aws-cdk-lib 2.143.1__py3-none-any.whl → 2.145.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of aws-cdk-lib might be problematic. Click here for more details.
- aws_cdk/__init__.py +1 -1
- aws_cdk/_jsii/__init__.py +1 -1
- aws_cdk/_jsii/{aws-cdk-lib@2.143.1.jsii.tgz → aws-cdk-lib@2.145.0.jsii.tgz} +0 -0
- aws_cdk/aws_apigatewayv2_authorizers/__init__.py +27 -0
- aws_cdk/aws_apigatewayv2_integrations/__init__.py +28 -0
- aws_cdk/aws_appconfig/__init__.py +132 -1
- aws_cdk/aws_autoscaling/__init__.py +4 -4
- aws_cdk/aws_bedrock/__init__.py +48 -0
- aws_cdk/aws_chatbot/__init__.py +149 -2
- aws_cdk/aws_cloudfront/experimental/__init__.py +65 -9
- aws_cdk/aws_codebuild/__init__.py +801 -16
- aws_cdk/aws_config/__init__.py +1305 -45
- aws_cdk/aws_dynamodb/__init__.py +309 -3
- aws_cdk/aws_ec2/__init__.py +112 -31
- aws_cdk/aws_ecs_patterns/__init__.py +89 -7
- aws_cdk/aws_eks/__init__.py +185 -41
- aws_cdk/aws_fsx/__init__.py +4 -4
- aws_cdk/aws_glue/__init__.py +39 -0
- aws_cdk/aws_iam/__init__.py +3 -3
- aws_cdk/aws_lambda/__init__.py +605 -42
- aws_cdk/aws_lambda_nodejs/__init__.py +160 -13
- aws_cdk/aws_logs/__init__.py +114 -8
- aws_cdk/aws_logs_destinations/__init__.py +11 -9
- aws_cdk/aws_mediaconnect/__init__.py +2 -6
- aws_cdk/aws_medialive/__init__.py +20 -2
- aws_cdk/aws_mediapackagev2/__init__.py +476 -0
- aws_cdk/aws_rds/__init__.py +27 -19
- aws_cdk/aws_route53/__init__.py +3 -3
- aws_cdk/aws_s3/__init__.py +21 -0
- aws_cdk/aws_s3_deployment/__init__.py +3 -2
- aws_cdk/aws_securityhub/__init__.py +2415 -374
- aws_cdk/aws_securitylake/__init__.py +179 -314
- aws_cdk/aws_sqs/__init__.py +2 -2
- aws_cdk/aws_stepfunctions/__init__.py +53 -24
- aws_cdk/aws_stepfunctions_tasks/__init__.py +763 -16
- aws_cdk/pipelines/__init__.py +2 -0
- aws_cdk/triggers/__init__.py +65 -9
- {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/METADATA +1 -1
- {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/RECORD +43 -43
- {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/WHEEL +1 -1
- {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/LICENSE +0 -0
- {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/NOTICE +0 -0
- {aws_cdk_lib-2.143.1.dist-info → aws_cdk_lib-2.145.0.dist-info}/top_level.txt +0 -0
aws_cdk/aws_rds/__init__.py
CHANGED
|
@@ -1323,14 +1323,14 @@ rds.DatabaseInstance(self, "Database",
|
|
|
1323
1323
|
|
|
1324
1324
|
You cannot specify a parameter map and a parameter group at the same time.
|
|
1325
1325
|
|
|
1326
|
-
## Serverless
|
|
1326
|
+
## Serverless v1
|
|
1327
1327
|
|
|
1328
|
-
[Amazon Aurora Serverless](https://aws.amazon.com/rds/aurora/serverless/) is an on-demand, auto-scaling configuration for Amazon
|
|
1328
|
+
[Amazon Aurora Serverless v1](https://aws.amazon.com/rds/aurora/serverless/) is an on-demand, auto-scaling configuration for Amazon
|
|
1329
1329
|
Aurora. The database will automatically start up, shut down, and scale capacity
|
|
1330
1330
|
up or down based on your application's needs. It enables you to run your database
|
|
1331
1331
|
in the cloud without managing any database instances.
|
|
1332
1332
|
|
|
1333
|
-
The following example initializes an Aurora Serverless PostgreSql cluster.
|
|
1333
|
+
The following example initializes an Aurora Serverless v1 PostgreSql cluster.
|
|
1334
1334
|
Aurora Serverless clusters can specify scaling properties which will be used to
|
|
1335
1335
|
automatically scale the database cluster seamlessly based on the workload.
|
|
1336
1336
|
|
|
@@ -1353,7 +1353,9 @@ cluster = rds.ServerlessCluster(self, "AnotherCluster",
|
|
|
1353
1353
|
)
|
|
1354
1354
|
```
|
|
1355
1355
|
|
|
1356
|
-
Aurora Serverless
|
|
1356
|
+
**Note**: The `rds.ServerlessCluster` class is for Aurora Serverless v1. If you want to use Aurora Serverless v2, use the `rds.DatabaseCluster` class.
|
|
1357
|
+
|
|
1358
|
+
Aurora Serverless v1 Clusters do not support the following features:
|
|
1357
1359
|
|
|
1358
1360
|
* Loading data from an Amazon S3 bucket
|
|
1359
1361
|
* Saving data to an Amazon S3 bucket
|
|
@@ -1368,9 +1370,9 @@ Aurora Serverless Clusters do not support the following features:
|
|
|
1368
1370
|
* Performance Insights
|
|
1369
1371
|
* RDS Proxy
|
|
1370
1372
|
|
|
1371
|
-
Read more about the [limitations of Aurora Serverless](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html#aurora-serverless.limitations)
|
|
1373
|
+
Read more about the [limitations of Aurora Serverless v1](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html#aurora-serverless.limitations)
|
|
1372
1374
|
|
|
1373
|
-
Learn more about using Amazon Aurora Serverless by reading the [documentation](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html)
|
|
1375
|
+
Learn more about using Amazon Aurora Serverless v1 by reading the [documentation](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html)
|
|
1374
1376
|
|
|
1375
1377
|
Use `ServerlessClusterFromSnapshot` to create a serverless cluster from a snapshot:
|
|
1376
1378
|
|
|
@@ -1384,7 +1386,7 @@ rds.ServerlessClusterFromSnapshot(self, "Cluster",
|
|
|
1384
1386
|
)
|
|
1385
1387
|
```
|
|
1386
1388
|
|
|
1387
|
-
|
|
1389
|
+
## Data API
|
|
1388
1390
|
|
|
1389
1391
|
You can access your Aurora DB cluster using the built-in Data API. The Data API doesn't require a persistent connection to the DB cluster. Instead, it provides a secure HTTP endpoint and integration with AWS SDKs.
|
|
1390
1392
|
|
|
@@ -1416,7 +1418,7 @@ cluster.grant_data_api_access(fn)
|
|
|
1416
1418
|
|
|
1417
1419
|
To learn more about using the Data API, see the [documentation](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/data-api.html).
|
|
1418
1420
|
|
|
1419
|
-
|
|
1421
|
+
## Default VPC
|
|
1420
1422
|
|
|
1421
1423
|
The `vpc` parameter is optional.
|
|
1422
1424
|
|
|
@@ -1424,7 +1426,7 @@ If not provided, the cluster will be created in the default VPC of the account a
|
|
|
1424
1426
|
As this VPC is not deployed with AWS CDK, you can't configure the `vpcSubnets`, `subnetGroup` or `securityGroups` of the Aurora Serverless Cluster.
|
|
1425
1427
|
If you want to provide one of `vpcSubnets`, `subnetGroup` or `securityGroups` parameter, please provide a `vpc`.
|
|
1426
1428
|
|
|
1427
|
-
|
|
1429
|
+
## Preferred Maintenance Window
|
|
1428
1430
|
|
|
1429
1431
|
When creating an RDS cluster, it is possible to (optionally) specify a preferred maintenance window for the cluster as well as the instances under the cluster.
|
|
1430
1432
|
See [AWS docs](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#Concepts.DBMaintenance) for more information regarding maintenance windows.
|
|
@@ -2542,6 +2544,12 @@ class AuroraMysqlEngineVersion(
|
|
|
2542
2544
|
'''Version "8.0.mysql_aurora.3.04.1".'''
|
|
2543
2545
|
return typing.cast("AuroraMysqlEngineVersion", jsii.sget(cls, "VER_3_04_1"))
|
|
2544
2546
|
|
|
2547
|
+
@jsii.python.classproperty
|
|
2548
|
+
@jsii.member(jsii_name="VER_3_04_2")
|
|
2549
|
+
def VER_3_04_2(cls) -> "AuroraMysqlEngineVersion":
|
|
2550
|
+
'''Version "8.0.mysql_aurora.3.04.2".'''
|
|
2551
|
+
return typing.cast("AuroraMysqlEngineVersion", jsii.sget(cls, "VER_3_04_2"))
|
|
2552
|
+
|
|
2545
2553
|
@jsii.python.classproperty
|
|
2546
2554
|
@jsii.member(jsii_name="VER_3_05_0")
|
|
2547
2555
|
def VER_3_05_0(cls) -> "AuroraMysqlEngineVersion":
|
|
@@ -34207,7 +34215,7 @@ class ServerlessCluster(
|
|
|
34207
34215
|
metaclass=jsii.JSIIMeta,
|
|
34208
34216
|
jsii_type="aws-cdk-lib.aws_rds.ServerlessCluster",
|
|
34209
34217
|
):
|
|
34210
|
-
'''Create an Aurora Serverless Cluster.
|
|
34218
|
+
'''Create an Aurora Serverless v1 Cluster.
|
|
34211
34219
|
|
|
34212
34220
|
:resource: AWS::RDS::DBCluster
|
|
34213
34221
|
:exampleMetadata: infused
|
|
@@ -34313,7 +34321,7 @@ class ServerlessCluster(
|
|
|
34313
34321
|
:param security_groups: Security group. Default: - a new security group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no VPC security groups will be associated with the DB cluster.
|
|
34314
34322
|
:param storage_encryption_key: The KMS key for storage encryption. Default: - the default master key will be used for storage encryption
|
|
34315
34323
|
:param subnet_group: Existing subnet group for the cluster. Default: - a new subnet group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no subnet group will be associated with the DB cluster
|
|
34316
|
-
:param vpc: The VPC that this Aurora Serverless
|
|
34324
|
+
:param vpc: The VPC that this Aurora Serverless v1 Cluster has been created in. Default: - the default VPC in the account and region will be used
|
|
34317
34325
|
:param vpc_subnets: Where to place the instances within the VPC. If provided, the ``vpc`` property must also be specified. Default: - the VPC default strategy if not specified.
|
|
34318
34326
|
'''
|
|
34319
34327
|
if __debug__:
|
|
@@ -34674,7 +34682,7 @@ class ServerlessClusterFromSnapshot(
|
|
|
34674
34682
|
metaclass=jsii.JSIIMeta,
|
|
34675
34683
|
jsii_type="aws-cdk-lib.aws_rds.ServerlessClusterFromSnapshot",
|
|
34676
34684
|
):
|
|
34677
|
-
'''A Aurora Serverless Cluster restored from a snapshot.
|
|
34685
|
+
'''A Aurora Serverless v1 Cluster restored from a snapshot.
|
|
34678
34686
|
|
|
34679
34687
|
:resource: AWS::RDS::DBCluster
|
|
34680
34688
|
:exampleMetadata: infused
|
|
@@ -34729,7 +34737,7 @@ class ServerlessClusterFromSnapshot(
|
|
|
34729
34737
|
:param scaling: Scaling configuration of an Aurora Serverless database cluster. Default: - Serverless cluster is automatically paused after 5 minutes of being idle. minimum capacity: 2 ACU maximum capacity: 16 ACU
|
|
34730
34738
|
:param security_groups: Security group. Default: - a new security group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no VPC security groups will be associated with the DB cluster.
|
|
34731
34739
|
:param subnet_group: Existing subnet group for the cluster. Default: - a new subnet group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no subnet group will be associated with the DB cluster
|
|
34732
|
-
:param vpc: The VPC that this Aurora Serverless
|
|
34740
|
+
:param vpc: The VPC that this Aurora Serverless v1 Cluster has been created in. Default: - the default VPC in the account and region will be used
|
|
34733
34741
|
:param vpc_subnets: Where to place the instances within the VPC. If provided, the ``vpc`` property must also be specified. Default: - the VPC default strategy if not specified.
|
|
34734
34742
|
'''
|
|
34735
34743
|
if __debug__:
|
|
@@ -34891,7 +34899,7 @@ class ServerlessClusterFromSnapshotProps:
|
|
|
34891
34899
|
:param scaling: Scaling configuration of an Aurora Serverless database cluster. Default: - Serverless cluster is automatically paused after 5 minutes of being idle. minimum capacity: 2 ACU maximum capacity: 16 ACU
|
|
34892
34900
|
:param security_groups: Security group. Default: - a new security group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no VPC security groups will be associated with the DB cluster.
|
|
34893
34901
|
:param subnet_group: Existing subnet group for the cluster. Default: - a new subnet group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no subnet group will be associated with the DB cluster
|
|
34894
|
-
:param vpc: The VPC that this Aurora Serverless
|
|
34902
|
+
:param vpc: The VPC that this Aurora Serverless v1 Cluster has been created in. Default: - the default VPC in the account and region will be used
|
|
34895
34903
|
:param vpc_subnets: Where to place the instances within the VPC. If provided, the ``vpc`` property must also be specified. Default: - the VPC default strategy if not specified.
|
|
34896
34904
|
|
|
34897
34905
|
:exampleMetadata: infused
|
|
@@ -35107,7 +35115,7 @@ class ServerlessClusterFromSnapshotProps:
|
|
|
35107
35115
|
|
|
35108
35116
|
@builtins.property
|
|
35109
35117
|
def vpc(self) -> typing.Optional[_IVpc_f30d5663]:
|
|
35110
|
-
'''The VPC that this Aurora Serverless
|
|
35118
|
+
'''The VPC that this Aurora Serverless v1 Cluster has been created in.
|
|
35111
35119
|
|
|
35112
35120
|
:default: - the default VPC in the account and region will be used
|
|
35113
35121
|
'''
|
|
@@ -35180,7 +35188,7 @@ class ServerlessClusterProps:
|
|
|
35180
35188
|
vpc: typing.Optional[_IVpc_f30d5663] = None,
|
|
35181
35189
|
vpc_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
|
|
35182
35190
|
) -> None:
|
|
35183
|
-
'''Properties for a new Aurora Serverless Cluster.
|
|
35191
|
+
'''Properties for a new Aurora Serverless v1 Cluster.
|
|
35184
35192
|
|
|
35185
35193
|
:param engine: What kind of database to start.
|
|
35186
35194
|
:param backup_retention: The number of days during which automatic DB snapshots are retained. Automatic backup retention cannot be disabled on serverless clusters. Must be a value from 1 day to 35 days. Default: Duration.days(1)
|
|
@@ -35196,7 +35204,7 @@ class ServerlessClusterProps:
|
|
|
35196
35204
|
:param security_groups: Security group. Default: - a new security group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no VPC security groups will be associated with the DB cluster.
|
|
35197
35205
|
:param storage_encryption_key: The KMS key for storage encryption. Default: - the default master key will be used for storage encryption
|
|
35198
35206
|
:param subnet_group: Existing subnet group for the cluster. Default: - a new subnet group is created if ``vpc`` was provided. If the ``vpc`` property was not provided, no subnet group will be associated with the DB cluster
|
|
35199
|
-
:param vpc: The VPC that this Aurora Serverless
|
|
35207
|
+
:param vpc: The VPC that this Aurora Serverless v1 Cluster has been created in. Default: - the default VPC in the account and region will be used
|
|
35200
35208
|
:param vpc_subnets: Where to place the instances within the VPC. If provided, the ``vpc`` property must also be specified. Default: - the VPC default strategy if not specified.
|
|
35201
35209
|
|
|
35202
35210
|
:exampleMetadata: infused
|
|
@@ -35459,7 +35467,7 @@ class ServerlessClusterProps:
|
|
|
35459
35467
|
|
|
35460
35468
|
@builtins.property
|
|
35461
35469
|
def vpc(self) -> typing.Optional[_IVpc_f30d5663]:
|
|
35462
|
-
'''The VPC that this Aurora Serverless
|
|
35470
|
+
'''The VPC that this Aurora Serverless v1 Cluster has been created in.
|
|
35463
35471
|
|
|
35464
35472
|
:default: - the default VPC in the account and region will be used
|
|
35465
35473
|
'''
|
|
@@ -35510,7 +35518,7 @@ class ServerlessScalingOptions:
|
|
|
35510
35518
|
timeout: typing.Optional[_Duration_4839e8c3] = None,
|
|
35511
35519
|
timeout_action: typing.Optional["TimeoutAction"] = None,
|
|
35512
35520
|
) -> None:
|
|
35513
|
-
'''Options for configuring scaling on an Aurora Serverless
|
|
35521
|
+
'''Options for configuring scaling on an Aurora Serverless v1 Cluster.
|
|
35514
35522
|
|
|
35515
35523
|
:param auto_pause: The time before an Aurora Serverless database cluster is paused. A database cluster can be paused only when it is idle (it has no connections). Auto pause time must be between 5 minutes and 1 day. If a DB cluster is paused for more than seven days, the DB cluster might be backed up with a snapshot. In this case, the DB cluster is restored when there is a request to connect to it. Set to 0 to disable Default: - automatic pause enabled after 5 minutes
|
|
35516
35524
|
:param max_capacity: The maximum capacity for an Aurora Serverless database cluster. Default: - determined by Aurora based on database engine
|
aws_cdk/aws_route53/__init__.py
CHANGED
|
@@ -321,7 +321,7 @@ delegation_role = iam.Role.from_role_arn(self, "DelegationRole", delegation_role
|
|
|
321
321
|
|
|
322
322
|
# create the record
|
|
323
323
|
route53.CrossAccountZoneDelegationRecord(self, "delegate",
|
|
324
|
-
delegated_zone=sub_zone,
|
|
324
|
+
delegated_zone=sub_zone, # Note that an imported HostedZone is not supported as Name Servers info will not be available
|
|
325
325
|
parent_hosted_zone_name="someexample.com", # or you can use parentHostedZoneId
|
|
326
326
|
delegation_role=delegation_role
|
|
327
327
|
)
|
|
@@ -6201,7 +6201,7 @@ class CrossAccountZoneDelegationRecord(
|
|
|
6201
6201
|
|
|
6202
6202
|
# create the record
|
|
6203
6203
|
route53.CrossAccountZoneDelegationRecord(self, "delegate",
|
|
6204
|
-
delegated_zone=sub_zone,
|
|
6204
|
+
delegated_zone=sub_zone, # Note that an imported HostedZone is not supported as Name Servers info will not be available
|
|
6205
6205
|
parent_hosted_zone_name="someexample.com", # or you can use parentHostedZoneId
|
|
6206
6206
|
delegation_role=delegation_role
|
|
6207
6207
|
)
|
|
@@ -6303,7 +6303,7 @@ class CrossAccountZoneDelegationRecordProps:
|
|
|
6303
6303
|
|
|
6304
6304
|
# create the record
|
|
6305
6305
|
route53.CrossAccountZoneDelegationRecord(self, "delegate",
|
|
6306
|
-
delegated_zone=sub_zone,
|
|
6306
|
+
delegated_zone=sub_zone, # Note that an imported HostedZone is not supported as Name Servers info will not be available
|
|
6307
6307
|
parent_hosted_zone_name="someexample.com", # or you can use parentHostedZoneId
|
|
6308
6308
|
delegation_role=delegation_role
|
|
6309
6309
|
)
|
aws_cdk/aws_s3/__init__.py
CHANGED
|
@@ -363,6 +363,27 @@ bucket = s3.Bucket(self, "MyBlockedBucket",
|
|
|
363
363
|
|
|
364
364
|
When `blockPublicPolicy` is set to `true`, `grantPublicRead()` throws an error.
|
|
365
365
|
|
|
366
|
+
## Public Read Access
|
|
367
|
+
|
|
368
|
+
Use `publicReadAccess` to allow public read access to the bucket.
|
|
369
|
+
|
|
370
|
+
Note that to enable `publicReadAccess`, make sure both bucket-level and account-level block public access control is disabled.
|
|
371
|
+
|
|
372
|
+
Bucket-level block public access control can be configured through `blockPublicAccess` property. Account-level block public
|
|
373
|
+
access control can be configured on AWS Console -> S3 -> Block Public Access settings for this account (Navigation Panel).
|
|
374
|
+
|
|
375
|
+
```python
|
|
376
|
+
bucket = s3.Bucket(self, "Bucket",
|
|
377
|
+
public_read_access=True,
|
|
378
|
+
block_public_access={
|
|
379
|
+
"block_public_policy": False,
|
|
380
|
+
"block_public_acls": False,
|
|
381
|
+
"ignore_public_acls": False,
|
|
382
|
+
"restrict_public_buckets": False
|
|
383
|
+
}
|
|
384
|
+
)
|
|
385
|
+
```
|
|
386
|
+
|
|
366
387
|
## Logging configuration
|
|
367
388
|
|
|
368
389
|
Use `serverAccessLogsBucket` to describe where server access logs are to be stored.
|
|
@@ -499,8 +499,9 @@ cdk.CfnOutput(self, "ObjectKey",
|
|
|
499
499
|
## Development
|
|
500
500
|
|
|
501
501
|
The custom resource is implemented in Python 3.9 in order to be able to leverage
|
|
502
|
-
the AWS CLI for "aws s3 sync".
|
|
503
|
-
|
|
502
|
+
the AWS CLI for "aws s3 sync".
|
|
503
|
+
The code is now in the `@aws-cdk/custom-resource-handlers` package under [`lib/aws-s3-deployment/bucket-deployment-handler`](https://github.com/aws/aws-cdk/tree/main/packages/@aws-cdk/custom-resource-handlers/lib/aws-s3-deployment/bucket-deployment-handler/) and
|
|
504
|
+
unit tests are under [`test/aws-s3-deployment/bucket-deployment-handler`](https://github.com/aws/aws-cdk/tree/main/packages/@aws-cdk/custom-resource-handlers/test/aws-s3-deployment/bucket-deployment-handler/).
|
|
504
505
|
|
|
505
506
|
This package requires Python 3.9 during build time in order to create the custom
|
|
506
507
|
resource Lambda bundle and test it. It also relies on a few bash scripts, so
|