aws-cdk-lib 2.136.1__py3-none-any.whl → 2.138.0__py3-none-any.whl

aws_cdk/aws_securitylake/__init__.py

@@ -64,6 +64,266 @@ from .. import (
 )
 
 
+@jsii.implements(_IInspectable_c2943556)
+class CfnAwsLogSource(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_securitylake.CfnAwsLogSource",
+):
+    '''Resource Type definition for AWS::SecurityLake::AwsLogSource.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-awslogsource.html
+    :cloudformationResource: AWS::SecurityLake::AwsLogSource
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_securitylake as securitylake
+        
+        cfn_aws_log_source = securitylake.CfnAwsLogSource(self, "MyCfnAwsLogSource",
+            data_lake_arn="dataLakeArn",
+            source_name="sourceName",
+            source_version="sourceVersion",
+        
+            # the properties below are optional
+            accounts=["accounts"]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        data_lake_arn: builtins.str,
+        source_name: builtins.str,
+        source_version: builtins.str,
+        accounts: typing.Optional[typing.Sequence[builtins.str]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param data_lake_arn: The ARN for the data lake.
+        :param source_name: The name for a AWS source. This must be a Regionally unique value.
+        :param source_version: The version for a AWS source. This must be a Regionally unique value.
+        :param accounts: AWS account where you want to collect logs from.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c67fc1d68d61ef9dead7d443499c1a142da192386efc06474b3758994937de6b)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnAwsLogSourceProps(
+            data_lake_arn=data_lake_arn,
+            source_name=source_name,
+            source_version=source_version,
+            accounts=accounts,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2f493097d98865e82cabeeb80dd31577169140709170903a313d3bc579da5bcb)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d4b08275c623e99b1c0cca9f7d97a78cf719804d590ae90e5af151255c42753a)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="dataLakeArn")
+    def data_lake_arn(self) -> builtins.str:
+        '''The ARN for the data lake.'''
+        return typing.cast(builtins.str, jsii.get(self, "dataLakeArn"))
+
+    @data_lake_arn.setter
+    def data_lake_arn(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ed09f296c9b906f7011ea796fce3b42122e1c0490eb544e941f5953a5b0f8403)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "dataLakeArn", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="sourceName")
+    def source_name(self) -> builtins.str:
+        '''The name for a AWS source.'''
+        return typing.cast(builtins.str, jsii.get(self, "sourceName"))
+
+    @source_name.setter
+    def source_name(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__786699bc5ed670115ad16fc2d5cab658ddb4c20d9afccc0010adb67c796143ba)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "sourceName", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="sourceVersion")
+    def source_version(self) -> builtins.str:
+        '''The version for a AWS source.'''
+        return typing.cast(builtins.str, jsii.get(self, "sourceVersion"))
+
+    @source_version.setter
+    def source_version(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2369f0ca541c99625731d8a7db77fa2a9f1346eab63190644c2695d471ddda46)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "sourceVersion", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="accounts")
+    def accounts(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''AWS account where you want to collect logs from.'''
+        return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "accounts"))
+
+    @accounts.setter
+    def accounts(self, value: typing.Optional[typing.List[builtins.str]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a1f564a49d096390f47538b02cc909d2927202e7d6b998b761aaf21810dcf11c)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "accounts", value)
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_securitylake.CfnAwsLogSourceProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "data_lake_arn": "dataLakeArn",
+        "source_name": "sourceName",
+        "source_version": "sourceVersion",
+        "accounts": "accounts",
+    },
+)
+class CfnAwsLogSourceProps:
+    def __init__(
+        self,
+        *,
+        data_lake_arn: builtins.str,
+        source_name: builtins.str,
+        source_version: builtins.str,
+        accounts: typing.Optional[typing.Sequence[builtins.str]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnAwsLogSource``.
+
+        :param data_lake_arn: The ARN for the data lake.
+        :param source_name: The name for a AWS source. This must be a Regionally unique value.
+        :param source_version: The version for a AWS source. This must be a Regionally unique value.
+        :param accounts: AWS account where you want to collect logs from.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-awslogsource.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_securitylake as securitylake
+            
+            cfn_aws_log_source_props = securitylake.CfnAwsLogSourceProps(
+                data_lake_arn="dataLakeArn",
+                source_name="sourceName",
+                source_version="sourceVersion",
+            
+                # the properties below are optional
+                accounts=["accounts"]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__56ae11383caeefb7587043503a4fd999d42e30184765bd5e736dcae60c5b3b94)
+            check_type(argname="argument data_lake_arn", value=data_lake_arn, expected_type=type_hints["data_lake_arn"])
+            check_type(argname="argument source_name", value=source_name, expected_type=type_hints["source_name"])
+            check_type(argname="argument source_version", value=source_version, expected_type=type_hints["source_version"])
+            check_type(argname="argument accounts", value=accounts, expected_type=type_hints["accounts"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "data_lake_arn": data_lake_arn,
+            "source_name": source_name,
+            "source_version": source_version,
+        }
+        if accounts is not None:
+            self._values["accounts"] = accounts
+
+    @builtins.property
+    def data_lake_arn(self) -> builtins.str:
+        '''The ARN for the data lake.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-awslogsource.html#cfn-securitylake-awslogsource-datalakearn
+        '''
+        result = self._values.get("data_lake_arn")
+        assert result is not None, "Required property 'data_lake_arn' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def source_name(self) -> builtins.str:
+        '''The name for a AWS source.
+
+        This must be a Regionally unique value.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-awslogsource.html#cfn-securitylake-awslogsource-sourcename
+        '''
+        result = self._values.get("source_name")
+        assert result is not None, "Required property 'source_name' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def source_version(self) -> builtins.str:
+        '''The version for a AWS source.
+
+        This must be a Regionally unique value.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-awslogsource.html#cfn-securitylake-awslogsource-sourceversion
+        '''
+        result = self._values.get("source_version")
+        assert result is not None, "Required property 'source_version' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def accounts(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''AWS account where you want to collect logs from.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-awslogsource.html#cfn-securitylake-awslogsource-accounts
+        '''
+        result = self._values.get("accounts")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnAwsLogSourceProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
 class CfnDataLake(
     _CfnResource_9df397a6,
@@ -747,71 +1007,879 @@ class CfnDataLakeProps:
         )
 
 
-__all__ = [
-    "CfnDataLake",
-    "CfnDataLakeProps",
-]
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnSubscriber(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriber",
+):
+    '''Resource Type definition for AWS::SecurityLake::Subscriber.
 
-publication.publish()
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html
+    :cloudformationResource: AWS::SecurityLake::Subscriber
+    :exampleMetadata: fixture=_generated
 
-def _typecheckingstub__ff487a50882ee11f396717fb970b445f3274af88108d1c1d390543dfb1fdf534(
-    scope: _constructs_77d1e7e8.Construct,
-    id: builtins.str,
-    *,
-    encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataLake.EncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
-    lifecycle_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataLake.LifecycleConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
-    meta_store_manager_role_arn: typing.Optional[builtins.str] = None,
-    replication_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataLake.ReplicationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
-    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
-) -> None:
-    """Type checking stubs"""
-    pass
+    Example::
 
-def _typecheckingstub__0d7a1c25528114b19a22f7fe9e5b4213f46c37e16f22245bc3dc38ad34fc7ef6(
-    inspector: _TreeInspector_488e0dd5,
-) -> None:
-    """Type checking stubs"""
-    pass
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_securitylake as securitylake
+        
+        cfn_subscriber = securitylake.CfnSubscriber(self, "MyCfnSubscriber",
+            access_types=["accessTypes"],
+            data_lake_arn="dataLakeArn",
+            sources=[securitylake.CfnSubscriber.SourceProperty(
+                aws_log_source=securitylake.CfnSubscriber.AwsLogSourceProperty(
+                    source_name="sourceName",
+                    source_version="sourceVersion"
+                ),
+                custom_log_source=securitylake.CfnSubscriber.CustomLogSourceProperty(
+                    source_name="sourceName",
+                    source_version="sourceVersion"
+                )
+            )],
+            subscriber_identity=securitylake.CfnSubscriber.SubscriberIdentityProperty(
+                external_id="externalId",
+                principal="principal"
+            ),
+            subscriber_name="subscriberName",
+        
+            # the properties below are optional
+            subscriber_description="subscriberDescription",
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
 
-def _typecheckingstub__eb852df583c773c6f5d30c27afae6f598c8606ae40f25dd1885d8fbf5013661b(
-    props: typing.Mapping[builtins.str, typing.Any],
-) -> None:
-    """Type checking stubs"""
-    pass
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        access_types: typing.Sequence[builtins.str],
+        data_lake_arn: builtins.str,
+        sources: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSubscriber.SourceProperty", typing.Dict[builtins.str, typing.Any]]]]],
+        subscriber_identity: typing.Union[_IResolvable_da3f097b, typing.Union["CfnSubscriber.SubscriberIdentityProperty", typing.Dict[builtins.str, typing.Any]]],
+        subscriber_name: builtins.str,
+        subscriber_description: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param access_types: The Amazon S3 or AWS Lake Formation access type.
+        :param data_lake_arn: The ARN for the data lake.
+        :param sources: The supported AWS services from which logs and events are collected.
+        :param subscriber_identity: The AWS identity used to access your data.
+        :param subscriber_name: The name of your Security Lake subscriber account.
+        :param subscriber_description: The description for your subscriber account in Security Lake.
+        :param tags: An array of objects, one for each tag to associate with the subscriber. For each tag, you must specify both a tag key and a tag value. A tag value cannot be null, but it can be an empty string.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7cfdc1f6a6f3c553e914b6e8b917c7abd1db0a1142db24f189c29526acaaea39)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnSubscriberProps(
+            access_types=access_types,
+            data_lake_arn=data_lake_arn,
+            sources=sources,
+            subscriber_identity=subscriber_identity,
+            subscriber_name=subscriber_name,
+            subscriber_description=subscriber_description,
+            tags=tags,
+        )
 
-def _typecheckingstub__12edf08ab82b633325fe7034b3424955ea7bff566dfa00928107723a5d0f6a72(
-    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataLake.EncryptionConfigurationProperty]],
-) -> None:
-    """Type checking stubs"""
-    pass
+        jsii.create(self.__class__, self, [scope, id, props])
 
-def _typecheckingstub__916659d1bcdf1d6d40de689f3b334b766e1a8fb681a493926742e61ce5ba40b7(
-    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataLake.LifecycleConfigurationProperty]],
-) -> None:
-    """Type checking stubs"""
-    pass
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
 
-def _typecheckingstub__23cd82335763114e4ff9c52f4ff2b4db4b4be68cc8f5b468e1325fa0e0e79558(
-    value: typing.Optional[builtins.str],
-) -> None:
-    """Type checking stubs"""
-    pass
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a8615499628b1f4753ef250f307567474c9df890e5c028af197e02c5372c550c)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
 
-def _typecheckingstub__647257bd68002b29a89b3128d4883d0c748e98d2c70a5b154446993271225230(
-    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataLake.ReplicationConfigurationProperty]],
-) -> None:
-    """Type checking stubs"""
-    pass
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3790e1b87c269e951008aa5f293e263e93c06977e1eeed2a69dfca58c409514a)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
 
-def _typecheckingstub__6654ce3b2fa02feedc8f03797f96ae7270d4bd79ef3c3791b522e8277fa3798c(
-    value: typing.Optional[typing.List[_CfnTag_f6864754]],
-) -> None:
-    """Type checking stubs"""
-    pass
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
-def _typecheckingstub__c697088167e83d968076432c9f71877137655465afc625784270e3ba40d3f57b(
-    *,
-    kms_key_id: typing.Optional[builtins.str] = None,
+    @builtins.property
+    @jsii.member(jsii_name="attrResourceShareArn")
+    def attr_resource_share_arn(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: ResourceShareArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrResourceShareArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrResourceShareName")
+    def attr_resource_share_name(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: ResourceShareName
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrResourceShareName"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrS3BucketArn")
+    def attr_s3_bucket_arn(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: S3BucketArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrS3BucketArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrSubscriberArn")
+    def attr_subscriber_arn(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: SubscriberArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrSubscriberArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrSubscriberRoleArn")
+    def attr_subscriber_role_arn(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: SubscriberRoleArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrSubscriberRoleArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="accessTypes")
+    def access_types(self) -> typing.List[builtins.str]:
+        '''The Amazon S3 or AWS Lake Formation access type.'''
+        return typing.cast(typing.List[builtins.str], jsii.get(self, "accessTypes"))
+
+    @access_types.setter
+    def access_types(self, value: typing.List[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3f5e7268ca27d6f9f4f7235ed5dc11031e3dcfecbb97acb334a181ffa62b0550)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "accessTypes", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="dataLakeArn")
+    def data_lake_arn(self) -> builtins.str:
+        '''The ARN for the data lake.'''
+        return typing.cast(builtins.str, jsii.get(self, "dataLakeArn"))
+
+    @data_lake_arn.setter
+    def data_lake_arn(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6b6df05258f367a78b9fe1e83d93bbb4170db63eebfcfcaf47743e3795fdea19)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "dataLakeArn", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="sources")
+    def sources(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.SourceProperty"]]]:
+        '''The supported AWS services from which logs and events are collected.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.SourceProperty"]]], jsii.get(self, "sources"))
+
+    @sources.setter
+    def sources(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.SourceProperty"]]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__bc932de85d8e0823efeb32cd9962639ee0df5d9caf72a0cc1bd8a74abd3853f1)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "sources", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="subscriberIdentity")
+    def subscriber_identity(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnSubscriber.SubscriberIdentityProperty"]:
+        '''The AWS identity used to access your data.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnSubscriber.SubscriberIdentityProperty"], jsii.get(self, "subscriberIdentity"))
+
+    @subscriber_identity.setter
+    def subscriber_identity(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnSubscriber.SubscriberIdentityProperty"],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__844ac1bd9005c05fc49f39ac053da7c40f778e558a2e4cf96983161b114d88a7)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "subscriberIdentity", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="subscriberName")
+    def subscriber_name(self) -> builtins.str:
+        '''The name of your Security Lake subscriber account.'''
+        return typing.cast(builtins.str, jsii.get(self, "subscriberName"))
+
+    @subscriber_name.setter
+    def subscriber_name(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__cd9beb9187d8345c4ae00d2ee6483cd5f3841d1801dffe9de561ed1934ddd965)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "subscriberName", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="subscriberDescription")
+    def subscriber_description(self) -> typing.Optional[builtins.str]:
+        '''The description for your subscriber account in Security Lake.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "subscriberDescription"))
+
+    @subscriber_description.setter
+    def subscriber_description(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3147cb4779ff5832faddc8bdeac62a5ff6db17ddc1eddee78b4f5ca463a0ed76)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "subscriberDescription", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''An array of objects, one for each tag to associate with the subscriber.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b8f06145c3b30c94dc03a8f547df3132c6f47f465dc815eb5282aab9542906c1)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value)
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriber.AwsLogSourceProperty",
+        jsii_struct_bases=[],
+        name_mapping={"source_name": "sourceName", "source_version": "sourceVersion"},
+    )
+    class AwsLogSourceProperty:
+        def __init__(
+            self,
+            *,
+            source_name: typing.Optional[builtins.str] = None,
+            source_version: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Amazon Security Lake supports log and event collection for natively supported AWS services.
+
+            :param source_name: The name for a AWS source. This must be a Regionally unique value.
+            :param source_version: The version for a AWS source. This must be a Regionally unique value.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-awslogsource.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_securitylake as securitylake
+                
+                aws_log_source_property = securitylake.CfnSubscriber.AwsLogSourceProperty(
+                    source_name="sourceName",
+                    source_version="sourceVersion"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__f7b68bdff72d0a83be28cc208139e37398a7b328722b97984e752440b8b9b167)
+                check_type(argname="argument source_name", value=source_name, expected_type=type_hints["source_name"])
+                check_type(argname="argument source_version", value=source_version, expected_type=type_hints["source_version"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if source_name is not None:
+                self._values["source_name"] = source_name
+            if source_version is not None:
+                self._values["source_version"] = source_version
+
+        @builtins.property
+        def source_name(self) -> typing.Optional[builtins.str]:
+            '''The name for a AWS source.
+
+            This must be a Regionally unique value.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-awslogsource.html#cfn-securitylake-subscriber-awslogsource-sourcename
+            '''
+            result = self._values.get("source_name")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def source_version(self) -> typing.Optional[builtins.str]:
+            '''The version for a AWS source.
+
+            This must be a Regionally unique value.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-awslogsource.html#cfn-securitylake-subscriber-awslogsource-sourceversion
+            '''
+            result = self._values.get("source_version")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "AwsLogSourceProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriber.CustomLogSourceProperty",
+        jsii_struct_bases=[],
+        name_mapping={"source_name": "sourceName", "source_version": "sourceVersion"},
+    )
+    class CustomLogSourceProperty:
+        def __init__(
+            self,
+            *,
+            source_name: typing.Optional[builtins.str] = None,
+            source_version: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''
+            :param source_name: The name for a third-party custom source. This must be a Regionally unique value.
+            :param source_version: The version for a third-party custom source. This must be a Regionally unique value.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-customlogsource.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_securitylake as securitylake
+                
+                custom_log_source_property = securitylake.CfnSubscriber.CustomLogSourceProperty(
+                    source_name="sourceName",
+                    source_version="sourceVersion"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__be7ff1808e2250d74fc3f0286676c85a2ac63ab562fb09265ceb5138256bdb3a)
+                check_type(argname="argument source_name", value=source_name, expected_type=type_hints["source_name"])
+                check_type(argname="argument source_version", value=source_version, expected_type=type_hints["source_version"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if source_name is not None:
+                self._values["source_name"] = source_name
+            if source_version is not None:
+                self._values["source_version"] = source_version
+
+        @builtins.property
+        def source_name(self) -> typing.Optional[builtins.str]:
+            '''The name for a third-party custom source.
+
+            This must be a Regionally unique value.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-customlogsource.html#cfn-securitylake-subscriber-customlogsource-sourcename
+            '''
+            result = self._values.get("source_name")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def source_version(self) -> typing.Optional[builtins.str]:
+            '''The version for a third-party custom source.
+
+            This must be a Regionally unique value.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-customlogsource.html#cfn-securitylake-subscriber-customlogsource-sourceversion
+            '''
+            result = self._values.get("source_version")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CustomLogSourceProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriber.SourceProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "aws_log_source": "awsLogSource",
+            "custom_log_source": "customLogSource",
+        },
+    )
+    class SourceProperty:
+        def __init__(
+            self,
+            *,
+            aws_log_source: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSubscriber.AwsLogSourceProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            custom_log_source: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSubscriber.CustomLogSourceProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''
+            :param aws_log_source: Amazon Security Lake supports log and event collection for natively supported AWS services.
+            :param custom_log_source: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-source.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_securitylake as securitylake
+                
+                source_property = securitylake.CfnSubscriber.SourceProperty(
+                    aws_log_source=securitylake.CfnSubscriber.AwsLogSourceProperty(
+                        source_name="sourceName",
+                        source_version="sourceVersion"
+                    ),
+                    custom_log_source=securitylake.CfnSubscriber.CustomLogSourceProperty(
+                        source_name="sourceName",
+                        source_version="sourceVersion"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__09624bc0a82e7efd60186ff6e6eeff97f2daca3d7d705b8e7e3451a7add8d126)
+                check_type(argname="argument aws_log_source", value=aws_log_source, expected_type=type_hints["aws_log_source"])
+                check_type(argname="argument custom_log_source", value=custom_log_source, expected_type=type_hints["custom_log_source"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if aws_log_source is not None:
+                self._values["aws_log_source"] = aws_log_source
+            if custom_log_source is not None:
+                self._values["custom_log_source"] = custom_log_source
+
+        @builtins.property
+        def aws_log_source(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.AwsLogSourceProperty"]]:
+            '''Amazon Security Lake supports log and event collection for natively supported AWS services.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-source.html#cfn-securitylake-subscriber-source-awslogsource
+            '''
+            result = self._values.get("aws_log_source")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.AwsLogSourceProperty"]], result)
+
+        @builtins.property
+        def custom_log_source(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.CustomLogSourceProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-source.html#cfn-securitylake-subscriber-source-customlogsource
+            '''
+            result = self._values.get("custom_log_source")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.CustomLogSourceProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "SourceProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriber.SubscriberIdentityProperty",
+        jsii_struct_bases=[],
+        name_mapping={"external_id": "externalId", "principal": "principal"},
+    )
+    class SubscriberIdentityProperty:
+        def __init__(
+            self,
+            *,
+            external_id: builtins.str,
+            principal: builtins.str,
+        ) -> None:
+            '''The AWS identity used to access your data.
+
+            :param external_id: The external ID used to establish trust relationship with the AWS identity.
+            :param principal: The AWS identity principal.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-subscriberidentity.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_securitylake as securitylake
+                
+                subscriber_identity_property = securitylake.CfnSubscriber.SubscriberIdentityProperty(
+                    external_id="externalId",
+                    principal="principal"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__a2dd3305d7b56ebd933e9b9e7b243865a7a5c734ed08bef308334f82a70d692e)
+                check_type(argname="argument external_id", value=external_id, expected_type=type_hints["external_id"])
+                check_type(argname="argument principal", value=principal, expected_type=type_hints["principal"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "external_id": external_id,
+                "principal": principal,
+            }
+
+        @builtins.property
+        def external_id(self) -> builtins.str:
+            '''The external ID used to establish trust relationship with the AWS identity.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-subscriberidentity.html#cfn-securitylake-subscriber-subscriberidentity-externalid
+            '''
+            result = self._values.get("external_id")
+            assert result is not None, "Required property 'external_id' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def principal(self) -> builtins.str:
+            '''The AWS identity principal.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-subscriberidentity.html#cfn-securitylake-subscriber-subscriberidentity-principal
+            '''
+            result = self._values.get("principal")
+            assert result is not None, "Required property 'principal' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "SubscriberIdentityProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriberProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "access_types": "accessTypes",
+        "data_lake_arn": "dataLakeArn",
+        "sources": "sources",
+        "subscriber_identity": "subscriberIdentity",
+        "subscriber_name": "subscriberName",
+        "subscriber_description": "subscriberDescription",
+        "tags": "tags",
+    },
+)
+class CfnSubscriberProps:
+    def __init__(
+        self,
+        *,
+        access_types: typing.Sequence[builtins.str],
+        data_lake_arn: builtins.str,
+        sources: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SourceProperty, typing.Dict[builtins.str, typing.Any]]]]],
+        subscriber_identity: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SubscriberIdentityProperty, typing.Dict[builtins.str, typing.Any]]],
+        subscriber_name: builtins.str,
+        subscriber_description: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnSubscriber``.
+
+        :param access_types: The Amazon S3 or AWS Lake Formation access type.
+        :param data_lake_arn: The ARN for the data lake.
+        :param sources: The supported AWS services from which logs and events are collected.
+        :param subscriber_identity: The AWS identity used to access your data.
+        :param subscriber_name: The name of your Security Lake subscriber account.
+        :param subscriber_description: The description for your subscriber account in Security Lake.
+        :param tags: An array of objects, one for each tag to associate with the subscriber. For each tag, you must specify both a tag key and a tag value. A tag value cannot be null, but it can be an empty string.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_securitylake as securitylake
+            
+            cfn_subscriber_props = securitylake.CfnSubscriberProps(
+                access_types=["accessTypes"],
+                data_lake_arn="dataLakeArn",
+                sources=[securitylake.CfnSubscriber.SourceProperty(
+                    aws_log_source=securitylake.CfnSubscriber.AwsLogSourceProperty(
+                        source_name="sourceName",
+                        source_version="sourceVersion"
+                    ),
+                    custom_log_source=securitylake.CfnSubscriber.CustomLogSourceProperty(
+                        source_name="sourceName",
+                        source_version="sourceVersion"
+                    )
+                )],
+                subscriber_identity=securitylake.CfnSubscriber.SubscriberIdentityProperty(
+                    external_id="externalId",
+                    principal="principal"
+                ),
+                subscriber_name="subscriberName",
+            
+                # the properties below are optional
+                subscriber_description="subscriberDescription",
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__48b4dffc39d9aeba296ada6ed3b12f7273758033f731faa94da735c639fb2f10)
+            check_type(argname="argument access_types", value=access_types, expected_type=type_hints["access_types"])
+            check_type(argname="argument data_lake_arn", value=data_lake_arn, expected_type=type_hints["data_lake_arn"])
+            check_type(argname="argument sources", value=sources, expected_type=type_hints["sources"])
+            check_type(argname="argument subscriber_identity", value=subscriber_identity, expected_type=type_hints["subscriber_identity"])
+            check_type(argname="argument subscriber_name", value=subscriber_name, expected_type=type_hints["subscriber_name"])
+            check_type(argname="argument subscriber_description", value=subscriber_description, expected_type=type_hints["subscriber_description"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "access_types": access_types,
+            "data_lake_arn": data_lake_arn,
+            "sources": sources,
+            "subscriber_identity": subscriber_identity,
+            "subscriber_name": subscriber_name,
+        }
+        if subscriber_description is not None:
+            self._values["subscriber_description"] = subscriber_description
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def access_types(self) -> typing.List[builtins.str]:
+        '''The Amazon S3 or AWS Lake Formation access type.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html#cfn-securitylake-subscriber-accesstypes
+        '''
+        result = self._values.get("access_types")
+        assert result is not None, "Required property 'access_types' is missing"
+        return typing.cast(typing.List[builtins.str], result)
+
+    @builtins.property
+    def data_lake_arn(self) -> builtins.str:
+        '''The ARN for the data lake.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html#cfn-securitylake-subscriber-datalakearn
+        '''
+        result = self._values.get("data_lake_arn")
+        assert result is not None, "Required property 'data_lake_arn' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def sources(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnSubscriber.SourceProperty]]]:
+        '''The supported AWS services from which logs and events are collected.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html#cfn-securitylake-subscriber-sources
+        '''
+        result = self._values.get("sources")
+        assert result is not None, "Required property 'sources' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnSubscriber.SourceProperty]]], result)
+
+    @builtins.property
+    def subscriber_identity(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnSubscriber.SubscriberIdentityProperty]:
+        '''The AWS identity used to access your data.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html#cfn-securitylake-subscriber-subscriberidentity
+        '''
+        result = self._values.get("subscriber_identity")
+        assert result is not None, "Required property 'subscriber_identity' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnSubscriber.SubscriberIdentityProperty], result)
+
+    @builtins.property
+    def subscriber_name(self) -> builtins.str:
+        '''The name of your Security Lake subscriber account.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html#cfn-securitylake-subscriber-subscribername
+        '''
+        result = self._values.get("subscriber_name")
+        assert result is not None, "Required property 'subscriber_name' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def subscriber_description(self) -> typing.Optional[builtins.str]:
+        '''The description for your subscriber account in Security Lake.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html#cfn-securitylake-subscriber-subscriberdescription
+        '''
+        result = self._values.get("subscriber_description")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''An array of objects, one for each tag to associate with the subscriber.
+
+        For each tag, you must specify both a tag key and a tag value. A tag value cannot be null, but it can be an empty string.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html#cfn-securitylake-subscriber-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnSubscriberProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+__all__ = [
+    "CfnAwsLogSource",
+    "CfnAwsLogSourceProps",
+    "CfnDataLake",
+    "CfnDataLakeProps",
+    "CfnSubscriber",
+    "CfnSubscriberProps",
+]
+
+publication.publish()
+
+def _typecheckingstub__c67fc1d68d61ef9dead7d443499c1a142da192386efc06474b3758994937de6b(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    data_lake_arn: builtins.str,
+    source_name: builtins.str,
+    source_version: builtins.str,
+    accounts: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__2f493097d98865e82cabeeb80dd31577169140709170903a313d3bc579da5bcb(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d4b08275c623e99b1c0cca9f7d97a78cf719804d590ae90e5af151255c42753a(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ed09f296c9b906f7011ea796fce3b42122e1c0490eb544e941f5953a5b0f8403(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__786699bc5ed670115ad16fc2d5cab658ddb4c20d9afccc0010adb67c796143ba(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__2369f0ca541c99625731d8a7db77fa2a9f1346eab63190644c2695d471ddda46(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a1f564a49d096390f47538b02cc909d2927202e7d6b998b761aaf21810dcf11c(
+    value: typing.Optional[typing.List[builtins.str]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__56ae11383caeefb7587043503a4fd999d42e30184765bd5e736dcae60c5b3b94(
+    *,
+    data_lake_arn: builtins.str,
+    source_name: builtins.str,
+    source_version: builtins.str,
+    accounts: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ff487a50882ee11f396717fb970b445f3274af88108d1c1d390543dfb1fdf534(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataLake.EncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    lifecycle_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataLake.LifecycleConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    meta_store_manager_role_arn: typing.Optional[builtins.str] = None,
+    replication_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataLake.ReplicationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0d7a1c25528114b19a22f7fe9e5b4213f46c37e16f22245bc3dc38ad34fc7ef6(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__eb852df583c773c6f5d30c27afae6f598c8606ae40f25dd1885d8fbf5013661b(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__12edf08ab82b633325fe7034b3424955ea7bff566dfa00928107723a5d0f6a72(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataLake.EncryptionConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__916659d1bcdf1d6d40de689f3b334b766e1a8fb681a493926742e61ce5ba40b7(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataLake.LifecycleConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__23cd82335763114e4ff9c52f4ff2b4db4b4be68cc8f5b468e1325fa0e0e79558(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__647257bd68002b29a89b3128d4883d0c748e98d2c70a5b154446993271225230(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataLake.ReplicationConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6654ce3b2fa02feedc8f03797f96ae7270d4bd79ef3c3791b522e8277fa3798c(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c697088167e83d968076432c9f71877137655465afc625784270e3ba40d3f57b(
+    *,
+    kms_key_id: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -857,3 +1925,117 @@ def _typecheckingstub__f98044af937b493e98dc654fc28cbeccbd1ee2f339cd00c1cc5905684
 ) -> None:
     """Type checking stubs"""
     pass
+
+def _typecheckingstub__7cfdc1f6a6f3c553e914b6e8b917c7abd1db0a1142db24f189c29526acaaea39(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    access_types: typing.Sequence[builtins.str],
+    data_lake_arn: builtins.str,
+    sources: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SourceProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    subscriber_identity: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SubscriberIdentityProperty, typing.Dict[builtins.str, typing.Any]]],
+    subscriber_name: builtins.str,
+    subscriber_description: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a8615499628b1f4753ef250f307567474c9df890e5c028af197e02c5372c550c(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3790e1b87c269e951008aa5f293e263e93c06977e1eeed2a69dfca58c409514a(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3f5e7268ca27d6f9f4f7235ed5dc11031e3dcfecbb97acb334a181ffa62b0550(
+    value: typing.List[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6b6df05258f367a78b9fe1e83d93bbb4170db63eebfcfcaf47743e3795fdea19(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__bc932de85d8e0823efeb32cd9962639ee0df5d9caf72a0cc1bd8a74abd3853f1(
+    value: typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnSubscriber.SourceProperty]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__844ac1bd9005c05fc49f39ac053da7c40f778e558a2e4cf96983161b114d88a7(
+    value: typing.Union[_IResolvable_da3f097b, CfnSubscriber.SubscriberIdentityProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__cd9beb9187d8345c4ae00d2ee6483cd5f3841d1801dffe9de561ed1934ddd965(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3147cb4779ff5832faddc8bdeac62a5ff6db17ddc1eddee78b4f5ca463a0ed76(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b8f06145c3b30c94dc03a8f547df3132c6f47f465dc815eb5282aab9542906c1(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f7b68bdff72d0a83be28cc208139e37398a7b328722b97984e752440b8b9b167(
+    *,
+    source_name: typing.Optional[builtins.str] = None,
+    source_version: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__be7ff1808e2250d74fc3f0286676c85a2ac63ab562fb09265ceb5138256bdb3a(
+    *,
+    source_name: typing.Optional[builtins.str] = None,
+    source_version: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__09624bc0a82e7efd60186ff6e6eeff97f2daca3d7d705b8e7e3451a7add8d126(
+    *,
+    aws_log_source: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.AwsLogSourceProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    custom_log_source: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.CustomLogSourceProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a2dd3305d7b56ebd933e9b9e7b243865a7a5c734ed08bef308334f82a70d692e(
+    *,
+    external_id: builtins.str,
+    principal: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__48b4dffc39d9aeba296ada6ed3b12f7273758033f731faa94da735c639fb2f10(
+    *,
+    access_types: typing.Sequence[builtins.str],
+    data_lake_arn: builtins.str,
+    sources: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SourceProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    subscriber_identity: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SubscriberIdentityProperty, typing.Dict[builtins.str, typing.Any]]],
+    subscriber_name: builtins.str,
+    subscriber_description: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass