@robhan-cdk-lib/aws_grafana 0.0.24 → 0.0.26

package/.jsii

@@ -1,6 +1,6 @@
 {
   "author": {
-    "email": "robhan@amazon.de",
+    "email": "robhan-cdk-lib@hanuschke.eu",
     "name": "Robert Hanuschke",
     "roles": [
       "author"
@@ -3990,6 +3990,10 @@
   "targets": {
     "js": {
       "npm": "@robhan-cdk-lib/aws_grafana"
+    },
+    "python": {
+      "distName": "robhan_cdk_lib.aws_grafana",
+      "module": "robhan_cdk_lib.aws_grafana"
     }
   },
   "types": {
@@ -4003,8 +4007,8 @@
       "fqn": "@robhan-cdk-lib/aws_grafana.AccountAccessType",
       "kind": "enum",
       "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 17
+        "filename": "src/workspace-base.ts",
+        "line": 11
       },
       "members": [
         {
@@ -4023,7 +4027,7 @@
         }
       ],
       "name": "AccountAccessType",
-      "symbolId": "src/workspace:AccountAccessType"
+      "symbolId": "src/workspace-base:AccountAccessType"
     },
     "@robhan-cdk-lib/aws_grafana.AuthenticationProviders": {
       "assembly": "@robhan-cdk-lib/aws_grafana",
@@ -4035,8 +4039,8 @@
       "fqn": "@robhan-cdk-lib/aws_grafana.AuthenticationProviders",
       "kind": "enum",
       "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 35
+        "filename": "src/workspace-base.ts",
+        "line": 29
       },
       "members": [
         {
@@ -4055,158 +4059,123 @@
         }
       ],
       "name": "AuthenticationProviders",
-      "symbolId": "src/workspace:AuthenticationProviders"
+      "symbolId": "src/workspace-base:AuthenticationProviders"
     },
-    "@robhan-cdk-lib/aws_grafana.NetworkAccessControl": {
+    "@robhan-cdk-lib/aws_grafana.IWorkspace": {
       "assembly": "@robhan-cdk-lib/aws_grafana",
-      "datatype": true,
       "docs": {
         "stability": "stable",
-        "summary": "The configuration settings for network access to your workspace."
+        "summary": "Represents an Amazon Managed Service for Grafana workspace."
       },
-      "fqn": "@robhan-cdk-lib/aws_grafana.NetworkAccessControl",
+      "fqn": "@robhan-cdk-lib/aws_grafana.IWorkspace",
+      "interfaces": [
+        "aws-cdk-lib.IResource"
+      ],
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 50
+        "filename": "src/workspace-base.ts",
+        "line": 332
       },
-      "name": "NetworkAccessControl",
+      "name": "IWorkspace",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "remarks": "A prefix list is a list of CIDR ranges of IP addresses. The IP\naddresses specified are allowed to access your workspace. If the list is not included in the\nconfiguration (passed an empty array) then no IP addresses are allowed to access the\nworkspace.\n\nMaximum of 5 prefix lists allowed.",
+            "custom": {
+              "attribute": "true"
+            },
+            "remarks": "If this is\nORGANIZATION, the OrganizationalUnits parameter specifies which organizational units the\nworkspace can access.",
             "stability": "stable",
-            "summary": "An array of prefix list IDs."
+            "summary": "Specifies whether the workspace can access AWS resources in this AWS account only, or whether it can also access AWS resources in other accounts in the same organization."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 59
+            "filename": "src/workspace-base.ts",
+            "line": 341
           },
-          "name": "prefixLists",
-          "optional": true,
+          "name": "accountAccessType",
           "type": {
-            "collection": {
-              "elementtype": {
-                "fqn": "aws-cdk-lib.aws_ec2.IPrefixList"
-              },
-              "kind": "array"
-            }
+            "fqn": "@robhan-cdk-lib/aws_grafana.AccountAccessType"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "remarks": "You can create VPC endpoints to your\nAmazon Managed Grafana workspace for access from within a VPC. If a NetworkAccessConfiguration\nis specified then only VPC endpoints specified here are allowed to access the workspace. If\nyou pass in an empty array of strings, then no VPCs are allowed to access the workspace.\n\nMaximum of 5 VPC endpoints allowed.",
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "An array of Amazon VPC endpoint IDs for the workspace."
+            "summary": "Specifies whether this workspace uses SAML 2.0, AWS IAM Identity Center, or both to authenticate users for using the Grafana console within a workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 69
+            "filename": "src/workspace-base.ts",
+            "line": 348
           },
-          "name": "vpcEndpoints",
-          "optional": true,
+          "name": "authenticationProviders",
           "type": {
             "collection": {
               "elementtype": {
-                "fqn": "aws-cdk-lib.aws_ec2.IVpcEndpoint"
+                "fqn": "@robhan-cdk-lib/aws_grafana.AuthenticationProviders"
               },
               "kind": "array"
             }
           }
-        }
-      ],
-      "symbolId": "src/workspace:NetworkAccessControl"
-    },
-    "@robhan-cdk-lib/aws_grafana.NotificationDestinations": {
-      "assembly": "@robhan-cdk-lib/aws_grafana",
-      "docs": {
-        "stability": "stable",
-        "summary": "The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels."
-      },
-      "fqn": "@robhan-cdk-lib/aws_grafana.NotificationDestinations",
-      "kind": "enum",
-      "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 76
-      },
-      "members": [
+        },
         {
+          "abstract": true,
           "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "remarks": "If this is CUSTOMER_MANAGED, you must manage those roles and permissions yourself.\n\nIf you are working with a workspace in a member account of an organization and that account is\nnot a delegated administrator account, and you want the workspace to access data sources in\nother AWS accounts in the organization, this parameter must be set to CUSTOMER_MANAGED.",
             "stability": "stable",
-            "summary": "Amazon Simple Notification Service (SNS) as notification destination."
+            "summary": "If this is SERVICE_MANAGED, and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels."
           },
-          "name": "SNS"
-        }
-      ],
-      "name": "NotificationDestinations",
-      "symbolId": "src/workspace:NotificationDestinations"
-    },
-    "@robhan-cdk-lib/aws_grafana.PermissionTypes": {
-      "assembly": "@robhan-cdk-lib/aws_grafana",
-      "docs": {
-        "remarks": "If this is CUSTOMER_MANAGED, you must manage those roles and permissions yourself.\n\nIf you are working with a workspace in a member account of an organization and that account is\nnot a delegated administrator account, and you want the workspace to access data sources in\nother AWS accounts in the organization, this parameter must be set to CUSTOMER_MANAGED.",
-        "stability": "stable",
-        "summary": "If this is SERVICE_MANAGED, and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels."
-      },
-      "fqn": "@robhan-cdk-lib/aws_grafana.PermissionTypes",
-      "kind": "enum",
-      "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 94
-      },
-      "members": [
-        {
-          "docs": {
-            "stability": "stable",
-            "summary": "Customer-managed permissions where you manage user access to Grafana."
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 416
           },
-          "name": "CUSTOMER_MANAGED"
+          "name": "permissionType",
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.PermissionTypes"
+          }
         },
         {
+          "abstract": true,
           "docs": {
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "Service-managed permissions where AWS manages user access to Grafana."
+            "summary": "The ARN of this workspace."
           },
-          "name": "SERVICE_MANAGED"
-        }
-      ],
-      "name": "PermissionTypes",
-      "symbolId": "src/workspace:PermissionTypes"
-    },
-    "@robhan-cdk-lib/aws_grafana.SamlAssertionAttributes": {
-      "assembly": "@robhan-cdk-lib/aws_grafana",
-      "datatype": true,
-      "docs": {
-        "remarks": "Each attribute must be a string with length between 1 and 256 characters.",
-        "stability": "stable",
-        "summary": "A structure that defines which attributes in the IdP assertion are to be used to define information about the users authenticated by the IdP to use the workspace."
-      },
-      "fqn": "@robhan-cdk-lib/aws_grafana.SamlAssertionAttributes",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 112
-      },
-      "name": "SamlAssertionAttributes",
-      "properties": [
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 466
+          },
+          "name": "workspaceArn",
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
           "abstract": true,
           "docs": {
-            "remarks": "Must be between 1 and 256 characters long.",
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "The name of the attribute within the SAML assertion to use as the email names for SAML users."
+            "summary": "The unique ID of this workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 118
+            "filename": "src/workspace-base.ts",
+            "line": 460
           },
-          "name": "email",
-          "optional": true,
+          "name": "workspaceId",
           "type": {
             "primitive": "string"
           }
@@ -4214,16 +4183,18 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "Must be between 1 and 256 characters long.",
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "The name of the attribute within the SAML assertion to use as the user full \"friendly\" names for user groups."
+            "summary": "A unique, case-sensitive, user-provided identifier to ensure the idempotency of the request."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 125
+            "filename": "src/workspace-base.ts",
+            "line": 354
           },
-          "name": "groups",
+          "name": "clientToken",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -4232,34 +4203,44 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "Must be between 1 and 256 characters long.",
+            "custom": {
+              "attribute": "true"
+            },
+            "remarks": "This list is only used when the workspace was created through the AWS console, and the\npermissionType is SERVICE_MANAGED.",
             "stability": "stable",
-            "summary": "The name of the attribute within the SAML assertion to use as the login names for SAML users."
+            "summary": "Specifies the AWS data sources that have been configured to have IAM roles and permissions created to allow Amazon Managed Grafana to read data from these sources."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 131
+            "filename": "src/workspace-base.ts",
+            "line": 364
           },
-          "name": "login",
+          "name": "dataSources",
           "optional": true,
           "type": {
-            "primitive": "string"
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
           }
         },
         {
           "abstract": true,
           "docs": {
-            "remarks": "Must be between 1 and 256 characters long.",
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "The name of the attribute within the SAML assertion to use as the user full \"friendly\" names for SAML users."
+            "summary": "The user-defined description of the workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 138
+            "filename": "src/workspace-base.ts",
+            "line": 370
           },
-          "name": "name",
+          "name": "description",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -4268,16 +4249,18 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "Must be between 1 and 256 characters long.",
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "The name of the attribute within the SAML assertion to use as the user full \"friendly\" names for the users' organizations."
+            "summary": "The name of the workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 145
+            "filename": "src/workspace-base.ts",
+            "line": 376
           },
-          "name": "org",
+          "name": "name",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -4286,69 +4269,63 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "Must be between 1 and 256 characters long.",
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "The name of the attribute within the SAML assertion to use as the user roles."
+            "summary": "The configuration settings for network access to your workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 151
+            "filename": "src/workspace-base.ts",
+            "line": 382
           },
-          "name": "role",
+          "name": "networkAccessControl",
           "optional": true,
           "type": {
-            "primitive": "string"
+            "fqn": "@robhan-cdk-lib/aws_grafana.NetworkAccessControl"
           }
-        }
-      ],
-      "symbolId": "src/workspace:SamlAssertionAttributes"
-    },
-    "@robhan-cdk-lib/aws_grafana.SamlConfiguration": {
-      "assembly": "@robhan-cdk-lib/aws_grafana",
-      "datatype": true,
-      "docs": {
-        "stability": "stable",
-        "summary": "If the workspace uses SAML, use this structure to map SAML assertion attributes to workspace user information and define which groups in the assertion attribute are to have the Admin and Editor roles in the workspace."
-      },
-      "fqn": "@robhan-cdk-lib/aws_grafana.SamlConfiguration",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 197
-      },
-      "name": "SamlConfiguration",
-      "properties": [
+        },
         {
           "abstract": true,
           "docs": {
-            "remarks": "Required field for SAML configuration.",
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "A structure containing the identity provider (IdP) metadata used to integrate the identity provider with this workspace."
+            "summary": "The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 218
+            "filename": "src/workspace-base.ts",
+            "line": 389
           },
-          "name": "idpMetadata",
+          "name": "notificationDestinations",
+          "optional": true,
           "type": {
-            "fqn": "@robhan-cdk-lib/aws_grafana.SamlIdpMetadata"
+            "collection": {
+              "elementtype": {
+                "fqn": "@robhan-cdk-lib/aws_grafana.NotificationDestinations"
+              },
+              "kind": "array"
+            }
           }
         },
         {
           "abstract": true,
           "docs": {
-            "remarks": "If this is empty, all organizations in the assertion attribute have access.\n\nMust have between 1 and 256 elements.",
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "Lists which organizations defined in the SAML assertion are allowed to use the Amazon Managed Grafana workspace."
+            "summary": "Specifies the organizational units that this workspace is allowed to use data sources from, if this workspace is in an account that is part of an organization."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 204
+            "filename": "src/workspace-base.ts",
+            "line": 396
           },
-          "name": "allowedOrganizations",
+          "name": "organizationalUnits",
           "optional": true,
           "type": {
             "collection": {
@@ -4362,117 +4339,99 @@
         {
           "abstract": true,
           "docs": {
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "A structure that defines which attributes in the SAML assertion are to be used to define information about the users authenticated by that IdP to use the workspace."
+            "summary": "The name of the IAM role that is used to access resources through Organizations."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 210
+            "filename": "src/workspace-base.ts",
+            "line": 402
           },
-          "name": "assertionAtrributes",
+          "name": "organizationRoleName",
           "optional": true,
           "type": {
-            "fqn": "@robhan-cdk-lib/aws_grafana.SamlAssertionAttributes"
+            "primitive": "string"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "remarks": "Must be a positive number.",
+            "custom": {
+              "attribute": "true"
+            },
+            "remarks": "Setting to true allows workspace\nadmins to install, uninstall, and update plugins from within the Grafana workspace.\n\nThis option is only valid for workspaces that support Grafana version 9 or newer.",
             "stability": "stable",
-            "summary": "How long a sign-on session by a SAML user is valid, before the user has to sign on again."
+            "summary": "Whether plugin administration is enabled in the workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 225
+            "filename": "src/workspace-base.ts",
+            "line": 425
           },
-          "name": "loginValidityDuration",
+          "name": "pluginAdminEnabled",
           "optional": true,
           "type": {
-            "primitive": "number"
+            "primitive": "boolean"
           }
         },
         {
           "abstract": true,
           "docs": {
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "A structure containing arrays that map group names in the SAML assertion to the Grafana Admin and Editor roles in the workspace."
+            "summary": "The IAM role that grants permissions to the AWS resources that the workspace will view data from."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 231
+            "filename": "src/workspace-base.ts",
+            "line": 432
           },
-          "name": "roleValues",
+          "name": "role",
           "optional": true,
           "type": {
-            "fqn": "@robhan-cdk-lib/aws_grafana.SamlRoleValues"
+            "fqn": "aws-cdk-lib.aws_iam.IRole"
           }
-        }
-      ],
-      "symbolId": "src/workspace:SamlConfiguration"
-    },
-    "@robhan-cdk-lib/aws_grafana.SamlConfigurationStatuses": {
-      "assembly": "@robhan-cdk-lib/aws_grafana",
-      "docs": {
-        "stability": "stable",
-        "summary": "Status of SAML configuration for a Grafana workspace."
-      },
-      "fqn": "@robhan-cdk-lib/aws_grafana.SamlConfigurationStatuses",
-      "kind": "enum",
-      "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 399
-      },
-      "members": [
+        },
         {
+          "abstract": true,
           "docs": {
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "SAML is configured for the workspace."
+            "summary": "If the workspace uses SAML, use this structure to map SAML assertion attributes to workspace user information and define which groups in the assertion attribute are to have the Admin and Editor roles in the workspace."
           },
-          "name": "CONFIGURED"
-        },
-        {
-          "docs": {
-            "stability": "stable",
-            "summary": "SAML is not configured for the workspace."
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 440
           },
-          "name": "NOT_CONFIGURED"
-        }
-      ],
-      "name": "SamlConfigurationStatuses",
-      "symbolId": "src/workspace:SamlConfigurationStatuses"
-    },
-    "@robhan-cdk-lib/aws_grafana.SamlIdpMetadata": {
-      "assembly": "@robhan-cdk-lib/aws_grafana",
-      "datatype": true,
-      "docs": {
-        "stability": "stable",
-        "summary": "A structure containing the identity provider (IdP) metadata used to integrate the identity provider with this workspace."
-      },
-      "fqn": "@robhan-cdk-lib/aws_grafana.SamlIdpMetadata",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 158
-      },
-      "name": "SamlIdpMetadata",
-      "properties": [
+          "name": "samlConfiguration",
+          "optional": true,
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.SamlConfiguration"
+          }
+        },
         {
           "abstract": true,
           "docs": {
-            "remarks": "Must be a string with length between 1 and 2048 characters.",
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "The URL of the location containing the IdP metadata."
+            "summary": "The name of the AWS CloudFormation stack set that is used to generate IAM roles to be used for this workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 164
+            "filename": "src/workspace-base.ts",
+            "line": 447
           },
-          "name": "url",
+          "name": "stackSetName",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -4481,56 +4440,59 @@
         {
           "abstract": true,
           "docs": {
+            "custom": {
+              "attribute": "true"
+            },
             "stability": "stable",
-            "summary": "The full IdP metadata, in XML format."
+            "summary": "The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 169
+            "filename": "src/workspace-base.ts",
+            "line": 454
           },
-          "name": "xml",
+          "name": "vpcConfiguration",
           "optional": true,
           "type": {
-            "primitive": "string"
+            "fqn": "@robhan-cdk-lib/aws_grafana.VpcConfiguration"
           }
         }
       ],
-      "symbolId": "src/workspace:SamlIdpMetadata"
+      "symbolId": "src/workspace-base:IWorkspace"
     },
-    "@robhan-cdk-lib/aws_grafana.SamlRoleValues": {
+    "@robhan-cdk-lib/aws_grafana.NetworkAccessControl": {
       "assembly": "@robhan-cdk-lib/aws_grafana",
       "datatype": true,
       "docs": {
         "stability": "stable",
-        "summary": "A structure containing arrays that map group names in the SAML assertion to the Grafana Admin and Editor roles in the workspace."
+        "summary": "The configuration settings for network access to your workspace."
       },
-      "fqn": "@robhan-cdk-lib/aws_grafana.SamlRoleValues",
+      "fqn": "@robhan-cdk-lib/aws_grafana.NetworkAccessControl",
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 176
+        "filename": "src/workspace-base.ts",
+        "line": 44
       },
-      "name": "SamlRoleValues",
+      "name": "NetworkAccessControl",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "remarks": "Maximum of 256 elements.",
+            "remarks": "A prefix list is a list of CIDR ranges of IP addresses. The IP\naddresses specified are allowed to access your workspace. If the list is not included in the\nconfiguration (passed an empty array) then no IP addresses are allowed to access the\nworkspace.\n\nMaximum of 5 prefix lists allowed.",
             "stability": "stable",
-            "summary": "A list of groups from the SAML assertion attribute to grant the Grafana Admin role to."
+            "summary": "An array of prefix list IDs."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 182
+            "filename": "src/workspace-base.ts",
+            "line": 53
           },
-          "name": "admin",
+          "name": "prefixLists",
           "optional": true,
           "type": {
             "collection": {
               "elementtype": {
-                "primitive": "string"
+                "fqn": "aws-cdk-lib.aws_ec2.IPrefixList"
               },
               "kind": "array"
             }
@@ -4539,155 +4501,1345 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "Maximum of 256 elements.",
+            "remarks": "You can create VPC endpoints to your\nAmazon Managed Grafana workspace for access from within a VPC. If a NetworkAccessConfiguration\nis specified then only VPC endpoints specified here are allowed to access the workspace. If\nyou pass in an empty array of strings, then no VPCs are allowed to access the workspace.\n\nMaximum of 5 VPC endpoints allowed.",
             "stability": "stable",
-            "summary": "A list of groups from the SAML assertion attribute to grant the Grafana Editor role to."
+            "summary": "An array of Amazon VPC endpoint IDs for the workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 189
+            "filename": "src/workspace-base.ts",
+            "line": 63
           },
-          "name": "editor",
+          "name": "vpcEndpoints",
           "optional": true,
           "type": {
             "collection": {
               "elementtype": {
-                "primitive": "string"
+                "fqn": "aws-cdk-lib.aws_ec2.IVpcEndpoint"
               },
               "kind": "array"
             }
           }
         }
       ],
-      "symbolId": "src/workspace:SamlRoleValues"
+      "symbolId": "src/workspace-base:NetworkAccessControl"
     },
-    "@robhan-cdk-lib/aws_grafana.Status": {
+    "@robhan-cdk-lib/aws_grafana.NotificationDestinations": {
       "assembly": "@robhan-cdk-lib/aws_grafana",
       "docs": {
         "stability": "stable",
-        "summary": "Status of a Grafana workspace."
+        "summary": "The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels."
       },
-      "fqn": "@robhan-cdk-lib/aws_grafana.Status",
+      "fqn": "@robhan-cdk-lib/aws_grafana.NotificationDestinations",
       "kind": "enum",
       "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 414
+        "filename": "src/workspace-base.ts",
+        "line": 70
       },
       "members": [
         {
           "docs": {
             "stability": "stable",
-            "summary": "Workspace is active and ready to use."
+            "summary": "Amazon Simple Notification Service (SNS) as notification destination."
           },
-          "name": "ACTIVE"
-        },
+          "name": "SNS"
+        }
+      ],
+      "name": "NotificationDestinations",
+      "symbolId": "src/workspace-base:NotificationDestinations"
+    },
+    "@robhan-cdk-lib/aws_grafana.PermissionTypes": {
+      "assembly": "@robhan-cdk-lib/aws_grafana",
+      "docs": {
+        "remarks": "If this is CUSTOMER_MANAGED, you must manage those roles and permissions yourself.\n\nIf you are working with a workspace in a member account of an organization and that account is\nnot a delegated administrator account, and you want the workspace to access data sources in\nother AWS accounts in the organization, this parameter must be set to CUSTOMER_MANAGED.",
+        "stability": "stable",
+        "summary": "If this is SERVICE_MANAGED, and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels."
+      },
+      "fqn": "@robhan-cdk-lib/aws_grafana.PermissionTypes",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "src/workspace-base.ts",
+        "line": 88
+      },
+      "members": [
         {
           "docs": {
             "stability": "stable",
-            "summary": "Workspace is being created."
+            "summary": "Customer-managed permissions where you manage user access to Grafana."
           },
-          "name": "CREATING"
+          "name": "CUSTOMER_MANAGED"
         },
         {
           "docs": {
             "stability": "stable",
-            "summary": "Workspace is being deleted."
+            "summary": "Service-managed permissions where AWS manages user access to Grafana."
           },
-          "name": "DELETING"
-        },
+          "name": "SERVICE_MANAGED"
+        }
+      ],
+      "name": "PermissionTypes",
+      "symbolId": "src/workspace-base:PermissionTypes"
+    },
+    "@robhan-cdk-lib/aws_grafana.SamlAssertionAttributes": {
+      "assembly": "@robhan-cdk-lib/aws_grafana",
+      "datatype": true,
+      "docs": {
+        "remarks": "Each attribute must be a string with length between 1 and 256 characters.",
+        "stability": "stable",
+        "summary": "A structure that defines which attributes in the IdP assertion are to be used to define information about the users authenticated by the IdP to use the workspace."
+      },
+      "fqn": "@robhan-cdk-lib/aws_grafana.SamlAssertionAttributes",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/workspace-base.ts",
+        "line": 106
+      },
+      "name": "SamlAssertionAttributes",
+      "properties": [
         {
+          "abstract": true,
           "docs": {
+            "remarks": "Must be between 1 and 256 characters long.",
             "stability": "stable",
-            "summary": "Workspace operation has failed."
+            "summary": "The name of the attribute within the SAML assertion to use as the email names for SAML users."
           },
-          "name": "FAILED"
-        },
-        {
-          "docs": {
-            "stability": "stable",
-            "summary": "Workspace is being updated."
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 112
           },
-          "name": "UPDATING"
+          "name": "email",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
         },
         {
+          "abstract": true,
           "docs": {
+            "remarks": "Must be between 1 and 256 characters long.",
             "stability": "stable",
-            "summary": "Workspace is being upgraded."
+            "summary": "The name of the attribute within the SAML assertion to use as the user full \"friendly\" names for user groups."
           },
-          "name": "UPGRADING"
-        },
-        {
-          "docs": {
-            "stability": "stable",
-            "summary": "Workspace deletion has failed."
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 119
           },
-          "name": "DELETION_FAILED"
+          "name": "groups",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
         },
         {
+          "abstract": true,
           "docs": {
+            "remarks": "Must be between 1 and 256 characters long.",
             "stability": "stable",
-            "summary": "Workspace creation has failed."
+            "summary": "The name of the attribute within the SAML assertion to use as the login names for SAML users."
           },
-          "name": "CREATION_FAILED"
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 125
+          },
+          "name": "login",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
         },
         {
+          "abstract": true,
           "docs": {
+            "remarks": "Must be between 1 and 256 characters long.",
             "stability": "stable",
-            "summary": "Workspace update has failed."
+            "summary": "The name of the attribute within the SAML assertion to use as the user full \"friendly\" names for SAML users."
           },
-          "name": "UPDATE_FAILED"
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 132
+          },
+          "name": "name",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
         },
         {
+          "abstract": true,
           "docs": {
+            "remarks": "Must be between 1 and 256 characters long.",
             "stability": "stable",
-            "summary": "Workspace upgrade has failed."
+            "summary": "The name of the attribute within the SAML assertion to use as the user full \"friendly\" names for the users' organizations."
           },
-          "name": "UPGRADE_FAILED"
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 139
+          },
+          "name": "org",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
         },
         {
+          "abstract": true,
           "docs": {
+            "remarks": "Must be between 1 and 256 characters long.",
             "stability": "stable",
-            "summary": "License removal has failed."
+            "summary": "The name of the attribute within the SAML assertion to use as the user roles."
           },
-          "name": "LICENSE_REMOVAL_FAILED"
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 145
+          },
+          "name": "role",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
         }
       ],
-      "name": "Status",
-      "symbolId": "src/workspace:Status"
+      "symbolId": "src/workspace-base:SamlAssertionAttributes"
     },
-    "@robhan-cdk-lib/aws_grafana.VpcConfiguration": {
+    "@robhan-cdk-lib/aws_grafana.SamlConfiguration": {
       "assembly": "@robhan-cdk-lib/aws_grafana",
       "datatype": true,
       "docs": {
         "stability": "stable",
-        "summary": "The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to."
+        "summary": "If the workspace uses SAML, use this structure to map SAML assertion attributes to workspace user information and define which groups in the assertion attribute are to have the Admin and Editor roles in the workspace."
       },
-      "fqn": "@robhan-cdk-lib/aws_grafana.VpcConfiguration",
+      "fqn": "@robhan-cdk-lib/aws_grafana.SamlConfiguration",
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 238
+        "filename": "src/workspace-base.ts",
+        "line": 191
       },
-      "name": "VpcConfiguration",
+      "name": "SamlConfiguration",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "remarks": "Duplicates not allowed.\n\nArray Members: Minimum number of 1 items. Maximum number of 5 items.\n\nRequired for VPC configuration.",
+            "remarks": "Required field for SAML configuration.",
+            "stability": "stable",
+            "summary": "A structure containing the identity provider (IdP) metadata used to integrate the identity provider with this workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 212
+          },
+          "name": "idpMetadata",
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.SamlIdpMetadata"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "If this is empty, all organizations in the assertion attribute have access.\n\nMust have between 1 and 256 elements.",
+            "stability": "stable",
+            "summary": "Lists which organizations defined in the SAML assertion are allowed to use the Amazon Managed Grafana workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 198
+          },
+          "name": "allowedOrganizations",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "A structure that defines which attributes in the SAML assertion are to be used to define information about the users authenticated by that IdP to use the workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 204
+          },
+          "name": "assertionAtrributes",
+          "optional": true,
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.SamlAssertionAttributes"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Must be a positive number.",
+            "stability": "stable",
+            "summary": "How long a sign-on session by a SAML user is valid, before the user has to sign on again."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 219
+          },
+          "name": "loginValidityDuration",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "A structure containing arrays that map group names in the SAML assertion to the Grafana Admin and Editor roles in the workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 225
+          },
+          "name": "roleValues",
+          "optional": true,
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.SamlRoleValues"
+          }
+        }
+      ],
+      "symbolId": "src/workspace-base:SamlConfiguration"
+    },
+    "@robhan-cdk-lib/aws_grafana.SamlConfigurationStatuses": {
+      "assembly": "@robhan-cdk-lib/aws_grafana",
+      "docs": {
+        "stability": "stable",
+        "summary": "Status of SAML configuration for a Grafana workspace."
+      },
+      "fqn": "@robhan-cdk-lib/aws_grafana.SamlConfigurationStatuses",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "src/workspace-base.ts",
+        "line": 257
+      },
+      "members": [
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "SAML is configured for the workspace."
+          },
+          "name": "CONFIGURED"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "SAML is not configured for the workspace."
+          },
+          "name": "NOT_CONFIGURED"
+        }
+      ],
+      "name": "SamlConfigurationStatuses",
+      "symbolId": "src/workspace-base:SamlConfigurationStatuses"
+    },
+    "@robhan-cdk-lib/aws_grafana.SamlIdpMetadata": {
+      "assembly": "@robhan-cdk-lib/aws_grafana",
+      "datatype": true,
+      "docs": {
+        "stability": "stable",
+        "summary": "A structure containing the identity provider (IdP) metadata used to integrate the identity provider with this workspace."
+      },
+      "fqn": "@robhan-cdk-lib/aws_grafana.SamlIdpMetadata",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/workspace-base.ts",
+        "line": 152
+      },
+      "name": "SamlIdpMetadata",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Must be a string with length between 1 and 2048 characters.",
+            "stability": "stable",
+            "summary": "The URL of the location containing the IdP metadata."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 158
+          },
+          "name": "url",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "The full IdP metadata, in XML format."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 163
+          },
+          "name": "xml",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/workspace-base:SamlIdpMetadata"
+    },
+    "@robhan-cdk-lib/aws_grafana.SamlRoleValues": {
+      "assembly": "@robhan-cdk-lib/aws_grafana",
+      "datatype": true,
+      "docs": {
+        "stability": "stable",
+        "summary": "A structure containing arrays that map group names in the SAML assertion to the Grafana Admin and Editor roles in the workspace."
+      },
+      "fqn": "@robhan-cdk-lib/aws_grafana.SamlRoleValues",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/workspace-base.ts",
+        "line": 170
+      },
+      "name": "SamlRoleValues",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Maximum of 256 elements.",
+            "stability": "stable",
+            "summary": "A list of groups from the SAML assertion attribute to grant the Grafana Admin role to."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 176
+          },
+          "name": "admin",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Maximum of 256 elements.",
+            "stability": "stable",
+            "summary": "A list of groups from the SAML assertion attribute to grant the Grafana Editor role to."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 183
+          },
+          "name": "editor",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        }
+      ],
+      "symbolId": "src/workspace-base:SamlRoleValues"
+    },
+    "@robhan-cdk-lib/aws_grafana.Status": {
+      "assembly": "@robhan-cdk-lib/aws_grafana",
+      "docs": {
+        "stability": "stable",
+        "summary": "Status of a Grafana workspace."
+      },
+      "fqn": "@robhan-cdk-lib/aws_grafana.Status",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "src/workspace-base.ts",
+        "line": 272
+      },
+      "members": [
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Workspace is active and ready to use."
+          },
+          "name": "ACTIVE"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Workspace is being created."
+          },
+          "name": "CREATING"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Workspace is being deleted."
+          },
+          "name": "DELETING"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Workspace operation has failed."
+          },
+          "name": "FAILED"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Workspace is being updated."
+          },
+          "name": "UPDATING"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Workspace is being upgraded."
+          },
+          "name": "UPGRADING"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Workspace deletion has failed."
+          },
+          "name": "DELETION_FAILED"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Workspace creation has failed."
+          },
+          "name": "CREATION_FAILED"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Workspace update has failed."
+          },
+          "name": "UPDATE_FAILED"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Workspace upgrade has failed."
+          },
+          "name": "UPGRADE_FAILED"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "License removal has failed."
+          },
+          "name": "LICENSE_REMOVAL_FAILED"
+        }
+      ],
+      "name": "Status",
+      "symbolId": "src/workspace-base:Status"
+    },
+    "@robhan-cdk-lib/aws_grafana.VpcConfiguration": {
+      "assembly": "@robhan-cdk-lib/aws_grafana",
+      "datatype": true,
+      "docs": {
+        "stability": "stable",
+        "summary": "The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to."
+      },
+      "fqn": "@robhan-cdk-lib/aws_grafana.VpcConfiguration",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/workspace-base.ts",
+        "line": 232
+      },
+      "name": "VpcConfiguration",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Duplicates not allowed.\n\nArray Members: Minimum number of 1 items. Maximum number of 5 items.\n\nRequired for VPC configuration.",
+            "stability": "stable",
+            "summary": "The list of Amazon EC2 security groups attached to the Amazon VPC for your Grafana workspace to connect."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 241
+          },
+          "name": "securityGroups",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Array Members: Minimum number of 2 items. Maximum number of 6 items.\n\nRequired for VPC configuration.",
+            "stability": "stable",
+            "summary": "The list of Amazon EC2 subnets created in the Amazon VPC for your Grafana workspace to connect. Duplicates not allowed."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 251
+          },
+          "name": "subnets",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "aws-cdk-lib.aws_ec2.ISubnet"
+              },
+              "kind": "array"
+            }
+          }
+        }
+      ],
+      "symbolId": "src/workspace-base:VpcConfiguration"
+    },
+    "@robhan-cdk-lib/aws_grafana.Workspace": {
+      "assembly": "@robhan-cdk-lib/aws_grafana",
+      "base": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+      "docs": {
+        "remarks": "In a workspace, you can create Grafana dashboards and visualizations to\nanalyze your metrics, logs, and traces. You don't have to build, package, or deploy any hardware\nto run the Grafana server.",
+        "stability": "stable",
+        "summary": "Specifies a workspace."
+      },
+      "fqn": "@robhan-cdk-lib/aws_grafana.Workspace",
+      "initializer": {
+        "docs": {
+          "stability": "stable"
+        },
+        "locationInModule": {
+          "filename": "src/workspace.ts",
+          "line": 1074
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "type": {
+              "fqn": "@robhan-cdk-lib/aws_grafana.WorkspaceProps"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/workspace.ts",
+        "line": 296
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "stable"
+          },
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 298
+          },
+          "name": "fromWorkspaceAttributes",
+          "parameters": [
+            {
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "attrs",
+              "type": {
+                "fqn": "@robhan-cdk-lib/aws_grafana.WorkspaceAttributes"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@robhan-cdk-lib/aws_grafana.IWorkspace"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "Workspace",
+      "properties": [
+        {
+          "docs": {
+            "remarks": "If this is\nORGANIZATION, the OrganizationalUnits parameter specifies which organizational units the\nworkspace can access.",
+            "stability": "stable",
+            "summary": "Specifies whether the workspace can access AWS resources in this AWS account only, or whether it can also access AWS resources in other accounts in the same organization."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 923
+          },
+          "name": "accountAccessType",
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.AccountAccessType"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Specifies whether this workspace uses SAML 2.0, AWS IAM Identity Center, or both to authenticate users for using the Grafana console within a workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 929
+          },
+          "name": "authenticationProviders",
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@robhan-cdk-lib/aws_grafana.AuthenticationProviders"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The date that the workspace was created."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1031
+          },
+          "name": "creationTimestamp",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The URL that users can use to access the Grafana console in the workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1036
+          },
+          "name": "endpoint",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Specifies the version of Grafana supported by this workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1041
+          },
+          "name": "grafanaVersion",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The most recent date that the workspace was modified."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1051
+          },
+          "name": "modificationTimestamp",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "remarks": "If this is CUSTOMER_MANAGED, you must manage those roles and permissions yourself.\n\nIf you are working with a workspace in a member account of an organization and that account is\nnot a delegated administrator account, and you want the workspace to access data sources in\nother AWS accounts in the organization, this parameter must be set to CUSTOMER_MANAGED.",
+            "stability": "stable",
+            "summary": "If this is SERVICE_MANAGED, and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 988
+          },
+          "name": "permissionType",
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.PermissionTypes"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Specifies whether the workspace's SAML configuration is complete."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1056
+          },
+          "name": "samlConfigurationStatus",
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.SamlConfigurationStatuses"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The ID of the IAM Identity Center-managed application that is created by Amazon Managed Grafana."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1062
+          },
+          "name": "ssoClientId",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The current status of the workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1067
+          },
+          "name": "status",
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.Status"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The arn of this workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1072
+          },
+          "name": "workspaceArn",
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The unique ID of this workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1046
+          },
+          "name": "workspaceId",
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "A unique, case-sensitive, user-provided identifier to ensure the idempotency of the request."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 934
+          },
+          "name": "clientToken",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "remarks": "This list is only used when the workspace was created through the AWS console, and the\npermissionType is SERVICE_MANAGED.",
+            "stability": "stable",
+            "summary": "Specifies the AWS data sources that have been configured to have IAM roles and permissions created to allow Amazon Managed Grafana to read data from these sources."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 943
+          },
+          "name": "dataSources",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The user-defined description of the workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 948
+          },
+          "name": "description",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The name of the workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 953
+          },
+          "name": "name",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The configuration settings for network access to your workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 958
+          },
+          "name": "networkAccessControl",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.NetworkAccessControl"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 964
+          },
+          "name": "notificationDestinations",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@robhan-cdk-lib/aws_grafana.NotificationDestinations"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Specifies the organizational units that this workspace is allowed to use data sources from, if this workspace is in an account that is part of an organization."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 970
+          },
+          "name": "organizationalUnits",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The name of the IAM role that is used to access resources through Organizations."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 975
+          },
+          "name": "organizationRoleName",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Setting to true allows workspace\nadmins to install, uninstall, and update plugins from within the Grafana workspace.\n\nThis option is only valid for workspaces that support Grafana version 9 or newer.",
+            "stability": "stable",
+            "summary": "Whether plugin administration is enabled in the workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 996
+          },
+          "name": "pluginAdminEnabled",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The IAM role that grants permissions to the AWS resources that the workspace will view data from."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1002
+          },
+          "name": "role",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_iam.IRole"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "If the workspace uses SAML, use this structure to map SAML assertion attributes to workspace user information and define which groups in the assertion attribute are to have the Admin and Editor roles in the workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1009
+          },
+          "name": "samlConfiguration",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.SamlConfiguration"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The name of the AWS CloudFormation stack set that is used to generate IAM roles to be used for this workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1015
+          },
+          "name": "stackSetName",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 1021
+          },
+          "name": "vpcConfiguration",
+          "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.VpcConfiguration"
+          }
+        }
+      ],
+      "symbolId": "src/workspace:Workspace"
+    },
+    "@robhan-cdk-lib/aws_grafana.WorkspaceAttributes": {
+      "assembly": "@robhan-cdk-lib/aws_grafana",
+      "datatype": true,
+      "docs": {
+        "stability": "stable"
+      },
+      "fqn": "@robhan-cdk-lib/aws_grafana.WorkspaceAttributes",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/workspace.ts",
+        "line": 154
+      },
+      "name": "WorkspaceAttributes",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "If this is\nORGANIZATION, the OrganizationalUnits parameter specifies which organizational units the\nworkspace can access.\n\nRequired field.",
+            "stability": "stable",
+            "summary": "Specifies whether the workspace can access AWS resources in this AWS account only, or whether it can also access AWS resources in other accounts in the same organization."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 163
+          },
+          "name": "accountAccessType",
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.AccountAccessType"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Required field.",
+            "stability": "stable",
+            "summary": "Specifies whether this workspace uses SAML 2.0, AWS IAM Identity Center, or both to authenticate users for using the Grafana console within a workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 171
+          },
+          "name": "authenticationProviders",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@robhan-cdk-lib/aws_grafana.AuthenticationProviders"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "If this is CUSTOMER_MANAGED, you must manage those roles and permissions yourself.\n\nIf you are working with a workspace in a member account of an organization and that account is\nnot a delegated administrator account, and you want the workspace to access data sources in\nother AWS accounts in the organization, this parameter must be set to CUSTOMER_MANAGED.\n\nRequired field.",
+            "stability": "stable",
+            "summary": "If this is SERVICE_MANAGED, and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 239
+          },
+          "name": "permissionType",
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.PermissionTypes"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Must be 1-64 characters long and contain only printable ASCII characters.",
+            "stability": "stable",
+            "summary": "A unique, case-sensitive, user-provided identifier to ensure the idempotency of the request."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 178
+          },
+          "name": "clientToken",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "This list is only used when the workspace was created through the AWS console, and the\npermissionType is SERVICE_MANAGED.",
+            "stability": "stable",
+            "summary": "Specifies the AWS data sources that have been configured to have IAM roles and permissions created to allow Amazon Managed Grafana to read data from these sources."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 186
+          },
+          "name": "dataSources",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Maximum length of 2048 characters.",
+            "stability": "stable",
+            "summary": "The user-defined description of the workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 193
+          },
+          "name": "description",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Must be 1-255 characters long and contain only alphanumeric characters, hyphens, dots,\nunderscores, and tildes.",
+            "stability": "stable",
+            "summary": "The name of the workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 201
+          },
+          "name": "name",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "The configuration settings for network access to your workspace."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 206
+          },
+          "name": "networkAccessControl",
+          "optional": true,
+          "type": {
+            "fqn": "@robhan-cdk-lib/aws_grafana.NetworkAccessControl"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 212
+          },
+          "name": "notificationDestinations",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@robhan-cdk-lib/aws_grafana.NotificationDestinations"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
             "stability": "stable",
-            "summary": "The list of Amazon EC2 security groups attached to the Amazon VPC for your Grafana workspace to connect."
+            "summary": "Specifies the organizational units that this workspace is allowed to use data sources from, if this workspace is in an account that is part of an organization."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 247
+            "line": 218
           },
-          "name": "securityGroups",
+          "name": "organizationalUnits",
+          "optional": true,
           "type": {
             "collection": {
               "elementtype": {
-                "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+                "primitive": "string"
               },
               "kind": "array"
             }
@@ -4696,274 +5848,366 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "Array Members: Minimum number of 2 items. Maximum number of 6 items.\n\nRequired for VPC configuration.",
+            "remarks": "Maximum length of 2048 characters.",
             "stability": "stable",
-            "summary": "The list of Amazon EC2 subnets created in the Amazon VPC for your Grafana workspace to connect. Duplicates not allowed."
+            "summary": "Name of the IAM role to use for the organization."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 257
+            "line": 224
           },
-          "name": "subnets",
+          "name": "organizationRoleName",
+          "optional": true,
           "type": {
-            "collection": {
-              "elementtype": {
-                "fqn": "aws-cdk-lib.aws_ec2.ISubnet"
-              },
-              "kind": "array"
-            }
+            "primitive": "string"
           }
-        }
-      ],
-      "symbolId": "src/workspace:VpcConfiguration"
-    },
-    "@robhan-cdk-lib/aws_grafana.Workspace": {
-      "assembly": "@robhan-cdk-lib/aws_grafana",
-      "base": "constructs.Construct",
-      "docs": {
-        "remarks": "In a workspace, you can create Grafana dashboards and visualizations to\nanalyze your metrics, logs, and traces. You don't have to build, package, or deploy any hardware\nto run the Grafana server.",
-        "stability": "stable",
-        "summary": "Specifies a workspace."
-      },
-      "fqn": "@robhan-cdk-lib/aws_grafana.Workspace",
-      "initializer": {
-        "docs": {
-          "stability": "stable"
-        },
-        "locationInModule": {
-          "filename": "src/workspace.ts",
-          "line": 1186
         },
-        "parameters": [
-          {
-            "name": "scope",
-            "type": {
-              "fqn": "constructs.Construct"
-            }
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Setting to true allows workspace\nadmins to install, uninstall, and update plugins from within the Grafana workspace.\n\nThis option is only valid for workspaces that support Grafana version 9 or newer.\n\nDefault: false",
+            "stability": "stable",
+            "summary": "Whether plugin administration is enabled in the workspace."
           },
-          {
-            "name": "id",
-            "type": {
-              "primitive": "string"
-            }
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/workspace.ts",
+            "line": 249
           },
-          {
-            "name": "props",
-            "type": {
-              "fqn": "@robhan-cdk-lib/aws_grafana.WorkspaceProps"
-            }
+          "name": "pluginAdminEnabled",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
           }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "src/workspace.ts",
-        "line": 476
-      },
-      "name": "Workspace",
-      "properties": [
+        },
         {
+          "abstract": true,
           "docs": {
-            "remarks": "If this is\nORGANIZATION, the OrganizationalUnits parameter specifies which organizational units the\nworkspace can access.",
             "stability": "stable",
-            "summary": "Specifies whether the workspace can access AWS resources in this AWS account only, or whether it can also access AWS resources in other accounts in the same organization."
+            "summary": "The IAM role that grants permissions to the AWS resources that the workspace will view data from."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 1040
+            "line": 255
           },
-          "name": "accountAccessType",
+          "name": "role",
+          "optional": true,
           "type": {
-            "fqn": "@robhan-cdk-lib/aws_grafana.AccountAccessType"
+            "fqn": "aws-cdk-lib.aws_iam.IRole"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "Specifies whether this workspace uses SAML 2.0, AWS IAM Identity Center, or both to authenticate users for using the Grafana console within a workspace."
+            "summary": "If the workspace uses SAML, use this structure to map SAML assertion attributes to workspace user information and define which groups in the assertion attribute are to have the Admin and Editor roles in the workspace."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 1046
+            "line": 262
           },
-          "name": "authenticationProviders",
+          "name": "samlConfiguration",
+          "optional": true,
           "type": {
-            "collection": {
-              "elementtype": {
-                "fqn": "@robhan-cdk-lib/aws_grafana.AuthenticationProviders"
-              },
-              "kind": "array"
-            }
+            "fqn": "@robhan-cdk-lib/aws_grafana.SamlConfiguration"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "The date that the workspace was created."
+            "summary": "The name of the AWS CloudFormation stack set that is used to generate IAM roles to be used for this workspace."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 1148
+            "line": 268
           },
-          "name": "creationTimestamp",
+          "name": "stackSetName",
+          "optional": true,
           "type": {
             "primitive": "string"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "The URL that users can use to access the Grafana console in the workspace."
+            "summary": "The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 1153
+            "line": 274
           },
-          "name": "endpoint",
+          "name": "vpcConfiguration",
+          "optional": true,
           "type": {
-            "primitive": "string"
+            "fqn": "@robhan-cdk-lib/aws_grafana.VpcConfiguration"
           }
         },
         {
+          "abstract": true,
           "docs": {
+            "remarks": "Either this or the workspaceId must be provided.",
             "stability": "stable",
-            "summary": "Specifies the version of Grafana supported by this workspace."
+            "summary": "The arn of this workspace."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 1158
+            "line": 281
           },
-          "name": "grafanaVersion",
+          "name": "workspaceArn",
+          "optional": true,
           "type": {
             "primitive": "string"
           }
         },
         {
+          "abstract": true,
           "docs": {
+            "remarks": "Either this or the workspaceArn must be provided.",
             "stability": "stable",
             "summary": "The unique ID of this workspace."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 1163
+            "line": 288
           },
-          "name": "id",
+          "name": "workspaceId",
+          "optional": true,
           "type": {
             "primitive": "string"
           }
+        }
+      ],
+      "symbolId": "src/workspace:WorkspaceAttributes"
+    },
+    "@robhan-cdk-lib/aws_grafana.WorkspaceBase": {
+      "abstract": true,
+      "assembly": "@robhan-cdk-lib/aws_grafana",
+      "base": "aws-cdk-lib.Resource",
+      "docs": {
+        "stability": "stable"
+      },
+      "fqn": "@robhan-cdk-lib/aws_grafana.WorkspaceBase",
+      "initializer": {
+        "docs": {
+          "stability": "stable"
+        },
+        "locationInModule": {
+          "filename": "core/lib/resource.ts",
+          "line": 155
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "optional": true,
+            "type": {
+              "fqn": "aws-cdk-lib.ResourceProps"
+            }
+          }
+        ]
+      },
+      "interfaces": [
+        "@robhan-cdk-lib/aws_grafana.IWorkspace"
+      ],
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/workspace-base.ts",
+        "line": 469
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "stable"
+          },
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 570
+          },
+          "name": "getWorkspaceArn",
+          "parameters": [
+            {
+              "name": "workspaceId",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "protected": true,
+          "returns": {
+            "type": {
+              "primitive": "string"
+            }
+          }
         },
         {
+          "docs": {
+            "stability": "stable"
+          },
+          "locationInModule": {
+            "filename": "src/workspace-base.ts",
+            "line": 575
+          },
+          "name": "getWorkspaceId",
+          "parameters": [
+            {
+              "name": "workspaceArn",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "protected": true,
+          "returns": {
+            "type": {
+              "primitive": "string"
+            }
+          }
+        }
+      ],
+      "name": "WorkspaceBase",
+      "properties": [
+        {
+          "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "The most recent date that the workspace was modified."
+            "summary": "The account access type for the workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1168
+            "filename": "src/workspace-base.ts",
+            "line": 474
           },
-          "name": "modificationTimestamp",
+          "name": "accountAccessType",
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
-            "primitive": "string"
+            "fqn": "@robhan-cdk-lib/aws_grafana.AccountAccessType"
           }
         },
         {
+          "abstract": true,
           "docs": {
-            "remarks": "If this is CUSTOMER_MANAGED, you must manage those roles and permissions yourself.\n\nIf you are working with a workspace in a member account of an organization and that account is\nnot a delegated administrator account, and you want the workspace to access data sources in\nother AWS accounts in the organization, this parameter must be set to CUSTOMER_MANAGED.",
             "stability": "stable",
-            "summary": "If this is SERVICE_MANAGED, and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels."
+            "summary": "The authentication providers for the workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1105
+            "filename": "src/workspace-base.ts",
+            "line": 479
           },
-          "name": "permissionType",
+          "name": "authenticationProviders",
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
-            "fqn": "@robhan-cdk-lib/aws_grafana.PermissionTypes"
+            "collection": {
+              "elementtype": {
+                "fqn": "@robhan-cdk-lib/aws_grafana.AuthenticationProviders"
+              },
+              "kind": "array"
+            }
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "Specifies whether the workspace's SAML configuration is complete."
+            "summary": "The permission type for the workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1173
+            "filename": "src/workspace-base.ts",
+            "line": 525
           },
-          "name": "samlConfigurationStatus",
+          "name": "permissionType",
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
-            "fqn": "@robhan-cdk-lib/aws_grafana.SamlConfigurationStatuses"
+            "fqn": "@robhan-cdk-lib/aws_grafana.PermissionTypes"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "The ID of the IAM Identity Center-managed application that is created by Amazon Managed Grafana."
+            "summary": "The ARN of this workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1179
+            "filename": "src/workspace-base.ts",
+            "line": 568
           },
-          "name": "ssoClientId",
+          "name": "workspaceArn",
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "primitive": "string"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "The current status of the workspace."
+            "summary": "The unique ID of this workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1184
+            "filename": "src/workspace-base.ts",
+            "line": 563
           },
-          "name": "status",
+          "name": "workspaceId",
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
-            "fqn": "@robhan-cdk-lib/aws_grafana.Status"
+            "primitive": "string"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "A unique, case-sensitive, user-provided identifier to ensure the idempotency of the request."
+            "summary": "The client token for the workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1051
+            "filename": "src/workspace-base.ts",
+            "line": 484
           },
           "name": "clientToken",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "primitive": "string"
           }
         },
         {
+          "abstract": true,
           "docs": {
-            "remarks": "This list is only used when the workspace was created through the AWS console, and the\npermissionType is SERVICE_MANAGED.",
             "stability": "stable",
-            "summary": "Specifies the AWS data sources that have been configured to have IAM roles and permissions created to allow Amazon Managed Grafana to read data from these sources."
+            "summary": "The data sources of this workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1060
+            "filename": "src/workspace-base.ts",
+            "line": 489
           },
           "name": "dataSources",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "collection": {
               "elementtype": {
@@ -4974,65 +6218,73 @@
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "The user-defined description of the workspace."
+            "summary": "The description of this workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1065
+            "filename": "src/workspace-base.ts",
+            "line": 494
           },
           "name": "description",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "primitive": "string"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "The name of the workspace."
+            "summary": "The name of this workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1070
+            "filename": "src/workspace-base.ts",
+            "line": 499
           },
           "name": "name",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "primitive": "string"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
             "summary": "The configuration settings for network access to your workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1075
+            "filename": "src/workspace-base.ts",
+            "line": 504
           },
           "name": "networkAccessControl",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "fqn": "@robhan-cdk-lib/aws_grafana.NetworkAccessControl"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels."
+            "summary": "The notification destinations for the workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1081
+            "filename": "src/workspace-base.ts",
+            "line": 509
           },
           "name": "notificationDestinations",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "collection": {
               "elementtype": {
@@ -5043,17 +6295,19 @@
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
             "summary": "Specifies the organizational units that this workspace is allowed to use data sources from, if this workspace is in an account that is part of an organization."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1087
+            "filename": "src/workspace-base.ts",
+            "line": 515
           },
           "name": "organizationalUnits",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "collection": {
               "elementtype": {
@@ -5064,22 +6318,25 @@
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
             "summary": "The name of the IAM role that is used to access resources through Organizations."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1092
+            "filename": "src/workspace-base.ts",
+            "line": 520
           },
           "name": "organizationRoleName",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "primitive": "string"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "remarks": "Setting to true allows workspace\nadmins to install, uninstall, and update plugins from within the Grafana workspace.\n\nThis option is only valid for workspaces that support Grafana version 9 or newer.",
             "stability": "stable",
@@ -5087,81 +6344,90 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1113
+            "filename": "src/workspace-base.ts",
+            "line": 533
           },
           "name": "pluginAdminEnabled",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "primitive": "boolean"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
             "summary": "The IAM role that grants permissions to the AWS resources that the workspace will view data from."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1119
+            "filename": "src/workspace-base.ts",
+            "line": 539
           },
           "name": "role",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "fqn": "aws-cdk-lib.aws_iam.IRole"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
             "summary": "If the workspace uses SAML, use this structure to map SAML assertion attributes to workspace user information and define which groups in the assertion attribute are to have the Admin and Editor roles in the workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1126
+            "filename": "src/workspace-base.ts",
+            "line": 546
           },
           "name": "samlConfiguration",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "fqn": "@robhan-cdk-lib/aws_grafana.SamlConfiguration"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
             "summary": "The name of the AWS CloudFormation stack set that is used to generate IAM roles to be used for this workspace."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1132
+            "filename": "src/workspace-base.ts",
+            "line": 552
           },
           "name": "stackSetName",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "primitive": "string"
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
             "summary": "The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/workspace.ts",
-            "line": 1138
+            "filename": "src/workspace-base.ts",
+            "line": 558
           },
           "name": "vpcConfiguration",
           "optional": true,
+          "overrides": "@robhan-cdk-lib/aws_grafana.IWorkspace",
           "type": {
             "fqn": "@robhan-cdk-lib/aws_grafana.VpcConfiguration"
           }
         }
       ],
-      "symbolId": "src/workspace:Workspace"
+      "symbolId": "src/workspace-base:WorkspaceBase"
     },
     "@robhan-cdk-lib/aws_grafana.WorkspaceProps": {
       "assembly": "@robhan-cdk-lib/aws_grafana",
@@ -5174,7 +6440,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/workspace.ts",
-        "line": 263
+        "line": 21
       },
       "name": "WorkspaceProps",
       "properties": [
@@ -5188,7 +6454,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 272
+            "line": 30
           },
           "name": "accountAccessType",
           "type": {
@@ -5205,7 +6471,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 280
+            "line": 38
           },
           "name": "authenticationProviders",
           "type": {
@@ -5227,7 +6493,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 358
+            "line": 116
           },
           "name": "permissionType",
           "type": {
@@ -5244,7 +6510,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 287
+            "line": 45
           },
           "name": "clientToken",
           "optional": true,
@@ -5262,7 +6528,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 295
+            "line": 53
           },
           "name": "dataSources",
           "optional": true,
@@ -5285,7 +6551,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 302
+            "line": 60
           },
           "name": "description",
           "optional": true,
@@ -5303,7 +6569,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 312
+            "line": 70
           },
           "name": "grafanaVersion",
           "optional": true,
@@ -5321,7 +6587,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 320
+            "line": 78
           },
           "name": "name",
           "optional": true,
@@ -5338,7 +6604,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 325
+            "line": 83
           },
           "name": "networkAccessControl",
           "optional": true,
@@ -5355,7 +6621,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 331
+            "line": 89
           },
           "name": "notificationDestinations",
           "optional": true,
@@ -5377,7 +6643,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 337
+            "line": 95
           },
           "name": "organizationalUnits",
           "optional": true,
@@ -5400,7 +6666,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 343
+            "line": 101
           },
           "name": "organizationRoleName",
           "optional": true,
@@ -5418,7 +6684,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 368
+            "line": 126
           },
           "name": "pluginAdminEnabled",
           "optional": true,
@@ -5435,7 +6701,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 374
+            "line": 132
           },
           "name": "role",
           "optional": true,
@@ -5452,7 +6718,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 381
+            "line": 139
           },
           "name": "samlConfiguration",
           "optional": true,
@@ -5469,7 +6735,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 387
+            "line": 145
           },
           "name": "stackSetName",
           "optional": true,
@@ -5486,7 +6752,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/workspace.ts",
-            "line": 393
+            "line": 151
           },
           "name": "vpcConfiguration",
           "optional": true,
@@ -5498,6 +6764,6 @@
       "symbolId": "src/workspace:WorkspaceProps"
     }
   },
-  "version": "0.0.24",
-  "fingerprint": "B/TOVK0n5NoEkYaD0H3kN/UBFEp75r5hH89EmBGvZA0="
+  "version": "0.0.26",
+  "fingerprint": "taP7+x4nTgpKnB4lNNZr9ntltOPh7qyIAOCTg56OhHM="
 }