aws-cdk-lib 2.133.0__py3-none-any.whl → 2.134.0__py3-none-any.whl

aws_cdk/aws_iam/__init__.py

@@ -2294,7 +2294,7 @@ class CfnManagedPolicy(
         :param description: A friendly description of the policy. Typically used to store information about the permissions defined in the policy. For example, "Grants access to production DynamoDB tables." The policy description is immutable. After a value is assigned, it cannot be changed.
         :param groups: The name (friendly name, not ARN) of the group to attach the policy to. This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-
         :param managed_policy_name: The friendly name of the policy. .. epigraph:: If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name. If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see `Acknowledging IAM Resources in AWS CloudFormation Templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities>`_ . .. epigraph:: Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{"Fn::Join": ["", [{"Ref": "AWS::Region"}, {"Ref": "MyResourceName"}]]}`` .
-        :param path: The path for the policy. For more information about paths, see `IAM identifiers <https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html>`_ in the *IAM User Guide* . This parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( ``\\u0021`` ) through the DEL character ( ``\\u007F`` ), including most punctuation characters, digits, and upper and lowercased letters. .. epigraph:: You cannot use an asterisk (*) in the path name.
+        :param path: The path for the policy. For more information about paths, see `IAM identifiers <https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html>`_ in the *IAM User Guide* . This parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( ``\\u0021`` ) through the DEL character ( ``\\u007F`` ), including most punctuation characters, digits, and upper and lowercased letters. .. epigraph:: You cannot use an asterisk (*) in the path name. Default: - "/"
         :param roles: The name (friendly name, not ARN) of the role to attach the policy to. This parameter allows (per its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@- .. epigraph:: If an external policy (such as ``AWS::IAM::Policy`` or ``AWS::IAM::ManagedPolicy`` ) has a ``Ref`` to a role and if a resource (such as ``AWS::ECS::Service`` ) also has a ``Ref`` to the same role, add a ``DependsOn`` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an ``AWS::ECS::Service`` resource, the ``DependsOn`` attribute ensures that AWS CloudFormation deletes the ``AWS::ECS::Service`` resource before deleting its role's policy.
         :param users: The name (friendly name, not ARN) of the IAM user to attach the policy to. This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-
         '''
@@ -2552,7 +2552,7 @@ class CfnManagedPolicyProps:
         :param description: A friendly description of the policy. Typically used to store information about the permissions defined in the policy. For example, "Grants access to production DynamoDB tables." The policy description is immutable. After a value is assigned, it cannot be changed.
         :param groups: The name (friendly name, not ARN) of the group to attach the policy to. This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-
         :param managed_policy_name: The friendly name of the policy. .. epigraph:: If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name. If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see `Acknowledging IAM Resources in AWS CloudFormation Templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities>`_ . .. epigraph:: Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{"Fn::Join": ["", [{"Ref": "AWS::Region"}, {"Ref": "MyResourceName"}]]}`` .
-        :param path: The path for the policy. For more information about paths, see `IAM identifiers <https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html>`_ in the *IAM User Guide* . This parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( ``\\u0021`` ) through the DEL character ( ``\\u007F`` ), including most punctuation characters, digits, and upper and lowercased letters. .. epigraph:: You cannot use an asterisk (*) in the path name.
+        :param path: The path for the policy. For more information about paths, see `IAM identifiers <https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html>`_ in the *IAM User Guide* . This parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( ``\\u0021`` ) through the DEL character ( ``\\u007F`` ), including most punctuation characters, digits, and upper and lowercased letters. .. epigraph:: You cannot use an asterisk (*) in the path name. Default: - "/"
         :param roles: The name (friendly name, not ARN) of the role to attach the policy to. This parameter allows (per its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@- .. epigraph:: If an external policy (such as ``AWS::IAM::Policy`` or ``AWS::IAM::ManagedPolicy`` ) has a ``Ref`` to a role and if a resource (such as ``AWS::ECS::Service`` ) also has a ``Ref`` to the same role, add a ``DependsOn`` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an ``AWS::ECS::Service`` resource, the ``DependsOn`` attribute ensures that AWS CloudFormation deletes the ``AWS::ECS::Service`` resource before deleting its role's policy.
         :param users: The name (friendly name, not ARN) of the IAM user to attach the policy to. This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-
 
@@ -2681,6 +2681,8 @@ class CfnManagedPolicyProps:
 
            You cannot use an asterisk (*) in the path name.
 
+        :default: - "/"
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html#cfn-iam-managedpolicy-path
         '''
         result = self._values.get("path")
@@ -9253,11 +9255,7 @@ class Policy(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_iam.Policy",
 ):
-    '''The AWS::IAM::Policy resource associates an IAM policy with IAM users, roles, or groups.
-
-    For more information about IAM policies, see `Overview of IAM
-    Policies <http://docs.aws.amazon.com/IAM/latest/UserGuide/policies_overview.html>`_
-    in the IAM User Guide guide.
+    '''The AWS::IAM::Policy resource associates an `inline <https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#inline>`_ IAM policy with IAM users, roles, or groups. For more information about IAM policies, see `Overview of IAM Policies <http://docs.aws.amazon.com/IAM/latest/UserGuide/policies_overview.html>`_ in the IAM User Guide guide.
 
     :exampleMetadata: infused
 
@@ -9298,7 +9296,7 @@ class Policy(
         :param scope: -
         :param id: -
         :param document: Initial PolicyDocument to use for this Policy. If omited, any ``PolicyStatement`` provided in the ``statements`` property will be applied against the empty default ``PolicyDocument``. Default: - An empty policy.
-        :param force: Force creation of an ``AWS::IAM::Policy``. Unless set to ``true``, this ``Policy`` construct will not materialize to an ``AWS::IAM::Policy`` CloudFormation resource in case it would have no effect (for example, if it remains unattached to an IAM identity or if it has no statements). This is generally desired behavior, since it prevents creating invalid--and hence undeployable--CloudFormation templates. In cases where you know the policy must be created and it is actually an error if no statements have been added to it, you can set this to ``true``. Default: false
+        :param force: Force creation of an ``AWS::IAM::Policy``. Unless set to ``true``, this ``Policy`` construct will not materialize to an ``AWS::IAM::Policy`` CloudFormation resource in case it would have no effect (for example, if it remains unattached to an IAM identity or if it has no statements). This is generally desired behavior, since it prevents creating invalid--and hence undeployable--CloudFormation templates. In cases where you know the policy must be created and it is actually an error if no statements have been added to it or it remains unattached to an IAM identity, you can set this to ``true``. Default: false
         :param groups: Groups to attach this policy to. You can also use ``attachToGroup(group)`` to attach this policy to a group. Default: - No groups.
         :param policy_name: The name of the policy. If you specify multiple policies for an entity, specify unique names. For example, if you specify a list of policies for an IAM role, each policy must have a unique name. Default: - Uses the logical ID of the policy resource, which is ensured to be unique within the stack.
         :param roles: Roles to attach this policy to. You can also use ``attachToRole(role)`` to attach this policy to a role. Default: - No roles.
@@ -9705,7 +9703,7 @@ class PolicyProps:
         '''Properties for defining an IAM inline policy document.
 
         :param document: Initial PolicyDocument to use for this Policy. If omited, any ``PolicyStatement`` provided in the ``statements`` property will be applied against the empty default ``PolicyDocument``. Default: - An empty policy.
-        :param force: Force creation of an ``AWS::IAM::Policy``. Unless set to ``true``, this ``Policy`` construct will not materialize to an ``AWS::IAM::Policy`` CloudFormation resource in case it would have no effect (for example, if it remains unattached to an IAM identity or if it has no statements). This is generally desired behavior, since it prevents creating invalid--and hence undeployable--CloudFormation templates. In cases where you know the policy must be created and it is actually an error if no statements have been added to it, you can set this to ``true``. Default: false
+        :param force: Force creation of an ``AWS::IAM::Policy``. Unless set to ``true``, this ``Policy`` construct will not materialize to an ``AWS::IAM::Policy`` CloudFormation resource in case it would have no effect (for example, if it remains unattached to an IAM identity or if it has no statements). This is generally desired behavior, since it prevents creating invalid--and hence undeployable--CloudFormation templates. In cases where you know the policy must be created and it is actually an error if no statements have been added to it or it remains unattached to an IAM identity, you can set this to ``true``. Default: false
         :param groups: Groups to attach this policy to. You can also use ``attachToGroup(group)`` to attach this policy to a group. Default: - No groups.
         :param policy_name: The name of the policy. If you specify multiple policies for an entity, specify unique names. For example, if you specify a list of policies for an IAM role, each policy must have a unique name. Default: - Uses the logical ID of the policy resource, which is ensured to be unique within the stack.
         :param roles: Roles to attach this policy to. You can also use ``attachToRole(role)`` to attach this policy to a role. Default: - No roles.
@@ -9783,7 +9781,8 @@ class PolicyProps:
         creating invalid--and hence undeployable--CloudFormation templates.
 
         In cases where you know the policy must be created and it is actually
-        an error if no statements have been added to it, you can set this to ``true``.
+        an error if no statements have been added to it or it remains unattached to
+        an IAM identity, you can set this to ``true``.
 
         :default: false
         '''

aws_cdk/aws_internetmonitor/__init__.py

@@ -93,6 +93,7 @@ class CfnMonitor(
                 ),
                 performance_score_threshold=123
             ),
+            include_linked_accounts=False,
             internet_measurements_log_delivery=internetmonitor.CfnMonitor.InternetMeasurementsLogDeliveryProperty(
                 s3_config=internetmonitor.CfnMonitor.S3ConfigProperty(
                     bucket_name="bucketName",
@@ -100,6 +101,7 @@ class CfnMonitor(
                     log_delivery_status="logDeliveryStatus"
                 )
             ),
+            linked_account_id="linkedAccountId",
             max_city_networks_to_monitor=123,
             resources=["resources"],
             resources_to_add=["resourcesToAdd"],
@@ -120,7 +122,9 @@ class CfnMonitor(
         *,
         monitor_name: builtins.str,
         health_events_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnMonitor.HealthEventsConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        include_linked_accounts: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         internet_measurements_log_delivery: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnMonitor.InternetMeasurementsLogDeliveryProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        linked_account_id: typing.Optional[builtins.str] = None,
         max_city_networks_to_monitor: typing.Optional[jsii.Number] = None,
         resources: typing.Optional[typing.Sequence[builtins.str]] = None,
         resources_to_add: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -134,7 +138,9 @@ class CfnMonitor(
         :param id: Construct identifier for this resource (unique in its scope).
         :param monitor_name: The name of the monitor. A monitor name can contain only alphanumeric characters, dashes (-), periods (.), and underscores (_).
         :param health_events_config: A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies. Defines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Amazon CloudWatch Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both. You can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold. If you don't set a health event threshold, the default value is 95%. For local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both. For more information, see `Change health event thresholds <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview>`_ in the Internet Monitor section of the *CloudWatch User Guide* .
+        :param include_linked_accounts: 
         :param internet_measurements_log_delivery: Publish internet measurements for a monitor for all city-networks (up to the 500,000 service limit) to another location, such as an Amazon S3 bucket. Measurements are also published to Amazon CloudWatch Logs for the first 500 (by traffic volume) city-networks (client locations and ASNs, typically internet service providers or ISPs).
+        :param linked_account_id: 
         :param max_city_networks_to_monitor: The maximum number of city-networks to monitor for your resources. A city-network is the location (city) where clients access your application resources from and the network, such as an internet service provider, that clients access the resources through. For more information, see `Choosing a city-network maximum value <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/IMCityNetworksMaximum.html>`_ in *Using Amazon CloudWatch Internet Monitor* .
         :param resources: The resources that have been added for the monitor, listed by their Amazon Resource Names (ARNs). Use this option to add or remove resources when making an update. .. epigraph:: Be aware that if you include content in the ``Resources`` field when you update a monitor, the ``ResourcesToAdd`` and ``ResourcesToRemove`` fields must be empty.
         :param resources_to_add: The resources to include in a monitor, which you provide as a set of Amazon Resource Names (ARNs). Resources can be Amazon Virtual Private Cloud VPCs, Network Load Balancers (NLBs), Amazon CloudFront distributions, or Amazon WorkSpaces directories. You can add a combination of VPCs and CloudFront distributions, or you can add WorkSpaces directories, or you can add NLBs. You can't add NLBs or WorkSpaces directories together with any other resources. If you add only VPC resources, at least one VPC must have an Internet Gateway attached to it, to make sure that it has internet connectivity. .. epigraph:: You can specify this field for a monitor update only if the ``Resources`` field is empty.
@@ -150,7 +156,9 @@ class CfnMonitor(
         props = CfnMonitorProps(
             monitor_name=monitor_name,
             health_events_config=health_events_config,
+            include_linked_accounts=include_linked_accounts,
             internet_measurements_log_delivery=internet_measurements_log_delivery,
+            linked_account_id=linked_account_id,
             max_city_networks_to_monitor=max_city_networks_to_monitor,
             resources=resources,
             resources_to_add=resources_to_add,
@@ -281,6 +289,23 @@ class CfnMonitor(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "healthEventsConfig", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="includeLinkedAccounts")
+    def include_linked_accounts(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "includeLinkedAccounts"))
+
+    @include_linked_accounts.setter
+    def include_linked_accounts(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__80a74cd4b87837dd8170028ab147883219b1546ce841f056d4ef2aa4f1fd501b)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "includeLinkedAccounts", value)
+
     @builtins.property
     @jsii.member(jsii_name="internetMeasurementsLogDelivery")
     def internet_measurements_log_delivery(
@@ -299,6 +324,18 @@ class CfnMonitor(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "internetMeasurementsLogDelivery", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="linkedAccountId")
+    def linked_account_id(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "linkedAccountId"))
+
+    @linked_account_id.setter
+    def linked_account_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d352b84b30decfade63d633da845bdcbfabe043a48b4897bbe891f6584cf0e2b)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "linkedAccountId", value)
+
     @builtins.property
     @jsii.member(jsii_name="maxCityNetworksToMonitor")
     def max_city_networks_to_monitor(self) -> typing.Optional[jsii.Number]:
@@ -786,7 +823,9 @@ class CfnMonitor(
     name_mapping={
         "monitor_name": "monitorName",
         "health_events_config": "healthEventsConfig",
+        "include_linked_accounts": "includeLinkedAccounts",
         "internet_measurements_log_delivery": "internetMeasurementsLogDelivery",
+        "linked_account_id": "linkedAccountId",
         "max_city_networks_to_monitor": "maxCityNetworksToMonitor",
         "resources": "resources",
         "resources_to_add": "resourcesToAdd",
@@ -802,7 +841,9 @@ class CfnMonitorProps:
         *,
         monitor_name: builtins.str,
         health_events_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnMonitor.HealthEventsConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        include_linked_accounts: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         internet_measurements_log_delivery: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnMonitor.InternetMeasurementsLogDeliveryProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        linked_account_id: typing.Optional[builtins.str] = None,
         max_city_networks_to_monitor: typing.Optional[jsii.Number] = None,
         resources: typing.Optional[typing.Sequence[builtins.str]] = None,
         resources_to_add: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -815,7 +856,9 @@ class CfnMonitorProps:
 
         :param monitor_name: The name of the monitor. A monitor name can contain only alphanumeric characters, dashes (-), periods (.), and underscores (_).
         :param health_events_config: A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies. Defines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Amazon CloudWatch Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both. You can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold. If you don't set a health event threshold, the default value is 95%. For local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both. For more information, see `Change health event thresholds <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview>`_ in the Internet Monitor section of the *CloudWatch User Guide* .
+        :param include_linked_accounts: 
         :param internet_measurements_log_delivery: Publish internet measurements for a monitor for all city-networks (up to the 500,000 service limit) to another location, such as an Amazon S3 bucket. Measurements are also published to Amazon CloudWatch Logs for the first 500 (by traffic volume) city-networks (client locations and ASNs, typically internet service providers or ISPs).
+        :param linked_account_id: 
         :param max_city_networks_to_monitor: The maximum number of city-networks to monitor for your resources. A city-network is the location (city) where clients access your application resources from and the network, such as an internet service provider, that clients access the resources through. For more information, see `Choosing a city-network maximum value <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/IMCityNetworksMaximum.html>`_ in *Using Amazon CloudWatch Internet Monitor* .
         :param resources: The resources that have been added for the monitor, listed by their Amazon Resource Names (ARNs). Use this option to add or remove resources when making an update. .. epigraph:: Be aware that if you include content in the ``Resources`` field when you update a monitor, the ``ResourcesToAdd`` and ``ResourcesToRemove`` fields must be empty.
         :param resources_to_add: The resources to include in a monitor, which you provide as a set of Amazon Resource Names (ARNs). Resources can be Amazon Virtual Private Cloud VPCs, Network Load Balancers (NLBs), Amazon CloudFront distributions, or Amazon WorkSpaces directories. You can add a combination of VPCs and CloudFront distributions, or you can add WorkSpaces directories, or you can add NLBs. You can't add NLBs or WorkSpaces directories together with any other resources. If you add only VPC resources, at least one VPC must have an Internet Gateway attached to it, to make sure that it has internet connectivity. .. epigraph:: You can specify this field for a monitor update only if the ``Resources`` field is empty.
@@ -851,6 +894,7 @@ class CfnMonitorProps:
                     ),
                     performance_score_threshold=123
                 ),
+                include_linked_accounts=False,
                 internet_measurements_log_delivery=internetmonitor.CfnMonitor.InternetMeasurementsLogDeliveryProperty(
                     s3_config=internetmonitor.CfnMonitor.S3ConfigProperty(
                         bucket_name="bucketName",
@@ -858,6 +902,7 @@ class CfnMonitorProps:
                         log_delivery_status="logDeliveryStatus"
                     )
                 ),
+                linked_account_id="linkedAccountId",
                 max_city_networks_to_monitor=123,
                 resources=["resources"],
                 resources_to_add=["resourcesToAdd"],
@@ -874,7 +919,9 @@ class CfnMonitorProps:
             type_hints = typing.get_type_hints(_typecheckingstub__a592873878a3205128bdbf7757cbce3b6e97783b1a68d0a1b5510ffc9f9f1fd8)
             check_type(argname="argument monitor_name", value=monitor_name, expected_type=type_hints["monitor_name"])
             check_type(argname="argument health_events_config", value=health_events_config, expected_type=type_hints["health_events_config"])
+            check_type(argname="argument include_linked_accounts", value=include_linked_accounts, expected_type=type_hints["include_linked_accounts"])
             check_type(argname="argument internet_measurements_log_delivery", value=internet_measurements_log_delivery, expected_type=type_hints["internet_measurements_log_delivery"])
+            check_type(argname="argument linked_account_id", value=linked_account_id, expected_type=type_hints["linked_account_id"])
             check_type(argname="argument max_city_networks_to_monitor", value=max_city_networks_to_monitor, expected_type=type_hints["max_city_networks_to_monitor"])
             check_type(argname="argument resources", value=resources, expected_type=type_hints["resources"])
             check_type(argname="argument resources_to_add", value=resources_to_add, expected_type=type_hints["resources_to_add"])
@@ -887,8 +934,12 @@ class CfnMonitorProps:
         }
         if health_events_config is not None:
             self._values["health_events_config"] = health_events_config
+        if include_linked_accounts is not None:
+            self._values["include_linked_accounts"] = include_linked_accounts
         if internet_measurements_log_delivery is not None:
             self._values["internet_measurements_log_delivery"] = internet_measurements_log_delivery
+        if linked_account_id is not None:
+            self._values["linked_account_id"] = linked_account_id
         if max_city_networks_to_monitor is not None:
             self._values["max_city_networks_to_monitor"] = max_city_networks_to_monitor
         if resources is not None:
@@ -937,6 +988,16 @@ class CfnMonitorProps:
         result = self._values.get("health_events_config")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnMonitor.HealthEventsConfigProperty]], result)
 
+    @builtins.property
+    def include_linked_accounts(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-internetmonitor-monitor.html#cfn-internetmonitor-monitor-includelinkedaccounts
+        '''
+        result = self._values.get("include_linked_accounts")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
     @builtins.property
     def internet_measurements_log_delivery(
         self,
@@ -950,6 +1011,14 @@ class CfnMonitorProps:
         result = self._values.get("internet_measurements_log_delivery")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnMonitor.InternetMeasurementsLogDeliveryProperty]], result)
 
+    @builtins.property
+    def linked_account_id(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-internetmonitor-monitor.html#cfn-internetmonitor-monitor-linkedaccountid
+        '''
+        result = self._values.get("linked_account_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def max_city_networks_to_monitor(self) -> typing.Optional[jsii.Number]:
         '''The maximum number of city-networks to monitor for your resources.
@@ -1064,7 +1133,9 @@ def _typecheckingstub__b49625d902a7236b204a8a96b68b35647ded5da14fa0241503fe8aed7
     *,
     monitor_name: builtins.str,
     health_events_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnMonitor.HealthEventsConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    include_linked_accounts: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     internet_measurements_log_delivery: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnMonitor.InternetMeasurementsLogDeliveryProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    linked_account_id: typing.Optional[builtins.str] = None,
     max_city_networks_to_monitor: typing.Optional[jsii.Number] = None,
     resources: typing.Optional[typing.Sequence[builtins.str]] = None,
     resources_to_add: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -1100,12 +1171,24 @@ def _typecheckingstub__1fcad87a381a34c71141a2be73ac8e81c442bd9d4616b8a8a55279c77
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__80a74cd4b87837dd8170028ab147883219b1546ce841f056d4ef2aa4f1fd501b(
+    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__edd584d7d64cd02983ca8858b15c31728e9294c416931001fc1a9ce5732ebad9(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnMonitor.InternetMeasurementsLogDeliveryProperty]],
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__d352b84b30decfade63d633da845bdcbfabe043a48b4897bbe891f6584cf0e2b(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__44b26920fe092fdfabe5783619b4c150b5a44928ea63b71966ac31bfc9220c93(
     value: typing.Optional[jsii.Number],
 ) -> None:
@@ -1187,7 +1270,9 @@ def _typecheckingstub__a592873878a3205128bdbf7757cbce3b6e97783b1a68d0a1b5510ffc9
     *,
     monitor_name: builtins.str,
     health_events_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnMonitor.HealthEventsConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    include_linked_accounts: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     internet_measurements_log_delivery: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnMonitor.InternetMeasurementsLogDeliveryProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    linked_account_id: typing.Optional[builtins.str] = None,
     max_city_networks_to_monitor: typing.Optional[jsii.Number] = None,
     resources: typing.Optional[typing.Sequence[builtins.str]] = None,
     resources_to_add: typing.Optional[typing.Sequence[builtins.str]] = None,