aws-cdk-lib 2.135.0__py3-none-any.whl → 2.136.1__py3-none-any.whl

aws_cdk/aws_ecs/__init__.py

@@ -18900,35 +18900,29 @@ class Compatibility(enum.Enum):
             is_default=True
         )
         
-        cluster = ecs.Cluster(self, "Ec2Cluster", vpc=vpc)
-        cluster.add_capacity("DefaultAutoScalingGroup",
-            instance_type=ec2.InstanceType("t2.micro"),
-            vpc_subnets=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PUBLIC)
-        )
+        cluster = ecs.Cluster(self, "FargateCluster", vpc=vpc)
         
         task_definition = ecs.TaskDefinition(self, "TD",
-            compatibility=ecs.Compatibility.EC2
+            memory_mi_b="512",
+            cpu="256",
+            compatibility=ecs.Compatibility.FARGATE
         )
         
-        task_definition.add_container("TheContainer",
+        container_definition = task_definition.add_container("TheContainer",
             image=ecs.ContainerImage.from_registry("foo/bar"),
             memory_limit_mi_b=256
         )
         
-        run_task = tasks.EcsRunTask(self, "Run",
+        run_task = tasks.EcsRunTask(self, "RunFargate",
             integration_pattern=sfn.IntegrationPattern.RUN_JOB,
             cluster=cluster,
             task_definition=task_definition,
-            launch_target=tasks.EcsEc2LaunchTarget(
-                placement_strategies=[
-                    ecs.PlacementStrategy.spread_across_instances(),
-                    ecs.PlacementStrategy.packed_by_cpu(),
-                    ecs.PlacementStrategy.randomly()
-                ],
-                placement_constraints=[
-                    ecs.PlacementConstraint.member_of("blieptuut")
-                ]
-            ),
+            assign_public_ip=True,
+            container_overrides=[tasks.ContainerOverride(
+                container_definition=container_definition,
+                environment=[tasks.TaskEnvironmentVariable(name="SOME_KEY", value=sfn.JsonPath.string_at("$.SomeKey"))]
+            )],
+            launch_target=tasks.EcsFargateLaunchTarget(),
             propagated_tag_source=ecs.PropagatedTagSource.TASK_DEFINITION
         )
     '''
@@ -35688,35 +35682,29 @@ class TaskDefinitionProps(CommonTaskDefinitionProps):
                 is_default=True
             )
             
-            cluster = ecs.Cluster(self, "Ec2Cluster", vpc=vpc)
-            cluster.add_capacity("DefaultAutoScalingGroup",
-                instance_type=ec2.InstanceType("t2.micro"),
-                vpc_subnets=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PUBLIC)
-            )
+            cluster = ecs.Cluster(self, "FargateCluster", vpc=vpc)
             
             task_definition = ecs.TaskDefinition(self, "TD",
-                compatibility=ecs.Compatibility.EC2
+                memory_mi_b="512",
+                cpu="256",
+                compatibility=ecs.Compatibility.FARGATE
             )
             
-            task_definition.add_container("TheContainer",
+            container_definition = task_definition.add_container("TheContainer",
                 image=ecs.ContainerImage.from_registry("foo/bar"),
                 memory_limit_mi_b=256
             )
             
-            run_task = tasks.EcsRunTask(self, "Run",
+            run_task = tasks.EcsRunTask(self, "RunFargate",
                 integration_pattern=sfn.IntegrationPattern.RUN_JOB,
                 cluster=cluster,
                 task_definition=task_definition,
-                launch_target=tasks.EcsEc2LaunchTarget(
-                    placement_strategies=[
-                        ecs.PlacementStrategy.spread_across_instances(),
-                        ecs.PlacementStrategy.packed_by_cpu(),
-                        ecs.PlacementStrategy.randomly()
-                    ],
-                    placement_constraints=[
-                        ecs.PlacementConstraint.member_of("blieptuut")
-                    ]
-                ),
+                assign_public_ip=True,
+                container_overrides=[tasks.ContainerOverride(
+                    container_definition=container_definition,
+                    environment=[tasks.TaskEnvironmentVariable(name="SOME_KEY", value=sfn.JsonPath.string_at("$.SomeKey"))]
+                )],
+                launch_target=tasks.EcsFargateLaunchTarget(),
                 propagated_tag_source=ecs.PropagatedTagSource.TASK_DEFINITION
             )
         '''

aws_cdk/aws_elasticloadbalancingv2/__init__.py

@@ -19436,7 +19436,7 @@ class ApplicationTargetGroupProps(BaseTargetGroupProps):
         :param protocol: The protocol used for communication with the target. This is not applicable for Lambda targets. Default: - Determined from port if known
         :param protocol_version: The protocol version to use. Default: ApplicationProtocolVersion.HTTP1
         :param slow_start: The time period during which the load balancer sends a newly registered target a linearly increasing share of the traffic to the target group. The range is 30-900 seconds (15 minutes). Default: 0
-        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: Duration.days(1)
+        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: - Stickiness is disabled
         :param stickiness_cookie_name: The name of an application-based stickiness cookie. Names that start with the following prefixes are not allowed: AWSALB, AWSALBAPP, and AWSALBTG; they're reserved for use by the load balancer. Note: ``stickinessCookieName`` parameter depends on the presence of ``stickinessCookieDuration`` parameter. If ``stickinessCookieDuration`` is not set, ``stickinessCookieName`` will be omitted. Default: - If ``stickinessCookieDuration`` is set, a load-balancer generated cookie is used. Otherwise, no stickiness is defined.
         :param targets: The targets to add to this target group. Can be ``Instance``, ``IPAddress``, or any self-registering load balancing target. If you use either ``Instance`` or ``IPAddress`` as targets, all target must be of the same type. Default: - No targets.
 
@@ -19625,7 +19625,7 @@ class ApplicationTargetGroupProps(BaseTargetGroupProps):
         After this period, the cookie is considered stale. The minimum value is
         1 second and the maximum value is 7 days (604800 seconds).
 
-        :default: Duration.days(1)
+        :default: - Stickiness is disabled
         '''
         result = self._values.get("stickiness_cookie_duration")
         return typing.cast(typing.Optional[_Duration_4839e8c3], result)
@@ -22603,7 +22603,7 @@ class ApplicationTargetGroup(
         :param protocol: The protocol used for communication with the target. This is not applicable for Lambda targets. Default: - Determined from port if known
         :param protocol_version: The protocol version to use. Default: ApplicationProtocolVersion.HTTP1
         :param slow_start: The time period during which the load balancer sends a newly registered target a linearly increasing share of the traffic to the target group. The range is 30-900 seconds (15 minutes). Default: 0
-        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: Duration.days(1)
+        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: - Stickiness is disabled
         :param stickiness_cookie_name: The name of an application-based stickiness cookie. Names that start with the following prefixes are not allowed: AWSALB, AWSALBAPP, and AWSALBTG; they're reserved for use by the load balancer. Note: ``stickinessCookieName`` parameter depends on the presence of ``stickinessCookieDuration`` parameter. If ``stickinessCookieDuration`` is not set, ``stickinessCookieName`` will be omitted. Default: - If ``stickinessCookieDuration`` is set, a load-balancer generated cookie is used. Otherwise, no stickiness is defined.
         :param targets: The targets to add to this target group. Can be ``Instance``, ``IPAddress``, or any self-registering load balancing target. If you use either ``Instance`` or ``IPAddress`` as targets, all target must be of the same type. Default: - No targets.
         :param deregistration_delay: The amount of time for Elastic Load Balancing to wait before deregistering a target. The range is 0-3600 seconds. Default: 300

aws_cdk/aws_iam/__init__.py

@@ -397,6 +397,39 @@ iam.Role(self, "Role",
 )
 ```
 
+### Granting a principal permission to assume a role
+
+A principal can be granted permission to assume a role using `grantAssumeRole`.
+
+Note that this does not apply to service principals or account principals as they must be added to the role trust policy via `assumeRolePolicy`.
+
+```python
+user = iam.User(self, "user")
+role = iam.Role(self, "role",
+    assumed_by=iam.AccountPrincipal(self.account)
+)
+
+role.grant_assume_role(user)
+```
+
+### Granting service and account principals permission to assume a role
+
+Service principals and account principals can be granted permission to assume a role using `assumeRolePolicy` which modifies the role trust policy.
+
+```python
+role = iam.Role(self, "role",
+    assumed_by=iam.AccountPrincipal(self.account)
+)
+
+role.assume_role_policy.add_statements(iam.PolicyStatement(
+    actions=["sts:AssumeRole"],
+    principals=[
+        iam.AccountPrincipal("123456789"),
+        iam.ServicePrincipal("beep-boop.amazonaws.com")
+    ]
+))
+```
+
 ## Parsing JSON Policy Documents
 
 The `PolicyDocument.fromJson` and `PolicyStatement.fromJson` static methods can be used to parse JSON objects. For example:
@@ -10706,21 +10739,16 @@ class RoleProps:
 
         Example::
 
-            # Option 3: Create a new role that allows the account root principal to assume. Add this role in the `system:masters` and witch to this role from the AWS console.
-            # cluster: eks.Cluster
-            
-            
-            console_read_only_role = iam.Role(self, "ConsoleReadOnlyRole",
-                assumed_by=iam.ArnPrincipal("arn_for_trusted_principal")
+            # definition: sfn.IChainable
+            role = iam.Role(self, "Role",
+                assumed_by=iam.ServicePrincipal("lambda.amazonaws.com")
+            )
+            state_machine = sfn.StateMachine(self, "StateMachine",
+                definition_body=sfn.DefinitionBody.from_chainable(definition)
             )
-            console_read_only_role.add_to_policy(iam.PolicyStatement(
-                actions=["eks:AccessKubernetesApi", "eks:Describe*", "eks:List*"
-                ],
-                resources=[cluster.cluster_arn]
-            ))
             
-            # Add this role to system:masters RBAC group
-            cluster.aws_auth.add_masters_role(console_read_only_role)
+            # Give role permission to get execution history of ALL executions for the state machine
+            state_machine.grant_execution(role, "states:GetExecutionHistory")
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9c9223cb9fa6dff45ee4fd7013629ab18542c2499a83f542c5405968fad2287c)

aws_cdk/aws_rds/__init__.py

@@ -1443,6 +1443,21 @@ rds.DatabaseCluster(self, "DatabaseCluster",
     preferred_maintenance_window="Sat:22:15-Sat:22:45"
 )
 ```
+
+You can also set the preferred maintenance window via reader and writer props:
+
+```python
+# vpc: ec2.Vpc
+
+rds.DatabaseCluster(self, "DatabaseCluster",
+    engine=rds.DatabaseClusterEngine.AURORA,
+    vpc=vpc,
+    writer=rds.ClusterInstance.provisioned("WriterInstance",
+        preferred_maintenance_window="Sat:22:15-Sat:22:45"
+    ),
+    preferred_maintenance_window="Sat:22:15-Sat:22:45"
+)
+```
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)
@@ -17139,6 +17154,7 @@ class ClusterInstanceBindOptions:
         "parameters": "parameters",
         "performance_insight_encryption_key": "performanceInsightEncryptionKey",
         "performance_insight_retention": "performanceInsightRetention",
+        "preferred_maintenance_window": "preferredMaintenanceWindow",
         "publicly_accessible": "publiclyAccessible",
     },
 )
@@ -17156,6 +17172,7 @@ class ClusterInstanceOptions:
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional["PerformanceInsightRetention"] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
     ) -> None:
         '''Common options for creating a cluster instance.
@@ -17170,6 +17187,7 @@ class ClusterInstanceOptions:
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
 
         :exampleMetadata: fixture=_generated
@@ -17198,6 +17216,7 @@ class ClusterInstanceOptions:
                 },
                 performance_insight_encryption_key=key,
                 performance_insight_retention=rds.PerformanceInsightRetention.DEFAULT,
+                preferred_maintenance_window="preferredMaintenanceWindow",
                 publicly_accessible=False
             )
         '''
@@ -17213,6 +17232,7 @@ class ClusterInstanceOptions:
             check_type(argname="argument parameters", value=parameters, expected_type=type_hints["parameters"])
             check_type(argname="argument performance_insight_encryption_key", value=performance_insight_encryption_key, expected_type=type_hints["performance_insight_encryption_key"])
             check_type(argname="argument performance_insight_retention", value=performance_insight_retention, expected_type=type_hints["performance_insight_retention"])
+            check_type(argname="argument preferred_maintenance_window", value=preferred_maintenance_window, expected_type=type_hints["preferred_maintenance_window"])
             check_type(argname="argument publicly_accessible", value=publicly_accessible, expected_type=type_hints["publicly_accessible"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if allow_major_version_upgrade is not None:
@@ -17235,6 +17255,8 @@ class ClusterInstanceOptions:
             self._values["performance_insight_encryption_key"] = performance_insight_encryption_key
         if performance_insight_retention is not None:
             self._values["performance_insight_retention"] = performance_insight_retention
+        if preferred_maintenance_window is not None:
+            self._values["preferred_maintenance_window"] = preferred_maintenance_window
         if publicly_accessible is not None:
             self._values["publicly_accessible"] = publicly_accessible
 
@@ -17385,6 +17407,22 @@ class ClusterInstanceOptions:
         result = self._values.get("performance_insight_retention")
         return typing.cast(typing.Optional["PerformanceInsightRetention"], result)
 
+    @builtins.property
+    def preferred_maintenance_window(self) -> typing.Optional[builtins.str]:
+        '''A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC).
+
+        Example: 'Sun:23:45-Mon:00:15'
+
+        :default:
+
+        - 30-minute window selected at random from an 8-hour block of time for
+        each AWS Region, occurring on a random day of the week.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#Concepts.DBMaintenance
+        '''
+        result = self._values.get("preferred_maintenance_window")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def publicly_accessible(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether the DB instance is an internet-facing instance.
@@ -17424,6 +17462,7 @@ class ClusterInstanceOptions:
         "parameters": "parameters",
         "performance_insight_encryption_key": "performanceInsightEncryptionKey",
         "performance_insight_retention": "performanceInsightRetention",
+        "preferred_maintenance_window": "preferredMaintenanceWindow",
         "publicly_accessible": "publiclyAccessible",
         "instance_type": "instanceType",
         "promotion_tier": "promotionTier",
@@ -17443,6 +17482,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional["PerformanceInsightRetention"] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
         instance_type: "ClusterInstanceType",
         promotion_tier: typing.Optional[jsii.Number] = None,
@@ -17459,6 +17499,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
         :param instance_type: The type of cluster instance to create. Can be either provisioned or serverless v2
         :param promotion_tier: The promotion tier of the cluster instance. This matters more for serverlessV2 instances. If a serverless instance is in tier 0-1 then it will scale with the writer. For provisioned instances this just determines the failover priority. If multiple instances have the same priority then one will be picked at random Default: 2
@@ -17493,6 +17534,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
                 },
                 performance_insight_encryption_key=key,
                 performance_insight_retention=rds.PerformanceInsightRetention.DEFAULT,
+                preferred_maintenance_window="preferredMaintenanceWindow",
                 promotion_tier=123,
                 publicly_accessible=False
             )
@@ -17509,6 +17551,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
             check_type(argname="argument parameters", value=parameters, expected_type=type_hints["parameters"])
             check_type(argname="argument performance_insight_encryption_key", value=performance_insight_encryption_key, expected_type=type_hints["performance_insight_encryption_key"])
             check_type(argname="argument performance_insight_retention", value=performance_insight_retention, expected_type=type_hints["performance_insight_retention"])
+            check_type(argname="argument preferred_maintenance_window", value=preferred_maintenance_window, expected_type=type_hints["preferred_maintenance_window"])
             check_type(argname="argument publicly_accessible", value=publicly_accessible, expected_type=type_hints["publicly_accessible"])
             check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
             check_type(argname="argument promotion_tier", value=promotion_tier, expected_type=type_hints["promotion_tier"])
@@ -17535,6 +17578,8 @@ class ClusterInstanceProps(ClusterInstanceOptions):
             self._values["performance_insight_encryption_key"] = performance_insight_encryption_key
         if performance_insight_retention is not None:
             self._values["performance_insight_retention"] = performance_insight_retention
+        if preferred_maintenance_window is not None:
+            self._values["preferred_maintenance_window"] = preferred_maintenance_window
         if publicly_accessible is not None:
             self._values["publicly_accessible"] = publicly_accessible
         if promotion_tier is not None:
@@ -17687,6 +17732,22 @@ class ClusterInstanceProps(ClusterInstanceOptions):
         result = self._values.get("performance_insight_retention")
         return typing.cast(typing.Optional["PerformanceInsightRetention"], result)
 
+    @builtins.property
+    def preferred_maintenance_window(self) -> typing.Optional[builtins.str]:
+        '''A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC).
+
+        Example: 'Sun:23:45-Mon:00:15'
+
+        :default:
+
+        - 30-minute window selected at random from an 8-hour block of time for
+        each AWS Region, occurring on a random day of the week.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#Concepts.DBMaintenance
+        '''
+        result = self._values.get("preferred_maintenance_window")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def publicly_accessible(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether the DB instance is an internet-facing instance.
@@ -32949,6 +33010,7 @@ class ProcessorFeatures:
         "parameters": "parameters",
         "performance_insight_encryption_key": "performanceInsightEncryptionKey",
         "performance_insight_retention": "performanceInsightRetention",
+        "preferred_maintenance_window": "preferredMaintenanceWindow",
         "publicly_accessible": "publiclyAccessible",
         "instance_type": "instanceType",
         "promotion_tier": "promotionTier",
@@ -32968,6 +33030,7 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
         instance_type: typing.Optional[_InstanceType_f64915b9] = None,
         promotion_tier: typing.Optional[jsii.Number] = None,
@@ -32984,6 +33047,7 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
         :param instance_type: The cluster instance type. Default: db.t3.medium
         :param promotion_tier: The promotion tier of the cluster instance. Can be between 0-15 For provisioned instances this just determines the failover priority. If multiple instances have the same priority then one will be picked at random Default: 2
@@ -33022,6 +33086,7 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
             check_type(argname="argument parameters", value=parameters, expected_type=type_hints["parameters"])
             check_type(argname="argument performance_insight_encryption_key", value=performance_insight_encryption_key, expected_type=type_hints["performance_insight_encryption_key"])
             check_type(argname="argument performance_insight_retention", value=performance_insight_retention, expected_type=type_hints["performance_insight_retention"])
+            check_type(argname="argument preferred_maintenance_window", value=preferred_maintenance_window, expected_type=type_hints["preferred_maintenance_window"])
             check_type(argname="argument publicly_accessible", value=publicly_accessible, expected_type=type_hints["publicly_accessible"])
             check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
             check_type(argname="argument promotion_tier", value=promotion_tier, expected_type=type_hints["promotion_tier"])
@@ -33046,6 +33111,8 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
             self._values["performance_insight_encryption_key"] = performance_insight_encryption_key
         if performance_insight_retention is not None:
             self._values["performance_insight_retention"] = performance_insight_retention
+        if preferred_maintenance_window is not None:
+            self._values["preferred_maintenance_window"] = preferred_maintenance_window
         if publicly_accessible is not None:
             self._values["publicly_accessible"] = publicly_accessible
         if instance_type is not None:
@@ -33200,6 +33267,22 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
         result = self._values.get("performance_insight_retention")
         return typing.cast(typing.Optional[PerformanceInsightRetention], result)
 
+    @builtins.property
+    def preferred_maintenance_window(self) -> typing.Optional[builtins.str]:
+        '''A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC).
+
+        Example: 'Sun:23:45-Mon:00:15'
+
+        :default:
+
+        - 30-minute window selected at random from an 8-hour block of time for
+        each AWS Region, occurring on a random day of the week.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#Concepts.DBMaintenance
+        '''
+        result = self._values.get("preferred_maintenance_window")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def publicly_accessible(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether the DB instance is an internet-facing instance.
@@ -35156,6 +35239,7 @@ class ServerlessScalingOptions:
         "parameters": "parameters",
         "performance_insight_encryption_key": "performanceInsightEncryptionKey",
         "performance_insight_retention": "performanceInsightRetention",
+        "preferred_maintenance_window": "preferredMaintenanceWindow",
         "publicly_accessible": "publiclyAccessible",
         "scale_with_writer": "scaleWithWriter",
     },
@@ -35174,6 +35258,7 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
         scale_with_writer: typing.Optional[builtins.bool] = None,
     ) -> None:
@@ -35189,6 +35274,7 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
         :param scale_with_writer: Only applicable to reader instances. If this is true then the instance will be placed in promotion tier 1, otherwise it will be placed in promotion tier 2. For serverless v2 instances this means: - true: The serverless v2 reader will scale to match the writer instance (provisioned or serverless) - false: The serverless v2 reader will scale with the read workfload on the instance Default: false
 
@@ -35223,6 +35309,7 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
             check_type(argname="argument parameters", value=parameters, expected_type=type_hints["parameters"])
             check_type(argname="argument performance_insight_encryption_key", value=performance_insight_encryption_key, expected_type=type_hints["performance_insight_encryption_key"])
             check_type(argname="argument performance_insight_retention", value=performance_insight_retention, expected_type=type_hints["performance_insight_retention"])
+            check_type(argname="argument preferred_maintenance_window", value=preferred_maintenance_window, expected_type=type_hints["preferred_maintenance_window"])
             check_type(argname="argument publicly_accessible", value=publicly_accessible, expected_type=type_hints["publicly_accessible"])
             check_type(argname="argument scale_with_writer", value=scale_with_writer, expected_type=type_hints["scale_with_writer"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -35246,6 +35333,8 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
             self._values["performance_insight_encryption_key"] = performance_insight_encryption_key
         if performance_insight_retention is not None:
             self._values["performance_insight_retention"] = performance_insight_retention
+        if preferred_maintenance_window is not None:
+            self._values["preferred_maintenance_window"] = preferred_maintenance_window
         if publicly_accessible is not None:
             self._values["publicly_accessible"] = publicly_accessible
         if scale_with_writer is not None:
@@ -35398,6 +35487,22 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
         result = self._values.get("performance_insight_retention")
         return typing.cast(typing.Optional[PerformanceInsightRetention], result)
 
+    @builtins.property
+    def preferred_maintenance_window(self) -> typing.Optional[builtins.str]:
+        '''A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC).
+
+        Example: 'Sun:23:45-Mon:00:15'
+
+        :default:
+
+        - 30-minute window selected at random from an 8-hour block of time for
+        each AWS Region, occurring on a random day of the week.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#Concepts.DBMaintenance
+        '''
+        result = self._values.get("preferred_maintenance_window")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def publicly_accessible(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether the DB instance is an internet-facing instance.
@@ -37123,6 +37228,7 @@ class ClusterInstance(
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
     ) -> IClusterInstance:
         '''Add a provisioned instance to the cluster.
@@ -37140,6 +37246,7 @@ class ClusterInstance(
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
 
         Example::
@@ -37164,6 +37271,7 @@ class ClusterInstance(
             parameters=parameters,
             performance_insight_encryption_key=performance_insight_encryption_key,
             performance_insight_retention=performance_insight_retention,
+            preferred_maintenance_window=preferred_maintenance_window,
             publicly_accessible=publicly_accessible,
         )
 
@@ -37186,6 +37294,7 @@ class ClusterInstance(
         parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
         performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+        preferred_maintenance_window: typing.Optional[builtins.str] = None,
         publicly_accessible: typing.Optional[builtins.bool] = None,
     ) -> IClusterInstance:
         '''Add a serverless v2 instance to the cluster.
@@ -37202,6 +37311,7 @@ class ClusterInstance(
         :param parameters: The parameters in the DBParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
         :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param publicly_accessible: Indicates whether the DB instance is an internet-facing instance. If not specified, the cluster's vpcSubnets will be used to determine if the instance is internet-facing or not. Default: - ``true`` if the cluster's ``vpcSubnets`` is ``subnetType: SubnetType.PUBLIC``, ``false`` otherwise
 
         Example::
@@ -37225,6 +37335,7 @@ class ClusterInstance(
             parameters=parameters,
             performance_insight_encryption_key=performance_insight_encryption_key,
             performance_insight_retention=performance_insight_retention,
+            preferred_maintenance_window=preferred_maintenance_window,
             publicly_accessible=publicly_accessible,
         )
 
@@ -45589,6 +45700,7 @@ def _typecheckingstub__8cdde1ea7f85160803079277e8fcc0af34768579c1b17b771033b3c63
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
@@ -45606,6 +45718,7 @@ def _typecheckingstub__431d59239caf38b9912bfae3130d40eeb8bdb18e013240bac43c98015
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
     instance_type: ClusterInstanceType,
     promotion_tier: typing.Optional[jsii.Number] = None,
@@ -46469,6 +46582,7 @@ def _typecheckingstub__0d5c78a39da629a585066921d3ee78da795285acdbebe6935198fc929
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
     instance_type: typing.Optional[_InstanceType_f64915b9] = None,
     promotion_tier: typing.Optional[jsii.Number] = None,
@@ -46707,6 +46821,7 @@ def _typecheckingstub__c8fd71a155386e8ce12e74b8c5684dfdd43d26e347ef8bbb979e8a2c3
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
     scale_with_writer: typing.Optional[builtins.bool] = None,
 ) -> None:
@@ -46842,6 +46957,7 @@ def _typecheckingstub__d0d2cd14a2c7ed00bfb6fd9860c31cd0b1af1bff8343258b1b4a8d847
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
@@ -46861,6 +46977,7 @@ def _typecheckingstub__95714f22d2724c29931e2710712a92b10932588d2061fa1ceed93097e
     parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     performance_insight_encryption_key: typing.Optional[_IKey_5f11635f] = None,
     performance_insight_retention: typing.Optional[PerformanceInsightRetention] = None,
+    preferred_maintenance_window: typing.Optional[builtins.str] = None,
     publicly_accessible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""