aws-cdk-lib 2.135.0__tar.gz → 2.136.0__tar.gz

{aws-cdk-lib-2.135.0/src/aws_cdk_lib.egg-info → aws-cdk-lib-2.136.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: aws-cdk-lib
-Version: 2.135.0
+Version: 2.136.0
 Summary: Version 2 of the AWS Cloud Development Kit library
 Home-page: https://github.com/aws/aws-cdk
 Author: Amazon Web Services

{aws-cdk-lib-2.135.0 → aws-cdk-lib-2.136.0}/setup.py

@@ -5,7 +5,7 @@ kwargs = json.loads(
     """
 {
     "name": "aws-cdk-lib",
-    "version": "2.135.0",
+    "version": "2.136.0",
     "description": "Version 2 of the AWS Cloud Development Kit library",
     "license": "Apache-2.0",
     "url": "https://github.com/aws/aws-cdk",
@@ -298,7 +298,7 @@ kwargs = json.loads(
     ],
     "package_data": {
         "aws_cdk._jsii": [
-            "aws-cdk-lib@2.135.0.jsii.tgz"
+            "aws-cdk-lib@2.136.0.jsii.tgz"
         ],
         "aws_cdk": [
             "py.typed"

{aws-cdk-lib-2.135.0 → aws-cdk-lib-2.136.0}/src/aws_cdk/_jsii/__init__.py

@@ -19,7 +19,7 @@ import aws_cdk.asset_node_proxy_agent_v6._jsii
 import constructs._jsii
 
 __jsii_assembly__ = jsii.JSIIAssembly.load(
-    "aws-cdk-lib", "2.135.0", __name__[0:-6], "aws-cdk-lib@2.135.0.jsii.tgz"
+    "aws-cdk-lib", "2.136.0", __name__[0:-6], "aws-cdk-lib@2.136.0.jsii.tgz"
 )
 
 __all__ = [

{aws-cdk-lib-2.135.0 → aws-cdk-lib-2.136.0}/src/aws_cdk/aws_ec2/__init__.py

@@ -86299,29 +86299,27 @@ class VpcLookupOptions:
 
         Example::
 
-            # create a cloud9 ec2 environment in a new VPC
-            vpc = ec2.Vpc(self, "VPC", max_azs=3)
-            cloud9.Ec2Environment(self, "Cloud9Env", vpc=vpc, image_id=cloud9.ImageId.AMAZON_LINUX_2)
+            vpc = ec2.Vpc.from_lookup(self, "Vpc",
+                is_default=True
+            )
+            cluster = ecs.Cluster(self, "ECSCluster", vpc=vpc)
             
-            # or create the cloud9 environment in the default VPC with specific instanceType
-            default_vpc = ec2.Vpc.from_lookup(self, "DefaultVPC", is_default=True)
-            cloud9.Ec2Environment(self, "Cloud9Env2",
-                vpc=default_vpc,
-                instance_type=ec2.InstanceType("t3.large"),
-                image_id=cloud9.ImageId.AMAZON_LINUX_2
+            task_definition = ecs.TaskDefinition(self, "TD",
+                compatibility=ecs.Compatibility.EC2
             )
             
-            # or specify in a different subnetSelection
-            c9env = cloud9.Ec2Environment(self, "Cloud9Env3",
-                vpc=vpc,
-                subnet_selection=ec2.SubnetSelection(
-                    subnet_type=ec2.SubnetType.PRIVATE_WITH_EGRESS
-                ),
-                image_id=cloud9.ImageId.AMAZON_LINUX_2
+            task_definition.add_container("TheContainer",
+                image=ecs.ContainerImage.from_registry("foo/bar"),
+                memory_limit_mi_b=256
             )
             
-            # print the Cloud9 IDE URL in the output
-            CfnOutput(self, "URL", value=c9env.ide_url)
+            run_task = tasks.EcsRunTask(self, "Run",
+                integration_pattern=sfn.IntegrationPattern.RUN_JOB,
+                cluster=cluster,
+                task_definition=task_definition,
+                launch_target=tasks.EcsEc2LaunchTarget(),
+                enable_execute_command=True
+            )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__dff7b53f348ae2cf7efc93ce0f0df35bcb1e7b1b64b7b8a6c57a9924d14268ae)

{aws-cdk-lib-2.135.0 → aws-cdk-lib-2.136.0}/src/aws_cdk/aws_ecs/__init__.py

@@ -18900,35 +18900,29 @@ class Compatibility(enum.Enum):
             is_default=True
         )
         
-        cluster = ecs.Cluster(self, "Ec2Cluster", vpc=vpc)
-        cluster.add_capacity("DefaultAutoScalingGroup",
-            instance_type=ec2.InstanceType("t2.micro"),
-            vpc_subnets=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PUBLIC)
-        )
+        cluster = ecs.Cluster(self, "FargateCluster", vpc=vpc)
         
         task_definition = ecs.TaskDefinition(self, "TD",
-            compatibility=ecs.Compatibility.EC2
+            memory_mi_b="512",
+            cpu="256",
+            compatibility=ecs.Compatibility.FARGATE
         )
         
-        task_definition.add_container("TheContainer",
+        container_definition = task_definition.add_container("TheContainer",
             image=ecs.ContainerImage.from_registry("foo/bar"),
             memory_limit_mi_b=256
         )
         
-        run_task = tasks.EcsRunTask(self, "Run",
+        run_task = tasks.EcsRunTask(self, "RunFargate",
             integration_pattern=sfn.IntegrationPattern.RUN_JOB,
             cluster=cluster,
             task_definition=task_definition,
-            launch_target=tasks.EcsEc2LaunchTarget(
-                placement_strategies=[
-                    ecs.PlacementStrategy.spread_across_instances(),
-                    ecs.PlacementStrategy.packed_by_cpu(),
-                    ecs.PlacementStrategy.randomly()
-                ],
-                placement_constraints=[
-                    ecs.PlacementConstraint.member_of("blieptuut")
-                ]
-            ),
+            assign_public_ip=True,
+            container_overrides=[tasks.ContainerOverride(
+                container_definition=container_definition,
+                environment=[tasks.TaskEnvironmentVariable(name="SOME_KEY", value=sfn.JsonPath.string_at("$.SomeKey"))]
+            )],
+            launch_target=tasks.EcsFargateLaunchTarget(),
             propagated_tag_source=ecs.PropagatedTagSource.TASK_DEFINITION
         )
     '''
@@ -35688,35 +35682,29 @@ class TaskDefinitionProps(CommonTaskDefinitionProps):
                 is_default=True
             )
             
-            cluster = ecs.Cluster(self, "Ec2Cluster", vpc=vpc)
-            cluster.add_capacity("DefaultAutoScalingGroup",
-                instance_type=ec2.InstanceType("t2.micro"),
-                vpc_subnets=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PUBLIC)
-            )
+            cluster = ecs.Cluster(self, "FargateCluster", vpc=vpc)
             
             task_definition = ecs.TaskDefinition(self, "TD",
-                compatibility=ecs.Compatibility.EC2
+                memory_mi_b="512",
+                cpu="256",
+                compatibility=ecs.Compatibility.FARGATE
             )
             
-            task_definition.add_container("TheContainer",
+            container_definition = task_definition.add_container("TheContainer",
                 image=ecs.ContainerImage.from_registry("foo/bar"),
                 memory_limit_mi_b=256
             )
             
-            run_task = tasks.EcsRunTask(self, "Run",
+            run_task = tasks.EcsRunTask(self, "RunFargate",
                 integration_pattern=sfn.IntegrationPattern.RUN_JOB,
                 cluster=cluster,
                 task_definition=task_definition,
-                launch_target=tasks.EcsEc2LaunchTarget(
-                    placement_strategies=[
-                        ecs.PlacementStrategy.spread_across_instances(),
-                        ecs.PlacementStrategy.packed_by_cpu(),
-                        ecs.PlacementStrategy.randomly()
-                    ],
-                    placement_constraints=[
-                        ecs.PlacementConstraint.member_of("blieptuut")
-                    ]
-                ),
+                assign_public_ip=True,
+                container_overrides=[tasks.ContainerOverride(
+                    container_definition=container_definition,
+                    environment=[tasks.TaskEnvironmentVariable(name="SOME_KEY", value=sfn.JsonPath.string_at("$.SomeKey"))]
+                )],
+                launch_target=tasks.EcsFargateLaunchTarget(),
                 propagated_tag_source=ecs.PropagatedTagSource.TASK_DEFINITION
             )
         '''

{aws-cdk-lib-2.135.0 → aws-cdk-lib-2.136.0}/src/aws_cdk/aws_elasticloadbalancingv2/__init__.py

@@ -19436,7 +19436,7 @@ class ApplicationTargetGroupProps(BaseTargetGroupProps):
         :param protocol: The protocol used for communication with the target. This is not applicable for Lambda targets. Default: - Determined from port if known
         :param protocol_version: The protocol version to use. Default: ApplicationProtocolVersion.HTTP1
         :param slow_start: The time period during which the load balancer sends a newly registered target a linearly increasing share of the traffic to the target group. The range is 30-900 seconds (15 minutes). Default: 0
-        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: Duration.days(1)
+        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: - Stickiness is disabled
         :param stickiness_cookie_name: The name of an application-based stickiness cookie. Names that start with the following prefixes are not allowed: AWSALB, AWSALBAPP, and AWSALBTG; they're reserved for use by the load balancer. Note: ``stickinessCookieName`` parameter depends on the presence of ``stickinessCookieDuration`` parameter. If ``stickinessCookieDuration`` is not set, ``stickinessCookieName`` will be omitted. Default: - If ``stickinessCookieDuration`` is set, a load-balancer generated cookie is used. Otherwise, no stickiness is defined.
         :param targets: The targets to add to this target group. Can be ``Instance``, ``IPAddress``, or any self-registering load balancing target. If you use either ``Instance`` or ``IPAddress`` as targets, all target must be of the same type. Default: - No targets.
 
@@ -19625,7 +19625,7 @@ class ApplicationTargetGroupProps(BaseTargetGroupProps):
         After this period, the cookie is considered stale. The minimum value is
         1 second and the maximum value is 7 days (604800 seconds).
 
-        :default: Duration.days(1)
+        :default: - Stickiness is disabled
         '''
         result = self._values.get("stickiness_cookie_duration")
         return typing.cast(typing.Optional[_Duration_4839e8c3], result)
@@ -22603,7 +22603,7 @@ class ApplicationTargetGroup(
         :param protocol: The protocol used for communication with the target. This is not applicable for Lambda targets. Default: - Determined from port if known
         :param protocol_version: The protocol version to use. Default: ApplicationProtocolVersion.HTTP1
         :param slow_start: The time period during which the load balancer sends a newly registered target a linearly increasing share of the traffic to the target group. The range is 30-900 seconds (15 minutes). Default: 0
-        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: Duration.days(1)
+        :param stickiness_cookie_duration: The stickiness cookie expiration period. Setting this value enables load balancer stickiness. After this period, the cookie is considered stale. The minimum value is 1 second and the maximum value is 7 days (604800 seconds). Default: - Stickiness is disabled
         :param stickiness_cookie_name: The name of an application-based stickiness cookie. Names that start with the following prefixes are not allowed: AWSALB, AWSALBAPP, and AWSALBTG; they're reserved for use by the load balancer. Note: ``stickinessCookieName`` parameter depends on the presence of ``stickinessCookieDuration`` parameter. If ``stickinessCookieDuration`` is not set, ``stickinessCookieName`` will be omitted. Default: - If ``stickinessCookieDuration`` is set, a load-balancer generated cookie is used. Otherwise, no stickiness is defined.
         :param targets: The targets to add to this target group. Can be ``Instance``, ``IPAddress``, or any self-registering load balancing target. If you use either ``Instance`` or ``IPAddress`` as targets, all target must be of the same type. Default: - No targets.
         :param deregistration_delay: The amount of time for Elastic Load Balancing to wait before deregistering a target. The range is 0-3600 seconds. Default: 300

{aws-cdk-lib-2.135.0 → aws-cdk-lib-2.136.0}/src/aws_cdk/aws_iam/__init__.py

@@ -397,6 +397,39 @@ iam.Role(self, "Role",
 )
 ```
 
+### Granting a principal permission to assume a role
+
+A principal can be granted permission to assume a role using `grantAssumeRole`.
+
+Note that this does not apply to service principals or account principals as they must be added to the role trust policy via `assumeRolePolicy`.
+
+```python
+user = iam.User(self, "user")
+role = iam.Role(self, "role",
+    assumed_by=iam.AccountPrincipal(self.account)
+)
+
+role.grant_assume_role(user)
+```
+
+### Granting service and account principals permission to assume a role
+
+Service principals and account principals can be granted permission to assume a role using `assumeRolePolicy` which modifies the role trust policy.
+
+```python
+role = iam.Role(self, "role",
+    assumed_by=iam.AccountPrincipal(self.account)
+)
+
+role.assume_role_policy.add_statements(iam.PolicyStatement(
+    actions=["sts:AssumeRole"],
+    principals=[
+        iam.AccountPrincipal("123456789"),
+        iam.ServicePrincipal("beep-boop.amazonaws.com")
+    ]
+))
+```
+
 ## Parsing JSON Policy Documents
 
 The `PolicyDocument.fromJson` and `PolicyStatement.fromJson` static methods can be used to parse JSON objects. For example:
@@ -10706,21 +10739,16 @@ class RoleProps:
 
         Example::
 
-            # Option 3: Create a new role that allows the account root principal to assume. Add this role in the `system:masters` and witch to this role from the AWS console.
-            # cluster: eks.Cluster
-            
-            
-            console_read_only_role = iam.Role(self, "ConsoleReadOnlyRole",
-                assumed_by=iam.ArnPrincipal("arn_for_trusted_principal")
+            # definition: sfn.IChainable
+            role = iam.Role(self, "Role",
+                assumed_by=iam.ServicePrincipal("lambda.amazonaws.com")
+            )
+            state_machine = sfn.StateMachine(self, "StateMachine",
+                definition_body=sfn.DefinitionBody.from_chainable(definition)
             )
-            console_read_only_role.add_to_policy(iam.PolicyStatement(
-                actions=["eks:AccessKubernetesApi", "eks:Describe*", "eks:List*"
-                ],
-                resources=[cluster.cluster_arn]
-            ))
             
-            # Add this role to system:masters RBAC group
-            cluster.aws_auth.add_masters_role(console_read_only_role)
+            # Give role permission to get execution history of ALL executions for the state machine
+            state_machine.grant_execution(role, "states:GetExecutionHistory")
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9c9223cb9fa6dff45ee4fd7013629ab18542c2499a83f542c5405968fad2287c)