aws-cdk-lib 2.149.0__py3-none-any.whl → 2.151.0__py3-none-any.whl

aws_cdk/aws_guardduty/__init__.py

@@ -2336,7 +2336,7 @@ class CfnMalwareProtectionPlan(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param protected_resource: Information about the protected resource. Presently, ``S3Bucket`` is the only supported protected resource.
-        :param role: IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.
+        :param role: Amazon Resource Name (ARN) of the IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource. To find the ARN of your IAM role, go to the IAM console, and select the role name for details.
         :param actions: Specifies the action that is to be applied to the Malware Protection plan resource.
         :param tags: The tags to be added to the created Malware Protection plan resource. Each tag consists of a key and an optional value, both of which you need to specify.
         '''
@@ -2460,7 +2460,7 @@ class CfnMalwareProtectionPlan(
     @builtins.property
     @jsii.member(jsii_name="role")
     def role(self) -> builtins.str:
-        '''IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.'''
+        '''Amazon Resource Name (ARN) of the IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.'''
         return typing.cast(builtins.str, jsii.get(self, "role"))
 
     @role.setter
@@ -2917,7 +2917,7 @@ class CfnMalwareProtectionPlanProps:
         '''Properties for defining a ``CfnMalwareProtectionPlan``.
 
         :param protected_resource: Information about the protected resource. Presently, ``S3Bucket`` is the only supported protected resource.
-        :param role: IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.
+        :param role: Amazon Resource Name (ARN) of the IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource. To find the ARN of your IAM role, go to the IAM console, and select the role name for details.
         :param actions: Specifies the action that is to be applied to the Malware Protection plan resource.
         :param tags: The tags to be added to the created Malware Protection plan resource. Each tag consists of a key and an optional value, both of which you need to specify.
 
@@ -2982,7 +2982,9 @@ class CfnMalwareProtectionPlanProps:
 
     @builtins.property
     def role(self) -> builtins.str:
-        '''IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.
+        '''Amazon Resource Name (ARN) of the IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.
+
+        To find the ARN of your IAM role, go to the IAM console, and select the role name for details.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-malwareprotectionplan.html#cfn-guardduty-malwareprotectionplan-role
         '''

aws_cdk/aws_iam/__init__.py

@@ -2383,8 +2383,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrAttachmentCount")
     def attr_attachment_count(self) -> jsii.Number:
-        '''The number of principal entities (users, groups, and roles) that the policy is attached to.
-
+        '''
         :cloudformationAttribute: AttachmentCount
         '''
         return typing.cast(jsii.Number, jsii.get(self, "attrAttachmentCount"))
@@ -2392,8 +2391,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrCreateDate")
     def attr_create_date(self) -> builtins.str:
-        '''The date and time, in `ISO 8601 date-time format <https://docs.aws.amazon.com/http://www.iso.org/iso/iso8601>`_ , when the policy was created.
-
+        '''
         :cloudformationAttribute: CreateDate
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrCreateDate"))
@@ -2401,10 +2399,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrDefaultVersionId")
     def attr_default_version_id(self) -> builtins.str:
-        '''The identifier for the version of the policy that is set as the default (operative) version.
-
-        For more information about policy versions, see `Versioning for managed policies <https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-versions.html>`_ in the *IAM User Guide* .
-
+        '''
         :cloudformationAttribute: DefaultVersionId
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrDefaultVersionId"))
@@ -2412,8 +2407,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrIsAttachable")
     def attr_is_attachable(self) -> _IResolvable_da3f097b:
-        '''Specifies whether the policy can be attached to an IAM user, group, or role.
-
+        '''
         :cloudformationAttribute: IsAttachable
         '''
         return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrIsAttachable"))
@@ -2421,10 +2415,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrPermissionsBoundaryUsageCount")
     def attr_permissions_boundary_usage_count(self) -> jsii.Number:
-        '''The number of entities (users and roles) for which the policy is used as the permissions boundary.
-
-        For more information about permissions boundaries, see `Permissions boundaries for IAM identities <https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html>`_ in the *IAM User Guide* .
-
+        '''
         :cloudformationAttribute: PermissionsBoundaryUsageCount
         '''
         return typing.cast(jsii.Number, jsii.get(self, "attrPermissionsBoundaryUsageCount"))
@@ -2440,10 +2431,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrPolicyId")
     def attr_policy_id(self) -> builtins.str:
-        '''The stable and unique string identifying the policy.
-
-        For more information about IDs, see `IAM identifiers <https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html>`_ in the *IAM User Guide* .
-
+        '''
         :cloudformationAttribute: PolicyId
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrPolicyId"))
@@ -2451,10 +2439,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrUpdateDate")
     def attr_update_date(self) -> builtins.str:
-        '''The date and time, in `ISO 8601 date-time format <https://docs.aws.amazon.com/http://www.iso.org/iso/iso8601>`_ , when the policy was last updated.
-
-        When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.
-
+        '''
         :cloudformationAttribute: UpdateDate
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrUpdateDate"))
@@ -2826,7 +2811,7 @@ class CfnOIDCProvider(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param thumbprint_list: A list of certificate thumbprints that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
+        :param thumbprint_list: A list of certificate thumbprints that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ . This property is optional. If it is not included, IAM will retrieve and use the top intermediate certificate authority (CA) thumbprint of the OpenID Connect identity provider server certificate.
         :param client_id_list: A list of client IDs (also known as audiences) that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
         :param tags: A list of tags that are attached to the specified IAM OIDC provider. The returned list of tags is sorted by tag key. For more information about tagging, see `Tagging IAM resources <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html>`_ in the *IAM User Guide* .
         :param url: The URL that the IAM OIDC provider resource object is associated with. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
@@ -2968,7 +2953,7 @@ class CfnOIDCProviderProps:
     ) -> None:
         '''Properties for defining a ``CfnOIDCProvider``.
 
-        :param thumbprint_list: A list of certificate thumbprints that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
+        :param thumbprint_list: A list of certificate thumbprints that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ . This property is optional. If it is not included, IAM will retrieve and use the top intermediate certificate authority (CA) thumbprint of the OpenID Connect identity provider server certificate.
         :param client_id_list: A list of client IDs (also known as audiences) that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
         :param tags: A list of tags that are attached to the specified IAM OIDC provider. The returned list of tags is sorted by tag key. For more information about tagging, see `Tagging IAM resources <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html>`_ in the *IAM User Guide* .
         :param url: The URL that the IAM OIDC provider resource object is associated with. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
@@ -3016,6 +3001,8 @@ class CfnOIDCProviderProps:
 
         For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
 
+        This property is optional. If it is not included, IAM will retrieve and use the top intermediate certificate authority (CA) thumbprint of the OpenID Connect identity provider server certificate.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-oidcprovider.html#cfn-iam-oidcprovider-thumbprintlist
         '''
         result = self._values.get("thumbprint_list")
@@ -13298,11 +13285,14 @@ class ServicePrincipal(
         These days all service principal names are standardized, and they are all
         of the form ``<servicename>.amazonaws.com``.
 
-        If the feature flag ``@aws-cdk/aws-iam:standardizedServicePrincipals`` is set, this
-        method will always return its input. If this feature flag is not set, this
-        method will perform the legacy behavior, which appends the region-specific
-        domain suffix for some select services (for example, it would append ``.cn``
-        to some service principal names).
+        To avoid breaking changes, handling is provided for services added with the formats below,
+        however, no additional handling will be added for new regions or partitions.
+
+        - s3
+        - s3.amazonaws.com
+        - s3.amazonaws.com.cn
+        - s3.c2s.ic.gov
+        - s3.sc2s.sgov.gov
 
         :param service: -
 

aws_cdk/aws_iotsitewise/__init__.py

@@ -1502,7 +1502,7 @@ class CfnAssetModel(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param asset_model_name: A unique, friendly name for the asset model.
+        :param asset_model_name: A unique name for the asset model.
         :param asset_model_composite_models: The composite models that are part of this asset model. It groups properties (such as attributes, measurements, transforms, and metrics) and child composite models that model parts of your industrial equipment. Each composite model has a type that defines the properties that the composite model supports. Use composite models to define alarms on this asset model. .. epigraph:: When creating custom composite models, you need to use `CreateAssetModelCompositeModel <https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateAssetModelCompositeModel.html>`_ . For more information, see `Creating custom composite models (Components) <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/create-custom-composite-models.html>`_ in the *AWS IoT SiteWise User Guide* .
         :param asset_model_description: A description for the asset model.
         :param asset_model_external_id: The external ID of the asset model. For more information, see `Using external IDs <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/object-ids.html#external-ids>`_ in the *AWS IoT SiteWise User Guide* .
@@ -1590,7 +1590,7 @@ class CfnAssetModel(
     @builtins.property
     @jsii.member(jsii_name="assetModelName")
     def asset_model_name(self) -> builtins.str:
-        '''A unique, friendly name for the asset model.'''
+        '''A unique name for the asset model.'''
         return typing.cast(builtins.str, jsii.get(self, "assetModelName"))
 
     @asset_model_name.setter
@@ -3311,7 +3311,7 @@ class CfnAssetModelProps:
     ) -> None:
         '''Properties for defining a ``CfnAssetModel``.
 
-        :param asset_model_name: A unique, friendly name for the asset model.
+        :param asset_model_name: A unique name for the asset model.
         :param asset_model_composite_models: The composite models that are part of this asset model. It groups properties (such as attributes, measurements, transforms, and metrics) and child composite models that model parts of your industrial equipment. Each composite model has a type that defines the properties that the composite model supports. Use composite models to define alarms on this asset model. .. epigraph:: When creating custom composite models, you need to use `CreateAssetModelCompositeModel <https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateAssetModelCompositeModel.html>`_ . For more information, see `Creating custom composite models (Components) <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/create-custom-composite-models.html>`_ in the *AWS IoT SiteWise User Guide* .
         :param asset_model_description: A description for the asset model.
         :param asset_model_external_id: The external ID of the asset model. For more information, see `Using external IDs <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/object-ids.html#external-ids>`_ in the *AWS IoT SiteWise User Guide* .
@@ -3515,7 +3515,7 @@ class CfnAssetModelProps:
 
     @builtins.property
     def asset_model_name(self) -> builtins.str:
-        '''A unique, friendly name for the asset model.
+        '''A unique name for the asset model.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html#cfn-iotsitewise-assetmodel-assetmodelname
         '''
@@ -4195,7 +4195,7 @@ class CfnGateway(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param gateway_name: A unique, friendly name for the gateway.
+        :param gateway_name: A unique name for the gateway.
         :param gateway_platform: The gateway's platform. You can only specify one platform in a gateway.
         :param gateway_capability_summaries: A list of gateway capability summaries that each contain a namespace and status. Each gateway capability defines data sources for the gateway. To retrieve a capability configuration's definition, use `DescribeGatewayCapabilityConfiguration <https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeGatewayCapabilityConfiguration.html>`_ .
         :param tags: A list of key-value pairs that contain metadata for the gateway. For more information, see `Tagging your AWS IoT SiteWise resources <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/tag-resources.html>`_ in the *AWS IoT SiteWise User Guide* .
@@ -4266,7 +4266,7 @@ class CfnGateway(
     @builtins.property
     @jsii.member(jsii_name="gatewayName")
     def gateway_name(self) -> builtins.str:
-        '''A unique, friendly name for the gateway.'''
+        '''A unique name for the gateway.'''
         return typing.cast(builtins.str, jsii.get(self, "gatewayName"))
 
     @gateway_name.setter
@@ -4613,7 +4613,7 @@ class CfnGatewayProps:
     ) -> None:
         '''Properties for defining a ``CfnGateway``.
 
-        :param gateway_name: A unique, friendly name for the gateway.
+        :param gateway_name: A unique name for the gateway.
         :param gateway_platform: The gateway's platform. You can only specify one platform in a gateway.
         :param gateway_capability_summaries: A list of gateway capability summaries that each contain a namespace and status. Each gateway capability defines data sources for the gateway. To retrieve a capability configuration's definition, use `DescribeGatewayCapabilityConfiguration <https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeGatewayCapabilityConfiguration.html>`_ .
         :param tags: A list of key-value pairs that contain metadata for the gateway. For more information, see `Tagging your AWS IoT SiteWise resources <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/tag-resources.html>`_ in the *AWS IoT SiteWise User Guide* .
@@ -4668,7 +4668,7 @@ class CfnGatewayProps:
 
     @builtins.property
     def gateway_name(self) -> builtins.str:
-        '''A unique, friendly name for the gateway.
+        '''A unique name for the gateway.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-gateway.html#cfn-iotsitewise-gateway-gatewayname
         '''

aws_cdk/aws_lambda/__init__.py

@@ -1003,7 +1003,7 @@ managing concurrency.
 
 ## Lambda with SnapStart
 
-SnapStart is currently supported only on Java 11/Java 17 runtime. SnapStart does not support provisioned concurrency, the arm64 architecture, Amazon Elastic File System (Amazon EFS), or ephemeral storage greater than 512 MB. After you enable Lambda SnapStart for a particular Lambda function, publishing a new version of the function will trigger an optimization process.
+SnapStart is currently supported only on Java 11 and later [Java managed runtimes](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html). SnapStart does not support provisioned concurrency, Amazon Elastic File System (Amazon EFS), or ephemeral storage greater than 512 MB. After you enable Lambda SnapStart for a particular Lambda function, publishing a new version of the function will trigger an optimization process.
 
 See [the AWS documentation](https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html) to learn more about AWS Lambda SnapStart
 
@@ -1594,6 +1594,8 @@ class AdotLambdaExecWrapper(enum.Enum):
     '''Wrapping streaming handlers (implementing RequestStreamHandler), enabling HTTP context propagation for HTTP requests.'''
     INSTRUMENT_HANDLER = "INSTRUMENT_HANDLER"
     '''Wrapping python lambda handlers see https://aws-otel.github.io/docs/getting-started/lambda/lambda-python.'''
+    SQS_HANDLER = "SQS_HANDLER"
+    '''Wrapping SQS-triggered function handlers (implementing RequestHandler).'''
 
 
 class AdotLambdaLayerGenericVersion(
@@ -1640,6 +1642,12 @@ class AdotLambdaLayerGenericVersion(
         '''
         return typing.cast("AdotLambdaLayerGenericVersion", jsii.sget(cls, "LATEST"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="V0_102_1")
+    def V0_102_1(cls) -> "AdotLambdaLayerGenericVersion":
+        '''Version 0.102.1.'''
+        return typing.cast("AdotLambdaLayerGenericVersion", jsii.sget(cls, "V0_102_1"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="V0_62_1")
     def V0_62_1(cls) -> "AdotLambdaLayerGenericVersion":
@@ -2037,6 +2045,12 @@ class AdotLambdaLayerPythonSdkVersion(
         '''Version 1.24.0.'''
         return typing.cast("AdotLambdaLayerPythonSdkVersion", jsii.sget(cls, "V1_24_0"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="V1_25_0")
+    def V1_25_0(cls) -> "AdotLambdaLayerPythonSdkVersion":
+        '''Version 1.25.0.'''
+        return typing.cast("AdotLambdaLayerPythonSdkVersion", jsii.sget(cls, "V1_25_0"))
+
     @builtins.property
     @jsii.member(jsii_name="layerVersion")
     def _layer_version(self) -> builtins.str:
@@ -20034,7 +20048,12 @@ class Runtime(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_lambda.Runtime
     @jsii.python.classproperty
     @jsii.member(jsii_name="NODEJS_16_X")
     def NODEJS_16_X(cls) -> "Runtime":
-        '''The NodeJS 16.x runtime (nodejs16.x).'''
+        '''(deprecated) The NodeJS 16.x runtime (nodejs16.x).
+
+        :deprecated: Legacy runtime no longer supported by AWS Lambda. Migrate to the latest NodeJS runtime.
+
+        :stability: deprecated
+        '''
         return typing.cast("Runtime", jsii.sget(cls, "NODEJS_16_X"))
 
     @jsii.python.classproperty

aws_cdk/aws_logs/__init__.py

@@ -48,6 +48,15 @@ publish their log group to a specific region, such as AWS Chatbot creating a log
 
 By default, the log group created by LogRetention will be retained after the stack is deleted. If the RemovalPolicy is set to DESTROY, then the log group will be deleted when the stack is deleted.
 
+## Log Group Class
+
+CloudWatch Logs offers two classes of log groups:
+
+1. The CloudWatch Logs Standard log class is a full-featured option for logs that require real-time monitoring or logs that you access frequently.
+2. The CloudWatch Logs Infrequent Access log class is a new log class that you can use to cost-effectively consolidate your logs. This log class offers a subset of CloudWatch Logs capabilities including managed ingestion, storage, cross-account log analytics, and encryption with a lower ingestion price per GB. The Infrequent Access log class is ideal for ad-hoc querying and after-the-fact forensic analysis on infrequently accessed logs.
+
+For more details please check: [log group class documentation](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html)
+
 ## Resource Policy
 
 CloudWatch Resource Policies allow other AWS services or IAM Principals to put log events into the log groups.

aws_cdk/aws_mwaa/__init__.py

@@ -170,7 +170,7 @@ class CfnEnvironment(
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of your Amazon MWAA environment.
         :param airflow_configuration_options: A list of key-value pairs containing the Airflow configuration options for your environment. For example, ``core.default_timezone: utc`` . To learn more, see `Apache Airflow configuration options <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-env-variables.html>`_ .
-        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` (latest)
+        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` | ``2.8.1`` | ``2.9.2`` (latest)
         :param dag_s3_path: The relative path to the DAGs folder on your Amazon S3 bucket. For example, ``dags`` . To learn more, see `Adding or updating DAGs <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-folder.html>`_ .
         :param endpoint_management: Defines whether the VPC endpoints configured for the environment are created, and managed, by the customer or by Amazon MWAA. If set to ``SERVICE`` , Amazon MWAA will create and manage the required VPC endpoints in your VPC. If set to ``CUSTOMER`` , you must create, and manage, the VPC endpoints in your VPC.
         :param environment_class: The environment class type. Valid values: ``mw1.small`` , ``mw1.medium`` , ``mw1.large`` . To learn more, see `Amazon MWAA environment class <https://docs.aws.amazon.com/mwaa/latest/userguide/environment-class.html>`_ .
@@ -1113,7 +1113,7 @@ class CfnEnvironmentProps:
 
         :param name: The name of your Amazon MWAA environment.
         :param airflow_configuration_options: A list of key-value pairs containing the Airflow configuration options for your environment. For example, ``core.default_timezone: utc`` . To learn more, see `Apache Airflow configuration options <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-env-variables.html>`_ .
-        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` (latest)
+        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` | ``2.8.1`` | ``2.9.2`` (latest)
         :param dag_s3_path: The relative path to the DAGs folder on your Amazon S3 bucket. For example, ``dags`` . To learn more, see `Adding or updating DAGs <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-folder.html>`_ .
         :param endpoint_management: Defines whether the VPC endpoints configured for the environment are created, and managed, by the customer or by Amazon MWAA. If set to ``SERVICE`` , Amazon MWAA will create and manage the required VPC endpoints in your VPC. If set to ``CUSTOMER`` , you must create, and manage, the VPC endpoints in your VPC.
         :param environment_class: The environment class type. Valid values: ``mw1.small`` , ``mw1.medium`` , ``mw1.large`` . To learn more, see `Amazon MWAA environment class <https://docs.aws.amazon.com/mwaa/latest/userguide/environment-class.html>`_ .
@@ -1316,7 +1316,7 @@ class CfnEnvironmentProps:
 
         If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect.
 
-        *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` (latest)
+        *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` | ``2.8.1`` | ``2.9.2`` (latest)
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion
         '''

aws_cdk/aws_pipes/__init__.py

@@ -6850,7 +6850,7 @@ class CfnPipe(
         ) -> None:
             '''This structure specifies the VPC subnets and security groups for the stream, and whether a public IP address is to be used.
 
-            :param security_group: Specifies the security groups associated with the stream. These security groups must all be in the same VPC. You can specify as many as five security groups. If you do not specify a security group, the default security group for the VPC is used.
+            :param security_group: Specifies the security groups associated with the stream. These security groups must all be in the same VPC. You can specify as many as five security groups.
             :param subnets: Specifies the subnets associated with the stream. These subnets must all be in the same VPC. You can specify as many as 16 subnets.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pipes-pipe-selfmanagedkafkaaccessconfigurationvpc.html
@@ -6881,7 +6881,7 @@ class CfnPipe(
         def security_group(self) -> typing.Optional[typing.List[builtins.str]]:
             '''Specifies the security groups associated with the stream.
 
-            These security groups must all be in the same VPC. You can specify as many as five security groups. If you do not specify a security group, the default security group for the VPC is used.
+            These security groups must all be in the same VPC. You can specify as many as five security groups.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pipes-pipe-selfmanagedkafkaaccessconfigurationvpc.html#cfn-pipes-pipe-selfmanagedkafkaaccessconfigurationvpc-securitygroup
             '''

aws_cdk/aws_qbusiness/__init__.py

@@ -756,7 +756,7 @@ class CfnDataSource(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param application_id: The identifier of the Amazon Q Business application the data source will be attached to.
-        :param configuration: Configuration information to connect to your data source repository. For configuration templates for your specific data source, see `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ .
+        :param configuration: Configuration information to connect your data source repository to Amazon Q Business. Use this parameter to provide a JSON schema with configuration information specific to your data source connector. Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas: - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_ You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice. - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
         :param display_name: The name of the Amazon Q Business data source.
         :param index_id: The identifier of the index the data source is attached to.
         :param description: A description for the data source connector.
@@ -896,7 +896,7 @@ class CfnDataSource(
     @builtins.property
     @jsii.member(jsii_name="configuration")
     def configuration(self) -> typing.Any:
-        '''Configuration information to connect to your data source repository.'''
+        '''Configuration information to connect your data source repository to Amazon Q Business.'''
         return typing.cast(typing.Any, jsii.get(self, "configuration"))
 
     @configuration.setter
@@ -1876,7 +1876,7 @@ class CfnDataSourceProps:
         '''Properties for defining a ``CfnDataSource``.
 
         :param application_id: The identifier of the Amazon Q Business application the data source will be attached to.
-        :param configuration: Configuration information to connect to your data source repository. For configuration templates for your specific data source, see `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ .
+        :param configuration: Configuration information to connect your data source repository to Amazon Q Business. Use this parameter to provide a JSON schema with configuration information specific to your data source connector. Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas: - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_ You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice. - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
         :param display_name: The name of the Amazon Q Business data source.
         :param index_id: The identifier of the index the data source is attached to.
         :param description: A description for the data source connector.
@@ -2023,9 +2023,19 @@ class CfnDataSourceProps:
 
     @builtins.property
     def configuration(self) -> typing.Any:
-        '''Configuration information to connect to your data source repository.
+        '''Configuration information to connect your data source repository to Amazon Q Business.
 
-        For configuration templates for your specific data source, see `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ .
+        Use this parameter to provide a JSON schema with configuration information specific to your data source connector.
+
+        Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas:
+
+        - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_
+        - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_
+
+        You can find configuration templates for your specific data source using the following steps:
+
+        - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice.
+        - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-datasource.html#cfn-qbusiness-datasource-configuration
         '''
@@ -4493,7 +4503,7 @@ class CfnWebExperience(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param application_id: The identifier of the Amazon Q Business web experience.
-        :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience.
+        :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience. .. epigraph:: You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
         :param sample_prompts_control_mode: Determines whether sample prompts are enabled in the web experience for an end user.
         :param subtitle: A subtitle to personalize your Amazon Q Business web experience.
         :param tags: A list of key-value pairs that identify or categorize your Amazon Q Business web experience. You can also use tags to help control access to the web experience. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
@@ -4733,7 +4743,7 @@ class CfnWebExperienceProps:
         '''Properties for defining a ``CfnWebExperience``.
 
         :param application_id: The identifier of the Amazon Q Business web experience.
-        :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience.
+        :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience. .. epigraph:: You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
         :param sample_prompts_control_mode: Determines whether sample prompts are enabled in the web experience for an end user.
         :param subtitle: A subtitle to personalize your Amazon Q Business web experience.
         :param tags: A list of key-value pairs that identify or categorize your Amazon Q Business web experience. You can also use tags to help control access to the web experience. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
@@ -4803,6 +4813,10 @@ class CfnWebExperienceProps:
     def role_arn(self) -> typing.Optional[builtins.str]:
         '''The Amazon Resource Name (ARN) of the service role attached to your web experience.
 
+        .. epigraph::
+
+           You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-webexperience.html#cfn-qbusiness-webexperience-rolearn
         '''
         result = self._values.get("role_arn")