aws-cdk-lib 2.128.0__py3-none-any.whl → 2.130.0__py3-none-any.whl

aws_cdk/aws_redshiftserverless/__init__.py

@@ -120,7 +120,7 @@ class CfnNamespace(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param namespace_name: The name of the namespace. Must be between 3-64 alphanumeric characters in lowercase, and it cannot be a reserved word. A list of reserved words can be found in `Reserved Words <https://docs.aws.amazon.com//redshift/latest/dg/r_pg_keywords.html>`_ in the Amazon Redshift Database Developer Guide.
-        :param admin_password_secret_kms_key_id: The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret. You can only use this parameter if manageAdminPassword is true.
+        :param admin_password_secret_kms_key_id: The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret. You can only use this parameter if ``ManageAdminPassword`` is ``true`` .
         :param admin_username: The username of the administrator for the primary database created in the namespace.
         :param admin_user_password: The password of the administrator for the primary database created in the namespace.
         :param db_name: The name of the primary database created in the namespace.
@@ -130,8 +130,8 @@ class CfnNamespace(
         :param iam_roles: A list of IAM roles to associate with the namespace.
         :param kms_key_id: The ID of the AWS Key Management Service key used to encrypt your data.
         :param log_exports: The types of logs the namespace can export. Available export types are ``userlog`` , ``connectionlog`` , and ``useractivitylog`` .
-        :param manage_admin_password: If true, Amazon Redshift uses AWS Secrets Manager to manage the namespace's admin credentials. You can't use adminUserPassword if manageAdminPassword is true. If manageAdminPassword is false or not set, Amazon Redshift uses adminUserPassword for the admin user account's password.
-        :param namespace_resource_policy: The resource policy document that will be attached to the namespace.
+        :param manage_admin_password: If true, Amazon Redshift uses AWS Secrets Manager to manage the namespace's admin credentials. You can't use ``AdminUserPassword`` if ``ManageAdminPassword`` is true. If ``ManageAdminPassword`` is ``false`` or not set, Amazon Redshift uses ``AdminUserPassword`` for the admin user account's password.
+        :param namespace_resource_policy: The resource policy that will be attached to the namespace.
         :param redshift_idc_application_arn: The ARN for the Redshift application that integrates with IAM Identity Center.
         :param tags: The map of the key-value pairs used to tag the namespace.
         '''
@@ -192,8 +192,7 @@ class CfnNamespace(
     @builtins.property
     @jsii.member(jsii_name="attrNamespace")
     def attr_namespace(self) -> _IResolvable_da3f097b:
-        '''The collection of computing resources from which an endpoint is created.
-
+        '''
         :cloudformationAttribute: Namespace
         '''
         return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrNamespace"))
@@ -201,7 +200,8 @@ class CfnNamespace(
     @builtins.property
     @jsii.member(jsii_name="attrNamespaceAdminUsername")
     def attr_namespace_admin_username(self) -> builtins.str:
-        '''
+        '''The username of the administrator for the first database created in the namespace.
+
         :cloudformationAttribute: Namespace.AdminUsername
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrNamespaceAdminUsername"))
@@ -209,7 +209,8 @@ class CfnNamespace(
     @builtins.property
     @jsii.member(jsii_name="attrNamespaceCreationDate")
     def attr_namespace_creation_date(self) -> builtins.str:
-        '''
+        '''The date of when the namespace was created.
+
         :cloudformationAttribute: Namespace.CreationDate
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrNamespaceCreationDate"))
@@ -217,7 +218,8 @@ class CfnNamespace(
     @builtins.property
     @jsii.member(jsii_name="attrNamespaceDbName")
     def attr_namespace_db_name(self) -> builtins.str:
-        '''
+        '''The name of the first database created in the namespace.
+
         :cloudformationAttribute: Namespace.DbName
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrNamespaceDbName"))
@@ -225,7 +227,8 @@ class CfnNamespace(
     @builtins.property
     @jsii.member(jsii_name="attrNamespaceDefaultIamRoleArn")
     def attr_namespace_default_iam_role_arn(self) -> builtins.str:
-        '''
+        '''The Amazon Resource Name (ARN) of the IAM role to set as a default in the namespace.
+
         :cloudformationAttribute: Namespace.DefaultIamRoleArn
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrNamespaceDefaultIamRoleArn"))
@@ -241,7 +244,8 @@ class CfnNamespace(
     @builtins.property
     @jsii.member(jsii_name="attrNamespaceKmsKeyId")
     def attr_namespace_kms_key_id(self) -> builtins.str:
-        '''
+        '''The ID of the AWS Key Management Service key used to encrypt your data.
+
         :cloudformationAttribute: Namespace.KmsKeyId
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrNamespaceKmsKeyId"))
@@ -257,7 +261,8 @@ class CfnNamespace(
     @builtins.property
     @jsii.member(jsii_name="attrNamespaceNamespaceArn")
     def attr_namespace_namespace_arn(self) -> builtins.str:
-        '''
+        '''The Amazon Resource Name (ARN) associated with a namespace.
+
         :cloudformationAttribute: Namespace.NamespaceArn
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrNamespaceNamespaceArn"))
@@ -265,7 +270,8 @@ class CfnNamespace(
     @builtins.property
     @jsii.member(jsii_name="attrNamespaceNamespaceId")
     def attr_namespace_namespace_id(self) -> builtins.str:
-        '''
+        '''The unique identifier of a namespace.
+
         :cloudformationAttribute: Namespace.NamespaceId
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrNamespaceNamespaceId"))
@@ -273,7 +279,10 @@ class CfnNamespace(
     @builtins.property
     @jsii.member(jsii_name="attrNamespaceNamespaceName")
     def attr_namespace_namespace_name(self) -> builtins.str:
-        '''
+        '''The name of the namespace.
+
+        Must be between 3-64 alphanumeric characters in lowercase, and it cannot be a reserved word. A list of reserved words can be found in `Reserved Words <https://docs.aws.amazon.com//redshift/latest/dg/r_pg_keywords.html>`_ in the Amazon Redshift Database Developer Guide.
+
         :cloudformationAttribute: Namespace.NamespaceName
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrNamespaceNamespaceName"))
@@ -281,7 +290,8 @@ class CfnNamespace(
     @builtins.property
     @jsii.member(jsii_name="attrNamespaceStatus")
     def attr_namespace_status(self) -> builtins.str:
-        '''
+        '''The status of the namespace.
+
         :cloudformationAttribute: Namespace.Status
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrNamespaceStatus"))
@@ -467,7 +477,7 @@ class CfnNamespace(
     @builtins.property
     @jsii.member(jsii_name="namespaceResourcePolicy")
     def namespace_resource_policy(self) -> typing.Any:
-        '''The resource policy document that will be attached to the namespace.'''
+        '''The resource policy that will be attached to the namespace.'''
         return typing.cast(typing.Any, jsii.get(self, "namespaceResourcePolicy"))
 
     @namespace_resource_policy.setter
@@ -545,8 +555,8 @@ class CfnNamespace(
         ) -> None:
             '''A collection of database objects and users.
 
-            :param admin_password_secret_arn: 
-            :param admin_password_secret_kms_key_id: 
+            :param admin_password_secret_arn: The Amazon Resource Name (ARN) for the namespace's admin user credentials secret.
+            :param admin_password_secret_kms_key_id: The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret.
             :param admin_username: The username of the administrator for the first database created in the namespace.
             :param creation_date: The date of when the namespace was created.
             :param db_name: The name of the first database created in the namespace.
@@ -629,7 +639,8 @@ class CfnNamespace(
 
         @builtins.property
         def admin_password_secret_arn(self) -> typing.Optional[builtins.str]:
-            '''
+            '''The Amazon Resource Name (ARN) for the namespace's admin user credentials secret.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-redshiftserverless-namespace-namespace.html#cfn-redshiftserverless-namespace-namespace-adminpasswordsecretarn
             '''
             result = self._values.get("admin_password_secret_arn")
@@ -637,7 +648,8 @@ class CfnNamespace(
 
         @builtins.property
         def admin_password_secret_kms_key_id(self) -> typing.Optional[builtins.str]:
-            '''
+            '''The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-redshiftserverless-namespace-namespace.html#cfn-redshiftserverless-namespace-namespace-adminpasswordsecretkmskeyid
             '''
             result = self._values.get("admin_password_secret_kms_key_id")
@@ -802,7 +814,7 @@ class CfnNamespaceProps:
         '''Properties for defining a ``CfnNamespace``.
 
         :param namespace_name: The name of the namespace. Must be between 3-64 alphanumeric characters in lowercase, and it cannot be a reserved word. A list of reserved words can be found in `Reserved Words <https://docs.aws.amazon.com//redshift/latest/dg/r_pg_keywords.html>`_ in the Amazon Redshift Database Developer Guide.
-        :param admin_password_secret_kms_key_id: The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret. You can only use this parameter if manageAdminPassword is true.
+        :param admin_password_secret_kms_key_id: The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret. You can only use this parameter if ``ManageAdminPassword`` is ``true`` .
         :param admin_username: The username of the administrator for the primary database created in the namespace.
         :param admin_user_password: The password of the administrator for the primary database created in the namespace.
         :param db_name: The name of the primary database created in the namespace.
@@ -812,8 +824,8 @@ class CfnNamespaceProps:
         :param iam_roles: A list of IAM roles to associate with the namespace.
         :param kms_key_id: The ID of the AWS Key Management Service key used to encrypt your data.
         :param log_exports: The types of logs the namespace can export. Available export types are ``userlog`` , ``connectionlog`` , and ``useractivitylog`` .
-        :param manage_admin_password: If true, Amazon Redshift uses AWS Secrets Manager to manage the namespace's admin credentials. You can't use adminUserPassword if manageAdminPassword is true. If manageAdminPassword is false or not set, Amazon Redshift uses adminUserPassword for the admin user account's password.
-        :param namespace_resource_policy: The resource policy document that will be attached to the namespace.
+        :param manage_admin_password: If true, Amazon Redshift uses AWS Secrets Manager to manage the namespace's admin credentials. You can't use ``AdminUserPassword`` if ``ManageAdminPassword`` is true. If ``ManageAdminPassword`` is ``false`` or not set, Amazon Redshift uses ``AdminUserPassword`` for the admin user account's password.
+        :param namespace_resource_policy: The resource policy that will be attached to the namespace.
         :param redshift_idc_application_arn: The ARN for the Redshift application that integrates with IAM Identity Center.
         :param tags: The map of the key-value pairs used to tag the namespace.
 
@@ -916,7 +928,7 @@ class CfnNamespaceProps:
     def admin_password_secret_kms_key_id(self) -> typing.Optional[builtins.str]:
         '''The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret.
 
-        You can only use this parameter if manageAdminPassword is true.
+        You can only use this parameter if ``ManageAdminPassword`` is ``true`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-namespace.html#cfn-redshiftserverless-namespace-adminpasswordsecretkmskeyid
         '''
@@ -1012,7 +1024,7 @@ class CfnNamespaceProps:
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
         '''If true, Amazon Redshift uses AWS Secrets Manager to manage the namespace's admin credentials.
 
-        You can't use adminUserPassword if manageAdminPassword is true. If manageAdminPassword is false or not set, Amazon Redshift uses adminUserPassword for the admin user account's password.
+        You can't use ``AdminUserPassword`` if ``ManageAdminPassword`` is true. If ``ManageAdminPassword`` is ``false`` or not set, Amazon Redshift uses ``AdminUserPassword`` for the admin user account's password.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-namespace.html#cfn-redshiftserverless-namespace-manageadminpassword
         '''
@@ -1021,7 +1033,7 @@ class CfnNamespaceProps:
 
     @builtins.property
     def namespace_resource_policy(self) -> typing.Any:
-        '''The resource policy document that will be attached to the namespace.
+        '''The resource policy that will be attached to the namespace.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-namespace.html#cfn-redshiftserverless-namespace-namespaceresourcepolicy
         '''
@@ -1184,8 +1196,7 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroup")
     def attr_workgroup(self) -> _IResolvable_da3f097b:
-        '''Returns the ``Workgroup`` value.
-
+        '''
         :cloudformationAttribute: Workgroup
         '''
         return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrWorkgroup"))
@@ -1193,7 +1204,8 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupBaseCapacity")
     def attr_workgroup_base_capacity(self) -> jsii.Number:
-        '''
+        '''The base data warehouse capacity of the workgroup in Redshift Processing Units (RPUs).
+
         :cloudformationAttribute: Workgroup.BaseCapacity
         '''
         return typing.cast(jsii.Number, jsii.get(self, "attrWorkgroupBaseCapacity"))
@@ -1209,7 +1221,8 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupCreationDate")
     def attr_workgroup_creation_date(self) -> builtins.str:
-        '''
+        '''The creation date of the workgroup.
+
         :cloudformationAttribute: Workgroup.CreationDate
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrWorkgroupCreationDate"))
@@ -1225,7 +1238,8 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupEndpointAddress")
     def attr_workgroup_endpoint_address(self) -> builtins.str:
-        '''
+        '''The DNS address of the VPC endpoint.
+
         :cloudformationAttribute: Workgroup.Endpoint.Address
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrWorkgroupEndpointAddress"))
@@ -1233,7 +1247,10 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupEndpointPort")
     def attr_workgroup_endpoint_port(self) -> jsii.Number:
-        '''
+        '''The custom port to use when connecting to a workgroup.
+
+        Valid port ranges are 5431-5455 and 8191-8215. The default is 5439.
+
         :cloudformationAttribute: Workgroup.Endpoint.Port
         '''
         return typing.cast(jsii.Number, jsii.get(self, "attrWorkgroupEndpointPort"))
@@ -1249,7 +1266,8 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupEnhancedVpcRouting")
     def attr_workgroup_enhanced_vpc_routing(self) -> _IResolvable_da3f097b:
-        '''
+        '''The value that specifies whether to enable enhanced virtual private cloud (VPC) routing, which forces Amazon Redshift Serverless to route traffic through your VPC.
+
         :cloudformationAttribute: Workgroup.EnhancedVpcRouting
         '''
         return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrWorkgroupEnhancedVpcRouting"))
@@ -1265,7 +1283,8 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupNamespaceName")
     def attr_workgroup_namespace_name(self) -> builtins.str:
-        '''
+        '''The namespace the workgroup is associated with.
+
         :cloudformationAttribute: Workgroup.NamespaceName
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrWorkgroupNamespaceName"))
@@ -1273,7 +1292,8 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupPubliclyAccessible")
     def attr_workgroup_publicly_accessible(self) -> _IResolvable_da3f097b:
-        '''
+        '''A value that specifies whether the workgroup can be accessible from a public network.
+
         :cloudformationAttribute: Workgroup.PubliclyAccessible
         '''
         return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrWorkgroupPubliclyAccessible"))
@@ -1289,7 +1309,8 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupStatus")
     def attr_workgroup_status(self) -> builtins.str:
-        '''
+        '''The status of the workgroup.
+
         :cloudformationAttribute: Workgroup.Status
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrWorkgroupStatus"))
@@ -1305,7 +1326,8 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupWorkgroupArn")
     def attr_workgroup_workgroup_arn(self) -> builtins.str:
-        '''
+        '''The Amazon Resource Name (ARN) that links to the workgroup.
+
         :cloudformationAttribute: Workgroup.WorkgroupArn
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrWorkgroupWorkgroupArn"))
@@ -1313,7 +1335,8 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupWorkgroupId")
     def attr_workgroup_workgroup_id(self) -> builtins.str:
-        '''
+        '''The unique identifier of the workgroup.
+
         :cloudformationAttribute: Workgroup.WorkgroupId
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrWorkgroupWorkgroupId"))
@@ -1321,7 +1344,8 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupWorkgroupName")
     def attr_workgroup_workgroup_name(self) -> builtins.str:
-        '''
+        '''The name of the workgroup.
+
         :cloudformationAttribute: Workgroup.WorkgroupName
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrWorkgroupWorkgroupName"))

aws_cdk/aws_rolesanywhere/__init__.py

@@ -365,11 +365,7 @@ class CfnProfile(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_rolesanywhere.CfnProfile",
 ):
-    '''Creates a *profile* , a list of the roles that Roles Anywhere service is trusted to assume.
-
-    You use profiles to intersect permissions with IAM managed policies.
-
-    *Required permissions:* ``rolesanywhere:CreateProfile`` .
+    '''Creates a Profile.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-profile.html
     :cloudformationResource: AWS::RolesAnywhere::Profile
@@ -415,14 +411,14 @@ class CfnProfile(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param name: The name of the profile.
-        :param role_arns: A list of IAM role ARNs. During ``CreateSession`` , if a matching role ARN is provided, the properties in this profile will be applied to the intersection session policy.
-        :param duration_seconds: Sets the maximum number of seconds that vended temporary credentials through `CreateSession <https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html>`_ will be valid for, between 900 and 3600.
-        :param enabled: Indicates whether the profile is enabled.
-        :param managed_policy_arns: A list of managed policy ARNs that apply to the vended session credentials.
-        :param require_instance_properties: Specifies whether instance properties are required in temporary credential requests with this profile.
-        :param session_policy: A session policy that applies to the trust boundary of the vended session credentials.
-        :param tags: The tags to attach to the profile.
+        :param name: The customer specified name of the resource.
+        :param role_arns: A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.
+        :param duration_seconds: The number of seconds vended session credentials will be valid for.
+        :param enabled: The enabled status of the resource.
+        :param managed_policy_arns: A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.
+        :param require_instance_properties: Specifies whether instance properties are required in CreateSession requests with this profile.
+        :param session_policy: A session policy that will applied to the trust boundary of the vended session credentials.
+        :param tags: A list of Tags.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__15739ec913066dea67815f6297a7c4e3ed351b4df22323a7b46fa138af1a7af8)
@@ -503,7 +499,7 @@ class CfnProfile(
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
-        '''The name of the profile.'''
+        '''The customer specified name of the resource.'''
         return typing.cast(builtins.str, jsii.get(self, "name"))
 
     @name.setter
@@ -516,7 +512,7 @@ class CfnProfile(
     @builtins.property
     @jsii.member(jsii_name="roleArns")
     def role_arns(self) -> typing.List[builtins.str]:
-        '''A list of IAM role ARNs.'''
+        '''A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.'''
         return typing.cast(typing.List[builtins.str], jsii.get(self, "roleArns"))
 
     @role_arns.setter
@@ -529,7 +525,7 @@ class CfnProfile(
     @builtins.property
     @jsii.member(jsii_name="durationSeconds")
     def duration_seconds(self) -> typing.Optional[jsii.Number]:
-        '''Sets the maximum number of seconds that vended temporary credentials through `CreateSession <https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html>`_ will be valid for, between 900 and 3600.'''
+        '''The number of seconds vended session credentials will be valid for.'''
         return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "durationSeconds"))
 
     @duration_seconds.setter
@@ -544,7 +540,7 @@ class CfnProfile(
     def enabled(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Indicates whether the profile is enabled.'''
+        '''The enabled status of the resource.'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "enabled"))
 
     @enabled.setter
@@ -560,7 +556,7 @@ class CfnProfile(
     @builtins.property
     @jsii.member(jsii_name="managedPolicyArns")
     def managed_policy_arns(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''A list of managed policy ARNs that apply to the vended session credentials.'''
+        '''A list of managed policy ARNs.'''
         return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "managedPolicyArns"))
 
     @managed_policy_arns.setter
@@ -578,7 +574,7 @@ class CfnProfile(
     def require_instance_properties(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Specifies whether instance properties are required in temporary credential requests with this profile.'''
+        '''Specifies whether instance properties are required in CreateSession requests with this profile.'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "requireInstanceProperties"))
 
     @require_instance_properties.setter
@@ -594,7 +590,7 @@ class CfnProfile(
     @builtins.property
     @jsii.member(jsii_name="sessionPolicy")
     def session_policy(self) -> typing.Optional[builtins.str]:
-        '''A session policy that applies to the trust boundary of the vended session credentials.'''
+        '''A session policy that will applied to the trust boundary of the vended session credentials.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "sessionPolicy"))
 
     @session_policy.setter
@@ -607,7 +603,7 @@ class CfnProfile(
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''The tags to attach to the profile.'''
+        '''A list of Tags.'''
         return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tagsRaw"))
 
     @tags_raw.setter
@@ -647,14 +643,14 @@ class CfnProfileProps:
     ) -> None:
         '''Properties for defining a ``CfnProfile``.
 
-        :param name: The name of the profile.
-        :param role_arns: A list of IAM role ARNs. During ``CreateSession`` , if a matching role ARN is provided, the properties in this profile will be applied to the intersection session policy.
-        :param duration_seconds: Sets the maximum number of seconds that vended temporary credentials through `CreateSession <https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html>`_ will be valid for, between 900 and 3600.
-        :param enabled: Indicates whether the profile is enabled.
-        :param managed_policy_arns: A list of managed policy ARNs that apply to the vended session credentials.
-        :param require_instance_properties: Specifies whether instance properties are required in temporary credential requests with this profile.
-        :param session_policy: A session policy that applies to the trust boundary of the vended session credentials.
-        :param tags: The tags to attach to the profile.
+        :param name: The customer specified name of the resource.
+        :param role_arns: A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.
+        :param duration_seconds: The number of seconds vended session credentials will be valid for.
+        :param enabled: The enabled status of the resource.
+        :param managed_policy_arns: A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.
+        :param require_instance_properties: Specifies whether instance properties are required in CreateSession requests with this profile.
+        :param session_policy: A session policy that will applied to the trust boundary of the vended session credentials.
+        :param tags: A list of Tags.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-profile.html
         :exampleMetadata: fixture=_generated
@@ -710,7 +706,7 @@ class CfnProfileProps:
 
     @builtins.property
     def name(self) -> builtins.str:
-        '''The name of the profile.
+        '''The customer specified name of the resource.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-profile.html#cfn-rolesanywhere-profile-name
         '''
@@ -720,9 +716,7 @@ class CfnProfileProps:
 
     @builtins.property
     def role_arns(self) -> typing.List[builtins.str]:
-        '''A list of IAM role ARNs.
-
-        During ``CreateSession`` , if a matching role ARN is provided, the properties in this profile will be applied to the intersection session policy.
+        '''A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-profile.html#cfn-rolesanywhere-profile-rolearns
         '''
@@ -732,7 +726,7 @@ class CfnProfileProps:
 
     @builtins.property
     def duration_seconds(self) -> typing.Optional[jsii.Number]:
-        '''Sets the maximum number of seconds that vended temporary credentials through `CreateSession <https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html>`_ will be valid for, between 900 and 3600.
+        '''The number of seconds vended session credentials will be valid for.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-profile.html#cfn-rolesanywhere-profile-durationseconds
         '''
@@ -743,7 +737,7 @@ class CfnProfileProps:
     def enabled(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Indicates whether the profile is enabled.
+        '''The enabled status of the resource.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-profile.html#cfn-rolesanywhere-profile-enabled
         '''
@@ -752,7 +746,9 @@ class CfnProfileProps:
 
     @builtins.property
     def managed_policy_arns(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''A list of managed policy ARNs that apply to the vended session credentials.
+        '''A list of managed policy ARNs.
+
+        Managed policies identified by this list will be applied to the vended session credentials.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-profile.html#cfn-rolesanywhere-profile-managedpolicyarns
         '''
@@ -763,7 +759,7 @@ class CfnProfileProps:
     def require_instance_properties(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Specifies whether instance properties are required in temporary credential requests with this profile.
+        '''Specifies whether instance properties are required in CreateSession requests with this profile.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-profile.html#cfn-rolesanywhere-profile-requireinstanceproperties
         '''
@@ -772,7 +768,7 @@ class CfnProfileProps:
 
     @builtins.property
     def session_policy(self) -> typing.Optional[builtins.str]:
-        '''A session policy that applies to the trust boundary of the vended session credentials.
+        '''A session policy that will applied to the trust boundary of the vended session credentials.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-profile.html#cfn-rolesanywhere-profile-sessionpolicy
         '''
@@ -781,7 +777,7 @@ class CfnProfileProps:
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''The tags to attach to the profile.
+        '''A list of Tags.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-profile.html#cfn-rolesanywhere-profile-tags
         '''
@@ -806,11 +802,7 @@ class CfnTrustAnchor(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_rolesanywhere.CfnTrustAnchor",
 ):
-    '''Creates a trust anchor to establish trust between IAM Roles Anywhere and your certificate authority (CA).
-
-    You can define a trust anchor as a reference to an AWS Private Certificate Authority ( AWS Private CA ) or by uploading a CA certificate. Your AWS workloads can authenticate with the trust anchor using certificates issued by the CA in exchange for temporary AWS credentials.
-
-    *Required permissions:* ``rolesanywhere:CreateTrustAnchor`` .
+    '''Creates a TrustAnchor.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-trustanchor.html
     :cloudformationResource: AWS::RolesAnywhere::TrustAnchor
@@ -1154,7 +1146,7 @@ class CfnTrustAnchor(
             acm_pca_arn: typing.Optional[builtins.str] = None,
             x509_certificate_data: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''The data field of the trust anchor depending on its type.
+            '''A union object representing the data field of the TrustAnchor depending on its type.
 
             :param acm_pca_arn: The root certificate of the AWS Private Certificate Authority specified by this ARN is used in trust validation for temporary credential requests. Included for trust anchors of type ``AWS_ACM_PCA`` . .. epigraph:: This field is not supported in your region.
             :param x509_certificate_data: The PEM-encoded data for the certificate anchor. Included for trust anchors of type ``CERTIFICATE_BUNDLE`` .
@@ -1231,10 +1223,10 @@ class CfnTrustAnchor(
             source_data: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnTrustAnchor.SourceDataProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             source_type: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''The trust anchor type and its related certificate data.
+            '''Object representing the TrustAnchor type and its related certificate data.
 
-            :param source_data: The data field of the trust anchor depending on its type.
-            :param source_type: The type of the TrustAnchor. .. epigraph:: ``AWS_ACM_PCA`` is not an allowed value in your region.
+            :param source_data: A union object representing the data field of the TrustAnchor depending on its type.
+            :param source_type: The type of the TrustAnchor.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rolesanywhere-trustanchor-source.html
             :exampleMetadata: fixture=_generated
@@ -1267,7 +1259,7 @@ class CfnTrustAnchor(
         def source_data(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnTrustAnchor.SourceDataProperty"]]:
-            '''The data field of the trust anchor depending on its type.
+            '''A union object representing the data field of the TrustAnchor depending on its type.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rolesanywhere-trustanchor-source.html#cfn-rolesanywhere-trustanchor-source-sourcedata
             '''
@@ -1278,10 +1270,6 @@ class CfnTrustAnchor(
         def source_type(self) -> typing.Optional[builtins.str]:
             '''The type of the TrustAnchor.
 
-            .. epigraph::
-
-               ``AWS_ACM_PCA`` is not an allowed value in your region.
-
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rolesanywhere-trustanchor-source.html#cfn-rolesanywhere-trustanchor-source-sourcetype
             '''
             result = self._values.get("source_type")