aws-cdk-lib 2.125.0__py3-none-any.whl → 2.127.0__py3-none-any.whl

aws_cdk/aws_cloudfront/__init__.py

@@ -5688,7 +5688,7 @@ class CfnDistribution(
             :param default_ttl: This field is deprecated. We recommend that you use the ``DefaultTTL`` field in a cache policy instead of this field. For more information, see `Creating cache policies <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy>`_ or `Using the managed cache policies <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html>`_ in the *Amazon CloudFront Developer Guide* . The default amount of time that you want objects to stay in CloudFront caches before CloudFront forwards another request to your origin to determine whether the object has been updated. The value that you specify applies only when your origin does not add HTTP headers such as ``Cache-Control max-age`` , ``Cache-Control s-maxage`` , and ``Expires`` to objects. For more information, see `Managing How Long Content Stays in an Edge Cache (Expiration) <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html>`_ in the *Amazon CloudFront Developer Guide* . Default: - 86400
             :param field_level_encryption_id: The value of ``ID`` for the field-level encryption configuration that you want CloudFront to use for encrypting specific fields of data for the default cache behavior. Default: - ""
             :param forwarded_values: This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field. For more information, see `Working with policies <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/working-with-policies.html>`_ in the *Amazon CloudFront Developer Guide* . If you want to include values in the cache key, use a cache policy. For more information, see `Creating cache policies <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy>`_ or `Using the managed cache policies <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html>`_ in the *Amazon CloudFront Developer Guide* . If you want to send values to the origin but not include them in the cache key, use an origin request policy. For more information, see `Creating origin request policies <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy>`_ or `Using the managed origin request policies <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-origin-request-policies.html>`_ in the *Amazon CloudFront Developer Guide* . A ``DefaultCacheBehavior`` must include either a ``CachePolicyId`` or ``ForwardedValues`` . We recommend that you use a ``CachePolicyId`` . A complex type that specifies how CloudFront handles query strings, cookies, and HTTP headers.
-            :param function_associations: A list of CloudFront functions that are associated with this cache behavior. CloudFront functions must be published to the ``LIVE`` stage to associate them with a cache behavior.
+            :param function_associations: A list of CloudFront functions that are associated with this cache behavior. Your functions must be published to the ``LIVE`` stage to associate them with a cache behavior.
             :param lambda_function_associations: A complex type that contains zero or more Lambda@Edge function associations for a cache behavior.
             :param max_ttl: This field is deprecated. We recommend that you use the ``MaxTTL`` field in a cache policy instead of this field. For more information, see `Creating cache policies <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy>`_ or `Using the managed cache policies <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html>`_ in the *Amazon CloudFront Developer Guide* . The maximum amount of time that you want objects to stay in CloudFront caches before CloudFront forwards another request to your origin to determine whether the object has been updated. The value that you specify applies only when your origin adds HTTP headers such as ``Cache-Control max-age`` , ``Cache-Control s-maxage`` , and ``Expires`` to objects. For more information, see `Managing How Long Content Stays in an Edge Cache (Expiration) <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html>`_ in the *Amazon CloudFront Developer Guide* . Default: - 31536000
             :param min_ttl: This field is deprecated. We recommend that you use the ``MinTTL`` field in a cache policy instead of this field. For more information, see `Creating cache policies <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy>`_ or `Using the managed cache policies <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html>`_ in the *Amazon CloudFront Developer Guide* . The minimum amount of time that you want objects to stay in CloudFront caches before CloudFront forwards another request to your origin to determine whether the object has been updated. For more information, see `Managing How Long Content Stays in an Edge Cache (Expiration) <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html>`_ in the *Amazon CloudFront Developer Guide* . You must specify ``0`` for ``MinTTL`` if you configure CloudFront to forward all headers to your origin (under ``Headers`` , if you specify ``1`` for ``Quantity`` and ``*`` for ``Name`` ). Default: - 0
@@ -5958,7 +5958,7 @@ class CfnDistribution(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnDistribution.FunctionAssociationProperty"]]]]:
             '''A list of CloudFront functions that are associated with this cache behavior.
 
-            CloudFront functions must be published to the ``LIVE`` stage to associate them with a cache behavior.
+            Your functions must be published to the ``LIVE`` stage to associate them with a cache behavior.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-defaultcachebehavior.html#cfn-cloudfront-distribution-defaultcachebehavior-functionassociations
             '''
@@ -9177,7 +9177,7 @@ class CfnFunction(
 
             :param comment: A comment to describe the function.
             :param runtime: The function's runtime environment version.
-            :param key_value_store_associations: The configuration for the Key Value Store associations.
+            :param key_value_store_associations: The configuration for the key value store associations.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-function-functionconfig.html
             :exampleMetadata: fixture=_generated
@@ -9234,7 +9234,7 @@ class CfnFunction(
         def key_value_store_associations(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnFunction.KeyValueStoreAssociationProperty"]]]]:
-            '''The configuration for the Key Value Store associations.
+            '''The configuration for the key value store associations.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-function-functionconfig.html#cfn-cloudfront-function-functionconfig-keyvaluestoreassociations
             '''
@@ -9316,9 +9316,9 @@ class CfnFunction(
     )
     class KeyValueStoreAssociationProperty:
         def __init__(self, *, key_value_store_arn: builtins.str) -> None:
-            '''The Key Value Store association.
+            '''The key value store association.
 
-            :param key_value_store_arn: The Amazon Resource Name (ARN) of the Key Value Store association.
+            :param key_value_store_arn: The Amazon Resource Name (ARN) of the key value store association.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-function-keyvaluestoreassociation.html
             :exampleMetadata: fixture=_generated
@@ -9342,7 +9342,7 @@ class CfnFunction(
 
         @builtins.property
         def key_value_store_arn(self) -> builtins.str:
-            '''The Amazon Resource Name (ARN) of the Key Value Store association.
+            '''The Amazon Resource Name (ARN) of the key value store association.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-function-keyvaluestoreassociation.html#cfn-cloudfront-function-keyvaluestoreassociation-keyvaluestorearn
             '''
@@ -9793,9 +9793,9 @@ class CfnKeyValueStore(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_cloudfront.CfnKeyValueStore",
 ):
-    '''The Key Value Store.
+    '''The key value store.
 
-    Use this to separate data from function code, allowing you to update data without having to publish a new version of a function. The Key Value Store holds keys and their corresponding values.
+    Use this to separate data from function code, allowing you to update data without having to publish a new version of a function. The key value store holds keys and their corresponding values.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-keyvaluestore.html
     :cloudformationResource: AWS::CloudFront::KeyValueStore
@@ -9831,9 +9831,9 @@ class CfnKeyValueStore(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param name: The name of the Key Value Store.
-        :param comment: A comment for the Key Value Store.
-        :param import_source: The import source for the Key Value Store.
+        :param name: The name of the key value store.
+        :param comment: A comment for the key value store.
+        :param import_source: The import source for the key value store.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__39a9c43a6e994ac270417da8b032b21384dbcc2f5eb680a69e9a420bb725c8a3)
@@ -9878,7 +9878,7 @@ class CfnKeyValueStore(
     @builtins.property
     @jsii.member(jsii_name="attrArn")
     def attr_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) of the Key Value Store.
+        '''The Amazon Resource Name (ARN) of the key value store.
 
         :cloudformationAttribute: Arn
         '''
@@ -9887,7 +9887,7 @@ class CfnKeyValueStore(
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:
-        '''The unique Id for the Key Value Store.
+        '''The unique Id for the key value store.
 
         :cloudformationAttribute: Id
         '''
@@ -9896,8 +9896,7 @@ class CfnKeyValueStore(
     @builtins.property
     @jsii.member(jsii_name="attrStatus")
     def attr_status(self) -> builtins.str:
-        '''The status of the Key Value Store.
-
+        '''
         :cloudformationAttribute: Status
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrStatus"))
@@ -9910,7 +9909,7 @@ class CfnKeyValueStore(
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
-        '''The name of the Key Value Store.'''
+        '''The name of the key value store.'''
         return typing.cast(builtins.str, jsii.get(self, "name"))
 
     @name.setter
@@ -9923,7 +9922,7 @@ class CfnKeyValueStore(
     @builtins.property
     @jsii.member(jsii_name="comment")
     def comment(self) -> typing.Optional[builtins.str]:
-        '''A comment for the Key Value Store.'''
+        '''A comment for the key value store.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "comment"))
 
     @comment.setter
@@ -9938,7 +9937,7 @@ class CfnKeyValueStore(
     def import_source(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnKeyValueStore.ImportSourceProperty"]]:
-        '''The import source for the Key Value Store.'''
+        '''The import source for the key value store.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnKeyValueStore.ImportSourceProperty"]], jsii.get(self, "importSource"))
 
     @import_source.setter
@@ -9963,10 +9962,10 @@ class CfnKeyValueStore(
             source_arn: builtins.str,
             source_type: builtins.str,
         ) -> None:
-            '''The import source for the Key Value Store.
+            '''The import source for the key value store.
 
-            :param source_arn: The Amazon Resource Name (ARN) of the import source for the Key Value Store.
-            :param source_type: The source type of the import source for the Key Value Store.
+            :param source_arn: The Amazon Resource Name (ARN) of the import source for the key value store.
+            :param source_type: The source type of the import source for the key value store.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-keyvaluestore-importsource.html
             :exampleMetadata: fixture=_generated
@@ -9993,7 +9992,7 @@ class CfnKeyValueStore(
 
         @builtins.property
         def source_arn(self) -> builtins.str:
-            '''The Amazon Resource Name (ARN) of the import source for the Key Value Store.
+            '''The Amazon Resource Name (ARN) of the import source for the key value store.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-keyvaluestore-importsource.html#cfn-cloudfront-keyvaluestore-importsource-sourcearn
             '''
@@ -10003,7 +10002,7 @@ class CfnKeyValueStore(
 
         @builtins.property
         def source_type(self) -> builtins.str:
-            '''The source type of the import source for the Key Value Store.
+            '''The source type of the import source for the key value store.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-keyvaluestore-importsource.html#cfn-cloudfront-keyvaluestore-importsource-sourcetype
             '''
@@ -10042,9 +10041,9 @@ class CfnKeyValueStoreProps:
     ) -> None:
         '''Properties for defining a ``CfnKeyValueStore``.
 
-        :param name: The name of the Key Value Store.
-        :param comment: A comment for the Key Value Store.
-        :param import_source: The import source for the Key Value Store.
+        :param name: The name of the key value store.
+        :param comment: A comment for the key value store.
+        :param import_source: The import source for the key value store.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-keyvaluestore.html
         :exampleMetadata: fixture=_generated
@@ -10081,7 +10080,7 @@ class CfnKeyValueStoreProps:
 
     @builtins.property
     def name(self) -> builtins.str:
-        '''The name of the Key Value Store.
+        '''The name of the key value store.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-keyvaluestore.html#cfn-cloudfront-keyvaluestore-name
         '''
@@ -10091,7 +10090,7 @@ class CfnKeyValueStoreProps:
 
     @builtins.property
     def comment(self) -> typing.Optional[builtins.str]:
-        '''A comment for the Key Value Store.
+        '''A comment for the key value store.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-keyvaluestore.html#cfn-cloudfront-keyvaluestore-comment
         '''
@@ -10102,7 +10101,7 @@ class CfnKeyValueStoreProps:
     def import_source(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnKeyValueStore.ImportSourceProperty]]:
-        '''The import source for the Key Value Store.
+        '''The import source for the key value store.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-keyvaluestore.html#cfn-cloudfront-keyvaluestore-importsource
         '''
@@ -10595,7 +10594,7 @@ class CfnOriginAccessControl(
 
             For more information about using a CloudFront origin access control, see `Restricting access to an AWS origin <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-origin.html>`_ in the *Amazon CloudFront Developer Guide* .
 
-            :param name: A name to identify the origin access control.
+            :param name: A name to identify the origin access control. You can specify up to 64 characters.
             :param origin_access_control_origin_type: The type of origin that this origin access control is for.
             :param signing_behavior: Specifies which requests CloudFront signs (adds authentication information to). Specify ``always`` for the most common use case. For more information, see `origin access control advanced settings <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html#oac-advanced-settings>`_ in the *Amazon CloudFront Developer Guide* . This field can have one of the following values: - ``always`` – CloudFront signs all origin requests, overwriting the ``Authorization`` header from the viewer request if one exists. - ``never`` – CloudFront doesn't sign any origin requests. This value turns off origin access control for all origins in all distributions that use this origin access control. - ``no-override`` – If the viewer request doesn't contain the ``Authorization`` header, then CloudFront signs the origin request. If the viewer request contains the ``Authorization`` header, then CloudFront doesn't sign the origin request and instead passes along the ``Authorization`` header from the viewer request. *WARNING: To pass along the ``Authorization`` header from the viewer request, you *must* add the ``Authorization`` header to a `cache policy <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html>`_ for all cache behaviors that use origins associated with this origin access control.*
             :param signing_protocol: The signing protocol of the origin access control, which determines how CloudFront signs (authenticates) requests. The only valid value is ``sigv4`` .
@@ -10640,6 +10639,8 @@ class CfnOriginAccessControl(
         def name(self) -> builtins.str:
             '''A name to identify the origin access control.
 
+            You can specify up to 64 characters.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-originaccesscontrol-originaccesscontrolconfig.html#cfn-cloudfront-originaccesscontrol-originaccesscontrolconfig-name
             '''
             result = self._values.get("name")
@@ -13585,7 +13586,7 @@ class CfnResponseHeadersPolicy(
             :param content_type_options: Determines whether CloudFront includes the ``X-Content-Type-Options`` HTTP response header with its value set to ``nosniff`` . For more information about the ``X-Content-Type-Options`` HTTP response header, see `X-Content-Type-Options <https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options>`_ in the MDN Web Docs.
             :param frame_options: Determines whether CloudFront includes the ``X-Frame-Options`` HTTP response header and the header's value. For more information about the ``X-Frame-Options`` HTTP response header, see `X-Frame-Options <https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options>`_ in the MDN Web Docs.
             :param referrer_policy: Determines whether CloudFront includes the ``Referrer-Policy`` HTTP response header and the header's value. For more information about the ``Referrer-Policy`` HTTP response header, see `Referrer-Policy <https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy>`_ in the MDN Web Docs.
-            :param strict_transport_security: Determines whether CloudFront includes the ``Strict-Transport-Security`` HTTP response header and the header's value. For more information about the ``Strict-Transport-Security`` HTTP response header, see `Strict-Transport-Security <https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security>`_ in the MDN Web Docs.
+            :param strict_transport_security: Determines whether CloudFront includes the ``Strict-Transport-Security`` HTTP response header and the header's value. For more information about the ``Strict-Transport-Security`` HTTP response header, see `Security headers <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/understanding-response-headers-policies.html#understanding-response-headers-policies-security>`_ in the *Amazon CloudFront Developer Guide* and `Strict-Transport-Security <https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security>`_ in the MDN Web Docs.
             :param xss_protection: Determines whether CloudFront includes the ``X-XSS-Protection`` HTTP response header and the header's value. For more information about the ``X-XSS-Protection`` HTTP response header, see `X-XSS-Protection <https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection>`_ in the MDN Web Docs.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-responseheaderspolicy-securityheadersconfig.html
@@ -13711,7 +13712,7 @@ class CfnResponseHeadersPolicy(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnResponseHeadersPolicy.StrictTransportSecurityProperty"]]:
             '''Determines whether CloudFront includes the ``Strict-Transport-Security`` HTTP response header and the header's value.
 
-            For more information about the ``Strict-Transport-Security`` HTTP response header, see `Strict-Transport-Security <https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security>`_ in the MDN Web Docs.
+            For more information about the ``Strict-Transport-Security`` HTTP response header, see `Security headers <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/understanding-response-headers-policies.html#understanding-response-headers-policies-security>`_ in the *Amazon CloudFront Developer Guide* and `Strict-Transport-Security <https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security>`_ in the MDN Web Docs.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-responseheaderspolicy-securityheadersconfig.html#cfn-cloudfront-responseheaderspolicy-securityheadersconfig-stricttransportsecurity
             '''
@@ -14307,10 +14308,7 @@ class CfnStreamingDistribution(
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:
-        '''The identifier for the RTMP distribution.
-
-        For example: ``EGTXBD79EXAMPLE`` .
-
+        '''
         :cloudformationAttribute: Id
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))

aws_cdk/aws_cloudfront/experimental/__init__.py

@@ -64,6 +64,7 @@ from ...aws_lambda import (
     InvokeMode as _InvokeMode_e7b50559,
     LambdaInsightsVersion as _LambdaInsightsVersion_9dfbfef9,
     LogRetentionRetryOptions as _LogRetentionRetryOptions_ad797a7a,
+    LoggingFormat as _LoggingFormat_30be8e01,
     ParamsAndSecretsLayerVersion as _ParamsAndSecretsLayerVersion_dce97f06,
     Permission as _Permission_9def3964,
     Runtime as _Runtime_b4eaa844,
@@ -151,6 +152,7 @@ class EdgeFunction(
         insights_version: typing.Optional[_LambdaInsightsVersion_9dfbfef9] = None,
         layers: typing.Optional[typing.Sequence[_ILayerVersion_5ac127c8]] = None,
         log_format: typing.Optional[builtins.str] = None,
+        logging_format: typing.Optional[_LoggingFormat_30be8e01] = None,
         log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
         log_retention: typing.Optional[_RetentionDays_070f99f0] = None,
         log_retention_retry_options: typing.Optional[typing.Union[_LogRetentionRetryOptions_ad797a7a, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -202,6 +204,7 @@ class EdgeFunction(
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
         :param log_format: Sets the logFormat for the function. Default: "Text"
+        :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
         :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
         :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
         :param log_retention_retry_options: When log retention is specified, a custom resource attempts to create the CloudWatch log group. These options control the retry policy when interacting with CloudWatch APIs. This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can. ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it. Default: - Default AWS SDK retry options.
@@ -255,6 +258,7 @@ class EdgeFunction(
             insights_version=insights_version,
             layers=layers,
             log_format=log_format,
+            logging_format=logging_format,
             log_group=log_group,
             log_retention=log_retention,
             log_retention_retry_options=log_retention_retry_options,
@@ -873,6 +877,7 @@ class EdgeFunction(
         "insights_version": "insightsVersion",
         "layers": "layers",
         "log_format": "logFormat",
+        "logging_format": "loggingFormat",
         "log_group": "logGroup",
         "log_retention": "logRetention",
         "log_retention_retry_options": "logRetentionRetryOptions",
@@ -926,6 +931,7 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
         insights_version: typing.Optional[_LambdaInsightsVersion_9dfbfef9] = None,
         layers: typing.Optional[typing.Sequence[_ILayerVersion_5ac127c8]] = None,
         log_format: typing.Optional[builtins.str] = None,
+        logging_format: typing.Optional[_LoggingFormat_30be8e01] = None,
         log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
         log_retention: typing.Optional[_RetentionDays_070f99f0] = None,
         log_retention_retry_options: typing.Optional[typing.Union[_LogRetentionRetryOptions_ad797a7a, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -976,6 +982,7 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
         :param log_format: Sets the logFormat for the function. Default: "Text"
+        :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
         :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
         :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
         :param log_retention_retry_options: When log retention is specified, a custom resource attempts to create the CloudWatch log group. These options control the retry policy when interacting with CloudWatch APIs. This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can. ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it. Default: - Default AWS SDK retry options.
@@ -1057,6 +1064,7 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
             check_type(argname="argument insights_version", value=insights_version, expected_type=type_hints["insights_version"])
             check_type(argname="argument layers", value=layers, expected_type=type_hints["layers"])
             check_type(argname="argument log_format", value=log_format, expected_type=type_hints["log_format"])
+            check_type(argname="argument logging_format", value=logging_format, expected_type=type_hints["logging_format"])
             check_type(argname="argument log_group", value=log_group, expected_type=type_hints["log_group"])
             check_type(argname="argument log_retention", value=log_retention, expected_type=type_hints["log_retention"])
             check_type(argname="argument log_retention_retry_options", value=log_retention_retry_options, expected_type=type_hints["log_retention_retry_options"])
@@ -1134,6 +1142,8 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
             self._values["layers"] = layers
         if log_format is not None:
             self._values["log_format"] = log_format
+        if logging_format is not None:
+            self._values["logging_format"] = logging_format
         if log_group is not None:
             self._values["log_group"] = log_group
         if log_retention is not None:
@@ -1445,6 +1455,15 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
         result = self._values.get("log_format")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def logging_format(self) -> typing.Optional[_LoggingFormat_30be8e01]:
+        '''Sets the loggingFormat for the function.
+
+        :default: LoggingFormat.TEXT
+        '''
+        result = self._values.get("logging_format")
+        return typing.cast(typing.Optional[_LoggingFormat_30be8e01], result)
+
     @builtins.property
     def log_group(self) -> typing.Optional[_ILogGroup_3c4fa718]:
         '''The log group the function sends logs to.
@@ -1792,6 +1811,7 @@ def _typecheckingstub__b2f96e5632f259adb036f7aba2bbc7c19fd9840c647d67a10a8135cb3
     insights_version: typing.Optional[_LambdaInsightsVersion_9dfbfef9] = None,
     layers: typing.Optional[typing.Sequence[_ILayerVersion_5ac127c8]] = None,
     log_format: typing.Optional[builtins.str] = None,
+    logging_format: typing.Optional[_LoggingFormat_30be8e01] = None,
     log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
     log_retention: typing.Optional[_RetentionDays_070f99f0] = None,
     log_retention_retry_options: typing.Optional[typing.Union[_LogRetentionRetryOptions_ad797a7a, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -1946,6 +1966,7 @@ def _typecheckingstub__709cdcb05c7a5fc7f7bcd1d72557097c39c5c534076a00b6b8db807bd
     insights_version: typing.Optional[_LambdaInsightsVersion_9dfbfef9] = None,
     layers: typing.Optional[typing.Sequence[_ILayerVersion_5ac127c8]] = None,
     log_format: typing.Optional[builtins.str] = None,
+    logging_format: typing.Optional[_LoggingFormat_30be8e01] = None,
     log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
     log_retention: typing.Optional[_RetentionDays_070f99f0] = None,
     log_retention_retry_options: typing.Optional[typing.Union[_LogRetentionRetryOptions_ad797a7a, typing.Dict[builtins.str, typing.Any]]] = None,

aws_cdk/aws_codebuild/__init__.py

@@ -4450,8 +4450,11 @@ class CfnProject(
     )
     class ProjectFleetProperty:
         def __init__(self, *, fleet_arn: typing.Optional[builtins.str] = None) -> None:
-            '''
-            :param fleet_arn: 
+            '''Information about the compute fleet of the build project.
+
+            For more information, see `Working with reserved capacity in AWS CodeBuild <https://docs.aws.amazon.com/codebuild/latest/userguide/fleets.html>`_ .
+
+            :param fleet_arn: Specifies the compute fleet ARN for the build project.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-projectfleet.html
             :exampleMetadata: fixture=_generated
@@ -4475,7 +4478,8 @@ class CfnProject(
 
         @builtins.property
         def fleet_arn(self) -> typing.Optional[builtins.str]:
-            '''
+            '''Specifies the compute fleet ARN for the build project.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-projectfleet.html#cfn-codebuild-project-projectfleet-fleetarn
             '''
             result = self._values.get("fleet_arn")
@@ -10181,6 +10185,24 @@ class LinuxArmLambdaBuildImage(
         '''The ``aws/codebuild/amazonlinux-aarch64-lambda-standard:ruby3.2`` build image.'''
         return typing.cast(IBuildImage, jsii.sget(cls, "AMAZON_LINUX_2_RUBY_3_2"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AMAZON_LINUX_2023_CORRETTO_21")
+    def AMAZON_LINUX_2023_CORRETTO_21(cls) -> IBuildImage:
+        '''The ``aws/codebuild/amazonlinux-aarch64-lambda-standard:corretto21`` build image.'''
+        return typing.cast(IBuildImage, jsii.sget(cls, "AMAZON_LINUX_2023_CORRETTO_21"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AMAZON_LINUX_2023_NODE_20")
+    def AMAZON_LINUX_2023_NODE_20(cls) -> IBuildImage:
+        '''The ``aws/codebuild/amazonlinux-aarch64-lambda-standard:nodejs20`` build image.'''
+        return typing.cast(IBuildImage, jsii.sget(cls, "AMAZON_LINUX_2023_NODE_20"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AMAZON_LINUX_2023_PYTHON_3_12")
+    def AMAZON_LINUX_2023_PYTHON_3_12(cls) -> IBuildImage:
+        '''The ``aws/codebuild/amazonlinux-aarch64-lambda-standard:python3.12`` build image.'''
+        return typing.cast(IBuildImage, jsii.sget(cls, "AMAZON_LINUX_2023_PYTHON_3_12"))
+
     @builtins.property
     @jsii.member(jsii_name="defaultComputeType")
     def default_compute_type(self) -> ComputeType:
@@ -10704,6 +10726,24 @@ class LinuxLambdaBuildImage(
         '''The ``aws/codebuild/amazonlinux-x86_64-lambda-standard:ruby3.2`` build image.'''
         return typing.cast(IBuildImage, jsii.sget(cls, "AMAZON_LINUX_2_RUBY_3_2"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AMAZON_LINUX_2023_CORRETTO_21")
+    def AMAZON_LINUX_2023_CORRETTO_21(cls) -> IBuildImage:
+        '''The ``aws/codebuild/amazonlinux-x86_64-lambda-standard:corretto21`` build image.'''
+        return typing.cast(IBuildImage, jsii.sget(cls, "AMAZON_LINUX_2023_CORRETTO_21"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AMAZON_LINUX_2023_NODE_20")
+    def AMAZON_LINUX_2023_NODE_20(cls) -> IBuildImage:
+        '''The ``aws/codebuild/amazonlinux-x86_64-lambda-standard:nodejs20`` build image.'''
+        return typing.cast(IBuildImage, jsii.sget(cls, "AMAZON_LINUX_2023_NODE_20"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AMAZON_LINUX_2023_PYTHON_3_12")
+    def AMAZON_LINUX_2023_PYTHON_3_12(cls) -> IBuildImage:
+        '''The ``aws/codebuild/amazonlinux-x86_64-lambda-standard:python3.12`` build image.'''
+        return typing.cast(IBuildImage, jsii.sget(cls, "AMAZON_LINUX_2023_PYTHON_3_12"))
+
     @builtins.property
     @jsii.member(jsii_name="defaultComputeType")
     def default_compute_type(self) -> ComputeType:

aws_cdk/aws_codecommit/__init__.py

@@ -3444,6 +3444,7 @@ class RepositoryProps:
             }
             
             codepipeline.Pipeline(stack, "Pipeline",
+                cross_account_keys=True,
                 stages=[source_stage, prod_stage
                 ]
             )

aws_cdk/aws_codepipeline/__init__.py

@@ -1243,6 +1243,7 @@ class ArtifactPath(
         }
         
         codepipeline.Pipeline(stack, "Pipeline",
+            cross_account_keys=True,
             stages=[source_stage, prod_stage
             ]
         )
@@ -6429,7 +6430,7 @@ class Pipeline(
         :param scope: -
         :param id: -
         :param artifact_bucket: The S3 bucket used by this Pipeline to store artifacts. Default: - A new S3 bucket will be created.
-        :param cross_account_keys: Create KMS keys for cross-account deployments. This controls whether the pipeline is enabled for cross-account deployments. By default cross-account deployments are enabled, but this feature requires that KMS Customer Master Keys are created which have a cost of $1/month. If you do not need cross-account deployments, you can set this to ``false`` to not create those keys and save on that cost (the artifact bucket will be encrypted with an AWS-managed key). However, cross-account deployments will no longer be possible. Default: true
+        :param cross_account_keys: Create KMS keys for cross-account deployments. This controls whether the pipeline is enabled for cross-account deployments. By default cross-account deployments are enabled, but this feature requires that KMS Customer Master Keys are created which have a cost of $1/month. If you do not need cross-account deployments, you can set this to ``false`` to not create those keys and save on that cost (the artifact bucket will be encrypted with an AWS-managed key). However, cross-account deployments will no longer be possible. Default: false - false if the feature flag ``CODEPIPELINE_CROSS_ACCOUNT_KEYS_DEFAULT_VALUE_TO_FALSE`` is true, true otherwise
         :param cross_region_replication_buckets: A map of region to S3 bucket name used for cross-region CodePipeline. For every Action that you specify targeting a different region than the Pipeline itself, if you don't provide an explicit Bucket for that region using this property, the construct will automatically create a Stack containing an S3 Bucket in that region. Default: - None.
         :param enable_key_rotation: Enable KMS key rotation for the generated KMS keys. By default KMS key rotation is disabled, but will add an additional $1/month for each year the key exists when enabled. Default: - false (key rotation is disabled)
         :param pipeline_name: Name of the pipeline. Default: - AWS CloudFormation generates an ID and uses that for the pipeline name.
@@ -7018,7 +7019,7 @@ class PipelineProps:
     ) -> None:
         '''
         :param artifact_bucket: The S3 bucket used by this Pipeline to store artifacts. Default: - A new S3 bucket will be created.
-        :param cross_account_keys: Create KMS keys for cross-account deployments. This controls whether the pipeline is enabled for cross-account deployments. By default cross-account deployments are enabled, but this feature requires that KMS Customer Master Keys are created which have a cost of $1/month. If you do not need cross-account deployments, you can set this to ``false`` to not create those keys and save on that cost (the artifact bucket will be encrypted with an AWS-managed key). However, cross-account deployments will no longer be possible. Default: true
+        :param cross_account_keys: Create KMS keys for cross-account deployments. This controls whether the pipeline is enabled for cross-account deployments. By default cross-account deployments are enabled, but this feature requires that KMS Customer Master Keys are created which have a cost of $1/month. If you do not need cross-account deployments, you can set this to ``false`` to not create those keys and save on that cost (the artifact bucket will be encrypted with an AWS-managed key). However, cross-account deployments will no longer be possible. Default: false - false if the feature flag ``CODEPIPELINE_CROSS_ACCOUNT_KEYS_DEFAULT_VALUE_TO_FALSE`` is true, true otherwise
         :param cross_region_replication_buckets: A map of region to S3 bucket name used for cross-region CodePipeline. For every Action that you specify targeting a different region than the Pipeline itself, if you don't provide an explicit Bucket for that region using this property, the construct will automatically create a Stack containing an S3 Bucket in that region. Default: - None.
         :param enable_key_rotation: Enable KMS key rotation for the generated KMS keys. By default KMS key rotation is disabled, but will add an additional $1/month for each year the key exists when enabled. Default: - false (key rotation is disabled)
         :param pipeline_name: Name of the pipeline. Default: - AWS CloudFormation generates an ID and uses that for the pipeline name.
@@ -7118,7 +7119,10 @@ class PipelineProps:
         encrypted with an AWS-managed key). However, cross-account deployments will
         no longer be possible.
 
-        :default: true
+        :default:
+
+        false - false if the feature flag ``CODEPIPELINE_CROSS_ACCOUNT_KEYS_DEFAULT_VALUE_TO_FALSE``
+        is true, true otherwise
         '''
         result = self._values.get("cross_account_keys")
         return typing.cast(typing.Optional[builtins.bool], result)

aws_cdk/aws_codepipeline_actions/__init__.py

@@ -663,6 +663,7 @@ prod_stage = {
 }
 
 codepipeline.Pipeline(stack, "Pipeline",
+    cross_account_keys=True,
     stages=[source_stage, prod_stage
     ]
 )
@@ -753,7 +754,9 @@ lambda_.Function(lambda_stack, "Lambda",
 # other resources that your Lambda needs, added to the lambdaStack...
 
 pipeline_stack = cdk.Stack(app, "PipelineStack")
-pipeline = codepipeline.Pipeline(pipeline_stack, "Pipeline")
+pipeline = codepipeline.Pipeline(pipeline_stack, "Pipeline",
+    cross_account_keys=True
+)
 
 # add the source code repository containing this code to your Pipeline,
 # and the source code of the Lambda Function, if they're separate
@@ -2196,6 +2199,7 @@ class CloudFormationCreateReplaceChangeSetAction(
         }
         
         codepipeline.Pipeline(stack, "Pipeline",
+            cross_account_keys=True,
             stages=[source_stage, prod_stage
             ]
         )
@@ -2421,6 +2425,7 @@ class CloudFormationCreateReplaceChangeSetActionProps(_CommonAwsActionProps_8b80
             }
             
             codepipeline.Pipeline(stack, "Pipeline",
+                cross_account_keys=True,
                 stages=[source_stage, prod_stage
                 ]
             )
@@ -4116,6 +4121,7 @@ class CloudFormationExecuteChangeSetAction(
         }
         
         codepipeline.Pipeline(stack, "Pipeline",
+            cross_account_keys=True,
             stages=[source_stage, prod_stage
             ]
         )
@@ -4280,6 +4286,7 @@ class CloudFormationExecuteChangeSetActionProps(_CommonAwsActionProps_8b809bb6):
             }
             
             codepipeline.Pipeline(stack, "Pipeline",
+                cross_account_keys=True,
                 stages=[source_stage, prod_stage
                 ]
             )
@@ -5010,6 +5017,7 @@ class CodeCommitSourceAction(
         }
         
         codepipeline.Pipeline(stack, "Pipeline",
+            cross_account_keys=True,
             stages=[source_stage, prod_stage
             ]
         )
@@ -5186,6 +5194,7 @@ class CodeCommitSourceActionProps(_CommonAwsActionProps_8b809bb6):
             }
             
             codepipeline.Pipeline(stack, "Pipeline",
+                cross_account_keys=True,
                 stages=[source_stage, prod_stage
                 ]
             )
@@ -5530,6 +5539,7 @@ class CodeCommitTrigger(enum.Enum):
         }
         
         codepipeline.Pipeline(stack, "Pipeline",
+            cross_account_keys=True,
             stages=[source_stage, prod_stage
             ]
         )