aws-cdk-lib 2.115.0__py3-none-any.whl → 2.116.1__py3-none-any.whl

aws_cdk/aws_sns/__init__.py

@@ -211,6 +211,49 @@ topic_policy = sns.TopicPolicy(self, "Policy",
     policy_document=policy_document
 )
 ```
+
+## Delivery status logging
+
+Amazon SNS provides support to log the delivery status of notification messages sent to topics with the following Amazon SNS endpoints:
+
+* HTTP
+* Amazon Kinesis Data Firehose
+* AWS Lambda
+* Platform application endpoint
+* Amazon Simple Queue Service
+
+Example with a delivery status logging configuration for SQS:
+
+```python
+# role: iam.Role
+
+topic = sns.Topic(self, "MyTopic",
+    logging_configs=[sns.LoggingConfig(
+        protocol=sns.LoggingProtocol.SQS,
+        failure_feedback_role=role,
+        success_feedback_role=role,
+        success_feedback_sample_rate=50
+    )
+    ]
+)
+```
+
+A delivery status logging configuration can also be added to your topic by `addLoggingConfig` method:
+
+```python
+# role: iam.Role
+
+topic = sns.Topic(self, "MyTopic")
+
+topic.add_logging_config(
+    protocol=sns.LoggingProtocol.SQS,
+    failure_feedback_role=role,
+    success_feedback_role=role,
+    success_feedback_sample_rate=50
+)
+```
+
+Note that valid values for `successFeedbackSampleRate` are integer between 0-100.
 '''
 import abc
 import builtins
@@ -253,6 +296,7 @@ from ..aws_iam import (
     AddToResourcePolicyResult as _AddToResourcePolicyResult_1d0a53ad,
     Grant as _Grant_a7ae64f8,
     IGrantable as _IGrantable_71c4f5de,
+    IRole as _IRole_235f5d8e,
     PolicyDocument as _PolicyDocument_3ac34393,
     PolicyStatement as _PolicyStatement_0fe33853,
 )
@@ -362,6 +406,7 @@ class CfnSubscription(
         # delivery_policy: Any
         # filter_policy: Any
         # redrive_policy: Any
+        # replay_policy: Any
         
         cfn_subscription = sns.CfnSubscription(self, "MyCfnSubscription",
             protocol="protocol",
@@ -375,6 +420,7 @@ class CfnSubscription(
             raw_message_delivery=False,
             redrive_policy=redrive_policy,
             region="region",
+            replay_policy=replay_policy,
             subscription_role_arn="subscriptionRoleArn"
         )
     '''
@@ -393,6 +439,7 @@ class CfnSubscription(
         raw_message_delivery: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         redrive_policy: typing.Any = None,
         region: typing.Optional[builtins.str] = None,
+        replay_policy: typing.Any = None,
         subscription_role_arn: typing.Optional[builtins.str] = None,
     ) -> None:
         '''
@@ -407,6 +454,7 @@ class CfnSubscription(
         :param raw_message_delivery: When set to ``true`` , enables raw message delivery. Raw messages don't contain any JSON formatting and can be sent to Amazon SQS and HTTP/S endpoints. For more information, see ``[GetSubscriptionAttributes](https://docs.aws.amazon.com/sns/latest/api/API_GetSubscriptionAttributes.html)`` in the *Amazon SNS API Reference* .
         :param redrive_policy: When specified, sends undeliverable messages to the specified Amazon SQS dead-letter queue. Messages that can't be delivered due to client errors (for example, when the subscribed endpoint is unreachable) or server errors (for example, when the service that powers the subscribed endpoint becomes unavailable) are held in the dead-letter queue for further analysis or reprocessing. For more information about the redrive policy and dead-letter queues, see `Amazon SQS dead-letter queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-dead-letter-queues.html>`_ in the *Amazon SQS Developer Guide* .
         :param region: For cross-region subscriptions, the region in which the topic resides. If no region is specified, AWS CloudFormation uses the region of the caller as the default. If you perform an update operation that only updates the ``Region`` property of a ``AWS::SNS::Subscription`` resource, that operation will fail unless you are either: - Updating the ``Region`` from ``NULL`` to the caller region. - Updating the ``Region`` from the caller region to ``NULL`` .
+        :param replay_policy: 
         :param subscription_role_arn: This property applies only to Amazon Kinesis Data Firehose delivery stream subscriptions. Specify the ARN of the IAM role that has the following: - Permission to write to the Amazon Kinesis Data Firehose delivery stream - Amazon SNS listed as a trusted entity Specifying a valid ARN for this attribute is required for Kinesis Data Firehose delivery stream subscriptions. For more information, see `Fanout to Amazon Kinesis Data Firehose delivery streams <https://docs.aws.amazon.com/sns/latest/dg/sns-firehose-as-subscriber.html>`_ in the *Amazon SNS Developer Guide.*
         '''
         if __debug__:
@@ -423,6 +471,7 @@ class CfnSubscription(
             raw_message_delivery=raw_message_delivery,
             redrive_policy=redrive_policy,
             region=region,
+            replay_policy=replay_policy,
             subscription_role_arn=subscription_role_arn,
         )
 
@@ -593,6 +642,18 @@ class CfnSubscription(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "region", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="replayPolicy")
+    def replay_policy(self) -> typing.Any:
+        return typing.cast(typing.Any, jsii.get(self, "replayPolicy"))
+
+    @replay_policy.setter
+    def replay_policy(self, value: typing.Any) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a75cc1735865b82732f90f42a2ba55634431d8bdec48d0a7752a79354f0c850d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "replayPolicy", value)
+
     @builtins.property
     @jsii.member(jsii_name="subscriptionRoleArn")
     def subscription_role_arn(self) -> typing.Optional[builtins.str]:
@@ -620,6 +681,7 @@ class CfnSubscription(
         "raw_message_delivery": "rawMessageDelivery",
         "redrive_policy": "redrivePolicy",
         "region": "region",
+        "replay_policy": "replayPolicy",
         "subscription_role_arn": "subscriptionRoleArn",
     },
 )
@@ -636,6 +698,7 @@ class CfnSubscriptionProps:
         raw_message_delivery: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         redrive_policy: typing.Any = None,
         region: typing.Optional[builtins.str] = None,
+        replay_policy: typing.Any = None,
         subscription_role_arn: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for defining a ``CfnSubscription``.
@@ -649,6 +712,7 @@ class CfnSubscriptionProps:
         :param raw_message_delivery: When set to ``true`` , enables raw message delivery. Raw messages don't contain any JSON formatting and can be sent to Amazon SQS and HTTP/S endpoints. For more information, see ``[GetSubscriptionAttributes](https://docs.aws.amazon.com/sns/latest/api/API_GetSubscriptionAttributes.html)`` in the *Amazon SNS API Reference* .
         :param redrive_policy: When specified, sends undeliverable messages to the specified Amazon SQS dead-letter queue. Messages that can't be delivered due to client errors (for example, when the subscribed endpoint is unreachable) or server errors (for example, when the service that powers the subscribed endpoint becomes unavailable) are held in the dead-letter queue for further analysis or reprocessing. For more information about the redrive policy and dead-letter queues, see `Amazon SQS dead-letter queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-dead-letter-queues.html>`_ in the *Amazon SQS Developer Guide* .
         :param region: For cross-region subscriptions, the region in which the topic resides. If no region is specified, AWS CloudFormation uses the region of the caller as the default. If you perform an update operation that only updates the ``Region`` property of a ``AWS::SNS::Subscription`` resource, that operation will fail unless you are either: - Updating the ``Region`` from ``NULL`` to the caller region. - Updating the ``Region`` from the caller region to ``NULL`` .
+        :param replay_policy: 
         :param subscription_role_arn: This property applies only to Amazon Kinesis Data Firehose delivery stream subscriptions. Specify the ARN of the IAM role that has the following: - Permission to write to the Amazon Kinesis Data Firehose delivery stream - Amazon SNS listed as a trusted entity Specifying a valid ARN for this attribute is required for Kinesis Data Firehose delivery stream subscriptions. For more information, see `Fanout to Amazon Kinesis Data Firehose delivery streams <https://docs.aws.amazon.com/sns/latest/dg/sns-firehose-as-subscriber.html>`_ in the *Amazon SNS Developer Guide.*
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-subscription.html
@@ -663,6 +727,7 @@ class CfnSubscriptionProps:
             # delivery_policy: Any
             # filter_policy: Any
             # redrive_policy: Any
+            # replay_policy: Any
             
             cfn_subscription_props = sns.CfnSubscriptionProps(
                 protocol="protocol",
@@ -676,6 +741,7 @@ class CfnSubscriptionProps:
                 raw_message_delivery=False,
                 redrive_policy=redrive_policy,
                 region="region",
+                replay_policy=replay_policy,
                 subscription_role_arn="subscriptionRoleArn"
             )
         '''
@@ -690,6 +756,7 @@ class CfnSubscriptionProps:
             check_type(argname="argument raw_message_delivery", value=raw_message_delivery, expected_type=type_hints["raw_message_delivery"])
             check_type(argname="argument redrive_policy", value=redrive_policy, expected_type=type_hints["redrive_policy"])
             check_type(argname="argument region", value=region, expected_type=type_hints["region"])
+            check_type(argname="argument replay_policy", value=replay_policy, expected_type=type_hints["replay_policy"])
             check_type(argname="argument subscription_role_arn", value=subscription_role_arn, expected_type=type_hints["subscription_role_arn"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "protocol": protocol,
@@ -709,6 +776,8 @@ class CfnSubscriptionProps:
             self._values["redrive_policy"] = redrive_policy
         if region is not None:
             self._values["region"] = region
+        if replay_policy is not None:
+            self._values["replay_policy"] = replay_policy
         if subscription_role_arn is not None:
             self._values["subscription_role_arn"] = subscription_role_arn
 
@@ -821,6 +890,14 @@ class CfnSubscriptionProps:
         result = self._values.get("region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def replay_policy(self) -> typing.Any:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-subscription.html#cfn-sns-subscription-replaypolicy
+        '''
+        result = self._values.get("replay_policy")
+        return typing.cast(typing.Any, result)
+
     @builtins.property
     def subscription_role_arn(self) -> typing.Optional[builtins.str]:
         '''This property applies only to Amazon Kinesis Data Firehose delivery stream subscriptions.
@@ -927,7 +1004,7 @@ class CfnTopic(
         :param archive_policy: The archive policy determines the number of days Amazon SNS retains messages. You can set a retention period from 1 to 365 days.
         :param content_based_deduplication: Enables content-based deduplication for FIFO topics. - By default, ``ContentBasedDeduplication`` is set to ``false`` . If you create a FIFO topic and this attribute is ``false`` , you must specify a value for the ``MessageDeduplicationId`` parameter for the `Publish <https://docs.aws.amazon.com/sns/latest/api/API_Publish.html>`_ action. - When you set ``ContentBasedDeduplication`` to ``true`` , Amazon SNS uses a SHA-256 hash to generate the ``MessageDeduplicationId`` using the body of the message (but not the attributes of the message). (Optional) To override the generated value, you can specify a value for the the ``MessageDeduplicationId`` parameter for the ``Publish`` action.
         :param data_protection_policy: The body of the policy document you want to use for this topic. You can only add one policy per topic. The policy must be in JSON string format. Length Constraints: Maximum length of 30,720.
-        :param delivery_status_logging: Delivery status logging configuration for supported protocols for an Amazon SNS topic.
+        :param delivery_status_logging: The ``DeliveryStatusLogging`` configuration enables you to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:. - HTTP - Amazon Kinesis Data Firehose - AWS Lambda - Platform application endpoint - Amazon Simple Queue Service Once configured, log entries are sent to Amazon CloudWatch Logs.
         :param display_name: The display name to use for an Amazon SNS topic with SMS subscriptions. The display name must be maximum 100 characters long, including hyphens (-), underscores (_), spaces, and tabs.
         :param fifo_topic: Set to true to create a FIFO topic.
         :param kms_master_key_id: The ID of an AWS managed customer master key (CMK) for Amazon SNS or a custom CMK. For more information, see `Key terms <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html#sse-key-terms>`_ . For more examples, see ``[KeyId](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters)`` in the *AWS Key Management Service API Reference* . This property applies only to `server-side-encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html>`_ .
@@ -1066,7 +1143,7 @@ class CfnTopic(
     def delivery_status_logging(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnTopic.LoggingConfigProperty"]]]]:
-        '''Delivery status logging configuration for supported protocols for an Amazon SNS topic.'''
+        '''The ``DeliveryStatusLogging`` configuration enables you to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnTopic.LoggingConfigProperty"]]]], jsii.get(self, "deliveryStatusLogging"))
 
     @delivery_status_logging.setter
@@ -1212,11 +1289,12 @@ class CfnTopic(
             success_feedback_role_arn: typing.Optional[builtins.str] = None,
             success_feedback_sample_rate: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''
-            :param protocol: Indicates one of the supported protocols for the SNS topic.
+            '''The ``LoggingConfig`` property type specifies the ``Delivery`` status logging configuration for an ```AWS::SNS::Topic`` <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topic.html>`_ .
+
+            :param protocol: Indicates one of the supported protocols for the Amazon SNS topic. .. epigraph:: At least one of the other three ``LoggingConfig`` properties is recommend along with ``Protocol`` .
             :param failure_feedback_role_arn: The IAM role ARN to be used when logging failed message deliveries in Amazon CloudWatch.
             :param success_feedback_role_arn: The IAM role ARN to be used when logging successful message deliveries in Amazon CloudWatch.
-            :param success_feedback_sample_rate: The percentage of successful message deliveries to be logged in Amazon CloudWatch. Valid percentage values range from 0 to 100
+            :param success_feedback_sample_rate: The percentage of successful message deliveries to be logged in Amazon CloudWatch. Valid percentage values range from 0 to 100.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sns-topic-loggingconfig.html
             :exampleMetadata: fixture=_generated
@@ -1254,7 +1332,11 @@ class CfnTopic(
 
         @builtins.property
         def protocol(self) -> builtins.str:
-            '''Indicates one of the supported protocols for the SNS topic.
+            '''Indicates one of the supported protocols for the Amazon SNS topic.
+
+            .. epigraph::
+
+               At least one of the other three ``LoggingConfig`` properties is recommend along with ``Protocol`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sns-topic-loggingconfig.html#cfn-sns-topic-loggingconfig-protocol
             '''
@@ -1284,7 +1366,7 @@ class CfnTopic(
         def success_feedback_sample_rate(self) -> typing.Optional[builtins.str]:
             '''The percentage of successful message deliveries to be logged in Amazon CloudWatch.
 
-            Valid percentage values range from 0 to 100
+            Valid percentage values range from 0 to 100.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sns-topic-loggingconfig.html#cfn-sns-topic-loggingconfig-successfeedbacksamplerate
             '''
@@ -1795,7 +1877,7 @@ class CfnTopicProps:
         :param archive_policy: The archive policy determines the number of days Amazon SNS retains messages. You can set a retention period from 1 to 365 days.
         :param content_based_deduplication: Enables content-based deduplication for FIFO topics. - By default, ``ContentBasedDeduplication`` is set to ``false`` . If you create a FIFO topic and this attribute is ``false`` , you must specify a value for the ``MessageDeduplicationId`` parameter for the `Publish <https://docs.aws.amazon.com/sns/latest/api/API_Publish.html>`_ action. - When you set ``ContentBasedDeduplication`` to ``true`` , Amazon SNS uses a SHA-256 hash to generate the ``MessageDeduplicationId`` using the body of the message (but not the attributes of the message). (Optional) To override the generated value, you can specify a value for the the ``MessageDeduplicationId`` parameter for the ``Publish`` action.
         :param data_protection_policy: The body of the policy document you want to use for this topic. You can only add one policy per topic. The policy must be in JSON string format. Length Constraints: Maximum length of 30,720.
-        :param delivery_status_logging: Delivery status logging configuration for supported protocols for an Amazon SNS topic.
+        :param delivery_status_logging: The ``DeliveryStatusLogging`` configuration enables you to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:. - HTTP - Amazon Kinesis Data Firehose - AWS Lambda - Platform application endpoint - Amazon Simple Queue Service Once configured, log entries are sent to Amazon CloudWatch Logs.
         :param display_name: The display name to use for an Amazon SNS topic with SMS subscriptions. The display name must be maximum 100 characters long, including hyphens (-), underscores (_), spaces, and tabs.
         :param fifo_topic: Set to true to create a FIFO topic.
         :param kms_master_key_id: The ID of an AWS managed customer master key (CMK) for Amazon SNS or a custom CMK. For more information, see `Key terms <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html#sse-key-terms>`_ . For more examples, see ``[KeyId](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters)`` in the *AWS Key Management Service API Reference* . This property applies only to `server-side-encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html>`_ .
@@ -1931,7 +2013,15 @@ class CfnTopicProps:
     def delivery_status_logging(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnTopic.LoggingConfigProperty]]]]:
-        '''Delivery status logging configuration for supported protocols for an Amazon SNS topic.
+        '''The ``DeliveryStatusLogging`` configuration enables you to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:.
+
+        - HTTP
+        - Amazon Kinesis Data Firehose
+        - AWS Lambda
+        - Platform application endpoint
+        - Amazon Simple Queue Service
+
+        Once configured, log entries are sent to Amazon CloudWatch Logs.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topic.html#cfn-sns-topic-deliverystatuslogging
         '''
@@ -3020,6 +3110,146 @@ class _ITopicSubscriptionProxy:
 typing.cast(typing.Any, ITopicSubscription).__jsii_proxy_class__ = lambda : _ITopicSubscriptionProxy
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_sns.LoggingConfig",
+    jsii_struct_bases=[],
+    name_mapping={
+        "protocol": "protocol",
+        "failure_feedback_role": "failureFeedbackRole",
+        "success_feedback_role": "successFeedbackRole",
+        "success_feedback_sample_rate": "successFeedbackSampleRate",
+    },
+)
+class LoggingConfig:
+    def __init__(
+        self,
+        *,
+        protocol: "LoggingProtocol",
+        failure_feedback_role: typing.Optional[_IRole_235f5d8e] = None,
+        success_feedback_role: typing.Optional[_IRole_235f5d8e] = None,
+        success_feedback_sample_rate: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''A logging configuration for delivery status of messages sent from SNS topic to subscribed endpoints.
+
+        For more information, see https://docs.aws.amazon.com/sns/latest/dg/sns-topic-attributes.html.
+
+        :param protocol: Indicates one of the supported protocols for the SNS topic.
+        :param failure_feedback_role: The IAM role to be used when logging failed message deliveries in Amazon CloudWatch. Default: None
+        :param success_feedback_role: The IAM role to be used when logging successful message deliveries in Amazon CloudWatch. Default: None
+        :param success_feedback_sample_rate: The percentage of successful message deliveries to be logged in Amazon CloudWatch. Valid values are integer between 0-100 Default: None
+
+        :exampleMetadata: infused
+
+        Example::
+
+            # role: iam.Role
+            
+            topic = sns.Topic(self, "MyTopic")
+            
+            topic.add_logging_config(
+                protocol=sns.LoggingProtocol.SQS,
+                failure_feedback_role=role,
+                success_feedback_role=role,
+                success_feedback_sample_rate=50
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f9eb41e45f77d56f958dda8c78b2c068faf3edbd60bc3b2a62a19317f5490622)
+            check_type(argname="argument protocol", value=protocol, expected_type=type_hints["protocol"])
+            check_type(argname="argument failure_feedback_role", value=failure_feedback_role, expected_type=type_hints["failure_feedback_role"])
+            check_type(argname="argument success_feedback_role", value=success_feedback_role, expected_type=type_hints["success_feedback_role"])
+            check_type(argname="argument success_feedback_sample_rate", value=success_feedback_sample_rate, expected_type=type_hints["success_feedback_sample_rate"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "protocol": protocol,
+        }
+        if failure_feedback_role is not None:
+            self._values["failure_feedback_role"] = failure_feedback_role
+        if success_feedback_role is not None:
+            self._values["success_feedback_role"] = success_feedback_role
+        if success_feedback_sample_rate is not None:
+            self._values["success_feedback_sample_rate"] = success_feedback_sample_rate
+
+    @builtins.property
+    def protocol(self) -> "LoggingProtocol":
+        '''Indicates one of the supported protocols for the SNS topic.'''
+        result = self._values.get("protocol")
+        assert result is not None, "Required property 'protocol' is missing"
+        return typing.cast("LoggingProtocol", result)
+
+    @builtins.property
+    def failure_feedback_role(self) -> typing.Optional[_IRole_235f5d8e]:
+        '''The IAM role to be used when logging failed message deliveries in Amazon CloudWatch.
+
+        :default: None
+        '''
+        result = self._values.get("failure_feedback_role")
+        return typing.cast(typing.Optional[_IRole_235f5d8e], result)
+
+    @builtins.property
+    def success_feedback_role(self) -> typing.Optional[_IRole_235f5d8e]:
+        '''The IAM role to be used when logging successful message deliveries in Amazon CloudWatch.
+
+        :default: None
+        '''
+        result = self._values.get("success_feedback_role")
+        return typing.cast(typing.Optional[_IRole_235f5d8e], result)
+
+    @builtins.property
+    def success_feedback_sample_rate(self) -> typing.Optional[jsii.Number]:
+        '''The percentage of successful message deliveries to be logged in Amazon CloudWatch.
+
+        Valid values are integer between 0-100
+
+        :default: None
+        '''
+        result = self._values.get("success_feedback_sample_rate")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "LoggingConfig(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.enum(jsii_type="aws-cdk-lib.aws_sns.LoggingProtocol")
+class LoggingProtocol(enum.Enum):
+    '''The type of supported protocol for delivery status logging.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # role: iam.Role
+        
+        topic = sns.Topic(self, "MyTopic",
+            logging_configs=[sns.LoggingConfig(
+                protocol=sns.LoggingProtocol.SQS,
+                failure_feedback_role=role,
+                success_feedback_role=role,
+                success_feedback_sample_rate=50
+            )
+            ]
+        )
+    '''
+
+    HTTP = "HTTP"
+    '''HTTP.'''
+    SQS = "SQS"
+    '''Amazon Simple Queue Service.'''
+    LAMBDA = "LAMBDA"
+    '''AWS Lambda.'''
+    FIREHOSE = "FIREHOSE"
+    '''Amazon Kinesis Data Firehose.'''
+    APPLICATION = "APPLICATION"
+    '''Platform application endpoint.'''
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_sns.NumericConditions",
     jsii_struct_bases=[],
@@ -4688,6 +4918,7 @@ class TopicPolicyProps:
         "content_based_deduplication": "contentBasedDeduplication",
         "display_name": "displayName",
         "fifo": "fifo",
+        "logging_configs": "loggingConfigs",
         "master_key": "masterKey",
         "topic_name": "topicName",
     },
@@ -4699,6 +4930,7 @@ class TopicProps:
         content_based_deduplication: typing.Optional[builtins.bool] = None,
         display_name: typing.Optional[builtins.str] = None,
         fifo: typing.Optional[builtins.bool] = None,
+        logging_configs: typing.Optional[typing.Sequence[typing.Union[LoggingConfig, typing.Dict[builtins.str, typing.Any]]]] = None,
         master_key: typing.Optional[_IKey_5f11635f] = None,
         topic_name: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -4707,6 +4939,7 @@ class TopicProps:
         :param content_based_deduplication: Enables content-based deduplication for FIFO topics. Default: None
         :param display_name: A developer-defined string that can be used to identify this SNS topic. Default: None
         :param fifo: Set to true to create a FIFO topic. Default: None
+        :param logging_configs: The list of delivery status logging configurations for the topic. For more information, see https://docs.aws.amazon.com/sns/latest/dg/sns-topic-attributes.html. Default: None
         :param master_key: A KMS Key, either managed by this CDK app, or imported. Default: None
         :param topic_name: A name for the topic. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the topic name. For more information, see Name Type. Default: Generated name
 
@@ -4715,7 +4948,9 @@ class TopicProps:
         Example::
 
             topic = sns.Topic(self, "Topic",
-                display_name="Customer subscription topic"
+                content_based_deduplication=True,
+                display_name="Customer subscription topic",
+                fifo=True
             )
         '''
         if __debug__:
@@ -4723,6 +4958,7 @@ class TopicProps:
             check_type(argname="argument content_based_deduplication", value=content_based_deduplication, expected_type=type_hints["content_based_deduplication"])
             check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
             check_type(argname="argument fifo", value=fifo, expected_type=type_hints["fifo"])
+            check_type(argname="argument logging_configs", value=logging_configs, expected_type=type_hints["logging_configs"])
             check_type(argname="argument master_key", value=master_key, expected_type=type_hints["master_key"])
             check_type(argname="argument topic_name", value=topic_name, expected_type=type_hints["topic_name"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -4732,6 +4968,8 @@ class TopicProps:
             self._values["display_name"] = display_name
         if fifo is not None:
             self._values["fifo"] = fifo
+        if logging_configs is not None:
+            self._values["logging_configs"] = logging_configs
         if master_key is not None:
             self._values["master_key"] = master_key
         if topic_name is not None:
@@ -4764,6 +5002,17 @@ class TopicProps:
         result = self._values.get("fifo")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def logging_configs(self) -> typing.Optional[typing.List[LoggingConfig]]:
+        '''The list of delivery status logging configurations for the topic.
+
+        For more information, see https://docs.aws.amazon.com/sns/latest/dg/sns-topic-attributes.html.
+
+        :default: None
+        '''
+        result = self._values.get("logging_configs")
+        return typing.cast(typing.Optional[typing.List[LoggingConfig]], result)
+
     @builtins.property
     def master_key(self) -> typing.Optional[_IKey_5f11635f]:
         '''A KMS Key, either managed by this CDK app, or imported.
@@ -5130,6 +5379,7 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
         content_based_deduplication: typing.Optional[builtins.bool] = None,
         display_name: typing.Optional[builtins.str] = None,
         fifo: typing.Optional[builtins.bool] = None,
+        logging_configs: typing.Optional[typing.Sequence[typing.Union[LoggingConfig, typing.Dict[builtins.str, typing.Any]]]] = None,
         master_key: typing.Optional[_IKey_5f11635f] = None,
         topic_name: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -5139,6 +5389,7 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
         :param content_based_deduplication: Enables content-based deduplication for FIFO topics. Default: None
         :param display_name: A developer-defined string that can be used to identify this SNS topic. Default: None
         :param fifo: Set to true to create a FIFO topic. Default: None
+        :param logging_configs: The list of delivery status logging configurations for the topic. For more information, see https://docs.aws.amazon.com/sns/latest/dg/sns-topic-attributes.html. Default: None
         :param master_key: A KMS Key, either managed by this CDK app, or imported. Default: None
         :param topic_name: A name for the topic. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the topic name. For more information, see Name Type. Default: Generated name
         '''
@@ -5150,6 +5401,7 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
             content_based_deduplication=content_based_deduplication,
             display_name=display_name,
             fifo=fifo,
+            logging_configs=logging_configs,
             master_key=master_key,
             topic_name=topic_name,
         )
@@ -5177,6 +5429,31 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
             check_type(argname="argument topic_arn", value=topic_arn, expected_type=type_hints["topic_arn"])
         return typing.cast(ITopic, jsii.sinvoke(cls, "fromTopicArn", [scope, id, topic_arn]))
 
+    @jsii.member(jsii_name="addLoggingConfig")
+    def add_logging_config(
+        self,
+        *,
+        protocol: LoggingProtocol,
+        failure_feedback_role: typing.Optional[_IRole_235f5d8e] = None,
+        success_feedback_role: typing.Optional[_IRole_235f5d8e] = None,
+        success_feedback_sample_rate: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Adds a delivery status logging configuration to the topic.
+
+        :param protocol: Indicates one of the supported protocols for the SNS topic.
+        :param failure_feedback_role: The IAM role to be used when logging failed message deliveries in Amazon CloudWatch. Default: None
+        :param success_feedback_role: The IAM role to be used when logging successful message deliveries in Amazon CloudWatch. Default: None
+        :param success_feedback_sample_rate: The percentage of successful message deliveries to be logged in Amazon CloudWatch. Valid values are integer between 0-100 Default: None
+        '''
+        config = LoggingConfig(
+            protocol=protocol,
+            failure_feedback_role=failure_feedback_role,
+            success_feedback_role=success_feedback_role,
+            success_feedback_sample_rate=success_feedback_sample_rate,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "addLoggingConfig", [config]))
+
     @builtins.property
     @jsii.member(jsii_name="autoCreatePolicy")
     def _auto_create_policy(self) -> builtins.bool:
@@ -5229,6 +5506,8 @@ __all__ = [
     "FilterOrPolicyType",
     "ITopic",
     "ITopicSubscription",
+    "LoggingConfig",
+    "LoggingProtocol",
     "NumericConditions",
     "Policy",
     "StringConditions",
@@ -5268,6 +5547,7 @@ def _typecheckingstub__3f3839647e73879ccdb1519ec2afccf78b6168046279d32c5390b3e25
     raw_message_delivery: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     redrive_policy: typing.Any = None,
     region: typing.Optional[builtins.str] = None,
+    replay_policy: typing.Any = None,
     subscription_role_arn: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -5339,6 +5619,12 @@ def _typecheckingstub__22cba62b05c6e7ecdf0102d83ee908ae549d02df6eb8dd5643c2c4207
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a75cc1735865b82732f90f42a2ba55634431d8bdec48d0a7752a79354f0c850d(
+    value: typing.Any,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__a71b3667b255126f8bc5b4059f4687fa922e718121515d78883ff30eb130ad2a(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -5356,6 +5642,7 @@ def _typecheckingstub__0227b0c451693656571029cae1cbec74d209cf9e946210145d282e8f0
     raw_message_delivery: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     redrive_policy: typing.Any = None,
     region: typing.Optional[builtins.str] = None,
+    replay_policy: typing.Any = None,
     subscription_role_arn: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -5636,6 +5923,16 @@ def _typecheckingstub__daf70c7f74db8d44ef157cdd3df3a90e91ac1b55f6be3c7ec557b2c6d
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f9eb41e45f77d56f958dda8c78b2c068faf3edbd60bc3b2a62a19317f5490622(
+    *,
+    protocol: LoggingProtocol,
+    failure_feedback_role: typing.Optional[_IRole_235f5d8e] = None,
+    success_feedback_role: typing.Optional[_IRole_235f5d8e] = None,
+    success_feedback_sample_rate: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__275a537da31cf603117422e452eeec6e2885ee8265e341324d589072c1703641(
     *,
     allowlist: typing.Optional[typing.Sequence[jsii.Number]] = None,
@@ -5790,6 +6087,7 @@ def _typecheckingstub__093960c1ab5457cc6797eb4a06c9e8fc74e41d4eaa9d0a17f00fa896d
     content_based_deduplication: typing.Optional[builtins.bool] = None,
     display_name: typing.Optional[builtins.str] = None,
     fifo: typing.Optional[builtins.bool] = None,
+    logging_configs: typing.Optional[typing.Sequence[typing.Union[LoggingConfig, typing.Dict[builtins.str, typing.Any]]]] = None,
     master_key: typing.Optional[_IKey_5f11635f] = None,
     topic_name: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -5826,6 +6124,7 @@ def _typecheckingstub__5bf7b7a1001dc600e81a7f1c5015e367dc471dcd727360f62a7eaf6eb
     content_based_deduplication: typing.Optional[builtins.bool] = None,
     display_name: typing.Optional[builtins.str] = None,
     fifo: typing.Optional[builtins.bool] = None,
+    logging_configs: typing.Optional[typing.Sequence[typing.Union[LoggingConfig, typing.Dict[builtins.str, typing.Any]]]] = None,
     master_key: typing.Optional[_IKey_5f11635f] = None,
     topic_name: typing.Optional[builtins.str] = None,
 ) -> None:

aws_cdk/aws_ssm/__init__.py

@@ -4646,7 +4646,7 @@ class CfnParameter(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param type: The type of parameter. .. epigraph:: AWS CloudFormation doesn't support creating a ``SecureString`` parameter type. *Allowed Values* : String | StringList
+        :param type: The type of parameter. .. epigraph:: Although ``SecureString`` is included in the list of valid values, AWS CloudFormation does *not* current support creating a ``SecureString`` parameter type.
         :param value: The parameter value. .. epigraph:: If type is ``StringList`` , the system returns a comma-separated string with no spaces between commas in the ``Value`` field.
         :param allowed_pattern: A regular expression used to validate the parameter value. For example, for String types with values restricted to numbers, you can specify the following: ``AllowedPattern=^\\d+$``
         :param data_type: The data type of the parameter, such as ``text`` or ``aws:ec2:image`` . The default is ``text`` .
@@ -4887,7 +4887,7 @@ class CfnParameterProps:
     ) -> None:
         '''Properties for defining a ``CfnParameter``.
 
-        :param type: The type of parameter. .. epigraph:: AWS CloudFormation doesn't support creating a ``SecureString`` parameter type. *Allowed Values* : String | StringList
+        :param type: The type of parameter. .. epigraph:: Although ``SecureString`` is included in the list of valid values, AWS CloudFormation does *not* current support creating a ``SecureString`` parameter type.
         :param value: The parameter value. .. epigraph:: If type is ``StringList`` , the system returns a comma-separated string with no spaces between commas in the ``Value`` field.
         :param allowed_pattern: A regular expression used to validate the parameter value. For example, for String types with values restricted to numbers, you can specify the following: ``AllowedPattern=^\\d+$``
         :param data_type: The data type of the parameter, such as ``text`` or ``aws:ec2:image`` . The default is ``text`` .
@@ -4958,9 +4958,7 @@ class CfnParameterProps:
 
         .. epigraph::
 
-           AWS CloudFormation doesn't support creating a ``SecureString`` parameter type.
-
-        *Allowed Values* : String | StringList
+           Although ``SecureString`` is included in the list of valid values, AWS CloudFormation does *not* current support creating a ``SecureString`` parameter type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-parameter.html#cfn-ssm-parameter-type
         '''