aws-cdk-lib 2.139.1__tar.gz → 2.140.0__tar.gz

{aws-cdk-lib-2.139.1/src/aws_cdk_lib.egg-info → aws-cdk-lib-2.140.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: aws-cdk-lib
-Version: 2.139.1
+Version: 2.140.0
 Summary: Version 2 of the AWS Cloud Development Kit library
 Home-page: https://github.com/aws/aws-cdk
 Author: Amazon Web Services

{aws-cdk-lib-2.139.1 → aws-cdk-lib-2.140.0}/setup.py

@@ -5,7 +5,7 @@ kwargs = json.loads(
     """
 {
     "name": "aws-cdk-lib",
-    "version": "2.139.1",
+    "version": "2.140.0",
     "description": "Version 2 of the AWS Cloud Development Kit library",
     "license": "Apache-2.0",
     "url": "https://github.com/aws/aws-cdk",
@@ -216,12 +216,14 @@ kwargs = json.loads(
         "aws_cdk.aws_organizations",
         "aws_cdk.aws_osis",
         "aws_cdk.aws_panorama",
+        "aws_cdk.aws_paymentcryptography",
         "aws_cdk.aws_pcaconnectorad",
         "aws_cdk.aws_personalize",
         "aws_cdk.aws_pinpoint",
         "aws_cdk.aws_pinpointemail",
         "aws_cdk.aws_pipes",
         "aws_cdk.aws_proton",
+        "aws_cdk.aws_qbusiness",
         "aws_cdk.aws_qldb",
         "aws_cdk.aws_quicksight",
         "aws_cdk.aws_ram",
@@ -238,6 +240,7 @@ kwargs = json.loads(
         "aws_cdk.aws_route53",
         "aws_cdk.aws_route53_patterns",
         "aws_cdk.aws_route53_targets",
+        "aws_cdk.aws_route53profiles",
         "aws_cdk.aws_route53recoverycontrol",
         "aws_cdk.aws_route53recoveryreadiness",
         "aws_cdk.aws_route53resolver",
@@ -302,7 +305,7 @@ kwargs = json.loads(
     ],
     "package_data": {
         "aws_cdk._jsii": [
-            "aws-cdk-lib@2.139.1.jsii.tgz"
+            "aws-cdk-lib@2.140.0.jsii.tgz"
         ],
         "aws_cdk": [
             "py.typed"
@@ -314,7 +317,7 @@ kwargs = json.loads(
         "aws-cdk.asset-kubectl-v20>=2.1.2, <3.0.0",
         "aws-cdk.asset-node-proxy-agent-v6>=2.0.3, <3.0.0",
         "constructs>=10.0.0, <11.0.0",
-        "jsii>=1.97.0, <2.0.0",
+        "jsii>=1.98.0, <2.0.0",
         "publication>=0.0.3",
         "typeguard~=2.13.3"
     ],

{aws-cdk-lib-2.139.1 → aws-cdk-lib-2.140.0}/src/aws_cdk/__init__.py

@@ -12140,6 +12140,7 @@ class Duration(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Duration"):
         cr.AwsCustomResource(self, "Customized",
             role=my_role,  # must be assumable by the `lambda.amazonaws.com` service principal
             timeout=Duration.minutes(10),  # defaults to 2 minutes
+            memory_size=1025,  # defaults to 512 if installLatestAwsSdk is true
             log_group=logs.LogGroup(self, "AwsCustomResourceLogs",
                 retention=logs.RetentionDays.ONE_DAY
             ),
@@ -18067,6 +18068,7 @@ class RemovalPolicy(enum.Enum):
         cr.AwsCustomResource(self, "Customized",
             role=my_role,  # must be assumable by the `lambda.amazonaws.com` service principal
             timeout=Duration.minutes(10),  # defaults to 2 minutes
+            memory_size=1025,  # defaults to 512 if installLatestAwsSdk is true
             log_group=logs.LogGroup(self, "AwsCustomResourceLogs",
                 retention=logs.RetentionDays.ONE_DAY
             ),
@@ -33991,12 +33993,14 @@ __all__ = [
     "aws_organizations",
     "aws_osis",
     "aws_panorama",
+    "aws_paymentcryptography",
     "aws_pcaconnectorad",
     "aws_personalize",
     "aws_pinpoint",
     "aws_pinpointemail",
     "aws_pipes",
     "aws_proton",
+    "aws_qbusiness",
     "aws_qldb",
     "aws_quicksight",
     "aws_ram",
@@ -34013,6 +34017,7 @@ __all__ = [
     "aws_route53",
     "aws_route53_patterns",
     "aws_route53_targets",
+    "aws_route53profiles",
     "aws_route53recoverycontrol",
     "aws_route53recoveryreadiness",
     "aws_route53resolver",
@@ -34271,12 +34276,14 @@ from . import aws_opsworkscm
 from . import aws_organizations
 from . import aws_osis
 from . import aws_panorama
+from . import aws_paymentcryptography
 from . import aws_pcaconnectorad
 from . import aws_personalize
 from . import aws_pinpoint
 from . import aws_pinpointemail
 from . import aws_pipes
 from . import aws_proton
+from . import aws_qbusiness
 from . import aws_qldb
 from . import aws_quicksight
 from . import aws_ram
@@ -34293,6 +34300,7 @@ from . import aws_rolesanywhere
 from . import aws_route53
 from . import aws_route53_patterns
 from . import aws_route53_targets
+from . import aws_route53profiles
 from . import aws_route53recoverycontrol
 from . import aws_route53recoveryreadiness
 from . import aws_route53resolver

{aws-cdk-lib-2.139.1 → aws-cdk-lib-2.140.0}/src/aws_cdk/_jsii/__init__.py

@@ -19,7 +19,7 @@ import aws_cdk.asset_node_proxy_agent_v6._jsii
 import constructs._jsii
 
 __jsii_assembly__ = jsii.JSIIAssembly.load(
-    "aws-cdk-lib", "2.139.1", __name__[0:-6], "aws-cdk-lib@2.139.1.jsii.tgz"
+    "aws-cdk-lib", "2.140.0", __name__[0:-6], "aws-cdk-lib@2.140.0.jsii.tgz"
 )
 
 __all__ = [

{aws-cdk-lib-2.139.1 → aws-cdk-lib-2.140.0}/src/aws_cdk/aws_acmpca/__init__.py

@@ -2566,8 +2566,10 @@ class CfnCertificateAuthority(
                         ),
                         dns_name="dnsName",
                         edi_party_name=acmpca.CfnCertificateAuthority.EdiPartyNameProperty(
-                            name_assigner="nameAssigner",
-                            party_name="partyName"
+                            party_name="partyName",
+                
+                            # the properties below are optional
+                            name_assigner="nameAssigner"
                         ),
                         ip_address="ipAddress",
                         other_name=acmpca.CfnCertificateAuthority.OtherNameProperty(
@@ -2709,9 +2711,9 @@ class CfnCertificateAuthority(
         jsii_type="aws-cdk-lib.aws_acmpca.CfnCertificateAuthority.CrlConfigurationProperty",
         jsii_struct_bases=[],
         name_mapping={
+            "enabled": "enabled",
             "crl_distribution_point_extension_configuration": "crlDistributionPointExtensionConfiguration",
             "custom_cname": "customCname",
-            "enabled": "enabled",
             "expiration_in_days": "expirationInDays",
             "s3_bucket_name": "s3BucketName",
             "s3_object_acl": "s3ObjectAcl",
@@ -2721,9 +2723,9 @@ class CfnCertificateAuthority(
         def __init__(
             self,
             *,
+            enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
             crl_distribution_point_extension_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCertificateAuthority.CrlDistributionPointExtensionConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             custom_cname: typing.Optional[builtins.str] = None,
-            enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             expiration_in_days: typing.Optional[jsii.Number] = None,
             s3_bucket_name: typing.Optional[builtins.str] = None,
             s3_object_acl: typing.Optional[builtins.str] = None,
@@ -2762,9 +2764,9 @@ class CfnCertificateAuthority(
 
             For more information, see `Planning a certificate revocation list (CRL) <https://docs.aws.amazon.com/privateca/latest/userguide/crl-planning.html>`_ in the *AWS Private Certificate Authority User Guide*
 
+            :param enabled: Boolean value that specifies whether certificate revocation lists (CRLs) are enabled. You can use this value to enable certificate revocation for a new CA when you call the ``CreateCertificateAuthority`` operation or for an existing CA when you call the ``UpdateCertificateAuthority`` operation.
             :param crl_distribution_point_extension_configuration: Configures the default behavior of the CRL Distribution Point extension for certificates issued by your CA. If this field is not provided, then the CRL Distribution Point extension will be present and contain the default CRL URL.
             :param custom_cname: Name inserted into the certificate *CRL Distribution Points* extension that enables the use of an alias for the CRL distribution point. Use this value if you don't want the name of your S3 bucket to be public. .. epigraph:: The content of a Canonical Name (CNAME) record must conform to `RFC2396 <https://docs.aws.amazon.com/https://www.ietf.org/rfc/rfc2396.txt>`_ restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as "http://" or "https://".
-            :param enabled: Boolean value that specifies whether certificate revocation lists (CRLs) are enabled. You can use this value to enable certificate revocation for a new CA when you call the ``CreateCertificateAuthority`` operation or for an existing CA when you call the ``UpdateCertificateAuthority`` operation.
             :param expiration_in_days: Validity period of the CRL in days.
             :param s3_bucket_name: Name of the S3 bucket that contains the CRL. If you do not provide a value for the *CustomCname* argument, the name of your S3 bucket is placed into the *CRL Distribution Points* extension of the issued certificate. You can change the name of your bucket by calling the `UpdateCertificateAuthority <https://docs.aws.amazon.com/privateca/latest/APIReference/API_UpdateCertificateAuthority.html>`_ operation. You must specify a `bucket policy <https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-policies>`_ that allows AWS Private CA to write the CRL to your bucket. .. epigraph:: The ``S3BucketName`` parameter must conform to the `S3 bucket naming rules <https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html>`_ .
             :param s3_object_acl: Determines whether the CRL will be publicly readable or privately held in the CRL Amazon S3 bucket. If you choose PUBLIC_READ, the CRL will be accessible over the public internet. If you choose BUCKET_OWNER_FULL_CONTROL, only the owner of the CRL S3 bucket can access the CRL, and your PKI clients may need an alternative method of access. If no value is specified, the default is PUBLIC_READ. *Note:* This default can cause CA creation to fail in some circumstances. If you have have enabled the Block Public Access (BPA) feature in your S3 account, then you must specify the value of this parameter as ``BUCKET_OWNER_FULL_CONTROL`` , and not doing so results in an error. If you have disabled BPA in S3, then you can specify either ``BUCKET_OWNER_FULL_CONTROL`` or ``PUBLIC_READ`` as the value. For more information, see `Blocking public access to the S3 bucket <https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-bpa>`_ .
@@ -2779,11 +2781,13 @@ class CfnCertificateAuthority(
                 from aws_cdk import aws_acmpca as acmpca
                 
                 crl_configuration_property = acmpca.CfnCertificateAuthority.CrlConfigurationProperty(
+                    enabled=False,
+                
+                    # the properties below are optional
                     crl_distribution_point_extension_configuration=acmpca.CfnCertificateAuthority.CrlDistributionPointExtensionConfigurationProperty(
                         omit_extension=False
                     ),
                     custom_cname="customCname",
-                    enabled=False,
                     expiration_in_days=123,
                     s3_bucket_name="s3BucketName",
                     s3_object_acl="s3ObjectAcl"
@@ -2791,19 +2795,19 @@ class CfnCertificateAuthority(
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__de72782a3b3117c1f101c2c6c2fad457863e581a5bdcd67a1280a825dc55ea17)
+                check_type(argname="argument enabled", value=enabled, expected_type=type_hints["enabled"])
                 check_type(argname="argument crl_distribution_point_extension_configuration", value=crl_distribution_point_extension_configuration, expected_type=type_hints["crl_distribution_point_extension_configuration"])
                 check_type(argname="argument custom_cname", value=custom_cname, expected_type=type_hints["custom_cname"])
-                check_type(argname="argument enabled", value=enabled, expected_type=type_hints["enabled"])
                 check_type(argname="argument expiration_in_days", value=expiration_in_days, expected_type=type_hints["expiration_in_days"])
                 check_type(argname="argument s3_bucket_name", value=s3_bucket_name, expected_type=type_hints["s3_bucket_name"])
                 check_type(argname="argument s3_object_acl", value=s3_object_acl, expected_type=type_hints["s3_object_acl"])
-            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "enabled": enabled,
+            }
             if crl_distribution_point_extension_configuration is not None:
                 self._values["crl_distribution_point_extension_configuration"] = crl_distribution_point_extension_configuration
             if custom_cname is not None:
                 self._values["custom_cname"] = custom_cname
-            if enabled is not None:
-                self._values["enabled"] = enabled
             if expiration_in_days is not None:
                 self._values["expiration_in_days"] = expiration_in_days
             if s3_bucket_name is not None:
@@ -2811,6 +2815,18 @@ class CfnCertificateAuthority(
             if s3_object_acl is not None:
                 self._values["s3_object_acl"] = s3_object_acl
 
+        @builtins.property
+        def enabled(self) -> typing.Union[builtins.bool, _IResolvable_da3f097b]:
+            '''Boolean value that specifies whether certificate revocation lists (CRLs) are enabled.
+
+            You can use this value to enable certificate revocation for a new CA when you call the ``CreateCertificateAuthority`` operation or for an existing CA when you call the ``UpdateCertificateAuthority`` operation.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-crlconfiguration.html#cfn-acmpca-certificateauthority-crlconfiguration-enabled
+            '''
+            result = self._values.get("enabled")
+            assert result is not None, "Required property 'enabled' is missing"
+            return typing.cast(typing.Union[builtins.bool, _IResolvable_da3f097b], result)
+
         @builtins.property
         def crl_distribution_point_extension_configuration(
             self,
@@ -2838,19 +2854,6 @@ class CfnCertificateAuthority(
             result = self._values.get("custom_cname")
             return typing.cast(typing.Optional[builtins.str], result)
 
-        @builtins.property
-        def enabled(
-            self,
-        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''Boolean value that specifies whether certificate revocation lists (CRLs) are enabled.
-
-            You can use this value to enable certificate revocation for a new CA when you call the ``CreateCertificateAuthority`` operation or for an existing CA when you call the ``UpdateCertificateAuthority`` operation.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-crlconfiguration.html#cfn-acmpca-certificateauthority-crlconfiguration-enabled
-            '''
-            result = self._values.get("enabled")
-            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
-
         @builtins.property
         def expiration_in_days(self) -> typing.Optional[jsii.Number]:
             '''Validity period of the CRL in days.
@@ -3032,8 +3035,10 @@ class CfnCertificateAuthority(
                             ),
                             dns_name="dnsName",
                             edi_party_name=acmpca.CfnCertificateAuthority.EdiPartyNameProperty(
-                                name_assigner="nameAssigner",
-                                party_name="partyName"
+                                party_name="partyName",
+                
+                                # the properties below are optional
+                                name_assigner="nameAssigner"
                             ),
                             ip_address="ipAddress",
                             other_name=acmpca.CfnCertificateAuthority.OtherNameProperty(
@@ -3170,19 +3175,19 @@ class CfnCertificateAuthority(
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_acmpca.CfnCertificateAuthority.EdiPartyNameProperty",
         jsii_struct_bases=[],
-        name_mapping={"name_assigner": "nameAssigner", "party_name": "partyName"},
+        name_mapping={"party_name": "partyName", "name_assigner": "nameAssigner"},
     )
     class EdiPartyNameProperty:
         def __init__(
             self,
             *,
-            name_assigner: builtins.str,
             party_name: builtins.str,
+            name_assigner: typing.Optional[builtins.str] = None,
         ) -> None:
             '''Describes an Electronic Data Interchange (EDI) entity as described in as defined in `Subject Alternative Name <https://docs.aws.amazon.com/https://datatracker.ietf.org/doc/html/rfc5280>`_ in RFC 5280.
 
-            :param name_assigner: Specifies the name assigner.
             :param party_name: Specifies the party name.
+            :param name_assigner: Specifies the name assigner.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-edipartyname.html
             :exampleMetadata: fixture=_generated
@@ -3194,28 +3199,21 @@ class CfnCertificateAuthority(
                 from aws_cdk import aws_acmpca as acmpca
                 
                 edi_party_name_property = acmpca.CfnCertificateAuthority.EdiPartyNameProperty(
-                    name_assigner="nameAssigner",
-                    party_name="partyName"
+                    party_name="partyName",
+                
+                    # the properties below are optional
+                    name_assigner="nameAssigner"
                 )
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__e187a86a6b5c31d0b8c99e998eea3f8683787066dcfd319750892c59195bf6e8)
-                check_type(argname="argument name_assigner", value=name_assigner, expected_type=type_hints["name_assigner"])
                 check_type(argname="argument party_name", value=party_name, expected_type=type_hints["party_name"])
+                check_type(argname="argument name_assigner", value=name_assigner, expected_type=type_hints["name_assigner"])
             self._values: typing.Dict[builtins.str, typing.Any] = {
-                "name_assigner": name_assigner,
                 "party_name": party_name,
             }
-
-        @builtins.property
-        def name_assigner(self) -> builtins.str:
-            '''Specifies the name assigner.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-edipartyname.html#cfn-acmpca-certificateauthority-edipartyname-nameassigner
-            '''
-            result = self._values.get("name_assigner")
-            assert result is not None, "Required property 'name_assigner' is missing"
-            return typing.cast(builtins.str, result)
+            if name_assigner is not None:
+                self._values["name_assigner"] = name_assigner
 
         @builtins.property
         def party_name(self) -> builtins.str:
@@ -3227,6 +3225,15 @@ class CfnCertificateAuthority(
             assert result is not None, "Required property 'party_name' is missing"
             return typing.cast(builtins.str, result)
 
+        @builtins.property
+        def name_assigner(self) -> typing.Optional[builtins.str]:
+            '''Specifies the name assigner.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-edipartyname.html#cfn-acmpca-certificateauthority-edipartyname-nameassigner
+            '''
+            result = self._values.get("name_assigner")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -3308,8 +3315,10 @@ class CfnCertificateAuthority(
                     ),
                     dns_name="dnsName",
                     edi_party_name=acmpca.CfnCertificateAuthority.EdiPartyNameProperty(
-                        name_assigner="nameAssigner",
-                        party_name="partyName"
+                        party_name="partyName",
+                
+                        # the properties below are optional
+                        name_assigner="nameAssigner"
                     ),
                     ip_address="ipAddress",
                     other_name=acmpca.CfnCertificateAuthority.OtherNameProperty(
@@ -3672,7 +3681,7 @@ class CfnCertificateAuthority(
         def __init__(
             self,
             *,
-            enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+            enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
             ocsp_custom_cname: typing.Optional[builtins.str] = None,
         ) -> None:
             '''Contains information to enable and configure Online Certificate Status Protocol (OCSP) for validating certificate revocation status.
@@ -3691,6 +3700,8 @@ class CfnCertificateAuthority(
                 
                 ocsp_configuration_property = acmpca.CfnCertificateAuthority.OcspConfigurationProperty(
                     enabled=False,
+                
+                    # the properties below are optional
                     ocsp_custom_cname="ocspCustomCname"
                 )
             '''
@@ -3698,22 +3709,21 @@ class CfnCertificateAuthority(
                 type_hints = typing.get_type_hints(_typecheckingstub__db2a6b0f215dcb411b988d99d6a91fb7c758aefe4260650026b58ba7b1cddde5)
                 check_type(argname="argument enabled", value=enabled, expected_type=type_hints["enabled"])
                 check_type(argname="argument ocsp_custom_cname", value=ocsp_custom_cname, expected_type=type_hints["ocsp_custom_cname"])
-            self._values: typing.Dict[builtins.str, typing.Any] = {}
-            if enabled is not None:
-                self._values["enabled"] = enabled
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "enabled": enabled,
+            }
             if ocsp_custom_cname is not None:
                 self._values["ocsp_custom_cname"] = ocsp_custom_cname
 
         @builtins.property
-        def enabled(
-            self,
-        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        def enabled(self) -> typing.Union[builtins.bool, _IResolvable_da3f097b]:
             '''Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-ocspconfiguration.html#cfn-acmpca-certificateauthority-ocspconfiguration-enabled
             '''
             result = self._values.get("enabled")
-            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+            assert result is not None, "Required property 'enabled' is missing"
+            return typing.cast(typing.Union[builtins.bool, _IResolvable_da3f097b], result)
 
         @builtins.property
         def ocsp_custom_cname(self) -> typing.Optional[builtins.str]:
@@ -3846,17 +3856,21 @@ class CfnCertificateAuthority(
                 
                 revocation_configuration_property = acmpca.CfnCertificateAuthority.RevocationConfigurationProperty(
                     crl_configuration=acmpca.CfnCertificateAuthority.CrlConfigurationProperty(
+                        enabled=False,
+                
+                        # the properties below are optional
                         crl_distribution_point_extension_configuration=acmpca.CfnCertificateAuthority.CrlDistributionPointExtensionConfigurationProperty(
                             omit_extension=False
                         ),
                         custom_cname="customCname",
-                        enabled=False,
                         expiration_in_days=123,
                         s3_bucket_name="s3BucketName",
                         s3_object_acl="s3ObjectAcl"
                     ),
                     ocsp_configuration=acmpca.CfnCertificateAuthority.OcspConfigurationProperty(
                         enabled=False,
+                
+                        # the properties below are optional
                         ocsp_custom_cname="ocspCustomCname"
                     )
                 )
@@ -5603,9 +5617,9 @@ def _typecheckingstub__a665d65bdd95c9f57ee7ca3fee24e377b63436ab67f86d6e09696910c
 
 def _typecheckingstub__de72782a3b3117c1f101c2c6c2fad457863e581a5bdcd67a1280a825dc55ea17(
     *,
+    enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
     crl_distribution_point_extension_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCertificateAuthority.CrlDistributionPointExtensionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     custom_cname: typing.Optional[builtins.str] = None,
-    enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     expiration_in_days: typing.Optional[jsii.Number] = None,
     s3_bucket_name: typing.Optional[builtins.str] = None,
     s3_object_acl: typing.Optional[builtins.str] = None,
@@ -5638,8 +5652,8 @@ def _typecheckingstub__f0caab149cb10c9e2e41c808164411855ca5f9298e171e0db7a1a0913
 
 def _typecheckingstub__e187a86a6b5c31d0b8c99e998eea3f8683787066dcfd319750892c59195bf6e8(
     *,
-    name_assigner: builtins.str,
     party_name: builtins.str,
+    name_assigner: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5675,7 +5689,7 @@ def _typecheckingstub__f8dd4df3844e389720f6addec59149d792d65195686e07b6e154c3a6d
 
 def _typecheckingstub__db2a6b0f215dcb411b988d99d6a91fb7c758aefe4260650026b58ba7b1cddde5(
     *,
-    enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
     ocsp_custom_cname: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""