PyPI - appmod-catalog-blueprints - Versions diffs - 1.0.1__py3-none-any.whl → 1.2.0__py3-none-any.whl - Mend

appmod-catalog-blueprints 1.0.1py3-none-any.whl → 1.2.0py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11) hide show

appmod_catalog_blueprints/__init__.py CHANGED Viewed

@@ -1,226 +1,159 @@
 r'''
-# AppMod Use Case Blueprints
+---
-Serverless infrastructure components for modern application development. This catalog provides composable building blocks organized by business use cases, enabling rapid deployment of secure, scalable solutions.
-## Quick Start
+## title: Introduction
-**Deploy a working example in 5 minutes:**
+# AppMod Catalog Blueprints
-Clone the repository, build the project, then navigate to any example directory and deploy using CDK with your AWS profile and region.
+Application Modernization (AppMod) Catalog Blueprints is a comprehensive library of production-ready, use case-driven infrastructure blueprints in the form of composable multi-layered building blocks built using [AWS Cloud Development Kit](https://aws.amazon.com/cdk/) (CDK) [L3 constructs](https://docs.aws.amazon.com/cdk/v2/guide/constructs.html). These blueprints offer use case-driven solutions with multiple implementation pathways and industry-specific implementations that are designed to accelerate serverless development and modernization on AWS.
-## Core Use Cases
-### 1. 📄 Document Processing
-Serverless document processing pipeline with AI-powered classification, extraction, and workflow orchestration.
-**Architecture:**
-```
-S3 Upload → SQS → Step Functions → Bedrock Models → DynamoDB
-    ↓         ↓         ↓              ↓            ↓
-[Storage] [Buffer] [Workflow]    [AI Processing] [Results]
-```
-**Key Features:**
-* **Event-Driven Pipeline**: S3 upload triggers SQS → Step Functions workflow
-* **AI-Powered Processing**: Amazon Bedrock for document classification and extraction
-* **Multi-format Support**: PDF, JPG, PNG document processing
-* **Flexible Workflows**: Base construct with extensible processing steps
-* **State Management**: DynamoDB for workflow state and document metadata
-* **Error Handling**: Dead letter queues and retry mechanisms with observability
-**Available Constructs:**
-**BaseDocumentProcessing** - Foundation construct providing:
-* S3 bucket with organized prefixes (raw/, processed/, failed/)
-* SQS queue with configurable visibility timeout and DLQ
-* DynamoDB table for document metadata and workflow state
-* Step Functions workflow with customizable processing steps
-* Built-in observability and monitoring
-**BedrockDocumentProcessing** - AI-powered document analysis:
-* Document classification using Claude 3.5 Sonnet
-* Entity extraction and content analysis
-* Configurable prompts for classification and extraction
-* Optional enrichment Lambda function integration
-* Automatic workflow state management
-**AgenticDocumentProcessing** - Multi-agent document workflows:
-* Advanced multi-step processing with agent coordination
-* Complex document understanding and analysis
-* Configurable agent behaviors and processing flows
+Built with [JSII](https://aws.github.io/jsii/), these constructs are available in TypeScript, Python, Java, and .NET, enabling teams to use their preferred programming language while leveraging the same proven infrastructure patterns.
-### 2. 🌐 Frontend Web Applications
+Get started by exploring the [use case constructs](use-cases) and deployable [examples](examples). Learn more from [documentation](https://cdklabs.github.io/cdk-appmod-catalog-blueprints/) and [Construct Hub](https://constructs.dev/packages/@cdklabs/cdk-appmod-catalog-blueprints).
-Static web application hosting with CloudFront distribution and security best practices.
-**Architecture:**
+## Core Use Cases
-```
-CloudFront → S3 Static Website → Security Headers
-     ↓            ↓                    ↓
-[Global CDN] [Static Assets]    [Security Functions]
-```
+| Use Case | Description | Quick Deploy Examples |
+|----------|-------------|----------------------|
+| **[Document Processing](./use-cases/document-processing/)** | AI-powered document processing workflows with classification, extraction, and agentic capabilities | • [Bedrock Document Processing](./examples/document-processing/bedrock-document-processing/)<br/>• [Agentic Document Processing](./examples/document-processing/agentic-document-processing/)<br/>• [Full-Stack Insurance Claims Processing Web Application](./examples/document-processing/doc-processing-fullstack-webapp/) |
+| **[Web Application](./use-cases/webapp/)** | Static web application hosting with global CDN, security headers, and SPA support | • [Full-Stack Insurance Claims Processing Web Application](./examples/document-processing/doc-processing-fullstack-webapp/) |
-**Key Features:**
+## Foundation and Utilities
-* **Global Distribution**: CloudFront CDN for low-latency content delivery
-* **Security Headers**: Automatic injection of security headers via CloudFront functions
-* **SSL/TLS**: Automatic HTTPS with AWS Certificate Manager
-* **Custom Domains**: Support for custom domain names with Route 53 integration
-* **Error Pages**: Custom 404/403 error page handling
-* **Access Logging**: CloudFront access logs for analytics
+| Component | Description |
+|-----------|-------------|
+| **[Observability & Monitoring](./use-cases/utilities/observability/)** | Comprehensive monitoring, logging, and alerting with automatic property injection and Lambda Powertools integration |
+| **[Data Masking](./use-cases/utilities/lambda_layers/data-masking/)** | Lambda layer for data masking and PII protection in serverless applications |
+| **[Infrastructure Foundation](./use-cases/framework/)** | Core infrastructure components and utilities for building scalable applications |
-**Available Constructs:**
+## Key Design Principles
-**FrontendConstruct** - Complete static website hosting:
+AppMod Catalog Blueprints is built on Object-Oriented Programming (OOP) principles, providing a structured approach to infrastructure development through core design concepts:
-* S3 bucket configured for static website hosting
-* CloudFront distribution with optimized caching
-* Security headers function for OWASP compliance
-* Optional custom domain and SSL certificate
-* Access logging and monitoring integration
+### Composable Architecture
-### 3. 📊 Observability & Monitoring
+Build complex enterprise systems by combining independent, reusable components with standardized interfaces.
-Comprehensive monitoring, logging, and alerting for AWS infrastructure with automatic property injection and Lambda Powertools integration.
+* **Independent components** with clear interfaces and loose coupling for maximum flexibility
+* **Mix and match building blocks** to create custom solutions across different contexts and use cases
+* **Scalable composition** that maintains consistency while enabling incremental adoption and gradual modernization
-**Features:**
+### Multi-Layered Building Blocks Architecture
-* **Property Injection**: Automatic observability configuration across AWS services
-* **Lambda Powertools**: Structured logging, metrics, and tracing for Python/Node.js
-* **CloudWatch Integration**: Dashboards, alarms, and custom metrics
-* **X-Ray Tracing**: End-to-end request flow visualization
-* **Bedrock Monitoring**: Specialized observability for Amazon Bedrock workloads
-* **Cost Optimization**: Intelligent log retention and metric filtering
+Our blueprints use a multi-layered architecture that bridges the gap between business requirements and technical implementation:
-**Available Components:**
+| Layer | Implementation Type | Purpose | Key Features |
+|-------|-------------------|---------|--------------|
+| **Infrastructure Foundation** | Abstract base classes | Shared infrastructure components and common services | • Standardized interfaces and contracts<br/>• Extensible foundation for custom implementations |
+| **General Use Case Implementation** | Concrete implementation classes | Production-ready implementations for common patterns across industries | • Configurable parameters for different environments<br/>• Abstract method implementations with general-purpose solutions |
+| **Industry-Aligned Implementation** | Configured implementation examples | Pre-configured solutions for specific business domains | • Industry-specific validation rules and workflows<br/>• Built-in compliance requirements and domain expertise |
-**Property Injectors:**
+### Production-Ready with Smart Defaults
-* `LambdaObservabilityPropertyInjector` - Auto-enables X-Ray tracing for Lambda functions
-* `StateMachineObservabilityPropertyInjector` - Enables logging for Step Functions
-* `CloudfrontDistributionObservabilityPropertyInjector` - CDN monitoring and logging
+AppMod Catalog Blueprints serves both **rapid deployment** needs (for teams wanting immediate solutions) and **custom development** requirements (for teams needing tailored implementations), providing flexibility without compromising on production readiness.
-**Observability Constructs:**
+| Approach | Best For | Capabilities |
+|----------|----------|--------------|
+| **Out-of-the-Box Deployment** | Rapid deployment and evaluation | • Deploy complete solutions in minutes using examples for immediate value<br/>• Pre-configured security, monitoring, and best practices for production readiness<br/>• Sensible defaults with production-ready configurations that work immediately<br/>• No infrastructure boilerplate required with minimal learning curve |
+| **Intelligent Customization** | Custom development and integration | • Override defaults to modify behavior without changing core implementation<br/>• Enable/disable optional features to meet specific requirements<br/>• Inject custom logic at predefined extension points while maintaining production readiness<br/>• Configure parameters for different environments and use cases |
-* `BedrockObservability` - Comprehensive monitoring for Bedrock workloads with log groups, encryption, and data protection
-* `PowertoolsConfig` - Lambda Powertools configuration for structured logging and metrics
-* `Observable` interface - Standardized observability contract for constructs
+### Security & Compliance
-**Data Protection:**
+All components include enterprise-grade security by default:
-* `LogGroupDataProtectionProps` - Configurable data protection policies for CloudWatch logs
+* **CDK Nag Integration**: Automated security compliance checking
+* **AWS Well-Architected**: Security, reliability, and performance best practices
+* **Encryption & IAM**: At-rest/in-transit encryption with least-privilege access
+* **Compliance Reports**: Generate reports with `npm test -- --testPathPattern="nag.test.ts"`
-### 4. 🏗️ Foundation & Framework
+## Essential Commands
-Core infrastructure components and utilities for building scalable applications.
+### Environment Setup
-**Available Components:**
+```bash
+# Clone the repository
+git clone https://github.com/cdklabs/cdk-appmod-catalog-blueprints.git
-**Network Foundation:**
+# Configure AWS credentials and region
+aws configure
+# OR set AWS profile: export AWS_PROFILE=your-profile-name
-* `Network` - VPC with public/private subnets, NAT gateways, and security groups
-* `AccessLog` - Centralized access logging configuration for AWS services
-* `EventBridgeBroker` - Event-driven architecture with custom EventBridge bus
+# Bootstrap your AWS environment (one-time setup)
+npx cdk bootstrap
+```
-**Utilities:**
+### Quick Start
-* `DataLoader` - Custom resource for loading initial data into databases and services
-* `LambdaIamUtils` - Utility functions for Lambda IAM role and policy management
-* `DefaultRuntimes` - Standardized Lambda runtime configurations
+Deploy a working example in **5 minutes**:
-**Lambda Layers:**
+```bash
+# Navigate to any example and deploy
+cd examples/document-processing/agentic-document-processing
+npm install
+npm run deploy
+```
-* `DataMasking` - Layer for data masking and PII protection in Lambda functions
+### Build & Deploy Project
-## Essential Commands
+```bash
+# Build entire project
+npx projen build
-**Build & Deploy:**
+# Deploy with specific profile/region
+npx cdk deploy --require-approval never
-Build entire project with npx projen build. Deploy with specific profile/region using npx cdk deploy --require-approval never. Update CDK CLI if needed with npm install aws-cdk@latest.
+# Update CDK CLI if needed
+npm install aws-cdk@latest
+```
-**Development:**
+### Development
-Run tests with npm test. Run specific test pattern with npm test -- --testPathPattern="document-processing". Generate CDK Nag compliance reports with npm test -- --testPathPattern="nag.test.ts".
+```bash
+# Run all tests
+npm test
-## Repository Structure
+# Run specific test pattern
+npm test -- --testPathPattern="document-processing"
-```
-appmod-usecase-blueprints/
-├── use-cases/
-│   ├── document-processing/     # Document processing components
-│   │   ├── base-document-processing.ts
-│   │   ├── bedrock-document-processing.ts
-│   │   ├── agentic-document-processing.ts
-│   │   ├── resources/          # Lambda functions
-│   │   └── tests/              # Unit and CDK Nag tests
-│   ├── webapp/                 # Web application components
-│   │   ├── frontend-construct.ts
-│   │   └── tests/              # Unit and CDK Nag tests
-│   ├── framework/              # Core infrastructure
-│   │   ├── foundation/         # Network, access logs, EventBridge
-│   │   ├── quickstart/         # Base quickstart patterns
-│   │   └── custom-resource/    # Default runtimes
-│   └── utilities/
-│       ├── observability/      # Monitoring components
-│       ├── lambda_layers/      # Shared Lambda layers
-│       ├── data-loader.ts      # Custom resource for data loading
-│       └── lambda-iam-utils.ts # IAM utilities
-├── examples/                   # Ready-to-deploy examples
-│   └── document-processing/
-│       ├── bedrock-document-processing/
-│       ├── agentic-document-processing/
-│       └── doc-processing-fullstack-webapp/
-└── README.md
+# Generate CDK Nag compliance reports
+npm test -- --testPathPattern="nag.test.ts"
 ```
-## Security & Compliance
+## How to Use This Library
-All components include:
+### Quick Start (Deploy Examples)
-* **CDK Nag Integration**: Automated security compliance checking
-* **AWS Well-Architected**: Following best practices for security, reliability, performance
-* **Encryption**: At-rest and in-transit encryption by default
-* **IAM Least Privilege**: Minimal required permissions
-* **VPC Isolation**: Private subnets and security groups
+1. **Browse Examples**: Start with the [examples](./examples/) folder to see working implementations
+2. **Deploy & Test**: Use `npm run deploy` in any example to get a working system in minutes
+3. **Customize**: Modify example parameters to fit your specific requirements
-**Generate Compliance Reports:**
+### Using Individual Constructs
-Run npm test with testPathPattern="nag.test.ts" to generate reports in cdk.out/*-NagReport.csv
+1. **Import Constructs**: Add `@cdklabs/appmod-catalog-blueprints` to your CDK project
+2. **Choose Your Layer**: Pick the right abstraction level for your needs
+3. **Configure**: Use the configuration options documented in each construct
-## Examples
+### Understanding the Layers
-### Document Processing
+**Foundation Layer** (`use-cases/framework/`, `use-cases/utilities/`)
-* **Bedrock Document Processing**: AI-powered document analysis with Claude 3.5 Sonnet
-* **Agentic Document Processing**: Multi-agent document workflows with complex processing
-* **Full-Stack Document Processing Webapp**: Complete document processing application with frontend interface
+* **When to use**: Building custom solutions or need specific infrastructure components
+* **Components**: VPC networking, observability utilities, data management tools, etc.
-Each example includes deployment scripts, sample files, and comprehensive documentation.
+**Use Case Layer** (`use-cases/document-processing/`, `use-cases/webapp/`)
-## Key AWS Services
+* **When to use**: Need proven patterns for common business problems
+* **Components**: Document processing workflows, web application hosting, data transformation patterns, etc.
-* **Compute**: Lambda, ECS Fargate, Step Functions
-* **Storage**: S3, DynamoDB
-* **Database**: RDS (MySQL/PostgreSQL)
-* **Networking**: VPC, CloudFront, Application Load Balancer
-* **AI/ML**: Amazon Bedrock, Textract
-* **Monitoring**: CloudWatch, X-Ray
-* **Security**: KMS, Secrets Manager, IAM
+**Example Layer** (`examples/`)
+* **When to use**: Want complete, deployable solutions
+* **Components**: Industry-specific configurations, end-to-end applications, reference implementations, etc.
 ## Contributing
-1. **Add New Use Case**: Create directory under `use-cases/`
-2. **Follow Structure**: Include constructs, tests, and documentation
-3. **Security First**: All components must pass CDK Nag checks
-4. **Include Monitoring**: Include monitoring, error handling, and cost optimization
+See [CONTRIBUTING.md](https://github.com/cdklabs/cdk-appmod-catalog-blueprints/blob/main/CONTRIBUTING.md) for detailed guidelines on how to contribute to this project.
 ## Disclaimer
@@ -228,7 +161,7 @@ These application solutions are not supported products in their own right, but e
 ## License
-Apache License 2.0 - see [LICENSE](./LICENSE) file for details.
+Apache License 2.0 - see [LICENSE](https://github.com/cdklabs/cdk-appmod-catalog-blueprints/blob/main/LICENSE) file for details.
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)
@@ -281,7 +214,6 @@ import aws_cdk.aws_s3 as _aws_cdk_aws_s3_ceddda9d
 import aws_cdk.aws_s3_assets as _aws_cdk_aws_s3_assets_ceddda9d
 import aws_cdk.aws_s3_deployment as _aws_cdk_aws_s3_deployment_ceddda9d
 import aws_cdk.aws_secretsmanager as _aws_cdk_aws_secretsmanager_ceddda9d
-import aws_cdk.aws_sqs as _aws_cdk_aws_sqs_ceddda9d
 import aws_cdk.aws_stepfunctions as _aws_cdk_aws_stepfunctions_ceddda9d
 import aws_cdk.aws_stepfunctions_tasks as _aws_cdk_aws_stepfunctions_tasks_ceddda9d
 import aws_cdk.custom_resources as _aws_cdk_custom_resources_ceddda9d
@@ -612,6 +544,7 @@ class AdditionalDistributionProps:
     name_mapping={
         "agent_system_prompt": "agentSystemPrompt",
         "lambda_layers": "lambdaLayers",
+        "tools_bucket": "toolsBucket",
         "tools_location": "toolsLocation",
     },
 )
@@ -621,12 +554,14 @@ class AgentProps:
         *,
         agent_system_prompt: typing.Optional[builtins.str] = None,
         lambda_layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.LayerVersion]] = None,
+        tools_bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
         tools_location: typing.Optional[typing.Sequence[builtins.str]] = None,
     ) -> None:
         '''
-        :param agent_system_prompt:
-        :param lambda_layers:
-        :param tools_location:
+        :param agent_system_prompt: (experimental) System prompt for the agent.
+        :param lambda_layers: (experimental) If there are python dependencies that are needed by the provided tools, provide the Lambda Layers with the dependencies.
+        :param tools_bucket: (experimental) Bucket where the tools are located in Primarily use to grant read permission to the processing agent to access the tools. Default: No extra IAM permissions would be automatically assigned to the processing agent.
+        :param tools_location: (experimental) S3 path where the tools are located. The agent would dynamically load the tools
         :stability: experimental
         '''
@@ -634,18 +569,22 @@ class AgentProps:
             type_hints = typing.get_type_hints(_typecheckingstub__e1a82500ee072f393cd9a2ada2f9a3434219c7a51186f26fbba3061bd896d11e)
             check_type(argname="argument agent_system_prompt", value=agent_system_prompt, expected_type=type_hints["agent_system_prompt"])
             check_type(argname="argument lambda_layers", value=lambda_layers, expected_type=type_hints["lambda_layers"])
+            check_type(argname="argument tools_bucket", value=tools_bucket, expected_type=type_hints["tools_bucket"])
             check_type(argname="argument tools_location", value=tools_location, expected_type=type_hints["tools_location"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if agent_system_prompt is not None:
             self._values["agent_system_prompt"] = agent_system_prompt
         if lambda_layers is not None:
             self._values["lambda_layers"] = lambda_layers
+        if tools_bucket is not None:
+            self._values["tools_bucket"] = tools_bucket
         if tools_location is not None:
             self._values["tools_location"] = tools_location
     @builtins.property
     def agent_system_prompt(self) -> typing.Optional[builtins.str]:
-        '''
+        '''(experimental) System prompt for the agent.
         :stability: experimental
         '''
         result = self._values.get("agent_system_prompt")
@@ -655,15 +594,33 @@ class AgentProps:
     def lambda_layers(
         self,
     ) -> typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.LayerVersion]]:
-        '''
+        '''(experimental) If there are python dependencies that are needed by the provided tools, provide the Lambda Layers with the dependencies.
         :stability: experimental
         '''
         result = self._values.get("lambda_layers")
         return typing.cast(typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.LayerVersion]], result)
     @builtins.property
-    def tools_location(self) -> typing.Optional[typing.List[builtins.str]]:
+    def tools_bucket(self) -> typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket]:
+        '''(experimental) Bucket where the tools are located in Primarily use to grant read permission to the processing agent to access the tools.
+        :default:
+        No extra IAM permissions would be automatically
+        assigned to the processing agent.
+        :stability: experimental
         '''
+        result = self._values.get("tools_bucket")
+        return typing.cast(typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket], result)
+    @builtins.property
+    def tools_location(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''(experimental) S3 path where the tools are located.
+        The agent would dynamically load the tools
         :stability: experimental
         '''
         result = self._values.get("tools_location")
@@ -1240,6 +1197,54 @@ class DatabaseEngine(enum.Enum):
     '''
+class DefaultDocumentProcessingConfig(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.DefaultDocumentProcessingConfig",
+):
+    '''
+    :stability: experimental
+    '''
+    def __init__(self) -> None:
+        '''
+        :stability: experimental
+        '''
+        jsii.create(self.__class__, self, [])
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DEFAULT_OBSERVABILITY_METRIC_SVC_NAME")
+    def DEFAULT_OBSERVABILITY_METRIC_SVC_NAME(cls) -> builtins.str:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(builtins.str, jsii.sget(cls, "DEFAULT_OBSERVABILITY_METRIC_SVC_NAME"))
+class DefaultObservabilityConfig(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.DefaultObservabilityConfig",
+):
+    '''(experimental) Contains default constants for Observability related configuration.
+    :stability: experimental
+    '''
+    def __init__(self) -> None:
+        '''
+        :stability: experimental
+        '''
+        jsii.create(self.__class__, self, [])
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DEFAULT_METRIC_NAMESPACE")
+    def DEFAULT_METRIC_NAMESPACE(cls) -> builtins.str:
+        '''(experimental) Default namespace for powertools.
+        :stability: experimental
+        '''
+        return typing.cast(builtins.str, jsii.sget(cls, "DEFAULT_METRIC_NAMESPACE"))
 class DefaultRuntimes(
     metaclass=jsii.JSIIMeta,
     jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.DefaultRuntimes",
@@ -1296,36 +1301,6 @@ class DefaultRuntimes(
         return typing.cast(_aws_cdk_aws_lambda_python_alpha_49328424.BundlingOptions, jsii.sget(cls, "PYTHON_FUNCTION_BUNDLING"))
-@jsii.enum(jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.DocumentProcessingPrefix")
-class DocumentProcessingPrefix(enum.Enum):
-    '''(experimental) S3 prefix constants for organizing documents throughout the processing lifecycle.
-    Documents flow through these prefixes based on processing outcomes:
-    - Upload → raw/ (triggers processing)
-    - Success → processed/ (workflow completed successfully)
-    - Failure → failed/ (workflow encountered errors)
-    :stability: experimental
-    '''
-    RAW = "RAW"
-    '''(experimental) Prefix for newly uploaded documents awaiting processing.
-    :stability: experimental
-    '''
-    FAILED = "FAILED"
-    '''(experimental) Prefix for documents that failed processing.
-    :stability: experimental
-    '''
-    PROCESSED = "PROCESSED"
-    '''(experimental) Prefix for successfully processed documents.
-    :stability: experimental
-    '''
 class EventbridgeBroker(
     _constructs_77d1e7e8.Construct,
     metaclass=jsii.JSIIMeta,
@@ -1929,142 +1904,461 @@ class FrontendProps:
         )
-@jsii.interface(jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.IObservable")
-class IObservable(typing_extensions.Protocol):
-    '''(experimental) Interface providing configuration parameters for constructs that support Observability.
+@jsii.interface(jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.IAdapter")
+class IAdapter(typing_extensions.Protocol):
+    '''(experimental) Abstraction to enable different types of source triggers for the intelligent document processing workflow.
     :stability: experimental
     '''
-    @builtins.property
-    @jsii.member(jsii_name="logGroupDataProtection")
-    def log_group_data_protection(self) -> "LogGroupDataProtectionProps":
-        '''
-        :stability: experimental
-        '''
-        ...
+    @jsii.member(jsii_name="createFailedChain")
+    def create_failed_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for failed processing.
+        :param scope: Scope to use in relation to the CDK hierarchy.
+        :return: Chain to be added to the state machine to handle failure scenarios
-    @builtins.property
-    @jsii.member(jsii_name="metricNamespace")
-    def metric_namespace(self) -> builtins.str:
-        '''
         :stability: experimental
         '''
         ...
-    @builtins.property
-    @jsii.member(jsii_name="metricServiceName")
-    def metric_service_name(self) -> builtins.str:
-        '''
+    @jsii.member(jsii_name="createIngressTrigger")
+    def create_ingress_trigger(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional["IAdapter"] = None,
+        network: typing.Optional["Network"] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union["LogGroupDataProtectionProps", typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''(experimental) Create resources that would receive the data and trigger the workflow.
+        Important: resource created should trigger the state machine
+        :param scope: Scope to use in relation to the CDK hierarchy.
+        :param state_machine: The workflow of the document processor.
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
+        :return: Resources that are created
         :stability: experimental
         '''
         ...
-    @jsii.member(jsii_name="metrics")
-    def metrics(self) -> typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric]:
-        '''
+    @jsii.member(jsii_name="createSuccessChain")
+    def create_success_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for successful processing.
+        :param scope: Scope to use in relation to the CDK hierarchy.
+        :return: Chain to be added to the state machine to handle successful scenarios
         :stability: experimental
         '''
         ...
+    @jsii.member(jsii_name="generateAdapterIAMPolicies")
+    def generate_adapter_iam_policies(
+        self,
+        additional_iam_actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+        narrow_actions: typing.Optional[builtins.bool] = None,
+    ) -> typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]:
+        '''(experimental) Generate IAM statements that can be used by other resources to access the storage.
-class _IObservableProxy:
-    '''(experimental) Interface providing configuration parameters for constructs that support Observability.
+        :param additional_iam_actions: (Optional) list of additional actions in relation to the underlying storage for the adapter.
+        :param narrow_actions: (Optional) whether the resulting permissions would only be the IAM actions indicated in the ``additionalIAMActions`` parameter.
-    :stability: experimental
-    '''
+        :default: false
-    __jsii_type__: typing.ClassVar[str] = "@cdklabs/cdk-appmod-catalog-blueprints.IObservable"
+        :return: PolicyStatement[] IAM policy statements that would included in the state machine IAM role
-    @builtins.property
-    @jsii.member(jsii_name="logGroupDataProtection")
-    def log_group_data_protection(self) -> "LogGroupDataProtectionProps":
-        '''
         :stability: experimental
         '''
-        return typing.cast("LogGroupDataProtectionProps", jsii.get(self, "logGroupDataProtection"))
+        ...
-    @builtins.property
-    @jsii.member(jsii_name="metricNamespace")
-    def metric_namespace(self) -> builtins.str:
-        '''
-        :stability: experimental
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "metricNamespace"))
+    @jsii.member(jsii_name="init")
+    def init(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional["IAdapter"] = None,
+        network: typing.Optional["Network"] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union["LogGroupDataProtectionProps", typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Initializes the adapter.
-    @builtins.property
-    @jsii.member(jsii_name="metricServiceName")
-    def metric_service_name(self) -> builtins.str:
-        '''
-        :stability: experimental
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "metricServiceName"))
+        :param scope: Scope to use in relation to the CDK hierarchy.
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
-    @jsii.member(jsii_name="metrics")
-    def metrics(self) -> typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric]:
-        '''
         :stability: experimental
         '''
-        return typing.cast(typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric], jsii.invoke(self, "metrics", []))
-# Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
-typing.cast(typing.Any, IObservable).__jsii_proxy_class__ = lambda : _IObservableProxy
+        ...
-class LambdaIamUtils(
-    metaclass=jsii.JSIIMeta,
-    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.LambdaIamUtils",
-):
-    '''(experimental) Utility class for creating secure Lambda IAM policy statements with minimal permissions.
+class _IAdapterProxy:
+    '''(experimental) Abstraction to enable different types of source triggers for the intelligent document processing workflow.
     :stability: experimental
     '''
-    def __init__(self) -> None:
-        '''
-        :stability: experimental
-        '''
-        jsii.create(self.__class__, self, [])
+    __jsii_type__: typing.ClassVar[str] = "@cdklabs/cdk-appmod-catalog-blueprints.IAdapter"
-    @jsii.member(jsii_name="createDynamoDbPolicyStatement")
-    @builtins.classmethod
-    def create_dynamo_db_policy_statement(
-        cls,
-        table_arn: builtins.str,
-        actions: typing.Optional[typing.Sequence[builtins.str]] = None,
-    ) -> _aws_cdk_aws_iam_ceddda9d.PolicyStatement:
-        '''(experimental) Creates a policy statement for DynamoDB table access.
+    @jsii.member(jsii_name="createFailedChain")
+    def create_failed_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for failed processing.
-        :param table_arn: The ARN of the DynamoDB table.
-        :param actions: The DynamoDB actions to allow.
+        :param scope: Scope to use in relation to the CDK hierarchy.
-        :return: PolicyStatement for DynamoDB access
+        :return: Chain to be added to the state machine to handle failure scenarios
         :stability: experimental
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__8fea74c9846ad0c5bdddcbfe10063247cb7bcf58aac91e0be80d1226246784e4)
-            check_type(argname="argument table_arn", value=table_arn, expected_type=type_hints["table_arn"])
-            check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
-        return typing.cast(_aws_cdk_aws_iam_ceddda9d.PolicyStatement, jsii.sinvoke(cls, "createDynamoDbPolicyStatement", [table_arn, actions]))
-    @jsii.member(jsii_name="createKmsPolicyStatement")
-    @builtins.classmethod
-    def create_kms_policy_statement(
-        cls,
-        key_arn: builtins.str,
-        actions: typing.Optional[typing.Sequence[builtins.str]] = None,
-    ) -> _aws_cdk_aws_iam_ceddda9d.PolicyStatement:
-        '''(experimental) Creates a policy statement for KMS key access.
-        :param key_arn: The ARN of the KMS key.
-        :param actions: The KMS actions to allow.
-        :return: PolicyStatement for KMS access
+            type_hints = typing.get_type_hints(_typecheckingstub__5998f6c7e16512d92cd00097e77d737333304685208eb36a522c156f8378a9e7)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast(_aws_cdk_aws_stepfunctions_ceddda9d.Chain, jsii.invoke(self, "createFailedChain", [scope]))
-        :stability: experimental
-        '''
-        if __debug__:
+    @jsii.member(jsii_name="createIngressTrigger")
+    def create_ingress_trigger(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
+        network: typing.Optional["Network"] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union["LogGroupDataProtectionProps", typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''(experimental) Create resources that would receive the data and trigger the workflow.
+        Important: resource created should trigger the state machine
+        :param scope: Scope to use in relation to the CDK hierarchy.
+        :param state_machine: The workflow of the document processor.
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
+        :return: Resources that are created
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b61e74ddd8982f4b30ae59307c9fb3adaff26122ddc7f5faabc2cc8e1e2da034)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument state_machine", value=state_machine, expected_type=type_hints["state_machine"])
+        props = BaseDocumentProcessingProps(
+            document_processing_table=document_processing_table,
+            enable_observability=enable_observability,
+            encryption_key=encryption_key,
+            eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
+            network=network,
+            removal_policy=removal_policy,
+            workflow_timeout=workflow_timeout,
+            log_group_data_protection=log_group_data_protection,
+            metric_namespace=metric_namespace,
+            metric_service_name=metric_service_name,
+        )
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "createIngressTrigger", [scope, state_machine, props]))
+    @jsii.member(jsii_name="createSuccessChain")
+    def create_success_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for successful processing.
+        :param scope: Scope to use in relation to the CDK hierarchy.
+        :return: Chain to be added to the state machine to handle successful scenarios
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__cd0aad7a5879633fca8d89cbf92e8f5a13e31615116036f29a82a58c1bb4727d)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast(_aws_cdk_aws_stepfunctions_ceddda9d.Chain, jsii.invoke(self, "createSuccessChain", [scope]))
+    @jsii.member(jsii_name="generateAdapterIAMPolicies")
+    def generate_adapter_iam_policies(
+        self,
+        additional_iam_actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+        narrow_actions: typing.Optional[builtins.bool] = None,
+    ) -> typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]:
+        '''(experimental) Generate IAM statements that can be used by other resources to access the storage.
+        :param additional_iam_actions: (Optional) list of additional actions in relation to the underlying storage for the adapter.
+        :param narrow_actions: (Optional) whether the resulting permissions would only be the IAM actions indicated in the ``additionalIAMActions`` parameter.
+        :default: false
+        :return: PolicyStatement[] IAM policy statements that would included in the state machine IAM role
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__82a45114a0ff76d4b9d091edd6674d4e762dc5ca19631d61579cf1aa47e30b5e)
+            check_type(argname="argument additional_iam_actions", value=additional_iam_actions, expected_type=type_hints["additional_iam_actions"])
+            check_type(argname="argument narrow_actions", value=narrow_actions, expected_type=type_hints["narrow_actions"])
+        return typing.cast(typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement], jsii.invoke(self, "generateAdapterIAMPolicies", [additional_iam_actions, narrow_actions]))
+    @jsii.member(jsii_name="init")
+    def init(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
+        network: typing.Optional["Network"] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union["LogGroupDataProtectionProps", typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Initializes the adapter.
+        :param scope: Scope to use in relation to the CDK hierarchy.
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__17f7e7f35ea8e49cf6ded248435aa1e1dcf416e61c549f3e7b74baad3ac399e7)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        props = BaseDocumentProcessingProps(
+            document_processing_table=document_processing_table,
+            enable_observability=enable_observability,
+            encryption_key=encryption_key,
+            eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
+            network=network,
+            removal_policy=removal_policy,
+            workflow_timeout=workflow_timeout,
+            log_group_data_protection=log_group_data_protection,
+            metric_namespace=metric_namespace,
+            metric_service_name=metric_service_name,
+        )
+        return typing.cast(None, jsii.invoke(self, "init", [scope, props]))
+# Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
+typing.cast(typing.Any, IAdapter).__jsii_proxy_class__ = lambda : _IAdapterProxy
+@jsii.interface(jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.IObservable")
+class IObservable(typing_extensions.Protocol):
+    '''(experimental) Interface providing configuration parameters for constructs that support Observability.
+    :stability: experimental
+    '''
+    @builtins.property
+    @jsii.member(jsii_name="logGroupDataProtection")
+    def log_group_data_protection(self) -> "LogGroupDataProtectionProps":
+        '''
+        :stability: experimental
+        '''
+        ...
+    @builtins.property
+    @jsii.member(jsii_name="metricNamespace")
+    def metric_namespace(self) -> builtins.str:
+        '''
+        :stability: experimental
+        '''
+        ...
+    @builtins.property
+    @jsii.member(jsii_name="metricServiceName")
+    def metric_service_name(self) -> builtins.str:
+        '''
+        :stability: experimental
+        '''
+        ...
+    @jsii.member(jsii_name="metrics")
+    def metrics(self) -> typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric]:
+        '''
+        :stability: experimental
+        '''
+        ...
+class _IObservableProxy:
+    '''(experimental) Interface providing configuration parameters for constructs that support Observability.
+    :stability: experimental
+    '''
+    __jsii_type__: typing.ClassVar[str] = "@cdklabs/cdk-appmod-catalog-blueprints.IObservable"
+    @builtins.property
+    @jsii.member(jsii_name="logGroupDataProtection")
+    def log_group_data_protection(self) -> "LogGroupDataProtectionProps":
+        '''
+        :stability: experimental
+        '''
+        return typing.cast("LogGroupDataProtectionProps", jsii.get(self, "logGroupDataProtection"))
+    @builtins.property
+    @jsii.member(jsii_name="metricNamespace")
+    def metric_namespace(self) -> builtins.str:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "metricNamespace"))
+    @builtins.property
+    @jsii.member(jsii_name="metricServiceName")
+    def metric_service_name(self) -> builtins.str:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "metricServiceName"))
+    @jsii.member(jsii_name="metrics")
+    def metrics(self) -> typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric]:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric], jsii.invoke(self, "metrics", []))
+# Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
+typing.cast(typing.Any, IObservable).__jsii_proxy_class__ = lambda : _IObservableProxy
+class LambdaIamUtils(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.LambdaIamUtils",
+):
+    '''(experimental) Utility class for creating secure Lambda IAM policy statements with minimal permissions.
+    :stability: experimental
+    '''
+    def __init__(self) -> None:
+        '''
+        :stability: experimental
+        '''
+        jsii.create(self.__class__, self, [])
+    @jsii.member(jsii_name="createDynamoDbPolicyStatement")
+    @builtins.classmethod
+    def create_dynamo_db_policy_statement(
+        cls,
+        table_arn: builtins.str,
+        actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+    ) -> _aws_cdk_aws_iam_ceddda9d.PolicyStatement:
+        '''(experimental) Creates a policy statement for DynamoDB table access.
+        :param table_arn: The ARN of the DynamoDB table.
+        :param actions: The DynamoDB actions to allow.
+        :return: PolicyStatement for DynamoDB access
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8fea74c9846ad0c5bdddcbfe10063247cb7bcf58aac91e0be80d1226246784e4)
+            check_type(argname="argument table_arn", value=table_arn, expected_type=type_hints["table_arn"])
+            check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
+        return typing.cast(_aws_cdk_aws_iam_ceddda9d.PolicyStatement, jsii.sinvoke(cls, "createDynamoDbPolicyStatement", [table_arn, actions]))
+    @jsii.member(jsii_name="createKmsPolicyStatement")
+    @builtins.classmethod
+    def create_kms_policy_statement(
+        cls,
+        key_arn: builtins.str,
+        actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+    ) -> _aws_cdk_aws_iam_ceddda9d.PolicyStatement:
+        '''(experimental) Creates a policy statement for KMS key access.
+        :param key_arn: The ARN of the KMS key.
+        :param actions: The KMS actions to allow.
+        :return: PolicyStatement for KMS access
+        :stability: experimental
+        '''
+        if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ef86294be8c776ba98bebc269fab82304f75649efab35cf030d999168ba5d690)
             check_type(argname="argument key_arn", value=key_arn, expected_type=type_hints["key_arn"])
             check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
@@ -3056,22 +3350,366 @@ class PowertoolsConfig(
         return typing.cast(typing.Mapping[builtins.str, builtins.str], jsii.sinvoke(cls, "generateDefaultLambdaConfig", [enable_observability, metrics_namespace, service_name]))
-@jsii.implements(_aws_cdk_ceddda9d.IPropertyInjector)
-class StateMachineObservabilityPropertyInjector(
+@jsii.implements(IAdapter)
+class QueuedS3Adapter(
     metaclass=jsii.JSIIMeta,
-    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.StateMachineObservabilityPropertyInjector",
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.QueuedS3Adapter",
 ):
-    '''
+    '''(experimental) This adapter allows the intelligent document processing workflow to be triggered by files that are uploaded into a S3 Bucket.
     :stability: experimental
     '''
     def __init__(
         self,
         *,
-        data_protection_identifiers: typing.Optional[typing.Sequence[_aws_cdk_aws_logs_ceddda9d.DataIdentifier]] = None,
-        log_group_encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
-    ) -> None:
-        '''
+        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
+        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
+        failed_prefix: typing.Optional[builtins.str] = None,
+        processed_prefix: typing.Optional[builtins.str] = None,
+        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        raw_prefix: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy. Default: create a new bucket
+        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
+        :param failed_prefix: (experimental) S3 prefix where the files that failed processing would be stored. Default: "failed/"
+        :param processed_prefix: (experimental) S3 prefix where the processed files would be stored. Default: "processed/"
+        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
+        :param raw_prefix: (experimental) S3 prefix where the raw files would be stored. This serves as the trigger point for processing Default: "raw/"
+        :stability: experimental
+        '''
+        adapter_props = QueuedS3AdapterProps(
+            bucket=bucket,
+            dlq_max_receive_count=dlq_max_receive_count,
+            failed_prefix=failed_prefix,
+            processed_prefix=processed_prefix,
+            queue_visibility_timeout=queue_visibility_timeout,
+            raw_prefix=raw_prefix,
+        )
+        jsii.create(self.__class__, self, [adapter_props])
+    @jsii.member(jsii_name="createFailedChain")
+    def create_failed_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for failed processing.
+        :param scope: -
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b95daf862a9819daa9b25cecfc08214dc429ef07ac6de3920b5dea59e01616eb)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast(_aws_cdk_aws_stepfunctions_ceddda9d.Chain, jsii.invoke(self, "createFailedChain", [scope]))
+    @jsii.member(jsii_name="createIngressTrigger")
+    def create_ingress_trigger(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
+        network: typing.Optional[Network] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''(experimental) Create resources that would receive the data and trigger the workflow.
+        Important: resource created should trigger the state machine
+        :param scope: -
+        :param state_machine: -
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__fb0e9adf74054c1b0a1974cab45642af57cb1651ef8052310a0229dae1eac178)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument state_machine", value=state_machine, expected_type=type_hints["state_machine"])
+        props = BaseDocumentProcessingProps(
+            document_processing_table=document_processing_table,
+            enable_observability=enable_observability,
+            encryption_key=encryption_key,
+            eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
+            network=network,
+            removal_policy=removal_policy,
+            workflow_timeout=workflow_timeout,
+            log_group_data_protection=log_group_data_protection,
+            metric_namespace=metric_namespace,
+            metric_service_name=metric_service_name,
+        )
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "createIngressTrigger", [scope, state_machine, props]))
+    @jsii.member(jsii_name="createSuccessChain")
+    def create_success_chain(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+    ) -> _aws_cdk_aws_stepfunctions_ceddda9d.Chain:
+        '''(experimental) Create the adapter specific handler for successful processing.
+        :param scope: -
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__76aa2fd577ace3b2507bf11a33f4d039ae5ac0af0d5d3edede30c4515a1a0986)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast(_aws_cdk_aws_stepfunctions_ceddda9d.Chain, jsii.invoke(self, "createSuccessChain", [scope]))
+    @jsii.member(jsii_name="generateAdapterIAMPolicies")
+    def generate_adapter_iam_policies(
+        self,
+        additional_iam_actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+        narrow_actions: typing.Optional[builtins.bool] = None,
+    ) -> typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]:
+        '''(experimental) Generate IAM statements that can be used by other resources to access the storage.
+        :param additional_iam_actions: -
+        :param narrow_actions: -
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__308867c51abfbbc08d0fba9125db9b86eddda969dc95de8546e6f8cb242ee8a9)
+            check_type(argname="argument additional_iam_actions", value=additional_iam_actions, expected_type=type_hints["additional_iam_actions"])
+            check_type(argname="argument narrow_actions", value=narrow_actions, expected_type=type_hints["narrow_actions"])
+        return typing.cast(typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement], jsii.invoke(self, "generateAdapterIAMPolicies", [additional_iam_actions, narrow_actions]))
+    @jsii.member(jsii_name="init")
+    def init(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        *,
+        document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+        enable_observability: typing.Optional[builtins.bool] = None,
+        encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+        eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
+        network: typing.Optional[Network] = None,
+        removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+        workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+        metric_namespace: typing.Optional[builtins.str] = None,
+        metric_service_name: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Initializes the adapter.
+        :param scope: -
+        :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
+        :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
+        :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
+        :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
+        :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
+        :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
+        :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
+        :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
+        :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
+        :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3fe79d0c4a3a771012bc95cea6a690155ea89fa70073f87564e65aad5cdfdb64)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        props = BaseDocumentProcessingProps(
+            document_processing_table=document_processing_table,
+            enable_observability=enable_observability,
+            encryption_key=encryption_key,
+            eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
+            network=network,
+            removal_policy=removal_policy,
+            workflow_timeout=workflow_timeout,
+            log_group_data_protection=log_group_data_protection,
+            metric_namespace=metric_namespace,
+            metric_service_name=metric_service_name,
+        )
+        return typing.cast(None, jsii.invoke(self, "init", [scope, props]))
+@jsii.data_type(
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.QueuedS3AdapterProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "bucket": "bucket",
+        "dlq_max_receive_count": "dlqMaxReceiveCount",
+        "failed_prefix": "failedPrefix",
+        "processed_prefix": "processedPrefix",
+        "queue_visibility_timeout": "queueVisibilityTimeout",
+        "raw_prefix": "rawPrefix",
+    },
+)
+class QueuedS3AdapterProps:
+    def __init__(
+        self,
+        *,
+        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
+        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
+        failed_prefix: typing.Optional[builtins.str] = None,
+        processed_prefix: typing.Optional[builtins.str] = None,
+        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+        raw_prefix: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Props for the Queued S3 Adapter.
+        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy. Default: create a new bucket
+        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
+        :param failed_prefix: (experimental) S3 prefix where the files that failed processing would be stored. Default: "failed/"
+        :param processed_prefix: (experimental) S3 prefix where the processed files would be stored. Default: "processed/"
+        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
+        :param raw_prefix: (experimental) S3 prefix where the raw files would be stored. This serves as the trigger point for processing Default: "raw/"
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c2db7ec0d4b3e93062e1f20f29f9821e5a0fd526ecf05f9ccaa6db663fb1e8de)
+            check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
+            check_type(argname="argument dlq_max_receive_count", value=dlq_max_receive_count, expected_type=type_hints["dlq_max_receive_count"])
+            check_type(argname="argument failed_prefix", value=failed_prefix, expected_type=type_hints["failed_prefix"])
+            check_type(argname="argument processed_prefix", value=processed_prefix, expected_type=type_hints["processed_prefix"])
+            check_type(argname="argument queue_visibility_timeout", value=queue_visibility_timeout, expected_type=type_hints["queue_visibility_timeout"])
+            check_type(argname="argument raw_prefix", value=raw_prefix, expected_type=type_hints["raw_prefix"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if bucket is not None:
+            self._values["bucket"] = bucket
+        if dlq_max_receive_count is not None:
+            self._values["dlq_max_receive_count"] = dlq_max_receive_count
+        if failed_prefix is not None:
+            self._values["failed_prefix"] = failed_prefix
+        if processed_prefix is not None:
+            self._values["processed_prefix"] = processed_prefix
+        if queue_visibility_timeout is not None:
+            self._values["queue_visibility_timeout"] = queue_visibility_timeout
+        if raw_prefix is not None:
+            self._values["raw_prefix"] = raw_prefix
+    @builtins.property
+    def bucket(self) -> typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket]:
+        '''(experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/).
+        If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
+        :default: create a new bucket
+        :stability: experimental
+        '''
+        result = self._values.get("bucket")
+        return typing.cast(typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket], result)
+    @builtins.property
+    def dlq_max_receive_count(self) -> typing.Optional[jsii.Number]:
+        '''(experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue.
+        :default: 5
+        :stability: experimental
+        '''
+        result = self._values.get("dlq_max_receive_count")
+        return typing.cast(typing.Optional[jsii.Number], result)
+    @builtins.property
+    def failed_prefix(self) -> typing.Optional[builtins.str]:
+        '''(experimental) S3 prefix where the files that failed processing would be stored.
+        :default: "failed/"
+        :stability: experimental
+        '''
+        result = self._values.get("failed_prefix")
+        return typing.cast(typing.Optional[builtins.str], result)
+    @builtins.property
+    def processed_prefix(self) -> typing.Optional[builtins.str]:
+        '''(experimental) S3 prefix where the processed files would be stored.
+        :default: "processed/"
+        :stability: experimental
+        '''
+        result = self._values.get("processed_prefix")
+        return typing.cast(typing.Optional[builtins.str], result)
+    @builtins.property
+    def queue_visibility_timeout(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
+        '''(experimental) SQS queue visibility timeout for processing messages.
+        Should be longer than expected processing time to prevent duplicate processing.
+        :default: Duration.seconds(300)
+        :stability: experimental
+        '''
+        result = self._values.get("queue_visibility_timeout")
+        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+    @builtins.property
+    def raw_prefix(self) -> typing.Optional[builtins.str]:
+        '''(experimental) S3 prefix where the raw files would be stored.
+        This serves as the trigger point for processing
+        :default: "raw/"
+        :stability: experimental
+        '''
+        result = self._values.get("raw_prefix")
+        return typing.cast(typing.Optional[builtins.str], result)
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+    def __repr__(self) -> str:
+        return "QueuedS3AdapterProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+@jsii.implements(_aws_cdk_ceddda9d.IPropertyInjector)
+class StateMachineObservabilityPropertyInjector(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="@cdklabs/cdk-appmod-catalog-blueprints.StateMachineObservabilityPropertyInjector",
+):
+    '''
+    :stability: experimental
+    '''
+    def __init__(
+        self,
+        *,
+        data_protection_identifiers: typing.Optional[typing.Sequence[_aws_cdk_aws_logs_ceddda9d.DataIdentifier]] = None,
+        log_group_encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+    ) -> None:
+        '''
         :param data_protection_identifiers: (experimental) List of DataIdentifiers that would be used as part of the Data Protection Policy that would be created for the log group. Default: Data Protection Policy won't be enabled
         :param log_group_encryption_key: (experimental) Encryption key that would be used to encrypt the relevant log group. Default: a new KMS key would automatically be created
@@ -3167,14 +3805,12 @@ class BaseDocumentProcessing(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3188,14 +3824,12 @@ class BaseDocumentProcessing(
         :param scope: - The scope in which to define this construct.
         :param id: - The scoped construct ID. Must be unique within the scope.
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
@@ -3209,14 +3843,12 @@ class BaseDocumentProcessing(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = BaseDocumentProcessingProps(
-            bucket=bucket,
-            dlq_max_receive_count=dlq_max_receive_count,
             document_processing_table=document_processing_table,
             enable_observability=enable_observability,
             encryption_key=encryption_key,
             eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
             network=network,
-            queue_visibility_timeout=queue_visibility_timeout,
             removal_policy=removal_policy,
             workflow_timeout=workflow_timeout,
             log_group_data_protection=log_group_data_protection,
@@ -3273,21 +3905,6 @@ class BaseDocumentProcessing(
             check_type(argname="argument state_machine_id", value=state_machine_id, expected_type=type_hints["state_machine_id"])
         return typing.cast(_aws_cdk_aws_stepfunctions_ceddda9d.StateMachine, jsii.invoke(self, "handleStateMachineCreation", [state_machine_id]))
-    @jsii.member(jsii_name="handleWorkflowTrigger")
-    def _handle_workflow_trigger(
-        self,
-        state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
-    ) -> None:
-        '''
-        :param state_machine: -
-        :stability: experimental
-        '''
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__51565b317b75c58d9a9fb26bd3a0b7c471bf8844bfd0cc94dd43d1850d7ab957)
-            check_type(argname="argument state_machine", value=state_machine, expected_type=type_hints["state_machine"])
-        return typing.cast(None, jsii.invoke(self, "handleWorkflowTrigger", [state_machine]))
     @jsii.member(jsii_name="metrics")
     def metrics(self) -> typing.List[_aws_cdk_aws_cloudwatch_ceddda9d.IMetric]:
         '''
@@ -3327,24 +3944,6 @@ class BaseDocumentProcessing(
         '''
         ...
-    @builtins.property
-    @jsii.member(jsii_name="bucket")
-    def bucket(self) -> _aws_cdk_aws_s3_ceddda9d.Bucket:
-        '''(experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/).
-        :stability: experimental
-        '''
-        return typing.cast(_aws_cdk_aws_s3_ceddda9d.Bucket, jsii.get(self, "bucket"))
-    @builtins.property
-    @jsii.member(jsii_name="deadLetterQueue")
-    def dead_letter_queue(self) -> _aws_cdk_aws_sqs_ceddda9d.Queue:
-        '''(experimental) Dead letter queue.
-        :stability: experimental
-        '''
-        return typing.cast(_aws_cdk_aws_sqs_ceddda9d.Queue, jsii.get(self, "deadLetterQueue"))
     @builtins.property
     @jsii.member(jsii_name="documentProcessingTable")
     def document_processing_table(self) -> _aws_cdk_aws_dynamodb_ceddda9d.Table:
@@ -3363,6 +3962,15 @@ class BaseDocumentProcessing(
         '''
         return typing.cast(_aws_cdk_aws_kms_ceddda9d.Key, jsii.get(self, "encryptionKey"))
+    @builtins.property
+    @jsii.member(jsii_name="ingressAdapter")
+    def ingress_adapter(self) -> IAdapter:
+        '''(experimental) Ingress adapter, responsible for triggering workflow.
+        :stability: experimental
+        '''
+        return typing.cast(IAdapter, jsii.get(self, "ingressAdapter"))
     @builtins.property
     @jsii.member(jsii_name="logGroupDataProtection")
     def log_group_data_protection(self) -> LogGroupDataProtectionProps:
@@ -3392,24 +4000,6 @@ class BaseDocumentProcessing(
         '''
         return typing.cast(builtins.str, jsii.get(self, "metricServiceName"))
-    @builtins.property
-    @jsii.member(jsii_name="queue")
-    def queue(self) -> _aws_cdk_aws_sqs_ceddda9d.Queue:
-        '''(experimental) SQS queue for reliable message processing with dead letter queue support.
-        :stability: experimental
-        '''
-        return typing.cast(_aws_cdk_aws_sqs_ceddda9d.Queue, jsii.get(self, "queue"))
-    @builtins.property
-    @jsii.member(jsii_name="bucketEncryptionKey")
-    def bucket_encryption_key(self) -> typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey]:
-        '''(experimental) Encryption key used by the DocumentProcessingBucket.
-        :stability: experimental
-        '''
-        return typing.cast(typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey], jsii.get(self, "bucketEncryptionKey"))
 class _BaseDocumentProcessingProxy(BaseDocumentProcessing):
     @jsii.member(jsii_name="classificationStep")
@@ -3483,14 +4073,12 @@ typing.cast(typing.Any, BaseDocumentProcessing).__jsii_proxy_class__ = lambda :
         "log_group_data_protection": "logGroupDataProtection",
         "metric_namespace": "metricNamespace",
         "metric_service_name": "metricServiceName",
-        "bucket": "bucket",
-        "dlq_max_receive_count": "dlqMaxReceiveCount",
         "document_processing_table": "documentProcessingTable",
         "enable_observability": "enableObservability",
         "encryption_key": "encryptionKey",
         "eventbridge_broker": "eventbridgeBroker",
+        "ingress_adapter": "ingressAdapter",
         "network": "network",
-        "queue_visibility_timeout": "queueVisibilityTimeout",
         "removal_policy": "removalPolicy",
         "workflow_timeout": "workflowTimeout",
     },
@@ -3502,14 +4090,12 @@ class BaseDocumentProcessingProps(ObservableProps):
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
         metric_namespace: typing.Optional[builtins.str] = None,
         metric_service_name: typing.Optional[builtins.str] = None,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     ) -> None:
@@ -3518,14 +4104,12 @@ class BaseDocumentProcessingProps(ObservableProps):
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
         :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
         :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
@@ -3538,14 +4122,12 @@ class BaseDocumentProcessingProps(ObservableProps):
             check_type(argname="argument log_group_data_protection", value=log_group_data_protection, expected_type=type_hints["log_group_data_protection"])
             check_type(argname="argument metric_namespace", value=metric_namespace, expected_type=type_hints["metric_namespace"])
             check_type(argname="argument metric_service_name", value=metric_service_name, expected_type=type_hints["metric_service_name"])
-            check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
-            check_type(argname="argument dlq_max_receive_count", value=dlq_max_receive_count, expected_type=type_hints["dlq_max_receive_count"])
             check_type(argname="argument document_processing_table", value=document_processing_table, expected_type=type_hints["document_processing_table"])
             check_type(argname="argument enable_observability", value=enable_observability, expected_type=type_hints["enable_observability"])
             check_type(argname="argument encryption_key", value=encryption_key, expected_type=type_hints["encryption_key"])
             check_type(argname="argument eventbridge_broker", value=eventbridge_broker, expected_type=type_hints["eventbridge_broker"])
+            check_type(argname="argument ingress_adapter", value=ingress_adapter, expected_type=type_hints["ingress_adapter"])
             check_type(argname="argument network", value=network, expected_type=type_hints["network"])
-            check_type(argname="argument queue_visibility_timeout", value=queue_visibility_timeout, expected_type=type_hints["queue_visibility_timeout"])
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
             check_type(argname="argument workflow_timeout", value=workflow_timeout, expected_type=type_hints["workflow_timeout"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -3555,10 +4137,6 @@ class BaseDocumentProcessingProps(ObservableProps):
             self._values["metric_namespace"] = metric_namespace
         if metric_service_name is not None:
             self._values["metric_service_name"] = metric_service_name
-        if bucket is not None:
-            self._values["bucket"] = bucket
-        if dlq_max_receive_count is not None:
-            self._values["dlq_max_receive_count"] = dlq_max_receive_count
         if document_processing_table is not None:
             self._values["document_processing_table"] = document_processing_table
         if enable_observability is not None:
@@ -3567,10 +4145,10 @@ class BaseDocumentProcessingProps(ObservableProps):
             self._values["encryption_key"] = encryption_key
         if eventbridge_broker is not None:
             self._values["eventbridge_broker"] = eventbridge_broker
+        if ingress_adapter is not None:
+            self._values["ingress_adapter"] = ingress_adapter
         if network is not None:
             self._values["network"] = network
-        if queue_visibility_timeout is not None:
-            self._values["queue_visibility_timeout"] = queue_visibility_timeout
         if removal_policy is not None:
             self._values["removal_policy"] = removal_policy
         if workflow_timeout is not None:
@@ -3609,28 +4187,6 @@ class BaseDocumentProcessingProps(ObservableProps):
         result = self._values.get("metric_service_name")
         return typing.cast(typing.Optional[builtins.str], result)
-    @builtins.property
-    def bucket(self) -> typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket]:
-        '''(experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/).
-        If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :stability: experimental
-        '''
-        result = self._values.get("bucket")
-        return typing.cast(typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket], result)
-    @builtins.property
-    def dlq_max_receive_count(self) -> typing.Optional[jsii.Number]:
-        '''(experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue.
-        :default: 5
-        :stability: experimental
-        '''
-        result = self._values.get("dlq_max_receive_count")
-        return typing.cast(typing.Optional[jsii.Number], result)
     @builtins.property
     def document_processing_table(
         self,
@@ -3678,28 +4234,26 @@ class BaseDocumentProcessingProps(ObservableProps):
         return typing.cast(typing.Optional[EventbridgeBroker], result)
     @builtins.property
-    def network(self) -> typing.Optional[Network]:
-        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
+    def ingress_adapter(self) -> typing.Optional[IAdapter]:
+        '''(experimental) Adapter that defines how the document processing workflow is triggered.
-        :default: resources will run outside of a VPC
+        :default: QueuedS3Adapter
         :stability: experimental
         '''
-        result = self._values.get("network")
-        return typing.cast(typing.Optional[Network], result)
+        result = self._values.get("ingress_adapter")
+        return typing.cast(typing.Optional[IAdapter], result)
     @builtins.property
-    def queue_visibility_timeout(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
-        '''(experimental) SQS queue visibility timeout for processing messages.
-        Should be longer than expected processing time to prevent duplicate processing.
+    def network(self) -> typing.Optional[Network]:
+        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
-        :default: Duration.seconds(300)
+        :default: resources will run outside of a VPC
         :stability: experimental
         '''
-        result = self._values.get("queue_visibility_timeout")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+        result = self._values.get("network")
+        return typing.cast(typing.Optional[Network], result)
     @builtins.property
     def removal_policy(self) -> typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy]:
@@ -3801,14 +4355,12 @@ class BedrockDocumentProcessing(
         processing_prompt: typing.Optional[builtins.str] = None,
         step_timeouts: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         use_cross_region_inference: typing.Optional[builtins.bool] = None,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3832,14 +4384,12 @@ class BedrockDocumentProcessing(
         :param processing_prompt: (experimental) Custom prompt template for document extraction. Must include placeholder for document content and classification result. Default: DEFAULT_EXTRACTION_PROMPT
         :param step_timeouts: (experimental) Timeout for individual Step Functions tasks (classification, extraction, etc.). Default: Duration.minutes(5)
         :param use_cross_region_inference: (experimental) Enable cross-region inference for Bedrock models to improve availability and performance. When enabled, uses inference profiles instead of direct model invocation. Default: false
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
@@ -3862,14 +4412,12 @@ class BedrockDocumentProcessing(
             processing_prompt=processing_prompt,
             step_timeouts=step_timeouts,
             use_cross_region_inference=use_cross_region_inference,
-            bucket=bucket,
-            dlq_max_receive_count=dlq_max_receive_count,
             document_processing_table=document_processing_table,
             enable_observability=enable_observability,
             encryption_key=encryption_key,
             eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
             network=network,
-            queue_visibility_timeout=queue_visibility_timeout,
             removal_policy=removal_policy,
             workflow_timeout=workflow_timeout,
             log_group_data_protection=log_group_data_protection,
@@ -4032,14 +4580,12 @@ class BedrockDocumentProcessing(
         "log_group_data_protection": "logGroupDataProtection",
         "metric_namespace": "metricNamespace",
         "metric_service_name": "metricServiceName",
-        "bucket": "bucket",
-        "dlq_max_receive_count": "dlqMaxReceiveCount",
         "document_processing_table": "documentProcessingTable",
         "enable_observability": "enableObservability",
         "encryption_key": "encryptionKey",
         "eventbridge_broker": "eventbridgeBroker",
+        "ingress_adapter": "ingressAdapter",
         "network": "network",
-        "queue_visibility_timeout": "queueVisibilityTimeout",
         "removal_policy": "removalPolicy",
         "workflow_timeout": "workflowTimeout",
         "classification_model_id": "classificationModelId",
@@ -4060,14 +4606,12 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
         metric_namespace: typing.Optional[builtins.str] = None,
         metric_service_name: typing.Optional[builtins.str] = None,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         classification_model_id: typing.Optional[_aws_cdk_aws_bedrock_ceddda9d.FoundationModelIdentifier] = None,
@@ -4087,14 +4631,12 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
         :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
         :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
         :param classification_model_id: (experimental) Bedrock foundation model for document classification step. Default: FoundationModelIdentifier.ANTHROPIC_CLAUDE_3_7_SONNET_20250219_V1_0
@@ -4116,14 +4658,12 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
             check_type(argname="argument log_group_data_protection", value=log_group_data_protection, expected_type=type_hints["log_group_data_protection"])
             check_type(argname="argument metric_namespace", value=metric_namespace, expected_type=type_hints["metric_namespace"])
             check_type(argname="argument metric_service_name", value=metric_service_name, expected_type=type_hints["metric_service_name"])
-            check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
-            check_type(argname="argument dlq_max_receive_count", value=dlq_max_receive_count, expected_type=type_hints["dlq_max_receive_count"])
             check_type(argname="argument document_processing_table", value=document_processing_table, expected_type=type_hints["document_processing_table"])
             check_type(argname="argument enable_observability", value=enable_observability, expected_type=type_hints["enable_observability"])
             check_type(argname="argument encryption_key", value=encryption_key, expected_type=type_hints["encryption_key"])
             check_type(argname="argument eventbridge_broker", value=eventbridge_broker, expected_type=type_hints["eventbridge_broker"])
+            check_type(argname="argument ingress_adapter", value=ingress_adapter, expected_type=type_hints["ingress_adapter"])
             check_type(argname="argument network", value=network, expected_type=type_hints["network"])
-            check_type(argname="argument queue_visibility_timeout", value=queue_visibility_timeout, expected_type=type_hints["queue_visibility_timeout"])
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
             check_type(argname="argument workflow_timeout", value=workflow_timeout, expected_type=type_hints["workflow_timeout"])
             check_type(argname="argument classification_model_id", value=classification_model_id, expected_type=type_hints["classification_model_id"])
@@ -4142,10 +4682,6 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
             self._values["metric_namespace"] = metric_namespace
         if metric_service_name is not None:
             self._values["metric_service_name"] = metric_service_name
-        if bucket is not None:
-            self._values["bucket"] = bucket
-        if dlq_max_receive_count is not None:
-            self._values["dlq_max_receive_count"] = dlq_max_receive_count
         if document_processing_table is not None:
             self._values["document_processing_table"] = document_processing_table
         if enable_observability is not None:
@@ -4154,10 +4690,10 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
             self._values["encryption_key"] = encryption_key
         if eventbridge_broker is not None:
             self._values["eventbridge_broker"] = eventbridge_broker
+        if ingress_adapter is not None:
+            self._values["ingress_adapter"] = ingress_adapter
         if network is not None:
             self._values["network"] = network
-        if queue_visibility_timeout is not None:
-            self._values["queue_visibility_timeout"] = queue_visibility_timeout
         if removal_policy is not None:
             self._values["removal_policy"] = removal_policy
         if workflow_timeout is not None:
@@ -4214,28 +4750,6 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
         result = self._values.get("metric_service_name")
         return typing.cast(typing.Optional[builtins.str], result)
-    @builtins.property
-    def bucket(self) -> typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket]:
-        '''(experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/).
-        If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :stability: experimental
-        '''
-        result = self._values.get("bucket")
-        return typing.cast(typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket], result)
-    @builtins.property
-    def dlq_max_receive_count(self) -> typing.Optional[jsii.Number]:
-        '''(experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue.
-        :default: 5
-        :stability: experimental
-        '''
-        result = self._values.get("dlq_max_receive_count")
-        return typing.cast(typing.Optional[jsii.Number], result)
     @builtins.property
     def document_processing_table(
         self,
@@ -4283,28 +4797,26 @@ class BedrockDocumentProcessingProps(BaseDocumentProcessingProps):
         return typing.cast(typing.Optional[EventbridgeBroker], result)
     @builtins.property
-    def network(self) -> typing.Optional[Network]:
-        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
+    def ingress_adapter(self) -> typing.Optional[IAdapter]:
+        '''(experimental) Adapter that defines how the document processing workflow is triggered.
-        :default: resources will run outside of a VPC
+        :default: QueuedS3Adapter
         :stability: experimental
         '''
-        result = self._values.get("network")
-        return typing.cast(typing.Optional[Network], result)
+        result = self._values.get("ingress_adapter")
+        return typing.cast(typing.Optional[IAdapter], result)
     @builtins.property
-    def queue_visibility_timeout(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
-        '''(experimental) SQS queue visibility timeout for processing messages.
-        Should be longer than expected processing time to prevent duplicate processing.
+    def network(self) -> typing.Optional[Network]:
+        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
-        :default: Duration.seconds(300)
+        :default: resources will run outside of a VPC
         :stability: experimental
         '''
-        result = self._values.get("queue_visibility_timeout")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+        result = self._values.get("network")
+        return typing.cast(typing.Optional[Network], result)
     @builtins.property
     def removal_policy(self) -> typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy]:
@@ -4481,14 +4993,12 @@ class AgenticDocumentProcessing(
         processing_prompt: typing.Optional[builtins.str] = None,
         step_timeouts: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         use_cross_region_inference: typing.Optional[builtins.bool] = None,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -4508,14 +5018,12 @@ class AgenticDocumentProcessing(
         :param processing_prompt: (experimental) Custom prompt template for document extraction. Must include placeholder for document content and classification result. Default: DEFAULT_EXTRACTION_PROMPT
         :param step_timeouts: (experimental) Timeout for individual Step Functions tasks (classification, extraction, etc.). Default: Duration.minutes(5)
         :param use_cross_region_inference: (experimental) Enable cross-region inference for Bedrock models to improve availability and performance. When enabled, uses inference profiles instead of direct model invocation. Default: false
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
@@ -4539,14 +5047,12 @@ class AgenticDocumentProcessing(
             processing_prompt=processing_prompt,
             step_timeouts=step_timeouts,
             use_cross_region_inference=use_cross_region_inference,
-            bucket=bucket,
-            dlq_max_receive_count=dlq_max_receive_count,
             document_processing_table=document_processing_table,
             enable_observability=enable_observability,
             encryption_key=encryption_key,
             eventbridge_broker=eventbridge_broker,
+            ingress_adapter=ingress_adapter,
             network=network,
-            queue_visibility_timeout=queue_visibility_timeout,
             removal_policy=removal_policy,
             workflow_timeout=workflow_timeout,
             log_group_data_protection=log_group_data_protection,
@@ -4578,14 +5084,12 @@ class AgenticDocumentProcessing(
         "log_group_data_protection": "logGroupDataProtection",
         "metric_namespace": "metricNamespace",
         "metric_service_name": "metricServiceName",
-        "bucket": "bucket",
-        "dlq_max_receive_count": "dlqMaxReceiveCount",
         "document_processing_table": "documentProcessingTable",
         "enable_observability": "enableObservability",
         "encryption_key": "encryptionKey",
         "eventbridge_broker": "eventbridgeBroker",
+        "ingress_adapter": "ingressAdapter",
         "network": "network",
-        "queue_visibility_timeout": "queueVisibilityTimeout",
         "removal_policy": "removalPolicy",
         "workflow_timeout": "workflowTimeout",
         "classification_model_id": "classificationModelId",
@@ -4607,14 +5111,12 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
         log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
         metric_namespace: typing.Optional[builtins.str] = None,
         metric_service_name: typing.Optional[builtins.str] = None,
-        bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-        dlq_max_receive_count: typing.Optional[jsii.Number] = None,
         document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
         enable_observability: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
         eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+        ingress_adapter: typing.Optional[IAdapter] = None,
         network: typing.Optional[Network] = None,
-        queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
         workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
         classification_model_id: typing.Optional[_aws_cdk_aws_bedrock_ceddda9d.FoundationModelIdentifier] = None,
@@ -4632,14 +5134,12 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
         :param log_group_data_protection: (experimental) Data protection related configuration. Default: a new KMS key would be generated
         :param metric_namespace: (experimental) Business metric namespace. Default: would be defined per use case
         :param metric_service_name: (experimental) Business metric service name dimension. Default: would be defined per use case
-        :param bucket: (experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/). If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :param dlq_max_receive_count: (experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue. Default: 5
         :param document_processing_table: (experimental) DynamoDB table for storing document processing metadata and workflow state. If not provided, a new table will be created with DocumentId as partition key.
         :param enable_observability: (experimental) Enable logging and tracing for all supporting resource. Default: false
         :param encryption_key: (experimental) KMS key to be used. Default: A new key would be created
         :param eventbridge_broker: (experimental) Optional EventBridge broker for publishing custom events during processing. If not provided, no custom events will be sent out.
+        :param ingress_adapter: (experimental) Adapter that defines how the document processing workflow is triggered. Default: QueuedS3Adapter
         :param network: (experimental) Resources that can run inside a VPC will follow the provided network configuration. Default: resources will run outside of a VPC
-        :param queue_visibility_timeout: (experimental) SQS queue visibility timeout for processing messages. Should be longer than expected processing time to prevent duplicate processing. Default: Duration.seconds(300)
         :param removal_policy: (experimental) Removal policy for created resources (bucket, table, queue). Default: RemovalPolicy.DESTROY
         :param workflow_timeout: (experimental) Maximum execution time for the Step Functions workflow. Default: Duration.minutes(30)
         :param classification_model_id: (experimental) Bedrock foundation model for document classification step. Default: FoundationModelIdentifier.ANTHROPIC_CLAUDE_3_7_SONNET_20250219_V1_0
@@ -4664,14 +5164,12 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
             check_type(argname="argument log_group_data_protection", value=log_group_data_protection, expected_type=type_hints["log_group_data_protection"])
             check_type(argname="argument metric_namespace", value=metric_namespace, expected_type=type_hints["metric_namespace"])
             check_type(argname="argument metric_service_name", value=metric_service_name, expected_type=type_hints["metric_service_name"])
-            check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
-            check_type(argname="argument dlq_max_receive_count", value=dlq_max_receive_count, expected_type=type_hints["dlq_max_receive_count"])
             check_type(argname="argument document_processing_table", value=document_processing_table, expected_type=type_hints["document_processing_table"])
             check_type(argname="argument enable_observability", value=enable_observability, expected_type=type_hints["enable_observability"])
             check_type(argname="argument encryption_key", value=encryption_key, expected_type=type_hints["encryption_key"])
             check_type(argname="argument eventbridge_broker", value=eventbridge_broker, expected_type=type_hints["eventbridge_broker"])
+            check_type(argname="argument ingress_adapter", value=ingress_adapter, expected_type=type_hints["ingress_adapter"])
             check_type(argname="argument network", value=network, expected_type=type_hints["network"])
-            check_type(argname="argument queue_visibility_timeout", value=queue_visibility_timeout, expected_type=type_hints["queue_visibility_timeout"])
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
             check_type(argname="argument workflow_timeout", value=workflow_timeout, expected_type=type_hints["workflow_timeout"])
             check_type(argname="argument classification_model_id", value=classification_model_id, expected_type=type_hints["classification_model_id"])
@@ -4691,10 +5189,6 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
             self._values["metric_namespace"] = metric_namespace
         if metric_service_name is not None:
             self._values["metric_service_name"] = metric_service_name
-        if bucket is not None:
-            self._values["bucket"] = bucket
-        if dlq_max_receive_count is not None:
-            self._values["dlq_max_receive_count"] = dlq_max_receive_count
         if document_processing_table is not None:
             self._values["document_processing_table"] = document_processing_table
         if enable_observability is not None:
@@ -4703,10 +5197,10 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
             self._values["encryption_key"] = encryption_key
         if eventbridge_broker is not None:
             self._values["eventbridge_broker"] = eventbridge_broker
+        if ingress_adapter is not None:
+            self._values["ingress_adapter"] = ingress_adapter
         if network is not None:
             self._values["network"] = network
-        if queue_visibility_timeout is not None:
-            self._values["queue_visibility_timeout"] = queue_visibility_timeout
         if removal_policy is not None:
             self._values["removal_policy"] = removal_policy
         if workflow_timeout is not None:
@@ -4765,28 +5259,6 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
         result = self._values.get("metric_service_name")
         return typing.cast(typing.Optional[builtins.str], result)
-    @builtins.property
-    def bucket(self) -> typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket]:
-        '''(experimental) S3 bucket for document storage with organized prefixes (raw/, processed/, failed/).
-        If not provided, a new bucket will be created with auto-delete enabled based on removalPolicy.
-        :stability: experimental
-        '''
-        result = self._values.get("bucket")
-        return typing.cast(typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket], result)
-    @builtins.property
-    def dlq_max_receive_count(self) -> typing.Optional[jsii.Number]:
-        '''(experimental) The number of times a message can be unsuccessfully dequeued before being moved to the dead-letter queue.
-        :default: 5
-        :stability: experimental
-        '''
-        result = self._values.get("dlq_max_receive_count")
-        return typing.cast(typing.Optional[jsii.Number], result)
     @builtins.property
     def document_processing_table(
         self,
@@ -4834,28 +5306,26 @@ class AgenticDocumentProcessingProps(BedrockDocumentProcessingProps):
         return typing.cast(typing.Optional[EventbridgeBroker], result)
     @builtins.property
-    def network(self) -> typing.Optional[Network]:
-        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
+    def ingress_adapter(self) -> typing.Optional[IAdapter]:
+        '''(experimental) Adapter that defines how the document processing workflow is triggered.
-        :default: resources will run outside of a VPC
+        :default: QueuedS3Adapter
         :stability: experimental
         '''
-        result = self._values.get("network")
-        return typing.cast(typing.Optional[Network], result)
+        result = self._values.get("ingress_adapter")
+        return typing.cast(typing.Optional[IAdapter], result)
     @builtins.property
-    def queue_visibility_timeout(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
-        '''(experimental) SQS queue visibility timeout for processing messages.
-        Should be longer than expected processing time to prevent duplicate processing.
+    def network(self) -> typing.Optional[Network]:
+        '''(experimental) Resources that can run inside a VPC will follow the provided network configuration.
-        :default: Duration.seconds(300)
+        :default: resources will run outside of a VPC
         :stability: experimental
         '''
-        result = self._values.get("queue_visibility_timeout")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+        result = self._values.get("network")
+        return typing.cast(typing.Optional[Network], result)
     @builtins.property
     def removal_policy(self) -> typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy]:
@@ -5034,14 +5504,16 @@ __all__ = [
     "DataLoaderProps",
     "DatabaseConfig",
     "DatabaseEngine",
+    "DefaultDocumentProcessingConfig",
+    "DefaultObservabilityConfig",
     "DefaultRuntimes",
-    "DocumentProcessingPrefix",
     "EventbridgeBroker",
     "EventbridgeBrokerProps",
     "FileInput",
     "FileType",
     "Frontend",
     "FrontendProps",
+    "IAdapter",
     "IObservable",
     "LambdaIamUtils",
     "LambdaIamUtilsStackInfo",
@@ -5053,6 +5525,8 @@ __all__ = [
     "NetworkProps",
     "ObservableProps",
     "PowertoolsConfig",
+    "QueuedS3Adapter",
+    "QueuedS3AdapterProps",
     "StateMachineObservabilityPropertyInjector",
 ]
@@ -5108,6 +5582,7 @@ def _typecheckingstub__e1a82500ee072f393cd9a2ada2f9a3434219c7a51186f26fbba3061bd
     *,
     agent_system_prompt: typing.Optional[builtins.str] = None,
     lambda_layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.LayerVersion]] = None,
+    tools_bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
     tools_location: typing.Optional[typing.Sequence[builtins.str]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -5251,6 +5726,62 @@ def _typecheckingstub__2648a6f2c6f02177f5b324264b7de549aa23b0c1d93c8d6cccbc307a8
     """Type checking stubs"""
     pass
+def _typecheckingstub__5998f6c7e16512d92cd00097e77d737333304685208eb36a522c156f8378a9e7(
+    scope: _constructs_77d1e7e8.Construct,
+) -> None:
+    """Type checking stubs"""
+    pass
+def _typecheckingstub__b61e74ddd8982f4b30ae59307c9fb3adaff26122ddc7f5faabc2cc8e1e2da034(
+    scope: _constructs_77d1e7e8.Construct,
+    state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
+    *,
+    document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+    enable_observability: typing.Optional[builtins.bool] = None,
+    encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+    eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
+    network: typing.Optional[Network] = None,
+    removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+    workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+    log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+    metric_namespace: typing.Optional[builtins.str] = None,
+    metric_service_name: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+def _typecheckingstub__cd0aad7a5879633fca8d89cbf92e8f5a13e31615116036f29a82a58c1bb4727d(
+    scope: _constructs_77d1e7e8.Construct,
+) -> None:
+    """Type checking stubs"""
+    pass
+def _typecheckingstub__82a45114a0ff76d4b9d091edd6674d4e762dc5ca19631d61579cf1aa47e30b5e(
+    additional_iam_actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+    narrow_actions: typing.Optional[builtins.bool] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+def _typecheckingstub__17f7e7f35ea8e49cf6ded248435aa1e1dcf416e61c549f3e7b74baad3ac399e7(
+    scope: _constructs_77d1e7e8.Construct,
+    *,
+    document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+    enable_observability: typing.Optional[builtins.bool] = None,
+    encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+    eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
+    network: typing.Optional[Network] = None,
+    removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+    workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+    log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+    metric_namespace: typing.Optional[builtins.str] = None,
+    metric_service_name: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
 def _typecheckingstub__8fea74c9846ad0c5bdddcbfe10063247cb7bcf58aac91e0be80d1226246784e4(
     table_arn: builtins.str,
     actions: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -5414,6 +5945,74 @@ def _typecheckingstub__e065c545d4fce5c4fc2579c3efea8203f50b6d3c8b39aa1595ea3577d
     """Type checking stubs"""
     pass
+def _typecheckingstub__b95daf862a9819daa9b25cecfc08214dc429ef07ac6de3920b5dea59e01616eb(
+    scope: _constructs_77d1e7e8.Construct,
+) -> None:
+    """Type checking stubs"""
+    pass
+def _typecheckingstub__fb0e9adf74054c1b0a1974cab45642af57cb1651ef8052310a0229dae1eac178(
+    scope: _constructs_77d1e7e8.Construct,
+    state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
+    *,
+    document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+    enable_observability: typing.Optional[builtins.bool] = None,
+    encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+    eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
+    network: typing.Optional[Network] = None,
+    removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+    workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+    log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+    metric_namespace: typing.Optional[builtins.str] = None,
+    metric_service_name: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+def _typecheckingstub__76aa2fd577ace3b2507bf11a33f4d039ae5ac0af0d5d3edede30c4515a1a0986(
+    scope: _constructs_77d1e7e8.Construct,
+) -> None:
+    """Type checking stubs"""
+    pass
+def _typecheckingstub__308867c51abfbbc08d0fba9125db9b86eddda969dc95de8546e6f8cb242ee8a9(
+    additional_iam_actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+    narrow_actions: typing.Optional[builtins.bool] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+def _typecheckingstub__3fe79d0c4a3a771012bc95cea6a690155ea89fa70073f87564e65aad5cdfdb64(
+    scope: _constructs_77d1e7e8.Construct,
+    *,
+    document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
+    enable_observability: typing.Optional[builtins.bool] = None,
+    encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
+    eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
+    network: typing.Optional[Network] = None,
+    removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
+    workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+    log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
+    metric_namespace: typing.Optional[builtins.str] = None,
+    metric_service_name: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+def _typecheckingstub__c2db7ec0d4b3e93062e1f20f29f9821e5a0fd526ecf05f9ccaa6db663fb1e8de(
+    *,
+    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
+    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
+    failed_prefix: typing.Optional[builtins.str] = None,
+    processed_prefix: typing.Optional[builtins.str] = None,
+    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
+    raw_prefix: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
 def _typecheckingstub__011b55520774139b52c951d9cc59273f686e377b5415ee42a57650da571d43e7(
     original_props: typing.Any,
     *,
@@ -5427,14 +6026,12 @@ def _typecheckingstub__117c249a26f3e7532983afc9123fadff3e20effcc69408df0f45a03eb
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5450,25 +6047,17 @@ def _typecheckingstub__900aa9de379313a2a9a3e24a2901f803dec0a30dde90b7255d9f180e2
     """Type checking stubs"""
     pass
-def _typecheckingstub__51565b317b75c58d9a9fb26bd3a0b7c471bf8844bfd0cc94dd43d1850d7ab957(
-    state_machine: _aws_cdk_aws_stepfunctions_ceddda9d.StateMachine,
-) -> None:
-    """Type checking stubs"""
-    pass
 def _typecheckingstub__75e07bce24d48571be58cad69f751b10a17a738fdb9db601acdc689ff1e6da22(
     *,
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
     metric_namespace: typing.Optional[builtins.str] = None,
     metric_service_name: typing.Optional[builtins.str] = None,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
 ) -> None:
@@ -5488,14 +6077,12 @@ def _typecheckingstub__7393f9c6b2af93f7d8668b32cec54ba8c77259644ab01f57b3fbd50c7
     processing_prompt: typing.Optional[builtins.str] = None,
     step_timeouts: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     use_cross_region_inference: typing.Optional[builtins.bool] = None,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5517,14 +6104,12 @@ def _typecheckingstub__9606a6418d69bde20176ec33b27eaa22c0e0cdb6b105d382e9d038566
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
     metric_namespace: typing.Optional[builtins.str] = None,
     metric_service_name: typing.Optional[builtins.str] = None,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     classification_model_id: typing.Optional[_aws_cdk_aws_bedrock_ceddda9d.FoundationModelIdentifier] = None,
@@ -5554,14 +6139,12 @@ def _typecheckingstub__b7f396236f637ec7234d81b355cf773497392b537455f3d888c4b7170
     processing_prompt: typing.Optional[builtins.str] = None,
     step_timeouts: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     use_cross_region_inference: typing.Optional[builtins.bool] = None,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5576,14 +6159,12 @@ def _typecheckingstub__da9ccab0035a06d18b5aa3f2de69201b3bbd6e30f7707a291977a0e4f
     log_group_data_protection: typing.Optional[typing.Union[LogGroupDataProtectionProps, typing.Dict[builtins.str, typing.Any]]] = None,
     metric_namespace: typing.Optional[builtins.str] = None,
     metric_service_name: typing.Optional[builtins.str] = None,
-    bucket: typing.Optional[_aws_cdk_aws_s3_ceddda9d.Bucket] = None,
-    dlq_max_receive_count: typing.Optional[jsii.Number] = None,
     document_processing_table: typing.Optional[_aws_cdk_aws_dynamodb_ceddda9d.Table] = None,
     enable_observability: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.Key] = None,
     eventbridge_broker: typing.Optional[EventbridgeBroker] = None,
+    ingress_adapter: typing.Optional[IAdapter] = None,
     network: typing.Optional[Network] = None,
-    queue_visibility_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     removal_policy: typing.Optional[_aws_cdk_ceddda9d.RemovalPolicy] = None,
     workflow_timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     classification_model_id: typing.Optional[_aws_cdk_aws_bedrock_ceddda9d.FoundationModelIdentifier] = None,
@@ -5599,3 +6180,6 @@ def _typecheckingstub__da9ccab0035a06d18b5aa3f2de69201b3bbd6e30f7707a291977a0e4f
 ) -> None:
     """Type checking stubs"""
     pass
+for cls in [IAdapter, IObservable]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

appmod-catalog-blueprints 1.0.1__py3-none-any.whl → 1.2.0__py3-none-any.whl

appmod-catalog-blueprints 1.0.1py3-none-any.whl → 1.2.0py3-none-any.whl