aws-cdk-lib 2.138.0__py3-none-any.whl → 2.139.1__py3-none-any.whl

aws_cdk/aws_elasticloadbalancingv2/__init__.py

@@ -2760,7 +2760,7 @@ class BaseLoadBalancerProps:
         '''Shared properties of both Application and Network Load Balancers.
 
         :param vpc: The VPC network to place the load balancer in.
-        :param cross_zone_enabled: Indicates whether cross-zone load balancing is enabled. Default: - false for Network Load Balancers and true for Application Load Balancers.
+        :param cross_zone_enabled: Indicates whether cross-zone load balancing is enabled. Default: - false for Network Load Balancers and true for Application Load Balancers. This can not be ``false`` for Application Load Balancers.
         :param deletion_protection: Indicates whether deletion protection is enabled. Default: false
         :param deny_all_igw_traffic: Indicates whether the load balancer blocks traffic through the Internet Gateway (IGW). Default: - false for internet-facing load balancers and true for internal load balancers
         :param internet_facing: Whether the load balancer has an internet-routable address. Default: false
@@ -2837,7 +2837,12 @@ class BaseLoadBalancerProps:
     def cross_zone_enabled(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether cross-zone load balancing is enabled.
 
-        :default: - false for Network Load Balancers and true for Application Load Balancers.
+        :default:
+
+        - false for Network Load Balancers and true for Application Load Balancers.
+        This can not be ``false`` for Application Load Balancers.
+
+        :see: - https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-loadbalancer-loadbalancerattribute.html
         '''
         result = self._values.get("cross_zone_enabled")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -15950,7 +15955,7 @@ class NetworkLoadBalancer(
         :param ip_address_type: The type of IP addresses to use. If you want to add a UDP or TCP_UDP listener to the load balancer, you must choose IPv4. Default: IpAddressType.IPV4
         :param security_groups: Security groups to associate with this load balancer. Default: - No security groups associated with the load balancer.
         :param vpc: The VPC network to place the load balancer in.
-        :param cross_zone_enabled: Indicates whether cross-zone load balancing is enabled. Default: - false for Network Load Balancers and true for Application Load Balancers.
+        :param cross_zone_enabled: Indicates whether cross-zone load balancing is enabled. Default: - false for Network Load Balancers and true for Application Load Balancers. This can not be ``false`` for Application Load Balancers.
         :param deletion_protection: Indicates whether deletion protection is enabled. Default: false
         :param deny_all_igw_traffic: Indicates whether the load balancer blocks traffic through the Internet Gateway (IGW). Default: - false for internet-facing load balancers and true for internal load balancers
         :param internet_facing: Whether the load balancer has an internet-routable address. Default: false
@@ -16735,7 +16740,7 @@ class NetworkLoadBalancerProps(BaseLoadBalancerProps):
         '''Properties for a network load balancer.
 
         :param vpc: The VPC network to place the load balancer in.
-        :param cross_zone_enabled: Indicates whether cross-zone load balancing is enabled. Default: - false for Network Load Balancers and true for Application Load Balancers.
+        :param cross_zone_enabled: Indicates whether cross-zone load balancing is enabled. Default: - false for Network Load Balancers and true for Application Load Balancers. This can not be ``false`` for Application Load Balancers.
         :param deletion_protection: Indicates whether deletion protection is enabled. Default: false
         :param deny_all_igw_traffic: Indicates whether the load balancer blocks traffic through the Internet Gateway (IGW). Default: - false for internet-facing load balancers and true for internal load balancers
         :param internet_facing: Whether the load balancer has an internet-routable address. Default: false
@@ -16814,7 +16819,12 @@ class NetworkLoadBalancerProps(BaseLoadBalancerProps):
     def cross_zone_enabled(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether cross-zone load balancing is enabled.
 
-        :default: - false for Network Load Balancers and true for Application Load Balancers.
+        :default:
+
+        - false for Network Load Balancers and true for Application Load Balancers.
+        This can not be ``false`` for Application Load Balancers.
+
+        :see: - https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-loadbalancer-loadbalancerattribute.html
         '''
         result = self._values.get("cross_zone_enabled")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -19309,7 +19319,7 @@ class ApplicationLoadBalancerProps(BaseLoadBalancerProps):
         '''Properties for defining an Application Load Balancer.
 
         :param vpc: The VPC network to place the load balancer in.
-        :param cross_zone_enabled: Indicates whether cross-zone load balancing is enabled. Default: - false for Network Load Balancers and true for Application Load Balancers.
+        :param cross_zone_enabled: Indicates whether cross-zone load balancing is enabled. Default: - false for Network Load Balancers and true for Application Load Balancers. This can not be ``false`` for Application Load Balancers.
         :param deletion_protection: Indicates whether deletion protection is enabled. Default: false
         :param deny_all_igw_traffic: Indicates whether the load balancer blocks traffic through the Internet Gateway (IGW). Default: - false for internet-facing load balancers and true for internal load balancers
         :param internet_facing: Whether the load balancer has an internet-routable address. Default: false
@@ -19437,7 +19447,12 @@ class ApplicationLoadBalancerProps(BaseLoadBalancerProps):
     def cross_zone_enabled(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether cross-zone load balancing is enabled.
 
-        :default: - false for Network Load Balancers and true for Application Load Balancers.
+        :default:
+
+        - false for Network Load Balancers and true for Application Load Balancers.
+        This can not be ``false`` for Application Load Balancers.
+
+        :see: - https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-loadbalancer-loadbalancerattribute.html
         '''
         result = self._values.get("cross_zone_enabled")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -21558,7 +21573,7 @@ class ApplicationLoadBalancer(
         :param x_amzn_tls_version_and_cipher_suite_headers: Indicates whether the two headers (x-amzn-tls-version and x-amzn-tls-cipher-suite), which contain information about the negotiated TLS version and cipher suite, are added to the client request before sending it to the target. The x-amzn-tls-version header has information about the TLS protocol version negotiated with the client, and the x-amzn-tls-cipher-suite header has information about the cipher suite negotiated with the client. Both headers are in OpenSSL format. Default: false
         :param xff_header_processing_mode: Enables you to modify, preserve, or remove the X-Forwarded-For header in the HTTP request before the Application Load Balancer sends the request to the target. Default: XffHeaderProcessingMode.APPEND
         :param vpc: The VPC network to place the load balancer in.
-        :param cross_zone_enabled: Indicates whether cross-zone load balancing is enabled. Default: - false for Network Load Balancers and true for Application Load Balancers.
+        :param cross_zone_enabled: Indicates whether cross-zone load balancing is enabled. Default: - false for Network Load Balancers and true for Application Load Balancers. This can not be ``false`` for Application Load Balancers.
         :param deletion_protection: Indicates whether deletion protection is enabled. Default: false
         :param deny_all_igw_traffic: Indicates whether the load balancer blocks traffic through the Internet Gateway (IGW). Default: - false for internet-facing load balancers and true for internal load balancers
         :param internet_facing: Whether the load balancer has an internet-routable address. Default: false

aws_cdk/aws_events_targets/__init__.py

@@ -499,7 +499,9 @@ from .._jsii import *
 
 import constructs as _constructs_77d1e7e8
 from .. import Duration as _Duration_4839e8c3
-from ..aws_apigateway import RestApi as _RestApi_777c8238
+from ..aws_apigateway import (
+    IRestApi as _IRestApi_1f02523d, RestApi as _RestApi_777c8238
+)
 from ..aws_codebuild import IProject as _IProject_aafae30a
 from ..aws_codepipeline import IPipeline as _IPipeline_0931f838
 from ..aws_ec2 import (
@@ -667,7 +669,7 @@ class ApiGateway(
 
     def __init__(
         self,
-        rest_api: _RestApi_777c8238,
+        rest_api: _IRestApi_1f02523d,
         *,
         event_role: typing.Optional[_IRole_235f5d8e] = None,
         header_parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
@@ -682,7 +684,7 @@ class ApiGateway(
         retry_attempts: typing.Optional[jsii.Number] = None,
     ) -> None:
         '''
-        :param rest_api: -
+        :param rest_api: - IRestApi implementation to use as event target.
         :param event_role: The role to assume before invoking the target (i.e., the pipeline) when the given rule is triggered. Default: - a new role will be created
         :param header_parameters: The headers to be set when requesting API. Default: no header parameters
         :param method: The method for api resource invoked by the rule. Default: '*' that treated as ANY
@@ -733,9 +735,20 @@ class ApiGateway(
             check_type(argname="argument _id", value=_id, expected_type=type_hints["_id"])
         return typing.cast(_RuleTargetConfig_4e70fe03, jsii.invoke(self, "bind", [rule, _id]))
 
+    @builtins.property
+    @jsii.member(jsii_name="iRestApi")
+    def i_rest_api(self) -> _IRestApi_1f02523d:
+        '''Returns the target IRestApi.'''
+        return typing.cast(_IRestApi_1f02523d, jsii.get(self, "iRestApi"))
+
     @builtins.property
     @jsii.member(jsii_name="restApi")
     def rest_api(self) -> _RestApi_777c8238:
+        '''
+        :deprecated: Use the ``iRestApi`` getter instead
+
+        :stability: deprecated
+        '''
         return typing.cast(_RestApi_777c8238, jsii.get(self, "restApi"))
 
 
@@ -4774,7 +4787,7 @@ def _typecheckingstub__7fc3c1c0cf00ea5f22f33bc5b97cb9290363f2ca57adb35a3ef3345ba
     pass
 
 def _typecheckingstub__4351ee68d84b56105dfaf7566e76bf0350931a4945a4f9e2599f6310ff34c1f4(
-    rest_api: _RestApi_777c8238,
+    rest_api: _IRestApi_1f02523d,
     *,
     event_role: typing.Optional[_IRole_235f5d8e] = None,
     header_parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,

aws_cdk/aws_kms/__init__.py

@@ -720,6 +720,7 @@ class CfnKey(
         multi_region: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         origin: typing.Optional[builtins.str] = None,
         pending_window_in_days: typing.Optional[jsii.Number] = None,
+        rotation_period_in_days: typing.Optional[jsii.Number] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
@@ -735,6 +736,7 @@ class CfnKey(
         :param multi_region: Creates a multi-Region primary key that you can replicate in other AWS Regions . You can't change the ``MultiRegion`` value after the KMS key is created. For a list of AWS Regions in which multi-Region keys are supported, see `Multi-Region keys in AWS KMS <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html>`_ in the ** . .. epigraph:: If you change the value of the ``MultiRegion`` property on an existing KMS key, the update request fails, regardless of the value of the ```UpdateReplacePolicy`` attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html>`_ . This prevents you from accidentally deleting a KMS key by changing an immutable property value. For a multi-Region key, set to this property to ``true`` . For a single-Region key, omit this property or set it to ``false`` . The default value is ``false`` . *Multi-Region keys* are an AWS KMS feature that lets you create multiple interoperable KMS keys in different AWS Regions . Because these KMS keys have the same key ID, key material, and other metadata, you can use them to encrypt data in one AWS Region and decrypt it in a different AWS Region without making a cross-Region call or exposing the plaintext data. For more information, see `Multi-Region keys <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html>`_ in the *AWS Key Management Service Developer Guide* . You can create a symmetric encryption, HMAC, or asymmetric multi-Region KMS key, and you can create a multi-Region key with imported key material. However, you cannot create a multi-Region key in a custom key store. To create a replica of this primary key in a different AWS Region , create an `AWS::KMS::ReplicaKey <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-replicakey.html>`_ resource in a CloudFormation stack in the replica Region. Specify the key ARN of this primary key. Default: - false
         :param origin: The source of the key material for the KMS key. You cannot change the origin after you create the KMS key. The default is ``AWS_KMS`` , which means that AWS KMS creates the key material. To `create a KMS key with no key material <https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys-create-cmk.html>`_ (for imported key material), set this value to ``EXTERNAL`` . For more information about importing key material into AWS KMS , see `Importing Key Material <https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html>`_ in the *AWS Key Management Service Developer Guide* . You can ignore ``ENABLED`` when Origin is ``EXTERNAL`` . When a KMS key with Origin ``EXTERNAL`` is created, the key state is ``PENDING_IMPORT`` and ``ENABLED`` is ``false`` . After you import the key material, ``ENABLED`` updated to ``true`` . The KMS key can then be used for Cryptographic Operations. .. epigraph:: AWS CloudFormation doesn't support creating an ``Origin`` parameter of the ``AWS_CLOUDHSM`` or ``EXTERNAL_KEY_STORE`` values. Default: - "AWS_KMS"
         :param pending_window_in_days: Specifies the number of days in the waiting period before AWS KMS deletes a KMS key that has been removed from a CloudFormation stack. Enter a value between 7 and 30 days. The default value is 30 days. When you remove a KMS key from a CloudFormation stack, AWS KMS schedules the KMS key for deletion and starts the mandatory waiting period. The ``PendingWindowInDays`` property determines the length of waiting period. During the waiting period, the key state of KMS key is ``Pending Deletion`` or ``Pending Replica Deletion`` , which prevents the KMS key from being used in cryptographic operations. When the waiting period expires, AWS KMS permanently deletes the KMS key. AWS KMS will not delete a `multi-Region primary key <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html>`_ that has replica keys. If you remove a multi-Region primary key from a CloudFormation stack, its key state changes to ``PendingReplicaDeletion`` so it cannot be replicated or used in cryptographic operations. This state can persist indefinitely. When the last of its replica keys is deleted, the key state of the primary key changes to ``PendingDeletion`` and the waiting period specified by ``PendingWindowInDays`` begins. When this waiting period expires, AWS KMS deletes the primary key. For details, see `Deleting multi-Region keys <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-delete.html>`_ in the *AWS Key Management Service Developer Guide* . You cannot use a CloudFormation template to cancel deletion of the KMS key after you remove it from the stack, regardless of the waiting period. If you specify a KMS key in your template, even one with the same name, CloudFormation creates a new KMS key. To cancel deletion of a KMS key, use the AWS KMS console or the `CancelKeyDeletion <https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html>`_ operation. For information about the ``Pending Deletion`` and ``Pending Replica Deletion`` key states, see `Key state: Effect on your KMS key <https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html>`_ in the *AWS Key Management Service Developer Guide* . For more information about deleting KMS keys, see the `ScheduleKeyDeletion <https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html>`_ operation in the *AWS Key Management Service API Reference* and `Deleting KMS keys <https://docs.aws.amazon.com/kms/latest/developerguide/deleting-keys.html>`_ in the *AWS Key Management Service Developer Guide* .
+        :param rotation_period_in_days: The number of days between each automatic rotation. The default value is 365 days. Default: - 365
         :param tags: Assigns one or more tags to the replica key. .. epigraph:: Tagging or untagging a KMS key can allow or deny permission to the KMS key. For details, see `ABAC for AWS KMS <https://docs.aws.amazon.com/kms/latest/developerguide/abac.html>`_ in the *AWS Key Management Service Developer Guide* . For information about tags in AWS KMS , see `Tagging keys <https://docs.aws.amazon.com/kms/latest/developerguide/tagging-keys.html>`_ in the *AWS Key Management Service Developer Guide* . For information about tags in CloudFormation, see `Tag <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html>`_ .
         '''
         if __debug__:
@@ -752,6 +754,7 @@ class CfnKey(
             multi_region=multi_region,
             origin=origin,
             pending_window_in_days=pending_window_in_days,
+            rotation_period_in_days=rotation_period_in_days,
             tags=tags,
         )
 
@@ -976,6 +979,19 @@ class CfnKey(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "pendingWindowInDays", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="rotationPeriodInDays")
+    def rotation_period_in_days(self) -> typing.Optional[jsii.Number]:
+        '''The number of days between each automatic rotation.'''
+        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "rotationPeriodInDays"))
+
+    @rotation_period_in_days.setter
+    def rotation_period_in_days(self, value: typing.Optional[jsii.Number]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3b766cb0a8ed53bed340510bfb429fb6a5f36d2f63f9c7718fb1f0c92f2fbc59)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "rotationPeriodInDays", value)
+
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -1004,6 +1020,7 @@ class CfnKey(
         "multi_region": "multiRegion",
         "origin": "origin",
         "pending_window_in_days": "pendingWindowInDays",
+        "rotation_period_in_days": "rotationPeriodInDays",
         "tags": "tags",
     },
 )
@@ -1021,6 +1038,7 @@ class CfnKeyProps:
         multi_region: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         origin: typing.Optional[builtins.str] = None,
         pending_window_in_days: typing.Optional[jsii.Number] = None,
+        rotation_period_in_days: typing.Optional[jsii.Number] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnKey``.
@@ -1035,6 +1053,7 @@ class CfnKeyProps:
         :param multi_region: Creates a multi-Region primary key that you can replicate in other AWS Regions . You can't change the ``MultiRegion`` value after the KMS key is created. For a list of AWS Regions in which multi-Region keys are supported, see `Multi-Region keys in AWS KMS <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html>`_ in the ** . .. epigraph:: If you change the value of the ``MultiRegion`` property on an existing KMS key, the update request fails, regardless of the value of the ```UpdateReplacePolicy`` attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html>`_ . This prevents you from accidentally deleting a KMS key by changing an immutable property value. For a multi-Region key, set to this property to ``true`` . For a single-Region key, omit this property or set it to ``false`` . The default value is ``false`` . *Multi-Region keys* are an AWS KMS feature that lets you create multiple interoperable KMS keys in different AWS Regions . Because these KMS keys have the same key ID, key material, and other metadata, you can use them to encrypt data in one AWS Region and decrypt it in a different AWS Region without making a cross-Region call or exposing the plaintext data. For more information, see `Multi-Region keys <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html>`_ in the *AWS Key Management Service Developer Guide* . You can create a symmetric encryption, HMAC, or asymmetric multi-Region KMS key, and you can create a multi-Region key with imported key material. However, you cannot create a multi-Region key in a custom key store. To create a replica of this primary key in a different AWS Region , create an `AWS::KMS::ReplicaKey <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-replicakey.html>`_ resource in a CloudFormation stack in the replica Region. Specify the key ARN of this primary key. Default: - false
         :param origin: The source of the key material for the KMS key. You cannot change the origin after you create the KMS key. The default is ``AWS_KMS`` , which means that AWS KMS creates the key material. To `create a KMS key with no key material <https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys-create-cmk.html>`_ (for imported key material), set this value to ``EXTERNAL`` . For more information about importing key material into AWS KMS , see `Importing Key Material <https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html>`_ in the *AWS Key Management Service Developer Guide* . You can ignore ``ENABLED`` when Origin is ``EXTERNAL`` . When a KMS key with Origin ``EXTERNAL`` is created, the key state is ``PENDING_IMPORT`` and ``ENABLED`` is ``false`` . After you import the key material, ``ENABLED`` updated to ``true`` . The KMS key can then be used for Cryptographic Operations. .. epigraph:: AWS CloudFormation doesn't support creating an ``Origin`` parameter of the ``AWS_CLOUDHSM`` or ``EXTERNAL_KEY_STORE`` values. Default: - "AWS_KMS"
         :param pending_window_in_days: Specifies the number of days in the waiting period before AWS KMS deletes a KMS key that has been removed from a CloudFormation stack. Enter a value between 7 and 30 days. The default value is 30 days. When you remove a KMS key from a CloudFormation stack, AWS KMS schedules the KMS key for deletion and starts the mandatory waiting period. The ``PendingWindowInDays`` property determines the length of waiting period. During the waiting period, the key state of KMS key is ``Pending Deletion`` or ``Pending Replica Deletion`` , which prevents the KMS key from being used in cryptographic operations. When the waiting period expires, AWS KMS permanently deletes the KMS key. AWS KMS will not delete a `multi-Region primary key <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html>`_ that has replica keys. If you remove a multi-Region primary key from a CloudFormation stack, its key state changes to ``PendingReplicaDeletion`` so it cannot be replicated or used in cryptographic operations. This state can persist indefinitely. When the last of its replica keys is deleted, the key state of the primary key changes to ``PendingDeletion`` and the waiting period specified by ``PendingWindowInDays`` begins. When this waiting period expires, AWS KMS deletes the primary key. For details, see `Deleting multi-Region keys <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-delete.html>`_ in the *AWS Key Management Service Developer Guide* . You cannot use a CloudFormation template to cancel deletion of the KMS key after you remove it from the stack, regardless of the waiting period. If you specify a KMS key in your template, even one with the same name, CloudFormation creates a new KMS key. To cancel deletion of a KMS key, use the AWS KMS console or the `CancelKeyDeletion <https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html>`_ operation. For information about the ``Pending Deletion`` and ``Pending Replica Deletion`` key states, see `Key state: Effect on your KMS key <https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html>`_ in the *AWS Key Management Service Developer Guide* . For more information about deleting KMS keys, see the `ScheduleKeyDeletion <https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html>`_ operation in the *AWS Key Management Service API Reference* and `Deleting KMS keys <https://docs.aws.amazon.com/kms/latest/developerguide/deleting-keys.html>`_ in the *AWS Key Management Service Developer Guide* .
+        :param rotation_period_in_days: The number of days between each automatic rotation. The default value is 365 days. Default: - 365
         :param tags: Assigns one or more tags to the replica key. .. epigraph:: Tagging or untagging a KMS key can allow or deny permission to the KMS key. For details, see `ABAC for AWS KMS <https://docs.aws.amazon.com/kms/latest/developerguide/abac.html>`_ in the *AWS Key Management Service Developer Guide* . For information about tags in AWS KMS , see `Tagging keys <https://docs.aws.amazon.com/kms/latest/developerguide/tagging-keys.html>`_ in the *AWS Key Management Service Developer Guide* . For information about tags in CloudFormation, see `Tag <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html
@@ -1059,6 +1078,7 @@ class CfnKeyProps:
                 multi_region=False,
                 origin="origin",
                 pending_window_in_days=123,
+                rotation_period_in_days=123,
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -1077,6 +1097,7 @@ class CfnKeyProps:
             check_type(argname="argument multi_region", value=multi_region, expected_type=type_hints["multi_region"])
             check_type(argname="argument origin", value=origin, expected_type=type_hints["origin"])
             check_type(argname="argument pending_window_in_days", value=pending_window_in_days, expected_type=type_hints["pending_window_in_days"])
+            check_type(argname="argument rotation_period_in_days", value=rotation_period_in_days, expected_type=type_hints["rotation_period_in_days"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if bypass_policy_lockout_safety_check is not None:
@@ -1099,6 +1120,8 @@ class CfnKeyProps:
             self._values["origin"] = origin
         if pending_window_in_days is not None:
             self._values["pending_window_in_days"] = pending_window_in_days
+        if rotation_period_in_days is not None:
+            self._values["rotation_period_in_days"] = rotation_period_in_days
         if tags is not None:
             self._values["tags"] = tags
 
@@ -1326,6 +1349,19 @@ class CfnKeyProps:
         result = self._values.get("pending_window_in_days")
         return typing.cast(typing.Optional[jsii.Number], result)
 
+    @builtins.property
+    def rotation_period_in_days(self) -> typing.Optional[jsii.Number]:
+        '''The number of days between each automatic rotation.
+
+        The default value is 365 days.
+
+        :default: - 365
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html#cfn-kms-key-rotationperiodindays
+        '''
+        result = self._values.get("rotation_period_in_days")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''Assigns one or more tags to the replica key.
@@ -3186,6 +3222,7 @@ def _typecheckingstub__5ea678e9e5a947601d16e5bb11fec3683fbb15bba768bee0b88be7e19
     multi_region: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     origin: typing.Optional[builtins.str] = None,
     pending_window_in_days: typing.Optional[jsii.Number] = None,
+    rotation_period_in_days: typing.Optional[jsii.Number] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -3263,6 +3300,12 @@ def _typecheckingstub__1d3e524eda3827ec1d53e329afc207f3ef954caf7cf407b25faef721f
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__3b766cb0a8ed53bed340510bfb429fb6a5f36d2f63f9c7718fb1f0c92f2fbc59(
+    value: typing.Optional[jsii.Number],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__b85648b8166c62900697e128ab3a35c1360fdab37323145ed7b7c76dd91c4576(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
@@ -3281,6 +3324,7 @@ def _typecheckingstub__52751771c8b3e52917eaf0c78bad67c065fa3f95795e92f5eab3e92ce
     multi_region: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     origin: typing.Optional[builtins.str] = None,
     pending_window_in_days: typing.Optional[jsii.Number] = None,
+    rotation_period_in_days: typing.Optional[jsii.Number] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""

aws_cdk/aws_lambda/__init__.py

@@ -2917,6 +2917,15 @@ class CfnAlias(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="attrAliasArn")
+    def attr_alias_arn(self) -> builtins.str:
+        '''Lambda Alias ARN generated by the service.
+
+        :cloudformationAttribute: AliasArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrAliasArn"))
+
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:

aws_cdk/aws_oam/__init__.py

@@ -46,6 +46,7 @@ import constructs as _constructs_77d1e7e8
 from .. import (
     CfnResource as _CfnResource_9df397a6,
     IInspectable as _IInspectable_c2943556,
+    IResolvable as _IResolvable_da3f097b,
     ITaggable as _ITaggable_36806126,
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
@@ -84,6 +85,14 @@ class CfnLink(
         
             # the properties below are optional
             label_template="labelTemplate",
+            link_configuration=oam.CfnLink.LinkConfigurationProperty(
+                log_group_configuration=oam.CfnLink.LinkFilterProperty(
+                    filter="filter"
+                ),
+                metric_configuration=oam.CfnLink.LinkFilterProperty(
+                    filter="filter"
+                )
+            ),
             tags={
                 "tags_key": "tags"
             }
@@ -98,6 +107,7 @@ class CfnLink(
         resource_types: typing.Sequence[builtins.str],
         sink_identifier: builtins.str,
         label_template: typing.Optional[builtins.str] = None,
+        link_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLink.LinkConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     ) -> None:
         '''
@@ -106,6 +116,7 @@ class CfnLink(
         :param resource_types: An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor`` .
         :param sink_identifier: The ARN of the sink in the monitoring account that you want to link to. You can use `ListSinks <https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListSinks.html>`_ to find the ARNs of sinks.
         :param label_template: Specify a friendly human-readable name to use to identify this source account when you are viewing data from it in the monitoring account. You can include the following variables in your template: - ``$AccountName`` is the name of the account - ``$AccountEmail`` is a globally-unique email address, which includes the email domain, such as ``mariagarcia@example.com`` - ``$AccountEmailNoDomain`` is an email address without the domain name, such as ``mariagarcia``
+        :param link_configuration: 
         :param tags: An array of key-value pairs to apply to the link. For more information, see `Tag <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html>`_ .
         '''
         if __debug__:
@@ -116,6 +127,7 @@ class CfnLink(
             resource_types=resource_types,
             sink_identifier=sink_identifier,
             label_template=label_template,
+            link_configuration=link_configuration,
             tags=tags,
         )
 
@@ -223,6 +235,23 @@ class CfnLink(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "labelTemplate", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="linkConfiguration")
+    def link_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLink.LinkConfigurationProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLink.LinkConfigurationProperty"]], jsii.get(self, "linkConfiguration"))
+
+    @link_configuration.setter
+    def link_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLink.LinkConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__27fdc6d36999b24ee51a7ee604dfe60c82600027c0449d54ba66cc13499ab90c)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "linkConfiguration", value)
+
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
@@ -239,6 +268,134 @@ class CfnLink(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "tagsRaw", value)
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_oam.CfnLink.LinkConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "log_group_configuration": "logGroupConfiguration",
+            "metric_configuration": "metricConfiguration",
+        },
+    )
+    class LinkConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            log_group_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLink.LinkFilterProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            metric_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLink.LinkFilterProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''
+            :param log_group_configuration: 
+            :param metric_configuration: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_oam as oam
+                
+                link_configuration_property = oam.CfnLink.LinkConfigurationProperty(
+                    log_group_configuration=oam.CfnLink.LinkFilterProperty(
+                        filter="filter"
+                    ),
+                    metric_configuration=oam.CfnLink.LinkFilterProperty(
+                        filter="filter"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__ec2ec5a3ca147f06b311c2c2b0a7e72f655d6d296f564d1ae2c8d5d08d27c5d6)
+                check_type(argname="argument log_group_configuration", value=log_group_configuration, expected_type=type_hints["log_group_configuration"])
+                check_type(argname="argument metric_configuration", value=metric_configuration, expected_type=type_hints["metric_configuration"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if log_group_configuration is not None:
+                self._values["log_group_configuration"] = log_group_configuration
+            if metric_configuration is not None:
+                self._values["metric_configuration"] = metric_configuration
+
+        @builtins.property
+        def log_group_configuration(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLink.LinkFilterProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkconfiguration.html#cfn-oam-link-linkconfiguration-loggroupconfiguration
+            '''
+            result = self._values.get("log_group_configuration")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLink.LinkFilterProperty"]], result)
+
+        @builtins.property
+        def metric_configuration(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLink.LinkFilterProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkconfiguration.html#cfn-oam-link-linkconfiguration-metricconfiguration
+            '''
+            result = self._values.get("metric_configuration")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLink.LinkFilterProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "LinkConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_oam.CfnLink.LinkFilterProperty",
+        jsii_struct_bases=[],
+        name_mapping={"filter": "filter"},
+    )
+    class LinkFilterProperty:
+        def __init__(self, *, filter: builtins.str) -> None:
+            '''
+            :param filter: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkfilter.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_oam as oam
+                
+                link_filter_property = oam.CfnLink.LinkFilterProperty(
+                    filter="filter"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__3a6822df441121f7f9fd0663c8f7c4745082bfd61605fab5fc6e5ce1c75b1f52)
+                check_type(argname="argument filter", value=filter, expected_type=type_hints["filter"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "filter": filter,
+            }
+
+        @builtins.property
+        def filter(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkfilter.html#cfn-oam-link-linkfilter-filter
+            '''
+            result = self._values.get("filter")
+            assert result is not None, "Required property 'filter' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "LinkFilterProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_oam.CfnLinkProps",
@@ -247,6 +404,7 @@ class CfnLink(
         "resource_types": "resourceTypes",
         "sink_identifier": "sinkIdentifier",
         "label_template": "labelTemplate",
+        "link_configuration": "linkConfiguration",
         "tags": "tags",
     },
 )
@@ -257,6 +415,7 @@ class CfnLinkProps:
         resource_types: typing.Sequence[builtins.str],
         sink_identifier: builtins.str,
         label_template: typing.Optional[builtins.str] = None,
+        link_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLink.LinkConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     ) -> None:
         '''Properties for defining a ``CfnLink``.
@@ -264,6 +423,7 @@ class CfnLinkProps:
         :param resource_types: An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor`` .
         :param sink_identifier: The ARN of the sink in the monitoring account that you want to link to. You can use `ListSinks <https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListSinks.html>`_ to find the ARNs of sinks.
         :param label_template: Specify a friendly human-readable name to use to identify this source account when you are viewing data from it in the monitoring account. You can include the following variables in your template: - ``$AccountName`` is the name of the account - ``$AccountEmail`` is a globally-unique email address, which includes the email domain, such as ``mariagarcia@example.com`` - ``$AccountEmailNoDomain`` is an email address without the domain name, such as ``mariagarcia``
+        :param link_configuration: 
         :param tags: An array of key-value pairs to apply to the link. For more information, see `Tag <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-oam-link.html
@@ -281,6 +441,14 @@ class CfnLinkProps:
             
                 # the properties below are optional
                 label_template="labelTemplate",
+                link_configuration=oam.CfnLink.LinkConfigurationProperty(
+                    log_group_configuration=oam.CfnLink.LinkFilterProperty(
+                        filter="filter"
+                    ),
+                    metric_configuration=oam.CfnLink.LinkFilterProperty(
+                        filter="filter"
+                    )
+                ),
                 tags={
                     "tags_key": "tags"
                 }
@@ -291,6 +459,7 @@ class CfnLinkProps:
             check_type(argname="argument resource_types", value=resource_types, expected_type=type_hints["resource_types"])
             check_type(argname="argument sink_identifier", value=sink_identifier, expected_type=type_hints["sink_identifier"])
             check_type(argname="argument label_template", value=label_template, expected_type=type_hints["label_template"])
+            check_type(argname="argument link_configuration", value=link_configuration, expected_type=type_hints["link_configuration"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "resource_types": resource_types,
@@ -298,6 +467,8 @@ class CfnLinkProps:
         }
         if label_template is not None:
             self._values["label_template"] = label_template
+        if link_configuration is not None:
+            self._values["link_configuration"] = link_configuration
         if tags is not None:
             self._values["tags"] = tags
 
@@ -340,6 +511,16 @@ class CfnLinkProps:
         result = self._values.get("label_template")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def link_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnLink.LinkConfigurationProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-oam-link.html#cfn-oam-link-linkconfiguration
+        '''
+        result = self._values.get("link_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnLink.LinkConfigurationProperty]], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
         '''An array of key-value pairs to apply to the link.
@@ -635,6 +816,7 @@ def _typecheckingstub__2ffbd6521de55eb2e3d4f2bc8edac2d144f850a53dbdfd3dac4b15916
     resource_types: typing.Sequence[builtins.str],
     sink_identifier: builtins.str,
     label_template: typing.Optional[builtins.str] = None,
+    link_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLink.LinkConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -670,17 +852,39 @@ def _typecheckingstub__997e0a25bd896cf32312772dad16f8a1714d949b05e540d8b70c8452e
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__27fdc6d36999b24ee51a7ee604dfe60c82600027c0449d54ba66cc13499ab90c(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnLink.LinkConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__db8d2dd2bb0af63f05d76d96179bc7f7bcb803b9dedeabd14ee88e08a8734269(
     value: typing.Optional[typing.Mapping[builtins.str, builtins.str]],
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__ec2ec5a3ca147f06b311c2c2b0a7e72f655d6d296f564d1ae2c8d5d08d27c5d6(
+    *,
+    log_group_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLink.LinkFilterProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    metric_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLink.LinkFilterProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3a6822df441121f7f9fd0663c8f7c4745082bfd61605fab5fc6e5ce1c75b1f52(
+    *,
+    filter: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__debdd90801a5b490b9ec98da9bb17f5329c1db3816f558321a3ce7bdfb7aab12(
     *,
     resource_types: typing.Sequence[builtins.str],
     sink_identifier: builtins.str,
     label_template: typing.Optional[builtins.str] = None,
+    link_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLink.LinkConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
 ) -> None:
     """Type checking stubs"""