aws-cdk-lib 2.134.0__py3-none-any.whl → 2.135.0__py3-none-any.whl

aws_cdk/aws_route53/__init__.py

@@ -312,6 +312,35 @@ route53.CrossAccountZoneDelegationRecord(self, "delegate",
 )
 ```
 
+Delegating the hosted zone requires assuming a role in the parent hosted zone's account.
+In order for the assumed credentials to be valid, the resource must assume the role using
+an STS endpoint in a region where both the subdomain's account and the parent's account
+are opted-in. By default, this region is determined automatically, but if you need to
+change the region used for the AssumeRole call, specify `assumeRoleRegion`:
+
+```python
+sub_zone = route53.PublicHostedZone(self, "SubZone",
+    zone_name="sub.someexample.com"
+)
+
+# import the delegation role by constructing the roleArn
+delegation_role_arn = Stack.of(self).format_arn(
+    region="",  # IAM is global in each partition
+    service="iam",
+    account="parent-account-id",
+    resource="role",
+    resource_name="MyDelegationRole"
+)
+delegation_role = iam.Role.from_role_arn(self, "DelegationRole", delegation_role_arn)
+
+route53.CrossAccountZoneDelegationRecord(self, "delegate",
+    delegated_zone=sub_zone,
+    parent_hosted_zone_name="someexample.com",  # or you can use parentHostedZoneId
+    delegation_role=delegation_role,
+    assume_role_region="us-east-1"
+)
+```
+
 ### Add Trailing Dot to Domain Names
 
 In order to continue managing existing domain names with trailing dots using CDK, you can set `addTrailingDot: false` to prevent the Construct from adding a dot at the end of the domain name.
@@ -441,6 +470,9 @@ route53.VpcEndpointServiceDomainName(self, "EndpointDomain",
 )
 ```
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime
@@ -6126,6 +6158,7 @@ class CrossAccountZoneDelegationRecord(
         *,
         delegated_zone: "IHostedZone",
         delegation_role: _IRole_235f5d8e,
+        assume_role_region: typing.Optional[builtins.str] = None,
         parent_hosted_zone_id: typing.Optional[builtins.str] = None,
         parent_hosted_zone_name: typing.Optional[builtins.str] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
@@ -6136,6 +6169,7 @@ class CrossAccountZoneDelegationRecord(
         :param id: -
         :param delegated_zone: The zone to be delegated.
         :param delegation_role: The delegation role in the parent account.
+        :param assume_role_region: Region from which to obtain temporary credentials. Default: - the Route53 signing region in the current partition
         :param parent_hosted_zone_id: The hosted zone id in the parent account. Default: - no zone id
         :param parent_hosted_zone_name: The hosted zone name in the parent account. Default: - no zone name
         :param removal_policy: The removal policy to apply to the record set. Default: RemovalPolicy.DESTROY
@@ -6148,6 +6182,7 @@ class CrossAccountZoneDelegationRecord(
         props = CrossAccountZoneDelegationRecordProps(
             delegated_zone=delegated_zone,
             delegation_role=delegation_role,
+            assume_role_region=assume_role_region,
             parent_hosted_zone_id=parent_hosted_zone_id,
             parent_hosted_zone_name=parent_hosted_zone_name,
             removal_policy=removal_policy,
@@ -6163,6 +6198,7 @@ class CrossAccountZoneDelegationRecord(
     name_mapping={
         "delegated_zone": "delegatedZone",
         "delegation_role": "delegationRole",
+        "assume_role_region": "assumeRoleRegion",
         "parent_hosted_zone_id": "parentHostedZoneId",
         "parent_hosted_zone_name": "parentHostedZoneName",
         "removal_policy": "removalPolicy",
@@ -6175,6 +6211,7 @@ class CrossAccountZoneDelegationRecordProps:
         *,
         delegated_zone: "IHostedZone",
         delegation_role: _IRole_235f5d8e,
+        assume_role_region: typing.Optional[builtins.str] = None,
         parent_hosted_zone_id: typing.Optional[builtins.str] = None,
         parent_hosted_zone_name: typing.Optional[builtins.str] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
@@ -6184,6 +6221,7 @@ class CrossAccountZoneDelegationRecordProps:
 
         :param delegated_zone: The zone to be delegated.
         :param delegation_role: The delegation role in the parent account.
+        :param assume_role_region: Region from which to obtain temporary credentials. Default: - the Route53 signing region in the current partition
         :param parent_hosted_zone_id: The hosted zone id in the parent account. Default: - no zone id
         :param parent_hosted_zone_name: The hosted zone name in the parent account. Default: - no zone name
         :param removal_policy: The removal policy to apply to the record set. Default: RemovalPolicy.DESTROY
@@ -6218,6 +6256,7 @@ class CrossAccountZoneDelegationRecordProps:
             type_hints = typing.get_type_hints(_typecheckingstub__2f26cbe17fefc3bd3765d1fcc9084ddb3aa18526e669cad5ba4011ccbc2b3d7f)
             check_type(argname="argument delegated_zone", value=delegated_zone, expected_type=type_hints["delegated_zone"])
             check_type(argname="argument delegation_role", value=delegation_role, expected_type=type_hints["delegation_role"])
+            check_type(argname="argument assume_role_region", value=assume_role_region, expected_type=type_hints["assume_role_region"])
             check_type(argname="argument parent_hosted_zone_id", value=parent_hosted_zone_id, expected_type=type_hints["parent_hosted_zone_id"])
             check_type(argname="argument parent_hosted_zone_name", value=parent_hosted_zone_name, expected_type=type_hints["parent_hosted_zone_name"])
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
@@ -6226,6 +6265,8 @@ class CrossAccountZoneDelegationRecordProps:
             "delegated_zone": delegated_zone,
             "delegation_role": delegation_role,
         }
+        if assume_role_region is not None:
+            self._values["assume_role_region"] = assume_role_region
         if parent_hosted_zone_id is not None:
             self._values["parent_hosted_zone_id"] = parent_hosted_zone_id
         if parent_hosted_zone_name is not None:
@@ -6249,6 +6290,15 @@ class CrossAccountZoneDelegationRecordProps:
         assert result is not None, "Required property 'delegation_role' is missing"
         return typing.cast(_IRole_235f5d8e, result)
 
+    @builtins.property
+    def assume_role_region(self) -> typing.Optional[builtins.str]:
+        '''Region from which to obtain temporary credentials.
+
+        :default: - the Route53 signing region in the current partition
+        '''
+        result = self._values.get("assume_role_region")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def parent_hosted_zone_id(self) -> typing.Optional[builtins.str]:
         '''The hosted zone id in the parent account.
@@ -13321,6 +13371,7 @@ def _typecheckingstub__f4115d484cd67a76fbe1e4ea37dbe01bb97e2d8816dda058f0ba90476
     *,
     delegated_zone: IHostedZone,
     delegation_role: _IRole_235f5d8e,
+    assume_role_region: typing.Optional[builtins.str] = None,
     parent_hosted_zone_id: typing.Optional[builtins.str] = None,
     parent_hosted_zone_name: typing.Optional[builtins.str] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
@@ -13333,6 +13384,7 @@ def _typecheckingstub__2f26cbe17fefc3bd3765d1fcc9084ddb3aa18526e669cad5ba4011ccb
     *,
     delegated_zone: IHostedZone,
     delegation_role: _IRole_235f5d8e,
+    assume_role_region: typing.Optional[builtins.str] = None,
     parent_hosted_zone_id: typing.Optional[builtins.str] = None,
     parent_hosted_zone_name: typing.Optional[builtins.str] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,

aws_cdk/aws_route53_patterns/__init__.py

@@ -74,6 +74,9 @@ It is safe to upgrade to `@aws-cdk/aws-route53-patterns:useCertificate` since
 the new certificate will be created and updated on the CloudFront distribution
 before the old certificate is deleted.
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_route53_targets/__init__.py

@@ -181,6 +181,9 @@ route53.ARecord(self, "AliasRecord",
 
 See the documentation of `aws-cdk-lib/aws-route53` for more information.
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_route53recoverycontrol/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_route53recoveryreadiness/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_route53resolver/__init__.py

@@ -30,6 +30,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_rum/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_s3/__init__.py

@@ -718,6 +718,9 @@ s3.Bucket(self, "Bucket2",
 )
 ```
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_s3_assets/__init__.py

@@ -214,6 +214,9 @@ To add these metadata entries to a resource, use the
 
 See https://github.com/aws/aws-cdk/issues/1432 for more details
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_s3_deployment/__init__.py

@@ -460,6 +460,9 @@ might be tricky to build on Windows.
 
 * [ ] Support "blue/green" deployments ([#954](https://github.com/aws/aws-cdk/issues/954))
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_s3_notifications/__init__.py

@@ -48,6 +48,9 @@ fn = lambda_.Function(self, "MyFunction",
 bucket.add_event_notification(s3.EventType.OBJECT_CREATED, s3n.LambdaDestination(fn))
 ```
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_s3express/__init__.py

@@ -35,6 +35,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_s3objectlambda/__init__.py

@@ -30,6 +30,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_s3outposts/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_sagemaker/__init__.py

@@ -30,6 +30,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_sam/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_scheduler/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_sdb/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_secretsmanager/__init__.py

@@ -304,6 +304,9 @@ In this case both the `username` and `database` are not a `Secret` so `SecretVal
 This means that they will be rendered as plain text in the template, but in this case neither of those
 are actual "secrets".
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime

aws_cdk/aws_securityhub/__init__.py

@@ -25,6 +25,9 @@ For more information on the resources and properties available for this service,
 
 <!--END CFNONLY DISCLAIMER-->
 '''
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime
@@ -934,15 +937,15 @@ class CfnAutomationRule(
             :param compliance_security_control_id: The security control ID for which a finding was generated. Security control IDs are the same across standards. Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param compliance_status: The result of a security check. This field is only used for findings generated from controls. Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param confidence: The likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. ``Confidence`` is scored on a 0–100 basis using a ratio scale. A value of ``0`` means 0 percent confidence, and a value of ``100`` means 100 percent confidence. For example, a data exfiltration detection based on a statistical deviation of network traffic has low confidence because an actual exfiltration hasn't been verified. For more information, see `Confidence <https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-confidence>`_ in the *AWS Security Hub User Guide* . Array Members: Minimum number of 1 item. Maximum number of 20 items.
-            :param created_at: A timestamp that indicates when this finding record was created. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param created_at: A timestamp that indicates when this finding record was created. This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples: - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` ) - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` ) - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` ) Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param criticality: The level of importance that is assigned to the resources that are associated with a finding. ``Criticality`` is scored on a 0–100 basis, using a ratio scale that supports only full integers. A score of ``0`` means that the underlying resources have no criticality, and a score of ``100`` is reserved for the most critical resources. For more information, see `Criticality <https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-criticality>`_ in the *AWS Security Hub User Guide* . Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param description: A finding's description. Array Members: Minimum number of 1 item. Maximum number of 20 items.
-            :param first_observed_at: A timestamp that indicates when the potential security issue captured by a finding was first observed by the security findings product. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param first_observed_at: A timestamp that indicates when the potential security issue captured by a finding was first observed by the security findings product. This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples: - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` ) - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` ) - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` ) Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param generator_id: The identifier for the solution-specific component that generated a finding. Array Members: Minimum number of 1 item. Maximum number of 100 items.
             :param id: The product-specific identifier for a finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
-            :param last_observed_at: A timestamp that indicates when the potential security issue captured by a finding was most recently observed by the security findings product. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param last_observed_at: A timestamp that indicates when the potential security issue captured by a finding was most recently observed by the security findings product. This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples: - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` ) - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` ) - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` ) Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param note_text: The text of a user-defined note that's added to a finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
-            :param note_updated_at: The timestamp of when the note was updated. Uses the date-time format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://www.rfc-editor.org/rfc/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param note_updated_at: The timestamp of when the note was updated. This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples: - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` ) - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` ) - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` ) Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param note_updated_by: The principal that created a note. Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param product_arn: The Amazon Resource Name (ARN) for a third-party product that generated a finding in Security Hub. Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param product_name: Provides the name of the product that generated the finding. For control-based findings, the product name is Security Hub. Array Members: Minimum number of 1 item. Maximum number of 20 items.
@@ -959,7 +962,7 @@ class CfnAutomationRule(
             :param source_url: Provides a URL that links to a page about the current finding in the finding product. Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param title: A finding's title. Array Members: Minimum number of 1 item. Maximum number of 100 items.
             :param type: One or more finding types in the format of namespace/category/classifier that classify a finding. For a list of namespaces, classifiers, and categories, see `Types taxonomy for ASFF <https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-type-taxonomy.html>`_ in the *AWS Security Hub User Guide* . Array Members: Minimum number of 1 item. Maximum number of 20 items.
-            :param updated_at: A timestamp that indicates when the finding record was most recently updated. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param updated_at: A timestamp that indicates when the finding record was most recently updated. This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples: - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` ) - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` ) - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` ) Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param user_defined_fields: A list of user-defined name and value string pairs added to a finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param verification_state: Provides the veracity of a finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param workflow_status: Provides information about the status of the investigation into a finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
@@ -1340,7 +1343,13 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.DateFilterProperty"]]]]:
             '''A timestamp that indicates when this finding record was created.
 
-            Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
+            This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:
+
+            - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` )
+            - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` )
 
             Array Members: Minimum number of 1 item. Maximum number of 20 items.
 
@@ -1383,7 +1392,13 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.DateFilterProperty"]]]]:
             '''A timestamp that indicates when the potential security issue captured by a finding was first observed by the security findings product.
 
-            Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
+            This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:
+
+            - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` )
+            - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` )
 
             Array Members: Minimum number of 1 item. Maximum number of 20 items.
 
@@ -1424,7 +1439,13 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.DateFilterProperty"]]]]:
             '''A timestamp that indicates when the potential security issue captured by a finding was most recently observed by the security findings product.
 
-            Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
+            This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:
+
+            - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` )
+            - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` )
 
             Array Members: Minimum number of 1 item. Maximum number of 20 items.
 
@@ -1452,7 +1473,13 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.DateFilterProperty"]]]]:
             '''The timestamp of when the note was updated.
 
-            Uses the date-time format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://www.rfc-editor.org/rfc/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
+            This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:
+
+            - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` )
+            - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` )
 
             Array Members: Minimum number of 1 item. Maximum number of 20 items.
 
@@ -1681,7 +1708,13 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.DateFilterProperty"]]]]:
             '''A timestamp that indicates when the finding record was most recently updated.
 
-            Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
+            This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:
+
+            - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` )
+            - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` )
 
             Array Members: Minimum number of 1 item. Maximum number of 20 items.
 
@@ -1756,8 +1789,8 @@ class CfnAutomationRule(
             '''A date filter for querying findings.
 
             :param date_range: A date range for the date filter.
-            :param end: A timestamp that provides the end date for the date filter. A correctly formatted example is ``2020-05-21T20:16:34.724Z`` . The value cannot contain spaces, and date and time should be separated by ``T`` . For more information, see `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://www.rfc-editor.org/rfc/rfc3339#section-5.6>`_ .
-            :param start: A timestamp that provides the start date for the date filter. A correctly formatted example is ``2020-05-21T20:16:34.724Z`` . The value cannot contain spaces, and date and time should be separated by ``T`` . For more information, see `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://www.rfc-editor.org/rfc/rfc3339#section-5.6>`_ .
+            :param end: A timestamp that provides the end date for the date filter. This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples: - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` ) - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` ) - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` )
+            :param start: A timestamp that provides the start date for the date filter. This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples: - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` ) - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` ) - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` ) - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` )
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-datefilter.html
             :exampleMetadata: fixture=_generated
@@ -1805,7 +1838,13 @@ class CfnAutomationRule(
         def end(self) -> typing.Optional[builtins.str]:
             '''A timestamp that provides the end date for the date filter.
 
-            A correctly formatted example is ``2020-05-21T20:16:34.724Z`` . The value cannot contain spaces, and date and time should be separated by ``T`` . For more information, see `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://www.rfc-editor.org/rfc/rfc3339#section-5.6>`_ .
+            This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:
+
+            - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` )
+            - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` )
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-datefilter.html#cfn-securityhub-automationrule-datefilter-end
             '''
@@ -1816,7 +1855,13 @@ class CfnAutomationRule(
         def start(self) -> typing.Optional[builtins.str]:
             '''A timestamp that provides the start date for the date filter.
 
-            A correctly formatted example is ``2020-05-21T20:16:34.724Z`` . The value cannot contain spaces, and date and time should be separated by ``T`` . For more information, see `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://www.rfc-editor.org/rfc/rfc3339#section-5.6>`_ .
+            This field accepts only the specified formats. Timestamps can end with ``Z`` or ``("+" / "-") time-hour [":" time-minute]`` . The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:
+
+            - ``YYYY-MM-DDTHH:MM:SSZ`` (for example, ``2019-01-31T23:00:00Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ`` (for example, ``2019-01-31T23:00:00.123456789Z`` )
+            - ``YYYY-MM-DDTHH:MM:SS+HH:MM`` (for example, ``2024-01-04T15:25:10+17:59`` )
+            - ``YYYY-MM-DDTHH:MM:SS-HHMM`` (for example, ``2024-01-04T15:25:10-1759`` )
+            - ``YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM`` (for example, ``2024-01-04T15:25:10.123456789+17:59`` )
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-datefilter.html#cfn-securityhub-automationrule-datefilter-start
             '''