aws-cdk-lib 2.147.3__py3-none-any.whl → 2.148.0__py3-none-any.whl

aws_cdk/aws_fsx/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # Amazon FSx Construct Library
 
 [Amazon FSx](https://docs.aws.amazon.com/fsx/?id=docs_gateway) provides fully managed third-party file systems with the
@@ -186,7 +186,28 @@ lustre_configuration = {
 }
 ```
 
-When you turn data compression on for an existing file system, only newly written files are compressed.  Existing files are not compressed. For more information, see [Compressing previously written files](https://docs.aws.amazon.com/fsx/latest/LustreGuide/data-compression.html#migrate-compression).```
+When you turn data compression on for an existing file system, only newly written files are compressed.  Existing files are not compressed. For more information, see [Compressing previously written files](https://docs.aws.amazon.com/fsx/latest/LustreGuide/data-compression.html#migrate-compression).
+
+### Backups
+
+You can take daily automatic backups by setting `automaticBackupRetention` to a non-zero day in the `lustreConfiguration`.
+
+Additionally, you can set the backup window by specifying the `dailyAutomaticBackupStartTime`.
+
+```python
+import aws_cdk as cdk
+
+
+lustre_configuration = {
+    # ...
+    "automatic_backup_retention": cdk.Duration.days(3),  # backup retention
+    "copy_tags_to_backups": True,  # if true, tags are copied to backups
+    "daily_automatic_backup_start_time": fsx.DailyAutomaticBackupStartTime(hour=11, minute=30)
+}
+```
+
+For more information, see [Working with backups
+](https://docs.aws.amazon.com/fsx/latest/LustreGuide/using-backups-fsx.html).
 
 ## FSx for Windows File Server
 
@@ -214,6 +235,7 @@ import constructs as _constructs_77d1e7e8
 from .. import (
     CfnResource as _CfnResource_9df397a6,
     CfnTag as _CfnTag_f6864754,
+    Duration as _Duration_4839e8c3,
     IInspectable as _IInspectable_c2943556,
     IResolvable as _IResolvable_da3f097b,
     ITaggable as _ITaggable_36806126,
@@ -6825,6 +6847,103 @@ class CfnVolumeProps:
         )
 
 
+class DailyAutomaticBackupStartTime(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_fsx.DailyAutomaticBackupStartTime",
+):
+    '''Class for scheduling a daily automatic backup time.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        import aws_cdk as cdk
+        
+        
+        lustre_configuration = {
+            # ...
+            "automatic_backup_retention": cdk.Duration.days(3),  # backup retention
+            "copy_tags_to_backups": True,  # if true, tags are copied to backups
+            "daily_automatic_backup_start_time": fsx.DailyAutomaticBackupStartTime(hour=11, minute=30)
+        }
+    '''
+
+    def __init__(self, *, hour: jsii.Number, minute: jsii.Number) -> None:
+        '''
+        :param hour: The hour of the day (from 0-23) for automatic backup starts.
+        :param minute: The minute of the hour (from 0-59) for automatic backup starts.
+        '''
+        props = DailyAutomaticBackupStartTimeProps(hour=hour, minute=minute)
+
+        jsii.create(self.__class__, self, [props])
+
+    @jsii.member(jsii_name="toTimestamp")
+    def to_timestamp(self) -> builtins.str:
+        '''Converts an hour, and minute into HH:MM string.'''
+        return typing.cast(builtins.str, jsii.invoke(self, "toTimestamp", []))
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_fsx.DailyAutomaticBackupStartTimeProps",
+    jsii_struct_bases=[],
+    name_mapping={"hour": "hour", "minute": "minute"},
+)
+class DailyAutomaticBackupStartTimeProps:
+    def __init__(self, *, hour: jsii.Number, minute: jsii.Number) -> None:
+        '''Properties required for setting up a daily automatic backup time.
+
+        :param hour: The hour of the day (from 0-23) for automatic backup starts.
+        :param minute: The minute of the hour (from 0-59) for automatic backup starts.
+
+        :exampleMetadata: infused
+
+        Example::
+
+            import aws_cdk as cdk
+            
+            
+            lustre_configuration = {
+                # ...
+                "automatic_backup_retention": cdk.Duration.days(3),  # backup retention
+                "copy_tags_to_backups": True,  # if true, tags are copied to backups
+                "daily_automatic_backup_start_time": fsx.DailyAutomaticBackupStartTime(hour=11, minute=30)
+            }
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__44f298a8565ab83be6194258a86fb2bd0bd7844cc3b7e42c0cbdd5ded4c6f84f)
+            check_type(argname="argument hour", value=hour, expected_type=type_hints["hour"])
+            check_type(argname="argument minute", value=minute, expected_type=type_hints["minute"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "hour": hour,
+            "minute": minute,
+        }
+
+    @builtins.property
+    def hour(self) -> jsii.Number:
+        '''The hour of the day (from 0-23) for automatic backup starts.'''
+        result = self._values.get("hour")
+        assert result is not None, "Required property 'hour' is missing"
+        return typing.cast(jsii.Number, result)
+
+    @builtins.property
+    def minute(self) -> jsii.Number:
+        '''The minute of the hour (from 0-59) for automatic backup starts.'''
+        result = self._values.get("minute")
+        assert result is not None, "Required property 'minute' is missing"
+        return typing.cast(jsii.Number, result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "DailyAutomaticBackupStartTimeProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_fsx.FileSystemAttributes",
     jsii_struct_bases=[],
@@ -7162,6 +7281,9 @@ class LustreAutoImportPolicy(enum.Enum):
     name_mapping={
         "deployment_type": "deploymentType",
         "auto_import_policy": "autoImportPolicy",
+        "automatic_backup_retention": "automaticBackupRetention",
+        "copy_tags_to_backups": "copyTagsToBackups",
+        "daily_automatic_backup_start_time": "dailyAutomaticBackupStartTime",
         "data_compression_type": "dataCompressionType",
         "export_path": "exportPath",
         "imported_file_chunk_size_mib": "importedFileChunkSizeMiB",
@@ -7176,6 +7298,9 @@ class LustreConfiguration:
         *,
         deployment_type: "LustreDeploymentType",
         auto_import_policy: typing.Optional[LustreAutoImportPolicy] = None,
+        automatic_backup_retention: typing.Optional[_Duration_4839e8c3] = None,
+        copy_tags_to_backups: typing.Optional[builtins.bool] = None,
+        daily_automatic_backup_start_time: typing.Optional[DailyAutomaticBackupStartTime] = None,
         data_compression_type: typing.Optional["LustreDataCompressionType"] = None,
         export_path: typing.Optional[builtins.str] = None,
         imported_file_chunk_size_mib: typing.Optional[jsii.Number] = None,
@@ -7187,6 +7312,9 @@ class LustreConfiguration:
 
         :param deployment_type: The type of backing file system deployment used by FSx.
         :param auto_import_policy: Available with ``Scratch`` and ``Persistent_1`` deployment types. When you create your file system, your existing S3 objects appear as file and directory listings. Use this property to choose how Amazon FSx keeps your file and directory listings up to date as you add or modify objects in your linked S3 bucket. ``AutoImportPolicy`` can have the following values: For more information, see `Automatically import updates from your S3 bucket <https://docs.aws.amazon.com/fsx/latest/LustreGuide/autoimport-data-repo.html>`_ . .. epigraph:: This parameter is not supported for Lustre file systems using the ``Persistent_2`` deployment type. Default: - no import policy
+        :param automatic_backup_retention: The number of days to retain automatic backups. Setting this property to 0 disables automatic backups. You can retain automatic backups for a maximum of 90 days. Automatic Backups is not supported on scratch file systems. Default: Duration.days(0)
+        :param copy_tags_to_backups: A boolean flag indicating whether tags for the file system should be copied to backups. Default: - false
+        :param daily_automatic_backup_start_time: Start time for 30-minute daily automatic backup window in Coordinated Universal Time (UTC). Default: - no backup window
         :param data_compression_type: Sets the data compression configuration for the file system. For more information, see `Lustre data compression <https://docs.aws.amazon.com/fsx/latest/LustreGuide/data-compression.html>`_ in the *Amazon FSx for Lustre User Guide* . Default: - no compression
         :param export_path: The path in Amazon S3 where the root of your Amazon FSx file system is exported. The path must use the same Amazon S3 bucket as specified in ImportPath. If you only specify a bucket name, such as s3://import-bucket, you get a 1:1 mapping of file system objects to S3 bucket objects. This mapping means that the input data in S3 is overwritten on export. If you provide a custom prefix in the export path, such as s3://import-bucket/[custom-optional-prefix], Amazon FSx exports the contents of your file system to that export prefix in the Amazon S3 bucket. Default: s3://import-bucket/FSxLustre[creation-timestamp]
         :param imported_file_chunk_size_mib: For files imported from a data repository, this value determines the stripe count and maximum amount of data per file (in MiB) stored on a single physical disk. Allowed values are between 1 and 512,000. Default: 1024
@@ -7223,6 +7351,9 @@ class LustreConfiguration:
             type_hints = typing.get_type_hints(_typecheckingstub__567936f469e5b9500e7485b8f46c5424a41d75153adaae2a59be9e33735a9e0a)
             check_type(argname="argument deployment_type", value=deployment_type, expected_type=type_hints["deployment_type"])
             check_type(argname="argument auto_import_policy", value=auto_import_policy, expected_type=type_hints["auto_import_policy"])
+            check_type(argname="argument automatic_backup_retention", value=automatic_backup_retention, expected_type=type_hints["automatic_backup_retention"])
+            check_type(argname="argument copy_tags_to_backups", value=copy_tags_to_backups, expected_type=type_hints["copy_tags_to_backups"])
+            check_type(argname="argument daily_automatic_backup_start_time", value=daily_automatic_backup_start_time, expected_type=type_hints["daily_automatic_backup_start_time"])
             check_type(argname="argument data_compression_type", value=data_compression_type, expected_type=type_hints["data_compression_type"])
             check_type(argname="argument export_path", value=export_path, expected_type=type_hints["export_path"])
             check_type(argname="argument imported_file_chunk_size_mib", value=imported_file_chunk_size_mib, expected_type=type_hints["imported_file_chunk_size_mib"])
@@ -7234,6 +7365,12 @@ class LustreConfiguration:
         }
         if auto_import_policy is not None:
             self._values["auto_import_policy"] = auto_import_policy
+        if automatic_backup_retention is not None:
+            self._values["automatic_backup_retention"] = automatic_backup_retention
+        if copy_tags_to_backups is not None:
+            self._values["copy_tags_to_backups"] = copy_tags_to_backups
+        if daily_automatic_backup_start_time is not None:
+            self._values["daily_automatic_backup_start_time"] = daily_automatic_backup_start_time
         if data_compression_type is not None:
             self._values["data_compression_type"] = data_compression_type
         if export_path is not None:
@@ -7272,6 +7409,40 @@ class LustreConfiguration:
         result = self._values.get("auto_import_policy")
         return typing.cast(typing.Optional[LustreAutoImportPolicy], result)
 
+    @builtins.property
+    def automatic_backup_retention(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The number of days to retain automatic backups.
+
+        Setting this property to 0 disables automatic backups.
+        You can retain automatic backups for a maximum of 90 days.
+
+        Automatic Backups is not supported on scratch file systems.
+
+        :default: Duration.days(0)
+        '''
+        result = self._values.get("automatic_backup_retention")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
+    @builtins.property
+    def copy_tags_to_backups(self) -> typing.Optional[builtins.bool]:
+        '''A boolean flag indicating whether tags for the file system should be copied to backups.
+
+        :default: - false
+        '''
+        result = self._values.get("copy_tags_to_backups")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def daily_automatic_backup_start_time(
+        self,
+    ) -> typing.Optional[DailyAutomaticBackupStartTime]:
+        '''Start time for 30-minute daily automatic backup window in Coordinated Universal Time (UTC).
+
+        :default: - no backup window
+        '''
+        result = self._values.get("daily_automatic_backup_start_time")
+        return typing.cast(typing.Optional[DailyAutomaticBackupStartTime], result)
+
     @builtins.property
     def data_compression_type(self) -> typing.Optional["LustreDataCompressionType"]:
         '''Sets the data compression configuration for the file system.
@@ -7999,6 +8170,8 @@ __all__ = [
     "CfnStorageVirtualMachineProps",
     "CfnVolume",
     "CfnVolumeProps",
+    "DailyAutomaticBackupStartTime",
+    "DailyAutomaticBackupStartTimeProps",
     "FileSystemAttributes",
     "FileSystemBase",
     "FileSystemProps",
@@ -8736,6 +8909,14 @@ def _typecheckingstub__ba019369261767d6713a59ea11f0b77df010707dad4c986d34b90921d
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__44f298a8565ab83be6194258a86fb2bd0bd7844cc3b7e42c0cbdd5ded4c6f84f(
+    *,
+    hour: jsii.Number,
+    minute: jsii.Number,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__244a68ed58458734fc468d2488bea9a1a0709a590b99f26e51e4624fd2762694(
     *,
     dns_name: builtins.str,
@@ -8761,6 +8942,9 @@ def _typecheckingstub__567936f469e5b9500e7485b8f46c5424a41d75153adaae2a59be9e337
     *,
     deployment_type: LustreDeploymentType,
     auto_import_policy: typing.Optional[LustreAutoImportPolicy] = None,
+    automatic_backup_retention: typing.Optional[_Duration_4839e8c3] = None,
+    copy_tags_to_backups: typing.Optional[builtins.bool] = None,
+    daily_automatic_backup_start_time: typing.Optional[DailyAutomaticBackupStartTime] = None,
     data_compression_type: typing.Optional[LustreDataCompressionType] = None,
     export_path: typing.Optional[builtins.str] = None,
     imported_file_chunk_size_mib: typing.Optional[jsii.Number] = None,

aws_cdk/aws_gamelift/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # Amazon GameLift Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.
@@ -463,7 +463,7 @@ class CfnBuild(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: A descriptive label that is associated with a build. Build names do not need to be unique.
-        :param operating_system: The operating system that your game server binaries run on. This value determines the type of fleet resources that you use for this build. If your game build contains multiple executables, they all must run on the same operating system. You must specify a valid operating system in this request. There is no default value. You can't change a build's operating system later. .. epigraph:: If you have active fleets using the Windows Server 2012 operating system, you can continue to create new builds using this OS until October 10, 2023, when Microsoft ends its support. All others must use Windows Server 2016 when creating new Windows-based builds.
+        :param operating_system: The operating system that your game server binaries run on. This value determines the type of fleet resources that you use for this build. If your game build contains multiple executables, they all must run on the same operating system. You must specify a valid operating system in this request. There is no default value. You can't change a build's operating system later. .. epigraph:: Amazon Linux 2 (AL2) will reach end of support on 6/30/2025. See more details in the `Amazon Linux 2 FAQs <https://docs.aws.amazon.com/https://aws.amazon.com/amazon-linux-2/faqs/>`_ . For game servers that are hosted on AL2 and use Amazon GameLift server SDK 4.x., first update the game server build to server SDK 5.x, and then deploy to AL2023 instances. See `Migrate to Amazon GameLift server SDK version 5. <https://docs.aws.amazon.com/gamelift/latest/developerguide/reference-serversdk5-migration.html>`_
         :param server_sdk_version: A server SDK version you used when integrating your game server build with Amazon GameLift. For more information see `Integrate games with custom game servers <https://docs.aws.amazon.com/gamelift/latest/developerguide/integration-custom-intro.html>`_ . By default Amazon GameLift sets this value to ``4.0.2`` .
         :param storage_location: Information indicating where your game build files are stored. Use this parameter only when creating a build with files stored in an Amazon S3 bucket that you own. The storage location must specify an Amazon S3 bucket name and key. The location must also specify a role ARN that you set up to allow Amazon GameLift to access your Amazon S3 bucket. The S3 bucket and your new build must be in the same Region. If a ``StorageLocation`` is specified, the size of your file can be found in your Amazon S3 bucket. Amazon GameLift will report a ``SizeOnDisk`` of 0.
         :param version: Version information that is associated with this build. Version strings do not need to be unique.
@@ -735,7 +735,7 @@ class CfnBuildProps:
         '''Properties for defining a ``CfnBuild``.
 
         :param name: A descriptive label that is associated with a build. Build names do not need to be unique.
-        :param operating_system: The operating system that your game server binaries run on. This value determines the type of fleet resources that you use for this build. If your game build contains multiple executables, they all must run on the same operating system. You must specify a valid operating system in this request. There is no default value. You can't change a build's operating system later. .. epigraph:: If you have active fleets using the Windows Server 2012 operating system, you can continue to create new builds using this OS until October 10, 2023, when Microsoft ends its support. All others must use Windows Server 2016 when creating new Windows-based builds.
+        :param operating_system: The operating system that your game server binaries run on. This value determines the type of fleet resources that you use for this build. If your game build contains multiple executables, they all must run on the same operating system. You must specify a valid operating system in this request. There is no default value. You can't change a build's operating system later. .. epigraph:: Amazon Linux 2 (AL2) will reach end of support on 6/30/2025. See more details in the `Amazon Linux 2 FAQs <https://docs.aws.amazon.com/https://aws.amazon.com/amazon-linux-2/faqs/>`_ . For game servers that are hosted on AL2 and use Amazon GameLift server SDK 4.x., first update the game server build to server SDK 5.x, and then deploy to AL2023 instances. See `Migrate to Amazon GameLift server SDK version 5. <https://docs.aws.amazon.com/gamelift/latest/developerguide/reference-serversdk5-migration.html>`_
         :param server_sdk_version: A server SDK version you used when integrating your game server build with Amazon GameLift. For more information see `Integrate games with custom game servers <https://docs.aws.amazon.com/gamelift/latest/developerguide/integration-custom-intro.html>`_ . By default Amazon GameLift sets this value to ``4.0.2`` .
         :param storage_location: Information indicating where your game build files are stored. Use this parameter only when creating a build with files stored in an Amazon S3 bucket that you own. The storage location must specify an Amazon S3 bucket name and key. The location must also specify a role ARN that you set up to allow Amazon GameLift to access your Amazon S3 bucket. The S3 bucket and your new build must be in the same Region. If a ``StorageLocation`` is specified, the size of your file can be found in your Amazon S3 bucket. Amazon GameLift will report a ``SizeOnDisk`` of 0.
         :param version: Version information that is associated with this build. Version strings do not need to be unique.
@@ -801,7 +801,7 @@ class CfnBuildProps:
         This value determines the type of fleet resources that you use for this build. If your game build contains multiple executables, they all must run on the same operating system. You must specify a valid operating system in this request. There is no default value. You can't change a build's operating system later.
         .. epigraph::
 
-           If you have active fleets using the Windows Server 2012 operating system, you can continue to create new builds using this OS until October 10, 2023, when Microsoft ends its support. All others must use Windows Server 2016 when creating new Windows-based builds.
+           Amazon Linux 2 (AL2) will reach end of support on 6/30/2025. See more details in the `Amazon Linux 2 FAQs <https://docs.aws.amazon.com/https://aws.amazon.com/amazon-linux-2/faqs/>`_ . For game servers that are hosted on AL2 and use Amazon GameLift server SDK 4.x., first update the game server build to server SDK 5.x, and then deploy to AL2023 instances. See `Migrate to Amazon GameLift server SDK version 5. <https://docs.aws.amazon.com/gamelift/latest/developerguide/reference-serversdk5-migration.html>`_
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-build.html#cfn-gamelift-build-operatingsystem
         '''
@@ -954,7 +954,7 @@ class CfnContainerGroupDefinition(
         :param id: Construct identifier for this resource (unique in its scope).
         :param container_definitions: The set of container definitions that are included in the container group.
         :param name: A descriptive identifier for the container group definition. The name value is unique in an AWS Region.
-        :param operating_system: The platform required for all containers in the container group definition.
+        :param operating_system: The platform required for all containers in the container group definition. .. epigraph:: Amazon Linux 2 (AL2) will reach end of support on 6/30/2025. See more details in the `Amazon Linux 2 FAQs <https://docs.aws.amazon.com/https://aws.amazon.com/amazon-linux-2/faqs/>`_ . For game servers that are hosted on AL2 and use Amazon GameLift server SDK 4.x., first update the game server build to server SDK 5.x, and then deploy to AL2023 instances. See `Migrate to Amazon GameLift server SDK version 5. <https://docs.aws.amazon.com/gamelift/latest/developerguide/reference-serversdk5-migration.html>`_
         :param total_cpu_limit: The amount of CPU units on a fleet instance to allocate for the container group. All containers in the group share these resources. This property is an integer value in CPU units (1 vCPU is equal to 1024 CPU units). You can set additional limits for each ``ContainerDefinition`` in the group. If individual containers have limits, this value must be equal to or greater than the sum of all container-specific CPU limits in the group. For more details on memory allocation, see the `Container fleet design guide <https://docs.aws.amazon.com/gamelift/latest/developerguide/containers-design-fleet>`_ .
         :param total_memory_limit: The amount of memory (in MiB) on a fleet instance to allocate for the container group. All containers in the group share these resources. You can set additional limits for each ``ContainerDefinition`` in the group. If individual containers have limits, this value must meet the following requirements: - Equal to or greater than the sum of all container-specific soft memory limits in the group. - Equal to or greater than any container-specific hard limits in the group. For more details on memory allocation, see the `Container fleet design guide <https://docs.aws.amazon.com/gamelift/latest/developerguide/containers-design-fleet>`_ .
         :param scheduling_strategy: The method for deploying the container group across fleet instances. A replica container group might have multiple copies on each fleet instance. A daemon container group maintains only one copy per fleet instance.
@@ -2000,7 +2000,7 @@ class CfnContainerGroupDefinitionProps:
 
         :param container_definitions: The set of container definitions that are included in the container group.
         :param name: A descriptive identifier for the container group definition. The name value is unique in an AWS Region.
-        :param operating_system: The platform required for all containers in the container group definition.
+        :param operating_system: The platform required for all containers in the container group definition. .. epigraph:: Amazon Linux 2 (AL2) will reach end of support on 6/30/2025. See more details in the `Amazon Linux 2 FAQs <https://docs.aws.amazon.com/https://aws.amazon.com/amazon-linux-2/faqs/>`_ . For game servers that are hosted on AL2 and use Amazon GameLift server SDK 4.x., first update the game server build to server SDK 5.x, and then deploy to AL2023 instances. See `Migrate to Amazon GameLift server SDK version 5. <https://docs.aws.amazon.com/gamelift/latest/developerguide/reference-serversdk5-migration.html>`_
         :param total_cpu_limit: The amount of CPU units on a fleet instance to allocate for the container group. All containers in the group share these resources. This property is an integer value in CPU units (1 vCPU is equal to 1024 CPU units). You can set additional limits for each ``ContainerDefinition`` in the group. If individual containers have limits, this value must be equal to or greater than the sum of all container-specific CPU limits in the group. For more details on memory allocation, see the `Container fleet design guide <https://docs.aws.amazon.com/gamelift/latest/developerguide/containers-design-fleet>`_ .
         :param total_memory_limit: The amount of memory (in MiB) on a fleet instance to allocate for the container group. All containers in the group share these resources. You can set additional limits for each ``ContainerDefinition`` in the group. If individual containers have limits, this value must meet the following requirements: - Equal to or greater than the sum of all container-specific soft memory limits in the group. - Equal to or greater than any container-specific hard limits in the group. For more details on memory allocation, see the `Container fleet design guide <https://docs.aws.amazon.com/gamelift/latest/developerguide/containers-design-fleet>`_ .
         :param scheduling_strategy: The method for deploying the container group across fleet instances. A replica container group might have multiple copies on each fleet instance. A daemon container group maintains only one copy per fleet instance.
@@ -2118,6 +2118,10 @@ class CfnContainerGroupDefinitionProps:
     def operating_system(self) -> builtins.str:
         '''The platform required for all containers in the container group definition.
 
+        .. epigraph::
+
+           Amazon Linux 2 (AL2) will reach end of support on 6/30/2025. See more details in the `Amazon Linux 2 FAQs <https://docs.aws.amazon.com/https://aws.amazon.com/amazon-linux-2/faqs/>`_ . For game servers that are hosted on AL2 and use Amazon GameLift server SDK 4.x., first update the game server build to server SDK 5.x, and then deploy to AL2023 instances. See `Migrate to Amazon GameLift server SDK version 5. <https://docs.aws.amazon.com/gamelift/latest/developerguide/reference-serversdk5-migration.html>`_
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-containergroupdefinition.html#cfn-gamelift-containergroupdefinition-operatingsystem
         '''
         result = self._values.get("operating_system")

aws_cdk/aws_globalaccelerator/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS::GlobalAccelerator Construct Library
 
 ## Introduction

aws_cdk/aws_globalaccelerator_endpoints/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # Endpoints for AWS Global Accelerator
 
 This library contains integration classes to reference endpoints in AWS

aws_cdk/aws_glue/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS Glue Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.
@@ -1053,12 +1053,12 @@ class CfnConnection(
         ) -> None:
             '''A structure that is used to specify a connection to create or update.
 
-            :param connection_type: The type of the connection. Currently, these types are supported:. - ``JDBC`` - Designates a connection to a database through Java Database Connectivity (JDBC). ``JDBC`` Connections use the following ConnectionParameters. - Required: All of ( ``HOST`` , ``PORT`` , ``JDBC_ENGINE`` ) or ``JDBC_CONNECTION_URL`` . - Required: All of ( ``USERNAME`` , ``PASSWORD`` ) or ``SECRET_ID`` . - Optional: ``JDBC_ENFORCE_SSL`` , ``CUSTOM_JDBC_CERT`` , ``CUSTOM_JDBC_CERT_STRING`` , ``SKIP_CUSTOM_JDBC_CERT_VALIDATION`` . These parameters are used to configure SSL with JDBC. - ``KAFKA`` - Designates a connection to an Apache Kafka streaming platform. ``KAFKA`` Connections use the following ConnectionParameters. - Required: ``KAFKA_BOOTSTRAP_SERVERS`` . - Optional: ``KAFKA_SSL_ENABLED`` , ``KAFKA_CUSTOM_CERT`` , ``KAFKA_SKIP_CUSTOM_CERT_VALIDATION`` . These parameters are used to configure SSL with ``KAFKA`` . - Optional: ``KAFKA_CLIENT_KEYSTORE`` , ``KAFKA_CLIENT_KEYSTORE_PASSWORD`` , ``KAFKA_CLIENT_KEY_PASSWORD`` , ``ENCRYPTED_KAFKA_CLIENT_KEYSTORE_PASSWORD`` , ``ENCRYPTED_KAFKA_CLIENT_KEY_PASSWORD`` . These parameters are used to configure TLS client configuration with SSL in ``KAFKA`` . - Optional: ``KAFKA_SASL_MECHANISM`` . Can be specified as ``SCRAM-SHA-512`` , ``GSSAPI`` , or ``AWS_MSK_IAM`` . - Optional: ``KAFKA_SASL_SCRAM_USERNAME`` , ``KAFKA_SASL_SCRAM_PASSWORD`` , ``ENCRYPTED_KAFKA_SASL_SCRAM_PASSWORD`` . These parameters are used to configure SASL/SCRAM-SHA-512 authentication with ``KAFKA`` . - Optional: ``KAFKA_SASL_GSSAPI_KEYTAB`` , ``KAFKA_SASL_GSSAPI_KRB5_CONF`` , ``KAFKA_SASL_GSSAPI_SERVICE`` , ``KAFKA_SASL_GSSAPI_PRINCIPAL`` . These parameters are used to configure SASL/GSSAPI authentication with ``KAFKA`` . - ``MONGODB`` - Designates a connection to a MongoDB document database. ``MONGODB`` Connections use the following ConnectionParameters. - Required: ``CONNECTION_URL`` . - Required: All of ( ``USERNAME`` , ``PASSWORD`` ) or ``SECRET_ID`` . - ``NETWORK`` - Designates a network connection to a data source within an Amazon Virtual Private Cloud environment (Amazon VPC). ``NETWORK`` Connections do not require ConnectionParameters. Instead, provide a PhysicalConnectionRequirements. - ``MARKETPLACE`` - Uses configuration settings contained in a connector purchased from AWS Marketplace to read from and write to data stores that are not natively supported by AWS Glue . ``MARKETPLACE`` Connections use the following ConnectionParameters. - Required: ``CONNECTOR_TYPE`` , ``CONNECTOR_URL`` , ``CONNECTOR_CLASS_NAME`` , ``CONNECTION_URL`` . - Required for ``JDBC`` ``CONNECTOR_TYPE`` connections: All of ( ``USERNAME`` , ``PASSWORD`` ) or ``SECRET_ID`` . - ``CUSTOM`` - Uses configuration settings contained in a custom connector to read from and write to data stores that are not natively supported by AWS Glue . ``SFTP`` is not supported. For more information about how optional ConnectionProperties are used to configure features in AWS Glue , consult `AWS Glue connection properties <https://docs.aws.amazon.com/glue/latest/dg/connection-defining.html>`_ . For more information about how optional ConnectionProperties are used to configure features in AWS Glue Studio, consult `Using connectors and connections <https://docs.aws.amazon.com/glue/latest/ug/connectors-chapter.html>`_ .
+            :param connection_type: The type of the connection. Currently, these types are supported:. - ``JDBC`` - Designates a connection to a database through Java Database Connectivity (JDBC). ``JDBC`` Connections use the following ConnectionParameters. - Required: All of ( ``HOST`` , ``PORT`` , ``JDBC_ENGINE`` ) or ``JDBC_CONNECTION_URL`` . - Required: All of ( ``USERNAME`` , ``PASSWORD`` ) or ``SECRET_ID`` . - Optional: ``JDBC_ENFORCE_SSL`` , ``CUSTOM_JDBC_CERT`` , ``CUSTOM_JDBC_CERT_STRING`` , ``SKIP_CUSTOM_JDBC_CERT_VALIDATION`` . These parameters are used to configure SSL with JDBC. - ``KAFKA`` - Designates a connection to an Apache Kafka streaming platform. ``KAFKA`` Connections use the following ConnectionParameters. - Required: ``KAFKA_BOOTSTRAP_SERVERS`` . - Optional: ``KAFKA_SSL_ENABLED`` , ``KAFKA_CUSTOM_CERT`` , ``KAFKA_SKIP_CUSTOM_CERT_VALIDATION`` . These parameters are used to configure SSL with ``KAFKA`` . - Optional: ``KAFKA_CLIENT_KEYSTORE`` , ``KAFKA_CLIENT_KEYSTORE_PASSWORD`` , ``KAFKA_CLIENT_KEY_PASSWORD`` , ``ENCRYPTED_KAFKA_CLIENT_KEYSTORE_PASSWORD`` , ``ENCRYPTED_KAFKA_CLIENT_KEY_PASSWORD`` . These parameters are used to configure TLS client configuration with SSL in ``KAFKA`` . - Optional: ``KAFKA_SASL_MECHANISM`` . Can be specified as ``SCRAM-SHA-512`` , ``GSSAPI`` , or ``AWS_MSK_IAM`` . - Optional: ``KAFKA_SASL_SCRAM_USERNAME`` , ``KAFKA_SASL_SCRAM_PASSWORD`` , ``ENCRYPTED_KAFKA_SASL_SCRAM_PASSWORD`` . These parameters are used to configure SASL/SCRAM-SHA-512 authentication with ``KAFKA`` . - Optional: ``KAFKA_SASL_GSSAPI_KEYTAB`` , ``KAFKA_SASL_GSSAPI_KRB5_CONF`` , ``KAFKA_SASL_GSSAPI_SERVICE`` , ``KAFKA_SASL_GSSAPI_PRINCIPAL`` . These parameters are used to configure SASL/GSSAPI authentication with ``KAFKA`` . - ``MONGODB`` - Designates a connection to a MongoDB document database. ``MONGODB`` Connections use the following ConnectionParameters. - Required: ``CONNECTION_URL`` . - Required: All of ( ``USERNAME`` , ``PASSWORD`` ) or ``SECRET_ID`` . - ``SALESFORCE`` - Designates a connection to Salesforce using OAuth authencation. - Requires the ``AuthenticationConfiguration`` member to be configured. - ``NETWORK`` - Designates a network connection to a data source within an Amazon Virtual Private Cloud environment (Amazon VPC). ``NETWORK`` Connections do not require ConnectionParameters. Instead, provide a PhysicalConnectionRequirements. - ``MARKETPLACE`` - Uses configuration settings contained in a connector purchased from AWS Marketplace to read from and write to data stores that are not natively supported by AWS Glue . ``MARKETPLACE`` Connections use the following ConnectionParameters. - Required: ``CONNECTOR_TYPE`` , ``CONNECTOR_URL`` , ``CONNECTOR_CLASS_NAME`` , ``CONNECTION_URL`` . - Required for ``JDBC`` ``CONNECTOR_TYPE`` connections: All of ( ``USERNAME`` , ``PASSWORD`` ) or ``SECRET_ID`` . - ``CUSTOM`` - Uses configuration settings contained in a custom connector to read from and write to data stores that are not natively supported by AWS Glue . ``SFTP`` is not supported. For more information about how optional ConnectionProperties are used to configure features in AWS Glue , consult `AWS Glue connection properties <https://docs.aws.amazon.com/glue/latest/dg/connection-defining.html>`_ . For more information about how optional ConnectionProperties are used to configure features in AWS Glue Studio, consult `Using connectors and connections <https://docs.aws.amazon.com/glue/latest/ug/connectors-chapter.html>`_ .
             :param connection_properties: These key-value pairs define parameters for the connection.
             :param description: The description of the connection.
             :param match_criteria: A list of criteria that can be used in selecting this connection.
-            :param name: The name of the connection. Connection will not function as expected without a name.
-            :param physical_connection_requirements: A map of physical connection requirements, such as virtual private cloud (VPC) and ``SecurityGroup`` , that are needed to successfully make this connection.
+            :param name: The name of the connection.
+            :param physical_connection_requirements: The physical connection requirements, such as virtual private cloud (VPC) and ``SecurityGroup`` , that are needed to successfully make this connection.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-connection-connectioninput.html
             :exampleMetadata: fixture=_generated
@@ -1135,6 +1135,8 @@ class CfnConnection(
 
             - Required: ``CONNECTION_URL`` .
             - Required: All of ( ``USERNAME`` , ``PASSWORD`` ) or ``SECRET_ID`` .
+            - ``SALESFORCE`` - Designates a connection to Salesforce using OAuth authencation.
+            - Requires the ``AuthenticationConfiguration`` member to be configured.
             - ``NETWORK`` - Designates a network connection to a data source within an Amazon Virtual Private Cloud environment (Amazon VPC).
 
             ``NETWORK`` Connections do not require ConnectionParameters. Instead, provide a PhysicalConnectionRequirements.
@@ -1190,8 +1192,6 @@ class CfnConnection(
         def name(self) -> typing.Optional[builtins.str]:
             '''The name of the connection.
 
-            Connection will not function as expected without a name.
-
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-connection-connectioninput.html#cfn-glue-connection-connectioninput-name
             '''
             result = self._values.get("name")
@@ -1201,7 +1201,7 @@ class CfnConnection(
         def physical_connection_requirements(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnConnection.PhysicalConnectionRequirementsProperty"]]:
-            '''A map of physical connection requirements, such as virtual private cloud (VPC) and ``SecurityGroup`` , that are needed to successfully make this connection.
+            '''The physical connection requirements, such as virtual private cloud (VPC) and ``SecurityGroup`` , that are needed to successfully make this connection.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-connection-connectioninput.html#cfn-glue-connection-connectioninput-physicalconnectionrequirements
             '''
@@ -1236,9 +1236,9 @@ class CfnConnection(
             security_group_id_list: typing.Optional[typing.Sequence[builtins.str]] = None,
             subnet_id: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Specifies the physical requirements for a connection.
+            '''The OAuth client app in GetConnection response.
 
-            :param availability_zone: The connection's Availability Zone. This field is redundant because the specified subnet implies the Availability Zone to be used. Currently the field must be populated, but it will be deprecated in the future.
+            :param availability_zone: The connection's Availability Zone.
             :param security_group_id_list: The security group ID list used by the connection.
             :param subnet_id: The subnet ID used by the connection.
 
@@ -1274,8 +1274,6 @@ class CfnConnection(
         def availability_zone(self) -> typing.Optional[builtins.str]:
             '''The connection's Availability Zone.
 
-            This field is redundant because the specified subnet implies the Availability Zone to be used. Currently the field must be populated, but it will be deprecated in the future.
-
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-connection-physicalconnectionrequirements.html#cfn-glue-connection-physicalconnectionrequirements-availabilityzone
             '''
             result = self._values.get("availability_zone")
@@ -6041,7 +6039,7 @@ class CfnJob(
         :param execution_property: The maximum number of concurrent runs that are allowed for this job.
         :param glue_version: Glue version determines the versions of Apache Spark and Python that AWS Glue supports. The Python version indicates the version supported for jobs of type Spark. For more information about the available AWS Glue versions and corresponding Spark and Python versions, see `Glue version <https://docs.aws.amazon.com/glue/latest/dg/add-job.html>`_ in the developer guide. Jobs that are created without specifying a Glue version default to Glue 0.9.
         :param log_uri: This field is reserved for future use.
-        :param maintenance_window: 
+        :param maintenance_window: This field specifies a day of the week and hour for a maintenance window for streaming jobs. AWS Glue periodically performs maintenance activities. During these maintenance windows, AWS Glue will need to restart your streaming jobs. AWS Glue will restart the job within 3 hours of the specified maintenance window. For instance, if you set up the maintenance window for Monday at 10:00AM GMT, your jobs will be restarted between 10:00AM GMT to 1:00PM GMT.
         :param max_capacity: The number of AWS Glue data processing units (DPUs) that can be allocated when this job runs. A DPU is a relative measure of processing power that consists of 4 vCPUs of compute capacity and 16 GB of memory. Do not set ``Max Capacity`` if using ``WorkerType`` and ``NumberOfWorkers`` . The value that can be allocated for ``MaxCapacity`` depends on whether you are running a Python shell job or an Apache Spark ETL job: - When you specify a Python shell job ( ``JobCommand.Name`` ="pythonshell"), you can allocate either 0.0625 or 1 DPU. The default is 0.0625 DPU. - When you specify an Apache Spark ETL job ( ``JobCommand.Name`` ="glueetl"), you can allocate from 2 to 100 DPUs. The default is 10 DPUs. This job type cannot have a fractional DPU allocation.
         :param max_retries: The maximum number of times to retry this job after a JobRun fails.
         :param name: The name you assign to this job definition.
@@ -6284,6 +6282,7 @@ class CfnJob(
     @builtins.property
     @jsii.member(jsii_name="maintenanceWindow")
     def maintenance_window(self) -> typing.Optional[builtins.str]:
+        '''This field specifies a day of the week and hour for a maintenance window for streaming jobs.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "maintenanceWindow"))
 
     @maintenance_window.setter
@@ -6772,7 +6771,7 @@ class CfnJobProps:
         :param execution_property: The maximum number of concurrent runs that are allowed for this job.
         :param glue_version: Glue version determines the versions of Apache Spark and Python that AWS Glue supports. The Python version indicates the version supported for jobs of type Spark. For more information about the available AWS Glue versions and corresponding Spark and Python versions, see `Glue version <https://docs.aws.amazon.com/glue/latest/dg/add-job.html>`_ in the developer guide. Jobs that are created without specifying a Glue version default to Glue 0.9.
         :param log_uri: This field is reserved for future use.
-        :param maintenance_window: 
+        :param maintenance_window: This field specifies a day of the week and hour for a maintenance window for streaming jobs. AWS Glue periodically performs maintenance activities. During these maintenance windows, AWS Glue will need to restart your streaming jobs. AWS Glue will restart the job within 3 hours of the specified maintenance window. For instance, if you set up the maintenance window for Monday at 10:00AM GMT, your jobs will be restarted between 10:00AM GMT to 1:00PM GMT.
         :param max_capacity: The number of AWS Glue data processing units (DPUs) that can be allocated when this job runs. A DPU is a relative measure of processing power that consists of 4 vCPUs of compute capacity and 16 GB of memory. Do not set ``Max Capacity`` if using ``WorkerType`` and ``NumberOfWorkers`` . The value that can be allocated for ``MaxCapacity`` depends on whether you are running a Python shell job or an Apache Spark ETL job: - When you specify a Python shell job ( ``JobCommand.Name`` ="pythonshell"), you can allocate either 0.0625 or 1 DPU. The default is 0.0625 DPU. - When you specify an Apache Spark ETL job ( ``JobCommand.Name`` ="glueetl"), you can allocate from 2 to 100 DPUs. The default is 10 DPUs. This job type cannot have a fractional DPU allocation.
         :param max_retries: The maximum number of times to retry this job after a JobRun fails.
         :param name: The name you assign to this job definition.
@@ -7018,7 +7017,12 @@ class CfnJobProps:
 
     @builtins.property
     def maintenance_window(self) -> typing.Optional[builtins.str]:
-        '''
+        '''This field specifies a day of the week and hour for a maintenance window for streaming jobs.
+
+        AWS Glue periodically performs maintenance activities. During these maintenance windows, AWS Glue will need to restart your streaming jobs.
+
+        AWS Glue will restart the job within 3 hours of the specified maintenance window. For instance, if you set up the maintenance window for Monday at 10:00AM GMT, your jobs will be restarted between 10:00AM GMT to 1:00PM GMT.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-job.html#cfn-glue-job-maintenancewindow
         '''
         result = self._values.get("maintenance_window")

aws_cdk/aws_grafana/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS::Grafana Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.
@@ -148,7 +148,7 @@ class CfnWorkspace(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param account_access_type: Specifies whether the workspace can access AWS resources in this AWS account only, or whether it can also access AWS resources in other accounts in the same organization. If this is ``ORGANIZATION`` , the ``OrganizationalUnits`` parameter specifies which organizational units the workspace can access.
-        :param authentication_providers: Specifies whether this workspace uses SAML 2.0, AWS IAM Identity Center , or both to authenticate users for using the Grafana console within a workspace. For more information, see `User authentication in Amazon Managed Grafana <https://docs.aws.amazon.com/grafana/latest/userguide/authentication-in-AMG.html>`_ .
+        :param authentication_providers: Specifies whether this workspace uses SAML 2.0, AWS IAM Identity Center , or both to authenticate users for using the Grafana console within a workspace. For more information, see `User authentication in Amazon Managed Grafana <https://docs.aws.amazon.com/grafana/latest/userguide/authentication-in-AMG.html>`_ . *Allowed Values* : ``AWS_SSO | SAML``
         :param permission_type: If this is ``SERVICE_MANAGED`` , and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels. If this is ``CUSTOMER_MANAGED`` , you must manage those roles and permissions yourself. If you are working with a workspace in a member account of an organization and that account is not a delegated administrator account, and you want the workspace to access data sources in other AWS accounts in the organization, this parameter must be set to ``CUSTOMER_MANAGED`` . For more information about converting between customer and service managed, see `Managing permissions for data sources and notification channels <https://docs.aws.amazon.com/grafana/latest/userguide/AMG-datasource-and-notification.html>`_ . For more information about the roles and permissions that must be managed for customer managed workspaces, see `Amazon Managed Grafana permissions and policies for AWS data sources and notification channels <https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html>`_
         :param client_token: A unique, case-sensitive, user-provided identifier to ensure the idempotency of the request.
         :param data_sources: Specifies the AWS data sources that have been configured to have IAM roles and permissions created to allow Amazon Managed Grafana to read data from these sources. This list is only used when the workspace was created through the AWS console, and the ``permissionType`` is ``SERVICE_MANAGED`` .
@@ -156,7 +156,7 @@ class CfnWorkspace(
         :param grafana_version: Specifies the version of Grafana to support in the workspace. Defaults to the latest version on create (for example, 9.4), or the current version of the workspace on update. Can only be used to upgrade (for example, from 8.4 to 9.4), not downgrade (for example, from 9.4 to 8.4). To know what versions are available to upgrade to for a specific workspace, see the `ListVersions <https://docs.aws.amazon.com/grafana/latest/APIReference/API_ListVersions.html>`_ operation.
         :param name: The name of the workspace.
         :param network_access_control: The configuration settings for network access to your workspace.
-        :param notification_destinations: The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels.
+        :param notification_destinations: The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels. *AllowedValues* : ``SNS``
         :param organizational_units: Specifies the organizational units that this workspace is allowed to use data sources from, if this workspace is in an account that is part of an organization.
         :param organization_role_name: The name of the IAM role that is used to access resources through Organizations.
         :param plugin_admin_enabled: Whether plugin administration is enabled in the workspace. Setting to ``true`` allows workspace admins to install, uninstall, and update plugins from within the Grafana workspace. .. epigraph:: This option is only valid for workspaces that support Grafana version 9 or newer.
@@ -1228,7 +1228,7 @@ class CfnWorkspaceProps:
         '''Properties for defining a ``CfnWorkspace``.
 
         :param account_access_type: Specifies whether the workspace can access AWS resources in this AWS account only, or whether it can also access AWS resources in other accounts in the same organization. If this is ``ORGANIZATION`` , the ``OrganizationalUnits`` parameter specifies which organizational units the workspace can access.
-        :param authentication_providers: Specifies whether this workspace uses SAML 2.0, AWS IAM Identity Center , or both to authenticate users for using the Grafana console within a workspace. For more information, see `User authentication in Amazon Managed Grafana <https://docs.aws.amazon.com/grafana/latest/userguide/authentication-in-AMG.html>`_ .
+        :param authentication_providers: Specifies whether this workspace uses SAML 2.0, AWS IAM Identity Center , or both to authenticate users for using the Grafana console within a workspace. For more information, see `User authentication in Amazon Managed Grafana <https://docs.aws.amazon.com/grafana/latest/userguide/authentication-in-AMG.html>`_ . *Allowed Values* : ``AWS_SSO | SAML``
         :param permission_type: If this is ``SERVICE_MANAGED`` , and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels. If this is ``CUSTOMER_MANAGED`` , you must manage those roles and permissions yourself. If you are working with a workspace in a member account of an organization and that account is not a delegated administrator account, and you want the workspace to access data sources in other AWS accounts in the organization, this parameter must be set to ``CUSTOMER_MANAGED`` . For more information about converting between customer and service managed, see `Managing permissions for data sources and notification channels <https://docs.aws.amazon.com/grafana/latest/userguide/AMG-datasource-and-notification.html>`_ . For more information about the roles and permissions that must be managed for customer managed workspaces, see `Amazon Managed Grafana permissions and policies for AWS data sources and notification channels <https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html>`_
         :param client_token: A unique, case-sensitive, user-provided identifier to ensure the idempotency of the request.
         :param data_sources: Specifies the AWS data sources that have been configured to have IAM roles and permissions created to allow Amazon Managed Grafana to read data from these sources. This list is only used when the workspace was created through the AWS console, and the ``permissionType`` is ``SERVICE_MANAGED`` .
@@ -1236,7 +1236,7 @@ class CfnWorkspaceProps:
         :param grafana_version: Specifies the version of Grafana to support in the workspace. Defaults to the latest version on create (for example, 9.4), or the current version of the workspace on update. Can only be used to upgrade (for example, from 8.4 to 9.4), not downgrade (for example, from 9.4 to 8.4). To know what versions are available to upgrade to for a specific workspace, see the `ListVersions <https://docs.aws.amazon.com/grafana/latest/APIReference/API_ListVersions.html>`_ operation.
         :param name: The name of the workspace.
         :param network_access_control: The configuration settings for network access to your workspace.
-        :param notification_destinations: The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels.
+        :param notification_destinations: The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels. *AllowedValues* : ``SNS``
         :param organizational_units: Specifies the organizational units that this workspace is allowed to use data sources from, if this workspace is in an account that is part of an organization.
         :param organization_role_name: The name of the IAM role that is used to access resources through Organizations.
         :param plugin_admin_enabled: Whether plugin administration is enabled in the workspace. Setting to ``true`` allows workspace admins to install, uninstall, and update plugins from within the Grafana workspace. .. epigraph:: This option is only valid for workspaces that support Grafana version 9 or newer.
@@ -1372,6 +1372,8 @@ class CfnWorkspaceProps:
     def authentication_providers(self) -> typing.List[builtins.str]:
         '''Specifies whether this workspace uses SAML 2.0, AWS IAM Identity Center , or both to authenticate users for using the Grafana console within a workspace. For more information, see `User authentication in Amazon Managed Grafana <https://docs.aws.amazon.com/grafana/latest/userguide/authentication-in-AMG.html>`_ .
 
+        *Allowed Values* : ``AWS_SSO | SAML``
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-grafana-workspace.html#cfn-grafana-workspace-authenticationproviders
         '''
         result = self._values.get("authentication_providers")
@@ -1462,6 +1464,8 @@ class CfnWorkspaceProps:
     def notification_destinations(self) -> typing.Optional[typing.List[builtins.str]]:
         '''The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels.
 
+        *AllowedValues* : ``SNS``
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-grafana-workspace.html#cfn-grafana-workspace-notificationdestinations
         '''
         result = self._values.get("notification_destinations")

aws_cdk/aws_greengrass/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS IoT Greengrass Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.

aws_cdk/aws_greengrassv2/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS::GreengrassV2 Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.

aws_cdk/aws_groundstation/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS::GroundStation Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.