aws-cdk-lib 2.126.0__py3-none-any.whl → 2.127.0__py3-none-any.whl

aws_cdk/aws_redshiftserverless/__init__.py

@@ -69,10 +69,13 @@ class CfnNamespace(
         # The values are placeholders you should change.
         from aws_cdk import aws_redshiftserverless as redshiftserverless
         
+        # namespace_resource_policy: Any
+        
         cfn_namespace = redshiftserverless.CfnNamespace(self, "MyCfnNamespace",
             namespace_name="namespaceName",
         
             # the properties below are optional
+            admin_password_secret_kms_key_id="adminPasswordSecretKmsKeyId",
             admin_username="adminUsername",
             admin_user_password="adminUserPassword",
             db_name="dbName",
@@ -82,6 +85,9 @@ class CfnNamespace(
             iam_roles=["iamRoles"],
             kms_key_id="kmsKeyId",
             log_exports=["logExports"],
+            manage_admin_password=False,
+            namespace_resource_policy=namespace_resource_policy,
+            redshift_idc_application_arn="redshiftIdcApplicationArn",
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -95,6 +101,7 @@ class CfnNamespace(
         id: builtins.str,
         *,
         namespace_name: builtins.str,
+        admin_password_secret_kms_key_id: typing.Optional[builtins.str] = None,
         admin_username: typing.Optional[builtins.str] = None,
         admin_user_password: typing.Optional[builtins.str] = None,
         db_name: typing.Optional[builtins.str] = None,
@@ -104,12 +111,16 @@ class CfnNamespace(
         iam_roles: typing.Optional[typing.Sequence[builtins.str]] = None,
         kms_key_id: typing.Optional[builtins.str] = None,
         log_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
+        manage_admin_password: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        namespace_resource_policy: typing.Any = None,
+        redshift_idc_application_arn: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param namespace_name: The name of the namespace. Must be between 3-64 alphanumeric characters in lowercase, and it cannot be a reserved word. A list of reserved words can be found in `Reserved Words <https://docs.aws.amazon.com//redshift/latest/dg/r_pg_keywords.html>`_ in the Amazon Redshift Database Developer Guide.
+        :param admin_password_secret_kms_key_id: The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret. You can only use this parameter if manageAdminPassword is true.
         :param admin_username: The username of the administrator for the primary database created in the namespace.
         :param admin_user_password: The password of the administrator for the primary database created in the namespace.
         :param db_name: The name of the primary database created in the namespace.
@@ -119,6 +130,9 @@ class CfnNamespace(
         :param iam_roles: A list of IAM roles to associate with the namespace.
         :param kms_key_id: The ID of the AWS Key Management Service key used to encrypt your data.
         :param log_exports: The types of logs the namespace can export. Available export types are ``userlog`` , ``connectionlog`` , and ``useractivitylog`` .
+        :param manage_admin_password: If true, Amazon Redshift uses AWS Secrets Manager to manage the namespace's admin credentials. You can't use adminUserPassword if manageAdminPassword is true. If manageAdminPassword is false or not set, Amazon Redshift uses adminUserPassword for the admin user account's password.
+        :param namespace_resource_policy: The resource policy document that will be attached to the namespace.
+        :param redshift_idc_application_arn: The ARN for the Redshift application that integrates with IAM Identity Center.
         :param tags: The map of the key-value pairs used to tag the namespace.
         '''
         if __debug__:
@@ -127,6 +141,7 @@ class CfnNamespace(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnNamespaceProps(
             namespace_name=namespace_name,
+            admin_password_secret_kms_key_id=admin_password_secret_kms_key_id,
             admin_username=admin_username,
             admin_user_password=admin_user_password,
             db_name=db_name,
@@ -136,6 +151,9 @@ class CfnNamespace(
             iam_roles=iam_roles,
             kms_key_id=kms_key_id,
             log_exports=log_exports,
+            manage_admin_password=manage_admin_password,
+            namespace_resource_policy=namespace_resource_policy,
+            redshift_idc_application_arn=redshift_idc_application_arn,
             tags=tags,
         )
 
@@ -292,6 +310,22 @@ class CfnNamespace(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "namespaceName", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="adminPasswordSecretKmsKeyId")
+    def admin_password_secret_kms_key_id(self) -> typing.Optional[builtins.str]:
+        '''The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "adminPasswordSecretKmsKeyId"))
+
+    @admin_password_secret_kms_key_id.setter
+    def admin_password_secret_kms_key_id(
+        self,
+        value: typing.Optional[builtins.str],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3ad26fc5262e682a19af3392d1855021d70d396b74b82cb73cc9022919f97e63)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "adminPasswordSecretKmsKeyId", value)
+
     @builtins.property
     @jsii.member(jsii_name="adminUsername")
     def admin_username(self) -> typing.Optional[builtins.str]:
@@ -412,6 +446,53 @@ class CfnNamespace(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "logExports", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="manageAdminPassword")
+    def manage_admin_password(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''If true, Amazon Redshift uses AWS Secrets Manager to manage the namespace's admin credentials.'''
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "manageAdminPassword"))
+
+    @manage_admin_password.setter
+    def manage_admin_password(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__fee9e13028e66f79f12c6ed7063cc442fd9b8a5aa18d9a39ced55fd585d8f0d4)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "manageAdminPassword", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="namespaceResourcePolicy")
+    def namespace_resource_policy(self) -> typing.Any:
+        '''The resource policy document that will be attached to the namespace.'''
+        return typing.cast(typing.Any, jsii.get(self, "namespaceResourcePolicy"))
+
+    @namespace_resource_policy.setter
+    def namespace_resource_policy(self, value: typing.Any) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__43a289d7dca3804ca980a93314a4c0b2949e95448b9e91aef20d960cd1facef7)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "namespaceResourcePolicy", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="redshiftIdcApplicationArn")
+    def redshift_idc_application_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN for the Redshift application that integrates with IAM Identity Center.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "redshiftIdcApplicationArn"))
+
+    @redshift_idc_application_arn.setter
+    def redshift_idc_application_arn(
+        self,
+        value: typing.Optional[builtins.str],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__51136c4f6d62ea1ed8116bbb890860f45a983131873ecd0a7b407595037600cc)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "redshiftIdcApplicationArn", value)
+
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -429,6 +510,8 @@ class CfnNamespace(
         jsii_type="aws-cdk-lib.aws_redshiftserverless.CfnNamespace.NamespaceProperty",
         jsii_struct_bases=[],
         name_mapping={
+            "admin_password_secret_arn": "adminPasswordSecretArn",
+            "admin_password_secret_kms_key_id": "adminPasswordSecretKmsKeyId",
             "admin_username": "adminUsername",
             "creation_date": "creationDate",
             "db_name": "dbName",
@@ -446,6 +529,8 @@ class CfnNamespace(
         def __init__(
             self,
             *,
+            admin_password_secret_arn: typing.Optional[builtins.str] = None,
+            admin_password_secret_kms_key_id: typing.Optional[builtins.str] = None,
             admin_username: typing.Optional[builtins.str] = None,
             creation_date: typing.Optional[builtins.str] = None,
             db_name: typing.Optional[builtins.str] = None,
@@ -460,6 +545,8 @@ class CfnNamespace(
         ) -> None:
             '''A collection of database objects and users.
 
+            :param admin_password_secret_arn: 
+            :param admin_password_secret_kms_key_id: 
             :param admin_username: The username of the administrator for the first database created in the namespace.
             :param creation_date: The date of when the namespace was created.
             :param db_name: The name of the first database created in the namespace.
@@ -482,6 +569,8 @@ class CfnNamespace(
                 from aws_cdk import aws_redshiftserverless as redshiftserverless
                 
                 namespace_property = redshiftserverless.CfnNamespace.NamespaceProperty(
+                    admin_password_secret_arn="adminPasswordSecretArn",
+                    admin_password_secret_kms_key_id="adminPasswordSecretKmsKeyId",
                     admin_username="adminUsername",
                     creation_date="creationDate",
                     db_name="dbName",
@@ -497,6 +586,8 @@ class CfnNamespace(
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__6bcbea65acb7d2a3cef7455cfbb52c832d3da01cd5e02df21a06cdb2b4822e35)
+                check_type(argname="argument admin_password_secret_arn", value=admin_password_secret_arn, expected_type=type_hints["admin_password_secret_arn"])
+                check_type(argname="argument admin_password_secret_kms_key_id", value=admin_password_secret_kms_key_id, expected_type=type_hints["admin_password_secret_kms_key_id"])
                 check_type(argname="argument admin_username", value=admin_username, expected_type=type_hints["admin_username"])
                 check_type(argname="argument creation_date", value=creation_date, expected_type=type_hints["creation_date"])
                 check_type(argname="argument db_name", value=db_name, expected_type=type_hints["db_name"])
@@ -509,6 +600,10 @@ class CfnNamespace(
                 check_type(argname="argument namespace_name", value=namespace_name, expected_type=type_hints["namespace_name"])
                 check_type(argname="argument status", value=status, expected_type=type_hints["status"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if admin_password_secret_arn is not None:
+                self._values["admin_password_secret_arn"] = admin_password_secret_arn
+            if admin_password_secret_kms_key_id is not None:
+                self._values["admin_password_secret_kms_key_id"] = admin_password_secret_kms_key_id
             if admin_username is not None:
                 self._values["admin_username"] = admin_username
             if creation_date is not None:
@@ -532,6 +627,22 @@ class CfnNamespace(
             if status is not None:
                 self._values["status"] = status
 
+        @builtins.property
+        def admin_password_secret_arn(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-redshiftserverless-namespace-namespace.html#cfn-redshiftserverless-namespace-namespace-adminpasswordsecretarn
+            '''
+            result = self._values.get("admin_password_secret_arn")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def admin_password_secret_kms_key_id(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-redshiftserverless-namespace-namespace.html#cfn-redshiftserverless-namespace-namespace-adminpasswordsecretkmskeyid
+            '''
+            result = self._values.get("admin_password_secret_kms_key_id")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         @builtins.property
         def admin_username(self) -> typing.Optional[builtins.str]:
             '''The username of the administrator for the first database created in the namespace.
@@ -652,6 +763,7 @@ class CfnNamespace(
     jsii_struct_bases=[],
     name_mapping={
         "namespace_name": "namespaceName",
+        "admin_password_secret_kms_key_id": "adminPasswordSecretKmsKeyId",
         "admin_username": "adminUsername",
         "admin_user_password": "adminUserPassword",
         "db_name": "dbName",
@@ -661,6 +773,9 @@ class CfnNamespace(
         "iam_roles": "iamRoles",
         "kms_key_id": "kmsKeyId",
         "log_exports": "logExports",
+        "manage_admin_password": "manageAdminPassword",
+        "namespace_resource_policy": "namespaceResourcePolicy",
+        "redshift_idc_application_arn": "redshiftIdcApplicationArn",
         "tags": "tags",
     },
 )
@@ -669,6 +784,7 @@ class CfnNamespaceProps:
         self,
         *,
         namespace_name: builtins.str,
+        admin_password_secret_kms_key_id: typing.Optional[builtins.str] = None,
         admin_username: typing.Optional[builtins.str] = None,
         admin_user_password: typing.Optional[builtins.str] = None,
         db_name: typing.Optional[builtins.str] = None,
@@ -678,11 +794,15 @@ class CfnNamespaceProps:
         iam_roles: typing.Optional[typing.Sequence[builtins.str]] = None,
         kms_key_id: typing.Optional[builtins.str] = None,
         log_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
+        manage_admin_password: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        namespace_resource_policy: typing.Any = None,
+        redshift_idc_application_arn: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnNamespace``.
 
         :param namespace_name: The name of the namespace. Must be between 3-64 alphanumeric characters in lowercase, and it cannot be a reserved word. A list of reserved words can be found in `Reserved Words <https://docs.aws.amazon.com//redshift/latest/dg/r_pg_keywords.html>`_ in the Amazon Redshift Database Developer Guide.
+        :param admin_password_secret_kms_key_id: The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret. You can only use this parameter if manageAdminPassword is true.
         :param admin_username: The username of the administrator for the primary database created in the namespace.
         :param admin_user_password: The password of the administrator for the primary database created in the namespace.
         :param db_name: The name of the primary database created in the namespace.
@@ -692,6 +812,9 @@ class CfnNamespaceProps:
         :param iam_roles: A list of IAM roles to associate with the namespace.
         :param kms_key_id: The ID of the AWS Key Management Service key used to encrypt your data.
         :param log_exports: The types of logs the namespace can export. Available export types are ``userlog`` , ``connectionlog`` , and ``useractivitylog`` .
+        :param manage_admin_password: If true, Amazon Redshift uses AWS Secrets Manager to manage the namespace's admin credentials. You can't use adminUserPassword if manageAdminPassword is true. If manageAdminPassword is false or not set, Amazon Redshift uses adminUserPassword for the admin user account's password.
+        :param namespace_resource_policy: The resource policy document that will be attached to the namespace.
+        :param redshift_idc_application_arn: The ARN for the Redshift application that integrates with IAM Identity Center.
         :param tags: The map of the key-value pairs used to tag the namespace.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-namespace.html
@@ -703,10 +826,13 @@ class CfnNamespaceProps:
             # The values are placeholders you should change.
             from aws_cdk import aws_redshiftserverless as redshiftserverless
             
+            # namespace_resource_policy: Any
+            
             cfn_namespace_props = redshiftserverless.CfnNamespaceProps(
                 namespace_name="namespaceName",
             
                 # the properties below are optional
+                admin_password_secret_kms_key_id="adminPasswordSecretKmsKeyId",
                 admin_username="adminUsername",
                 admin_user_password="adminUserPassword",
                 db_name="dbName",
@@ -716,6 +842,9 @@ class CfnNamespaceProps:
                 iam_roles=["iamRoles"],
                 kms_key_id="kmsKeyId",
                 log_exports=["logExports"],
+                manage_admin_password=False,
+                namespace_resource_policy=namespace_resource_policy,
+                redshift_idc_application_arn="redshiftIdcApplicationArn",
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -725,6 +854,7 @@ class CfnNamespaceProps:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__5964a5da555f62a5d9615a6e07cd0d1128cdf904fd5aa3c5be9fd5e53dc30bd9)
             check_type(argname="argument namespace_name", value=namespace_name, expected_type=type_hints["namespace_name"])
+            check_type(argname="argument admin_password_secret_kms_key_id", value=admin_password_secret_kms_key_id, expected_type=type_hints["admin_password_secret_kms_key_id"])
             check_type(argname="argument admin_username", value=admin_username, expected_type=type_hints["admin_username"])
             check_type(argname="argument admin_user_password", value=admin_user_password, expected_type=type_hints["admin_user_password"])
             check_type(argname="argument db_name", value=db_name, expected_type=type_hints["db_name"])
@@ -734,10 +864,15 @@ class CfnNamespaceProps:
             check_type(argname="argument iam_roles", value=iam_roles, expected_type=type_hints["iam_roles"])
             check_type(argname="argument kms_key_id", value=kms_key_id, expected_type=type_hints["kms_key_id"])
             check_type(argname="argument log_exports", value=log_exports, expected_type=type_hints["log_exports"])
+            check_type(argname="argument manage_admin_password", value=manage_admin_password, expected_type=type_hints["manage_admin_password"])
+            check_type(argname="argument namespace_resource_policy", value=namespace_resource_policy, expected_type=type_hints["namespace_resource_policy"])
+            check_type(argname="argument redshift_idc_application_arn", value=redshift_idc_application_arn, expected_type=type_hints["redshift_idc_application_arn"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "namespace_name": namespace_name,
         }
+        if admin_password_secret_kms_key_id is not None:
+            self._values["admin_password_secret_kms_key_id"] = admin_password_secret_kms_key_id
         if admin_username is not None:
             self._values["admin_username"] = admin_username
         if admin_user_password is not None:
@@ -756,6 +891,12 @@ class CfnNamespaceProps:
             self._values["kms_key_id"] = kms_key_id
         if log_exports is not None:
             self._values["log_exports"] = log_exports
+        if manage_admin_password is not None:
+            self._values["manage_admin_password"] = manage_admin_password
+        if namespace_resource_policy is not None:
+            self._values["namespace_resource_policy"] = namespace_resource_policy
+        if redshift_idc_application_arn is not None:
+            self._values["redshift_idc_application_arn"] = redshift_idc_application_arn
         if tags is not None:
             self._values["tags"] = tags
 
@@ -771,6 +912,17 @@ class CfnNamespaceProps:
         assert result is not None, "Required property 'namespace_name' is missing"
         return typing.cast(builtins.str, result)
 
+    @builtins.property
+    def admin_password_secret_kms_key_id(self) -> typing.Optional[builtins.str]:
+        '''The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret.
+
+        You can only use this parameter if manageAdminPassword is true.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-namespace.html#cfn-redshiftserverless-namespace-adminpasswordsecretkmskeyid
+        '''
+        result = self._values.get("admin_password_secret_kms_key_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def admin_username(self) -> typing.Optional[builtins.str]:
         '''The username of the administrator for the primary database created in the namespace.
@@ -854,6 +1006,37 @@ class CfnNamespaceProps:
         result = self._values.get("log_exports")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def manage_admin_password(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''If true, Amazon Redshift uses AWS Secrets Manager to manage the namespace's admin credentials.
+
+        You can't use adminUserPassword if manageAdminPassword is true. If manageAdminPassword is false or not set, Amazon Redshift uses adminUserPassword for the admin user account's password.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-namespace.html#cfn-redshiftserverless-namespace-manageadminpassword
+        '''
+        result = self._values.get("manage_admin_password")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+    @builtins.property
+    def namespace_resource_policy(self) -> typing.Any:
+        '''The resource policy document that will be attached to the namespace.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-namespace.html#cfn-redshiftserverless-namespace-namespaceresourcepolicy
+        '''
+        result = self._values.get("namespace_resource_policy")
+        return typing.cast(typing.Any, result)
+
+    @builtins.property
+    def redshift_idc_application_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN for the Redshift application that integrates with IAM Identity Center.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-namespace.html#cfn-redshiftserverless-namespace-redshiftidcapplicationarn
+        '''
+        result = self._values.get("redshift_idc_application_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''The map of the key-value pairs used to tag the namespace.
@@ -903,6 +1086,7 @@ class CfnWorkgroup(
                 parameter_value="parameterValue"
             )],
             enhanced_vpc_routing=False,
+            max_capacity=123,
             namespace_name="namespaceName",
             port=123,
             publicly_accessible=False,
@@ -924,6 +1108,7 @@ class CfnWorkgroup(
         base_capacity: typing.Optional[jsii.Number] = None,
         config_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWorkgroup.ConfigParameterProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         enhanced_vpc_routing: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        max_capacity: typing.Optional[jsii.Number] = None,
         namespace_name: typing.Optional[builtins.str] = None,
         port: typing.Optional[jsii.Number] = None,
         publicly_accessible: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
@@ -938,6 +1123,7 @@ class CfnWorkgroup(
         :param base_capacity: The base compute capacity of the workgroup in Redshift Processing Units (RPUs).
         :param config_parameters: A list of parameters to set for finer control over a database. Available options are ``datestyle`` , ``enable_user_activity_logging`` , ``query_group`` , ``search_path`` , ``max_query_execution_time`` , and ``require_ssl`` .
         :param enhanced_vpc_routing: The value that specifies whether to enable enhanced virtual private cloud (VPC) routing, which forces Amazon Redshift Serverless to route traffic through your VPC. Default: - false
+        :param max_capacity: The max compute capacity of the workgroup in Redshift Processing Units (RPUs).
         :param namespace_name: The namespace the workgroup is associated with.
         :param port: The custom port to use when connecting to a workgroup. Valid port ranges are 5431-5455 and 8191-8215. The default is 5439.
         :param publicly_accessible: A value that specifies whether the workgroup can be accessible from a public network. Default: - false
@@ -954,6 +1140,7 @@ class CfnWorkgroup(
             base_capacity=base_capacity,
             config_parameters=config_parameters,
             enhanced_vpc_routing=enhanced_vpc_routing,
+            max_capacity=max_capacity,
             namespace_name=namespace_name,
             port=port,
             publicly_accessible=publicly_accessible,
@@ -1067,6 +1254,14 @@ class CfnWorkgroup(
         '''
         return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrWorkgroupEnhancedVpcRouting"))
 
+    @builtins.property
+    @jsii.member(jsii_name="attrWorkgroupMaxCapacity")
+    def attr_workgroup_max_capacity(self) -> jsii.Number:
+        '''
+        :cloudformationAttribute: Workgroup.MaxCapacity
+        '''
+        return typing.cast(jsii.Number, jsii.get(self, "attrWorkgroupMaxCapacity"))
+
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupNamespaceName")
     def attr_workgroup_namespace_name(self) -> builtins.str:
@@ -1204,6 +1399,19 @@ class CfnWorkgroup(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "enhancedVpcRouting", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="maxCapacity")
+    def max_capacity(self) -> typing.Optional[jsii.Number]:
+        '''The max compute capacity of the workgroup in Redshift Processing Units (RPUs).'''
+        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "maxCapacity"))
+
+    @max_capacity.setter
+    def max_capacity(self, value: typing.Optional[jsii.Number]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4ceab2fa028856954a409378fab7e1382a9cf79f0bf83fa7f082c0d6996e02e9)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "maxCapacity", value)
+
     @builtins.property
     @jsii.member(jsii_name="namespaceName")
     def namespace_name(self) -> typing.Optional[builtins.str]:
@@ -1677,6 +1885,7 @@ class CfnWorkgroup(
             "creation_date": "creationDate",
             "endpoint": "endpoint",
             "enhanced_vpc_routing": "enhancedVpcRouting",
+            "max_capacity": "maxCapacity",
             "namespace_name": "namespaceName",
             "publicly_accessible": "publiclyAccessible",
             "security_group_ids": "securityGroupIds",
@@ -1696,6 +1905,7 @@ class CfnWorkgroup(
             creation_date: typing.Optional[builtins.str] = None,
             endpoint: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWorkgroup.EndpointProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             enhanced_vpc_routing: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+            max_capacity: typing.Optional[jsii.Number] = None,
             namespace_name: typing.Optional[builtins.str] = None,
             publicly_accessible: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -1712,6 +1922,7 @@ class CfnWorkgroup(
             :param creation_date: The creation date of the workgroup.
             :param endpoint: The endpoint that is created from the workgroup.
             :param enhanced_vpc_routing: The value that specifies whether to enable enhanced virtual private cloud (VPC) routing, which forces Amazon Redshift Serverless to route traffic through your VPC.
+            :param max_capacity: 
             :param namespace_name: The namespace the workgroup is associated with.
             :param publicly_accessible: A value that specifies whether the workgroup can be accessible from a public network.
             :param security_group_ids: An array of security group IDs to associate with the workgroup.
@@ -1752,6 +1963,7 @@ class CfnWorkgroup(
                         )]
                     ),
                     enhanced_vpc_routing=False,
+                    max_capacity=123,
                     namespace_name="namespaceName",
                     publicly_accessible=False,
                     security_group_ids=["securityGroupIds"],
@@ -1769,6 +1981,7 @@ class CfnWorkgroup(
                 check_type(argname="argument creation_date", value=creation_date, expected_type=type_hints["creation_date"])
                 check_type(argname="argument endpoint", value=endpoint, expected_type=type_hints["endpoint"])
                 check_type(argname="argument enhanced_vpc_routing", value=enhanced_vpc_routing, expected_type=type_hints["enhanced_vpc_routing"])
+                check_type(argname="argument max_capacity", value=max_capacity, expected_type=type_hints["max_capacity"])
                 check_type(argname="argument namespace_name", value=namespace_name, expected_type=type_hints["namespace_name"])
                 check_type(argname="argument publicly_accessible", value=publicly_accessible, expected_type=type_hints["publicly_accessible"])
                 check_type(argname="argument security_group_ids", value=security_group_ids, expected_type=type_hints["security_group_ids"])
@@ -1788,6 +2001,8 @@ class CfnWorkgroup(
                 self._values["endpoint"] = endpoint
             if enhanced_vpc_routing is not None:
                 self._values["enhanced_vpc_routing"] = enhanced_vpc_routing
+            if max_capacity is not None:
+                self._values["max_capacity"] = max_capacity
             if namespace_name is not None:
                 self._values["namespace_name"] = namespace_name
             if publicly_accessible is not None:
@@ -1858,6 +2073,14 @@ class CfnWorkgroup(
             result = self._values.get("enhanced_vpc_routing")
             return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
+        @builtins.property
+        def max_capacity(self) -> typing.Optional[jsii.Number]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-redshiftserverless-workgroup-workgroup.html#cfn-redshiftserverless-workgroup-workgroup-maxcapacity
+            '''
+            result = self._values.get("max_capacity")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
         @builtins.property
         def namespace_name(self) -> typing.Optional[builtins.str]:
             '''The namespace the workgroup is associated with.
@@ -1952,6 +2175,7 @@ class CfnWorkgroup(
         "base_capacity": "baseCapacity",
         "config_parameters": "configParameters",
         "enhanced_vpc_routing": "enhancedVpcRouting",
+        "max_capacity": "maxCapacity",
         "namespace_name": "namespaceName",
         "port": "port",
         "publicly_accessible": "publiclyAccessible",
@@ -1968,6 +2192,7 @@ class CfnWorkgroupProps:
         base_capacity: typing.Optional[jsii.Number] = None,
         config_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWorkgroup.ConfigParameterProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         enhanced_vpc_routing: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        max_capacity: typing.Optional[jsii.Number] = None,
         namespace_name: typing.Optional[builtins.str] = None,
         port: typing.Optional[jsii.Number] = None,
         publicly_accessible: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
@@ -1981,6 +2206,7 @@ class CfnWorkgroupProps:
         :param base_capacity: The base compute capacity of the workgroup in Redshift Processing Units (RPUs).
         :param config_parameters: A list of parameters to set for finer control over a database. Available options are ``datestyle`` , ``enable_user_activity_logging`` , ``query_group`` , ``search_path`` , ``max_query_execution_time`` , and ``require_ssl`` .
         :param enhanced_vpc_routing: The value that specifies whether to enable enhanced virtual private cloud (VPC) routing, which forces Amazon Redshift Serverless to route traffic through your VPC. Default: - false
+        :param max_capacity: The max compute capacity of the workgroup in Redshift Processing Units (RPUs).
         :param namespace_name: The namespace the workgroup is associated with.
         :param port: The custom port to use when connecting to a workgroup. Valid port ranges are 5431-5455 and 8191-8215. The default is 5439.
         :param publicly_accessible: A value that specifies whether the workgroup can be accessible from a public network. Default: - false
@@ -2007,6 +2233,7 @@ class CfnWorkgroupProps:
                     parameter_value="parameterValue"
                 )],
                 enhanced_vpc_routing=False,
+                max_capacity=123,
                 namespace_name="namespaceName",
                 port=123,
                 publicly_accessible=False,
@@ -2024,6 +2251,7 @@ class CfnWorkgroupProps:
             check_type(argname="argument base_capacity", value=base_capacity, expected_type=type_hints["base_capacity"])
             check_type(argname="argument config_parameters", value=config_parameters, expected_type=type_hints["config_parameters"])
             check_type(argname="argument enhanced_vpc_routing", value=enhanced_vpc_routing, expected_type=type_hints["enhanced_vpc_routing"])
+            check_type(argname="argument max_capacity", value=max_capacity, expected_type=type_hints["max_capacity"])
             check_type(argname="argument namespace_name", value=namespace_name, expected_type=type_hints["namespace_name"])
             check_type(argname="argument port", value=port, expected_type=type_hints["port"])
             check_type(argname="argument publicly_accessible", value=publicly_accessible, expected_type=type_hints["publicly_accessible"])
@@ -2039,6 +2267,8 @@ class CfnWorkgroupProps:
             self._values["config_parameters"] = config_parameters
         if enhanced_vpc_routing is not None:
             self._values["enhanced_vpc_routing"] = enhanced_vpc_routing
+        if max_capacity is not None:
+            self._values["max_capacity"] = max_capacity
         if namespace_name is not None:
             self._values["namespace_name"] = namespace_name
         if port is not None:
@@ -2097,6 +2327,15 @@ class CfnWorkgroupProps:
         result = self._values.get("enhanced_vpc_routing")
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
+    @builtins.property
+    def max_capacity(self) -> typing.Optional[jsii.Number]:
+        '''The max compute capacity of the workgroup in Redshift Processing Units (RPUs).
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-workgroup.html#cfn-redshiftserverless-workgroup-maxcapacity
+        '''
+        result = self._values.get("max_capacity")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
     @builtins.property
     def namespace_name(self) -> typing.Optional[builtins.str]:
         '''The namespace the workgroup is associated with.
@@ -2183,6 +2422,7 @@ def _typecheckingstub__e517382d9f55a518348d7299a7ce6c5be66bae2202f4223bf3c891a7d
     id: builtins.str,
     *,
     namespace_name: builtins.str,
+    admin_password_secret_kms_key_id: typing.Optional[builtins.str] = None,
     admin_username: typing.Optional[builtins.str] = None,
     admin_user_password: typing.Optional[builtins.str] = None,
     db_name: typing.Optional[builtins.str] = None,
@@ -2192,6 +2432,9 @@ def _typecheckingstub__e517382d9f55a518348d7299a7ce6c5be66bae2202f4223bf3c891a7d
     iam_roles: typing.Optional[typing.Sequence[builtins.str]] = None,
     kms_key_id: typing.Optional[builtins.str] = None,
     log_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
+    manage_admin_password: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    namespace_resource_policy: typing.Any = None,
+    redshift_idc_application_arn: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -2215,6 +2458,12 @@ def _typecheckingstub__2fe15d8ff16345a3e36d8c090d48eea89c8cd559ac4218facdfd95b67
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__3ad26fc5262e682a19af3392d1855021d70d396b74b82cb73cc9022919f97e63(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__6e95b6bb908e50903825c7cbfdb447ab3aceb27b3a93be8aa57fe8923f432493(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -2269,6 +2518,24 @@ def _typecheckingstub__1526e0cedff0515a6bb96570f366670e82fb4d0cc597e2d7a8b0a091f
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__fee9e13028e66f79f12c6ed7063cc442fd9b8a5aa18d9a39ced55fd585d8f0d4(
+    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__43a289d7dca3804ca980a93314a4c0b2949e95448b9e91aef20d960cd1facef7(
+    value: typing.Any,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__51136c4f6d62ea1ed8116bbb890860f45a983131873ecd0a7b407595037600cc(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__2e2da7bae4bc39426d05dc2f307e08d5246472ad626b032ef4c2ea7b7d1bd33f(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
@@ -2277,6 +2544,8 @@ def _typecheckingstub__2e2da7bae4bc39426d05dc2f307e08d5246472ad626b032ef4c2ea7b7
 
 def _typecheckingstub__6bcbea65acb7d2a3cef7455cfbb52c832d3da01cd5e02df21a06cdb2b4822e35(
     *,
+    admin_password_secret_arn: typing.Optional[builtins.str] = None,
+    admin_password_secret_kms_key_id: typing.Optional[builtins.str] = None,
     admin_username: typing.Optional[builtins.str] = None,
     creation_date: typing.Optional[builtins.str] = None,
     db_name: typing.Optional[builtins.str] = None,
@@ -2295,6 +2564,7 @@ def _typecheckingstub__6bcbea65acb7d2a3cef7455cfbb52c832d3da01cd5e02df21a06cdb2b
 def _typecheckingstub__5964a5da555f62a5d9615a6e07cd0d1128cdf904fd5aa3c5be9fd5e53dc30bd9(
     *,
     namespace_name: builtins.str,
+    admin_password_secret_kms_key_id: typing.Optional[builtins.str] = None,
     admin_username: typing.Optional[builtins.str] = None,
     admin_user_password: typing.Optional[builtins.str] = None,
     db_name: typing.Optional[builtins.str] = None,
@@ -2304,6 +2574,9 @@ def _typecheckingstub__5964a5da555f62a5d9615a6e07cd0d1128cdf904fd5aa3c5be9fd5e53
     iam_roles: typing.Optional[typing.Sequence[builtins.str]] = None,
     kms_key_id: typing.Optional[builtins.str] = None,
     log_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
+    manage_admin_password: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    namespace_resource_policy: typing.Any = None,
+    redshift_idc_application_arn: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -2317,6 +2590,7 @@ def _typecheckingstub__61a1b6ebbdacc577619f4e17ddabdaa553ffe5fe072b72e14ddf7d9c3
     base_capacity: typing.Optional[jsii.Number] = None,
     config_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWorkgroup.ConfigParameterProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     enhanced_vpc_routing: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    max_capacity: typing.Optional[jsii.Number] = None,
     namespace_name: typing.Optional[builtins.str] = None,
     port: typing.Optional[jsii.Number] = None,
     publicly_accessible: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
@@ -2363,6 +2637,12 @@ def _typecheckingstub__b06db2b227debd7cc917f51bf7c4c0bb700bca075b329af61a43f3752
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__4ceab2fa028856954a409378fab7e1382a9cf79f0bf83fa7f082c0d6996e02e9(
+    value: typing.Optional[jsii.Number],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__a009fb86999f55de110193d15ea127b35ea379a1d840ddd42a0406b02f3a997a(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -2442,6 +2722,7 @@ def _typecheckingstub__b7cad236eecd67272da075e88f17a1dbdae4ee5083553d6443dcc19b3
     creation_date: typing.Optional[builtins.str] = None,
     endpoint: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWorkgroup.EndpointProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     enhanced_vpc_routing: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    max_capacity: typing.Optional[jsii.Number] = None,
     namespace_name: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -2460,6 +2741,7 @@ def _typecheckingstub__1ee3941005026bdab05d38183c12cc7cf5ff218e6db3877161b60d823
     base_capacity: typing.Optional[jsii.Number] = None,
     config_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWorkgroup.ConfigParameterProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     enhanced_vpc_routing: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    max_capacity: typing.Optional[jsii.Number] = None,
     namespace_name: typing.Optional[builtins.str] = None,
     port: typing.Optional[jsii.Number] = None,
     publicly_accessible: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,