": true,
+      "docs": {
+        "stability": "stable"
+      },
+      "fqn": "@rio-cloud/cdk-v2-constructs.CspConfig",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
+        "line": 88
+      },
+      "name": "CspConfig",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Include ConfigCat."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
+            "line": 102
+          },
+          "name": "configCat",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "You can define custom values for any CSP directive with this."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
+            "line": 111
+          },
+          "name": "customDirectives",
+          "optional": true,
+          "type": {
+            "fqn": "@rio-cloud/cdk-v2-constructs.CspDirectives"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Include Datadog."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
+            "line": 99
+          },
+          "name": "datadog",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Include Google Analytics / Google Tag manager."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
+            "line": 90
+          },
+          "name": "googleAnalytics",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Include Here Maps."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
+            "line": 105
+          },
+          "name": "here",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Prints the generated CSP to the console."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
+            "line": 108
+          },
+          "name": "logOutput",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Include Sentry."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
+            "line": 93
+          },
+          "name": "sentry",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Include Split.io."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
+            "line": 96
+          },
+          "name": "split",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        }
+      ],
+      "symbolId": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution:CspConfig"
+    },
+    "@rio-cloud/cdk-v2-constructs.CspDirectives": {
+      "assembly": "@rio-cloud/cdk-v2-constructs",
+      "datatype": true,
+      "docs": {
+        "stability": "stable"
+      },
+      "fqn": "@rio-cloud/cdk-v2-constructs.CspDirectives",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+        "line": 1
+      },
+      "name": "CspDirectives",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 16
+          },
+          "name": "baseUri",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 23
+          },
+          "name": "childSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 3
+          },
+          "name": "connectSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 2
+          },
+          "name": "defaultSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 4
+          },
+          "name": "fontSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 18
+          },
+          "name": "formAction",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 19
+          },
+          "name": "frameAncestors",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 20
+          },
+          "name": "frameSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 5
+          },
+          "name": "imgSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 6
+          },
+          "name": "manifestSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 7
+          },
+          "name": "mediaSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 8
+          },
+          "name": "objectSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 21
+          },
+          "name": "reportTo",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 17
+          },
+          "name": "sandbox",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 9
+          },
+          "name": "scriptSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 11
+          },
+          "name": "scriptSrcAttr",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 10
+          },
+          "name": "scriptSrcElem",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 12
+          },
+          "name": "styleSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 14
+          },
+          "name": "styleSrcAttr",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 13
+          },
+          "name": "styleSrcElem",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 22
+          },
+          "name": "upgradeInsecureRequests",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy.ts",
+            "line": 15
+          },
+          "name": "workerSrc",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        }
+      ],
+      "symbolId": "src/contributions/cop-frontend/cloudfront/contentSecurityPolicy:CspDirectives"
+    },
     "@rio-cloud/cdk-v2-constructs.DataDogLogAlarm": {
       "assembly": "@rio-cloud/cdk-v2-constructs",
       "base": "constructs.Construct",
@@ -9083,7 +9715,7 @@
       "assembly": "@rio-cloud/cdk-v2-constructs",
       "base": "constructs.Construct",
       "docs": {
-        "remarks": "Intended for delivery of html documents. It sets some defaults a recommended by AWS and provides basic security header.",
+        "remarks": "Intended for delivery of html documents. It sets some defaults a recommended by AWS and provides CSP settings.",
         "stability": "stable",
         "summary": "A Construct which creates a default cloudfront distribution using a s3 bucket as origin."
       },
@@ -9094,7 +9726,7 @@
         },
         "locationInModule": {
           "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
-          "line": 78
+          "line": 122
         },
         "parameters": [
           {
@@ -9120,7 +9752,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
-        "line": 76
+        "line": 119
       },
       "name": "RioCloudfrontDistribution",
       "properties": [
@@ -9131,7 +9763,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
-            "line": 77
+            "line": 120
           },
           "name": "distribution",
           "type": {
@@ -9152,7 +9784,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
-        "line": 18
+        "line": 42
       },
       "name": "RioCloudfrontDistributionProps",
       "properties": [
@@ -9165,9 +9797,28 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
-            "line": 22
+            "line": 44
+          },
+          "name": "contentBucketName",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "deprecated": "Please use the declarative CSP config instead. See {@link cspConfig }.",
+            "remarks": "If not set, a rio Default will be used. The default should cover connections to split.io, sentry and datadog, as\nwell as a hash to support google tagManger. The latter might need to be adapted if you change the minification of\nthe index.html, in which case you can provide your csp here.",
+            "stability": "deprecated",
+            "summary": "The content Security Policy to be sent as a header when delivering the bucket content."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
+            "line": 70
           },
-          "name": "contentBucketName",
+          "name": "contentSecurityPolicy",
+          "optional": true,
           "type": {
             "primitive": "string"
           }
@@ -9175,19 +9826,19 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "If not set, a rio Default will be used. The default should cover connections to split.io, sentry and datadog,\nas well as a hash to support google tagManger. The latter might need to be adapted if you change the minification of\nthe index.html, in which case you can provide your csp here.",
+            "remarks": "The RIO defaults are always included, and you can choose which services you want to include (e.g. ConfigCat) or\nnot. You can also provide custom directives / values using the \"custom\" key.",
             "stability": "stable",
-            "summary": "The content Security Policy to be sent as a header when delivering the bucket content."
+            "summary": "Allows declaratively defining your desired CSP."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
-            "line": 42
+            "line": 78
           },
-          "name": "contentSecurityPolicy",
+          "name": "cspConfig",
           "optional": true,
           "type": {
-            "primitive": "string"
+            "fqn": "@rio-cloud/cdk-v2-constructs.CspConfig"
           }
         },
         {
@@ -9200,7 +9851,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
-            "line": 48
+            "line": 85
           },
           "name": "functionAssociations",
           "optional": true,
@@ -9216,14 +9867,14 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "If not given, the default hosted Zone\nprovided by RIO setup will be used.",
+            "remarks": "If not given, the default hosted Zone provided by RIO setup will be used.",
             "stability": "stable",
             "summary": "The hosted zone of the domain under which the content will be served."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
-            "line": 34
+            "line": 59
           },
           "name": "hostedZone",
           "optional": true,
@@ -9234,14 +9885,14 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "If not given, an empty string, i.e. no subDomain will be used.\nInstead, the name of the hosted zone will be used directly.",
+            "remarks": "If not given, an empty string, i.e. no subDomain will be used. Instead, the name of the hosted zone will be used\ndirectly.",
             "stability": "stable",
             "summary": "The subdomain where the content should be served."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.ts",
-            "line": 28
+            "line": 52
           },
           "name": "subDomain",
           "optional": true,
@@ -13935,7 +14586,7 @@
           },
           "locationInModule": {
             "filename": "src/datadogv2/datadog-lambda-instrumentation.ts",
-            "line": 119
+            "line": 118
           },
           "name": "addForwarderToNonLambdaLogGroups",
           "parameters": [
@@ -13958,7 +14609,7 @@
           },
           "locationInModule": {
             "filename": "src/datadogv2/datadog-lambda-instrumentation.ts",
-            "line": 116
+            "line": 115
           },
           "name": "addGitCommitMetadata",
           "parameters": [
@@ -14004,7 +14655,7 @@
           },
           "locationInModule": {
             "filename": "src/datadogv2/datadog-lambda-instrumentation.ts",
-            "line": 109
+            "line": 108
           },
           "name": "addLambdaFunctions",
           "parameters": [
@@ -15265,6 +15916,9 @@
         "summary": "A custom resource that resolves the secret ARN based on the organization ID."
       },
       "fqn": "@rio-cloud/cdk-v2-constructs.datadogv2.DatadogSharedSecret",
+      "interfaces": [
+        "aws-cdk-lib.aws_secretsmanager.ISecret"
+      ],
       "kind": "class",
       "locationInModule": {
         "filename": "src/datadogv2/datadog-shared-secrets.ts",
@@ -15332,6 +15986,208 @@
             }
           },
           "static": true
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Adds a rotation schedule to the secret."
+          },
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 150
+          },
+          "name": "addRotationSchedule",
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret",
+          "parameters": [
+            {
+              "name": "_id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "_options",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_secretsmanager.RotationScheduleOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_secretsmanager.RotationSchedule"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "If this secret was created in this stack, a resource policy will be\nautomatically created upon the first call to `addToResourcePolicy`. If\nthe secret is imported, then this is a no-op.",
+            "stability": "stable",
+            "summary": "Adds a statement to the IAM resource policy associated with this secret."
+          },
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 154
+          },
+          "name": "addToResourcePolicy",
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret",
+          "parameters": [
+            {
+              "name": "_statement",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.PolicyStatement"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.AddToResourcePolicyResult"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "The Removal Policy controls what happens to this resource when it stops\nbeing managed by CloudFormation, either because you've removed it from the\nCDK application or because you've made a change that requires the resource\nto be replaced.\n\nThe resource can be deleted (`RemovalPolicy.DESTROY`), or left in your AWS\naccount for data recovery and cleanup later (`RemovalPolicy.RETAIN`).",
+            "stability": "stable",
+            "summary": "Apply the given removal policy to this resource."
+          },
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 166
+          },
+          "name": "applyRemovalPolicy",
+          "overrides": "aws-cdk-lib.IResource",
+          "parameters": [
+            {
+              "name": "_policy",
+              "type": {
+                "fqn": "aws-cdk-lib.RemovalPolicy"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Attach a target to this secret."
+          },
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 162
+          },
+          "name": "attach",
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret",
+          "parameters": [
+            {
+              "name": "_target",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_secretsmanager.ISecretAttachmentTarget"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_secretsmanager.ISecret"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Denies the `DeleteSecret` action to all principals within the current account."
+          },
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 158
+          },
+          "name": "denyAccountRootDelete",
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Grants reading the secret value to some role."
+          },
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 130
+          },
+          "name": "grantRead",
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            },
+            {
+              "name": "versionStages",
+              "optional": true,
+              "type": {
+                "collection": {
+                  "elementtype": {
+                    "primitive": "string"
+                  },
+                  "kind": "array"
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Grants writing and updating the secret value to some role."
+          },
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 146
+          },
+          "name": "grantWrite",
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret",
+          "parameters": [
+            {
+              "name": "_grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Interpret the secret as a JSON object and return a field's value from it as a `SecretValue`."
+          },
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 126
+          },
+          "name": "secretValueFromJson",
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret",
+          "parameters": [
+            {
+              "name": "key",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.SecretValue"
+            }
+          }
         }
       ],
       "name": "DatadogSharedSecret",
@@ -15339,16 +16195,121 @@
       "properties": [
         {
           "docs": {
-            "stability": "stable"
+            "remarks": "For resources that are created and managed by the CDK\n(generally, those created by creating new class instances like Role, Bucket, etc.),\nthis is always the same as the environment of the stack they belong to;\nhowever, for imported resources\n(those obtained from static methods like fromRoleArn, fromBucketName, etc.),\nthat might be different than the stack they were imported into.",
+            "stability": "stable",
+            "summary": "The environment this resource belongs to."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/datadogv2/datadog-shared-secrets.ts",
-            "line": 74
+            "line": 102
           },
-          "name": "secret",
+          "name": "env",
+          "overrides": "aws-cdk-lib.IResource",
           "type": {
-            "fqn": "aws-cdk-lib.aws_secretsmanager.ISecret"
+            "fqn": "aws-cdk-lib.ResourceEnvironment"
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Will return the full ARN if available, otherwise a partial arn.\nFor secrets imported by the deprecated `fromSecretName`, it will return the `secretName`.",
+            "stability": "stable",
+            "summary": "The ARN of the secret in AWS Secrets Manager."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 110
+          },
+          "name": "secretArn",
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "remarks": "For \"owned\" secrets, this will be the full resource name (secret name + suffix), unless the\n'@aws-cdk/aws-secretsmanager:parseOwnedSecretName' feature flag is set.",
+            "stability": "stable",
+            "summary": "The name of the secret."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 118
+          },
+          "name": "secretName",
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Retrieve the value of the stored secret as a `SecretValue`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 122
+          },
+          "name": "secretValue",
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret",
+          "type": {
+            "fqn": "aws-cdk-lib.SecretValue"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The stack in which this resource is defined."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 98
+          },
+          "name": "stack",
+          "overrides": "aws-cdk-lib.IResource",
+          "type": {
+            "fqn": "aws-cdk-lib.Stack"
+          }
+        },
+        {
+          "docs": {
+            "remarks": "When not specified, the default\nKMS key for the account and region is being used.",
+            "stability": "stable",
+            "summary": "The customer-managed encryption key that is used to encrypt this secret, if any."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 106
+          },
+          "name": "encryptionKey",
+          "optional": true,
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_kms.IKey"
+          }
+        },
+        {
+          "docs": {
+            "remarks": "This is equal to `secretArn` in most cases, but is undefined when a full ARN is not available (e.g., secrets imported by name).",
+            "stability": "stable",
+            "summary": "The full ARN of the secret in AWS Secrets Manager, which is the ARN including the Secrets Manager-supplied 6-character suffix."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/datadogv2/datadog-shared-secrets.ts",
+            "line": 114
+          },
+          "name": "secretFullArn",
+          "optional": true,
+          "overrides": "aws-cdk-lib.aws_secretsmanager.ISecret",
+          "type": {
+            "primitive": "string"
           }
         }
       ],
@@ -18895,5 +19856,5 @@
     }
   },
   "version": "0.0.0",
-  "fingerprint": "S7mEuLQwh7/+7qyT6ywuExqK9ttPlTm3aOE8iolR9s0="
+  "fingerprint": "jy2qX2b1QCqrf5ImjcMOVjqERQbFWoeaLJf5sL/m1+w="
 }