appmod-catalog-blueprints 1.0.0__py3-none-any.whl → 1.1.0__py3-none-any.whl

appmod_catalog_blueprints/__init__.py

@@ -281,7 +281,6 @@ import aws_cdk.aws_s3 as _aws_cdk_aws_s3_ceddda9d
 import aws_cdk.aws_s3_assets as _aws_cdk_aws_s3_assets_ceddda9d
 import aws_cdk.aws_s3_deployment as _aws_cdk_aws_s3_deployment_ceddda9d
 import aws_cdk.aws_secretsmanager as _aws_cdk_aws_secretsmanager_ceddda9d
-import aws_cdk.aws_sqs as _aws_cdk_aws_sqs_ceddda9d
 import aws_cdk.aws_stepfunctions as _aws_cdk_aws_stepfunctions_ceddda9d
 import aws_cdk.aws_stepfunctions_tasks as _aws_cdk_aws_stepfunctions_tasks_ceddda9d
 import aws_cdk.custom_resources as _aws_cdk_custom_resources_ceddda9d
@@ -612,6 +611,7 @@ class AdditionalDistributionProps:
     name_mapping={
         "agent_system_prompt": "agentSystemPrompt",
         "lambda_layers": "lambdaLayers",
+        "tools_bucket": "toolsBucket",
         "tools_location": "toolsLocation",
     },
 )
@@ -621,12 +621,14 @@ class AgentProps:
         *,
         agent_system_prompt: typing.Optional[builtins.str] = None,
         lambda_layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.LayerVersion]] = None,
+        tools_bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
         tools_location: typing.Optional[typing.Sequence[builtins.str]] = None,
     ) -> None:
         '''
-        :param agent_system_prompt: 
-        :param lambda_layers: 
-        :param tools_location: 
+        :param agent_system_prompt: (experimental) System prompt for the agent.
+        :param lambda_layers: (experimental) If there are python dependencies that are needed by the provided tools, provide the Lambda Layers with the dependencies.
+        :param tools_bucket: (experimental) Bucket where the tools are located in Primarily use to grant read permission to the processing agent to access the tools. Default: No extra IAM permissions would be automatically assigned to the processing agent.
+        :param tools_location: (experimental) S3 path where the tools are located. The agent would dynamically load the tools
 
         :stability: experimental
         '''
@@ -634,18 +636,22 @@ class AgentProps:
             type_hints = typing.get_type_hints(_typecheckingstub__e1a82500ee072f393cd9a2ada2f9a3434219c7a51186f26fbba3061bd896d11e)
             check_type(argname="argument agent_system_prompt", value=agent_system_prompt, expected_type=type_hints["agent_system_prompt"])
             check_type(argname="argument lambda_layers", value=lambda_layers, expected_type=type_hints["lambda_layers"])
+            check_type(argname="argument tools_bucket", value=tools_bucket, expected_type=type_hints["tools_bucket"])
             check_type(argname="argument tools_location", value=tools_location, expected_type=type_hints["tools_location"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if agent_system_prompt is not None:
             self._values["agent_system_prompt"] = agent_system_prompt
         if lambda_layers is not None:
             self._values["lambda_layers"] = lambda_layers
+        if tools_bucket is not None:
+            self._values["tools_bucket"] = tools_bucket
         if tools_location is not None:
             self._values["tools_location"] = tools_location
 
     @builtins.property
     def agent_system_prompt(self) -> typing.Optional[builtins.str]:
-        '''
+        '''(experimental) System prompt for the agent.
+
         :stability: experimental
         '''
         result = self._values.get("agent_system_prompt")
@@ -655,15 +661,33 @@ class AgentProps:
     def lambda_layers(
         self,
     ) -> typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.LayerVersion]]:
-        '''
+        '''(experimental) If there are python dependencies that are needed by the provided tools, provide the Lambda Layers with the dependencies.
+
         :stability: experimental
         '''
         result = self._values.get("lambda_layers")
         return typing.cast(typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.LayerVersion]], result)
 
     @builtins.property
-    def tools_location(self) -> typing.Optional[typing.List[builtins.str]]:
+    def tools_bucket(self) -> typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket]:
+        '''(experimental) Bucket where the tools are located in Primarily use to grant read permission to the processing agent to access the tools.
+
+        :default:
+
+        No extra IAM permissions would be automatically
+        assigned to the processing agent.
+
+        :stability: experimental
         '''
+        result = self._values.get("tools_bucket")
+        return typing.cast(typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket], result)
+
+    @builtins.property
+    def tools_location(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''(experimental) S3 path where the tools are located.
+
+        The agent would dynamically load the tools
+
         :stability: experimental
         '''
         result = self._values.get("tools_location")
@@ -1240,6 +1264,54 @@ class DatabaseEngine(enum.Enum):
     '''
 
 
+class DefaultDocumentProcessingConfig(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.DefaultDocumentProcessingConfig",
+):
+    '''
+    :stability: experimental
+    '''
+
+    def __init__(self) -> None:
+        '''
+        :stability: experimental
+        '''
+        jsii.create(self.__class__, self, [])
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DEFAULT_OBSERVABILITY_METRIC_SVC_NAME")
+    def DEFAULT_OBSERVABILITY_METRIC_SVC_NAME(cls) -> builtins.str:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(builtins.str, jsii.sget(cls, "DEFAULT_OBSERVABILITY_METRIC_SVC_NAME"))
+
+
+class DefaultObservabilityConfig(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.DefaultObservabilityConfig",
+):
+    '''(experimental) Contains default constants for Observability related configuration.
+
+    :stability: experimental
+    '''
+
+    def __init__(self) -> None:
+        '''
+        :stability: experimental
+        '''
+        jsii.create(self.__class__, self, [])
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DEFAULT_METRIC_NAMESPACE")
+    def DEFAULT_METRIC_NAMESPACE(cls) -> builtins.str:
+        '''(experimental) Default namespace for powertools.
+
+        :stability: experimental
+        '''
+        return typing.cast(builtins.str, jsii.sget(cls, "DEFAULT_METRIC_NAMESPACE"))
+
+
 class DefaultRuntimes(
     metaclass=jsii.JSIIMeta,
     jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.DefaultRuntimes",
@@ -1296,36 +1368,6 @@ class DefaultRuntimes(
         return typing.cast(_aws_cdk_aws_lambda_python_alpha_49328424.BundlingOptions, jsii.sget(cls, "PYTHON_FUNCTION_BUNDLING"))
 
 
-@jsii.enum(jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.DocumentProcessingPrefix")
-class DocumentProcessingPrefix(enum.Enum):
-    '''(experimental) S3 prefix constants for organizing documents throughout the processing lifecycle.
-
-    Documents flow through these prefixes based on processing outcomes:
-
-    - Upload → raw/ (triggers processing)
-    - Success → processed/ (workflow completed successfully)
-    - Failure → failed/ (workflow encountered errors)
-
-    :stability: experimental
-    '''
-
-    RAW = "RAW"
-    '''(experimental) Prefix for newly uploaded documents awaiting processing.
-
-    :stability: experimental
-    '''
-    FAILED = "FAILED"
-    '''(experimental) Prefix for documents that failed processing.
-
-    :stability: experimental
-    '''
-    PROCESSED = "PROCESSED"
-    '''(experimental) Prefix for successfully processed documents.
-
-    :stability: experimental
-    '''
-
-
 class EventbridgeBroker(
     _constructs_77d1e7e8.Construct,
     metaclass=jsii.JSIIMeta,
@@ -1929,156 +1971,476 @@ class FrontendProps:
         )
 
 
-@jsii.interface(jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.IObservable")
-class IObservable(typing_extensions.Protocol):
-    '''(experimental) Interface providing configuration parameters for constructs that support Observability.
+@jsii.interface(jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.IAdapter")
+class IAdapter(typing_extensions.Protocol):
+    '''(experimental) Abstraction to enable different types of source triggers for the intelligent document processing workflow.
 
     :stability: experimental
     '''
 
-    @builtins.property
-    @jsii.member(jsii_name="logGroupDataProtection")
-    def log_group_data_protection(self) -> "LogGroupDataProtectionProps":
-        '''
-        :stability: experimental
-        '''
-        ...
+    @jsii.member(jsii_name="createFailedChain")
+    def create_failed_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for failed processing.
+
+        :param scope: Scope to use in relation to the CDK hierarchy.
+
+        :return: Chain to be added to the state machine to handle failure scenarios
 
-    @builtins.property
-    @jsii.member(jsii_name="metricNamespace")
-    def metric_namespace(self) -> builtins.str:
-        '''
         :stability: experimental
         '''
         ...
 
-    @builtins.property
-    @jsii.member(jsii_name="metricServiceName")
-    def metric_service_name(self) -> builtins.str:
-        '''
+    @jsii.member(jsii_name="createIngressTrigger")
+    def create_ingress_trigger(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional["IAdapter"] = None,
+        network: typing.Optional["Network"] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union["LogGroupDataProtectionProps", typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''(experimental) Create resources that would receive the data and trigger the workflow.
+
+        Important: resource created should trigger the state machine
+
+        :param scope: Scope to use in relation to the CDK hierarchy.
+        :param state_machine: The workflow of the document processor.
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
+
+        :return: Resources that are created
+
         :stability: experimental
         '''
         ...
 
-    @jsii.member(jsii_name="metrics")
-    def metrics(self) -> typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric]:
-        '''
+    @jsii.member(jsii_name="createSuccessChain")
+    def create_success_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for successful processing.
+
+        :param scope: Scope to use in relation to the CDK hierarchy.
+
+        :return: Chain to be added to the state machine to handle successful scenarios
+
         :stability: experimental
         '''
         ...
 
+    @jsii.member(jsii_name="generateAdapterIAMPolicies")
+    def generate_adapter_iam_policies(
+        self,
+        additional_iam_actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+        narrow_actions: typing.Optional[builtins.bool] = None,
+    ) -> typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]:
+        '''(experimental) Generate IAM statements that can be used by other resources to access the storage.
 
-class _IObservableProxy:
-    '''(experimental) Interface providing configuration parameters for constructs that support Observability.
+        :param additional_iam_actions: (Optional) list of additional actions in relation to the underlying storage for the adapter.
+        :param narrow_actions: (Optional) whether the resulting permissions would only be the IAM actions indicated in the ``additionalIAMActions`` parameter.
 
-    :stability: experimental
-    '''
+        :default: false
 
-    __jsii_type__: typing.ClassVar[str] = "@cdklabs/cdk-appmod-catalog-blueprints.IObservable"
+        :return: PolicyStatement[] IAM policy statements that would included in the state machine IAM role
 
-    @builtins.property
-    @jsii.member(jsii_name="logGroupDataProtection")
-    def log_group_data_protection(self) -> "LogGroupDataProtectionProps":
-        '''
         :stability: experimental
         '''
-        return typing.cast("LogGroupDataProtectionProps", jsii.get(self, "logGroupDataProtection"))
+        ...
 
-    @builtins.property
-    @jsii.member(jsii_name="metricNamespace")
-    def metric_namespace(self) -> builtins.str:
-        '''
-        :stability: experimental
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "metricNamespace"))
+    @jsii.member(jsii_name="init")
+    def init(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional["IAdapter"] = None,
+        network: typing.Optional["Network"] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union["LogGroupDataProtectionProps", typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Initializes the adapter.
 
-    @builtins.property
-    @jsii.member(jsii_name="metricServiceName")
-    def metric_service_name(self) -> builtins.str:
-        '''
-        :stability: experimental
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "metricServiceName"))
+        :param scope: Scope to use in relation to the CDK hierarchy.
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
 
-    @jsii.member(jsii_name="metrics")
-    def metrics(self) -> typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric]:
-        '''
         :stability: experimental
         '''
-        return typing.cast(typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric], jsii.invoke(self, "metrics", []))
-
-# Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
-typing.cast(typing.Any, IObservable).__jsii_proxy_class__ = lambda : _IObservableProxy
+        ...
 
 
-class LambdaIamUtils(
-    metaclass=jsii.JSIIMeta,
-    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.LambdaIamUtils",
-):
-    '''(experimental) Utility class for creating secure Lambda IAM policy statements with minimal permissions.
+class _IAdapterProxy:
+    '''(experimental) Abstraction to enable different types of source triggers for the intelligent document processing workflow.
 
     :stability: experimental
     '''
 
-    def __init__(self) -> None:
-        '''
-        :stability: experimental
-        '''
-        jsii.create(self.__class__, self, [])
+    __jsii_type__: typing.ClassVar[str] = "@cdklabs/cdk-appmod-catalog-blueprints.IAdapter"
 
-    @jsii.member(jsii_name="createDynamoDbPolicyStatement")
-    @builtins.classmethod
-    def create_dynamo_db_policy_statement(
-        cls,
-        table_arn: builtins.str,
-        actions: typing.Optional[typing.Sequence[builtins.str]] = None,
-    ) -> _aws_cdk_aws_iam_ceddda9d.PolicyStatement:
-        '''(experimental) Creates a policy statement for DynamoDB table access.
+    @jsii.member(jsii_name="createFailedChain")
+    def create_failed_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for failed processing.
 
-        :param table_arn: The ARN of the DynamoDB table.
-        :param actions: The DynamoDB actions to allow.
+        :param scope: Scope to use in relation to the CDK hierarchy.
 
-        :return: PolicyStatement for DynamoDB access
+        :return: Chain to be added to the state machine to handle failure scenarios
 
         :stability: experimental
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__8fea74c9846ad0c5bdddcbfe10063247cb7bcf58aac91e0be80d1226246784e4)
-            check_type(argname="argument table_arn", value=table_arn, expected_type=type_hints["table_arn"])
-            check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
-        return typing.cast(_aws_cdk_aws_iam_ceddda9d.PolicyStatement, jsii.sinvoke(cls, "createDynamoDbPolicyStatement", [table_arn, actions]))
+            type_hints = typing.get_type_hints(_typecheckingstub__5998f6c7e16512d92cd00097e77d737333304685208eb36a522c156f8378a9e7)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast(_aws_cdk_aws_stepfunctions_ceddda9d.Chain, jsii.invoke(self, "createFailedChain", [scope]))
 
-    @jsii.member(jsii_name="createKmsPolicyStatement")
-    @builtins.classmethod
-    def create_kms_policy_statement(
-        cls,
-        key_arn: builtins.str,
-        actions: typing.Optional[typing.Sequence[builtins.str]] = None,
-    ) -> _aws_cdk_aws_iam_ceddda9d.PolicyStatement:
-        '''(experimental) Creates a policy statement for KMS key access.
+    @jsii.member(jsii_name="createIngressTrigger")
+    def create_ingress_trigger(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
+        network: typing.Optional["Network"] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union["LogGroupDataProtectionProps", typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''(experimental) Create resources that would receive the data and trigger the workflow.
 
-        :param key_arn: The ARN of the KMS key.
-        :param actions: The KMS actions to allow.
+        Important: resource created should trigger the state machine
 
-        :return: PolicyStatement for KMS access
+        :param scope: Scope to use in relation to the CDK hierarchy.
+        :param state_machine: The workflow of the document processor.
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
+
+        :return: Resources that are created
 
         :stability: experimental
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__ef86294be8c776ba98bebc269fab82304f75649efab35cf030d999168ba5d690)
-            check_type(argname="argument key_arn", value=key_arn, expected_type=type_hints["key_arn"])
-            check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
-        return typing.cast(_aws_cdk_aws_iam_ceddda9d.PolicyStatement, jsii.sinvoke(cls, "createKmsPolicyStatement", [key_arn, actions]))
-
-    @jsii.member(jsii_name="createLogsPermissions")
-    @builtins.classmethod
-    def create_logs_permissions(
-        cls,
-        *,
-        account: builtins.str,
-        function_name: builtins.str,
+            type_hints = typing.get_type_hints(_typecheckingstub__b61e74ddd8982f4b30ae59307c9fb3adaff26122ddc7f5faabc2cc8e1e2da034)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument state_machine", value=state_machine, expected_type=type_hints["state_machine"])
+        props = BaseDocumentProcessingProps(
+            document_processing_table=document_processing_table,
+            enable_observability=enable_observability,
+            encryption_key=encryption_key,
+            eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
+            network=network,
+            removal_policy=removal_policy,
+            workflow_timeout=workflow_timeout,
+            log_group_data_protection=log_group_data_protection,
+            metric_namespace=metric_namespace,
+            metric_service_name=metric_service_name,
+        )
+
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "createIngressTrigger", [scope, state_machine, props]))
+
+    @jsii.member(jsii_name="createSuccessChain")
+    def create_success_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for successful processing.
+
+        :param scope: Scope to use in relation to the CDK hierarchy.
+
+        :return: Chain to be added to the state machine to handle successful scenarios
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__cd0aad7a5879633fca8d89cbf92e8f5a13e31615116036f29a82a58c1bb4727d)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast(_aws_cdk_aws_stepfunctions_ceddda9d.Chain, jsii.invoke(self, "createSuccessChain", [scope]))
+
+    @jsii.member(jsii_name="generateAdapterIAMPolicies")
+    def generate_adapter_iam_policies(
+        self,
+        additional_iam_actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+        narrow_actions: typing.Optional[builtins.bool] = None,
+    ) -> typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]:
+        '''(experimental) Generate IAM statements that can be used by other resources to access the storage.
+
+        :param additional_iam_actions: (Optional) list of additional actions in relation to the underlying storage for the adapter.
+        :param narrow_actions: (Optional) whether the resulting permissions would only be the IAM actions indicated in the ``additionalIAMActions`` parameter.
+
+        :default: false
+
+        :return: PolicyStatement[] IAM policy statements that would included in the state machine IAM role
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__82a45114a0ff76d4b9d091edd6674d4e762dc5ca19631d61579cf1aa47e30b5e)
+            check_type(argname="argument additional_iam_actions", value=additional_iam_actions, expected_type=type_hints["additional_iam_actions"])
+            check_type(argname="argument narrow_actions", value=narrow_actions, expected_type=type_hints["narrow_actions"])
+        return typing.cast(typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement], jsii.invoke(self, "generateAdapterIAMPolicies", [additional_iam_actions, narrow_actions]))
+
+    @jsii.member(jsii_name="init")
+    def init(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
+        network: typing.Optional["Network"] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union["LogGroupDataProtectionProps", typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Initializes the adapter.
+
+        :param scope: Scope to use in relation to the CDK hierarchy.
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__17f7e7f35ea8e49cf6ded248435aa1e1dcf416e61c549f3e7b74baad3ac399e7)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        props = BaseDocumentProcessingProps(
+            document_processing_table=document_processing_table,
+            enable_observability=enable_observability,
+            encryption_key=encryption_key,
+            eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
+            network=network,
+            removal_policy=removal_policy,
+            workflow_timeout=workflow_timeout,
+            log_group_data_protection=log_group_data_protection,
+            metric_namespace=metric_namespace,
+            metric_service_name=metric_service_name,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "init", [scope, props]))
+
+# Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
+typing.cast(typing.Any, IAdapter).__jsii_proxy_class__ = lambda : _IAdapterProxy
+
+
+@jsii.interface(jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.IObservable")
+class IObservable(typing_extensions.Protocol):
+    '''(experimental) Interface providing configuration parameters for constructs that support Observability.
+
+    :stability: experimental
+    '''
+
+    @builtins.property
+    @jsii.member(jsii_name="logGroupDataProtection")
+    def log_group_data_protection(self) -> "LogGroupDataProtectionProps":
+        '''
+        :stability: experimental
+        '''
+        ...
+
+    @builtins.property
+    @jsii.member(jsii_name="metricNamespace")
+    def metric_namespace(self) -> builtins.str:
+        '''
+        :stability: experimental
+        '''
+        ...
+
+    @builtins.property
+    @jsii.member(jsii_name="metricServiceName")
+    def metric_service_name(self) -> builtins.str:
+        '''
+        :stability: experimental
+        '''
+        ...
+
+    @jsii.member(jsii_name="metrics")
+    def metrics(self) -> typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric]:
+        '''
+        :stability: experimental
+        '''
+        ...
+
+
+class _IObservableProxy:
+    '''(experimental) Interface providing configuration parameters for constructs that support Observability.
+
+    :stability: experimental
+    '''
+
+    __jsii_type__: typing.ClassVar[str] = "@cdklabs/cdk-appmod-catalog-blueprints.IObservable"
+
+    @builtins.property
+    @jsii.member(jsii_name="logGroupDataProtection")
+    def log_group_data_protection(self) -> "LogGroupDataProtectionProps":
+        '''
+        :stability: experimental
+        '''
+        return typing.cast("LogGroupDataProtectionProps", jsii.get(self, "logGroupDataProtection"))
+
+    @builtins.property
+    @jsii.member(jsii_name="metricNamespace")
+    def metric_namespace(self) -> builtins.str:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "metricNamespace"))
+
+    @builtins.property
+    @jsii.member(jsii_name="metricServiceName")
+    def metric_service_name(self) -> builtins.str:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "metricServiceName"))
+
+    @jsii.member(jsii_name="metrics")
+    def metrics(self) -> typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric]:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric], jsii.invoke(self, "metrics", []))
+
+# Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
+typing.cast(typing.Any, IObservable).__jsii_proxy_class__ = lambda : _IObservableProxy
+
+
+class LambdaIamUtils(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.LambdaIamUtils",
+):
+    '''(experimental) Utility class for creating secure Lambda IAM policy statements with minimal permissions.
+
+    :stability: experimental
+    '''
+
+    def __init__(self) -> None:
+        '''
+        :stability: experimental
+        '''
+        jsii.create(self.__class__, self, [])
+
+    @jsii.member(jsii_name="createDynamoDbPolicyStatement")
+    @builtins.classmethod
+    def create_dynamo_db_policy_statement(
+        cls,
+        table_arn: builtins.str,
+        actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+    ) -> _aws_cdk_aws_iam_ceddda9d.PolicyStatement:
+        '''(experimental) Creates a policy statement for DynamoDB table access.
+
+        :param table_arn: The ARN of the DynamoDB table.
+        :param actions: The DynamoDB actions to allow.
+
+        :return: PolicyStatement for DynamoDB access
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8fea74c9846ad0c5bdddcbfe10063247cb7bcf58aac91e0be80d1226246784e4)
+            check_type(argname="argument table_arn", value=table_arn, expected_type=type_hints["table_arn"])
+            check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
+        return typing.cast(_aws_cdk_aws_iam_ceddda9d.PolicyStatement, jsii.sinvoke(cls, "createDynamoDbPolicyStatement", [table_arn, actions]))
+
+    @jsii.member(jsii_name="createKmsPolicyStatement")
+    @builtins.classmethod
+    def create_kms_policy_statement(
+        cls,
+        key_arn: builtins.str,
+        actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+    ) -> _aws_cdk_aws_iam_ceddda9d.PolicyStatement:
+        '''(experimental) Creates a policy statement for KMS key access.
+
+        :param key_arn: The ARN of the KMS key.
+        :param actions: The KMS actions to allow.
+
+        :return: PolicyStatement for KMS access
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ef86294be8c776ba98bebc269fab82304f75649efab35cf030d999168ba5d690)
+            check_type(argname="argument key_arn", value=key_arn, expected_type=type_hints["key_arn"])
+            check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
+        return typing.cast(_aws_cdk_aws_iam_ceddda9d.PolicyStatement, jsii.sinvoke(cls, "createKmsPolicyStatement", [key_arn, actions]))
+
+    @jsii.member(jsii_name="createLogsPermissions")
+    @builtins.classmethod
+    def create_logs_permissions(
+        cls,
+        *,
+        account: builtins.str,
+        function_name: builtins.str,
         region: builtins.str,
         scope: _constructs_77d1e7e8.Construct,
+        enable_observability: typing.Optional[builtins.bool] = None,
         log_group_name: typing.Optional[builtins.str] = None,
     ) -> "LambdaLogsPermissionsResult":
         '''(experimental) Creates CloudWatch Logs policy statements for Lambda execution.
@@ -2087,6 +2449,7 @@ class LambdaIamUtils(
         :param function_name: (experimental) The base name of the Lambda function.
         :param region: (experimental) AWS region for the log group ARN.
         :param scope: (experimental) The construct scope (used to generate unique names).
+        :param enable_observability: (experimental) Whether observability is enabled or not. This would have an impact on the result IAM policy for the LogGroup for the Lambda function Default: false
         :param log_group_name: (experimental) Custom log group name pattern. Default: '/aws/lambda/{uniqueFunctionName}'
 
         :return: Object containing policy statements and the unique function name
@@ -2098,6 +2461,7 @@ class LambdaIamUtils(
             function_name=function_name,
             region=region,
             scope=scope,
+            enable_observability=enable_observability,
             log_group_name=log_group_name,
         )
 
@@ -2293,6 +2657,14 @@ class LambdaIamUtils(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
         return typing.cast("LambdaIamUtilsStackInfo", jsii.sinvoke(cls, "getStackInfo", [scope]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="OBSERVABILITY_SUFFIX")
+    def OBSERVABILITY_SUFFIX(cls) -> builtins.str:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(builtins.str, jsii.sget(cls, "OBSERVABILITY_SUFFIX"))
+
 
 @jsii.data_type(
     jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.LambdaIamUtilsStackInfo",
@@ -2355,6 +2727,7 @@ class LambdaIamUtilsStackInfo:
         "function_name": "functionName",
         "region": "region",
         "scope": "scope",
+        "enable_observability": "enableObservability",
         "log_group_name": "logGroupName",
     },
 )
@@ -2366,6 +2739,7 @@ class LambdaLogsPermissionsProps:
         function_name: builtins.str,
         region: builtins.str,
         scope: _constructs_77d1e7e8.Construct,
+        enable_observability: typing.Optional[builtins.bool] = None,
         log_group_name: typing.Optional[builtins.str] = None,
     ) -> None:
         '''(experimental) Configuration options for Lambda CloudWatch Logs permissions.
@@ -2374,6 +2748,7 @@ class LambdaLogsPermissionsProps:
         :param function_name: (experimental) The base name of the Lambda function.
         :param region: (experimental) AWS region for the log group ARN.
         :param scope: (experimental) The construct scope (used to generate unique names).
+        :param enable_observability: (experimental) Whether observability is enabled or not. This would have an impact on the result IAM policy for the LogGroup for the Lambda function Default: false
         :param log_group_name: (experimental) Custom log group name pattern. Default: '/aws/lambda/{uniqueFunctionName}'
 
         :stability: experimental
@@ -2384,6 +2759,7 @@ class LambdaLogsPermissionsProps:
             check_type(argname="argument function_name", value=function_name, expected_type=type_hints["function_name"])
             check_type(argname="argument region", value=region, expected_type=type_hints["region"])
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument enable_observability", value=enable_observability, expected_type=type_hints["enable_observability"])
             check_type(argname="argument log_group_name", value=log_group_name, expected_type=type_hints["log_group_name"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "account": account,
@@ -2391,6 +2767,8 @@ class LambdaLogsPermissionsProps:
             "region": region,
             "scope": scope,
         }
+        if enable_observability is not None:
+            self._values["enable_observability"] = enable_observability
         if log_group_name is not None:
             self._values["log_group_name"] = log_group_name
 
@@ -2434,6 +2812,20 @@ class LambdaLogsPermissionsProps:
         assert result is not None, "Required property 'scope' is missing"
         return typing.cast(_constructs_77d1e7e8.Construct, result)
 
+    @builtins.property
+    def enable_observability(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Whether observability is enabled or not.
+
+        This would have an impact
+        on the result IAM policy for the LogGroup for the Lambda function
+
+        :default: false
+
+        :stability: experimental
+        '''
+        result = self._values.get("enable_observability")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def log_group_name(self) -> typing.Optional[builtins.str]:
         '''(experimental) Custom log group name pattern.
@@ -3025,10 +3417,354 @@ class PowertoolsConfig(
         return typing.cast(typing.Mapping[builtins.str, builtins.str], jsii.sinvoke(cls, "generateDefaultLambdaConfig", [enable_observability, metrics_namespace, service_name]))
 
 
-@jsii.implements(_aws_cdk_ceddda9d.IPropertyInjector)
-class StateMachineObservabilityPropertyInjector(
+@jsii.implements(IAdapter)
+class QueuedS3Adapter(
     metaclass=jsii.JSIIMeta,
-    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.StateMachineObservabilityPropertyInjector",
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.QueuedS3Adapter",
+):
+    '''(experimental) This adapter allows the intelligent document processing workflow to be triggered by files that are uploaded into a S3 Bucket.
+
+    :stability: experimental
+    '''
+
+    def __init__(
+        self,
+        *,
+        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
+        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
+        failed_prefix: typing.Optional[builtins.str] = None,
+        processed_prefix: typing.Optional[builtins.str] = None,
+        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        raw_prefix: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy. Default: create a new bucket
+        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
+        :param failed_prefix: (experimental) S3 prefix where the files that failed processing would be stored. Default: "failed/"
+        :param processed_prefix: (experimental) S3 prefix where the processed files would be stored. Default: "processed/"
+        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
+        :param raw_prefix: (experimental) S3 prefix where the raw files would be stored. This serves as the trigger point for processing Default: "raw/"
+
+        :stability: experimental
+        '''
+        adapter_props = QueuedS3AdapterProps(
+            bucket=bucket,
+            dlq_max_receive_count=dlq_max_receive_count,
+            failed_prefix=failed_prefix,
+            processed_prefix=processed_prefix,
+            queue_visibility_timeout=queue_visibility_timeout,
+            raw_prefix=raw_prefix,
+        )
+
+        jsii.create(self.__class__, self, [adapter_props])
+
+    @jsii.member(jsii_name="createFailedChain")
+    def create_failed_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for failed processing.
+
+        :param scope: -
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b95daf862a9819daa9b25cecfc08214dc429ef07ac6de3920b5dea59e01616eb)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast(_aws_cdk_aws_stepfunctions_ceddda9d.Chain, jsii.invoke(self, "createFailedChain", [scope]))
+
+    @jsii.member(jsii_name="createIngressTrigger")
+    def create_ingress_trigger(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
+        network: typing.Optional[Network] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''(experimental) Create resources that would receive the data and trigger the workflow.
+
+        Important: resource created should trigger the state machine
+
+        :param scope: -
+        :param state_machine: -
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__fb0e9adf74054c1b0a1974cab45642af57cb1651ef8052310a0229dae1eac178)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument state_machine", value=state_machine, expected_type=type_hints["state_machine"])
+        props = BaseDocumentProcessingProps(
+            document_processing_table=document_processing_table,
+            enable_observability=enable_observability,
+            encryption_key=encryption_key,
+            eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
+            network=network,
+            removal_policy=removal_policy,
+            workflow_timeout=workflow_timeout,
+            log_group_data_protection=log_group_data_protection,
+            metric_namespace=metric_namespace,
+            metric_service_name=metric_service_name,
+        )
+
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "createIngressTrigger", [scope, state_machine, props]))
+
+    @jsii.member(jsii_name="createSuccessChain")
+    def create_success_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for successful processing.
+
+        :param scope: -
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__76aa2fd577ace3b2507bf11a33f4d039ae5ac0af0d5d3edede30c4515a1a0986)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast(_aws_cdk_aws_stepfunctions_ceddda9d.Chain, jsii.invoke(self, "createSuccessChain", [scope]))
+
+    @jsii.member(jsii_name="generateAdapterIAMPolicies")
+    def generate_adapter_iam_policies(
+        self,
+        additional_iam_actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+        narrow_actions: typing.Optional[builtins.bool] = None,
+    ) -> typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]:
+        '''(experimental) Generate IAM statements that can be used by other resources to access the storage.
+
+        :param additional_iam_actions: -
+        :param narrow_actions: -
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__308867c51abfbbc08d0fba9125db9b86eddda969dc95de8546e6f8cb242ee8a9)
+            check_type(argname="argument additional_iam_actions", value=additional_iam_actions, expected_type=type_hints["additional_iam_actions"])
+            check_type(argname="argument narrow_actions", value=narrow_actions, expected_type=type_hints["narrow_actions"])
+        return typing.cast(typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement], jsii.invoke(self, "generateAdapterIAMPolicies", [additional_iam_actions, narrow_actions]))
+
+    @jsii.member(jsii_name="init")
+    def init(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
+        network: typing.Optional[Network] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Initializes the adapter.
+
+        :param scope: -
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3fe79d0c4a3a771012bc95cea6a690155ea89fa70073f87564e65aad5cdfdb64)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        props = BaseDocumentProcessingProps(
+            document_processing_table=document_processing_table,
+            enable_observability=enable_observability,
+            encryption_key=encryption_key,
+            eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
+            network=network,
+            removal_policy=removal_policy,
+            workflow_timeout=workflow_timeout,
+            log_group_data_protection=log_group_data_protection,
+            metric_namespace=metric_namespace,
+            metric_service_name=metric_service_name,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "init", [scope, props]))
+
+
+@jsii.data_type(
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.QueuedS3AdapterProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "bucket": "bucket",
+        "dlq_max_receive_count": "dlqMaxReceiveCount",
+        "failed_prefix": "failedPrefix",
+        "processed_prefix": "processedPrefix",
+        "queue_visibility_timeout": "queueVisibilityTimeout",
+        "raw_prefix": "rawPrefix",
+    },
+)
+class QueuedS3AdapterProps:
+    def __init__(
+        self,
+        *,
+        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
+        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
+        failed_prefix: typing.Optional[builtins.str] = None,
+        processed_prefix: typing.Optional[builtins.str] = None,
+        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        raw_prefix: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Props for the Queued S3 Adapter.
+
+        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy. Default: create a new bucket
+        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
+        :param failed_prefix: (experimental) S3 prefix where the files that failed processing would be stored. Default: "failed/"
+        :param processed_prefix: (experimental) S3 prefix where the processed files would be stored. Default: "processed/"
+        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
+        :param raw_prefix: (experimental) S3 prefix where the raw files would be stored. This serves as the trigger point for processing Default: "raw/"
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c2db7ec0d4b3e93062e1f20f29f9821e5a0fd526ecf05f9ccaa6db663fb1e8de)
+            check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
+            check_type(argname="argument dlq_max_receive_count", value=dlq_max_receive_count, expected_type=type_hints["dlq_max_receive_count"])
+            check_type(argname="argument failed_prefix", value=failed_prefix, expected_type=type_hints["failed_prefix"])
+            check_type(argname="argument processed_prefix", value=processed_prefix, expected_type=type_hints["processed_prefix"])
+            check_type(argname="argument queue_visibility_timeout", value=queue_visibility_timeout, expected_type=type_hints["queue_visibility_timeout"])
+            check_type(argname="argument raw_prefix", value=raw_prefix, expected_type=type_hints["raw_prefix"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if bucket is not None:
+            self._values["bucket"] = bucket
+        if dlq_max_receive_count is not None:
+            self._values["dlq_max_receive_count"] = dlq_max_receive_count
+        if failed_prefix is not None:
+            self._values["failed_prefix"] = failed_prefix
+        if processed_prefix is not None:
+            self._values["processed_prefix"] = processed_prefix
+        if queue_visibility_timeout is not None:
+            self._values["queue_visibility_timeout"] = queue_visibility_timeout
+        if raw_prefix is not None:
+            self._values["raw_prefix"] = raw_prefix
+
+    @builtins.property
+    def bucket(self) -> typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket]:
+        '''(experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/).
+
+        If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
+
+        :default: create a new bucket
+
+        :stability: experimental
+        '''
+        result = self._values.get("bucket")
+        return typing.cast(typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket], result)
+
+    @builtins.property
+    def dlq_max_receive_count(self) -> typing.Optional[jsii.Number]:
+        '''(experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue.
+
+        :default: 5
+
+        :stability: experimental
+        '''
+        result = self._values.get("dlq_max_receive_count")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def failed_prefix(self) -> typing.Optional[builtins.str]:
+        '''(experimental) S3 prefix where the files that failed processing would be stored.
+
+        :default: "failed/"
+
+        :stability: experimental
+        '''
+        result = self._values.get("failed_prefix")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def processed_prefix(self) -> typing.Optional[builtins.str]:
+        '''(experimental) S3 prefix where the processed files would be stored.
+
+        :default: "processed/"
+
+        :stability: experimental
+        '''
+        result = self._values.get("processed_prefix")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def queue_visibility_timeout(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
+        '''(experimental) SQS queue visibility timeout for processing messages.
+
+        Should be longer than expected processing time to prevent duplicate processing.
+
+        :default: Duration.seconds(300)
+
+        :stability: experimental
+        '''
+        result = self._values.get("queue_visibility_timeout")
+        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+
+    @builtins.property
+    def raw_prefix(self) -> typing.Optional[builtins.str]:
+        '''(experimental) S3 prefix where the raw files would be stored.
+
+        This serves as the trigger point for processing
+
+        :default: "raw/"
+
+        :stability: experimental
+        '''
+        result = self._values.get("raw_prefix")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "QueuedS3AdapterProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_aws_cdk_ceddda9d.IPropertyInjector)
+class StateMachineObservabilityPropertyInjector(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.StateMachineObservabilityPropertyInjector",
 ):
     '''
     :stability: experimental
@@ -3136,14 +3872,12 @@ class BaseDocumentProcessing(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3157,14 +3891,12 @@ class BaseDocumentProcessing(
 
         :param scope: - The scope in which to define this construct.
         :param id: - The scoped construct ID. Must be unique within the scope.
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
@@ -3178,14 +3910,12 @@ class BaseDocumentProcessing(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = BaseDocumentProcessingProps(
-            bucket=bucket,
-            dlq_max_receive_count=dlq_max_receive_count,
             document_processing_table=document_processing_table,
             enable_observability=enable_observability,
             encryption_key=encryption_key,
             eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
             network=network,
-            queue_visibility_timeout=queue_visibility_timeout,
             removal_policy=removal_policy,
             workflow_timeout=workflow_timeout,
             log_group_data_protection=log_group_data_protection,
@@ -3242,21 +3972,6 @@ class BaseDocumentProcessing(
             check_type(argname="argument state_machine_id", value=state_machine_id, expected_type=type_hints["state_machine_id"])
         return typing.cast(_aws_cdk_aws_stepfunctions_ceddda9d.StateMachine, jsii.invoke(self, "handleStateMachineCreation", [state_machine_id]))
 
-    @jsii.member(jsii_name="handleWorkflowTrigger")
-    def _handle_workflow_trigger(
-        self,
-        state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
-    ) -> None:
-        '''
-        :param state_machine: -
-
-        :stability: experimental
-        '''
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__51565b317b75c58d9a9fb26bd3a0b7c471bf8844bfd0cc94dd43d1850d7ab957)
-            check_type(argname="argument state_machine", value=state_machine, expected_type=type_hints["state_machine"])
-        return typing.cast(None, jsii.invoke(self, "handleWorkflowTrigger", [state_machine]))
-
     @jsii.member(jsii_name="metrics")
     def metrics(self) -> typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric]:
         '''
@@ -3296,24 +4011,6 @@ class BaseDocumentProcessing(
         '''
         ...
 
-    @builtins.property
-    @jsii.member(jsii_name="bucket")
-    def bucket(self) -> _aws_cdk_aws_s3_ceddda9d.Bucket:
-        '''(experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/).
-
-        :stability: experimental
-        '''
-        return typing.cast(_aws_cdk_aws_s3_ceddda9d.Bucket, jsii.get(self, "bucket"))
-
-    @builtins.property
-    @jsii.member(jsii_name="deadLetterQueue")
-    def dead_letter_queue(self) -> _aws_cdk_aws_sqs_ceddda9d.Queue:
-        '''(experimental) Dead letter queue.
-
-        :stability: experimental
-        '''
-        return typing.cast(_aws_cdk_aws_sqs_ceddda9d.Queue, jsii.get(self, "deadLetterQueue"))
-
     @builtins.property
     @jsii.member(jsii_name="documentProcessingTable")
     def document_processing_table(self) -> _aws_cdk_aws_dynamodb_ceddda9d.Table:
@@ -3332,6 +4029,15 @@ class BaseDocumentProcessing(
         '''
         return typing.cast(_aws_cdk_aws_kms_ceddda9d.Key, jsii.get(self, "encryptionKey"))
 
+    @builtins.property
+    @jsii.member(jsii_name="ingressAdapter")
+    def ingress_adapter(self) -> IAdapter:
+        '''(experimental) Ingress adapter, responsible for triggering workflow.
+
+        :stability: experimental
+        '''
+        return typing.cast(IAdapter, jsii.get(self, "ingressAdapter"))
+
     @builtins.property
     @jsii.member(jsii_name="logGroupDataProtection")
     def log_group_data_protection(self) -> LogGroupDataProtectionProps:
@@ -3361,24 +4067,6 @@ class BaseDocumentProcessing(
         '''
         return typing.cast(builtins.str, jsii.get(self, "metricServiceName"))
 
-    @builtins.property
-    @jsii.member(jsii_name="queue")
-    def queue(self) -> _aws_cdk_aws_sqs_ceddda9d.Queue:
-        '''(experimental) SQS queue for reliable message processing with dead letter queue support.
-
-        :stability: experimental
-        '''
-        return typing.cast(_aws_cdk_aws_sqs_ceddda9d.Queue, jsii.get(self, "queue"))
-
-    @builtins.property
-    @jsii.member(jsii_name="bucketEncryptionKey")
-    def bucket_encryption_key(self) -> typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey]:
-        '''(experimental) Encryption key used by the DocumentProcessingBucket.
-
-        :stability: experimental
-        '''
-        return typing.cast(typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey], jsii.get(self, "bucketEncryptionKey"))
-
 
 class _BaseDocumentProcessingProxy(BaseDocumentProcessing):
     @jsii.member(jsii_name="classificationStep")
@@ -3452,14 +4140,12 @@ typing.cast(typing.Any, BaseDocumentProcessing).__jsii_proxy_class__ = lambda :
         "log_group_data_protection": "logGroupDataProtection",
         "metric_namespace": "metricNamespace",
         "metric_service_name": "metricServiceName",
-        "bucket": "bucket",
-        "dlq_max_receive_count": "dlqMaxReceiveCount",
         "document_processing_table": "documentProcessingTable",
         "enable_observability": "enableObservability",
         "encryption_key": "encryptionKey",
         "eventbridge_broker": "eventbridgeBroker",
+        "ingress_adapter": "ingressAdapter",
         "network": "network",
-        "queue_visibility_timeout": "queueVisibilityTimeout",
         "removal_policy": "removalPolicy",
         "workflow_timeout": "workflowTimeout",
     },
@@ -3471,14 +4157,12 @@ class BaseDocumentProcessingProps(ObservableProps):
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
         metric_namespace: typing.Optional[builtins.str] = None,
         metric_service_name: typing.Optional[builtins.str] = None,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     ) -> None:
@@ -3487,14 +4171,12 @@ class BaseDocumentProcessingProps(ObservableProps):
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
         :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
         :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
 
@@ -3507,14 +4189,12 @@ class BaseDocumentProcessingProps(ObservableProps):
             check_type(argname="argument log_group_data_protection", value=log_group_data_protection, expected_type=type_hints["log_group_data_protection"])
             check_type(argname="argument metric_namespace", value=metric_namespace, expected_type=type_hints["metric_namespace"])
             check_type(argname="argument metric_service_name", value=metric_service_name, expected_type=type_hints["metric_service_name"])
-            check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
-            check_type(argname="argument dlq_max_receive_count", value=dlq_max_receive_count, expected_type=type_hints["dlq_max_receive_count"])
             check_type(argname="argument document_processing_table", value=document_processing_table, expected_type=type_hints["document_processing_table"])
             check_type(argname="argument enable_observability", value=enable_observability, expected_type=type_hints["enable_observability"])
             check_type(argname="argument encryption_key", value=encryption_key, expected_type=type_hints["encryption_key"])
             check_type(argname="argument eventbridge_broker", value=eventbridge_broker, expected_type=type_hints["eventbridge_broker"])
+            check_type(argname="argument ingress_adapter", value=ingress_adapter, expected_type=type_hints["ingress_adapter"])
             check_type(argname="argument network", value=network, expected_type=type_hints["network"])
-            check_type(argname="argument queue_visibility_timeout", value=queue_visibility_timeout, expected_type=type_hints["queue_visibility_timeout"])
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
             check_type(argname="argument workflow_timeout", value=workflow_timeout, expected_type=type_hints["workflow_timeout"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -3524,10 +4204,6 @@ class BaseDocumentProcessingProps(ObservableProps):
             self._values["metric_namespace"] = metric_namespace
         if metric_service_name is not None:
             self._values["metric_service_name"] = metric_service_name
-        if bucket is not None:
-            self._values["bucket"] = bucket
-        if dlq_max_receive_count is not None:
-            self._values["dlq_max_receive_count"] = dlq_max_receive_count
         if document_processing_table is not None:
             self._values["document_processing_table"] = document_processing_table
         if enable_observability is not None:
@@ -3536,10 +4212,10 @@ class BaseDocumentProcessingProps(ObservableProps):
             self._values["encryption_key"] = encryption_key
         if eventbridge_broker is not None:
             self._values["eventbridge_broker"] = eventbridge_broker
+        if ingress_adapter is not None:
+            self._values["ingress_adapter"] = ingress_adapter
         if network is not None:
             self._values["network"] = network
-        if queue_visibility_timeout is not None:
-            self._values["queue_visibility_timeout"] = queue_visibility_timeout
         if removal_policy is not None:
             self._values["removal_policy"] = removal_policy
         if workflow_timeout is not None:
@@ -3578,28 +4254,6 @@ class BaseDocumentProcessingProps(ObservableProps):
         result = self._values.get("metric_service_name")
         return typing.cast(typing.Optional[builtins.str], result)
 
-    @builtins.property
-    def bucket(self) -> typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket]:
-        '''(experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/).
-
-        If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-
-        :stability: experimental
-        '''
-        result = self._values.get("bucket")
-        return typing.cast(typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket], result)
-
-    @builtins.property
-    def dlq_max_receive_count(self) -> typing.Optional[jsii.Number]:
-        '''(experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue.
-
-        :default: 5
-
-        :stability: experimental
-        '''
-        result = self._values.get("dlq_max_receive_count")
-        return typing.cast(typing.Optional[jsii.Number], result)
-
     @builtins.property
     def document_processing_table(
         self,
@@ -3647,28 +4301,26 @@ class BaseDocumentProcessingProps(ObservableProps):
         return typing.cast(typing.Optional[EventbridgeBroker], result)
 
     @builtins.property
-    def network(self) -> typing.Optional[Network]:
-        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
+    def ingress_adapter(self) -> typing.Optional[IAdapter]:
+        '''(experimental) Adapter that defines how the document processing workflow is triggered.
 
-        :default: resources will run outside of a VPC
+        :default: QueuedS3Adapter
 
         :stability: experimental
         '''
-        result = self._values.get("network")
-        return typing.cast(typing.Optional[Network], result)
+        result = self._values.get("ingress_adapter")
+        return typing.cast(typing.Optional[IAdapter], result)
 
     @builtins.property
-    def queue_visibility_timeout(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
-        '''(experimental) SQS queue visibility timeout for processing messages.
-
-        Should be longer than expected processing time to prevent duplicate processing.
+    def network(self) -> typing.Optional[Network]:
+        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
 
-        :default: Duration.seconds(300)
+        :default: resources will run outside of a VPC
 
         :stability: experimental
         '''
-        result = self._values.get("queue_visibility_timeout")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+        result = self._values.get("network")
+        return typing.cast(typing.Optional[Network], result)
 
     @builtins.property
     def removal_policy(self) -> typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy]:
@@ -3770,14 +4422,12 @@ class BedrockDocumentProcessing(
         processing_prompt: typing.Optional[builtins.str] = None,
         step_timeouts: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         use_cross_region_inference: typing.Optional[builtins.bool] = None,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3801,14 +4451,12 @@ class BedrockDocumentProcessing(
         :param processing_prompt: (experimental) Custom prompt template for document extraction. Must include placeholder for document content and classification result. Default: DEFAULT_EXTRACTION_PROMPT
         :param step_timeouts: (experimental) Timeout for individual Step Functions tasks (classification, extraction, etc.). Default: Duration.minutes(5)
         :param use_cross_region_inference: (experimental) Enable cross-region inference for Bedrock models to improve availability and performance. When enabled, uses inference profiles instead of direct model invocation. Default: false
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
@@ -3831,14 +4479,12 @@ class BedrockDocumentProcessing(
             processing_prompt=processing_prompt,
             step_timeouts=step_timeouts,
             use_cross_region_inference=use_cross_region_inference,
-            bucket=bucket,
-            dlq_max_receive_count=dlq_max_receive_count,
             document_processing_table=document_processing_table,
             enable_observability=enable_observability,
             encryption_key=encryption_key,
             eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
             network=network,
-            queue_visibility_timeout=queue_visibility_timeout,
             removal_policy=removal_policy,
             workflow_timeout=workflow_timeout,
             log_group_data_protection=log_group_data_protection,
@@ -4001,14 +4647,12 @@ class BedrockDocumentProcessing(
         "log_group_data_protection": "logGroupDataProtection",
         "metric_namespace": "metricNamespace",
         "metric_service_name": "metricServiceName",
-        "bucket": "bucket",
-        "dlq_max_receive_count": "dlqMaxReceiveCount",
         "document_processing_table": "documentProcessingTable",
         "enable_observability": "enableObservability",
         "encryption_key": "encryptionKey",
         "eventbridge_broker": "eventbridgeBroker",
+        "ingress_adapter": "ingressAdapter",
         "network": "network",
-        "queue_visibility_timeout": "queueVisibilityTimeout",
         "removal_policy": "removalPolicy",
         "workflow_timeout": "workflowTimeout",
         "classification_model_id": "classificationModelId",
@@ -4029,14 +4673,12 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
         metric_namespace: typing.Optional[builtins.str] = None,
         metric_service_name: typing.Optional[builtins.str] = None,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         classification_model_id: typing.Optional[_aws_cdk_aws_bedrock_ceddda9d.FoundationModelIdentifier] = None,
@@ -4056,14 +4698,12 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
         :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
         :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
         :param classification_model_id: (experimental) Bedrock foundation model for document classification step. Default: FoundationModelIdentifier.ANTHROPIC_CLAUDE_3_7_SONNET_20250219_V1_0
@@ -4085,14 +4725,12 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
             check_type(argname="argument log_group_data_protection", value=log_group_data_protection, expected_type=type_hints["log_group_data_protection"])
             check_type(argname="argument metric_namespace", value=metric_namespace, expected_type=type_hints["metric_namespace"])
             check_type(argname="argument metric_service_name", value=metric_service_name, expected_type=type_hints["metric_service_name"])
-            check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
-            check_type(argname="argument dlq_max_receive_count", value=dlq_max_receive_count, expected_type=type_hints["dlq_max_receive_count"])
             check_type(argname="argument document_processing_table", value=document_processing_table, expected_type=type_hints["document_processing_table"])
             check_type(argname="argument enable_observability", value=enable_observability, expected_type=type_hints["enable_observability"])
             check_type(argname="argument encryption_key", value=encryption_key, expected_type=type_hints["encryption_key"])
             check_type(argname="argument eventbridge_broker", value=eventbridge_broker, expected_type=type_hints["eventbridge_broker"])
+            check_type(argname="argument ingress_adapter", value=ingress_adapter, expected_type=type_hints["ingress_adapter"])
             check_type(argname="argument network", value=network, expected_type=type_hints["network"])
-            check_type(argname="argument queue_visibility_timeout", value=queue_visibility_timeout, expected_type=type_hints["queue_visibility_timeout"])
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
             check_type(argname="argument workflow_timeout", value=workflow_timeout, expected_type=type_hints["workflow_timeout"])
             check_type(argname="argument classification_model_id", value=classification_model_id, expected_type=type_hints["classification_model_id"])
@@ -4111,10 +4749,6 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
             self._values["metric_namespace"] = metric_namespace
         if metric_service_name is not None:
             self._values["metric_service_name"] = metric_service_name
-        if bucket is not None:
-            self._values["bucket"] = bucket
-        if dlq_max_receive_count is not None:
-            self._values["dlq_max_receive_count"] = dlq_max_receive_count
         if document_processing_table is not None:
             self._values["document_processing_table"] = document_processing_table
         if enable_observability is not None:
@@ -4123,10 +4757,10 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
             self._values["encryption_key"] = encryption_key
         if eventbridge_broker is not None:
             self._values["eventbridge_broker"] = eventbridge_broker
+        if ingress_adapter is not None:
+            self._values["ingress_adapter"] = ingress_adapter
         if network is not None:
             self._values["network"] = network
-        if queue_visibility_timeout is not None:
-            self._values["queue_visibility_timeout"] = queue_visibility_timeout
         if removal_policy is not None:
             self._values["removal_policy"] = removal_policy
         if workflow_timeout is not None:
@@ -4183,28 +4817,6 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
         result = self._values.get("metric_service_name")
         return typing.cast(typing.Optional[builtins.str], result)
 
-    @builtins.property
-    def bucket(self) -> typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket]:
-        '''(experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/).
-
-        If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-
-        :stability: experimental
-        '''
-        result = self._values.get("bucket")
-        return typing.cast(typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket], result)
-
-    @builtins.property
-    def dlq_max_receive_count(self) -> typing.Optional[jsii.Number]:
-        '''(experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue.
-
-        :default: 5
-
-        :stability: experimental
-        '''
-        result = self._values.get("dlq_max_receive_count")
-        return typing.cast(typing.Optional[jsii.Number], result)
-
     @builtins.property
     def document_processing_table(
         self,
@@ -4252,28 +4864,26 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
         return typing.cast(typing.Optional[EventbridgeBroker], result)
 
     @builtins.property
-    def network(self) -> typing.Optional[Network]:
-        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
+    def ingress_adapter(self) -> typing.Optional[IAdapter]:
+        '''(experimental) Adapter that defines how the document processing workflow is triggered.
 
-        :default: resources will run outside of a VPC
+        :default: QueuedS3Adapter
 
         :stability: experimental
         '''
-        result = self._values.get("network")
-        return typing.cast(typing.Optional[Network], result)
+        result = self._values.get("ingress_adapter")
+        return typing.cast(typing.Optional[IAdapter], result)
 
     @builtins.property
-    def queue_visibility_timeout(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
-        '''(experimental) SQS queue visibility timeout for processing messages.
-
-        Should be longer than expected processing time to prevent duplicate processing.
+    def network(self) -> typing.Optional[Network]:
+        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
 
-        :default: Duration.seconds(300)
+        :default: resources will run outside of a VPC
 
         :stability: experimental
         '''
-        result = self._values.get("queue_visibility_timeout")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+        result = self._values.get("network")
+        return typing.cast(typing.Optional[Network], result)
 
     @builtins.property
     def removal_policy(self) -> typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy]:
@@ -4450,14 +5060,12 @@ class AgenticDocumentProcessing(
         processing_prompt: typing.Optional[builtins.str] = None,
         step_timeouts: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         use_cross_region_inference: typing.Optional[builtins.bool] = None,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -4477,14 +5085,12 @@ class AgenticDocumentProcessing(
         :param processing_prompt: (experimental) Custom prompt template for document extraction. Must include placeholder for document content and classification result. Default: DEFAULT_EXTRACTION_PROMPT
         :param step_timeouts: (experimental) Timeout for individual Step Functions tasks (classification, extraction, etc.). Default: Duration.minutes(5)
         :param use_cross_region_inference: (experimental) Enable cross-region inference for Bedrock models to improve availability and performance. When enabled, uses inference profiles instead of direct model invocation. Default: false
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
@@ -4508,14 +5114,12 @@ class AgenticDocumentProcessing(
             processing_prompt=processing_prompt,
             step_timeouts=step_timeouts,
             use_cross_region_inference=use_cross_region_inference,
-            bucket=bucket,
-            dlq_max_receive_count=dlq_max_receive_count,
             document_processing_table=document_processing_table,
             enable_observability=enable_observability,
             encryption_key=encryption_key,
             eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
             network=network,
-            queue_visibility_timeout=queue_visibility_timeout,
             removal_policy=removal_policy,
             workflow_timeout=workflow_timeout,
             log_group_data_protection=log_group_data_protection,
@@ -4547,14 +5151,12 @@ class AgenticDocumentProcessing(
         "log_group_data_protection": "logGroupDataProtection",
         "metric_namespace": "metricNamespace",
         "metric_service_name": "metricServiceName",
-        "bucket": "bucket",
-        "dlq_max_receive_count": "dlqMaxReceiveCount",
         "document_processing_table": "documentProcessingTable",
         "enable_observability": "enableObservability",
         "encryption_key": "encryptionKey",
         "eventbridge_broker": "eventbridgeBroker",
+        "ingress_adapter": "ingressAdapter",
         "network": "network",
-        "queue_visibility_timeout": "queueVisibilityTimeout",
         "removal_policy": "removalPolicy",
         "workflow_timeout": "workflowTimeout",
         "classification_model_id": "classificationModelId",
@@ -4576,14 +5178,12 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
         metric_namespace: typing.Optional[builtins.str] = None,
         metric_service_name: typing.Optional[builtins.str] = None,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         classification_model_id: typing.Optional[_aws_cdk_aws_bedrock_ceddda9d.FoundationModelIdentifier] = None,
@@ -4601,14 +5201,12 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
         :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
         :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
         :param classification_model_id: (experimental) Bedrock foundation model for document classification step. Default: FoundationModelIdentifier.ANTHROPIC_CLAUDE_3_7_SONNET_20250219_V1_0
@@ -4633,14 +5231,12 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
             check_type(argname="argument log_group_data_protection", value=log_group_data_protection, expected_type=type_hints["log_group_data_protection"])
             check_type(argname="argument metric_namespace", value=metric_namespace, expected_type=type_hints["metric_namespace"])
             check_type(argname="argument metric_service_name", value=metric_service_name, expected_type=type_hints["metric_service_name"])
-            check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
-            check_type(argname="argument dlq_max_receive_count", value=dlq_max_receive_count, expected_type=type_hints["dlq_max_receive_count"])
             check_type(argname="argument document_processing_table", value=document_processing_table, expected_type=type_hints["document_processing_table"])
             check_type(argname="argument enable_observability", value=enable_observability, expected_type=type_hints["enable_observability"])
             check_type(argname="argument encryption_key", value=encryption_key, expected_type=type_hints["encryption_key"])
             check_type(argname="argument eventbridge_broker", value=eventbridge_broker, expected_type=type_hints["eventbridge_broker"])
+            check_type(argname="argument ingress_adapter", value=ingress_adapter, expected_type=type_hints["ingress_adapter"])
             check_type(argname="argument network", value=network, expected_type=type_hints["network"])
-            check_type(argname="argument queue_visibility_timeout", value=queue_visibility_timeout, expected_type=type_hints["queue_visibility_timeout"])
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
             check_type(argname="argument workflow_timeout", value=workflow_timeout, expected_type=type_hints["workflow_timeout"])
             check_type(argname="argument classification_model_id", value=classification_model_id, expected_type=type_hints["classification_model_id"])
@@ -4660,10 +5256,6 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
             self._values["metric_namespace"] = metric_namespace
         if metric_service_name is not None:
             self._values["metric_service_name"] = metric_service_name
-        if bucket is not None:
-            self._values["bucket"] = bucket
-        if dlq_max_receive_count is not None:
-            self._values["dlq_max_receive_count"] = dlq_max_receive_count
         if document_processing_table is not None:
             self._values["document_processing_table"] = document_processing_table
         if enable_observability is not None:
@@ -4672,10 +5264,10 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
             self._values["encryption_key"] = encryption_key
         if eventbridge_broker is not None:
             self._values["eventbridge_broker"] = eventbridge_broker
+        if ingress_adapter is not None:
+            self._values["ingress_adapter"] = ingress_adapter
         if network is not None:
             self._values["network"] = network
-        if queue_visibility_timeout is not None:
-            self._values["queue_visibility_timeout"] = queue_visibility_timeout
         if removal_policy is not None:
             self._values["removal_policy"] = removal_policy
         if workflow_timeout is not None:
@@ -4734,28 +5326,6 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
         result = self._values.get("metric_service_name")
         return typing.cast(typing.Optional[builtins.str], result)
 
-    @builtins.property
-    def bucket(self) -> typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket]:
-        '''(experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/).
-
-        If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-
-        :stability: experimental
-        '''
-        result = self._values.get("bucket")
-        return typing.cast(typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket], result)
-
-    @builtins.property
-    def dlq_max_receive_count(self) -> typing.Optional[jsii.Number]:
-        '''(experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue.
-
-        :default: 5
-
-        :stability: experimental
-        '''
-        result = self._values.get("dlq_max_receive_count")
-        return typing.cast(typing.Optional[jsii.Number], result)
-
     @builtins.property
     def document_processing_table(
         self,
@@ -4803,28 +5373,26 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
         return typing.cast(typing.Optional[EventbridgeBroker], result)
 
     @builtins.property
-    def network(self) -> typing.Optional[Network]:
-        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
+    def ingress_adapter(self) -> typing.Optional[IAdapter]:
+        '''(experimental) Adapter that defines how the document processing workflow is triggered.
 
-        :default: resources will run outside of a VPC
+        :default: QueuedS3Adapter
 
         :stability: experimental
         '''
-        result = self._values.get("network")
-        return typing.cast(typing.Optional[Network], result)
+        result = self._values.get("ingress_adapter")
+        return typing.cast(typing.Optional[IAdapter], result)
 
     @builtins.property
-    def queue_visibility_timeout(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
-        '''(experimental) SQS queue visibility timeout for processing messages.
-
-        Should be longer than expected processing time to prevent duplicate processing.
+    def network(self) -> typing.Optional[Network]:
+        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
 
-        :default: Duration.seconds(300)
+        :default: resources will run outside of a VPC
 
         :stability: experimental
         '''
-        result = self._values.get("queue_visibility_timeout")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+        result = self._values.get("network")
+        return typing.cast(typing.Optional[Network], result)
 
     @builtins.property
     def removal_policy(self) -> typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy]:
@@ -5003,14 +5571,16 @@ __all__ = [
     "DataLoaderProps",
     "DatabaseConfig",
     "DatabaseEngine",
+    "DefaultDocumentProcessingConfig",
+    "DefaultObservabilityConfig",
     "DefaultRuntimes",
-    "DocumentProcessingPrefix",
     "EventbridgeBroker",
     "EventbridgeBrokerProps",
     "FileInput",
     "FileType",
     "Frontend",
     "FrontendProps",
+    "IAdapter",
     "IObservable",
     "LambdaIamUtils",
     "LambdaIamUtilsStackInfo",
@@ -5022,6 +5592,8 @@ __all__ = [
     "NetworkProps",
     "ObservableProps",
     "PowertoolsConfig",
+    "QueuedS3Adapter",
+    "QueuedS3AdapterProps",
     "StateMachineObservabilityPropertyInjector",
 ]
 
@@ -5077,6 +5649,7 @@ def _typecheckingstub__e1a82500ee072f393cd9a2ada2f9a3434219c7a51186f26fbba3061bd
     *,
     agent_system_prompt: typing.Optional[builtins.str] = None,
     lambda_layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.LayerVersion]] = None,
+    tools_bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
     tools_location: typing.Optional[typing.Sequence[builtins.str]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -5220,6 +5793,62 @@ def _typecheckingstub__2648a6f2c6f02177f5b324264b7de549aa23b0c1d93c8d6cccbc307a8
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__5998f6c7e16512d92cd00097e77d737333304685208eb36a522c156f8378a9e7(
+    scope: _constructs_77d1e7e8.Construct,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b61e74ddd8982f4b30ae59307c9fb3adaff26122ddc7f5faabc2cc8e1e2da034(
+    scope: _constructs_77d1e7e8.Construct,
+    state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
+    *,
+    document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+    enable_observability: typing.Optional[builtins.bool] = None,
+    encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+    eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
+    network: typing.Optional[Network] = None,
+    removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+    workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+    log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+    metric_namespace: typing.Optional[builtins.str] = None,
+    metric_service_name: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__cd0aad7a5879633fca8d89cbf92e8f5a13e31615116036f29a82a58c1bb4727d(
+    scope: _constructs_77d1e7e8.Construct,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__82a45114a0ff76d4b9d091edd6674d4e762dc5ca19631d61579cf1aa47e30b5e(
+    additional_iam_actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+    narrow_actions: typing.Optional[builtins.bool] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__17f7e7f35ea8e49cf6ded248435aa1e1dcf416e61c549f3e7b74baad3ac399e7(
+    scope: _constructs_77d1e7e8.Construct,
+    *,
+    document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+    enable_observability: typing.Optional[builtins.bool] = None,
+    encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+    eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
+    network: typing.Optional[Network] = None,
+    removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+    workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+    log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+    metric_namespace: typing.Optional[builtins.str] = None,
+    metric_service_name: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__8fea74c9846ad0c5bdddcbfe10063247cb7bcf58aac91e0be80d1226246784e4(
     table_arn: builtins.str,
     actions: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -5297,6 +5926,7 @@ def _typecheckingstub__47564dc2777638ca33ba53983ac385b2dd8b03133d66569da912ae1ce
     function_name: builtins.str,
     region: builtins.str,
     scope: _constructs_77d1e7e8.Construct,
+    enable_observability: typing.Optional[builtins.bool] = None,
     log_group_name: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -5382,6 +6012,74 @@ def _typecheckingstub__e065c545d4fce5c4fc2579c3efea8203f50b6d3c8b39aa1595ea3577d
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__b95daf862a9819daa9b25cecfc08214dc429ef07ac6de3920b5dea59e01616eb(
+    scope: _constructs_77d1e7e8.Construct,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__fb0e9adf74054c1b0a1974cab45642af57cb1651ef8052310a0229dae1eac178(
+    scope: _constructs_77d1e7e8.Construct,
+    state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
+    *,
+    document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+    enable_observability: typing.Optional[builtins.bool] = None,
+    encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+    eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
+    network: typing.Optional[Network] = None,
+    removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+    workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+    log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+    metric_namespace: typing.Optional[builtins.str] = None,
+    metric_service_name: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__76aa2fd577ace3b2507bf11a33f4d039ae5ac0af0d5d3edede30c4515a1a0986(
+    scope: _constructs_77d1e7e8.Construct,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__308867c51abfbbc08d0fba9125db9b86eddda969dc95de8546e6f8cb242ee8a9(
+    additional_iam_actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+    narrow_actions: typing.Optional[builtins.bool] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3fe79d0c4a3a771012bc95cea6a690155ea89fa70073f87564e65aad5cdfdb64(
+    scope: _constructs_77d1e7e8.Construct,
+    *,
+    document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+    enable_observability: typing.Optional[builtins.bool] = None,
+    encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+    eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
+    network: typing.Optional[Network] = None,
+    removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+    workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+    log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+    metric_namespace: typing.Optional[builtins.str] = None,
+    metric_service_name: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c2db7ec0d4b3e93062e1f20f29f9821e5a0fd526ecf05f9ccaa6db663fb1e8de(
+    *,
+    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
+    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
+    failed_prefix: typing.Optional[builtins.str] = None,
+    processed_prefix: typing.Optional[builtins.str] = None,
+    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+    raw_prefix: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__011b55520774139b52c951d9cc59273f686e377b5415ee42a57650da571d43e7(
     original_props: typing.Any,
     *,
@@ -5395,14 +6093,12 @@ def _typecheckingstub__117c249a26f3e7532983afc9123fadff3e20effcc69408df0f45a03eb
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5418,25 +6114,17 @@ def _typecheckingstub__900aa9de379313a2a9a3e24a2901f803dec0a30dde90b7255d9f180e2
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__51565b317b75c58d9a9fb26bd3a0b7c471bf8844bfd0cc94dd43d1850d7ab957(
-    state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
-) -> None:
-    """Type checking stubs"""
-    pass
-
 def _typecheckingstub__75e07bce24d48571be58cad69f751b10a17a738fdb9db601acdc689ff1e6da22(
     *,
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
     metric_namespace: typing.Optional[builtins.str] = None,
     metric_service_name: typing.Optional[builtins.str] = None,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
 ) -> None:
@@ -5456,14 +6144,12 @@ def _typecheckingstub__7393f9c6b2af93f7d8668b32cec54ba8c77259644ab01f57b3fbd50c7
     processing_prompt: typing.Optional[builtins.str] = None,
     step_timeouts: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     use_cross_region_inference: typing.Optional[builtins.bool] = None,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5485,14 +6171,12 @@ def _typecheckingstub__9606a6418d69bde20176ec33b27eaa22c0e0cdb6b105d382e9d038566
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
     metric_namespace: typing.Optional[builtins.str] = None,
     metric_service_name: typing.Optional[builtins.str] = None,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     classification_model_id: typing.Optional[_aws_cdk_aws_bedrock_ceddda9d.FoundationModelIdentifier] = None,
@@ -5522,14 +6206,12 @@ def _typecheckingstub__b7f396236f637ec7234d81b355cf773497392b537455f3d888c4b7170
     processing_prompt: typing.Optional[builtins.str] = None,
     step_timeouts: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     use_cross_region_inference: typing.Optional[builtins.bool] = None,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5544,14 +6226,12 @@ def _typecheckingstub__da9ccab0035a06d18b5aa3f2de69201b3bbd6e30f7707a291977a0e4f
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
     metric_namespace: typing.Optional[builtins.str] = None,
     metric_service_name: typing.Optional[builtins.str] = None,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     classification_model_id: typing.Optional[_aws_cdk_aws_bedrock_ceddda9d.FoundationModelIdentifier] = None,
@@ -5567,3 +6247,6 @@ def _typecheckingstub__da9ccab0035a06d18b5aa3f2de69201b3bbd6e30f7707a291977a0e4f
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IAdapter, IObservable]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])