aws-cdk-lib 2.148.1__py3-none-any.whl → 2.150.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (51) hide show
  1. aws_cdk/__init__.py +4 -8
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.148.1.jsii.tgz → aws-cdk-lib@2.150.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_applicationautoscaling/__init__.py +16 -12
  5. aws_cdk/aws_bedrock/__init__.py +60 -28
  6. aws_cdk/aws_cloudformation/__init__.py +4 -8
  7. aws_cdk/aws_cloudtrail/__init__.py +30 -558
  8. aws_cdk/aws_cloudwatch/__init__.py +1 -1
  9. aws_cdk/aws_codebuild/__init__.py +57 -5
  10. aws_cdk/aws_codecommit/__init__.py +103 -0
  11. aws_cdk/aws_codedeploy/__init__.py +251 -5
  12. aws_cdk/aws_codepipeline/__init__.py +80 -5
  13. aws_cdk/aws_codestarnotifications/__init__.py +90 -4
  14. aws_cdk/aws_cognito/__init__.py +1 -2
  15. aws_cdk/aws_deadline/__init__.py +9 -15
  16. aws_cdk/aws_dms/__init__.py +10 -10
  17. aws_cdk/aws_ec2/__init__.py +86 -4
  18. aws_cdk/aws_ecs/__init__.py +10 -8
  19. aws_cdk/aws_eks/__init__.py +26 -20
  20. aws_cdk/aws_elasticloadbalancingv2/__init__.py +2 -2
  21. aws_cdk/aws_emr/__init__.py +26 -28
  22. aws_cdk/aws_events/__init__.py +1 -13
  23. aws_cdk/aws_fsx/__init__.py +25 -23
  24. aws_cdk/aws_glue/__init__.py +3 -3
  25. aws_cdk/aws_guardduty/__init__.py +6 -4
  26. aws_cdk/aws_iam/__init__.py +8 -5
  27. aws_cdk/aws_kinesisanalytics/__init__.py +11 -11
  28. aws_cdk/aws_kinesisanalyticsv2/__init__.py +11 -11
  29. aws_cdk/aws_lambda/__init__.py +19 -2
  30. aws_cdk/aws_logs/__init__.py +9 -0
  31. aws_cdk/aws_qbusiness/__init__.py +21 -7
  32. aws_cdk/aws_rds/__init__.py +18 -12
  33. aws_cdk/aws_rolesanywhere/__init__.py +22 -13
  34. aws_cdk/aws_route53profiles/__init__.py +4 -4
  35. aws_cdk/aws_s3/__init__.py +15 -117
  36. aws_cdk/aws_sagemaker/__init__.py +10 -10
  37. aws_cdk/aws_ses/__init__.py +119 -102
  38. aws_cdk/aws_stepfunctions_tasks/__init__.py +215 -24
  39. aws_cdk/aws_synthetics/__init__.py +15 -1
  40. aws_cdk/aws_verifiedpermissions/__init__.py +7 -9
  41. aws_cdk/aws_wafv2/__init__.py +10 -16
  42. aws_cdk/aws_workspaces/__init__.py +86 -56
  43. aws_cdk/custom_resources/__init__.py +91 -23
  44. aws_cdk/pipelines/__init__.py +1 -1
  45. aws_cdk/region_info/__init__.py +32 -12
  46. {aws_cdk_lib-2.148.1.dist-info → aws_cdk_lib-2.150.0.dist-info}/METADATA +1 -1
  47. {aws_cdk_lib-2.148.1.dist-info → aws_cdk_lib-2.150.0.dist-info}/RECORD +51 -51
  48. {aws_cdk_lib-2.148.1.dist-info → aws_cdk_lib-2.150.0.dist-info}/LICENSE +0 -0
  49. {aws_cdk_lib-2.148.1.dist-info → aws_cdk_lib-2.150.0.dist-info}/NOTICE +0 -0
  50. {aws_cdk_lib-2.148.1.dist-info → aws_cdk_lib-2.150.0.dist-info}/WHEEL +0 -0
  51. {aws_cdk_lib-2.148.1.dist-info → aws_cdk_lib-2.150.0.dist-info}/top_level.txt +0 -0
@@ -756,7 +756,7 @@ class CfnDataSource(
756
756
  :param scope: Scope in which this resource is defined.
757
757
  :param id: Construct identifier for this resource (unique in its scope).
758
758
  :param application_id: The identifier of the Amazon Q Business application the data source will be attached to.
759
- :param configuration: Configuration information to connect to your data source repository. For configuration templates for your specific data source, see `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ .
759
+ :param configuration: Configuration information to connect your data source repository to Amazon Q Business. Use this parameter to provide a JSON schema with configuration information specific to your data source connector. Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas: - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_ You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice. - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
760
760
  :param display_name: The name of the Amazon Q Business data source.
761
761
  :param index_id: The identifier of the index the data source is attached to.
762
762
  :param description: A description for the data source connector.
@@ -896,7 +896,7 @@ class CfnDataSource(
896
896
  @builtins.property
897
897
  @jsii.member(jsii_name="configuration")
898
898
  def configuration(self) -> typing.Any:
899
- '''Configuration information to connect to your data source repository.'''
899
+ '''Configuration information to connect your data source repository to Amazon Q Business.'''
900
900
  return typing.cast(typing.Any, jsii.get(self, "configuration"))
901
901
 
902
902
  @configuration.setter
@@ -1876,7 +1876,7 @@ class CfnDataSourceProps:
1876
1876
  '''Properties for defining a ``CfnDataSource``.
1877
1877
 
1878
1878
  :param application_id: The identifier of the Amazon Q Business application the data source will be attached to.
1879
- :param configuration: Configuration information to connect to your data source repository. For configuration templates for your specific data source, see `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ .
1879
+ :param configuration: Configuration information to connect your data source repository to Amazon Q Business. Use this parameter to provide a JSON schema with configuration information specific to your data source connector. Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas: - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_ You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice. - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
1880
1880
  :param display_name: The name of the Amazon Q Business data source.
1881
1881
  :param index_id: The identifier of the index the data source is attached to.
1882
1882
  :param description: A description for the data source connector.
@@ -2023,9 +2023,19 @@ class CfnDataSourceProps:
2023
2023
 
2024
2024
  @builtins.property
2025
2025
  def configuration(self) -> typing.Any:
2026
- '''Configuration information to connect to your data source repository.
2026
+ '''Configuration information to connect your data source repository to Amazon Q Business.
2027
2027
 
2028
- For configuration templates for your specific data source, see `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ .
2028
+ Use this parameter to provide a JSON schema with configuration information specific to your data source connector.
2029
+
2030
+ Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas:
2031
+
2032
+ - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_
2033
+ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_
2034
+
2035
+ You can find configuration templates for your specific data source using the following steps:
2036
+
2037
+ - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice.
2038
+ - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
2029
2039
 
2030
2040
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-datasource.html#cfn-qbusiness-datasource-configuration
2031
2041
  '''
@@ -4493,7 +4503,7 @@ class CfnWebExperience(
4493
4503
  :param scope: Scope in which this resource is defined.
4494
4504
  :param id: Construct identifier for this resource (unique in its scope).
4495
4505
  :param application_id: The identifier of the Amazon Q Business web experience.
4496
- :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience.
4506
+ :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience. .. epigraph:: You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
4497
4507
  :param sample_prompts_control_mode: Determines whether sample prompts are enabled in the web experience for an end user.
4498
4508
  :param subtitle: A subtitle to personalize your Amazon Q Business web experience.
4499
4509
  :param tags: A list of key-value pairs that identify or categorize your Amazon Q Business web experience. You can also use tags to help control access to the web experience. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
@@ -4733,7 +4743,7 @@ class CfnWebExperienceProps:
4733
4743
  '''Properties for defining a ``CfnWebExperience``.
4734
4744
 
4735
4745
  :param application_id: The identifier of the Amazon Q Business web experience.
4736
- :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience.
4746
+ :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience. .. epigraph:: You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
4737
4747
  :param sample_prompts_control_mode: Determines whether sample prompts are enabled in the web experience for an end user.
4738
4748
  :param subtitle: A subtitle to personalize your Amazon Q Business web experience.
4739
4749
  :param tags: A list of key-value pairs that identify or categorize your Amazon Q Business web experience. You can also use tags to help control access to the web experience. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
@@ -4803,6 +4813,10 @@ class CfnWebExperienceProps:
4803
4813
  def role_arn(self) -> typing.Optional[builtins.str]:
4804
4814
  '''The Amazon Resource Name (ARN) of the service role attached to your web experience.
4805
4815
 
4816
+ .. epigraph::
4817
+
4818
+ You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
4819
+
4806
4820
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-webexperience.html#cfn-qbusiness-webexperience-rolearn
4807
4821
  '''
4808
4822
  result = self._values.get("role_arn")
@@ -4665,7 +4665,7 @@ class CfnDBCluster(
4665
4665
  :param port: The port number on which the DB instances in the DB cluster accept connections. Default: - When ``EngineMode`` is ``provisioned`` , ``3306`` (for both Aurora MySQL and Aurora PostgreSQL) - When ``EngineMode`` is ``serverless`` : - ``3306`` when ``Engine`` is ``aurora`` or ``aurora-mysql`` - ``5432`` when ``Engine`` is ``aurora-postgresql`` .. epigraph:: The ``No interruption`` on update behavior only applies to DB clusters. If you are updating a DB instance, see `Port <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-port>`_ for the AWS::RDS::DBInstance resource. Valid for: Aurora DB clusters and Multi-AZ DB clusters
4666
4666
  :param preferred_backup_window: The daily time range during which automated backups are created. For more information, see `Backup Window <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html#Aurora.Managing.Backups.BackupWindow>`_ in the *Amazon Aurora User Guide.* Constraints: - Must be in the format ``hh24:mi-hh24:mi`` . - Must be in Universal Coordinated Time (UTC). - Must not conflict with the preferred maintenance window. - Must be at least 30 minutes. Valid for: Aurora DB clusters and Multi-AZ DB clusters
4667
4667
  :param preferred_maintenance_window: The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC). Format: ``ddd:hh24:mi-ddd:hh24:mi`` The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see `Adjusting the Preferred DB Cluster Maintenance Window <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow.Aurora>`_ in the *Amazon Aurora User Guide.* Valid Days: Mon, Tue, Wed, Thu, Fri, Sat, Sun. Constraints: Minimum 30-minute window. Valid for: Aurora DB clusters and Multi-AZ DB clusters
4668
- :param publicly_accessible: Specifies whether the DB cluster is publicly accessible. When the DB cluster is publicly accessible, its Domain Name System (DNS) endpoint resolves to the private IP address from within the DB cluster's virtual private cloud (VPC). It resolves to the public IP address from outside of the DB cluster's VPC. Access to the DB cluster is ultimately controlled by the security group it uses. That public access isn't permitted if the security group assigned to the DB cluster doesn't permit it. When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address. Valid for Cluster Type: Multi-AZ DB clusters only Default: The default behavior varies depending on whether ``DBSubnetGroupName`` is specified. If ``DBSubnetGroupName`` isn't specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the default VPC in the target Region doesn’t have an internet gateway attached to it, the DB cluster is private. - If the default VPC in the target Region has an internet gateway attached to it, the DB cluster is public. If ``DBSubnetGroupName`` is specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the subnets are part of a VPC that doesn’t have an internet gateway attached to it, the DB cluster is private. - If the subnets are part of a VPC that has an internet gateway attached to it, the DB cluster is public.
4668
+ :param publicly_accessible: Specifies whether the DB cluster is publicly accessible. When the DB cluster is publicly accessible and you connect from outside of the DB cluster's virtual private cloud (VPC), its Domain Name System (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB cluster, the endpoint resolves to the private IP address. Access to the DB cluster is ultimately controlled by the security group it uses. That public access isn't permitted if the security group assigned to the DB cluster doesn't permit it. When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address. Valid for Cluster Type: Multi-AZ DB clusters only Default: The default behavior varies depending on whether ``DBSubnetGroupName`` is specified. If ``DBSubnetGroupName`` isn't specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the default VPC in the target Region doesn’t have an internet gateway attached to it, the DB cluster is private. - If the default VPC in the target Region has an internet gateway attached to it, the DB cluster is public. If ``DBSubnetGroupName`` is specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the subnets are part of a VPC that doesn’t have an internet gateway attached to it, the DB cluster is private. - If the subnets are part of a VPC that has an internet gateway attached to it, the DB cluster is public.
4669
4669
  :param replication_source_identifier: The Amazon Resource Name (ARN) of the source DB instance or DB cluster if this DB cluster is created as a read replica. Valid for: Aurora DB clusters only
4670
4670
  :param restore_to_time: The date and time to restore the DB cluster to. Valid Values: Value must be a time in Universal Coordinated Time (UTC) format Constraints: - Must be before the latest restorable time for the DB instance - Must be specified if ``UseLatestRestorableTime`` parameter isn't provided - Can't be specified if the ``UseLatestRestorableTime`` parameter is enabled - Can't be specified if the ``RestoreType`` parameter is ``copy-on-write`` This property must be used with ``SourceDBClusterIdentifier`` property. The resulting cluster will have the identifier that matches the value of the ``DBclusterIdentifier`` property. Example: ``2015-03-07T23:45:00Z`` Valid for: Aurora DB clusters and Multi-AZ DB clusters
4671
4671
  :param restore_type: The type of restore to be performed. You can specify one of the following values:. - ``full-copy`` - The new DB cluster is restored as a full copy of the source DB cluster. - ``copy-on-write`` - The new DB cluster is restored as a clone of the source DB cluster. If you don't specify a ``RestoreType`` value, then the new DB cluster is restored as a full copy of the source DB cluster. Valid for: Aurora DB clusters and Multi-AZ DB clusters Default: - "full-copy"
@@ -5894,7 +5894,7 @@ class CfnDBCluster(
5894
5894
  For more information, see `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html>`_ in the *Amazon RDS User Guide* and `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html>`_ in the *Amazon Aurora User Guide.*
5895
5895
 
5896
5896
  :param kms_key_id: The AWS KMS key identifier that is used to encrypt the secret.
5897
- :param secret_arn: The Amazon Resource Name (ARN) of the secret.
5897
+ :param secret_arn: The Amazon Resource Name (ARN) of the secret. This parameter is a return value that you can retrieve using the ``Fn::GetAtt`` intrinsic function. For more information, see `Return values <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#aws-resource-rds-dbcluster-return-values>`_ .
5898
5898
 
5899
5899
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbcluster-masterusersecret.html
5900
5900
  :exampleMetadata: fixture=_generated
@@ -5933,6 +5933,8 @@ class CfnDBCluster(
5933
5933
  def secret_arn(self) -> typing.Optional[builtins.str]:
5934
5934
  '''The Amazon Resource Name (ARN) of the secret.
5935
5935
 
5936
+ This parameter is a return value that you can retrieve using the ``Fn::GetAtt`` intrinsic function. For more information, see `Return values <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#aws-resource-rds-dbcluster-return-values>`_ .
5937
+
5936
5938
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbcluster-masterusersecret.html#cfn-rds-dbcluster-masterusersecret-secretarn
5937
5939
  '''
5938
5940
  result = self._values.get("secret_arn")
@@ -6774,7 +6776,7 @@ class CfnDBClusterProps:
6774
6776
  :param port: The port number on which the DB instances in the DB cluster accept connections. Default: - When ``EngineMode`` is ``provisioned`` , ``3306`` (for both Aurora MySQL and Aurora PostgreSQL) - When ``EngineMode`` is ``serverless`` : - ``3306`` when ``Engine`` is ``aurora`` or ``aurora-mysql`` - ``5432`` when ``Engine`` is ``aurora-postgresql`` .. epigraph:: The ``No interruption`` on update behavior only applies to DB clusters. If you are updating a DB instance, see `Port <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-port>`_ for the AWS::RDS::DBInstance resource. Valid for: Aurora DB clusters and Multi-AZ DB clusters
6775
6777
  :param preferred_backup_window: The daily time range during which automated backups are created. For more information, see `Backup Window <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html#Aurora.Managing.Backups.BackupWindow>`_ in the *Amazon Aurora User Guide.* Constraints: - Must be in the format ``hh24:mi-hh24:mi`` . - Must be in Universal Coordinated Time (UTC). - Must not conflict with the preferred maintenance window. - Must be at least 30 minutes. Valid for: Aurora DB clusters and Multi-AZ DB clusters
6776
6778
  :param preferred_maintenance_window: The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC). Format: ``ddd:hh24:mi-ddd:hh24:mi`` The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see `Adjusting the Preferred DB Cluster Maintenance Window <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow.Aurora>`_ in the *Amazon Aurora User Guide.* Valid Days: Mon, Tue, Wed, Thu, Fri, Sat, Sun. Constraints: Minimum 30-minute window. Valid for: Aurora DB clusters and Multi-AZ DB clusters
6777
- :param publicly_accessible: Specifies whether the DB cluster is publicly accessible. When the DB cluster is publicly accessible, its Domain Name System (DNS) endpoint resolves to the private IP address from within the DB cluster's virtual private cloud (VPC). It resolves to the public IP address from outside of the DB cluster's VPC. Access to the DB cluster is ultimately controlled by the security group it uses. That public access isn't permitted if the security group assigned to the DB cluster doesn't permit it. When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address. Valid for Cluster Type: Multi-AZ DB clusters only Default: The default behavior varies depending on whether ``DBSubnetGroupName`` is specified. If ``DBSubnetGroupName`` isn't specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the default VPC in the target Region doesn’t have an internet gateway attached to it, the DB cluster is private. - If the default VPC in the target Region has an internet gateway attached to it, the DB cluster is public. If ``DBSubnetGroupName`` is specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the subnets are part of a VPC that doesn’t have an internet gateway attached to it, the DB cluster is private. - If the subnets are part of a VPC that has an internet gateway attached to it, the DB cluster is public.
6779
+ :param publicly_accessible: Specifies whether the DB cluster is publicly accessible. When the DB cluster is publicly accessible and you connect from outside of the DB cluster's virtual private cloud (VPC), its Domain Name System (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB cluster, the endpoint resolves to the private IP address. Access to the DB cluster is ultimately controlled by the security group it uses. That public access isn't permitted if the security group assigned to the DB cluster doesn't permit it. When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address. Valid for Cluster Type: Multi-AZ DB clusters only Default: The default behavior varies depending on whether ``DBSubnetGroupName`` is specified. If ``DBSubnetGroupName`` isn't specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the default VPC in the target Region doesn’t have an internet gateway attached to it, the DB cluster is private. - If the default VPC in the target Region has an internet gateway attached to it, the DB cluster is public. If ``DBSubnetGroupName`` is specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the subnets are part of a VPC that doesn’t have an internet gateway attached to it, the DB cluster is private. - If the subnets are part of a VPC that has an internet gateway attached to it, the DB cluster is public.
6778
6780
  :param replication_source_identifier: The Amazon Resource Name (ARN) of the source DB instance or DB cluster if this DB cluster is created as a read replica. Valid for: Aurora DB clusters only
6779
6781
  :param restore_to_time: The date and time to restore the DB cluster to. Valid Values: Value must be a time in Universal Coordinated Time (UTC) format Constraints: - Must be before the latest restorable time for the DB instance - Must be specified if ``UseLatestRestorableTime`` parameter isn't provided - Can't be specified if the ``UseLatestRestorableTime`` parameter is enabled - Can't be specified if the ``RestoreType`` parameter is ``copy-on-write`` This property must be used with ``SourceDBClusterIdentifier`` property. The resulting cluster will have the identifier that matches the value of the ``DBclusterIdentifier`` property. Example: ``2015-03-07T23:45:00Z`` Valid for: Aurora DB clusters and Multi-AZ DB clusters
6780
6782
  :param restore_type: The type of restore to be performed. You can specify one of the following values:. - ``full-copy`` - The new DB cluster is restored as a full copy of the source DB cluster. - ``copy-on-write`` - The new DB cluster is restored as a clone of the source DB cluster. If you don't specify a ``RestoreType`` value, then the new DB cluster is restored as a full copy of the source DB cluster. Valid for: Aurora DB clusters and Multi-AZ DB clusters Default: - "full-copy"
@@ -7809,7 +7811,7 @@ class CfnDBClusterProps:
7809
7811
  ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
7810
7812
  '''Specifies whether the DB cluster is publicly accessible.
7811
7813
 
7812
- When the DB cluster is publicly accessible, its Domain Name System (DNS) endpoint resolves to the private IP address from within the DB cluster's virtual private cloud (VPC). It resolves to the public IP address from outside of the DB cluster's VPC. Access to the DB cluster is ultimately controlled by the security group it uses. That public access isn't permitted if the security group assigned to the DB cluster doesn't permit it.
7814
+ When the DB cluster is publicly accessible and you connect from outside of the DB cluster's virtual private cloud (VPC), its Domain Name System (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB cluster, the endpoint resolves to the private IP address. Access to the DB cluster is ultimately controlled by the security group it uses. That public access isn't permitted if the security group assigned to the DB cluster doesn't permit it.
7813
7815
 
7814
7816
  When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address.
7815
7817
 
@@ -8325,7 +8327,7 @@ class CfnDBInstance(
8325
8327
  :param allow_major_version_upgrade: A value that indicates whether major version upgrades are allowed. Changing this parameter doesn't result in an outage and the change is asynchronously applied as soon as possible. Constraints: Major version upgrades must be allowed when specifying a value for the ``EngineVersion`` parameter that is a different major version than the DB instance's current version.
8326
8328
  :param associated_roles: The AWS Identity and Access Management (IAM) roles associated with the DB instance. *Amazon Aurora* Not applicable. The associated roles are managed by the DB cluster.
8327
8329
  :param automatic_backup_replication_kms_key_id: The AWS KMS key identifier for encryption of the replicated automated backups. The KMS key ID is the Amazon Resource Name (ARN) for the KMS encryption key in the destination AWS Region , for example, ``arn:aws:kms:us-east-1:123456789012:key/AKIAIOSFODNN7EXAMPLE`` .
8328
- :param automatic_backup_replication_region: The destination region for the backup replication of the DB instance. For more info, see `Replicating automated backups to another AWS Region <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReplicateBackups.html>`_ in the *Amazon RDS User Guide* .
8330
+ :param automatic_backup_replication_region: The destination region for the backup replication of the DB instance. For more info, see `Replicating automated backups to another Region <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReplicateBackups.html>`_ in the *Amazon RDS User Guide*.
8329
8331
  :param auto_minor_version_upgrade: A value that indicates whether minor engine upgrades are applied automatically to the DB instance during the maintenance window. By default, minor engine upgrades are applied automatically.
8330
8332
  :param availability_zone: The Availability Zone (AZ) where the database will be created. For information on AWS Regions and Availability Zones, see `Regions and Availability Zones <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html>`_ . For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one. Default: A random, system-chosen Availability Zone in the endpoint's AWS Region . Constraints: - The ``AvailabilityZone`` parameter can't be specified if the DB instance is a Multi-AZ deployment. - The specified Availability Zone must be in the same AWS Region as the current endpoint. Example: ``us-east-1d``
8331
8333
  :param backup_retention_period: The number of days for which automated backups are retained. Setting this parameter to a positive number enables backups. Setting this parameter to 0 disables automated backups. *Amazon Aurora* Not applicable. The retention period for automated backups is managed by the DB cluster. Default: 1 Constraints: - Must be a value from 0 to 35 - Can't be set to 0 if the DB instance is a source to read replicas Default: - 1
@@ -8604,6 +8606,8 @@ class CfnDBInstance(
8604
8606
  def attr_master_user_secret_secret_arn(self) -> builtins.str:
8605
8607
  '''The Amazon Resource Name (ARN) of the secret.
8606
8608
 
8609
+ This parameter is a return value that you can retrieve using the ``Fn::GetAtt`` intrinsic function. For more information, see `Return values <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html#aws-resource-rds-dbinstance-return-values>`_ .
8610
+
8607
8611
  :cloudformationAttribute: MasterUserSecret.SecretArn
8608
8612
  '''
8609
8613
  return typing.cast(builtins.str, jsii.get(self, "attrMasterUserSecretSecretArn"))
@@ -9800,7 +9804,7 @@ class CfnDBInstance(
9800
9804
  ca_identifier: typing.Optional[builtins.str] = None,
9801
9805
  valid_till: typing.Optional[builtins.str] = None,
9802
9806
  ) -> None:
9803
- '''Returns the details of the DB instance’s server certificate.
9807
+ '''The details of the DB instance’s server certificate.
9804
9808
 
9805
9809
  For more information, see `Using SSL/TLS to encrypt a connection to a DB instance <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon RDS User Guide* and `Using SSL/TLS to encrypt a connection to a DB cluster <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon Aurora User Guide* .
9806
9810
 
@@ -10047,7 +10051,7 @@ class CfnDBInstance(
10047
10051
  For more information, see `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html>`_ in the *Amazon RDS User Guide* and `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html>`_ in the *Amazon Aurora User Guide.*
10048
10052
 
10049
10053
  :param kms_key_id: The AWS KMS key identifier that is used to encrypt the secret.
10050
- :param secret_arn: The Amazon Resource Name (ARN) of the secret.
10054
+ :param secret_arn: The Amazon Resource Name (ARN) of the secret. This parameter is a return value that you can retrieve using the ``Fn::GetAtt`` intrinsic function. For more information, see `Return values <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html#aws-resource-rds-dbinstance-return-values>`_ .
10051
10055
 
10052
10056
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbinstance-masterusersecret.html
10053
10057
  :exampleMetadata: fixture=_generated
@@ -10086,6 +10090,8 @@ class CfnDBInstance(
10086
10090
  def secret_arn(self) -> typing.Optional[builtins.str]:
10087
10091
  '''The Amazon Resource Name (ARN) of the secret.
10088
10092
 
10093
+ This parameter is a return value that you can retrieve using the ``Fn::GetAtt`` intrinsic function. For more information, see `Return values <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html#aws-resource-rds-dbinstance-return-values>`_ .
10094
+
10089
10095
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbinstance-masterusersecret.html#cfn-rds-dbinstance-masterusersecret-secretarn
10090
10096
  '''
10091
10097
  result = self._values.get("secret_arn")
@@ -10114,10 +10120,10 @@ class CfnDBInstance(
10114
10120
  name: typing.Optional[builtins.str] = None,
10115
10121
  value: typing.Optional[builtins.str] = None,
10116
10122
  ) -> None:
10117
- '''The ``ProcessorFeature`` property type specifies the processor features of a DB instance class status.
10123
+ '''The ``ProcessorFeature`` property type specifies the processor features of a DB instance class.
10118
10124
 
10119
10125
  :param name: The name of the processor feature. Valid names are ``coreCount`` and ``threadsPerCore`` .
10120
- :param value: The value of a processor feature name.
10126
+ :param value: The value of a processor feature.
10121
10127
 
10122
10128
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbinstance-processorfeature.html
10123
10129
  :exampleMetadata: fixture=_generated
@@ -10156,7 +10162,7 @@ class CfnDBInstance(
10156
10162
 
10157
10163
  @builtins.property
10158
10164
  def value(self) -> typing.Optional[builtins.str]:
10159
- '''The value of a processor feature name.
10165
+ '''The value of a processor feature.
10160
10166
 
10161
10167
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbinstance-processorfeature.html#cfn-rds-dbinstance-processorfeature-value
10162
10168
  '''
@@ -10348,7 +10354,7 @@ class CfnDBInstanceProps:
10348
10354
  :param allow_major_version_upgrade: A value that indicates whether major version upgrades are allowed. Changing this parameter doesn't result in an outage and the change is asynchronously applied as soon as possible. Constraints: Major version upgrades must be allowed when specifying a value for the ``EngineVersion`` parameter that is a different major version than the DB instance's current version.
10349
10355
  :param associated_roles: The AWS Identity and Access Management (IAM) roles associated with the DB instance. *Amazon Aurora* Not applicable. The associated roles are managed by the DB cluster.
10350
10356
  :param automatic_backup_replication_kms_key_id: The AWS KMS key identifier for encryption of the replicated automated backups. The KMS key ID is the Amazon Resource Name (ARN) for the KMS encryption key in the destination AWS Region , for example, ``arn:aws:kms:us-east-1:123456789012:key/AKIAIOSFODNN7EXAMPLE`` .
10351
- :param automatic_backup_replication_region: The destination region for the backup replication of the DB instance. For more info, see `Replicating automated backups to another AWS Region <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReplicateBackups.html>`_ in the *Amazon RDS User Guide* .
10357
+ :param automatic_backup_replication_region: The destination region for the backup replication of the DB instance. For more info, see `Replicating automated backups to another Region <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReplicateBackups.html>`_ in the *Amazon RDS User Guide*.
10352
10358
  :param auto_minor_version_upgrade: A value that indicates whether minor engine upgrades are applied automatically to the DB instance during the maintenance window. By default, minor engine upgrades are applied automatically.
10353
10359
  :param availability_zone: The Availability Zone (AZ) where the database will be created. For information on AWS Regions and Availability Zones, see `Regions and Availability Zones <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html>`_ . For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one. Default: A random, system-chosen Availability Zone in the endpoint's AWS Region . Constraints: - The ``AvailabilityZone`` parameter can't be specified if the DB instance is a Multi-AZ deployment. - The specified Availability Zone must be in the same AWS Region as the current endpoint. Example: ``us-east-1d``
10354
10360
  :param backup_retention_period: The number of days for which automated backups are retained. Setting this parameter to a positive number enables backups. Setting this parameter to 0 disables automated backups. *Amazon Aurora* Not applicable. The retention period for automated backups is managed by the DB cluster. Default: 1 Constraints: - Must be a value from 0 to 35 - Can't be set to 0 if the DB instance is a source to read replicas Default: - 1
@@ -10885,7 +10891,7 @@ class CfnDBInstanceProps:
10885
10891
  def automatic_backup_replication_region(self) -> typing.Optional[builtins.str]:
10886
10892
  '''The destination region for the backup replication of the DB instance.
10887
10893
 
10888
- For more info, see `Replicating automated backups to another AWS Region <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReplicateBackups.html>`_ in the *Amazon RDS User Guide* .
10894
+ For more info, see `Replicating automated backups to another Region <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReplicateBackups.html>`_ in the *Amazon RDS User Guide*.
10889
10895
 
10890
10896
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html#cfn-rds-dbinstance-automaticbackupreplicationregion
10891
10897
  '''
@@ -100,10 +100,10 @@ class CfnCRL(
100
100
  '''
101
101
  :param scope: Scope in which this resource is defined.
102
102
  :param id: Construct identifier for this resource (unique in its scope).
103
- :param crl_data:
104
- :param name:
105
- :param enabled:
106
- :param tags:
103
+ :param crl_data: The x509 v3 specified certificate revocation list (CRL).
104
+ :param name: The name of the certificate revocation list (CRL).
105
+ :param enabled: Specifies whether the certificate revocation list (CRL) is enabled.
106
+ :param tags: A list of tags to attach to the certificate revocation list (CRL).
107
107
  :param trust_anchor_arn: The ARN of the TrustAnchor the certificate revocation list (CRL) will provide revocation for.
108
108
  '''
109
109
  if __debug__:
@@ -153,7 +153,8 @@ class CfnCRL(
153
153
  @builtins.property
154
154
  @jsii.member(jsii_name="attrCrlId")
155
155
  def attr_crl_id(self) -> builtins.str:
156
- '''
156
+ '''The unique primary identifier of the Crl.
157
+
157
158
  :cloudformationAttribute: CrlId
158
159
  '''
159
160
  return typing.cast(builtins.str, jsii.get(self, "attrCrlId"))
@@ -172,6 +173,7 @@ class CfnCRL(
172
173
  @builtins.property
173
174
  @jsii.member(jsii_name="crlData")
174
175
  def crl_data(self) -> builtins.str:
176
+ '''The x509 v3 specified certificate revocation list (CRL).'''
175
177
  return typing.cast(builtins.str, jsii.get(self, "crlData"))
176
178
 
177
179
  @crl_data.setter
@@ -184,6 +186,7 @@ class CfnCRL(
184
186
  @builtins.property
185
187
  @jsii.member(jsii_name="name")
186
188
  def name(self) -> builtins.str:
189
+ '''The name of the certificate revocation list (CRL).'''
187
190
  return typing.cast(builtins.str, jsii.get(self, "name"))
188
191
 
189
192
  @name.setter
@@ -198,6 +201,7 @@ class CfnCRL(
198
201
  def enabled(
199
202
  self,
200
203
  ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
204
+ '''Specifies whether the certificate revocation list (CRL) is enabled.'''
201
205
  return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "enabled"))
202
206
 
203
207
  @enabled.setter
@@ -213,6 +217,7 @@ class CfnCRL(
213
217
  @builtins.property
214
218
  @jsii.member(jsii_name="tagsRaw")
215
219
  def tags_raw(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
220
+ '''A list of tags to attach to the certificate revocation list (CRL).'''
216
221
  return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tagsRaw"))
217
222
 
218
223
  @tags_raw.setter
@@ -259,10 +264,10 @@ class CfnCRLProps:
259
264
  ) -> None:
260
265
  '''Properties for defining a ``CfnCRL``.
261
266
 
262
- :param crl_data:
263
- :param name:
264
- :param enabled:
265
- :param tags:
267
+ :param crl_data: The x509 v3 specified certificate revocation list (CRL).
268
+ :param name: The name of the certificate revocation list (CRL).
269
+ :param enabled: Specifies whether the certificate revocation list (CRL) is enabled.
270
+ :param tags: A list of tags to attach to the certificate revocation list (CRL).
266
271
  :param trust_anchor_arn: The ARN of the TrustAnchor the certificate revocation list (CRL) will provide revocation for.
267
272
 
268
273
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-crl.html
@@ -307,7 +312,8 @@ class CfnCRLProps:
307
312
 
308
313
  @builtins.property
309
314
  def crl_data(self) -> builtins.str:
310
- '''
315
+ '''The x509 v3 specified certificate revocation list (CRL).
316
+
311
317
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-crl.html#cfn-rolesanywhere-crl-crldata
312
318
  '''
313
319
  result = self._values.get("crl_data")
@@ -316,7 +322,8 @@ class CfnCRLProps:
316
322
 
317
323
  @builtins.property
318
324
  def name(self) -> builtins.str:
319
- '''
325
+ '''The name of the certificate revocation list (CRL).
326
+
320
327
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-crl.html#cfn-rolesanywhere-crl-name
321
328
  '''
322
329
  result = self._values.get("name")
@@ -327,7 +334,8 @@ class CfnCRLProps:
327
334
  def enabled(
328
335
  self,
329
336
  ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
330
- '''
337
+ '''Specifies whether the certificate revocation list (CRL) is enabled.
338
+
331
339
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-crl.html#cfn-rolesanywhere-crl-enabled
332
340
  '''
333
341
  result = self._values.get("enabled")
@@ -335,7 +343,8 @@ class CfnCRLProps:
335
343
 
336
344
  @builtins.property
337
345
  def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
338
- '''
346
+ '''A list of tags to attach to the certificate revocation list (CRL).
347
+
339
348
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rolesanywhere-crl.html#cfn-rolesanywhere-crl-tags
340
349
  '''
341
350
  result = self._values.get("tags")
@@ -257,7 +257,7 @@ class CfnProfileAssociation(
257
257
  :param id: Construct identifier for this resource (unique in its scope).
258
258
  :param name: Name of the Profile association.
259
259
  :param profile_id: ID of the Profile.
260
- :param resource_id: The Amazon Resource Name (ARN) of the VPC.
260
+ :param resource_id: The ID of the VPC.
261
261
  :param arn: The Amazon Resource Name (ARN) of the profile association to a VPC.
262
262
  :param tags: An array of key-value pairs to apply to this resource.
263
263
  '''
@@ -354,7 +354,7 @@ class CfnProfileAssociation(
354
354
  @builtins.property
355
355
  @jsii.member(jsii_name="resourceId")
356
356
  def resource_id(self) -> builtins.str:
357
- '''The Amazon Resource Name (ARN) of the VPC.'''
357
+ '''The ID of the VPC.'''
358
358
  return typing.cast(builtins.str, jsii.get(self, "resourceId"))
359
359
 
360
360
  @resource_id.setter
@@ -416,7 +416,7 @@ class CfnProfileAssociationProps:
416
416
 
417
417
  :param name: Name of the Profile association.
418
418
  :param profile_id: ID of the Profile.
419
- :param resource_id: The Amazon Resource Name (ARN) of the VPC.
419
+ :param resource_id: The ID of the VPC.
420
420
  :param arn: The Amazon Resource Name (ARN) of the profile association to a VPC.
421
421
  :param tags: An array of key-value pairs to apply to this resource.
422
422
 
@@ -481,7 +481,7 @@ class CfnProfileAssociationProps:
481
481
 
482
482
  @builtins.property
483
483
  def resource_id(self) -> builtins.str:
484
- '''The Amazon Resource Name (ARN) of the VPC.
484
+ '''The ID of the VPC.
485
485
 
486
486
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53profiles-profileassociation.html#cfn-route53profiles-profileassociation-resourceid
487
487
  '''
@@ -17080,128 +17080,26 @@ class Location:
17080
17080
  :param object_key: The path inside the Bucket where the object is located at.
17081
17081
  :param object_version: The S3 object version.
17082
17082
 
17083
- :exampleMetadata: lit=aws-codepipeline-actions/test/integ.lambda-deployed-through-codepipeline.lit.ts infused
17083
+ :exampleMetadata: infused
17084
17084
 
17085
17085
  Example::
17086
17086
 
17087
- lambda_stack = cdk.Stack(app, "LambdaStack")
17088
- lambda_code = lambda_.Code.from_cfn_parameters()
17089
- lambda_.Function(lambda_stack, "Lambda",
17090
- code=lambda_code,
17091
- handler="index.handler",
17092
- runtime=lambda_.Runtime.NODEJS_LATEST
17093
- )
17094
- # other resources that your Lambda needs, added to the lambdaStack...
17095
-
17096
- pipeline_stack = cdk.Stack(app, "PipelineStack")
17097
- pipeline = codepipeline.Pipeline(pipeline_stack, "Pipeline",
17098
- cross_account_keys=True
17099
- )
17100
-
17101
- # add the source code repository containing this code to your Pipeline,
17102
- # and the source code of the Lambda Function, if they're separate
17103
- cdk_source_output = codepipeline.Artifact()
17104
- cdk_source_action = codepipeline_actions.CodeCommitSourceAction(
17105
- repository=codecommit.Repository(pipeline_stack, "CdkCodeRepo",
17106
- repository_name="CdkCodeRepo"
17107
- ),
17108
- action_name="CdkCode_Source",
17109
- output=cdk_source_output
17110
- )
17111
- lambda_source_output = codepipeline.Artifact()
17112
- lambda_source_action = codepipeline_actions.CodeCommitSourceAction(
17113
- repository=codecommit.Repository(pipeline_stack, "LambdaCodeRepo",
17114
- repository_name="LambdaCodeRepo"
17087
+ start_query_execution_job = tasks.AthenaStartQueryExecution(self, "Start Athena Query",
17088
+ query_string=sfn.JsonPath.string_at("$.queryString"),
17089
+ query_execution_context=tasks.QueryExecutionContext(
17090
+ database_name="mydatabase"
17115
17091
  ),
17116
- action_name="LambdaCode_Source",
17117
- output=lambda_source_output
17118
- )
17119
- pipeline.add_stage(
17120
- stage_name="Source",
17121
- actions=[cdk_source_action, lambda_source_action]
17122
- )
17123
-
17124
- # synthesize the Lambda CDK template, using CodeBuild
17125
- # the below values are just examples, assuming your CDK code is in TypeScript/JavaScript -
17126
- # adjust the build environment and/or commands accordingly
17127
- cdk_build_project = codebuild.Project(pipeline_stack, "CdkBuildProject",
17128
- environment=codebuild.BuildEnvironment(
17129
- build_image=codebuild.LinuxBuildImage.STANDARD_7_0
17130
- ),
17131
- build_spec=codebuild.BuildSpec.from_object({
17132
- "version": "0.2",
17133
- "phases": {
17134
- "install": {
17135
- "commands": "npm install"
17136
- },
17137
- "build": {
17138
- "commands": ["npm run build", "npm run cdk synth LambdaStack -- -o ."
17139
- ]
17140
- }
17141
- },
17142
- "artifacts": {
17143
- "files": "LambdaStack.template.yaml"
17144
- }
17145
- })
17146
- )
17147
- cdk_build_output = codepipeline.Artifact()
17148
- cdk_build_action = codepipeline_actions.CodeBuildAction(
17149
- action_name="CDK_Build",
17150
- project=cdk_build_project,
17151
- input=cdk_source_output,
17152
- outputs=[cdk_build_output]
17153
- )
17154
-
17155
- # build your Lambda code, using CodeBuild
17156
- # again, this example assumes your Lambda is written in TypeScript/JavaScript -
17157
- # make sure to adjust the build environment and/or commands if they don't match your specific situation
17158
- lambda_build_project = codebuild.Project(pipeline_stack, "LambdaBuildProject",
17159
- environment=codebuild.BuildEnvironment(
17160
- build_image=codebuild.LinuxBuildImage.STANDARD_7_0
17161
- ),
17162
- build_spec=codebuild.BuildSpec.from_object({
17163
- "version": "0.2",
17164
- "phases": {
17165
- "install": {
17166
- "commands": "npm install"
17167
- },
17168
- "build": {
17169
- "commands": "npm run build"
17170
- }
17171
- },
17172
- "artifacts": {
17173
- "files": ["index.js", "node_modules/**/*"
17174
- ]
17175
- }
17176
- })
17177
- )
17178
- lambda_build_output = codepipeline.Artifact()
17179
- lambda_build_action = codepipeline_actions.CodeBuildAction(
17180
- action_name="Lambda_Build",
17181
- project=lambda_build_project,
17182
- input=lambda_source_output,
17183
- outputs=[lambda_build_output]
17184
- )
17185
-
17186
- pipeline.add_stage(
17187
- stage_name="Build",
17188
- actions=[cdk_build_action, lambda_build_action]
17189
- )
17190
-
17191
- # finally, deploy your Lambda Stack
17192
- pipeline.add_stage(
17193
- stage_name="Deploy",
17194
- actions=[
17195
- codepipeline_actions.CloudFormationCreateUpdateStackAction(
17196
- action_name="Lambda_CFN_Deploy",
17197
- template_path=cdk_build_output.at_path("LambdaStack.template.yaml"),
17198
- stack_name="LambdaStackDeployedName",
17199
- admin_permissions=True,
17200
- parameter_overrides=lambda_code.assign(lambda_build_output.s3_location),
17201
- extra_inputs=[lambda_build_output
17202
- ]
17092
+ result_configuration=tasks.ResultConfiguration(
17093
+ encryption_configuration=tasks.EncryptionConfiguration(
17094
+ encryption_option=tasks.EncryptionOption.S3_MANAGED
17095
+ ),
17096
+ output_location=s3.Location(
17097
+ bucket_name="query-results-bucket",
17098
+ object_key="folder"
17203
17099
  )
17204
- ]
17100
+ ),
17101
+ execution_parameters=["param1", "param2"],
17102
+ result_reuse_configuration_max_age=Duration.minutes(100)
17205
17103
  )
17206
17104
  '''
17207
17105
  if __debug__:
@@ -3725,9 +3725,9 @@ class CfnDataQualityJobDefinition(
3725
3725
  )
3726
3726
  class StoppingConditionProperty:
3727
3727
  def __init__(self, *, max_runtime_in_seconds: jsii.Number) -> None:
3728
- '''Specifies a limit to how long a model training job or model compilation job can run.
3728
+ '''Specifies a limit to how long a job can run.
3729
3729
 
3730
- It also specifies how long a managed spot training job has to complete. When the job reaches the time limit, SageMaker ends the training or compilation job. Use this API to cap model training costs.
3730
+ When the job reaches the time limit, SageMaker ends the job. Use this API to cap costs.
3731
3731
 
3732
3732
  To stop a training job, SageMaker sends the algorithm the ``SIGTERM`` signal, which delays job termination for 120 seconds. Algorithms can use this 120-second window to save the model artifacts, so the results of training are not lost.
3733
3733
 
@@ -20279,9 +20279,9 @@ class CfnModelBiasJobDefinition(
20279
20279
  )
20280
20280
  class StoppingConditionProperty:
20281
20281
  def __init__(self, *, max_runtime_in_seconds: jsii.Number) -> None:
20282
- '''Specifies a limit to how long a model training job or model compilation job can run.
20282
+ '''Specifies a limit to how long a job can run.
20283
20283
 
20284
- It also specifies how long a managed spot training job has to complete. When the job reaches the time limit, SageMaker ends the training or compilation job. Use this API to cap model training costs.
20284
+ When the job reaches the time limit, SageMaker ends the job. Use this API to cap costs.
20285
20285
 
20286
20286
  To stop a training job, SageMaker sends the algorithm the ``SIGTERM`` signal, which delays job termination for 120 seconds. Algorithms can use this 120-second window to save the model artifacts, so the results of training are not lost.
20287
20287
 
@@ -26021,9 +26021,9 @@ class CfnModelExplainabilityJobDefinition(
26021
26021
  )
26022
26022
  class StoppingConditionProperty:
26023
26023
  def __init__(self, *, max_runtime_in_seconds: jsii.Number) -> None:
26024
- '''Specifies a limit to how long a model training job or model compilation job can run.
26024
+ '''Specifies a limit to how long a job can run.
26025
26025
 
26026
- It also specifies how long a managed spot training job has to complete. When the job reaches the time limit, SageMaker ends the training or compilation job. Use this API to cap model training costs.
26026
+ When the job reaches the time limit, SageMaker ends the job. Use this API to cap costs.
26027
26027
 
26028
26028
  To stop a training job, SageMaker sends the algorithm the ``SIGTERM`` signal, which delays job termination for 120 seconds. Algorithms can use this 120-second window to save the model artifacts, so the results of training are not lost.
26029
26029
 
@@ -33926,9 +33926,9 @@ class CfnModelQualityJobDefinition(
33926
33926
  )
33927
33927
  class StoppingConditionProperty:
33928
33928
  def __init__(self, *, max_runtime_in_seconds: jsii.Number) -> None:
33929
- '''Specifies a limit to how long a model training job or model compilation job can run.
33929
+ '''Specifies a limit to how long a job can run.
33930
33930
 
33931
- It also specifies how long a managed spot training job has to complete. When the job reaches the time limit, SageMaker ends the training or compilation job. Use this API to cap model training costs.
33931
+ When the job reaches the time limit, SageMaker ends the job. Use this API to cap costs.
33932
33932
 
33933
33933
  To stop a training job, SageMaker sends the algorithm the ``SIGTERM`` signal, which delays job termination for 120 seconds. Algorithms can use this 120-second window to save the model artifacts, so the results of training are not lost.
33934
33934
 
@@ -36982,9 +36982,9 @@ class CfnMonitoringSchedule(
36982
36982
  )
36983
36983
  class StoppingConditionProperty:
36984
36984
  def __init__(self, *, max_runtime_in_seconds: jsii.Number) -> None:
36985
- '''Specifies a limit to how long a model training job or model compilation job can run.
36985
+ '''Specifies a limit to how long a job can run.
36986
36986
 
36987
- It also specifies how long a managed spot training job has to complete. When the job reaches the time limit, SageMaker ends the training or compilation job. Use this API to cap model training costs.
36987
+ When the job reaches the time limit, SageMaker ends the job. Use this API to cap costs.
36988
36988
 
36989
36989
  To stop a training job, SageMaker sends the algorithm the ``SIGTERM`` signal, which delays job termination for 120 seconds. Algorithms can use this 120-second window to save the model artifacts, so the results of training are not lost.
36990
36990