aws-cdk-lib 2.149.0__py3-none-any.whl → 2.150.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (34) hide show
  1. aws_cdk/__init__.py +4 -8
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.149.0.jsii.tgz → aws-cdk-lib@2.150.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_bedrock/__init__.py +30 -26
  5. aws_cdk/aws_cloudformation/__init__.py +4 -8
  6. aws_cdk/aws_cloudtrail/__init__.py +30 -558
  7. aws_cdk/aws_cloudwatch/__init__.py +1 -1
  8. aws_cdk/aws_codepipeline/__init__.py +11 -5
  9. aws_cdk/aws_cognito/__init__.py +1 -2
  10. aws_cdk/aws_ec2/__init__.py +82 -4
  11. aws_cdk/aws_ecs/__init__.py +10 -8
  12. aws_cdk/aws_eks/__init__.py +26 -20
  13. aws_cdk/aws_elasticloadbalancingv2/__init__.py +2 -2
  14. aws_cdk/aws_emr/__init__.py +18 -20
  15. aws_cdk/aws_fsx/__init__.py +25 -23
  16. aws_cdk/aws_glue/__init__.py +3 -3
  17. aws_cdk/aws_guardduty/__init__.py +6 -4
  18. aws_cdk/aws_iam/__init__.py +8 -5
  19. aws_cdk/aws_lambda/__init__.py +19 -2
  20. aws_cdk/aws_logs/__init__.py +9 -0
  21. aws_cdk/aws_qbusiness/__init__.py +21 -7
  22. aws_cdk/aws_rds/__init__.py +15 -9
  23. aws_cdk/aws_sagemaker/__init__.py +10 -10
  24. aws_cdk/aws_stepfunctions_tasks/__init__.py +6 -8
  25. aws_cdk/aws_synthetics/__init__.py +15 -1
  26. aws_cdk/custom_resources/__init__.py +91 -23
  27. aws_cdk/pipelines/__init__.py +1 -1
  28. aws_cdk/region_info/__init__.py +32 -12
  29. {aws_cdk_lib-2.149.0.dist-info → aws_cdk_lib-2.150.0.dist-info}/METADATA +1 -1
  30. {aws_cdk_lib-2.149.0.dist-info → aws_cdk_lib-2.150.0.dist-info}/RECORD +34 -34
  31. {aws_cdk_lib-2.149.0.dist-info → aws_cdk_lib-2.150.0.dist-info}/LICENSE +0 -0
  32. {aws_cdk_lib-2.149.0.dist-info → aws_cdk_lib-2.150.0.dist-info}/NOTICE +0 -0
  33. {aws_cdk_lib-2.149.0.dist-info → aws_cdk_lib-2.150.0.dist-info}/WHEEL +0 -0
  34. {aws_cdk_lib-2.149.0.dist-info → aws_cdk_lib-2.150.0.dist-info}/top_level.txt +0 -0
@@ -612,7 +612,7 @@ class CfnCluster(
612
612
  :param additional_info: A JSON string for selecting additional features.
613
613
  :param applications: The applications to install on this cluster, for example, Spark, Flink, Oozie, Zeppelin, and so on.
614
614
  :param auto_scaling_role: An IAM role for automatic scaling policies. The default role is ``EMR_AutoScaling_DefaultRole`` . The IAM role provides permissions that the automatic scaling feature requires to launch and terminate Amazon EC2 instances in an instance group.
615
- :param auto_termination_policy: An auto-termination policy defines the amount of idle time in seconds after which a cluster automatically terminates. For alternative cluster termination options, see `Control cluster termination <https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-termination.html>`_
615
+ :param auto_termination_policy: An auto-termination policy for an Amazon EMR cluster. An auto-termination policy defines the amount of idle time in seconds after which a cluster automatically terminates. For alternative cluster termination options, see `Control cluster termination <https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-termination.html>`_ .
616
616
  :param bootstrap_actions: A list of bootstrap actions to run before Hadoop starts on the cluster nodes.
617
617
  :param configurations: Applies only to Amazon EMR releases 4.x and later. The list of configurations that are supplied to the Amazon EMR cluster.
618
618
  :param custom_ami_id: Available only in Amazon EMR releases 5.7.0 and later. The ID of a custom Amazon EBS-backed Linux AMI if the cluster uses a custom AMI.
@@ -834,7 +834,7 @@ class CfnCluster(
834
834
  def auto_termination_policy(
835
835
  self,
836
836
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCluster.AutoTerminationPolicyProperty"]]:
837
- '''An auto-termination policy defines the amount of idle time in seconds after which a cluster automatically terminates.'''
837
+ '''An auto-termination policy for an Amazon EMR cluster.'''
838
838
  return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCluster.AutoTerminationPolicyProperty"]], jsii.get(self, "autoTerminationPolicy"))
839
839
 
840
840
  @auto_termination_policy.setter
@@ -5277,7 +5277,7 @@ class CfnClusterProps:
5277
5277
  :param additional_info: A JSON string for selecting additional features.
5278
5278
  :param applications: The applications to install on this cluster, for example, Spark, Flink, Oozie, Zeppelin, and so on.
5279
5279
  :param auto_scaling_role: An IAM role for automatic scaling policies. The default role is ``EMR_AutoScaling_DefaultRole`` . The IAM role provides permissions that the automatic scaling feature requires to launch and terminate Amazon EC2 instances in an instance group.
5280
- :param auto_termination_policy: An auto-termination policy defines the amount of idle time in seconds after which a cluster automatically terminates. For alternative cluster termination options, see `Control cluster termination <https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-termination.html>`_
5280
+ :param auto_termination_policy: An auto-termination policy for an Amazon EMR cluster. An auto-termination policy defines the amount of idle time in seconds after which a cluster automatically terminates. For alternative cluster termination options, see `Control cluster termination <https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-termination.html>`_ .
5281
5281
  :param bootstrap_actions: A list of bootstrap actions to run before Hadoop starts on the cluster nodes.
5282
5282
  :param configurations: Applies only to Amazon EMR releases 4.x and later. The list of configurations that are supplied to the Amazon EMR cluster.
5283
5283
  :param custom_ami_id: Available only in Amazon EMR releases 5.7.0 and later. The ID of a custom Amazon EBS-backed Linux AMI if the cluster uses a custom AMI.
@@ -5961,9 +5961,9 @@ class CfnClusterProps:
5961
5961
  def auto_termination_policy(
5962
5962
  self,
5963
5963
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnCluster.AutoTerminationPolicyProperty]]:
5964
- '''An auto-termination policy defines the amount of idle time in seconds after which a cluster automatically terminates.
5964
+ '''An auto-termination policy for an Amazon EMR cluster.
5965
5965
 
5966
- For alternative cluster termination options, see `Control cluster termination <https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-termination.html>`_
5966
+ An auto-termination policy defines the amount of idle time in seconds after which a cluster automatically terminates. For alternative cluster termination options, see `Control cluster termination <https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-termination.html>`_ .
5967
5967
 
5968
5968
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-cluster.html#cfn-emr-cluster-autoterminationpolicy
5969
5969
  '''
@@ -9571,7 +9571,7 @@ class CfnSecurityConfiguration(
9571
9571
  '''
9572
9572
  :param scope: Scope in which this resource is defined.
9573
9573
  :param id: Construct identifier for this resource (unique in its scope).
9574
- :param security_configuration: The security configuration details in JSON format.
9574
+ :param security_configuration: The security configuration details in JSON format. For JSON parameters and examples, see `Use Security Configurations to Set Up Cluster Security <https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-security-configurations.html>`_ in the *Amazon EMR Management Guide* .
9575
9575
  :param name: The name of the security configuration.
9576
9576
  '''
9577
9577
  if __debug__:
@@ -9660,7 +9660,7 @@ class CfnSecurityConfigurationProps:
9660
9660
  ) -> None:
9661
9661
  '''Properties for defining a ``CfnSecurityConfiguration``.
9662
9662
 
9663
- :param security_configuration: The security configuration details in JSON format.
9663
+ :param security_configuration: The security configuration details in JSON format. For JSON parameters and examples, see `Use Security Configurations to Set Up Cluster Security <https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-security-configurations.html>`_ in the *Amazon EMR Management Guide* .
9664
9664
  :param name: The name of the security configuration.
9665
9665
 
9666
9666
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-securityconfiguration.html
@@ -9743,6 +9743,8 @@ class CfnSecurityConfigurationProps:
9743
9743
  def security_configuration(self) -> typing.Any:
9744
9744
  '''The security configuration details in JSON format.
9745
9745
 
9746
+ For JSON parameters and examples, see `Use Security Configurations to Set Up Cluster Security <https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-security-configurations.html>`_ in the *Amazon EMR Management Guide* .
9747
+
9746
9748
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-securityconfiguration.html#cfn-emr-securityconfiguration-securityconfiguration
9747
9749
  '''
9748
9750
  result = self._values.get("security_configuration")
@@ -11277,9 +11279,7 @@ class CfnWALWorkspace(
11277
11279
  metaclass=jsii.JSIIMeta,
11278
11280
  jsii_type="aws-cdk-lib.aws_emr.CfnWALWorkspace",
11279
11281
  ):
11280
- '''A WAL workspace is a logical container of write-ahead logs (WALs).
11281
-
11282
- All WALs in Amazon EMR WAL are encapsulated by a WAL workspace.
11282
+ '''http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-walworkspace.html.
11283
11283
 
11284
11284
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-walworkspace.html
11285
11285
  :cloudformationResource: AWS::EMR::WALWorkspace
@@ -11311,8 +11311,8 @@ class CfnWALWorkspace(
11311
11311
  '''
11312
11312
  :param scope: Scope in which this resource is defined.
11313
11313
  :param id: Construct identifier for this resource (unique in its scope).
11314
- :param tags: You can add tags when you create a new workspace. You can add, remove, or list tags from an active workspace, but you can't update tags. Instead, remove the tag and add a new one. For more information, see see `Tag your Amazon EMR WAL workspaces <https://docs.aws.amazon.com/emr/latest/ReleaseGuide/emr-hbase-wal.html#emr-hbase-wal-tagging>`_ .
11315
- :param wal_workspace_name: The name of the WAL workspace.
11314
+ :param tags: An array of key-value pairs to apply to this resource.
11315
+ :param wal_workspace_name: The name of the emrwal container.
11316
11316
  '''
11317
11317
  if __debug__:
11318
11318
  type_hints = typing.get_type_hints(_typecheckingstub__1985a11480d9771f4adca96d86b169aa02281678db75bca99cae188da64db2af)
@@ -11366,7 +11366,7 @@ class CfnWALWorkspace(
11366
11366
  @builtins.property
11367
11367
  @jsii.member(jsii_name="tags")
11368
11368
  def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
11369
- '''You can add tags when you create a new workspace.'''
11369
+ '''An array of key-value pairs to apply to this resource.'''
11370
11370
  return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
11371
11371
 
11372
11372
  @tags.setter
@@ -11379,7 +11379,7 @@ class CfnWALWorkspace(
11379
11379
  @builtins.property
11380
11380
  @jsii.member(jsii_name="walWorkspaceName")
11381
11381
  def wal_workspace_name(self) -> typing.Optional[builtins.str]:
11382
- '''The name of the WAL workspace.'''
11382
+ '''The name of the emrwal container.'''
11383
11383
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "walWorkspaceName"))
11384
11384
 
11385
11385
  @wal_workspace_name.setter
@@ -11404,8 +11404,8 @@ class CfnWALWorkspaceProps:
11404
11404
  ) -> None:
11405
11405
  '''Properties for defining a ``CfnWALWorkspace``.
11406
11406
 
11407
- :param tags: You can add tags when you create a new workspace. You can add, remove, or list tags from an active workspace, but you can't update tags. Instead, remove the tag and add a new one. For more information, see see `Tag your Amazon EMR WAL workspaces <https://docs.aws.amazon.com/emr/latest/ReleaseGuide/emr-hbase-wal.html#emr-hbase-wal-tagging>`_ .
11408
- :param wal_workspace_name: The name of the WAL workspace.
11407
+ :param tags: An array of key-value pairs to apply to this resource.
11408
+ :param wal_workspace_name: The name of the emrwal container.
11409
11409
 
11410
11410
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-walworkspace.html
11411
11411
  :exampleMetadata: fixture=_generated
@@ -11436,9 +11436,7 @@ class CfnWALWorkspaceProps:
11436
11436
 
11437
11437
  @builtins.property
11438
11438
  def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
11439
- '''You can add tags when you create a new workspace.
11440
-
11441
- You can add, remove, or list tags from an active workspace, but you can't update tags. Instead, remove the tag and add a new one. For more information, see see `Tag your Amazon EMR WAL workspaces <https://docs.aws.amazon.com/emr/latest/ReleaseGuide/emr-hbase-wal.html#emr-hbase-wal-tagging>`_ .
11439
+ '''An array of key-value pairs to apply to this resource.
11442
11440
 
11443
11441
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-walworkspace.html#cfn-emr-walworkspace-tags
11444
11442
  '''
@@ -11447,7 +11445,7 @@ class CfnWALWorkspaceProps:
11447
11445
 
11448
11446
  @builtins.property
11449
11447
  def wal_workspace_name(self) -> typing.Optional[builtins.str]:
11450
- '''The name of the WAL workspace.
11448
+ '''The name of the emrwal container.
11451
11449
 
11452
11450
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-walworkspace.html#cfn-emr-walworkspace-walworkspacename
11453
11451
  '''
@@ -2161,17 +2161,17 @@ class CfnFileSystem(
2161
2161
  ) -> None:
2162
2162
  '''The configuration for this Amazon FSx for NetApp ONTAP file system.
2163
2163
 
2164
- :param deployment_type: Specifies the FSx for ONTAP file system deployment type to use in creating the file system. - ``MULTI_AZ_1`` - (Default) A high availability file system configured for Multi-AZ redundancy to tolerate temporary Availability Zone (AZ) unavailability. - ``SINGLE_AZ_1`` - A file system configured for Single-AZ redundancy. - ``SINGLE_AZ_2`` - A file system configured with multiple high-availability (HA) pairs for Single-AZ redundancy. For information about the use cases for Multi-AZ and Single-AZ deployments, refer to `Choosing a file system deployment type <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/high-availability-AZ.html>`_ .
2164
+ :param deployment_type: Specifies the FSx for ONTAP file system deployment type to use in creating the file system. - ``MULTI_AZ_1`` - A high availability file system configured for Multi-AZ redundancy to tolerate temporary Availability Zone (AZ) unavailability. This is a first-generation FSx for ONTAP file system. - ``MULTI_AZ_2`` - A high availability file system configured for Multi-AZ redundancy to tolerate temporary AZ unavailability. This is a second-generation FSx for ONTAP file system. - ``SINGLE_AZ_1`` - A file system configured for Single-AZ redundancy. This is a first-generation FSx for ONTAP file system. - ``SINGLE_AZ_2`` - A file system configured with multiple high-availability (HA) pairs for Single-AZ redundancy. This is a second-generation FSx for ONTAP file system. For information about the use cases for Multi-AZ and Single-AZ deployments, refer to `Choosing a file system deployment type <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/high-availability-AZ.html>`_ .
2165
2165
  :param automatic_backup_retention_days: The number of days to retain automatic backups. Setting this property to ``0`` disables automatic backups. You can retain automatic backups for a maximum of 90 days. The default is ``30`` .
2166
2166
  :param daily_automatic_backup_start_time: A recurring daily time, in the format ``HH:MM`` . ``HH`` is the zero-padded hour of the day (0-23), and ``MM`` is the zero-padded minute of the hour. For example, ``05:00`` specifies 5 AM daily.
2167
2167
  :param disk_iops_configuration: The SSD IOPS configuration for the FSx for ONTAP file system.
2168
2168
  :param endpoint_ip_address_range: (Multi-AZ only) Specifies the IP address range in which the endpoints to access your file system will be created. By default in the Amazon FSx API, Amazon FSx selects an unused IP address range for you from the 198.19.* range. By default in the Amazon FSx console, Amazon FSx chooses the last 64 IP addresses from the VPC’s primary CIDR range to use as the endpoint IP address range for the file system. You can have overlapping endpoint IP addresses for file systems deployed in the same VPC/route tables, as long as they don't overlap with any subnet.
2169
2169
  :param fsx_admin_password: The ONTAP administrative password for the ``fsxadmin`` user with which you administer your file system using the NetApp ONTAP CLI and REST API.
2170
- :param ha_pairs: Specifies how many high-availability (HA) pairs of file servers will power your file system. Scale-up file systems are powered by 1 HA pair. The default value is 1. FSx for ONTAP scale-out file systems are powered by up to 12 HA pairs. The value of this property affects the values of ``StorageCapacity`` , ``Iops`` , and ``ThroughputCapacity`` . For more information, see `High-availability (HA) pairs <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/administering-file-systems.html#HA-pairs>`_ in the FSx for ONTAP user guide. Amazon FSx responds with an HTTP status code 400 (Bad Request) for the following conditions: - The value of ``HAPairs`` is less than 1 or greater than 12. - The value of ``HAPairs`` is greater than 1 and the value of ``DeploymentType`` is ``SINGLE_AZ_1`` or ``MULTI_AZ_1`` .
2171
- :param preferred_subnet_id: Required when ``DeploymentType`` is set to ``MULTI_AZ_1`` . This specifies the subnet in which you want the preferred file server to be located.
2170
+ :param ha_pairs: Specifies how many high-availability (HA) pairs of file servers will power your file system. First-generation file systems are powered by 1 HA pair. Second-generation multi-AZ file systems are powered by 1 HA pair. Second generation single-AZ file systems are powered by up to 12 HA pairs. The default value is 1. The value of this property affects the values of ``StorageCapacity`` , ``Iops`` , and ``ThroughputCapacity`` . For more information, see `High-availability (HA) pairs <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/administering-file-systems.html#HA-pairs>`_ in the FSx for ONTAP user guide. Block storage protocol support (iSCSI and NVMe over TCP) is disabled on file systems with more than 6 HA pairs. For more information, see `Using block storage protocols <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/supported-fsx-clients.html#using-block-storage>`_ . Amazon FSx responds with an HTTP status code 400 (Bad Request) for the following conditions: - The value of ``HAPairs`` is less than 1 or greater than 12. - The value of ``HAPairs`` is greater than 1 and the value of ``DeploymentType`` is ``SINGLE_AZ_1`` , ``MULTI_AZ_1`` , or ``MULTI_AZ_2`` .
2171
+ :param preferred_subnet_id: Required when ``DeploymentType`` is set to ``MULTI_AZ_1`` or ``MULTI_AZ_2`` . This specifies the subnet in which you want the preferred file server to be located.
2172
2172
  :param route_table_ids: (Multi-AZ only) Specifies the route tables in which Amazon FSx creates the rules for routing traffic to the correct file server. You should specify all virtual private cloud (VPC) route tables associated with the subnets in which your clients are located. By default, Amazon FSx selects your VPC's default route table. .. epigraph:: Amazon FSx manages these route tables for Multi-AZ file systems using tag-based authentication. These route tables are tagged with ``Key: AmazonFSx; Value: ManagedByAmazonFSx`` . When creating FSx for ONTAP Multi-AZ file systems using AWS CloudFormation we recommend that you add the ``Key: AmazonFSx; Value: ManagedByAmazonFSx`` tag manually.
2173
2173
  :param throughput_capacity: Sets the throughput capacity for the file system that you're creating in megabytes per second (MBps). For more information, see `Managing throughput capacity <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/managing-throughput-capacity.html>`_ in the FSx for ONTAP User Guide. Amazon FSx responds with an HTTP status code 400 (Bad Request) for the following conditions: - The value of ``ThroughputCapacity`` and ``ThroughputCapacityPerHAPair`` are not the same value. - The value of ``ThroughputCapacity`` when divided by the value of ``HAPairs`` is outside of the valid range for ``ThroughputCapacity`` .
2174
- :param throughput_capacity_per_ha_pair: Use to choose the throughput capacity per HA pair, rather than the total throughput for the file system. You can define either the ``ThroughputCapacityPerHAPair`` or the ``ThroughputCapacity`` when creating a file system, but not both. This field and ``ThroughputCapacity`` are the same for scale-up file systems powered by one HA pair. - For ``SINGLE_AZ_1`` and ``MULTI_AZ_1`` file systems, valid values are 128, 256, 512, 1024, 2048, or 4096 MBps. - For ``SINGLE_AZ_2`` file systems, valid values are 3072 or 6144 MBps. Amazon FSx responds with an HTTP status code 400 (Bad Request) for the following conditions: - The value of ``ThroughputCapacity`` and ``ThroughputCapacityPerHAPair`` are not the same value for file systems with one HA pair. - The value of deployment type is ``SINGLE_AZ_2`` and ``ThroughputCapacity`` / ``ThroughputCapacityPerHAPair`` is a valid HA pair (a value between 2 and 12). - The value of ``ThroughputCapacityPerHAPair`` is not a valid value.
2174
+ :param throughput_capacity_per_ha_pair: Use to choose the throughput capacity per HA pair, rather than the total throughput for the file system. You can define either the ``ThroughputCapacityPerHAPair`` or the ``ThroughputCapacity`` when creating a file system, but not both. This field and ``ThroughputCapacity`` are the same for file systems powered by one HA pair. - For ``SINGLE_AZ_1`` and ``MULTI_AZ_1`` file systems, valid values are 128, 256, 512, 1024, 2048, or 4096 MBps. - For ``SINGLE_AZ_2`` , valid values are 1536, 3072, or 6144 MBps. - For ``MULTI_AZ_2`` , valid values are 384, 768, 1536, 3072, or 6144 MBps. Amazon FSx responds with an HTTP status code 400 (Bad Request) for the following conditions: - The value of ``ThroughputCapacity`` and ``ThroughputCapacityPerHAPair`` are not the same value for file systems with one HA pair. - The value of deployment type is ``SINGLE_AZ_2`` and ``ThroughputCapacity`` / ``ThroughputCapacityPerHAPair`` is not a valid HA pair (a value between 1 and 12). - The value of ``ThroughputCapacityPerHAPair`` is not a valid value.
2175
2175
  :param weekly_maintenance_start_time: A recurring weekly time, in the format ``D:HH:MM`` . ``D`` is the day of the week, for which 1 represents Monday and 7 represents Sunday. For further details, see `the ISO-8601 spec as described on Wikipedia <https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/ISO_week_date>`_ . ``HH`` is the zero-padded hour of the day (0-23), and ``MM`` is the zero-padded minute of the hour. For example, ``1:05:00`` specifies maintenance at 5 AM Monday.
2176
2176
 
2177
2177
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-ontapconfiguration.html
@@ -2247,9 +2247,10 @@ class CfnFileSystem(
2247
2247
  def deployment_type(self) -> builtins.str:
2248
2248
  '''Specifies the FSx for ONTAP file system deployment type to use in creating the file system.
2249
2249
 
2250
- - ``MULTI_AZ_1`` - (Default) A high availability file system configured for Multi-AZ redundancy to tolerate temporary Availability Zone (AZ) unavailability.
2251
- - ``SINGLE_AZ_1`` - A file system configured for Single-AZ redundancy.
2252
- - ``SINGLE_AZ_2`` - A file system configured with multiple high-availability (HA) pairs for Single-AZ redundancy.
2250
+ - ``MULTI_AZ_1`` - A high availability file system configured for Multi-AZ redundancy to tolerate temporary Availability Zone (AZ) unavailability. This is a first-generation FSx for ONTAP file system.
2251
+ - ``MULTI_AZ_2`` - A high availability file system configured for Multi-AZ redundancy to tolerate temporary AZ unavailability. This is a second-generation FSx for ONTAP file system.
2252
+ - ``SINGLE_AZ_1`` - A file system configured for Single-AZ redundancy. This is a first-generation FSx for ONTAP file system.
2253
+ - ``SINGLE_AZ_2`` - A file system configured with multiple high-availability (HA) pairs for Single-AZ redundancy. This is a second-generation FSx for ONTAP file system.
2253
2254
 
2254
2255
  For information about the use cases for Multi-AZ and Single-AZ deployments, refer to `Choosing a file system deployment type <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/high-availability-AZ.html>`_ .
2255
2256
 
@@ -2316,12 +2317,12 @@ class CfnFileSystem(
2316
2317
  def ha_pairs(self) -> typing.Optional[jsii.Number]:
2317
2318
  '''Specifies how many high-availability (HA) pairs of file servers will power your file system.
2318
2319
 
2319
- Scale-up file systems are powered by 1 HA pair. The default value is 1. FSx for ONTAP scale-out file systems are powered by up to 12 HA pairs. The value of this property affects the values of ``StorageCapacity`` , ``Iops`` , and ``ThroughputCapacity`` . For more information, see `High-availability (HA) pairs <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/administering-file-systems.html#HA-pairs>`_ in the FSx for ONTAP user guide.
2320
+ First-generation file systems are powered by 1 HA pair. Second-generation multi-AZ file systems are powered by 1 HA pair. Second generation single-AZ file systems are powered by up to 12 HA pairs. The default value is 1. The value of this property affects the values of ``StorageCapacity`` , ``Iops`` , and ``ThroughputCapacity`` . For more information, see `High-availability (HA) pairs <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/administering-file-systems.html#HA-pairs>`_ in the FSx for ONTAP user guide. Block storage protocol support (iSCSI and NVMe over TCP) is disabled on file systems with more than 6 HA pairs. For more information, see `Using block storage protocols <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/supported-fsx-clients.html#using-block-storage>`_ .
2320
2321
 
2321
2322
  Amazon FSx responds with an HTTP status code 400 (Bad Request) for the following conditions:
2322
2323
 
2323
2324
  - The value of ``HAPairs`` is less than 1 or greater than 12.
2324
- - The value of ``HAPairs`` is greater than 1 and the value of ``DeploymentType`` is ``SINGLE_AZ_1`` or ``MULTI_AZ_1`` .
2325
+ - The value of ``HAPairs`` is greater than 1 and the value of ``DeploymentType`` is ``SINGLE_AZ_1`` , ``MULTI_AZ_1`` , or ``MULTI_AZ_2`` .
2325
2326
 
2326
2327
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-ontapconfiguration.html#cfn-fsx-filesystem-ontapconfiguration-hapairs
2327
2328
  '''
@@ -2330,7 +2331,7 @@ class CfnFileSystem(
2330
2331
 
2331
2332
  @builtins.property
2332
2333
  def preferred_subnet_id(self) -> typing.Optional[builtins.str]:
2333
- '''Required when ``DeploymentType`` is set to ``MULTI_AZ_1`` .
2334
+ '''Required when ``DeploymentType`` is set to ``MULTI_AZ_1`` or ``MULTI_AZ_2`` .
2334
2335
 
2335
2336
  This specifies the subnet in which you want the preferred file server to be located.
2336
2337
 
@@ -2375,15 +2376,16 @@ class CfnFileSystem(
2375
2376
 
2376
2377
  You can define either the ``ThroughputCapacityPerHAPair`` or the ``ThroughputCapacity`` when creating a file system, but not both.
2377
2378
 
2378
- This field and ``ThroughputCapacity`` are the same for scale-up file systems powered by one HA pair.
2379
+ This field and ``ThroughputCapacity`` are the same for file systems powered by one HA pair.
2379
2380
 
2380
2381
  - For ``SINGLE_AZ_1`` and ``MULTI_AZ_1`` file systems, valid values are 128, 256, 512, 1024, 2048, or 4096 MBps.
2381
- - For ``SINGLE_AZ_2`` file systems, valid values are 3072 or 6144 MBps.
2382
+ - For ``SINGLE_AZ_2`` , valid values are 1536, 3072, or 6144 MBps.
2383
+ - For ``MULTI_AZ_2`` , valid values are 384, 768, 1536, 3072, or 6144 MBps.
2382
2384
 
2383
2385
  Amazon FSx responds with an HTTP status code 400 (Bad Request) for the following conditions:
2384
2386
 
2385
2387
  - The value of ``ThroughputCapacity`` and ``ThroughputCapacityPerHAPair`` are not the same value for file systems with one HA pair.
2386
- - The value of deployment type is ``SINGLE_AZ_2`` and ``ThroughputCapacity`` / ``ThroughputCapacityPerHAPair`` is a valid HA pair (a value between 2 and 12).
2388
+ - The value of deployment type is ``SINGLE_AZ_2`` and ``ThroughputCapacity`` / ``ThroughputCapacityPerHAPair`` is not a valid HA pair (a value between 1 and 12).
2387
2389
  - The value of ``ThroughputCapacityPerHAPair`` is not a valid value.
2388
2390
 
2389
2391
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-ontapconfiguration.html#cfn-fsx-filesystem-ontapconfiguration-throughputcapacityperhapair
@@ -2456,7 +2458,7 @@ class CfnFileSystem(
2456
2458
  ) -> None:
2457
2459
  '''The OpenZFS configuration for the file system that's being created.
2458
2460
 
2459
- :param deployment_type: Specifies the file system deployment type. Single AZ deployment types are configured for redundancy within a single Availability Zone in an AWS Region . Valid values are the following: - ``MULTI_AZ_1`` - Creates file systems with high availability that are configured for Multi-AZ redundancy to tolerate temporary unavailability in Availability Zones (AZs). ``Multi_AZ_1`` is available only in the US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Tokyo), and Europe (Ireland) AWS Regions . - ``SINGLE_AZ_1`` - Creates file systems with throughput capacities of 64 - 4,096 MB/s. ``Single_AZ_1`` is available in all AWS Regions where Amazon FSx for OpenZFS is available. - ``SINGLE_AZ_2`` - Creates file systems with throughput capacities of 160 - 10,240 MB/s using an NVMe L2ARC cache. ``Single_AZ_2`` is available only in the US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Tokyo), and Europe (Ireland) AWS Regions . For more information, see `Deployment type availability <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/availability-durability.html#available-aws-regions>`_ and `File system performance <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/performance.html#zfs-fs-performance>`_ in the *Amazon FSx for OpenZFS User Guide* .
2461
+ :param deployment_type: Specifies the file system deployment type. Valid values are the following:. - ``MULTI_AZ_1`` - Creates file systems with high availability and durability by replicating your data and supporting failover across multiple Availability Zones in the same AWS Region . - ``SINGLE_AZ_HA_2`` - Creates file systems with high availability and throughput capacities of 160 - 10,240 MB/s using an NVMe L2ARC cache by deploying a primary and standby file system within the same Availability Zone. - ``SINGLE_AZ_HA_1`` - Creates file systems with high availability and throughput capacities of 64 - 4,096 MB/s by deploying a primary and standby file system within the same Availability Zone. - ``SINGLE_AZ_2`` - Creates file systems with throughput capacities of 160 - 10,240 MB/s using an NVMe L2ARC cache that automatically recover within a single Availability Zone. - ``SINGLE_AZ_1`` - Creates file systems with throughput capacities of 64 - 4,096 MBs that automatically recover within a single Availability Zone. For a list of which AWS Regions each deployment type is available in, see `Deployment type availability <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/availability-durability.html#available-aws-regions>`_ . For more information on the differences in performance between deployment types, see `File system performance <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/performance.html#zfs-fs-performance>`_ in the *Amazon FSx for OpenZFS User Guide* .
2460
2462
  :param automatic_backup_retention_days: The number of days to retain automatic backups. Setting this property to ``0`` disables automatic backups. You can retain automatic backups for a maximum of 90 days. The default is ``30`` .
2461
2463
  :param copy_tags_to_backups: A Boolean value indicating whether tags for the file system should be copied to backups. This value defaults to ``false`` . If it's set to ``true`` , all tags for the file system are copied to all automatic and user-initiated backups where the user doesn't specify tags. If this value is ``true`` , and you specify one or more tags, only the specified tags are copied to backups. If you specify one or more tags when creating a user-initiated backup, no tags are copied from the file system, regardless of this value.
2462
2464
  :param copy_tags_to_volumes: A Boolean value indicating whether tags for the file system should be copied to volumes. This value defaults to ``false`` . If it's set to ``true`` , all tags for the file system are copied to volumes where the user doesn't specify tags. If this value is ``true`` , and you specify one or more tags, only the specified tags are copied to volumes. If you specify one or more tags when creating the volume, no tags are copied from the file system, regardless of this value.
@@ -2561,15 +2563,15 @@ class CfnFileSystem(
2561
2563
 
2562
2564
  @builtins.property
2563
2565
  def deployment_type(self) -> builtins.str:
2564
- '''Specifies the file system deployment type.
2565
-
2566
- Single AZ deployment types are configured for redundancy within a single Availability Zone in an AWS Region . Valid values are the following:
2566
+ '''Specifies the file system deployment type. Valid values are the following:.
2567
2567
 
2568
- - ``MULTI_AZ_1`` - Creates file systems with high availability that are configured for Multi-AZ redundancy to tolerate temporary unavailability in Availability Zones (AZs). ``Multi_AZ_1`` is available only in the US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Tokyo), and Europe (Ireland) AWS Regions .
2569
- - ``SINGLE_AZ_1`` - Creates file systems with throughput capacities of 64 - 4,096 MB/s. ``Single_AZ_1`` is available in all AWS Regions where Amazon FSx for OpenZFS is available.
2570
- - ``SINGLE_AZ_2`` - Creates file systems with throughput capacities of 160 - 10,240 MB/s using an NVMe L2ARC cache. ``Single_AZ_2`` is available only in the US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Tokyo), and Europe (Ireland) AWS Regions .
2568
+ - ``MULTI_AZ_1`` - Creates file systems with high availability and durability by replicating your data and supporting failover across multiple Availability Zones in the same AWS Region .
2569
+ - ``SINGLE_AZ_HA_2`` - Creates file systems with high availability and throughput capacities of 160 - 10,240 MB/s using an NVMe L2ARC cache by deploying a primary and standby file system within the same Availability Zone.
2570
+ - ``SINGLE_AZ_HA_1`` - Creates file systems with high availability and throughput capacities of 64 - 4,096 MB/s by deploying a primary and standby file system within the same Availability Zone.
2571
+ - ``SINGLE_AZ_2`` - Creates file systems with throughput capacities of 160 - 10,240 MB/s using an NVMe L2ARC cache that automatically recover within a single Availability Zone.
2572
+ - ``SINGLE_AZ_1`` - Creates file systems with throughput capacities of 64 - 4,096 MBs that automatically recover within a single Availability Zone.
2571
2573
 
2572
- For more information, see `Deployment type availability <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/availability-durability.html#available-aws-regions>`_ and `File system performance <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/performance.html#zfs-fs-performance>`_ in the *Amazon FSx for OpenZFS User Guide* .
2574
+ For a list of which AWS Regions each deployment type is available in, see `Deployment type availability <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/availability-durability.html#available-aws-regions>`_ . For more information on the differences in performance between deployment types, see `File system performance <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/performance.html#zfs-fs-performance>`_ in the *Amazon FSx for OpenZFS User Guide* .
2573
2575
 
2574
2576
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-openzfsconfiguration.html#cfn-fsx-filesystem-openzfsconfiguration-deploymenttype
2575
2577
  '''
@@ -5089,7 +5091,7 @@ class CfnVolume(
5089
5091
  ) -> None:
5090
5092
  '''Use to specify configuration options for a volume’s storage aggregate or aggregates.
5091
5093
 
5092
- :param aggregates: The list of aggregates that this volume resides on. Aggregates are storage pools which make up your primary storage tier. Each high-availability (HA) pair has one aggregate. The names of the aggregates map to the names of the aggregates in the ONTAP CLI and REST API. For FlexVols, there will always be a single entry. Amazon FSx responds with an HTTP status code 400 (Bad Request) for the following conditions: - The strings in the value of ``Aggregates`` are not are not formatted as ``aggrX`` , where X is a number between 1 and 6. - The value of ``Aggregates`` contains aggregates that are not present. - One or more of the aggregates supplied are too close to the volume limit to support adding more volumes.
5094
+ :param aggregates: The list of aggregates that this volume resides on. Aggregates are storage pools which make up your primary storage tier. Each high-availability (HA) pair has one aggregate. The names of the aggregates map to the names of the aggregates in the ONTAP CLI and REST API. For FlexVols, there will always be a single entry. Amazon FSx responds with an HTTP status code 400 (Bad Request) for the following conditions: - The strings in the value of ``Aggregates`` are not are not formatted as ``aggrX`` , where X is a number between 1 and 12. - The value of ``Aggregates`` contains aggregates that are not present. - One or more of the aggregates supplied are too close to the volume limit to support adding more volumes.
5093
5095
  :param constituents_per_aggregate: Used to explicitly set the number of constituents within the FlexGroup per storage aggregate. This field is optional when creating a FlexGroup volume. If unspecified, the default value will be 8. This field cannot be provided when creating a FlexVol volume.
5094
5096
 
5095
5097
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-volume-aggregateconfiguration.html
@@ -5124,7 +5126,7 @@ class CfnVolume(
5124
5126
 
5125
5127
  Amazon FSx responds with an HTTP status code 400 (Bad Request) for the following conditions:
5126
5128
 
5127
- - The strings in the value of ``Aggregates`` are not are not formatted as ``aggrX`` , where X is a number between 1 and 6.
5129
+ - The strings in the value of ``Aggregates`` are not are not formatted as ``aggrX`` , where X is a number between 1 and 12.
5128
5130
  - The value of ``Aggregates`` contains aggregates that are not present.
5129
5131
  - One or more of the aggregates supplied are too close to the volume limit to support adding more volumes.
5130
5132
 
@@ -6037,7 +6037,7 @@ class CfnJob(
6037
6037
  :param description: A description of the job.
6038
6038
  :param execution_class: Indicates whether the job is run with a standard or flexible execution class. The standard execution class is ideal for time-sensitive workloads that require fast job startup and dedicated resources. The flexible execution class is appropriate for time-insensitive jobs whose start and completion times may vary. Only jobs with AWS Glue version 3.0 and above and command type ``glueetl`` will be allowed to set ``ExecutionClass`` to ``FLEX`` . The flexible execution class is available for Spark jobs.
6039
6039
  :param execution_property: The maximum number of concurrent runs that are allowed for this job.
6040
- :param glue_version: Glue version determines the versions of Apache Spark and Python that AWS Glue supports. The Python version indicates the version supported for jobs of type Spark. For more information about the available AWS Glue versions and corresponding Spark and Python versions, see `Glue version <https://docs.aws.amazon.com/glue/latest/dg/add-job.html>`_ in the developer guide. Jobs that are created without specifying a Glue version default to Glue 0.9.
6040
+ :param glue_version: Glue version determines the versions of Apache Spark and Python that AWS Glue supports. The Python version indicates the version supported for jobs of type Spark. For more information about the available AWS Glue versions and corresponding Spark and Python versions, see `Glue version <https://docs.aws.amazon.com/glue/latest/dg/add-job.html>`_ in the developer guide. Jobs that are created without specifying a Glue version default to the latest Glue version available.
6041
6041
  :param log_uri: This field is reserved for future use.
6042
6042
  :param maintenance_window: This field specifies a day of the week and hour for a maintenance window for streaming jobs. AWS Glue periodically performs maintenance activities. During these maintenance windows, AWS Glue will need to restart your streaming jobs. AWS Glue will restart the job within 3 hours of the specified maintenance window. For instance, if you set up the maintenance window for Monday at 10:00AM GMT, your jobs will be restarted between 10:00AM GMT to 1:00PM GMT.
6043
6043
  :param max_capacity: The number of AWS Glue data processing units (DPUs) that can be allocated when this job runs. A DPU is a relative measure of processing power that consists of 4 vCPUs of compute capacity and 16 GB of memory. Do not set ``Max Capacity`` if using ``WorkerType`` and ``NumberOfWorkers`` . The value that can be allocated for ``MaxCapacity`` depends on whether you are running a Python shell job or an Apache Spark ETL job: - When you specify a Python shell job ( ``JobCommand.Name`` ="pythonshell"), you can allocate either 0.0625 or 1 DPU. The default is 0.0625 DPU. - When you specify an Apache Spark ETL job ( ``JobCommand.Name`` ="glueetl"), you can allocate from 2 to 100 DPUs. The default is 10 DPUs. This job type cannot have a fractional DPU allocation.
@@ -6769,7 +6769,7 @@ class CfnJobProps:
6769
6769
  :param description: A description of the job.
6770
6770
  :param execution_class: Indicates whether the job is run with a standard or flexible execution class. The standard execution class is ideal for time-sensitive workloads that require fast job startup and dedicated resources. The flexible execution class is appropriate for time-insensitive jobs whose start and completion times may vary. Only jobs with AWS Glue version 3.0 and above and command type ``glueetl`` will be allowed to set ``ExecutionClass`` to ``FLEX`` . The flexible execution class is available for Spark jobs.
6771
6771
  :param execution_property: The maximum number of concurrent runs that are allowed for this job.
6772
- :param glue_version: Glue version determines the versions of Apache Spark and Python that AWS Glue supports. The Python version indicates the version supported for jobs of type Spark. For more information about the available AWS Glue versions and corresponding Spark and Python versions, see `Glue version <https://docs.aws.amazon.com/glue/latest/dg/add-job.html>`_ in the developer guide. Jobs that are created without specifying a Glue version default to Glue 0.9.
6772
+ :param glue_version: Glue version determines the versions of Apache Spark and Python that AWS Glue supports. The Python version indicates the version supported for jobs of type Spark. For more information about the available AWS Glue versions and corresponding Spark and Python versions, see `Glue version <https://docs.aws.amazon.com/glue/latest/dg/add-job.html>`_ in the developer guide. Jobs that are created without specifying a Glue version default to the latest Glue version available.
6773
6773
  :param log_uri: This field is reserved for future use.
6774
6774
  :param maintenance_window: This field specifies a day of the week and hour for a maintenance window for streaming jobs. AWS Glue periodically performs maintenance activities. During these maintenance windows, AWS Glue will need to restart your streaming jobs. AWS Glue will restart the job within 3 hours of the specified maintenance window. For instance, if you set up the maintenance window for Monday at 10:00AM GMT, your jobs will be restarted between 10:00AM GMT to 1:00PM GMT.
6775
6775
  :param max_capacity: The number of AWS Glue data processing units (DPUs) that can be allocated when this job runs. A DPU is a relative measure of processing power that consists of 4 vCPUs of compute capacity and 16 GB of memory. Do not set ``Max Capacity`` if using ``WorkerType`` and ``NumberOfWorkers`` . The value that can be allocated for ``MaxCapacity`` depends on whether you are running a Python shell job or an Apache Spark ETL job: - When you specify a Python shell job ( ``JobCommand.Name`` ="pythonshell"), you can allocate either 0.0625 or 1 DPU. The default is 0.0625 DPU. - When you specify an Apache Spark ETL job ( ``JobCommand.Name`` ="glueetl"), you can allocate from 2 to 100 DPUs. The default is 10 DPUs. This job type cannot have a fractional DPU allocation.
@@ -6999,7 +6999,7 @@ class CfnJobProps:
6999
6999
 
7000
7000
  For more information about the available AWS Glue versions and corresponding Spark and Python versions, see `Glue version <https://docs.aws.amazon.com/glue/latest/dg/add-job.html>`_ in the developer guide.
7001
7001
 
7002
- Jobs that are created without specifying a Glue version default to Glue 0.9.
7002
+ Jobs that are created without specifying a Glue version default to the latest Glue version available.
7003
7003
 
7004
7004
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-job.html#cfn-glue-job-glueversion
7005
7005
  '''
@@ -2336,7 +2336,7 @@ class CfnMalwareProtectionPlan(
2336
2336
  :param scope: Scope in which this resource is defined.
2337
2337
  :param id: Construct identifier for this resource (unique in its scope).
2338
2338
  :param protected_resource: Information about the protected resource. Presently, ``S3Bucket`` is the only supported protected resource.
2339
- :param role: IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.
2339
+ :param role: Amazon Resource Name (ARN) of the IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource. To find the ARN of your IAM role, go to the IAM console, and select the role name for details.
2340
2340
  :param actions: Specifies the action that is to be applied to the Malware Protection plan resource.
2341
2341
  :param tags: The tags to be added to the created Malware Protection plan resource. Each tag consists of a key and an optional value, both of which you need to specify.
2342
2342
  '''
@@ -2460,7 +2460,7 @@ class CfnMalwareProtectionPlan(
2460
2460
  @builtins.property
2461
2461
  @jsii.member(jsii_name="role")
2462
2462
  def role(self) -> builtins.str:
2463
- '''IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.'''
2463
+ '''Amazon Resource Name (ARN) of the IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.'''
2464
2464
  return typing.cast(builtins.str, jsii.get(self, "role"))
2465
2465
 
2466
2466
  @role.setter
@@ -2917,7 +2917,7 @@ class CfnMalwareProtectionPlanProps:
2917
2917
  '''Properties for defining a ``CfnMalwareProtectionPlan``.
2918
2918
 
2919
2919
  :param protected_resource: Information about the protected resource. Presently, ``S3Bucket`` is the only supported protected resource.
2920
- :param role: IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.
2920
+ :param role: Amazon Resource Name (ARN) of the IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource. To find the ARN of your IAM role, go to the IAM console, and select the role name for details.
2921
2921
  :param actions: Specifies the action that is to be applied to the Malware Protection plan resource.
2922
2922
  :param tags: The tags to be added to the created Malware Protection plan resource. Each tag consists of a key and an optional value, both of which you need to specify.
2923
2923
 
@@ -2982,7 +2982,9 @@ class CfnMalwareProtectionPlanProps:
2982
2982
 
2983
2983
  @builtins.property
2984
2984
  def role(self) -> builtins.str:
2985
- '''IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.
2985
+ '''Amazon Resource Name (ARN) of the IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.
2986
+
2987
+ To find the ARN of your IAM role, go to the IAM console, and select the role name for details.
2986
2988
 
2987
2989
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-malwareprotectionplan.html#cfn-guardduty-malwareprotectionplan-role
2988
2990
  '''
@@ -13298,11 +13298,14 @@ class ServicePrincipal(
13298
13298
  These days all service principal names are standardized, and they are all
13299
13299
  of the form ``<servicename>.amazonaws.com``.
13300
13300
 
13301
- If the feature flag ``@aws-cdk/aws-iam:standardizedServicePrincipals`` is set, this
13302
- method will always return its input. If this feature flag is not set, this
13303
- method will perform the legacy behavior, which appends the region-specific
13304
- domain suffix for some select services (for example, it would append ``.cn``
13305
- to some service principal names).
13301
+ To avoid breaking changes, handling is provided for services added with the formats below,
13302
+ however, no additional handling will be added for new regions or partitions.
13303
+
13304
+ - s3
13305
+ - s3.amazonaws.com
13306
+ - s3.amazonaws.com.cn
13307
+ - s3.c2s.ic.gov
13308
+ - s3.sc2s.sgov.gov
13306
13309
 
13307
13310
  :param service: -
13308
13311
 
@@ -1003,7 +1003,7 @@ managing concurrency.
1003
1003
 
1004
1004
  ## Lambda with SnapStart
1005
1005
 
1006
- SnapStart is currently supported only on Java 11/Java 17 runtime. SnapStart does not support provisioned concurrency, the arm64 architecture, Amazon Elastic File System (Amazon EFS), or ephemeral storage greater than 512 MB. After you enable Lambda SnapStart for a particular Lambda function, publishing a new version of the function will trigger an optimization process.
1006
+ SnapStart is currently supported only on Java 11 and later [Java managed runtimes](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html). SnapStart does not support provisioned concurrency, Amazon Elastic File System (Amazon EFS), or ephemeral storage greater than 512 MB. After you enable Lambda SnapStart for a particular Lambda function, publishing a new version of the function will trigger an optimization process.
1007
1007
 
1008
1008
  See [the AWS documentation](https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html) to learn more about AWS Lambda SnapStart
1009
1009
 
@@ -1640,6 +1640,12 @@ class AdotLambdaLayerGenericVersion(
1640
1640
  '''
1641
1641
  return typing.cast("AdotLambdaLayerGenericVersion", jsii.sget(cls, "LATEST"))
1642
1642
 
1643
+ @jsii.python.classproperty
1644
+ @jsii.member(jsii_name="V0_102_1")
1645
+ def V0_102_1(cls) -> "AdotLambdaLayerGenericVersion":
1646
+ '''Version 0.102.1.'''
1647
+ return typing.cast("AdotLambdaLayerGenericVersion", jsii.sget(cls, "V0_102_1"))
1648
+
1643
1649
  @jsii.python.classproperty
1644
1650
  @jsii.member(jsii_name="V0_62_1")
1645
1651
  def V0_62_1(cls) -> "AdotLambdaLayerGenericVersion":
@@ -2037,6 +2043,12 @@ class AdotLambdaLayerPythonSdkVersion(
2037
2043
  '''Version 1.24.0.'''
2038
2044
  return typing.cast("AdotLambdaLayerPythonSdkVersion", jsii.sget(cls, "V1_24_0"))
2039
2045
 
2046
+ @jsii.python.classproperty
2047
+ @jsii.member(jsii_name="V1_25_0")
2048
+ def V1_25_0(cls) -> "AdotLambdaLayerPythonSdkVersion":
2049
+ '''Version 1.25.0.'''
2050
+ return typing.cast("AdotLambdaLayerPythonSdkVersion", jsii.sget(cls, "V1_25_0"))
2051
+
2040
2052
  @builtins.property
2041
2053
  @jsii.member(jsii_name="layerVersion")
2042
2054
  def _layer_version(self) -> builtins.str:
@@ -20034,7 +20046,12 @@ class Runtime(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_lambda.Runtime
20034
20046
  @jsii.python.classproperty
20035
20047
  @jsii.member(jsii_name="NODEJS_16_X")
20036
20048
  def NODEJS_16_X(cls) -> "Runtime":
20037
- '''The NodeJS 16.x runtime (nodejs16.x).'''
20049
+ '''(deprecated) The NodeJS 16.x runtime (nodejs16.x).
20050
+
20051
+ :deprecated: Legacy runtime no longer supported by AWS Lambda. Migrate to the latest NodeJS runtime.
20052
+
20053
+ :stability: deprecated
20054
+ '''
20038
20055
  return typing.cast("Runtime", jsii.sget(cls, "NODEJS_16_X"))
20039
20056
 
20040
20057
  @jsii.python.classproperty
@@ -48,6 +48,15 @@ publish their log group to a specific region, such as AWS Chatbot creating a log
48
48
 
49
49
  By default, the log group created by LogRetention will be retained after the stack is deleted. If the RemovalPolicy is set to DESTROY, then the log group will be deleted when the stack is deleted.
50
50
 
51
+ ## Log Group Class
52
+
53
+ CloudWatch Logs offers two classes of log groups:
54
+
55
+ 1. The CloudWatch Logs Standard log class is a full-featured option for logs that require real-time monitoring or logs that you access frequently.
56
+ 2. The CloudWatch Logs Infrequent Access log class is a new log class that you can use to cost-effectively consolidate your logs. This log class offers a subset of CloudWatch Logs capabilities including managed ingestion, storage, cross-account log analytics, and encryption with a lower ingestion price per GB. The Infrequent Access log class is ideal for ad-hoc querying and after-the-fact forensic analysis on infrequently accessed logs.
57
+
58
+ For more details please check: [log group class documentation](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html)
59
+
51
60
  ## Resource Policy
52
61
 
53
62
  CloudWatch Resource Policies allow other AWS services or IAM Principals to put log events into the log groups.
@@ -756,7 +756,7 @@ class CfnDataSource(
756
756
  :param scope: Scope in which this resource is defined.
757
757
  :param id: Construct identifier for this resource (unique in its scope).
758
758
  :param application_id: The identifier of the Amazon Q Business application the data source will be attached to.
759
- :param configuration: Configuration information to connect to your data source repository. For configuration templates for your specific data source, see `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ .
759
+ :param configuration: Configuration information to connect your data source repository to Amazon Q Business. Use this parameter to provide a JSON schema with configuration information specific to your data source connector. Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas: - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_ You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice. - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
760
760
  :param display_name: The name of the Amazon Q Business data source.
761
761
  :param index_id: The identifier of the index the data source is attached to.
762
762
  :param description: A description for the data source connector.
@@ -896,7 +896,7 @@ class CfnDataSource(
896
896
  @builtins.property
897
897
  @jsii.member(jsii_name="configuration")
898
898
  def configuration(self) -> typing.Any:
899
- '''Configuration information to connect to your data source repository.'''
899
+ '''Configuration information to connect your data source repository to Amazon Q Business.'''
900
900
  return typing.cast(typing.Any, jsii.get(self, "configuration"))
901
901
 
902
902
  @configuration.setter
@@ -1876,7 +1876,7 @@ class CfnDataSourceProps:
1876
1876
  '''Properties for defining a ``CfnDataSource``.
1877
1877
 
1878
1878
  :param application_id: The identifier of the Amazon Q Business application the data source will be attached to.
1879
- :param configuration: Configuration information to connect to your data source repository. For configuration templates for your specific data source, see `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ .
1879
+ :param configuration: Configuration information to connect your data source repository to Amazon Q Business. Use this parameter to provide a JSON schema with configuration information specific to your data source connector. Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas: - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_ You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice. - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
1880
1880
  :param display_name: The name of the Amazon Q Business data source.
1881
1881
  :param index_id: The identifier of the index the data source is attached to.
1882
1882
  :param description: A description for the data source connector.
@@ -2023,9 +2023,19 @@ class CfnDataSourceProps:
2023
2023
 
2024
2024
  @builtins.property
2025
2025
  def configuration(self) -> typing.Any:
2026
- '''Configuration information to connect to your data source repository.
2026
+ '''Configuration information to connect your data source repository to Amazon Q Business.
2027
2027
 
2028
- For configuration templates for your specific data source, see `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ .
2028
+ Use this parameter to provide a JSON schema with configuration information specific to your data source connector.
2029
+
2030
+ Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas:
2031
+
2032
+ - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_
2033
+ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_
2034
+
2035
+ You can find configuration templates for your specific data source using the following steps:
2036
+
2037
+ - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice.
2038
+ - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
2029
2039
 
2030
2040
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-datasource.html#cfn-qbusiness-datasource-configuration
2031
2041
  '''
@@ -4493,7 +4503,7 @@ class CfnWebExperience(
4493
4503
  :param scope: Scope in which this resource is defined.
4494
4504
  :param id: Construct identifier for this resource (unique in its scope).
4495
4505
  :param application_id: The identifier of the Amazon Q Business web experience.
4496
- :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience.
4506
+ :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience. .. epigraph:: You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
4497
4507
  :param sample_prompts_control_mode: Determines whether sample prompts are enabled in the web experience for an end user.
4498
4508
  :param subtitle: A subtitle to personalize your Amazon Q Business web experience.
4499
4509
  :param tags: A list of key-value pairs that identify or categorize your Amazon Q Business web experience. You can also use tags to help control access to the web experience. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
@@ -4733,7 +4743,7 @@ class CfnWebExperienceProps:
4733
4743
  '''Properties for defining a ``CfnWebExperience``.
4734
4744
 
4735
4745
  :param application_id: The identifier of the Amazon Q Business web experience.
4736
- :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience.
4746
+ :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience. .. epigraph:: You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
4737
4747
  :param sample_prompts_control_mode: Determines whether sample prompts are enabled in the web experience for an end user.
4738
4748
  :param subtitle: A subtitle to personalize your Amazon Q Business web experience.
4739
4749
  :param tags: A list of key-value pairs that identify or categorize your Amazon Q Business web experience. You can also use tags to help control access to the web experience. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
@@ -4803,6 +4813,10 @@ class CfnWebExperienceProps:
4803
4813
  def role_arn(self) -> typing.Optional[builtins.str]:
4804
4814
  '''The Amazon Resource Name (ARN) of the service role attached to your web experience.
4805
4815
 
4816
+ .. epigraph::
4817
+
4818
+ You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
4819
+
4806
4820
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-webexperience.html#cfn-qbusiness-webexperience-rolearn
4807
4821
  '''
4808
4822
  result = self._values.get("role_arn")