aws-cdk-lib 2.143.1__py3-none-any.whl → 2.145.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (43) hide show
  1. aws_cdk/__init__.py +1 -1
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.143.1.jsii.tgz → aws-cdk-lib@2.145.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_apigatewayv2_authorizers/__init__.py +27 -0
  5. aws_cdk/aws_apigatewayv2_integrations/__init__.py +28 -0
  6. aws_cdk/aws_appconfig/__init__.py +132 -1
  7. aws_cdk/aws_autoscaling/__init__.py +4 -4
  8. aws_cdk/aws_bedrock/__init__.py +48 -0
  9. aws_cdk/aws_chatbot/__init__.py +149 -2
  10. aws_cdk/aws_cloudfront/experimental/__init__.py +65 -9
  11. aws_cdk/aws_codebuild/__init__.py +801 -16
  12. aws_cdk/aws_config/__init__.py +1305 -45
  13. aws_cdk/aws_dynamodb/__init__.py +309 -3
  14. aws_cdk/aws_ec2/__init__.py +112 -31
  15. aws_cdk/aws_ecs_patterns/__init__.py +89 -7
  16. aws_cdk/aws_eks/__init__.py +185 -41
  17. aws_cdk/aws_fsx/__init__.py +4 -4
  18. aws_cdk/aws_glue/__init__.py +39 -0
  19. aws_cdk/aws_iam/__init__.py +3 -3
  20. aws_cdk/aws_lambda/__init__.py +605 -42
  21. aws_cdk/aws_lambda_nodejs/__init__.py +160 -13
  22. aws_cdk/aws_logs/__init__.py +114 -8
  23. aws_cdk/aws_logs_destinations/__init__.py +11 -9
  24. aws_cdk/aws_mediaconnect/__init__.py +2 -6
  25. aws_cdk/aws_medialive/__init__.py +20 -2
  26. aws_cdk/aws_mediapackagev2/__init__.py +476 -0
  27. aws_cdk/aws_rds/__init__.py +27 -19
  28. aws_cdk/aws_route53/__init__.py +3 -3
  29. aws_cdk/aws_s3/__init__.py +21 -0
  30. aws_cdk/aws_s3_deployment/__init__.py +3 -2
  31. aws_cdk/aws_securityhub/__init__.py +2415 -374
  32. aws_cdk/aws_securitylake/__init__.py +179 -314
  33. aws_cdk/aws_sqs/__init__.py +2 -2
  34. aws_cdk/aws_stepfunctions/__init__.py +53 -24
  35. aws_cdk/aws_stepfunctions_tasks/__init__.py +763 -16
  36. aws_cdk/pipelines/__init__.py +2 -0
  37. aws_cdk/triggers/__init__.py +65 -9
  38. {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/METADATA +1 -1
  39. {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/RECORD +43 -43
  40. {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/WHEEL +1 -1
  41. {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/LICENSE +0 -0
  42. {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/NOTICE +0 -0
  43. {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/top_level.txt +0 -0
@@ -1323,14 +1323,14 @@ rds.DatabaseInstance(self, "Database",
1323
1323
 
1324
1324
  You cannot specify a parameter map and a parameter group at the same time.
1325
1325
 
1326
- ## Serverless
1326
+ ## Serverless v1
1327
1327
 
1328
- [Amazon Aurora Serverless](https://aws.amazon.com/rds/aurora/serverless/) is an on-demand, auto-scaling configuration for Amazon
1328
+ [Amazon Aurora Serverless v1](https://aws.amazon.com/rds/aurora/serverless/) is an on-demand, auto-scaling configuration for Amazon
1329
1329
  Aurora. The database will automatically start up, shut down, and scale capacity
1330
1330
  up or down based on your application's needs. It enables you to run your database
1331
1331
  in the cloud without managing any database instances.
1332
1332
 
1333
- The following example initializes an Aurora Serverless PostgreSql cluster.
1333
+ The following example initializes an Aurora Serverless v1 PostgreSql cluster.
1334
1334
  Aurora Serverless clusters can specify scaling properties which will be used to
1335
1335
  automatically scale the database cluster seamlessly based on the workload.
1336
1336
 
@@ -1353,7 +1353,9 @@ cluster = rds.ServerlessCluster(self, "AnotherCluster",
1353
1353
  )
1354
1354
  ```
1355
1355
 
1356
- Aurora Serverless Clusters do not support the following features:
1356
+ **Note**: The `rds.ServerlessCluster` class is for Aurora Serverless v1. If you want to use Aurora Serverless v2, use the `rds.DatabaseCluster` class.
1357
+
1358
+ Aurora Serverless v1 Clusters do not support the following features:
1357
1359
 
1358
1360
  * Loading data from an Amazon S3 bucket
1359
1361
  * Saving data to an Amazon S3 bucket
@@ -1368,9 +1370,9 @@ Aurora Serverless Clusters do not support the following features:
1368
1370
  * Performance Insights
1369
1371
  * RDS Proxy
1370
1372
 
1371
- Read more about the [limitations of Aurora Serverless](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html#aurora-serverless.limitations)
1373
+ Read more about the [limitations of Aurora Serverless v1](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html#aurora-serverless.limitations)
1372
1374
 
1373
- Learn more about using Amazon Aurora Serverless by reading the [documentation](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html)
1375
+ Learn more about using Amazon Aurora Serverless v1 by reading the [documentation](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html)
1374
1376
 
1375
1377
  Use `ServerlessClusterFromSnapshot` to create a serverless cluster from a snapshot:
1376
1378
 
@@ -1384,7 +1386,7 @@ rds.ServerlessClusterFromSnapshot(self, "Cluster",
1384
1386
  )
1385
1387
  ```
1386
1388
 
1387
- ### Data API
1389
+ ## Data API
1388
1390
 
1389
1391
  You can access your Aurora DB cluster using the built-in Data API. The Data API doesn't require a persistent connection to the DB cluster. Instead, it provides a secure HTTP endpoint and integration with AWS SDKs.
1390
1392
 
@@ -1416,7 +1418,7 @@ cluster.grant_data_api_access(fn)
1416
1418
 
1417
1419
  To learn more about using the Data API, see the [documentation](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/data-api.html).
1418
1420
 
1419
- ### Default VPC
1421
+ ## Default VPC
1420
1422
 
1421
1423
  The `vpc` parameter is optional.
1422
1424
 
@@ -1424,7 +1426,7 @@ If not provided, the cluster will be created in the default VPC of the account a
1424
1426
  As this VPC is not deployed with AWS CDK, you can't configure the `vpcSubnets`, `subnetGroup` or `securityGroups` of the Aurora Serverless Cluster.
1425
1427
  If you want to provide one of `vpcSubnets`, `subnetGroup` or `securityGroups` parameter, please provide a `vpc`.
1426
1428
 
1427
- ### Preferred Maintenance Window
1429
+ ## Preferred Maintenance Window
1428
1430
 
1429
1431
  When creating an RDS cluster, it is possible to (optionally) specify a preferred maintenance window for the cluster as well as the instances under the cluster.
1430
1432
  See [AWS docs](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#Concepts.DBMaintenance) for more information regarding maintenance windows.
@@ -2542,6 +2544,12 @@ class AuroraMysqlEngineVersion(
2542
2544
  '''Version "8.0.mysql_aurora.3.04.1".'''
2543
2545
  return typing.cast("AuroraMysqlEngineVersion", jsii.sget(cls, "VER_3_04_1"))
2544
2546
 
2547
+ @jsii.python.classproperty
2548
+ @jsii.member(jsii_name="VER_3_04_2")
2549
+ def VER_3_04_2(cls) -> "AuroraMysqlEngineVersion":
2550
+ '''Version "8.0.mysql_aurora.3.04.2".'''
2551
+ return typing.cast("AuroraMysqlEngineVersion", jsii.sget(cls, "VER_3_04_2"))
2552
+
2545
2553
  @jsii.python.classproperty
2546
2554
  @jsii.member(jsii_name="VER_3_05_0")
2547
2555
  def VER_3_05_0(cls) -> "AuroraMysqlEngineVersion":
@@ -34207,7 +34215,7 @@ class ServerlessCluster(
34207
34215
  metaclass=jsii.JSIIMeta,
34208
34216
  jsii_type="aws-cdk-lib.aws_rds.ServerlessCluster",
34209
34217
  ):
34210
- '''Create an Aurora Serverless Cluster.
34218
+ '''Create an Aurora Serverless v1 Cluster.
34211
34219
 
34212
34220
  :resource: AWS::RDS::DBCluster
34213
34221
  :exampleMetadata: infused
@@ -34313,7 +34321,7 @@ class ServerlessCluster(
34313
34321
  :param security_groups: Security group. Default: - a new security group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no VPC security groups will be associated with the DB cluster.
34314
34322
  :param storage_encryption_key: The KMS key for storage encryption. Default: - the default master key will be used for storage encryption
34315
34323
  :param subnet_group: Existing subnet group for the cluster. Default: - a new subnet group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no subnet group will be associated with the DB cluster
34316
- :param vpc: The VPC that this Aurora Serverless cluster has been created in. Default: - the default VPC in the account and region will be used
34324
+ :param vpc: The VPC that this Aurora Serverless v1 Cluster has been created in. Default: - the default VPC in the account and region will be used
34317
34325
  :param vpc_subnets: Where to place the instances within the VPC. If provided, the ``vpc`` property must also be specified. Default: - the VPC default strategy if not specified.
34318
34326
  '''
34319
34327
  if __debug__:
@@ -34674,7 +34682,7 @@ class ServerlessClusterFromSnapshot(
34674
34682
  metaclass=jsii.JSIIMeta,
34675
34683
  jsii_type="aws-cdk-lib.aws_rds.ServerlessClusterFromSnapshot",
34676
34684
  ):
34677
- '''A Aurora Serverless Cluster restored from a snapshot.
34685
+ '''A Aurora Serverless v1 Cluster restored from a snapshot.
34678
34686
 
34679
34687
  :resource: AWS::RDS::DBCluster
34680
34688
  :exampleMetadata: infused
@@ -34729,7 +34737,7 @@ class ServerlessClusterFromSnapshot(
34729
34737
  :param scaling: Scaling configuration of an Aurora Serverless database cluster. Default: - Serverless cluster is automatically paused after 5 minutes of being idle. minimum capacity: 2 ACU maximum capacity: 16 ACU
34730
34738
  :param security_groups: Security group. Default: - a new security group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no VPC security groups will be associated with the DB cluster.
34731
34739
  :param subnet_group: Existing subnet group for the cluster. Default: - a new subnet group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no subnet group will be associated with the DB cluster
34732
- :param vpc: The VPC that this Aurora Serverless cluster has been created in. Default: - the default VPC in the account and region will be used
34740
+ :param vpc: The VPC that this Aurora Serverless v1 Cluster has been created in. Default: - the default VPC in the account and region will be used
34733
34741
  :param vpc_subnets: Where to place the instances within the VPC. If provided, the ``vpc`` property must also be specified. Default: - the VPC default strategy if not specified.
34734
34742
  '''
34735
34743
  if __debug__:
@@ -34891,7 +34899,7 @@ class ServerlessClusterFromSnapshotProps:
34891
34899
  :param scaling: Scaling configuration of an Aurora Serverless database cluster. Default: - Serverless cluster is automatically paused after 5 minutes of being idle. minimum capacity: 2 ACU maximum capacity: 16 ACU
34892
34900
  :param security_groups: Security group. Default: - a new security group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no VPC security groups will be associated with the DB cluster.
34893
34901
  :param subnet_group: Existing subnet group for the cluster. Default: - a new subnet group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no subnet group will be associated with the DB cluster
34894
- :param vpc: The VPC that this Aurora Serverless cluster has been created in. Default: - the default VPC in the account and region will be used
34902
+ :param vpc: The VPC that this Aurora Serverless v1 Cluster has been created in. Default: - the default VPC in the account and region will be used
34895
34903
  :param vpc_subnets: Where to place the instances within the VPC. If provided, the ``vpc`` property must also be specified. Default: - the VPC default strategy if not specified.
34896
34904
 
34897
34905
  :exampleMetadata: infused
@@ -35107,7 +35115,7 @@ class ServerlessClusterFromSnapshotProps:
35107
35115
 
35108
35116
  @builtins.property
35109
35117
  def vpc(self) -> typing.Optional[_IVpc_f30d5663]:
35110
- '''The VPC that this Aurora Serverless cluster has been created in.
35118
+ '''The VPC that this Aurora Serverless v1 Cluster has been created in.
35111
35119
 
35112
35120
  :default: - the default VPC in the account and region will be used
35113
35121
  '''
@@ -35180,7 +35188,7 @@ class ServerlessClusterProps:
35180
35188
  vpc: typing.Optional[_IVpc_f30d5663] = None,
35181
35189
  vpc_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
35182
35190
  ) -> None:
35183
- '''Properties for a new Aurora Serverless Cluster.
35191
+ '''Properties for a new Aurora Serverless v1 Cluster.
35184
35192
 
35185
35193
  :param engine: What kind of database to start.
35186
35194
  :param backup_retention: The number of days during which automatic DB snapshots are retained. Automatic backup retention cannot be disabled on serverless clusters. Must be a value from 1 day to 35 days. Default: Duration.days(1)
@@ -35196,7 +35204,7 @@ class ServerlessClusterProps:
35196
35204
  :param security_groups: Security group. Default: - a new security group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no VPC security groups will be associated with the DB cluster.
35197
35205
  :param storage_encryption_key: The KMS key for storage encryption. Default: - the default master key will be used for storage encryption
35198
35206
  :param subnet_group: Existing subnet group for the cluster. Default: - a new subnet group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no subnet group will be associated with the DB cluster
35199
- :param vpc: The VPC that this Aurora Serverless cluster has been created in. Default: - the default VPC in the account and region will be used
35207
+ :param vpc: The VPC that this Aurora Serverless v1 Cluster has been created in. Default: - the default VPC in the account and region will be used
35200
35208
  :param vpc_subnets: Where to place the instances within the VPC. If provided, the ``vpc`` property must also be specified. Default: - the VPC default strategy if not specified.
35201
35209
 
35202
35210
  :exampleMetadata: infused
@@ -35459,7 +35467,7 @@ class ServerlessClusterProps:
35459
35467
 
35460
35468
  @builtins.property
35461
35469
  def vpc(self) -> typing.Optional[_IVpc_f30d5663]:
35462
- '''The VPC that this Aurora Serverless cluster has been created in.
35470
+ '''The VPC that this Aurora Serverless v1 Cluster has been created in.
35463
35471
 
35464
35472
  :default: - the default VPC in the account and region will be used
35465
35473
  '''
@@ -35510,7 +35518,7 @@ class ServerlessScalingOptions:
35510
35518
  timeout: typing.Optional[_Duration_4839e8c3] = None,
35511
35519
  timeout_action: typing.Optional["TimeoutAction"] = None,
35512
35520
  ) -> None:
35513
- '''Options for configuring scaling on an Aurora Serverless cluster.
35521
+ '''Options for configuring scaling on an Aurora Serverless v1 Cluster.
35514
35522
 
35515
35523
  :param auto_pause: The time before an Aurora Serverless database cluster is paused. A database cluster can be paused only when it is idle (it has no connections). Auto pause time must be between 5 minutes and 1 day. If a DB cluster is paused for more than seven days, the DB cluster might be backed up with a snapshot. In this case, the DB cluster is restored when there is a request to connect to it. Set to 0 to disable Default: - automatic pause enabled after 5 minutes
35516
35524
  :param max_capacity: The maximum capacity for an Aurora Serverless database cluster. Default: - determined by Aurora based on database engine
@@ -321,7 +321,7 @@ delegation_role = iam.Role.from_role_arn(self, "DelegationRole", delegation_role
321
321
 
322
322
  # create the record
323
323
  route53.CrossAccountZoneDelegationRecord(self, "delegate",
324
- delegated_zone=sub_zone,
324
+ delegated_zone=sub_zone, # Note that an imported HostedZone is not supported as Name Servers info will not be available
325
325
  parent_hosted_zone_name="someexample.com", # or you can use parentHostedZoneId
326
326
  delegation_role=delegation_role
327
327
  )
@@ -6201,7 +6201,7 @@ class CrossAccountZoneDelegationRecord(
6201
6201
 
6202
6202
  # create the record
6203
6203
  route53.CrossAccountZoneDelegationRecord(self, "delegate",
6204
- delegated_zone=sub_zone,
6204
+ delegated_zone=sub_zone, # Note that an imported HostedZone is not supported as Name Servers info will not be available
6205
6205
  parent_hosted_zone_name="someexample.com", # or you can use parentHostedZoneId
6206
6206
  delegation_role=delegation_role
6207
6207
  )
@@ -6303,7 +6303,7 @@ class CrossAccountZoneDelegationRecordProps:
6303
6303
 
6304
6304
  # create the record
6305
6305
  route53.CrossAccountZoneDelegationRecord(self, "delegate",
6306
- delegated_zone=sub_zone,
6306
+ delegated_zone=sub_zone, # Note that an imported HostedZone is not supported as Name Servers info will not be available
6307
6307
  parent_hosted_zone_name="someexample.com", # or you can use parentHostedZoneId
6308
6308
  delegation_role=delegation_role
6309
6309
  )
@@ -363,6 +363,27 @@ bucket = s3.Bucket(self, "MyBlockedBucket",
363
363
 
364
364
  When `blockPublicPolicy` is set to `true`, `grantPublicRead()` throws an error.
365
365
 
366
+ ## Public Read Access
367
+
368
+ Use `publicReadAccess` to allow public read access to the bucket.
369
+
370
+ Note that to enable `publicReadAccess`, make sure both bucket-level and account-level block public access control is disabled.
371
+
372
+ Bucket-level block public access control can be configured through `blockPublicAccess` property. Account-level block public
373
+ access control can be configured on AWS Console -> S3 -> Block Public Access settings for this account (Navigation Panel).
374
+
375
+ ```python
376
+ bucket = s3.Bucket(self, "Bucket",
377
+ public_read_access=True,
378
+ block_public_access={
379
+ "block_public_policy": False,
380
+ "block_public_acls": False,
381
+ "ignore_public_acls": False,
382
+ "restrict_public_buckets": False
383
+ }
384
+ )
385
+ ```
386
+
366
387
  ## Logging configuration
367
388
 
368
389
  Use `serverAccessLogsBucket` to describe where server access logs are to be stored.
@@ -499,8 +499,9 @@ cdk.CfnOutput(self, "ObjectKey",
499
499
  ## Development
500
500
 
501
501
  The custom resource is implemented in Python 3.9 in order to be able to leverage
502
- the AWS CLI for "aws s3 sync". The code is under [`lib/lambda`](https://github.com/aws/aws-cdk/tree/main/packages/aws-cdk-lib/aws-s3-deployment/lib/lambda) and
503
- unit tests are under [`test/lambda`](https://github.com/aws/aws-cdk/tree/main/packages/aws-cdk-lib/aws-s3-deployment/test/lambda).
502
+ the AWS CLI for "aws s3 sync".
503
+ The code is now in the `@aws-cdk/custom-resource-handlers` package under [`lib/aws-s3-deployment/bucket-deployment-handler`](https://github.com/aws/aws-cdk/tree/main/packages/@aws-cdk/custom-resource-handlers/lib/aws-s3-deployment/bucket-deployment-handler/) and
504
+ unit tests are under [`test/aws-s3-deployment/bucket-deployment-handler`](https://github.com/aws/aws-cdk/tree/main/packages/@aws-cdk/custom-resource-handlers/test/aws-s3-deployment/bucket-deployment-handler/).
504
505
 
505
506
  This package requires Python 3.9 during build time in order to create the custom
506
507
  resource Lambda bundle and test it. It also relies on a few bash scripts, so