aws-cdk-lib 2.147.2__py3-none-any.whl → 2.148.0__py3-none-any.whl

aws_cdk/aws_bedrock/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # Amazon Bedrock Construct Library
 
 Amazon Bedrock is a fully managed service that offers a choice of foundation models (FMs)
@@ -131,6 +131,10 @@ class CfnAgent(
             customer_encryption_key_arn="customerEncryptionKeyArn",
             description="description",
             foundation_model="foundationModel",
+            guardrail_configuration=bedrock.CfnAgent.GuardrailConfigurationProperty(
+                guardrail_identifier="guardrailIdentifier",
+                guardrail_version="guardrailVersion"
+            ),
             idle_session_ttl_in_seconds=123,
             instruction="instruction",
             knowledge_bases=[bedrock.CfnAgent.AgentKnowledgeBaseProperty(
@@ -181,6 +185,7 @@ class CfnAgent(
         customer_encryption_key_arn: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
         foundation_model: typing.Optional[builtins.str] = None,
+        guardrail_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAgent.GuardrailConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         idle_session_ttl_in_seconds: typing.Optional[jsii.Number] = None,
         instruction: typing.Optional[builtins.str] = None,
         knowledge_bases: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAgent.AgentKnowledgeBaseProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
@@ -199,6 +204,7 @@ class CfnAgent(
         :param customer_encryption_key_arn: The Amazon Resource Name (ARN) of the AWS KMS key that encrypts the agent.
         :param description: The description of the agent.
         :param foundation_model: The foundation model used for orchestration by the agent.
+        :param guardrail_configuration: Details about the guardrail associated with the agent.
         :param idle_session_ttl_in_seconds: The number of seconds for which Amazon Bedrock keeps information about a user's conversation with the agent. A user interaction remains active for the amount of time specified. If no conversation occurs during this time, the session expires and Amazon Bedrock deletes any data provided before the timeout.
         :param instruction: Instructions that tell the agent what it should do and how it should interact with users.
         :param knowledge_bases: The knowledge bases associated with the agent.
@@ -219,6 +225,7 @@ class CfnAgent(
             customer_encryption_key_arn=customer_encryption_key_arn,
             description=description,
             foundation_model=foundation_model,
+            guardrail_configuration=guardrail_configuration,
             idle_session_ttl_in_seconds=idle_session_ttl_in_seconds,
             instruction=instruction,
             knowledge_bases=knowledge_bases,
@@ -461,6 +468,24 @@ class CfnAgent(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "foundationModel", value)
 
+    @builtins.property
+    @jsii.member(jsii_name="guardrailConfiguration")
+    def guardrail_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAgent.GuardrailConfigurationProperty"]]:
+        '''Details about the guardrail associated with the agent.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAgent.GuardrailConfigurationProperty"]], jsii.get(self, "guardrailConfiguration"))
+
+    @guardrail_configuration.setter
+    def guardrail_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAgent.GuardrailConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2a943d3334097d01594a34df767861ec6709d99cd525e60d2d4b88bcabd8de9f)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "guardrailConfiguration", value)
+
     @builtins.property
     @jsii.member(jsii_name="idleSessionTtlInSeconds")
     def idle_session_ttl_in_seconds(self) -> typing.Optional[jsii.Number]:
@@ -1233,6 +1258,79 @@ class CfnAgent(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_bedrock.CfnAgent.GuardrailConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "guardrail_identifier": "guardrailIdentifier",
+            "guardrail_version": "guardrailVersion",
+        },
+    )
+    class GuardrailConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            guardrail_identifier: typing.Optional[builtins.str] = None,
+            guardrail_version: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Configuration information for a guardrail that you use with the ``Converse`` action.
+
+            :param guardrail_identifier: The identifier for the guardrail.
+            :param guardrail_version: The version of the guardrail.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-agent-guardrailconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_bedrock as bedrock
+                
+                guardrail_configuration_property = bedrock.CfnAgent.GuardrailConfigurationProperty(
+                    guardrail_identifier="guardrailIdentifier",
+                    guardrail_version="guardrailVersion"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__efdf581de679cb7af4ff41463b76591d2e1035223ca400da555c5c92eed58106)
+                check_type(argname="argument guardrail_identifier", value=guardrail_identifier, expected_type=type_hints["guardrail_identifier"])
+                check_type(argname="argument guardrail_version", value=guardrail_version, expected_type=type_hints["guardrail_version"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if guardrail_identifier is not None:
+                self._values["guardrail_identifier"] = guardrail_identifier
+            if guardrail_version is not None:
+                self._values["guardrail_version"] = guardrail_version
+
+        @builtins.property
+        def guardrail_identifier(self) -> typing.Optional[builtins.str]:
+            '''The identifier for the guardrail.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-agent-guardrailconfiguration.html#cfn-bedrock-agent-guardrailconfiguration-guardrailidentifier
+            '''
+            result = self._values.get("guardrail_identifier")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def guardrail_version(self) -> typing.Optional[builtins.str]:
+            '''The version of the guardrail.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-agent-guardrailconfiguration.html#cfn-bedrock-agent-guardrailconfiguration-guardrailversion
+            '''
+            result = self._values.get("guardrail_version")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "GuardrailConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_bedrock.CfnAgent.InferenceConfigurationProperty",
         jsii_struct_bases=[],
@@ -2348,6 +2446,7 @@ class CfnAgentAliasProps:
         "customer_encryption_key_arn": "customerEncryptionKeyArn",
         "description": "description",
         "foundation_model": "foundationModel",
+        "guardrail_configuration": "guardrailConfiguration",
         "idle_session_ttl_in_seconds": "idleSessionTtlInSeconds",
         "instruction": "instruction",
         "knowledge_bases": "knowledgeBases",
@@ -2368,6 +2467,7 @@ class CfnAgentProps:
         customer_encryption_key_arn: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
         foundation_model: typing.Optional[builtins.str] = None,
+        guardrail_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAgent.GuardrailConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         idle_session_ttl_in_seconds: typing.Optional[jsii.Number] = None,
         instruction: typing.Optional[builtins.str] = None,
         knowledge_bases: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAgent.AgentKnowledgeBaseProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
@@ -2385,6 +2485,7 @@ class CfnAgentProps:
         :param customer_encryption_key_arn: The Amazon Resource Name (ARN) of the AWS KMS key that encrypts the agent.
         :param description: The description of the agent.
         :param foundation_model: The foundation model used for orchestration by the agent.
+        :param guardrail_configuration: Details about the guardrail associated with the agent.
         :param idle_session_ttl_in_seconds: The number of seconds for which Amazon Bedrock keeps information about a user's conversation with the agent. A user interaction remains active for the amount of time specified. If no conversation occurs during this time, the session expires and Amazon Bedrock deletes any data provided before the timeout.
         :param instruction: Instructions that tell the agent what it should do and how it should interact with users.
         :param knowledge_bases: The knowledge bases associated with the agent.
@@ -2448,6 +2549,10 @@ class CfnAgentProps:
                 customer_encryption_key_arn="customerEncryptionKeyArn",
                 description="description",
                 foundation_model="foundationModel",
+                guardrail_configuration=bedrock.CfnAgent.GuardrailConfigurationProperty(
+                    guardrail_identifier="guardrailIdentifier",
+                    guardrail_version="guardrailVersion"
+                ),
                 idle_session_ttl_in_seconds=123,
                 instruction="instruction",
                 knowledge_bases=[bedrock.CfnAgent.AgentKnowledgeBaseProperty(
@@ -2494,6 +2599,7 @@ class CfnAgentProps:
             check_type(argname="argument customer_encryption_key_arn", value=customer_encryption_key_arn, expected_type=type_hints["customer_encryption_key_arn"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
             check_type(argname="argument foundation_model", value=foundation_model, expected_type=type_hints["foundation_model"])
+            check_type(argname="argument guardrail_configuration", value=guardrail_configuration, expected_type=type_hints["guardrail_configuration"])
             check_type(argname="argument idle_session_ttl_in_seconds", value=idle_session_ttl_in_seconds, expected_type=type_hints["idle_session_ttl_in_seconds"])
             check_type(argname="argument instruction", value=instruction, expected_type=type_hints["instruction"])
             check_type(argname="argument knowledge_bases", value=knowledge_bases, expected_type=type_hints["knowledge_bases"])
@@ -2516,6 +2622,8 @@ class CfnAgentProps:
             self._values["description"] = description
         if foundation_model is not None:
             self._values["foundation_model"] = foundation_model
+        if guardrail_configuration is not None:
+            self._values["guardrail_configuration"] = guardrail_configuration
         if idle_session_ttl_in_seconds is not None:
             self._values["idle_session_ttl_in_seconds"] = idle_session_ttl_in_seconds
         if instruction is not None:
@@ -2603,6 +2711,17 @@ class CfnAgentProps:
         result = self._values.get("foundation_model")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def guardrail_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAgent.GuardrailConfigurationProperty]]:
+        '''Details about the guardrail associated with the agent.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-agent.html#cfn-bedrock-agent-guardrailconfiguration
+        '''
+        result = self._values.get("guardrail_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAgent.GuardrailConfigurationProperty]], result)
+
     @builtins.property
     def idle_session_ttl_in_seconds(self) -> typing.Optional[jsii.Number]:
         '''The number of seconds for which Amazon Bedrock keeps information about a user's conversation with the agent.
@@ -6867,6 +6986,12 @@ class FoundationModelIdentifier(
         '''Base model "ai21.j2-grande-instruct".'''
         return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "AI21_J2_GRANDE_INSTRUCT"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AI21_J2_JAMBA_INSTRUCT_V1_0")
+    def AI21_J2_JAMBA_INSTRUCT_V1_0(cls) -> "FoundationModelIdentifier":
+        '''Base model "ai21.jamba-instruct-v1:0".'''
+        return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "AI21_J2_JAMBA_INSTRUCT_V1_0"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="AI21_J2_JUMBO_INSTRUCT")
     def AI21_J2_JUMBO_INSTRUCT(cls) -> "FoundationModelIdentifier":
@@ -6897,6 +7022,12 @@ class FoundationModelIdentifier(
         '''Base model "ai21.j2-ultra-v1".'''
         return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "AI21_LABS_JURASSIC_2_ULTRA_V1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AI21_LABS_JURASSIC_2_ULTRA_V1_0_8K")
+    def AI21_LABS_JURASSIC_2_ULTRA_V1_0_8_K(cls) -> "FoundationModelIdentifier":
+        '''Base model "ai21.j2-ultra-v1:0:8k".'''
+        return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "AI21_LABS_JURASSIC_2_ULTRA_V1_0_8K"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="AMAZON_TITAN_EMBED_G1_TEXT_02")
     def AMAZON_TITAN_EMBED_G1_TEXT_02(cls) -> "FoundationModelIdentifier":
@@ -6921,6 +7052,12 @@ class FoundationModelIdentifier(
         '''Base model "amazon.titan-embed-text-v2:0".'''
         return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "AMAZON_TITAN_EMBED_TEXT_V2_0"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AMAZON_TITAN_EMBED_TEXT_V2_0_8K")
+    def AMAZON_TITAN_EMBED_TEXT_V2_0_8_K(cls) -> "FoundationModelIdentifier":
+        '''Base model "amazon.titan-embed-text-v2:0:8k".'''
+        return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "AMAZON_TITAN_EMBED_TEXT_V2_0_8K"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="AMAZON_TITAN_EMBEDDINGS_G1_TEXT_V1")
     def AMAZON_TITAN_EMBEDDINGS_G1_TEXT_V1(cls) -> "FoundationModelIdentifier":
@@ -6987,6 +7124,12 @@ class FoundationModelIdentifier(
         '''Base model "amazon.titan-tg1-large".'''
         return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "AMAZON_TITAN_TG1_LARGE"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ANTHROPIC_CLAUDE_3_5_SONNET_20240620_V1_0")
+    def ANTHROPIC_CLAUDE_3_5_SONNET_20240620_V1_0(cls) -> "FoundationModelIdentifier":
+        '''Base model "anthropic.claude-3-5-sonnet-20240620-v1:0".'''
+        return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "ANTHROPIC_CLAUDE_3_5_SONNET_20240620_V1_0"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="ANTHROPIC_CLAUDE_3_HAIKU_20240307_V1_0")
     def ANTHROPIC_CLAUDE_3_HAIKU_20240307_V1_0(cls) -> "FoundationModelIdentifier":
@@ -7136,12 +7279,24 @@ class FoundationModelIdentifier(
         '''Base model "cohere.embed-english-v3".'''
         return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "COHERE_EMBED_ENGLISH_V3"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="COHERE_EMBED_ENGLISH_V3_0_512")
+    def COHERE_EMBED_ENGLISH_V3_0_512(cls) -> "FoundationModelIdentifier":
+        '''Base model "cohere.embed-english-v3:0:512".'''
+        return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "COHERE_EMBED_ENGLISH_V3_0_512"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="COHERE_EMBED_MULTILINGUAL_V3")
     def COHERE_EMBED_MULTILINGUAL_V3(cls) -> "FoundationModelIdentifier":
         '''Base model "cohere.embed-multilingual-v3".'''
         return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "COHERE_EMBED_MULTILINGUAL_V3"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="COHERE_EMBED_MULTILINGUAL_V3_0_512")
+    def COHERE_EMBED_MULTILINGUAL_V3_0_512(cls) -> "FoundationModelIdentifier":
+        '''Base model "cohere.embed-multilingual-v3:0:512".'''
+        return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "COHERE_EMBED_MULTILINGUAL_V3_0_512"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="META_LLAMA_2_13B_CHAT_V1_0_4K")
     def META_LLAMA_2_13_B_CHAT_V1_0_4_K(cls) -> "FoundationModelIdentifier":
@@ -7220,6 +7375,12 @@ class FoundationModelIdentifier(
         '''Base model "mistral.mixtral-8x7b-instruct-v0:1".'''
         return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "MISTRAL_MIXTRAL_8X7B_INSTRUCT_V0_1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="MISTRAL_SMALL_V0_1")
+    def MISTRAL_SMALL_V0_1(cls) -> "FoundationModelIdentifier":
+        '''Base model "mistral.mistral-small-2402-v1:0".'''
+        return typing.cast("FoundationModelIdentifier", jsii.sget(cls, "MISTRAL_SMALL_V0_1"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="STABILITY_STABLE_DIFFUSION_XL")
     def STABILITY_STABLE_DIFFUSION_XL(cls) -> "FoundationModelIdentifier":
@@ -7443,6 +7604,7 @@ def _typecheckingstub__facaad57ffe16da42f099d2b7997f3e6fd3b9eba46fd226d8fb5afe28
     customer_encryption_key_arn: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
     foundation_model: typing.Optional[builtins.str] = None,
+    guardrail_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAgent.GuardrailConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     idle_session_ttl_in_seconds: typing.Optional[jsii.Number] = None,
     instruction: typing.Optional[builtins.str] = None,
     knowledge_bases: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAgent.AgentKnowledgeBaseProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
@@ -7508,6 +7670,12 @@ def _typecheckingstub__75110aa6cf6cc2a463a78a36e9a6327c59875b1ef94d53da3047b8ec6
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__2a943d3334097d01594a34df767861ec6709d99cd525e60d2d4b88bcabd8de9f(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAgent.GuardrailConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__e29f42af6a8bf7aee6adb6b35e7809da69175082446368854bd402491896a71f(
     value: typing.Optional[jsii.Number],
 ) -> None:
@@ -7605,6 +7773,14 @@ def _typecheckingstub__90c954c5127bf68b4aecb34d9f9ade65e40a4db12d624a80f89415c2d
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__efdf581de679cb7af4ff41463b76591d2e1035223ca400da555c5c92eed58106(
+    *,
+    guardrail_identifier: typing.Optional[builtins.str] = None,
+    guardrail_version: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__0b8b0e306d1a46c4fdcedd77b9e6caf3ca221fe8133fe3ce29c1e5e779cc3189(
     *,
     maximum_length: typing.Optional[jsii.Number] = None,
@@ -7744,6 +7920,7 @@ def _typecheckingstub__b4f714080f6d4f9b0a3fe85a8425a8ba69698695e35d6fbd9d710ca5d
     customer_encryption_key_arn: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
     foundation_model: typing.Optional[builtins.str] = None,
+    guardrail_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAgent.GuardrailConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     idle_session_ttl_in_seconds: typing.Optional[jsii.Number] = None,
     instruction: typing.Optional[builtins.str] = None,
     knowledge_bases: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAgent.AgentKnowledgeBaseProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,

aws_cdk/aws_billingconductor/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS::BillingConductor Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.

aws_cdk/aws_budgets/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS Budgets Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.

aws_cdk/aws_cassandra/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS::Cassandra Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.

aws_cdk/aws_ce/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS::CE Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.

aws_cdk/aws_certificatemanager/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS Certificate Manager Construct Library
 
 AWS Certificate Manager (ACM) handles the complexity of creating, storing, and renewing public and private SSL/TLS X.509 certificates and keys that

aws_cdk/aws_chatbot/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS::Chatbot Construct Library
 
 AWS Chatbot is an AWS service that enables DevOps and software development teams to use Slack chat rooms to monitor and respond to operational events in their AWS Cloud. AWS Chatbot processes AWS service notifications from Amazon Simple Notification Service (Amazon SNS), and forwards them to Slack chat rooms so teams can analyze and act on them immediately, regardless of location.

aws_cdk/aws_cleanrooms/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS::CleanRooms Construct Library
 
 <!--BEGIN STABILITY BANNER-->---

aws_cdk/aws_cleanroomsml/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS::CleanRoomsML Construct Library
 
 <!--BEGIN STABILITY BANNER-->---

aws_cdk/aws_cloud9/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS Cloud9 Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.

aws_cdk/aws_cloudformation/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS CloudFormation Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.

aws_cdk/aws_cloudfront/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # Amazon CloudFront Construct Library
 
 Amazon CloudFront is a web service that speeds up distribution of your static and dynamic web content, such as .html, .css, .js, and image files, to

aws_cdk/aws_cloudfront/experimental/__init__.py

@@ -550,6 +550,20 @@ class EdgeFunction(
             check_type(argname="argument composite_principal", value=composite_principal, expected_type=type_hints["composite_principal"])
         return typing.cast(typing.List[_Grant_a7ae64f8], jsii.invoke(self, "grantInvokeCompositePrincipal", [composite_principal]))
 
+    @jsii.member(jsii_name="grantInvokeLatestVersion")
+    def grant_invoke_latest_version(
+        self,
+        identity: _IGrantable_71c4f5de,
+    ) -> _Grant_a7ae64f8:
+        '''Grant the given identity permissions to invoke the $LATEST version or unqualified version of this Lambda.
+
+        :param identity: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9b6e8fe291f0469edae68b1b4c1d48a71aec5c50f760d822915b7c8c7d6ad3e4)
+            check_type(argname="argument identity", value=identity, expected_type=type_hints["identity"])
+        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantInvokeLatestVersion", [identity]))
+
     @jsii.member(jsii_name="grantInvokeUrl")
     def grant_invoke_url(self, identity: _IGrantable_71c4f5de) -> _Grant_a7ae64f8:
         '''Grant the given identity permissions to invoke this Lambda Function URL.
@@ -561,6 +575,23 @@ class EdgeFunction(
             check_type(argname="argument identity", value=identity, expected_type=type_hints["identity"])
         return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantInvokeUrl", [identity]))
 
+    @jsii.member(jsii_name="grantInvokeVersion")
+    def grant_invoke_version(
+        self,
+        identity: _IGrantable_71c4f5de,
+        version: _IVersion_faf7234e,
+    ) -> _Grant_a7ae64f8:
+        '''Grant the given identity permissions to invoke the given version of this Lambda.
+
+        :param identity: -
+        :param version: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8e00b9f9033876bc1295887075ef1ce7aa929db4e9dc7d0d7162aa9ee6d4508e)
+            check_type(argname="argument identity", value=identity, expected_type=type_hints["identity"])
+            check_type(argname="argument version", value=version, expected_type=type_hints["version"])
+        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantInvokeVersion", [identity, version]))
+
     @jsii.member(jsii_name="metric")
     def metric(
         self,
@@ -1996,12 +2027,25 @@ def _typecheckingstub__64c93d4b313937d0690e557edc94df44e1df66523bdc2a85384cfe310
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__9b6e8fe291f0469edae68b1b4c1d48a71aec5c50f760d822915b7c8c7d6ad3e4(
+    identity: _IGrantable_71c4f5de,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__d96b6feda81e352ac9cf655dd7c949f0071932768ea9b423e4bcc49841ebce16(
     identity: _IGrantable_71c4f5de,
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__8e00b9f9033876bc1295887075ef1ce7aa929db4e9dc7d0d7162aa9ee6d4508e(
+    identity: _IGrantable_71c4f5de,
+    version: _IVersion_faf7234e,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__e35fb51736b3036c83dc4af9104a7ec11601ff54bef98bdf17e2325a3a1d9f89(
     metric_name: builtins.str,
     *,

aws_cdk/aws_cloudfront_origins/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # CloudFront Origins for the CDK CloudFront Library
 
 This library contains convenience methods for defining origins for a CloudFront distribution. You can use this library to create origins from

aws_cdk/aws_cloudtrail/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS CloudTrail Construct Library
 
 ## Trail
@@ -2451,8 +2451,8 @@ class CfnTrail(
         :param is_logging: Whether the CloudTrail trail is currently logging AWS API calls.
         :param s3_bucket_name: Specifies the name of the Amazon S3 bucket designated for publishing log files. See `Amazon S3 Bucket naming rules <https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html>`_ .
         :param advanced_event_selectors: Specifies the settings for advanced event selectors. You can add advanced event selectors, and conditions for your advanced event selectors, up to a maximum of 500 values for all conditions and selectors on a trail. You can use either ``AdvancedEventSelectors`` or ``EventSelectors`` , but not both. If you apply ``AdvancedEventSelectors`` to a trail, any existing ``EventSelectors`` are overwritten. For more information about advanced event selectors, see `Logging data events <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html>`_ in the *AWS CloudTrail User Guide* .
-        :param cloud_watch_logs_log_group_arn: Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs are delivered. You must use a log group that exists in your account. Not required unless you specify ``CloudWatchLogsRoleArn`` .
-        :param cloud_watch_logs_role_arn: Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group. You must use a role that exists in your account.
+        :param cloud_watch_logs_log_group_arn: Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs are delivered. You must use a log group that exists in your account. To enable CloudWatch Logs delivery, you must provide values for ``CloudWatchLogsLogGroupArn`` and ``CloudWatchLogsRoleArn`` . .. epigraph:: If you previously enabled CloudWatch Logs delivery and want to disable CloudWatch Logs delivery, you must set the values of the ``CloudWatchLogsRoleArn`` and ``CloudWatchLogsLogGroupArn`` fields to ``""`` .
+        :param cloud_watch_logs_role_arn: Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group. You must use a role that exists in your account. To enable CloudWatch Logs delivery, you must provide values for ``CloudWatchLogsLogGroupArn`` and ``CloudWatchLogsRoleArn`` . .. epigraph:: If you previously enabled CloudWatch Logs delivery and want to disable CloudWatch Logs delivery, you must set the values of the ``CloudWatchLogsRoleArn`` and ``CloudWatchLogsLogGroupArn`` fields to ``""`` .
         :param enable_log_file_validation: Specifies whether log file validation is enabled. The default is false. .. epigraph:: When you disable log file integrity validation, the chain of digest files is broken after one hour. CloudTrail does not create digest files for log files that were delivered during a period in which log file integrity validation was disabled. For example, if you enable log file integrity validation at noon on January 1, disable it at noon on January 2, and re-enable it at noon on January 10, digest files will not be created for the log files delivered from noon on January 2 to noon on January 10. The same applies whenever you stop CloudTrail logging or delete a trail.
         :param event_selectors: Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail. You cannot apply both event selectors and advanced event selectors to a trail.
         :param include_global_service_events: Specifies whether the trail is publishing events from global services such as IAM to the log files.
@@ -3465,11 +3465,11 @@ class CfnTrail(
 
                If you are using advanced event selectors, the maximum total number of values for all conditions, across all advanced event selectors for the trail, is 500.
 
-            The following example demonstrates how logging works when you configure logging of all data events for an S3 bucket named ``bucket-1`` . In this example, the CloudTrail user specified an empty prefix, and the option to log both ``Read`` and ``Write`` data events.
+            The following example demonstrates how logging works when you configure logging of all data events for an S3 bucket named ``DOC-EXAMPLE-BUCKET1`` . In this example, the CloudTrail user specified an empty prefix, and the option to log both ``Read`` and ``Write`` data events.
 
-            - A user uploads an image file to ``bucket-1`` .
+            - A user uploads an image file to ``DOC-EXAMPLE-BUCKET1`` .
             - The ``PutObject`` API operation is an Amazon S3 object-level API. It is recorded as a data event in CloudTrail. Because the CloudTrail user specified an S3 bucket with an empty prefix, events that occur on any object in that bucket are logged. The trail processes and logs the event.
-            - A user uploads an object to an Amazon S3 bucket named ``arn:aws:s3:::bucket-2`` .
+            - A user uploads an object to an Amazon S3 bucket named ``arn:aws:s3:::DOC-EXAMPLE-BUCKET1`` .
             - The ``PutObject`` API operation occurred for an object in an S3 bucket that the CloudTrail user didn't specify for the trail. The trail doesn’t log the event.
 
             The following example demonstrates how logging works when you configure logging of AWS Lambda data events for a Lambda function named *MyLambdaFunction* , but not for all Lambda functions.
@@ -3479,7 +3479,7 @@ class CfnTrail(
             - The ``Invoke`` API operation on *MyOtherLambdaFunction* is an Lambda API. Because the CloudTrail user did not specify logging data events for all Lambda functions, the ``Invoke`` operation for *MyOtherLambdaFunction* does not match the function specified for the trail. The trail doesn’t log the event.
 
             :param type: The resource type in which you want to log data events. You can specify the following *basic* event selector resource types: - ``AWS::DynamoDB::Table`` - ``AWS::Lambda::Function`` - ``AWS::S3::Object`` Additional resource types are available through *advanced* event selectors. For more information about these additional resource types, see `AdvancedFieldSelector <https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html>`_ .
-            :param values: An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified resource type. - To log data events for all objects in all S3 buckets in your AWS account , specify the prefix as ``arn:aws:s3`` . .. epigraph:: This also enables logging of data event activity performed by any user or role in your AWS account , even if that activity is performed on a bucket that belongs to another AWS account . - To log data events for all objects in an S3 bucket, specify the bucket and an empty object prefix such as ``arn:aws:s3:::bucket-1/`` . The trail logs data events for all objects in this S3 bucket. - To log data events for specific objects, specify the S3 bucket and object prefix such as ``arn:aws:s3:::bucket-1/example-images`` . The trail logs data events for objects in this S3 bucket that match the prefix. - To log data events for all Lambda functions in your AWS account , specify the prefix as ``arn:aws:lambda`` . .. epigraph:: This also enables logging of ``Invoke`` activity performed by any user or role in your AWS account , even if that activity is performed on a function that belongs to another AWS account . - To log data events for a specific Lambda function, specify the function ARN. .. epigraph:: Lambda function ARNs are exact. For example, if you specify a function ARN *arn:aws:lambda:us-west-2:111111111111:function:helloworld* , data events will only be logged for *arn:aws:lambda:us-west-2:111111111111:function:helloworld* . They will not be logged for *arn:aws:lambda:us-west-2:111111111111:function:helloworld2* . - To log data events for all DynamoDB tables in your AWS account , specify the prefix as ``arn:aws:dynamodb`` .
+            :param values: An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified resource type. - To log data events for all objects in all S3 buckets in your AWS account , specify the prefix as ``arn:aws:s3`` . .. epigraph:: This also enables logging of data event activity performed by any user or role in your AWS account , even if that activity is performed on a bucket that belongs to another AWS account . - To log data events for all objects in an S3 bucket, specify the bucket and an empty object prefix such as ``arn:aws:s3:::DOC-EXAMPLE-BUCKET1/`` . The trail logs data events for all objects in this S3 bucket. - To log data events for specific objects, specify the S3 bucket and object prefix such as ``arn:aws:s3:::DOC-EXAMPLE-BUCKET1/example-images`` . The trail logs data events for objects in this S3 bucket that match the prefix. - To log data events for all Lambda functions in your AWS account , specify the prefix as ``arn:aws:lambda`` . .. epigraph:: This also enables logging of ``Invoke`` activity performed by any user or role in your AWS account , even if that activity is performed on a function that belongs to another AWS account . - To log data events for a specific Lambda function, specify the function ARN. .. epigraph:: Lambda function ARNs are exact. For example, if you specify a function ARN *arn:aws:lambda:us-west-2:111111111111:function:helloworld* , data events will only be logged for *arn:aws:lambda:us-west-2:111111111111:function:helloworld* . They will not be logged for *arn:aws:lambda:us-west-2:111111111111:function:helloworld2* . - To log data events for all DynamoDB tables in your AWS account , specify the prefix as ``arn:aws:dynamodb`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-trail-dataresource.html
             :exampleMetadata: fixture=_generated
@@ -3535,8 +3535,8 @@ class CfnTrail(
 
                This also enables logging of data event activity performed by any user or role in your AWS account , even if that activity is performed on a bucket that belongs to another AWS account .
 
-            - To log data events for all objects in an S3 bucket, specify the bucket and an empty object prefix such as ``arn:aws:s3:::bucket-1/`` . The trail logs data events for all objects in this S3 bucket.
-            - To log data events for specific objects, specify the S3 bucket and object prefix such as ``arn:aws:s3:::bucket-1/example-images`` . The trail logs data events for objects in this S3 bucket that match the prefix.
+            - To log data events for all objects in an S3 bucket, specify the bucket and an empty object prefix such as ``arn:aws:s3:::DOC-EXAMPLE-BUCKET1/`` . The trail logs data events for all objects in this S3 bucket.
+            - To log data events for specific objects, specify the S3 bucket and object prefix such as ``arn:aws:s3:::DOC-EXAMPLE-BUCKET1/example-images`` . The trail logs data events for objects in this S3 bucket that match the prefix.
             - To log data events for all Lambda functions in your AWS account , specify the prefix as ``arn:aws:lambda`` .
 
             .. epigraph::
@@ -3813,8 +3813,8 @@ class CfnTrailProps:
         :param is_logging: Whether the CloudTrail trail is currently logging AWS API calls.
         :param s3_bucket_name: Specifies the name of the Amazon S3 bucket designated for publishing log files. See `Amazon S3 Bucket naming rules <https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html>`_ .
         :param advanced_event_selectors: Specifies the settings for advanced event selectors. You can add advanced event selectors, and conditions for your advanced event selectors, up to a maximum of 500 values for all conditions and selectors on a trail. You can use either ``AdvancedEventSelectors`` or ``EventSelectors`` , but not both. If you apply ``AdvancedEventSelectors`` to a trail, any existing ``EventSelectors`` are overwritten. For more information about advanced event selectors, see `Logging data events <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html>`_ in the *AWS CloudTrail User Guide* .
-        :param cloud_watch_logs_log_group_arn: Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs are delivered. You must use a log group that exists in your account. Not required unless you specify ``CloudWatchLogsRoleArn`` .
-        :param cloud_watch_logs_role_arn: Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group. You must use a role that exists in your account.
+        :param cloud_watch_logs_log_group_arn: Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs are delivered. You must use a log group that exists in your account. To enable CloudWatch Logs delivery, you must provide values for ``CloudWatchLogsLogGroupArn`` and ``CloudWatchLogsRoleArn`` . .. epigraph:: If you previously enabled CloudWatch Logs delivery and want to disable CloudWatch Logs delivery, you must set the values of the ``CloudWatchLogsRoleArn`` and ``CloudWatchLogsLogGroupArn`` fields to ``""`` .
+        :param cloud_watch_logs_role_arn: Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group. You must use a role that exists in your account. To enable CloudWatch Logs delivery, you must provide values for ``CloudWatchLogsLogGroupArn`` and ``CloudWatchLogsRoleArn`` . .. epigraph:: If you previously enabled CloudWatch Logs delivery and want to disable CloudWatch Logs delivery, you must set the values of the ``CloudWatchLogsRoleArn`` and ``CloudWatchLogsLogGroupArn`` fields to ``""`` .
         :param enable_log_file_validation: Specifies whether log file validation is enabled. The default is false. .. epigraph:: When you disable log file integrity validation, the chain of digest files is broken after one hour. CloudTrail does not create digest files for log files that were delivered during a period in which log file integrity validation was disabled. For example, if you enable log file integrity validation at noon on January 1, disable it at noon on January 2, and re-enable it at noon on January 10, digest files will not be created for the log files delivered from noon on January 2 to noon on January 10. The same applies whenever you stop CloudTrail logging or delete a trail.
         :param event_selectors: Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail. You cannot apply both event selectors and advanced event selectors to a trail.
         :param include_global_service_events: Specifies whether the trail is publishing events from global services such as IAM to the log files.
@@ -3979,7 +3979,10 @@ class CfnTrailProps:
 
         You must use a log group that exists in your account.
 
-        Not required unless you specify ``CloudWatchLogsRoleArn`` .
+        To enable CloudWatch Logs delivery, you must provide values for ``CloudWatchLogsLogGroupArn`` and ``CloudWatchLogsRoleArn`` .
+        .. epigraph::
+
+           If you previously enabled CloudWatch Logs delivery and want to disable CloudWatch Logs delivery, you must set the values of the ``CloudWatchLogsRoleArn`` and ``CloudWatchLogsLogGroupArn`` fields to ``""`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-trail.html#cfn-cloudtrail-trail-cloudwatchlogsloggrouparn
         '''
@@ -3992,6 +3995,11 @@ class CfnTrailProps:
 
         You must use a role that exists in your account.
 
+        To enable CloudWatch Logs delivery, you must provide values for ``CloudWatchLogsLogGroupArn`` and ``CloudWatchLogsRoleArn`` .
+        .. epigraph::
+
+           If you previously enabled CloudWatch Logs delivery and want to disable CloudWatch Logs delivery, you must set the values of the ``CloudWatchLogsRoleArn`` and ``CloudWatchLogsLogGroupArn`` fields to ``""`` .
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-trail.html#cfn-cloudtrail-trail-cloudwatchlogsrolearn
         '''
         result = self._values.get("cloud_watch_logs_role_arn")

aws_cdk/aws_cloudwatch/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # Amazon CloudWatch Construct Library
 
 ## Metric objects

aws_cdk/aws_cloudwatch_actions/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # CloudWatch Alarm Actions library
 
 This library contains a set of classes which can be used as CloudWatch Alarm actions.