aws-cdk-lib 2.135.0__py3-none-any.whl → 2.136.0__py3-none-any.whl

aws_cdk/_jsii/__init__.py

@@ -19,7 +19,7 @@ import aws_cdk.asset_node_proxy_agent_v6._jsii
 import constructs._jsii
 
 __jsii_assembly__ = jsii.JSIIAssembly.load(
-    "aws-cdk-lib", "2.135.0", __name__[0:-6], "aws-cdk-lib@2.135.0.jsii.tgz"
+    "aws-cdk-lib", "2.136.0", __name__[0:-6], "aws-cdk-lib@2.136.0.jsii.tgz"
 )
 
 __all__ = [

aws_cdk/aws_ec2/__init__.py

@@ -86299,29 +86299,27 @@ class VpcLookupOptions:
 
         Example::
 
-            # create a cloud9 ec2 environment in a new VPC
-            vpc = ec2.Vpc(self, "VPC", max_azs=3)
-            cloud9.Ec2Environment(self, "Cloud9Env", vpc=vpc, image_id=cloud9.ImageId.AMAZON_LINUX_2)
+            vpc = ec2.Vpc.from_lookup(self, "Vpc",
+                is_default=True
+            )
+            cluster = ecs.Cluster(self, "ECSCluster", vpc=vpc)
             
-            # or create the cloud9 environment in the default VPC with specific instanceType
-            default_vpc = ec2.Vpc.from_lookup(self, "DefaultVPC", is_default=True)
-            cloud9.Ec2Environment(self, "Cloud9Env2",
-                vpc=default_vpc,
-                instance_type=ec2.InstanceType("t3.large"),
-                image_id=cloud9.ImageId.AMAZON_LINUX_2
+            task_definition = ecs.TaskDefinition(self, "TD",
+                compatibility=ecs.Compatibility.EC2
             )
             
-            # or specify in a different subnetSelection
-            c9env = cloud9.Ec2Environment(self, "Cloud9Env3",
-                vpc=vpc,
-                subnet_selection=ec2.SubnetSelection(
-                    subnet_type=ec2.SubnetType.PRIVATE_WITH_EGRESS
-                ),
-                image_id=cloud9.ImageId.AMAZON_LINUX_2
+            task_definition.add_container("TheContainer",
+                image=ecs.ContainerImage.from_registry("foo/bar"),
+                memory_limit_mi_b=256
             )
             
-            # print the Cloud9 IDE URL in the output
-            CfnOutput(self, "URL", value=c9env.ide_url)
+            run_task = tasks.EcsRunTask(self, "Run",
+                integration_pattern=sfn.IntegrationPattern.RUN_JOB,
+                cluster=cluster,
+                task_definition=task_definition,
+                launch_target=tasks.EcsEc2LaunchTarget(),
+                enable_execute_command=True
+            )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__dff7b53f348ae2cf7efc93ce0f0df35bcb1e7b1b64b7b8a6c57a9924d14268ae)

aws_cdk/aws_ecs/__init__.py

@@ -18900,35 +18900,29 @@ class Compatibility(enum.Enum):
             is_default=True
         )
         
-        cluster = ecs.Cluster(self, "Ec2Cluster", vpc=vpc)
-        cluster.add_capacity("DefaultAutoScalingGroup",
-            instance_type=ec2.InstanceType("t2.micro"),
-            vpc_subnets=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PUBLIC)
-        )
+        cluster = ecs.Cluster(self, "FargateCluster", vpc=vpc)
         
         task_definition = ecs.TaskDefinition(self, "TD",
-            compatibility=ecs.Compatibility.EC2
+            memory_mi_b="512",
+            cpu="256",
+            compatibility=ecs.Compatibility.FARGATE
         )
         
-        task_definition.add_container("TheContainer",
+        container_definition = task_definition.add_container("TheContainer",
             image=ecs.ContainerImage.from_registry("foo/bar"),
             memory_limit_mi_b=256
         )
         
-        run_task = tasks.EcsRunTask(self, "Run",
+        run_task = tasks.EcsRunTask(self, "RunFargate",
             integration_pattern=sfn.IntegrationPattern.RUN_JOB,
             cluster=cluster,
             task_definition=task_definition,
-            launch_target=tasks.EcsEc2LaunchTarget(
-                placement_strategies=[
-                    ecs.PlacementStrategy.spread_across_instances(),
-                    ecs.PlacementStrategy.packed_by_cpu(),
-                    ecs.PlacementStrategy.randomly()
-                ],
-                placement_constraints=[
-                    ecs.PlacementConstraint.member_of("blieptuut")
-                ]
-            ),
+            assign_public_ip=True,
+            container_overrides=[tasks.ContainerOverride(
+                container_definition=container_definition,
+                environment=[tasks.TaskEnvironmentVariable(name="SOME_KEY", value=sfn.JsonPath.string_at("$.SomeKey"))]
+            )],
+            launch_target=tasks.EcsFargateLaunchTarget(),
             propagated_tag_source=ecs.PropagatedTagSource.TASK_DEFINITION
         )
     '''
@@ -35688,35 +35682,29 @@ class TaskDefinitionProps(CommonTaskDefinitionProps):
                 is_default=True
             )
             
-            cluster = ecs.Cluster(self, "Ec2Cluster", vpc=vpc)
-            cluster.add_capacity("DefaultAutoScalingGroup",
-                instance_type=ec2.InstanceType("t2.micro"),
-                vpc_subnets=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PUBLIC)
-            )
+            cluster = ecs.Cluster(self, "FargateCluster", vpc=vpc)
             
             task_definition = ecs.TaskDefinition(self, "TD",
-                compatibility=ecs.Compatibility.EC2
+                memory_mi_b="512",
+                cpu="256",
+                compatibility=ecs.Compatibility.FARGATE
             )
             
-            task_definition.add_container("TheContainer",
+            container_definition = task_definition.add_container("TheContainer",
                 image=ecs.ContainerImage.from_registry("foo/bar"),
                 memory_limit_mi_b=256
             )
             
-            run_task = tasks.EcsRunTask(self, "Run",
+            run_task = tasks.EcsRunTask(self, "RunFargate",
                 integration_pattern=sfn.IntegrationPattern.RUN_JOB,
                 cluster=cluster,
                 task_definition=task_definition,
-                launch_target=tasks.EcsEc2LaunchTarget(
-                    placement_strategies=[
-                        ecs.PlacementStrategy.spread_across_instances(),
-                        ecs.PlacementStrategy.packed_by_cpu(),
-                        ecs.PlacementStrategy.randomly()
-                    ],
-                    placement_constraints=[
-                        ecs.PlacementConstraint.member_of("blieptuut")
-                    ]
-                ),
+                assign_public_ip=True,
+                container_overrides=[tasks.ContainerOverride(
+                    container_definition=container_definition,
+                    environment=[tasks.TaskEnvironmentVariable(name="SOME_KEY", value=sfn.JsonPath.string_at("$.SomeKey"))]
+                )],
+                launch_target=tasks.EcsFargateLaunchTarget(),
                 propagated_tag_source=ecs.PropagatedTagSource.TASK_DEFINITION
             )
         '''

aws_cdk/aws_elasticloadbalancingv2/__init__.py

@@ -19436,7 +19436,7 @@ class ApplicationTargetGroupProps(BaseTargetGroupProps):
         :param protocol: The protocol used for communication with the target. This is not applicable for Lambda targets. Default: - Determined from port if known
         :param protocol_version: The protocol version to use. Default: ApplicationProtocolVersion.HTTP1
         :param slow_start: The time period during which the load balancer sends a newly registered target a linearly increasing share of the traffic to the target group. The range is 30-900 seconds (15 minutes). Default: 0
-        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: Duration.days(1)
+        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: - Stickiness is disabled
         :param stickiness_cookie_name: The name of an application-based stickiness cookie. Names that start with the following prefixes are not allowed: AWSALB, AWSALBAPP, and AWSALBTG; they're reserved for use by the load balancer. Note: ``stickinessCookieName`` parameter depends on the presence of ``stickinessCookieDuration`` parameter. If ``stickinessCookieDuration`` is not set, ``stickinessCookieName`` will be omitted. Default: - If ``stickinessCookieDuration`` is set, a load-balancer generated cookie is used. Otherwise, no stickiness is defined.
         :param targets: The targets to add to this target group. Can be ``Instance``, ``IPAddress``, or any self-registering load balancing target. If you use either ``Instance`` or ``IPAddress`` as targets, all target must be of the same type. Default: - No targets.
 
@@ -19625,7 +19625,7 @@ class ApplicationTargetGroupProps(BaseTargetGroupProps):
         After this period, the cookie is considered stale. The minimum value is
         1 second and the maximum value is 7 days (604800 seconds).
 
-        :default: Duration.days(1)
+        :default: - Stickiness is disabled
         '''
         result = self._values.get("stickiness_cookie_duration")
         return typing.cast(typing.Optional[_Duration_4839e8c3], result)
@@ -22603,7 +22603,7 @@ class ApplicationTargetGroup(
         :param protocol: The protocol used for communication with the target. This is not applicable for Lambda targets. Default: - Determined from port if known
         :param protocol_version: The protocol version to use. Default: ApplicationProtocolVersion.HTTP1
         :param slow_start: The time period during which the load balancer sends a newly registered target a linearly increasing share of the traffic to the target group. The range is 30-900 seconds (15 minutes). Default: 0
-        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: Duration.days(1)
+        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: - Stickiness is disabled
         :param stickiness_cookie_name: The name of an application-based stickiness cookie. Names that start with the following prefixes are not allowed: AWSALB, AWSALBAPP, and AWSALBTG; they're reserved for use by the load balancer. Note: ``stickinessCookieName`` parameter depends on the presence of ``stickinessCookieDuration`` parameter. If ``stickinessCookieDuration`` is not set, ``stickinessCookieName`` will be omitted. Default: - If ``stickinessCookieDuration`` is set, a load-balancer generated cookie is used. Otherwise, no stickiness is defined.
         :param targets: The targets to add to this target group. Can be ``Instance``, ``IPAddress``, or any self-registering load balancing target. If you use either ``Instance`` or ``IPAddress`` as targets, all target must be of the same type. Default: - No targets.
         :param deregistration_delay: The amount of time for Elastic Load Balancing to wait before deregistering a target. The range is 0-3600 seconds. Default: 300

aws_cdk/aws_iam/__init__.py

@@ -397,6 +397,39 @@ iam.Role(self, "Role",
 )
 ```
 
+### Granting a principal permission to assume a role
+
+A principal can be granted permission to assume a role using `grantAssumeRole`.
+
+Note that this does not apply to service principals or account principals as they must be added to the role trust policy via `assumeRolePolicy`.
+
+```python
+user = iam.User(self, "user")
+role = iam.Role(self, "role",
+    assumed_by=iam.AccountPrincipal(self.account)
+)
+
+role.grant_assume_role(user)
+```
+
+### Granting service and account principals permission to assume a role
+
+Service principals and account principals can be granted permission to assume a role using `assumeRolePolicy` which modifies the role trust policy.
+
+```python
+role = iam.Role(self, "role",
+    assumed_by=iam.AccountPrincipal(self.account)
+)
+
+role.assume_role_policy.add_statements(iam.PolicyStatement(
+    actions=["sts:AssumeRole"],
+    principals=[
+        iam.AccountPrincipal("123456789"),
+        iam.ServicePrincipal("beep-boop.amazonaws.com")
+    ]
+))
+```
+
 ## Parsing JSON Policy Documents
 
 The `PolicyDocument.fromJson` and `PolicyStatement.fromJson` static methods can be used to parse JSON objects. For example:
@@ -10706,21 +10739,16 @@ class RoleProps:
 
         Example::
 
-            # Option 3: Create a new role that allows the account root principal to assume. Add this role in the `system:masters` and witch to this role from the AWS console.
-            # cluster: eks.Cluster
-            
-            
-            console_read_only_role = iam.Role(self, "ConsoleReadOnlyRole",
-                assumed_by=iam.ArnPrincipal("arn_for_trusted_principal")
+            # definition: sfn.IChainable
+            role = iam.Role(self, "Role",
+                assumed_by=iam.ServicePrincipal("lambda.amazonaws.com")
+            )
+            state_machine = sfn.StateMachine(self, "StateMachine",
+                definition_body=sfn.DefinitionBody.from_chainable(definition)
             )
-            console_read_only_role.add_to_policy(iam.PolicyStatement(
-                actions=["eks:AccessKubernetesApi", "eks:Describe*", "eks:List*"
-                ],
-                resources=[cluster.cluster_arn]
-            ))
             
-            # Add this role to system:masters RBAC group
-            cluster.aws_auth.add_masters_role(console_read_only_role)
+            # Give role permission to get execution history of ALL executions for the state machine
+            state_machine.grant_execution(role, "states:GetExecutionHistory")
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9c9223cb9fa6dff45ee4fd7013629ab18542c2499a83f542c5405968fad2287c)

aws_cdk/aws_rds/__init__.py

@@ -1443,6 +1443,21 @@ rds.DatabaseCluster(self, "DatabaseCluster",
     preferred_maintenance_window="Sat:22:15-Sat:22:45"
 )
 ```
+
+You can also set the preferred maintenance window via reader and writer props:
+
+```python
+# vpc: ec2.Vpc
+
+rds.DatabaseCluster(self, "DatabaseCluster",
+    engine=rds.DatabaseClusterEngine.AURORA,
+    vpc=vpc,
+    writer=rds.ClusterInstance.provisioned("WriterInstance",
+        preferred_maintenance_window="Sat:22:15-Sat:22:45"
+    ),
+    preferred_maintenance_window="Sat:22:15-Sat:22:45"
+)
+```
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)
@@ -17139,6 +17154,7 @@ class ClusterInstanceBindOptions:
         "parameters": "parameters",
         "performance_insight_encryption_key": "performanceInsightEncryptionKey",
         "performance_insight_retention": "performanceInsightRetention",
+        "preferred_maintenance_window": "preferredMaintenanceWindow",
         "publicly_accessible": "publiclyAccessible",
     },
 )
@@ -17156,6 +17172,7 @@ class ClusterInstanceOptions:
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional["PerformanceInsightRetention"] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
     ) -> None:
         '''Common options for creating a cluster instance.
@@ -17170,6 +17187,7 @@ class ClusterInstanceOptions:
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
 
         :exampleMetadata: fixture=_generated
@@ -17198,6 +17216,7 @@ class ClusterInstanceOptions:
                 },
                 performance_insight_encryption_key=key,
                 performance_insight_retention=rds.PerformanceInsightRetention.DEFAULT,
+                preferred_maintenance_window="preferredMaintenanceWindow",
                 publicly_accessible=False
             )
         '''
@@ -17213,6 +17232,7 @@ class ClusterInstanceOptions:
             check_type(argname="argument parameters", value=parameters, expected_type=type_hints["parameters"])
             check_type(argname="argument performance_insight_encryption_key", value=performance_insight_encryption_key, expected_type=type_hints["performance_insight_encryption_key"])
             check_type(argname="argument performance_insight_retention", value=performance_insight_retention, expected_type=type_hints["performance_insight_retention"])
+            check_type(argname="argument preferred_maintenance_window", value=preferred_maintenance_window, expected_type=type_hints["preferred_maintenance_window"])
             check_type(argname="argument publicly_accessible", value=publicly_accessible, expected_type=type_hints["publicly_accessible"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if allow_major_version_upgrade is not None:
@@ -17235,6 +17255,8 @@ class ClusterInstanceOptions:
             self._values["performance_insight_encryption_key"] = performance_insight_encryption_key
         if performance_insight_retention is not None:
             self._values["performance_insight_retention"] = performance_insight_retention
+        if preferred_maintenance_window is not None:
+            self._values["preferred_maintenance_window"] = preferred_maintenance_window
         if publicly_accessible is not None:
             self._values["publicly_accessible"] = publicly_accessible
 
@@ -17385,6 +17407,22 @@ class ClusterInstanceOptions:
         result = self._values.get("performance_insight_retention")
         return typing.cast(typing.Optional["PerformanceInsightRetention"], result)
 
+    @builtins.property
+    def preferred_maintenance_window(self) -> typing.Optional[builtins.str]:
+        '''A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC).
+
+        Example: 'Sun:23:45-Mon:00:15'
+
+        :default:
+
+        - 30-minute window selected at random from an 8-hour block of time for
+        each AWS Region, occurring on a random day of the week.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#Concepts.DBMaintenance
+        '''
+        result = self._values.get("preferred_maintenance_window")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def publicly_accessible(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether the DB instance is an internet-facing instance.
@@ -17424,6 +17462,7 @@ class ClusterInstanceOptions:
         "parameters": "parameters",
         "performance_insight_encryption_key": "performanceInsightEncryptionKey",
         "performance_insight_retention": "performanceInsightRetention",
+        "preferred_maintenance_window": "preferredMaintenanceWindow",
         "publicly_accessible": "publiclyAccessible",
         "instance_type": "instanceType",
         "promotion_tier": "promotionTier",
@@ -17443,6 +17482,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional["PerformanceInsightRetention"] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
         instance_type: "ClusterInstanceType",
         promotion_tier: typing.Optional[jsii.Number] = None,
@@ -17459,6 +17499,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
         :param instance_type: The type of cluster instance to create. Can be either provisioned or serverless v2
         :param promotion_tier: The promotion tier of the cluster instance. This matters more for serverlessV2 instances. If a serverless instance is in tier 0-1 then it will scale with the writer. For provisioned instances this just determines the failover priority. If multiple instances have the same priority then one will be picked at random Default: 2
@@ -17493,6 +17534,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
                 },
                 performance_insight_encryption_key=key,
                 performance_insight_retention=rds.PerformanceInsightRetention.DEFAULT,
+                preferred_maintenance_window="preferredMaintenanceWindow",
                 promotion_tier=123,
                 publicly_accessible=False
             )
@@ -17509,6 +17551,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
             check_type(argname="argument parameters", value=parameters, expected_type=type_hints["parameters"])
             check_type(argname="argument performance_insight_encryption_key", value=performance_insight_encryption_key, expected_type=type_hints["performance_insight_encryption_key"])
             check_type(argname="argument performance_insight_retention", value=performance_insight_retention, expected_type=type_hints["performance_insight_retention"])
+            check_type(argname="argument preferred_maintenance_window", value=preferred_maintenance_window, expected_type=type_hints["preferred_maintenance_window"])
             check_type(argname="argument publicly_accessible", value=publicly_accessible, expected_type=type_hints["publicly_accessible"])
             check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
             check_type(argname="argument promotion_tier", value=promotion_tier, expected_type=type_hints["promotion_tier"])
@@ -17535,6 +17578,8 @@ class ClusterInstanceProps(ClusterInstanceOptions):
             self._values["performance_insight_encryption_key"] = performance_insight_encryption_key
         if performance_insight_retention is not None:
             self._values["performance_insight_retention"] = performance_insight_retention
+        if preferred_maintenance_window is not None:
+            self._values["preferred_maintenance_window"] = preferred_maintenance_window
         if publicly_accessible is not None:
             self._values["publicly_accessible"] = publicly_accessible
         if promotion_tier is not None:
@@ -17687,6 +17732,22 @@ class ClusterInstanceProps(ClusterInstanceOptions):
         result = self._values.get("performance_insight_retention")
         return typing.cast(typing.Optional["PerformanceInsightRetention"], result)
 
+    @builtins.property
+    def preferred_maintenance_window(self) -> typing.Optional[builtins.str]:
+        '''A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC).
+
+        Example: 'Sun:23:45-Mon:00:15'
+
+        :default:
+
+        - 30-minute window selected at random from an 8-hour block of time for
+        each AWS Region, occurring on a random day of the week.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#Concepts.DBMaintenance
+        '''
+        result = self._values.get("preferred_maintenance_window")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def publicly_accessible(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether the DB instance is an internet-facing instance.
@@ -32949,6 +33010,7 @@ class ProcessorFeatures:
         "parameters": "parameters",
         "performance_insight_encryption_key": "performanceInsightEncryptionKey",
         "performance_insight_retention": "performanceInsightRetention",
+        "preferred_maintenance_window": "preferredMaintenanceWindow",
         "publicly_accessible": "publiclyAccessible",
         "instance_type": "instanceType",
         "promotion_tier": "promotionTier",
@@ -32968,6 +33030,7 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
         instance_type: typing.Optional[_InstanceType_f64915b9] = None,
         promotion_tier: typing.Optional[jsii.Number] = None,
@@ -32984,6 +33047,7 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
         :param instance_type: The cluster instance type. Default: db.t3.medium
         :param promotion_tier: The promotion tier of the cluster instance. Can be between 0-15 For provisioned instances this just determines the failover priority. If multiple instances have the same priority then one will be picked at random Default: 2
@@ -33022,6 +33086,7 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
             check_type(argname="argument parameters", value=parameters, expected_type=type_hints["parameters"])
             check_type(argname="argument performance_insight_encryption_key", value=performance_insight_encryption_key, expected_type=type_hints["performance_insight_encryption_key"])
             check_type(argname="argument performance_insight_retention", value=performance_insight_retention, expected_type=type_hints["performance_insight_retention"])
+            check_type(argname="argument preferred_maintenance_window", value=preferred_maintenance_window, expected_type=type_hints["preferred_maintenance_window"])
             check_type(argname="argument publicly_accessible", value=publicly_accessible, expected_type=type_hints["publicly_accessible"])
             check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
             check_type(argname="argument promotion_tier", value=promotion_tier, expected_type=type_hints["promotion_tier"])
@@ -33046,6 +33111,8 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
             self._values["performance_insight_encryption_key"] = performance_insight_encryption_key
         if performance_insight_retention is not None:
             self._values["performance_insight_retention"] = performance_insight_retention
+        if preferred_maintenance_window is not None:
+            self._values["preferred_maintenance_window"] = preferred_maintenance_window
         if publicly_accessible is not None:
             self._values["publicly_accessible"] = publicly_accessible
         if instance_type is not None:
@@ -33200,6 +33267,22 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
         result = self._values.get("performance_insight_retention")
         return typing.cast(typing.Optional[PerformanceInsightRetention], result)
 
+    @builtins.property
+    def preferred_maintenance_window(self) -> typing.Optional[builtins.str]:
+        '''A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC).
+
+        Example: 'Sun:23:45-Mon:00:15'
+
+        :default:
+
+        - 30-minute window selected at random from an 8-hour block of time for
+        each AWS Region, occurring on a random day of the week.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#Concepts.DBMaintenance
+        '''
+        result = self._values.get("preferred_maintenance_window")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def publicly_accessible(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether the DB instance is an internet-facing instance.
@@ -35156,6 +35239,7 @@ class ServerlessScalingOptions:
         "parameters": "parameters",
         "performance_insight_encryption_key": "performanceInsightEncryptionKey",
         "performance_insight_retention": "performanceInsightRetention",
+        "preferred_maintenance_window": "preferredMaintenanceWindow",
         "publicly_accessible": "publiclyAccessible",
         "scale_with_writer": "scaleWithWriter",
     },
@@ -35174,6 +35258,7 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
         scale_with_writer: typing.Optional[builtins.bool] = None,
     ) -> None:
@@ -35189,6 +35274,7 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
         :param scale_with_writer: Only applicable to reader instances. If this is true then the instance will be placed in promotion tier 1, otherwise it will be placed in promotion tier 2. For serverless v2 instances this means: - true: The serverless v2 reader will scale to match the writer instance (provisioned or serverless) - false: The serverless v2 reader will scale with the read workfload on the instance Default: false
 
@@ -35223,6 +35309,7 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
             check_type(argname="argument parameters", value=parameters, expected_type=type_hints["parameters"])
             check_type(argname="argument performance_insight_encryption_key", value=performance_insight_encryption_key, expected_type=type_hints["performance_insight_encryption_key"])
             check_type(argname="argument performance_insight_retention", value=performance_insight_retention, expected_type=type_hints["performance_insight_retention"])
+            check_type(argname="argument preferred_maintenance_window", value=preferred_maintenance_window, expected_type=type_hints["preferred_maintenance_window"])
             check_type(argname="argument publicly_accessible", value=publicly_accessible, expected_type=type_hints["publicly_accessible"])
             check_type(argname="argument scale_with_writer", value=scale_with_writer, expected_type=type_hints["scale_with_writer"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -35246,6 +35333,8 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
             self._values["performance_insight_encryption_key"] = performance_insight_encryption_key
         if performance_insight_retention is not None:
             self._values["performance_insight_retention"] = performance_insight_retention
+        if preferred_maintenance_window is not None:
+            self._values["preferred_maintenance_window"] = preferred_maintenance_window
         if publicly_accessible is not None:
             self._values["publicly_accessible"] = publicly_accessible
         if scale_with_writer is not None:
@@ -35398,6 +35487,22 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
         result = self._values.get("performance_insight_retention")
         return typing.cast(typing.Optional[PerformanceInsightRetention], result)
 
+    @builtins.property
+    def preferred_maintenance_window(self) -> typing.Optional[builtins.str]:
+        '''A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC).
+
+        Example: 'Sun:23:45-Mon:00:15'
+
+        :default:
+
+        - 30-minute window selected at random from an 8-hour block of time for
+        each AWS Region, occurring on a random day of the week.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#Concepts.DBMaintenance
+        '''
+        result = self._values.get("preferred_maintenance_window")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def publicly_accessible(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether the DB instance is an internet-facing instance.
@@ -37123,6 +37228,7 @@ class ClusterInstance(
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
     ) -> IClusterInstance:
         '''Add a provisioned instance to the cluster.
@@ -37140,6 +37246,7 @@ class ClusterInstance(
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
 
         Example::
@@ -37164,6 +37271,7 @@ class ClusterInstance(
             parameters=parameters,
             performance_insight_encryption_key=performance_insight_encryption_key,
             performance_insight_retention=performance_insight_retention,
+            preferred_maintenance_window=preferred_maintenance_window,
             publicly_accessible=publicly_accessible,
         )
 
@@ -37186,6 +37294,7 @@ class ClusterInstance(
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
     ) -> IClusterInstance:
         '''Add a serverless v2 instance to the cluster.
@@ -37202,6 +37311,7 @@ class ClusterInstance(
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
 
         Example::
@@ -37225,6 +37335,7 @@ class ClusterInstance(
             parameters=parameters,
             performance_insight_encryption_key=performance_insight_encryption_key,
             performance_insight_retention=performance_insight_retention,
+            preferred_maintenance_window=preferred_maintenance_window,
             publicly_accessible=publicly_accessible,
         )
 
@@ -45589,6 +45700,7 @@ def _typecheckingstub__8cdde1ea7f85160803079277e8fcc0af34768579c1b17b771033b3c63
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
@@ -45606,6 +45718,7 @@ def _typecheckingstub__431d59239caf38b9912bfae3130d40eeb8bdb18e013240bac43c98015
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
     instance_type: ClusterInstanceType,
     promotion_tier: typing.Optional[jsii.Number] = None,
@@ -46469,6 +46582,7 @@ def _typecheckingstub__0d5c78a39da629a585066921d3ee78da795285acdbebe6935198fc929
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
     instance_type: typing.Optional[_InstanceType_f64915b9] = None,
     promotion_tier: typing.Optional[jsii.Number] = None,
@@ -46707,6 +46821,7 @@ def _typecheckingstub__c8fd71a155386e8ce12e74b8c5684dfdd43d26e347ef8bbb979e8a2c3
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
     scale_with_writer: typing.Optional[builtins.bool] = None,
 ) -> None:
@@ -46842,6 +46957,7 @@ def _typecheckingstub__d0d2cd14a2c7ed00bfb6fd9860c31cd0b1af1bff8343258b1b4a8d847
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
@@ -46861,6 +46977,7 @@ def _typecheckingstub__95714f22d2724c29931e2710712a92b10932588d2061fa1ceed93097e
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""

aws_cdk/aws_stepfunctions_tasks/__init__.py

@@ -627,6 +627,34 @@ run_task = tasks.EcsRunTask(self, "RunFargate",
 )
 ```
 
+#### ECS enable Exec
+
+By setting the property [`enableExecuteCommand`](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RunTask.html#ECS-RunTask-request-enableExecuteCommand) to `true`, you can enable the [ECS Exec feature](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.html) for the task for either Fargate or EC2 launch types.
+
+```python
+vpc = ec2.Vpc.from_lookup(self, "Vpc",
+    is_default=True
+)
+cluster = ecs.Cluster(self, "ECSCluster", vpc=vpc)
+
+task_definition = ecs.TaskDefinition(self, "TD",
+    compatibility=ecs.Compatibility.EC2
+)
+
+task_definition.add_container("TheContainer",
+    image=ecs.ContainerImage.from_registry("foo/bar"),
+    memory_limit_mi_b=256
+)
+
+run_task = tasks.EcsRunTask(self, "Run",
+    integration_pattern=sfn.IntegrationPattern.RUN_JOB,
+    cluster=cluster,
+    task_definition=task_definition,
+    launch_target=tasks.EcsEc2LaunchTarget(),
+    enable_execute_command=True
+)
+```
+
 ## EMR
 
 Step Functions supports Amazon EMR through the service integration pattern.
@@ -11829,35 +11857,29 @@ class EcsRunTask(
             is_default=True
         )
         
-        cluster = ecs.Cluster(self, "Ec2Cluster", vpc=vpc)
-        cluster.add_capacity("DefaultAutoScalingGroup",
-            instance_type=ec2.InstanceType("t2.micro"),
-            vpc_subnets=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PUBLIC)
-        )
+        cluster = ecs.Cluster(self, "FargateCluster", vpc=vpc)
         
         task_definition = ecs.TaskDefinition(self, "TD",
-            compatibility=ecs.Compatibility.EC2
+            memory_mi_b="512",
+            cpu="256",
+            compatibility=ecs.Compatibility.FARGATE
         )
         
-        task_definition.add_container("TheContainer",
+        container_definition = task_definition.add_container("TheContainer",
             image=ecs.ContainerImage.from_registry("foo/bar"),
             memory_limit_mi_b=256
         )
         
-        run_task = tasks.EcsRunTask(self, "Run",
+        run_task = tasks.EcsRunTask(self, "RunFargate",
             integration_pattern=sfn.IntegrationPattern.RUN_JOB,
             cluster=cluster,
             task_definition=task_definition,
-            launch_target=tasks.EcsEc2LaunchTarget(
-                placement_strategies=[
-                    ecs.PlacementStrategy.spread_across_instances(),
-                    ecs.PlacementStrategy.packed_by_cpu(),
-                    ecs.PlacementStrategy.randomly()
-                ],
-                placement_constraints=[
-                    ecs.PlacementConstraint.member_of("blieptuut")
-                ]
-            ),
+            assign_public_ip=True,
+            container_overrides=[tasks.ContainerOverride(
+                container_definition=container_definition,
+                environment=[tasks.TaskEnvironmentVariable(name="SOME_KEY", value=sfn.JsonPath.string_at("$.SomeKey"))]
+            )],
+            launch_target=tasks.EcsFargateLaunchTarget(),
             propagated_tag_source=ecs.PropagatedTagSource.TASK_DEFINITION
         )
     '''
@@ -11872,6 +11894,7 @@ class EcsRunTask(
         task_definition: _TaskDefinition_a541a103,
         assign_public_ip: typing.Optional[builtins.bool] = None,
         container_overrides: typing.Optional[typing.Sequence[typing.Union[ContainerOverride, typing.Dict[builtins.str, typing.Any]]]] = None,
+        enable_execute_command: typing.Optional[builtins.bool] = None,
         propagated_tag_source: typing.Optional[_PropagatedTagSource_ad4e874a] = None,
         revision_number: typing.Optional[jsii.Number] = None,
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
@@ -11897,8 +11920,9 @@ class EcsRunTask(
         :param task_definition: [disable-awslint:ref-via-interface] Task Definition used for running tasks in the service. Note: this must be TaskDefinition, and not ITaskDefinition, as it requires properties that are not known for imported task definitions If you want to run a RunTask with an imported task definition, consider using CustomState
         :param assign_public_ip: Assign public IP addresses to each task. Default: false
         :param container_overrides: Container setting overrides. Specify the container to use and the overrides to apply. Default: - No overrides
+        :param enable_execute_command: Whether ECS Exec should be enabled. Default: false
         :param propagated_tag_source: Specifies whether to propagate the tags from the task definition to the task. An error will be received if you specify the SERVICE option when running a task. Default: - No tags are propagated.
-        :param revision_number: The revision number of ECS task definiton family. Default: - '$latest'
+        :param revision_number: The revision number of ECS task definition family. Default: - '$latest'
         :param security_groups: Existing security groups to use for the tasks. Default: - A new security group is created
         :param subnets: Subnets to place the task's ENIs. Default: - Public subnets if assignPublicIp is set. Private subnets otherwise.
         :param comment: An optional description for this state. Default: - No comment
@@ -11924,6 +11948,7 @@ class EcsRunTask(
             task_definition=task_definition,
             assign_public_ip=assign_public_ip,
             container_overrides=container_overrides,
+            enable_execute_command=enable_execute_command,
             propagated_tag_source=propagated_tag_source,
             revision_number=revision_number,
             security_groups=security_groups,
@@ -11982,6 +12007,7 @@ class EcsRunTask(
         "task_definition": "taskDefinition",
         "assign_public_ip": "assignPublicIp",
         "container_overrides": "containerOverrides",
+        "enable_execute_command": "enableExecuteCommand",
         "propagated_tag_source": "propagatedTagSource",
         "revision_number": "revisionNumber",
         "security_groups": "securityGroups",
@@ -12009,6 +12035,7 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
         task_definition: _TaskDefinition_a541a103,
         assign_public_ip: typing.Optional[builtins.bool] = None,
         container_overrides: typing.Optional[typing.Sequence[typing.Union[ContainerOverride, typing.Dict[builtins.str, typing.Any]]]] = None,
+        enable_execute_command: typing.Optional[builtins.bool] = None,
         propagated_tag_source: typing.Optional[_PropagatedTagSource_ad4e874a] = None,
         revision_number: typing.Optional[jsii.Number] = None,
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
@@ -12033,8 +12060,9 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
         :param task_definition: [disable-awslint:ref-via-interface] Task Definition used for running tasks in the service. Note: this must be TaskDefinition, and not ITaskDefinition, as it requires properties that are not known for imported task definitions If you want to run a RunTask with an imported task definition, consider using CustomState
         :param assign_public_ip: Assign public IP addresses to each task. Default: false
         :param container_overrides: Container setting overrides. Specify the container to use and the overrides to apply. Default: - No overrides
+        :param enable_execute_command: Whether ECS Exec should be enabled. Default: false
         :param propagated_tag_source: Specifies whether to propagate the tags from the task definition to the task. An error will be received if you specify the SERVICE option when running a task. Default: - No tags are propagated.
-        :param revision_number: The revision number of ECS task definiton family. Default: - '$latest'
+        :param revision_number: The revision number of ECS task definition family. Default: - '$latest'
         :param security_groups: Existing security groups to use for the tasks. Default: - A new security group is created
         :param subnets: Subnets to place the task's ENIs. Default: - Public subnets if assignPublicIp is set. Private subnets otherwise.
 
@@ -12046,35 +12074,29 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
                 is_default=True
             )
             
-            cluster = ecs.Cluster(self, "Ec2Cluster", vpc=vpc)
-            cluster.add_capacity("DefaultAutoScalingGroup",
-                instance_type=ec2.InstanceType("t2.micro"),
-                vpc_subnets=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PUBLIC)
-            )
+            cluster = ecs.Cluster(self, "FargateCluster", vpc=vpc)
             
             task_definition = ecs.TaskDefinition(self, "TD",
-                compatibility=ecs.Compatibility.EC2
+                memory_mi_b="512",
+                cpu="256",
+                compatibility=ecs.Compatibility.FARGATE
             )
             
-            task_definition.add_container("TheContainer",
+            container_definition = task_definition.add_container("TheContainer",
                 image=ecs.ContainerImage.from_registry("foo/bar"),
                 memory_limit_mi_b=256
             )
             
-            run_task = tasks.EcsRunTask(self, "Run",
+            run_task = tasks.EcsRunTask(self, "RunFargate",
                 integration_pattern=sfn.IntegrationPattern.RUN_JOB,
                 cluster=cluster,
                 task_definition=task_definition,
-                launch_target=tasks.EcsEc2LaunchTarget(
-                    placement_strategies=[
-                        ecs.PlacementStrategy.spread_across_instances(),
-                        ecs.PlacementStrategy.packed_by_cpu(),
-                        ecs.PlacementStrategy.randomly()
-                    ],
-                    placement_constraints=[
-                        ecs.PlacementConstraint.member_of("blieptuut")
-                    ]
-                ),
+                assign_public_ip=True,
+                container_overrides=[tasks.ContainerOverride(
+                    container_definition=container_definition,
+                    environment=[tasks.TaskEnvironmentVariable(name="SOME_KEY", value=sfn.JsonPath.string_at("$.SomeKey"))]
+                )],
+                launch_target=tasks.EcsFargateLaunchTarget(),
                 propagated_tag_source=ecs.PropagatedTagSource.TASK_DEFINITION
             )
         '''
@@ -12101,6 +12123,7 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
             check_type(argname="argument task_definition", value=task_definition, expected_type=type_hints["task_definition"])
             check_type(argname="argument assign_public_ip", value=assign_public_ip, expected_type=type_hints["assign_public_ip"])
             check_type(argname="argument container_overrides", value=container_overrides, expected_type=type_hints["container_overrides"])
+            check_type(argname="argument enable_execute_command", value=enable_execute_command, expected_type=type_hints["enable_execute_command"])
             check_type(argname="argument propagated_tag_source", value=propagated_tag_source, expected_type=type_hints["propagated_tag_source"])
             check_type(argname="argument revision_number", value=revision_number, expected_type=type_hints["revision_number"])
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
@@ -12138,6 +12161,8 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
             self._values["assign_public_ip"] = assign_public_ip
         if container_overrides is not None:
             self._values["container_overrides"] = container_overrides
+        if enable_execute_command is not None:
+            self._values["enable_execute_command"] = enable_execute_command
         if propagated_tag_source is not None:
             self._values["propagated_tag_source"] = propagated_tag_source
         if revision_number is not None:
@@ -12352,6 +12377,17 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
         result = self._values.get("container_overrides")
         return typing.cast(typing.Optional[typing.List[ContainerOverride]], result)
 
+    @builtins.property
+    def enable_execute_command(self) -> typing.Optional[builtins.bool]:
+        '''Whether ECS Exec should be enabled.
+
+        :default: false
+
+        :see: https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RunTask.html#ECS-RunTask-request-enableExecuteCommand
+        '''
+        result = self._values.get("enable_execute_command")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def propagated_tag_source(self) -> typing.Optional[_PropagatedTagSource_ad4e874a]:
         '''Specifies whether to propagate the tags from the task definition to the task.
@@ -12367,7 +12403,7 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
 
     @builtins.property
     def revision_number(self) -> typing.Optional[jsii.Number]:
-        '''The revision number of ECS task definiton family.
+        '''The revision number of ECS task definition family.
 
         :default: - '$latest'
         '''
@@ -33287,6 +33323,7 @@ def _typecheckingstub__1b9fa1de6876853cd0aa59517079cbcfc7017daf643f17b13556a7a5f
     task_definition: _TaskDefinition_a541a103,
     assign_public_ip: typing.Optional[builtins.bool] = None,
     container_overrides: typing.Optional[typing.Sequence[typing.Union[ContainerOverride, typing.Dict[builtins.str, typing.Any]]]] = None,
+    enable_execute_command: typing.Optional[builtins.bool] = None,
     propagated_tag_source: typing.Optional[_PropagatedTagSource_ad4e874a] = None,
     revision_number: typing.Optional[jsii.Number] = None,
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
@@ -33326,6 +33363,7 @@ def _typecheckingstub__4f880997570006602fac387ce93510039132ec3f42612722766b67ec6
     task_definition: _TaskDefinition_a541a103,
     assign_public_ip: typing.Optional[builtins.bool] = None,
     container_overrides: typing.Optional[typing.Sequence[typing.Union[ContainerOverride, typing.Dict[builtins.str, typing.Any]]]] = None,
+    enable_execute_command: typing.Optional[builtins.bool] = None,
     propagated_tag_source: typing.Optional[_PropagatedTagSource_ad4e874a] = None,
     revision_number: typing.Optional[jsii.Number] = None,
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,

{aws_cdk_lib-2.135.0.dist-info → aws_cdk_lib-2.136.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: aws-cdk-lib
-Version: 2.135.0
+Version: 2.136.0
 Summary: Version 2 of the AWS Cloud Development Kit library
 Home-page: https://github.com/aws/aws-cdk
 Author: Amazon Web Services

{aws_cdk_lib-2.135.0.dist-info → aws_cdk_lib-2.136.0.dist-info}/RECORD

@@ -1,7 +1,7 @@
 aws_cdk/__init__.py,sha256=EILyfztBG_btjqeD30LwG97qU9u2gxuJEaZ5KC901jI,1789178
 aws_cdk/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
-aws_cdk/_jsii/__init__.py,sha256=P_Z7uuwlG_sE9mZccSdcOFZW9GbA3w9rnBd__EaaiVo,571
-aws_cdk/_jsii/aws-cdk-lib@2.135.0.jsii.tgz,sha256=cttD71ophy4wNALjzv-H49l0Q1WgRF5zNX1OaHjcC8c,21504121
+aws_cdk/_jsii/__init__.py,sha256=cKXkfq8Wl1xASxFSdhAze0pwiHppT1d3l6mxd83gmYY,571
+aws_cdk/_jsii/aws-cdk-lib@2.136.0.jsii.tgz,sha256=KV0zeNFso7GiB0UJwbnK53DNKkuEFjpxUfhmA-GeYiE,21505935
 aws_cdk/alexa_ask/__init__.py,sha256=XIdNYPkbGyRD8clfb_qolycbFSGooWWn71wTtsEnW-U,35287
 aws_cdk/assertions/__init__.py,sha256=2OloHwZ-ipWeAuFTUn25gRLBALeML8yC58pMoQZem9k,86590
 aws_cdk/aws_accessanalyzer/__init__.py,sha256=JiAHhmac9YzpELf-_UvGm7nfxopSF-mJ80UcwF-qUW0,41881
@@ -83,17 +83,17 @@ aws_cdk/aws_dms/__init__.py,sha256=n0eIsAwBK8h5xWajU1dyEqS_361IrCKLuOGmeMobCAA,9
 aws_cdk/aws_docdb/__init__.py,sha256=7F4X8cjnIHqmwIrd16PSSFyc99ai7bP15boHmqqzH9I,304441
 aws_cdk/aws_docdbelastic/__init__.py,sha256=eJc7qeGj4xI8KN4Wz4hopMtyh91WtFQH-bBd0hJ4zL0,45245
 aws_cdk/aws_dynamodb/__init__.py,sha256=lbuKpxT2nEdAHWaaHQ4k-5oEkce4P1o9uBVHKfHIPME,871690
-aws_cdk/aws_ec2/__init__.py,sha256=kr92jL1rzuCBEwK24l71BGhAeD3Wf1c_XUXZAeOUbWQ,5637261
+aws_cdk/aws_ec2/__init__.py,sha256=n5s21kkDBbRcfSmN07y9vw8FH9WtEACfjTixuoTn9Go,5636980
 aws_cdk/aws_ecr/__init__.py,sha256=GOs0P-mQgnsTEIsxBZZb2cqpSS9QXEZ65PlpKiJpZzg,256631
 aws_cdk/aws_ecr_assets/__init__.py,sha256=AuQUpqkjGMWWWHbme1ncvg-AfJ0JC0aFGKqOgeVIGb8,83435
-aws_cdk/aws_ecs/__init__.py,sha256=iGpOQCMq3xC5kcAoYUl9sIEtxn-Ybo0qYCEyx5R3tDk,2551815
+aws_cdk/aws_ecs/__init__.py,sha256=gkI5o6ksdwAwTcDe7QpvZJXX4gqAaHcZZnxeR3FrRGs,2551403
 aws_cdk/aws_ecs_patterns/__init__.py,sha256=eWckZD218qBUDWJI2RllklmFBydK7_CSkNGFFD6KNPk,1010533
 aws_cdk/aws_efs/__init__.py,sha256=W6CVbL1DnAvGjGqJOi6hRRADI60mOb01-0pmp6SpXBQ,249529
 aws_cdk/aws_eks/__init__.py,sha256=5O7cleodxZhDGvel-8bpNUVoR6o7IvQwt4SprFDLhRk,1040236
 aws_cdk/aws_elasticache/__init__.py,sha256=TA6UdAIOrqbZGjEKIhO1cwdK3X9UjcVdsdDWsXNbJJw,513758
 aws_cdk/aws_elasticbeanstalk/__init__.py,sha256=KcmYUeZ_fyv0XeIRGVVpMCT8DXRUAsJ19e2YPWpwx_M,163534
 aws_cdk/aws_elasticloadbalancing/__init__.py,sha256=8qwxOkzQngub3XUwl-eYG7Cp2EjfT2YfU8aC5OspTas,161551
-aws_cdk/aws_elasticloadbalancingv2/__init__.py,sha256=9V_Ze0gixKk-bSGF9fEBwXhJpSj6d5eazjmxOBRJfd0,1470751
+aws_cdk/aws_elasticloadbalancingv2/__init__.py,sha256=Q18eOjto73dxKwWYXvDOWdGiDCSUuVf0BD2QdHAVjDU,1470775
 aws_cdk/aws_elasticloadbalancingv2_actions/__init__.py,sha256=SJaY1n50p_aolBix4TfAWYMz127avptt2Ke_bMRvqeQ,22484
 aws_cdk/aws_elasticloadbalancingv2_targets/__init__.py,sha256=sczJKgB6_N37Dcsmgt0jjeTi-0j_Jx21bFZFTybGd0g,20087
 aws_cdk/aws_elasticsearch/__init__.py,sha256=9jDze4wqFz94THwdNu11xotSLNPhm3IX-7X7zuZkIyU,463992
@@ -122,7 +122,7 @@ aws_cdk/aws_groundstation/__init__.py,sha256=DcXMEPFI9JqNI20BksSJFUW2knCC_w_zVkz
 aws_cdk/aws_guardduty/__init__.py,sha256=PMagRU40yo3ETHE-biq4GaR6pku3UG2KE1kUweQCunk,187466
 aws_cdk/aws_healthimaging/__init__.py,sha256=n9A-y3ThapiaP4W2Hn-eEqeczO7NikwU9A9K9gk5Fdg,16327
 aws_cdk/aws_healthlake/__init__.py,sha256=FiGWCTUmCFyT2am3vG1FnOujfZA5S7Ju06NccHyk8GA,53252
-aws_cdk/aws_iam/__init__.py,sha256=Vsx_jsOU_EHWPnTaQyOJEH8n6Ib9UUceqfe63qOefmA,840195
+aws_cdk/aws_iam/__init__.py,sha256=SrT4wtGW_mzPNUTiIJn1s0qw8t5_JIrxQEonVXbAaUU,840918
 aws_cdk/aws_identitystore/__init__.py,sha256=vCJj4HJqjN9jzD68ht8eEJ8VYnNz91ST096ggWwLmr4,29890
 aws_cdk/aws_imagebuilder/__init__.py,sha256=2poYFrCnjPFl8VopkrP4u4VVeqEJAVmhvH9xSok7_8g,572611
 aws_cdk/aws_inspector/__init__.py,sha256=v1EteXsxA4DV26sR6tBayxXl6H12dhTlPSJRlBHCDo8,43239
@@ -200,7 +200,7 @@ aws_cdk/aws_proton/__init__.py,sha256=4sdkMrigXGguoDXvO0cKdH8UvmziYPCzi-sj8jLrxK
 aws_cdk/aws_qldb/__init__.py,sha256=k0v3F43pVRo5y79oLlCjSiw-jg_5GhaAVYWoKpEr4Vo,62400
 aws_cdk/aws_quicksight/__init__.py,sha256=RgEZFieJhlehY6sXHo8AAZKkrr9V0-gg3uv-md1UsCk,13455186
 aws_cdk/aws_ram/__init__.py,sha256=hQ1UdFI0v6s0ipdeuqGRhqCNktzB1z8vRkiDqXDmwvc,50223
-aws_cdk/aws_rds/__init__.py,sha256=gomlqPFJpOM5FPMCv2yR15hifa9V95cjEDOtj5-JloI,2647104
+aws_cdk/aws_rds/__init__.py,sha256=-k-peDpeL1PCjznhP0coHFyhPeuQ6RjF7zwmSSa7lzs,2655044
 aws_cdk/aws_redshift/__init__.py,sha256=ddQBZwny5kRQLUqy_pzbvcK5AKvV3QF0SiiwWfCdREA,376652
 aws_cdk/aws_redshiftserverless/__init__.py,sha256=5NsfPwPK2px8k6hqirOS0ucXSEb3nNpKP0DYQFf2IEE,149232
 aws_cdk/aws_refactorspaces/__init__.py,sha256=MB29dWJ8rWEkkaVrgWR2lRQzFWZ6hPb1TJ3AtGvB6iw,121468
@@ -247,7 +247,7 @@ aws_cdk/aws_ssmcontacts/__init__.py,sha256=0z_DVW5PbB2Uq7uh0vQ-WUnaIeQQduKkP0yZR
 aws_cdk/aws_ssmincidents/__init__.py,sha256=aD5m9b9FnQW8J0BbRz3N6fKOLt0w7JD_TYnULHUy-xo,112134
 aws_cdk/aws_sso/__init__.py,sha256=_qRuDxliSasWx8V9Zmddq6afYiHF29AbHSmA-rK6m6k,99603
 aws_cdk/aws_stepfunctions/__init__.py,sha256=yGU76N_BfdFyvEGhQGIIYhxdXqeqU1wDjJ_fIF5L_Oo,873411
-aws_cdk/aws_stepfunctions_tasks/__init__.py,sha256=y_8wHlsymutwD5H7sgQeAATCe6SVm76-dgKe4hBh_IY,1827161
+aws_cdk/aws_stepfunctions_tasks/__init__.py,sha256=WNrPCFjMinlr4fvFETNdhA16XNmcziW2vS6YMCEWFdU,1828985
 aws_cdk/aws_supportapp/__init__.py,sha256=rfecThA_tsuYGkYyB0YPpujfZzpIUgYKyAOtgh6UAxA,48022
 aws_cdk/aws_synthetics/__init__.py,sha256=5xu9jEMjK0RDgQe2BDuZszVGjF50p_m0a2Y2UlIzTy4,237398
 aws_cdk/aws_systemsmanagersap/__init__.py,sha256=ZOn0Gl43HvEuxSyhBBBw3gtTBnRqhTGggdJjaG6mByc,29487
@@ -274,9 +274,9 @@ aws_cdk/lambda_layer_node_proxy_agent/__init__.py,sha256=L2O5Aen4xESrAMU07go5NB0
 aws_cdk/pipelines/__init__.py,sha256=fnbq8c0wOp2MkA20blCIsyrhrYNgZB5OjmsuH4e9BkQ,398736
 aws_cdk/region_info/__init__.py,sha256=N-HdesRpLDoe1UOQOzVX7bea6z2jZijx4SybmdgdsI4,37857
 aws_cdk/triggers/__init__.py,sha256=w78wLbTJPhCIx2D2VWnle5AXqs5FRVbts9Uoi-7q_yU,115432
-aws_cdk_lib-2.135.0.dist-info/LICENSE,sha256=kEDF86xJUQh1E9M7UPKKbHepBEdFxIUyoGfTwQB7zKg,11391
-aws_cdk_lib-2.135.0.dist-info/METADATA,sha256=ZYlOwXXXafrAp9UDUc7vfiMwBB0n8qpx6tRTNMdON88,59322
-aws_cdk_lib-2.135.0.dist-info/NOTICE,sha256=Irn92Qln1GDSjTx0CQqiOXM94Z9jgbvnq8rfk50NQ-4,42502
-aws_cdk_lib-2.135.0.dist-info/WHEEL,sha256=Xo9-1PvkuimrydujYJAjF7pCkriuXBpUPEjma1nZyJ0,92
-aws_cdk_lib-2.135.0.dist-info/top_level.txt,sha256=1TALAKbuUGsMSrfKWEf268lySCmcqSEO6cDYe_XlLHM,8
-aws_cdk_lib-2.135.0.dist-info/RECORD,,
+aws_cdk_lib-2.136.0.dist-info/LICENSE,sha256=kEDF86xJUQh1E9M7UPKKbHepBEdFxIUyoGfTwQB7zKg,11391
+aws_cdk_lib-2.136.0.dist-info/METADATA,sha256=UihTmhBSGVka5JL1_j_mIpOq6YTua3bCsgWpammC20s,59322
+aws_cdk_lib-2.136.0.dist-info/NOTICE,sha256=Irn92Qln1GDSjTx0CQqiOXM94Z9jgbvnq8rfk50NQ-4,42502
+aws_cdk_lib-2.136.0.dist-info/WHEEL,sha256=Xo9-1PvkuimrydujYJAjF7pCkriuXBpUPEjma1nZyJ0,92
+aws_cdk_lib-2.136.0.dist-info/top_level.txt,sha256=1TALAKbuUGsMSrfKWEf268lySCmcqSEO6cDYe_XlLHM,8
+aws_cdk_lib-2.136.0.dist-info/RECORD,,