aws-cdk-lib 2.133.0__py3-none-any.whl → 2.135.0__py3-none-any.whl

aws_cdk/aws_glue/__init__.py

@@ -30,6 +30,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime
@@ -1474,6 +1477,10 @@ class CfnCrawler(
             crawler_security_configuration="crawlerSecurityConfiguration",
             database_name="databaseName",
             description="description",
+            lake_formation_configuration=glue.CfnCrawler.LakeFormationConfigurationProperty(
+                account_id="accountId",
+                use_lake_formation_credentials=False
+            ),
             name="name",
             recrawl_policy=glue.CfnCrawler.RecrawlPolicyProperty(
                 recrawl_behavior="recrawlBehavior"
@@ -1502,6 +1509,7 @@ class CfnCrawler(
         crawler_security_configuration: typing.Optional[builtins.str] = None,
         database_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        lake_formation_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCrawler.LakeFormationConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
         recrawl_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCrawler.RecrawlPolicyProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         schedule: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCrawler.ScheduleProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -1519,6 +1527,7 @@ class CfnCrawler(
         :param crawler_security_configuration: The name of the ``SecurityConfiguration`` structure to be used by this crawler.
         :param database_name: The name of the database in which the crawler's output is stored.
         :param description: A description of the crawler.
+        :param lake_formation_configuration: Specifies whether the crawler should use AWS Lake Formation credentials for the crawler instead of the IAM role credentials.
         :param name: The name of the crawler.
         :param recrawl_policy: A policy that specifies whether to crawl the entire dataset again, or to crawl only folders that were added since the last crawler run.
         :param schedule: For scheduled crawlers, the schedule when the crawler runs.
@@ -1538,6 +1547,7 @@ class CfnCrawler(
             crawler_security_configuration=crawler_security_configuration,
             database_name=database_name,
             description=description,
+            lake_formation_configuration=lake_formation_configuration,
             name=name,
             recrawl_policy=recrawl_policy,
             schedule=schedule,
@@ -1696,6 +1706,24 @@ class CfnCrawler(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "description", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="lakeFormationConfiguration")
+    def lake_formation_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCrawler.LakeFormationConfigurationProperty"]]:
+        '''Specifies whether the crawler should use AWS Lake Formation credentials for the crawler instead of the IAM role credentials.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCrawler.LakeFormationConfigurationProperty"]], jsii.get(self, "lakeFormationConfiguration"))
+
+    @lake_formation_configuration.setter
+    def lake_formation_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCrawler.LakeFormationConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e64ccabfbbc601ee6cf62caf919ec0f9d3c9ee5004117fe31886a6aa08cd135c)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "lakeFormationConfiguration", value)
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> typing.Optional[builtins.str]:
@@ -2272,6 +2300,83 @@ class CfnCrawler(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_glue.CfnCrawler.LakeFormationConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "account_id": "accountId",
+            "use_lake_formation_credentials": "useLakeFormationCredentials",
+        },
+    )
+    class LakeFormationConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            account_id: typing.Optional[builtins.str] = None,
+            use_lake_formation_credentials: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        ) -> None:
+            '''Specifies AWS Lake Formation configuration settings for the crawler.
+
+            :param account_id: Required for cross account crawls. For same account crawls as the target data, this can be left as null.
+            :param use_lake_formation_credentials: Specifies whether to use AWS Lake Formation credentials for the crawler instead of the IAM role credentials.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-crawler-lakeformationconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_glue as glue
+                
+                lake_formation_configuration_property = glue.CfnCrawler.LakeFormationConfigurationProperty(
+                    account_id="accountId",
+                    use_lake_formation_credentials=False
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__00e61f68ec488853de383150c03873ed82cc7c24780e8804ee029b82e3540cb6)
+                check_type(argname="argument account_id", value=account_id, expected_type=type_hints["account_id"])
+                check_type(argname="argument use_lake_formation_credentials", value=use_lake_formation_credentials, expected_type=type_hints["use_lake_formation_credentials"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if account_id is not None:
+                self._values["account_id"] = account_id
+            if use_lake_formation_credentials is not None:
+                self._values["use_lake_formation_credentials"] = use_lake_formation_credentials
+
+        @builtins.property
+        def account_id(self) -> typing.Optional[builtins.str]:
+            '''Required for cross account crawls.
+
+            For same account crawls as the target data, this can be left as null.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-crawler-lakeformationconfiguration.html#cfn-glue-crawler-lakeformationconfiguration-accountid
+            '''
+            result = self._values.get("account_id")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def use_lake_formation_credentials(
+            self,
+        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+            '''Specifies whether to use AWS Lake Formation credentials for the crawler instead of the IAM role credentials.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-crawler-lakeformationconfiguration.html#cfn-glue-crawler-lakeformationconfiguration-uselakeformationcredentials
+            '''
+            result = self._values.get("use_lake_formation_credentials")
+            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "LakeFormationConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_glue.CfnCrawler.MongoDBTargetProperty",
         jsii_struct_bases=[],
@@ -2905,6 +3010,7 @@ class CfnCrawler(
         "crawler_security_configuration": "crawlerSecurityConfiguration",
         "database_name": "databaseName",
         "description": "description",
+        "lake_formation_configuration": "lakeFormationConfiguration",
         "name": "name",
         "recrawl_policy": "recrawlPolicy",
         "schedule": "schedule",
@@ -2924,6 +3030,7 @@ class CfnCrawlerProps:
         crawler_security_configuration: typing.Optional[builtins.str] = None,
         database_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        lake_formation_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCrawler.LakeFormationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
         recrawl_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCrawler.RecrawlPolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         schedule: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCrawler.ScheduleProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -2940,6 +3047,7 @@ class CfnCrawlerProps:
         :param crawler_security_configuration: The name of the ``SecurityConfiguration`` structure to be used by this crawler.
         :param database_name: The name of the database in which the crawler's output is stored.
         :param description: A description of the crawler.
+        :param lake_formation_configuration: Specifies whether the crawler should use AWS Lake Formation credentials for the crawler instead of the IAM role credentials.
         :param name: The name of the crawler.
         :param recrawl_policy: A policy that specifies whether to crawl the entire dataset again, or to crawl only folders that were added since the last crawler run.
         :param schedule: For scheduled crawlers, the schedule when the crawler runs.
@@ -3008,6 +3116,10 @@ class CfnCrawlerProps:
                 crawler_security_configuration="crawlerSecurityConfiguration",
                 database_name="databaseName",
                 description="description",
+                lake_formation_configuration=glue.CfnCrawler.LakeFormationConfigurationProperty(
+                    account_id="accountId",
+                    use_lake_formation_credentials=False
+                ),
                 name="name",
                 recrawl_policy=glue.CfnCrawler.RecrawlPolicyProperty(
                     recrawl_behavior="recrawlBehavior"
@@ -3032,6 +3144,7 @@ class CfnCrawlerProps:
             check_type(argname="argument crawler_security_configuration", value=crawler_security_configuration, expected_type=type_hints["crawler_security_configuration"])
             check_type(argname="argument database_name", value=database_name, expected_type=type_hints["database_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument lake_formation_configuration", value=lake_formation_configuration, expected_type=type_hints["lake_formation_configuration"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
             check_type(argname="argument recrawl_policy", value=recrawl_policy, expected_type=type_hints["recrawl_policy"])
             check_type(argname="argument schedule", value=schedule, expected_type=type_hints["schedule"])
@@ -3052,6 +3165,8 @@ class CfnCrawlerProps:
             self._values["database_name"] = database_name
         if description is not None:
             self._values["description"] = description
+        if lake_formation_configuration is not None:
+            self._values["lake_formation_configuration"] = lake_formation_configuration
         if name is not None:
             self._values["name"] = name
         if recrawl_policy is not None:
@@ -3134,6 +3249,17 @@ class CfnCrawlerProps:
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def lake_formation_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnCrawler.LakeFormationConfigurationProperty]]:
+        '''Specifies whether the crawler should use AWS Lake Formation credentials for the crawler instead of the IAM role credentials.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-crawler.html#cfn-glue-crawler-lakeformationconfiguration
+        '''
+        result = self._values.get("lake_formation_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnCrawler.LakeFormationConfigurationProperty]], result)
+
     @builtins.property
     def name(self) -> typing.Optional[builtins.str]:
         '''The name of the crawler.
@@ -13121,7 +13247,7 @@ class CfnTableOptimizer(
         :param catalog_id: The catalog ID of the table.
         :param database_name: The name of the database. For Hive compatibility, this is folded to lowercase when it is stored.
         :param table_name: The table name. For Hive compatibility, this must be entirely lowercase.
-        :param table_optimizer_configuration: 
+        :param table_optimizer_configuration: Specifies configuration details of a table optimizer.
         :param type: The type of table optimizer. Currently, the only valid value is compaction.
         '''
         if __debug__:
@@ -13225,6 +13351,7 @@ class CfnTableOptimizer(
     def table_optimizer_configuration(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, "CfnTableOptimizer.TableOptimizerConfigurationProperty"]:
+        '''Specifies configuration details of a table optimizer.'''
         return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnTableOptimizer.TableOptimizerConfigurationProperty"], jsii.get(self, "tableOptimizerConfiguration"))
 
     @table_optimizer_configuration.setter
@@ -13348,7 +13475,7 @@ class CfnTableOptimizerProps:
         :param catalog_id: The catalog ID of the table.
         :param database_name: The name of the database. For Hive compatibility, this is folded to lowercase when it is stored.
         :param table_name: The table name. For Hive compatibility, this must be entirely lowercase.
-        :param table_optimizer_configuration: 
+        :param table_optimizer_configuration: Specifies configuration details of a table optimizer.
         :param type: The type of table optimizer. Currently, the only valid value is compaction.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-tableoptimizer.html
@@ -13424,7 +13551,8 @@ class CfnTableOptimizerProps:
     def table_optimizer_configuration(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, CfnTableOptimizer.TableOptimizerConfigurationProperty]:
-        '''
+        '''Specifies configuration details of a table optimizer.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-tableoptimizer.html#cfn-glue-tableoptimizer-tableoptimizerconfiguration
         '''
         result = self._values.get("table_optimizer_configuration")
@@ -15208,6 +15336,7 @@ def _typecheckingstub__ff9e598239ccebeecff8b5e3f5f0458f9de0c5c407db27837fb3122ad
     crawler_security_configuration: typing.Optional[builtins.str] = None,
     database_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    lake_formation_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCrawler.LakeFormationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
     recrawl_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCrawler.RecrawlPolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     schedule: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCrawler.ScheduleProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -15272,6 +15401,12 @@ def _typecheckingstub__55e97c90536e63620917a74b9e753f3ef37d2ba4cc78a367b3c2692a6
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__e64ccabfbbc601ee6cf62caf919ec0f9d3c9ee5004117fe31886a6aa08cd135c(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnCrawler.LakeFormationConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__35986739065f4f5528fa36a3a4743b76eb0937d555e5d7ad917e107db84e9d92(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -15355,6 +15490,14 @@ def _typecheckingstub__9cb27c7db73a5c6fa3740f2d4726f453641d40911229d3bb39f26c440
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__00e61f68ec488853de383150c03873ed82cc7c24780e8804ee029b82e3540cb6(
+    *,
+    account_id: typing.Optional[builtins.str] = None,
+    use_lake_formation_credentials: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__b27a374f7da5948658852ac367f177b833b9e06c48e0a246c211a7d7ede3af94(
     *,
     connection_name: typing.Optional[builtins.str] = None,
@@ -15419,6 +15562,7 @@ def _typecheckingstub__51125dcaf0f55fdaefa50d6b9c05a6e431008538b8ab24abc0fbe126f
     crawler_security_configuration: typing.Optional[builtins.str] = None,
     database_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    lake_formation_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCrawler.LakeFormationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
     recrawl_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCrawler.RecrawlPolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     schedule: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCrawler.ScheduleProperty, typing.Dict[builtins.str, typing.Any]]]] = None,

aws_cdk/aws_grafana/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_greengrass/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_greengrassv2/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_groundstation/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_guardduty/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_healthimaging/__init__.py

@@ -35,6 +35,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_healthlake/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_iam/__init__.py

@@ -817,6 +817,9 @@ instance_profile = iam.InstanceProfile.from_instance_profile_attributes(self, "I
   attached to IAM principals specify relevant resources, while policies attached to resources
   specify which IAM principals they apply to.
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime
@@ -2294,7 +2297,7 @@ class CfnManagedPolicy(
         :param description: A friendly description of the policy. Typically used to store information about the permissions defined in the policy. For example, "Grants access to production DynamoDB tables." The policy description is immutable. After a value is assigned, it cannot be changed.
         :param groups: The name (friendly name, not ARN) of the group to attach the policy to. This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-
         :param managed_policy_name: The friendly name of the policy. .. epigraph:: If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name. If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see `Acknowledging IAM Resources in AWS CloudFormation Templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities>`_ . .. epigraph:: Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{"Fn::Join": ["", [{"Ref": "AWS::Region"}, {"Ref": "MyResourceName"}]]}`` .
-        :param path: The path for the policy. For more information about paths, see `IAM identifiers <https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html>`_ in the *IAM User Guide* . This parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( ``\\u0021`` ) through the DEL character ( ``\\u007F`` ), including most punctuation characters, digits, and upper and lowercased letters. .. epigraph:: You cannot use an asterisk (*) in the path name.
+        :param path: The path for the policy. For more information about paths, see `IAM identifiers <https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html>`_ in the *IAM User Guide* . This parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( ``\\u0021`` ) through the DEL character ( ``\\u007F`` ), including most punctuation characters, digits, and upper and lowercased letters. .. epigraph:: You cannot use an asterisk (*) in the path name. Default: - "/"
         :param roles: The name (friendly name, not ARN) of the role to attach the policy to. This parameter allows (per its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@- .. epigraph:: If an external policy (such as ``AWS::IAM::Policy`` or ``AWS::IAM::ManagedPolicy`` ) has a ``Ref`` to a role and if a resource (such as ``AWS::ECS::Service`` ) also has a ``Ref`` to the same role, add a ``DependsOn`` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an ``AWS::ECS::Service`` resource, the ``DependsOn`` attribute ensures that AWS CloudFormation deletes the ``AWS::ECS::Service`` resource before deleting its role's policy.
         :param users: The name (friendly name, not ARN) of the IAM user to attach the policy to. This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-
         '''
@@ -2552,7 +2555,7 @@ class CfnManagedPolicyProps:
         :param description: A friendly description of the policy. Typically used to store information about the permissions defined in the policy. For example, "Grants access to production DynamoDB tables." The policy description is immutable. After a value is assigned, it cannot be changed.
         :param groups: The name (friendly name, not ARN) of the group to attach the policy to. This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-
         :param managed_policy_name: The friendly name of the policy. .. epigraph:: If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name. If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see `Acknowledging IAM Resources in AWS CloudFormation Templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities>`_ . .. epigraph:: Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{"Fn::Join": ["", [{"Ref": "AWS::Region"}, {"Ref": "MyResourceName"}]]}`` .
-        :param path: The path for the policy. For more information about paths, see `IAM identifiers <https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html>`_ in the *IAM User Guide* . This parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( ``\\u0021`` ) through the DEL character ( ``\\u007F`` ), including most punctuation characters, digits, and upper and lowercased letters. .. epigraph:: You cannot use an asterisk (*) in the path name.
+        :param path: The path for the policy. For more information about paths, see `IAM identifiers <https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html>`_ in the *IAM User Guide* . This parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( ``\\u0021`` ) through the DEL character ( ``\\u007F`` ), including most punctuation characters, digits, and upper and lowercased letters. .. epigraph:: You cannot use an asterisk (*) in the path name. Default: - "/"
         :param roles: The name (friendly name, not ARN) of the role to attach the policy to. This parameter allows (per its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@- .. epigraph:: If an external policy (such as ``AWS::IAM::Policy`` or ``AWS::IAM::ManagedPolicy`` ) has a ``Ref`` to a role and if a resource (such as ``AWS::ECS::Service`` ) also has a ``Ref`` to the same role, add a ``DependsOn`` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an ``AWS::ECS::Service`` resource, the ``DependsOn`` attribute ensures that AWS CloudFormation deletes the ``AWS::ECS::Service`` resource before deleting its role's policy.
         :param users: The name (friendly name, not ARN) of the IAM user to attach the policy to. This parameter allows (through its `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-
 
@@ -2681,6 +2684,8 @@ class CfnManagedPolicyProps:
 
            You cannot use an asterisk (*) in the path name.
 
+        :default: - "/"
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html#cfn-iam-managedpolicy-path
         '''
         result = self._values.get("path")
@@ -9253,11 +9258,7 @@ class Policy(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_iam.Policy",
 ):
-    '''The AWS::IAM::Policy resource associates an IAM policy with IAM users, roles, or groups.
-
-    For more information about IAM policies, see `Overview of IAM
-    Policies <http://docs.aws.amazon.com/IAM/latest/UserGuide/policies_overview.html>`_
-    in the IAM User Guide guide.
+    '''The AWS::IAM::Policy resource associates an `inline <https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#inline>`_ IAM policy with IAM users, roles, or groups. For more information about IAM policies, see `Overview of IAM Policies <http://docs.aws.amazon.com/IAM/latest/UserGuide/policies_overview.html>`_ in the IAM User Guide guide.
 
     :exampleMetadata: infused
 
@@ -9298,7 +9299,7 @@ class Policy(
         :param scope: -
         :param id: -
         :param document: Initial PolicyDocument to use for this Policy. If omited, any ``PolicyStatement`` provided in the ``statements`` property will be applied against the empty default ``PolicyDocument``. Default: - An empty policy.
-        :param force: Force creation of an ``AWS::IAM::Policy``. Unless set to ``true``, this ``Policy`` construct will not materialize to an ``AWS::IAM::Policy`` CloudFormation resource in case it would have no effect (for example, if it remains unattached to an IAM identity or if it has no statements). This is generally desired behavior, since it prevents creating invalid--and hence undeployable--CloudFormation templates. In cases where you know the policy must be created and it is actually an error if no statements have been added to it, you can set this to ``true``. Default: false
+        :param force: Force creation of an ``AWS::IAM::Policy``. Unless set to ``true``, this ``Policy`` construct will not materialize to an ``AWS::IAM::Policy`` CloudFormation resource in case it would have no effect (for example, if it remains unattached to an IAM identity or if it has no statements). This is generally desired behavior, since it prevents creating invalid--and hence undeployable--CloudFormation templates. In cases where you know the policy must be created and it is actually an error if no statements have been added to it or it remains unattached to an IAM identity, you can set this to ``true``. Default: false
         :param groups: Groups to attach this policy to. You can also use ``attachToGroup(group)`` to attach this policy to a group. Default: - No groups.
         :param policy_name: The name of the policy. If you specify multiple policies for an entity, specify unique names. For example, if you specify a list of policies for an IAM role, each policy must have a unique name. Default: - Uses the logical ID of the policy resource, which is ensured to be unique within the stack.
         :param roles: Roles to attach this policy to. You can also use ``attachToRole(role)`` to attach this policy to a role. Default: - No roles.
@@ -9705,7 +9706,7 @@ class PolicyProps:
         '''Properties for defining an IAM inline policy document.
 
         :param document: Initial PolicyDocument to use for this Policy. If omited, any ``PolicyStatement`` provided in the ``statements`` property will be applied against the empty default ``PolicyDocument``. Default: - An empty policy.
-        :param force: Force creation of an ``AWS::IAM::Policy``. Unless set to ``true``, this ``Policy`` construct will not materialize to an ``AWS::IAM::Policy`` CloudFormation resource in case it would have no effect (for example, if it remains unattached to an IAM identity or if it has no statements). This is generally desired behavior, since it prevents creating invalid--and hence undeployable--CloudFormation templates. In cases where you know the policy must be created and it is actually an error if no statements have been added to it, you can set this to ``true``. Default: false
+        :param force: Force creation of an ``AWS::IAM::Policy``. Unless set to ``true``, this ``Policy`` construct will not materialize to an ``AWS::IAM::Policy`` CloudFormation resource in case it would have no effect (for example, if it remains unattached to an IAM identity or if it has no statements). This is generally desired behavior, since it prevents creating invalid--and hence undeployable--CloudFormation templates. In cases where you know the policy must be created and it is actually an error if no statements have been added to it or it remains unattached to an IAM identity, you can set this to ``true``. Default: false
         :param groups: Groups to attach this policy to. You can also use ``attachToGroup(group)`` to attach this policy to a group. Default: - No groups.
         :param policy_name: The name of the policy. If you specify multiple policies for an entity, specify unique names. For example, if you specify a list of policies for an IAM role, each policy must have a unique name. Default: - Uses the logical ID of the policy resource, which is ensured to be unique within the stack.
         :param roles: Roles to attach this policy to. You can also use ``attachToRole(role)`` to attach this policy to a role. Default: - No roles.
@@ -9783,7 +9784,8 @@ class PolicyProps:
         creating invalid--and hence undeployable--CloudFormation templates.
 
         In cases where you know the policy must be created and it is actually
-        an error if no statements have been added to it, you can set this to ``true``.
+        an error if no statements have been added to it or it remains unattached to
+        an IAM identity, you can set this to ``true``.
 
         :default: false
         '''

aws_cdk/aws_identitystore/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_imagebuilder/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_inspector/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_inspectorv2/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime