aws-cdk-lib 2.114.1__py3-none-any.whl → 2.115.0__py3-none-any.whl

aws_cdk/aws_cleanrooms/__init__.py

@@ -802,7 +802,7 @@ class CfnCollaboration(
         :param members: A list of initial members, not including the creator. This list is immutable.
         :param name: A human-readable identifier provided by the collaboration owner. Display names are not unique.
         :param query_log_status: An indicator as to whether query logging has been enabled or disabled for the collaboration.
-        :param creator_payment_configuration: 
+        :param creator_payment_configuration: An object representing the collaboration member's payment responsibilities set by the collaboration creator.
         :param data_encryption_metadata: The settings for client-side encryption for cryptographic computing.
         :param tags: An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource.
         '''
@@ -969,6 +969,7 @@ class CfnCollaboration(
     def creator_payment_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCollaboration.PaymentConfigurationProperty"]]:
+        '''An object representing the collaboration member's payment responsibilities set by the collaboration creator.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCollaboration.PaymentConfigurationProperty"]], jsii.get(self, "creatorPaymentConfiguration"))
 
     @creator_payment_configuration.setter
@@ -1146,7 +1147,7 @@ class CfnCollaboration(
             :param account_id: The identifier used to reference members of the collaboration. Currently only supports AWS account ID.
             :param display_name: The member's display name.
             :param member_abilities: The abilities granted to the collaboration member. *Allowed Values* : ``CAN_QUERY`` | ``CAN_RECEIVE_RESULTS``
-            :param payment_configuration: 
+            :param payment_configuration: The collaboration member's payment responsibilities set by the collaboration creator. If the collaboration creator hasn't specified anyone as the member paying for query compute costs, then the member who can query is the default payer.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-collaboration-memberspecification.html
             :exampleMetadata: fixture=_generated
@@ -1222,7 +1223,10 @@ class CfnCollaboration(
         def payment_configuration(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCollaboration.PaymentConfigurationProperty"]]:
-            '''
+            '''The collaboration member's payment responsibilities set by the collaboration creator.
+
+            If the collaboration creator hasn't specified anyone as the member paying for query compute costs, then the member who can query is the default payer.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-collaboration-memberspecification.html#cfn-cleanrooms-collaboration-memberspecification-paymentconfiguration
             '''
             result = self._values.get("payment_configuration")
@@ -1250,8 +1254,9 @@ class CfnCollaboration(
             *,
             query_compute: typing.Union[_IResolvable_da3f097b, typing.Union["CfnCollaboration.QueryComputePaymentConfigProperty", typing.Dict[builtins.str, typing.Any]]],
         ) -> None:
-            '''
-            :param query_compute: 
+            '''An object representing the collaboration member's payment responsibilities set by the collaboration creator.
+
+            :param query_compute: The collaboration member's payment responsibilities set by the collaboration creator for query compute costs.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-collaboration-paymentconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -1279,7 +1284,8 @@ class CfnCollaboration(
         def query_compute(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, "CfnCollaboration.QueryComputePaymentConfigProperty"]:
-            '''
+            '''The collaboration member's payment responsibilities set by the collaboration creator for query compute costs.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-collaboration-paymentconfiguration.html#cfn-cleanrooms-collaboration-paymentconfiguration-querycompute
             '''
             result = self._values.get("query_compute")
@@ -1308,8 +1314,9 @@ class CfnCollaboration(
             *,
             is_responsible: typing.Union[builtins.bool, _IResolvable_da3f097b],
         ) -> None:
-            '''
-            :param is_responsible: 
+            '''An object representing the collaboration member's payment responsibilities set by the collaboration creator for query compute costs.
+
+            :param is_responsible: Indicates whether the collaboration creator has configured the collaboration member to pay for query compute costs ( ``TRUE`` ) or has not configured the collaboration member to pay for query compute costs ( ``FALSE`` ). Exactly one member can be configured to pay for query compute costs. An error is returned if the collaboration creator sets a ``TRUE`` value for more than one member in the collaboration. If the collaboration creator hasn't specified anyone as the member paying for query compute costs, then the member who can query is the default payer. An error is returned if the collaboration creator sets a ``FALSE`` value for the member who can query.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-collaboration-querycomputepaymentconfig.html
             :exampleMetadata: fixture=_generated
@@ -1333,7 +1340,12 @@ class CfnCollaboration(
 
         @builtins.property
         def is_responsible(self) -> typing.Union[builtins.bool, _IResolvable_da3f097b]:
-            '''
+            '''Indicates whether the collaboration creator has configured the collaboration member to pay for query compute costs ( ``TRUE`` ) or has not configured the collaboration member to pay for query compute costs ( ``FALSE`` ).
+
+            Exactly one member can be configured to pay for query compute costs. An error is returned if the collaboration creator sets a ``TRUE`` value for more than one member in the collaboration.
+
+            If the collaboration creator hasn't specified anyone as the member paying for query compute costs, then the member who can query is the default payer. An error is returned if the collaboration creator sets a ``FALSE`` value for the member who can query.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-collaboration-querycomputepaymentconfig.html#cfn-cleanrooms-collaboration-querycomputepaymentconfig-isresponsible
             '''
             result = self._values.get("is_responsible")
@@ -1389,7 +1401,7 @@ class CfnCollaborationProps:
         :param members: A list of initial members, not including the creator. This list is immutable.
         :param name: A human-readable identifier provided by the collaboration owner. Display names are not unique.
         :param query_log_status: An indicator as to whether query logging has been enabled or disabled for the collaboration.
-        :param creator_payment_configuration: 
+        :param creator_payment_configuration: An object representing the collaboration member's payment responsibilities set by the collaboration creator.
         :param data_encryption_metadata: The settings for client-side encryption for cryptographic computing.
         :param tags: An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource.
 
@@ -1537,7 +1549,8 @@ class CfnCollaborationProps:
     def creator_payment_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnCollaboration.PaymentConfigurationProperty]]:
-        '''
+        '''An object representing the collaboration member's payment responsibilities set by the collaboration creator.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-collaboration.html#cfn-cleanrooms-collaboration-creatorpaymentconfiguration
         '''
         result = self._values.get("creator_payment_configuration")
@@ -3452,7 +3465,7 @@ class CfnMembership(
         :param collaboration_identifier: The unique ID for the associated collaboration.
         :param query_log_status: An indicator as to whether query logging has been enabled or disabled for the membership.
         :param default_result_configuration: The default protected query result configuration as specified by the member who can receive results.
-        :param payment_configuration: 
+        :param payment_configuration: The payment responsibilities accepted by the collaboration member.
         :param tags: An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource.
         '''
         if __debug__:
@@ -3597,6 +3610,7 @@ class CfnMembership(
     def payment_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnMembership.MembershipPaymentConfigurationProperty"]]:
+        '''The payment responsibilities accepted by the collaboration member.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnMembership.MembershipPaymentConfigurationProperty"]], jsii.get(self, "paymentConfiguration"))
 
     @payment_configuration.setter
@@ -3633,8 +3647,9 @@ class CfnMembership(
             *,
             query_compute: typing.Union[_IResolvable_da3f097b, typing.Union["CfnMembership.MembershipQueryComputePaymentConfigProperty", typing.Dict[builtins.str, typing.Any]]],
         ) -> None:
-            '''
-            :param query_compute: 
+            '''An object representing the payment responsibilities accepted by the collaboration member.
+
+            :param query_compute: The payment responsibilities accepted by the collaboration member for query compute costs.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-membership-membershippaymentconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -3662,7 +3677,8 @@ class CfnMembership(
         def query_compute(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, "CfnMembership.MembershipQueryComputePaymentConfigProperty"]:
-            '''
+            '''The payment responsibilities accepted by the collaboration member for query compute costs.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-membership-membershippaymentconfiguration.html#cfn-cleanrooms-membership-membershippaymentconfiguration-querycompute
             '''
             result = self._values.get("query_compute")
@@ -3841,8 +3857,9 @@ class CfnMembership(
             *,
             is_responsible: typing.Union[builtins.bool, _IResolvable_da3f097b],
         ) -> None:
-            '''
-            :param is_responsible: 
+            '''An object representing the payment responsibilities accepted by the collaboration member for query compute costs.
+
+            :param is_responsible: Indicates whether the collaboration member has accepted to pay for query compute costs ( ``TRUE`` ) or has not accepted to pay for query compute costs ( ``FALSE`` ). If the collaboration creator has not specified anyone to pay for query compute costs, then the member who can query is the default payer. An error message is returned for the following reasons: - If you set the value to ``FALSE`` but you are responsible to pay for query compute costs. - If you set the value to ``TRUE`` but you are not responsible to pay for query compute costs.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-membership-membershipquerycomputepaymentconfig.html
             :exampleMetadata: fixture=_generated
@@ -3866,7 +3883,15 @@ class CfnMembership(
 
         @builtins.property
         def is_responsible(self) -> typing.Union[builtins.bool, _IResolvable_da3f097b]:
-            '''
+            '''Indicates whether the collaboration member has accepted to pay for query compute costs ( ``TRUE`` ) or has not accepted to pay for query compute costs ( ``FALSE`` ).
+
+            If the collaboration creator has not specified anyone to pay for query compute costs, then the member who can query is the default payer.
+
+            An error message is returned for the following reasons:
+
+            - If you set the value to ``FALSE`` but you are responsible to pay for query compute costs.
+            - If you set the value to ``TRUE`` but you are not responsible to pay for query compute costs.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-membership-membershipquerycomputepaymentconfig.html#cfn-cleanrooms-membership-membershipquerycomputepaymentconfig-isresponsible
             '''
             result = self._values.get("is_responsible")
@@ -4003,7 +4028,7 @@ class CfnMembershipProps:
         :param collaboration_identifier: The unique ID for the associated collaboration.
         :param query_log_status: An indicator as to whether query logging has been enabled or disabled for the membership.
         :param default_result_configuration: The default protected query result configuration as specified by the member who can receive results.
-        :param payment_configuration: 
+        :param payment_configuration: The payment responsibilities accepted by the collaboration member.
         :param tags: An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-membership.html
@@ -4098,7 +4123,8 @@ class CfnMembershipProps:
     def payment_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnMembership.MembershipPaymentConfigurationProperty]]:
-        '''
+        '''The payment responsibilities accepted by the collaboration member.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-membership.html#cfn-cleanrooms-membership-paymentconfiguration
         '''
         result = self._values.get("payment_configuration")

aws_cdk/aws_cloudformation/__init__.py

@@ -4454,7 +4454,7 @@ class CfnStackSet(
             :param max_concurrent_count: The maximum number of accounts in which to perform this operation at one time. This is dependent on the value of ``FailureToleranceCount`` . ``MaxConcurrentCount`` is at most one more than the ``FailureToleranceCount`` . Note that this setting lets you specify the *maximum* for operations. For large deployments, under certain circumstances the actual number of accounts acted upon concurrently may be lower due to service throttling. Conditional: You must specify either ``MaxConcurrentCount`` or ``MaxConcurrentPercentage`` , but not both.
             :param max_concurrent_percentage: The maximum percentage of accounts in which to perform this operation at one time. When calculating the number of accounts based on the specified percentage, AWS CloudFormation rounds down to the next whole number. This is true except in cases where rounding down would result is zero. In this case, CloudFormation sets the number as one instead. Note that this setting lets you specify the *maximum* for operations. For large deployments, under certain circumstances the actual number of accounts acted upon concurrently may be lower due to service throttling. Conditional: You must specify either ``MaxConcurrentCount`` or ``MaxConcurrentPercentage`` , but not both.
             :param region_concurrency_type: The concurrency type of deploying StackSets operations in Regions, could be in parallel or one Region at a time.
-            :param region_order: The order of the Regions where you want to perform the stack operation.
+            :param region_order: The order of the Regions where you want to perform the stack operation. .. epigraph:: ``RegionOrder`` isn't followed if ``AutoDeployment`` is enabled.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-operationpreferences.html
             :exampleMetadata: fixture=_generated
@@ -4567,6 +4567,10 @@ class CfnStackSet(
         def region_order(self) -> typing.Optional[typing.List[builtins.str]]:
             '''The order of the Regions where you want to perform the stack operation.
 
+            .. epigraph::
+
+               ``RegionOrder`` isn't followed if ``AutoDeployment`` is enabled.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-operationpreferences.html#cfn-cloudformation-stackset-operationpreferences-regionorder
             '''
             result = self._values.get("region_order")

aws_cdk/aws_cloudtrail/__init__.py

@@ -736,6 +736,8 @@ class CfnEventDataStore(
                 name="name"
             )],
             billing_mode="billingMode",
+            federation_enabled=False,
+            federation_role_arn="federationRoleArn",
             ingestion_enabled=False,
             insights_destination="insightsDestination",
             insight_selectors=[cloudtrail.CfnEventDataStore.InsightSelectorProperty(
@@ -761,6 +763,8 @@ class CfnEventDataStore(
         *,
         advanced_event_selectors: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnEventDataStore.AdvancedEventSelectorProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         billing_mode: typing.Optional[builtins.str] = None,
+        federation_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        federation_role_arn: typing.Optional[builtins.str] = None,
         ingestion_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         insights_destination: typing.Optional[builtins.str] = None,
         insight_selectors: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnEventDataStore.InsightSelectorProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
@@ -777,6 +781,8 @@ class CfnEventDataStore(
         :param id: Construct identifier for this resource (unique in its scope).
         :param advanced_event_selectors: The advanced event selectors to use to select the events for the data store. You can configure up to five advanced event selectors for each event data store. For more information about how to use advanced event selectors to log CloudTrail events, see `Log events by using advanced event selectors <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#creating-data-event-selectors-advanced>`_ in the CloudTrail User Guide. For more information about how to use advanced event selectors to include AWS Config configuration items in your event data store, see `Create an event data store for AWS Config configuration items <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-lake-cli.html#lake-cli-create-eds-config>`_ in the CloudTrail User Guide. For more information about how to use advanced event selectors to include non- AWS events in your event data store, see `Create an integration to log events from outside AWS <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-lake-cli.html#lake-cli-create-integration>`_ in the CloudTrail User Guide.
         :param billing_mode: The billing mode for the event data store determines the cost for ingesting events and the default and maximum retention period for the event data store. The following are the possible values: - ``EXTENDABLE_RETENTION_PRICING`` - This billing mode is generally recommended if you want a flexible retention period of up to 3653 days (about 10 years). The default retention period for this billing mode is 366 days. - ``FIXED_RETENTION_PRICING`` - This billing mode is recommended if you expect to ingest more than 25 TB of event data per month and need a retention period of up to 2557 days (about 7 years). The default retention period for this billing mode is 2557 days. The default value is ``EXTENDABLE_RETENTION_PRICING`` . For more information about CloudTrail pricing, see `AWS CloudTrail Pricing <https://docs.aws.amazon.com/cloudtrail/pricing/>`_ and `Managing CloudTrail Lake costs <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-manage-costs.html>`_ .
+        :param federation_enabled: Indicates whether federation is enabled on an event data store.
+        :param federation_role_arn: The ARN of the role used for event data store federation.
         :param ingestion_enabled: Specifies whether the event data store should start ingesting live events. The default is true.
         :param insights_destination: The ARN (or ID suffix of the ARN) of the destination event data store that logs Insights events. For more information, see `Create an event data store for CloudTrail Insights events <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-event-data-store-insights.html>`_ .
         :param insight_selectors: A JSON string that contains the Insights types you want to log on an event data store. ``ApiCallRateInsight`` and ``ApiErrorRateInsight`` are valid Insight types. The ``ApiCallRateInsight`` Insights type analyzes write-only management API calls that are aggregated per minute against a baseline API call volume. The ``ApiErrorRateInsight`` Insights type analyzes management API calls that result in error codes. The error is shown if the API call is unsuccessful.
@@ -795,6 +801,8 @@ class CfnEventDataStore(
         props = CfnEventDataStoreProps(
             advanced_event_selectors=advanced_event_selectors,
             billing_mode=billing_mode,
+            federation_enabled=federation_enabled,
+            federation_role_arn=federation_role_arn,
             ingestion_enabled=ingestion_enabled,
             insights_destination=insights_destination,
             insight_selectors=insight_selectors,
@@ -917,6 +925,37 @@ class CfnEventDataStore(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "billingMode", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="federationEnabled")
+    def federation_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''Indicates whether federation is enabled on an event data store.'''
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "federationEnabled"))
+
+    @federation_enabled.setter
+    def federation_enabled(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__765513d5a073b76962f766e5dc1a967c4ad42a5bb2200d9f880aac945789b35d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "federationEnabled", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="federationRoleArn")
+    def federation_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the role used for event data store federation.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "federationRoleArn"))
+
+    @federation_role_arn.setter
+    def federation_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__02d5876fb281f125b4a84c7554b6ae992b9b7433cab839d402d60601a9872704)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "federationRoleArn", value)
+
     @builtins.property
     @jsii.member(jsii_name="ingestionEnabled")
     def ingestion_enabled(
@@ -1611,6 +1650,8 @@ class CfnEventDataStore(
     name_mapping={
         "advanced_event_selectors": "advancedEventSelectors",
         "billing_mode": "billingMode",
+        "federation_enabled": "federationEnabled",
+        "federation_role_arn": "federationRoleArn",
         "ingestion_enabled": "ingestionEnabled",
         "insights_destination": "insightsDestination",
         "insight_selectors": "insightSelectors",
@@ -1629,6 +1670,8 @@ class CfnEventDataStoreProps:
         *,
         advanced_event_selectors: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnEventDataStore.AdvancedEventSelectorProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         billing_mode: typing.Optional[builtins.str] = None,
+        federation_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        federation_role_arn: typing.Optional[builtins.str] = None,
         ingestion_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         insights_destination: typing.Optional[builtins.str] = None,
         insight_selectors: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnEventDataStore.InsightSelectorProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
@@ -1644,6 +1687,8 @@ class CfnEventDataStoreProps:
 
         :param advanced_event_selectors: The advanced event selectors to use to select the events for the data store. You can configure up to five advanced event selectors for each event data store. For more information about how to use advanced event selectors to log CloudTrail events, see `Log events by using advanced event selectors <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#creating-data-event-selectors-advanced>`_ in the CloudTrail User Guide. For more information about how to use advanced event selectors to include AWS Config configuration items in your event data store, see `Create an event data store for AWS Config configuration items <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-lake-cli.html#lake-cli-create-eds-config>`_ in the CloudTrail User Guide. For more information about how to use advanced event selectors to include non- AWS events in your event data store, see `Create an integration to log events from outside AWS <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-lake-cli.html#lake-cli-create-integration>`_ in the CloudTrail User Guide.
         :param billing_mode: The billing mode for the event data store determines the cost for ingesting events and the default and maximum retention period for the event data store. The following are the possible values: - ``EXTENDABLE_RETENTION_PRICING`` - This billing mode is generally recommended if you want a flexible retention period of up to 3653 days (about 10 years). The default retention period for this billing mode is 366 days. - ``FIXED_RETENTION_PRICING`` - This billing mode is recommended if you expect to ingest more than 25 TB of event data per month and need a retention period of up to 2557 days (about 7 years). The default retention period for this billing mode is 2557 days. The default value is ``EXTENDABLE_RETENTION_PRICING`` . For more information about CloudTrail pricing, see `AWS CloudTrail Pricing <https://docs.aws.amazon.com/cloudtrail/pricing/>`_ and `Managing CloudTrail Lake costs <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-manage-costs.html>`_ .
+        :param federation_enabled: Indicates whether federation is enabled on an event data store.
+        :param federation_role_arn: The ARN of the role used for event data store federation.
         :param ingestion_enabled: Specifies whether the event data store should start ingesting live events. The default is true.
         :param insights_destination: The ARN (or ID suffix of the ARN) of the destination event data store that logs Insights events. For more information, see `Create an event data store for CloudTrail Insights events <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-event-data-store-insights.html>`_ .
         :param insight_selectors: A JSON string that contains the Insights types you want to log on an event data store. ``ApiCallRateInsight`` and ``ApiErrorRateInsight`` are valid Insight types. The ``ApiCallRateInsight`` Insights type analyzes write-only management API calls that are aggregated per minute against a baseline API call volume. The ``ApiErrorRateInsight`` Insights type analyzes management API calls that result in error codes. The error is shown if the API call is unsuccessful.
@@ -1682,6 +1727,8 @@ class CfnEventDataStoreProps:
                     name="name"
                 )],
                 billing_mode="billingMode",
+                federation_enabled=False,
+                federation_role_arn="federationRoleArn",
                 ingestion_enabled=False,
                 insights_destination="insightsDestination",
                 insight_selectors=[cloudtrail.CfnEventDataStore.InsightSelectorProperty(
@@ -1703,6 +1750,8 @@ class CfnEventDataStoreProps:
             type_hints = typing.get_type_hints(_typecheckingstub__bc172d8375a6bcb019f0df4a0d571d671956c64545dc03fc01f9ad66e38ac10e)
             check_type(argname="argument advanced_event_selectors", value=advanced_event_selectors, expected_type=type_hints["advanced_event_selectors"])
             check_type(argname="argument billing_mode", value=billing_mode, expected_type=type_hints["billing_mode"])
+            check_type(argname="argument federation_enabled", value=federation_enabled, expected_type=type_hints["federation_enabled"])
+            check_type(argname="argument federation_role_arn", value=federation_role_arn, expected_type=type_hints["federation_role_arn"])
             check_type(argname="argument ingestion_enabled", value=ingestion_enabled, expected_type=type_hints["ingestion_enabled"])
             check_type(argname="argument insights_destination", value=insights_destination, expected_type=type_hints["insights_destination"])
             check_type(argname="argument insight_selectors", value=insight_selectors, expected_type=type_hints["insight_selectors"])
@@ -1718,6 +1767,10 @@ class CfnEventDataStoreProps:
             self._values["advanced_event_selectors"] = advanced_event_selectors
         if billing_mode is not None:
             self._values["billing_mode"] = billing_mode
+        if federation_enabled is not None:
+            self._values["federation_enabled"] = federation_enabled
+        if federation_role_arn is not None:
+            self._values["federation_role_arn"] = federation_role_arn
         if ingestion_enabled is not None:
             self._values["ingestion_enabled"] = ingestion_enabled
         if insights_destination is not None:
@@ -1776,6 +1829,26 @@ class CfnEventDataStoreProps:
         result = self._values.get("billing_mode")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def federation_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''Indicates whether federation is enabled on an event data store.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-eventdatastore.html#cfn-cloudtrail-eventdatastore-federationenabled
+        '''
+        result = self._values.get("federation_enabled")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+    @builtins.property
+    def federation_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the role used for event data store federation.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-eventdatastore.html#cfn-cloudtrail-eventdatastore-federationrolearn
+        '''
+        result = self._values.get("federation_role_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def ingestion_enabled(
         self,
@@ -4667,6 +4740,8 @@ def _typecheckingstub__058a94222b13ad44b4607ad5932ec9b6a2defcb250ff436576e6e8976
     *,
     advanced_event_selectors: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnEventDataStore.AdvancedEventSelectorProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     billing_mode: typing.Optional[builtins.str] = None,
+    federation_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    federation_role_arn: typing.Optional[builtins.str] = None,
     ingestion_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     insights_destination: typing.Optional[builtins.str] = None,
     insight_selectors: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnEventDataStore.InsightSelectorProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
@@ -4705,6 +4780,18 @@ def _typecheckingstub__106939491635761bff083d6af3ca26d1723f9df71ec433399c5746554
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__765513d5a073b76962f766e5dc1a967c4ad42a5bb2200d9f880aac945789b35d(
+    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__02d5876fb281f125b4a84c7554b6ae992b9b7433cab839d402d60601a9872704(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__3120b4fc57c151f577843e6f55242684964162de4d4061991c82480a0fae581b(
     value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
 ) -> None:
@@ -4797,6 +4884,8 @@ def _typecheckingstub__bc172d8375a6bcb019f0df4a0d571d671956c64545dc03fc01f9ad66e
     *,
     advanced_event_selectors: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnEventDataStore.AdvancedEventSelectorProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     billing_mode: typing.Optional[builtins.str] = None,
+    federation_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    federation_role_arn: typing.Optional[builtins.str] = None,
     ingestion_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     insights_destination: typing.Optional[builtins.str] = None,
     insight_selectors: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnEventDataStore.InsightSelectorProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,