aws-cdk-lib 2.145.0__py3-none-any.whl → 2.147.0__py3-none-any.whl

aws_cdk/aws_rolesanywhere/__init__.py

@@ -385,6 +385,12 @@ class CfnProfile(
             role_arns=["roleArns"],
         
             # the properties below are optional
+            attribute_mappings=[rolesanywhere.CfnProfile.AttributeMappingProperty(
+                certificate_field="certificateField",
+                mapping_rules=[rolesanywhere.CfnProfile.MappingRuleProperty(
+                    specifier="specifier"
+                )]
+            )],
             duration_seconds=123,
             enabled=False,
             managed_policy_arns=["managedPolicyArns"],
@@ -404,6 +410,7 @@ class CfnProfile(
         *,
         name: builtins.str,
         role_arns: typing.Sequence[builtins.str],
+        attribute_mappings: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnProfile.AttributeMappingProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         duration_seconds: typing.Optional[jsii.Number] = None,
         enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         managed_policy_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -416,6 +423,7 @@ class CfnProfile(
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The customer specified name of the resource.
         :param role_arns: A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.
+        :param attribute_mappings: A mapping applied to the authenticating end-entity certificate.
         :param duration_seconds: The number of seconds vended session credentials will be valid for.
         :param enabled: The enabled status of the resource.
         :param managed_policy_arns: A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.
@@ -430,6 +438,7 @@ class CfnProfile(
         props = CfnProfileProps(
             name=name,
             role_arns=role_arns,
+            attribute_mappings=attribute_mappings,
             duration_seconds=duration_seconds,
             enabled=enabled,
             managed_policy_arns=managed_policy_arns,
@@ -525,6 +534,24 @@ class CfnProfile(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "roleArns", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="attributeMappings")
+    def attribute_mappings(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnProfile.AttributeMappingProperty"]]]]:
+        '''A mapping applied to the authenticating end-entity certificate.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnProfile.AttributeMappingProperty"]]]], jsii.get(self, "attributeMappings"))
+
+    @attribute_mappings.setter
+    def attribute_mappings(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnProfile.AttributeMappingProperty"]]]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a933bc8a589ca2e29de261062eefb4537f3f9eee0b743f26a28b8b55ea20b163)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "attributeMappings", value)
+
     @builtins.property
     @jsii.member(jsii_name="durationSeconds")
     def duration_seconds(self) -> typing.Optional[jsii.Number]:
@@ -616,6 +643,136 @@ class CfnProfile(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "tagsRaw", value)
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_rolesanywhere.CfnProfile.AttributeMappingProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "certificate_field": "certificateField",
+            "mapping_rules": "mappingRules",
+        },
+    )
+    class AttributeMappingProperty:
+        def __init__(
+            self,
+            *,
+            certificate_field: builtins.str,
+            mapping_rules: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnProfile.MappingRuleProperty", typing.Dict[builtins.str, typing.Any]]]]],
+        ) -> None:
+            '''A mapping applied to the authenticating end-entity certificate.
+
+            :param certificate_field: Fields (x509Subject, x509Issuer and x509SAN) within X.509 certificates.
+            :param mapping_rules: A list of mapping entries for every supported specifier or sub-field.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rolesanywhere-profile-attributemapping.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_rolesanywhere as rolesanywhere
+                
+                attribute_mapping_property = rolesanywhere.CfnProfile.AttributeMappingProperty(
+                    certificate_field="certificateField",
+                    mapping_rules=[rolesanywhere.CfnProfile.MappingRuleProperty(
+                        specifier="specifier"
+                    )]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__05d62dd9516ef6f649bf3b5d657cdfc92e568e217f35731a999cfd15f5b4f68e)
+                check_type(argname="argument certificate_field", value=certificate_field, expected_type=type_hints["certificate_field"])
+                check_type(argname="argument mapping_rules", value=mapping_rules, expected_type=type_hints["mapping_rules"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "certificate_field": certificate_field,
+                "mapping_rules": mapping_rules,
+            }
+
+        @builtins.property
+        def certificate_field(self) -> builtins.str:
+            '''Fields (x509Subject, x509Issuer and x509SAN) within X.509 certificates.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rolesanywhere-profile-attributemapping.html#cfn-rolesanywhere-profile-attributemapping-certificatefield
+            '''
+            result = self._values.get("certificate_field")
+            assert result is not None, "Required property 'certificate_field' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def mapping_rules(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnProfile.MappingRuleProperty"]]]:
+            '''A list of mapping entries for every supported specifier or sub-field.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rolesanywhere-profile-attributemapping.html#cfn-rolesanywhere-profile-attributemapping-mappingrules
+            '''
+            result = self._values.get("mapping_rules")
+            assert result is not None, "Required property 'mapping_rules' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnProfile.MappingRuleProperty"]]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "AttributeMappingProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_rolesanywhere.CfnProfile.MappingRuleProperty",
+        jsii_struct_bases=[],
+        name_mapping={"specifier": "specifier"},
+    )
+    class MappingRuleProperty:
+        def __init__(self, *, specifier: builtins.str) -> None:
+            '''A single mapping entry for each supported specifier or sub-field.
+
+            :param specifier: Specifier within a certificate field, such as CN, OU, or UID from the Subject field.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rolesanywhere-profile-mappingrule.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_rolesanywhere as rolesanywhere
+                
+                mapping_rule_property = rolesanywhere.CfnProfile.MappingRuleProperty(
+                    specifier="specifier"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__7422c94323a807bff6335911405b595c6b214c6864553b5fe25c6dac4b8d588d)
+                check_type(argname="argument specifier", value=specifier, expected_type=type_hints["specifier"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "specifier": specifier,
+            }
+
+        @builtins.property
+        def specifier(self) -> builtins.str:
+            '''Specifier within a certificate field, such as CN, OU, or UID from the Subject field.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rolesanywhere-profile-mappingrule.html#cfn-rolesanywhere-profile-mappingrule-specifier
+            '''
+            result = self._values.get("specifier")
+            assert result is not None, "Required property 'specifier' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "MappingRuleProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_rolesanywhere.CfnProfileProps",
@@ -623,6 +780,7 @@ class CfnProfile(
     name_mapping={
         "name": "name",
         "role_arns": "roleArns",
+        "attribute_mappings": "attributeMappings",
         "duration_seconds": "durationSeconds",
         "enabled": "enabled",
         "managed_policy_arns": "managedPolicyArns",
@@ -637,6 +795,7 @@ class CfnProfileProps:
         *,
         name: builtins.str,
         role_arns: typing.Sequence[builtins.str],
+        attribute_mappings: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnProfile.AttributeMappingProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         duration_seconds: typing.Optional[jsii.Number] = None,
         enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         managed_policy_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -648,6 +807,7 @@ class CfnProfileProps:
 
         :param name: The customer specified name of the resource.
         :param role_arns: A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.
+        :param attribute_mappings: A mapping applied to the authenticating end-entity certificate.
         :param duration_seconds: The number of seconds vended session credentials will be valid for.
         :param enabled: The enabled status of the resource.
         :param managed_policy_arns: A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.
@@ -669,6 +829,12 @@ class CfnProfileProps:
                 role_arns=["roleArns"],
             
                 # the properties below are optional
+                attribute_mappings=[rolesanywhere.CfnProfile.AttributeMappingProperty(
+                    certificate_field="certificateField",
+                    mapping_rules=[rolesanywhere.CfnProfile.MappingRuleProperty(
+                        specifier="specifier"
+                    )]
+                )],
                 duration_seconds=123,
                 enabled=False,
                 managed_policy_arns=["managedPolicyArns"],
@@ -684,6 +850,7 @@ class CfnProfileProps:
             type_hints = typing.get_type_hints(_typecheckingstub__cc8a99a4d25c139ca779820c498d07ef2292a040188712d06b21830cb9c3d764)
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
             check_type(argname="argument role_arns", value=role_arns, expected_type=type_hints["role_arns"])
+            check_type(argname="argument attribute_mappings", value=attribute_mappings, expected_type=type_hints["attribute_mappings"])
             check_type(argname="argument duration_seconds", value=duration_seconds, expected_type=type_hints["duration_seconds"])
             check_type(argname="argument enabled", value=enabled, expected_type=type_hints["enabled"])
             check_type(argname="argument managed_policy_arns", value=managed_policy_arns, expected_type=type_hints["managed_policy_arns"])
@@ -694,6 +861,8 @@ class CfnProfileProps:
             "name": name,
             "role_arns": role_arns,
         }
+        if attribute_mappings is not None:
+            self._values["attribute_mappings"] = attribute_mappings
         if duration_seconds is not None:
             self._values["duration_seconds"] = duration_seconds
         if enabled is not None:
@@ -727,6 +896,17 @@ class CfnProfileProps:
         assert result is not None, "Required property 'role_arns' is missing"
         return typing.cast(typing.List[builtins.str], result)
 
+    @builtins.property
+    def attribute_mappings(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnProfile.AttributeMappingProperty]]]]:
+        '''A mapping applied to the authenticating end-entity certificate.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-profile.html#cfn-rolesanywhere-profile-attributemappings
+        '''
+        result = self._values.get("attribute_mappings")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnProfile.AttributeMappingProperty]]]], result)
+
     @builtins.property
     def duration_seconds(self) -> typing.Optional[jsii.Number]:
         '''The number of seconds vended session credentials will be valid for.
@@ -1038,11 +1218,11 @@ class CfnTrustAnchor(
         ) -> None:
             '''Customizable notification settings that will be applied to notification events.
 
-            IAM Roles Anywhere consumes these settings while notifying across multiple channels - CloudWatch metrics, EventBridge , and AWS Health Dashboard .
+            IAM Roles Anywhere consumes these settings while notifying across multiple channels - CloudWatch metrics, EventBridge, and AWS Health Dashboard .
 
             :param enabled: Indicates whether the notification setting is enabled.
             :param event: The event to which this notification setting is applied.
-            :param channel: The specified channel of notification. IAM Roles Anywhere uses CloudWatch metrics, EventBridge , and AWS Health Dashboard to notify for an event. .. epigraph:: In the absence of a specific channel, IAM Roles Anywhere applies this setting to 'ALL' channels.
+            :param channel: The specified channel of notification. IAM Roles Anywhere uses CloudWatch metrics, EventBridge, and AWS Health Dashboard to notify for an event. .. epigraph:: In the absence of a specific channel, IAM Roles Anywhere applies this setting to 'ALL' channels.
             :param threshold: The number of days before a notification event. This value is required for a notification setting that is enabled.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rolesanywhere-trustanchor-notificationsetting.html
@@ -1102,7 +1282,7 @@ class CfnTrustAnchor(
         def channel(self) -> typing.Optional[builtins.str]:
             '''The specified channel of notification.
 
-            IAM Roles Anywhere uses CloudWatch metrics, EventBridge , and AWS Health Dashboard to notify for an event.
+            IAM Roles Anywhere uses CloudWatch metrics, EventBridge, and AWS Health Dashboard to notify for an event.
             .. epigraph::
 
                In the absence of a specific channel, IAM Roles Anywhere applies this setting to 'ALL' channels.
@@ -1520,6 +1700,7 @@ def _typecheckingstub__15739ec913066dea67815f6297a7c4e3ed351b4df22323a7b46fa138a
     *,
     name: builtins.str,
     role_arns: typing.Sequence[builtins.str],
+    attribute_mappings: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnProfile.AttributeMappingProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     duration_seconds: typing.Optional[jsii.Number] = None,
     enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     managed_policy_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -1554,6 +1735,12 @@ def _typecheckingstub__e8d24089a88ab86238c5340434a58996a10c5d047049180f8bfea3a52
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a933bc8a589ca2e29de261062eefb4537f3f9eee0b743f26a28b8b55ea20b163(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnProfile.AttributeMappingProperty]]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c198b2977e47134c474ca242dadf9d96676c95614df55d34d80a89658dbb1f75(
     value: typing.Optional[jsii.Number],
 ) -> None:
@@ -1590,10 +1777,26 @@ def _typecheckingstub__99305adebaa684e99f5f2849196087f9cc1788f2b87af7300c436a0fe
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__05d62dd9516ef6f649bf3b5d657cdfc92e568e217f35731a999cfd15f5b4f68e(
+    *,
+    certificate_field: builtins.str,
+    mapping_rules: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnProfile.MappingRuleProperty, typing.Dict[builtins.str, typing.Any]]]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__7422c94323a807bff6335911405b595c6b214c6864553b5fe25c6dac4b8d588d(
+    *,
+    specifier: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__cc8a99a4d25c139ca779820c498d07ef2292a040188712d06b21830cb9c3d764(
     *,
     name: builtins.str,
     role_arns: typing.Sequence[builtins.str],
+    attribute_mappings: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnProfile.AttributeMappingProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     duration_seconds: typing.Optional[jsii.Number] = None,
     enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     managed_policy_arns: typing.Optional[typing.Sequence[builtins.str]] = None,

aws_cdk/aws_sagemaker/__init__.py

@@ -5992,7 +5992,7 @@ class CfnDomain(
             '''A collection of settings that apply to spaces created in the domain.
 
             :param execution_role: The ARN of the execution role for the space.
-            :param custom_file_system_configs: 
+            :param custom_file_system_configs: The settings for assigning a custom file system to a domain. Permitted users can access this file system in Amazon SageMaker Studio.
             :param custom_posix_user_config: 
             :param jupyter_lab_app_settings: The JupyterLab app settings.
             :param jupyter_server_app_settings: The JupyterServer app settings.
@@ -6118,7 +6118,10 @@ class CfnDomain(
         def custom_file_system_configs(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnDomain.CustomFileSystemConfigProperty"]]]]:
-            '''
+            '''The settings for assigning a custom file system to a domain.
+
+            Permitted users can access this file system in Amazon SageMaker Studio.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-domain-defaultspacesettings.html#cfn-sagemaker-domain-defaultspacesettings-customfilesystemconfigs
             '''
             result = self._values.get("custom_file_system_configs")