aws-cdk-lib 2.150.0__py3-none-any.whl → 2.151.1__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -2399,6 +2399,8 @@ instance_profile = iam.InstanceProfile(self, "InstanceProfile",
 )
 
 template = ec2.LaunchTemplate(self, "LaunchTemplate",
+    launch_template_name="MyTemplateV1",
+    version_description="This is my v1 template",
     machine_image=ec2.MachineImage.latest_amazon_linux2023(),
     security_group=ec2.SecurityGroup(self, "LaunchTemplateSG",
         vpc=vpc
@@ -16924,7 +16926,7 @@ class CfnIPAMPool(
         :param auto_import: If selected, IPAM will continuously look for resources within the CIDR range of this pool and automatically import them as allocations into your IPAM. The CIDRs that will be allocated for these resources must not already be allocated to other resources in order for the import to succeed. IPAM will import a CIDR regardless of its compliance with the pool's allocation rules, so a resource might be imported and subsequently marked as noncompliant. If IPAM discovers multiple CIDRs that overlap, IPAM will import the largest CIDR only. If IPAM discovers multiple CIDRs with matching CIDRs, IPAM will randomly import one of them only. A locale must be set on the pool for this feature to work.
         :param aws_service: Limits which service in AWS that the pool can be used in. "ec2", for example, allows users to use space for Elastic IP addresses and VPCs.
         :param description: The description of the IPAM pool.
-        :param locale: The locale of the IPAM pool. In IPAM, the locale is the AWS Region where you want to make an IPAM pool available for allocations. Only resources in the same Region as the locale of the pool can get IP address allocations from the pool. You can only allocate a CIDR for a VPC, for example, from an IPAM pool that shares a locale with the VPC’s Region. Note that once you choose a Locale for a pool, you cannot modify it. If you choose an AWS Region for locale that has not been configured as an operating Region for the IPAM, you'll get an error.
+        :param locale: The locale of the IPAM pool. The locale for the pool should be one of the following: - An AWS Region where you want this IPAM pool to be available for allocations. - The network border group for an AWS Local Zone where you want this IPAM pool to be available for allocations ( `supported Local Zones <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html#byoip-zone-avail>`_ ). This option is only available for IPAM IPv4 pools in the public scope. If you choose an AWS Region for locale that has not been configured as an operating Region for the IPAM, you'll get an error.
         :param provisioned_cidrs: Information about the CIDRs provisioned to an IPAM pool.
         :param public_ip_source: The IP address source for pools in the public scope. Only used for provisioning IP address CIDRs to pools in the public scope. Default is ``BYOIP`` . For more information, see `Create IPv6 pools <https://docs.aws.amazon.com//vpc/latest/ipam/intro-create-ipv6-pools.html>`_ in the *Amazon VPC IPAM User Guide* . By default, you can add only one Amazon-provided IPv6 CIDR block to a top-level IPv6 pool. For information on increasing the default limit, see `Quotas for your IPAM <https://docs.aws.amazon.com//vpc/latest/ipam/quotas-ipam.html>`_ in the *Amazon VPC IPAM User Guide* .
         :param publicly_advertisable: Determines if a pool is publicly advertisable. This option is not available for pools with AddressFamily set to ``ipv4`` .
@@ -17777,7 +17779,7 @@ class CfnIPAMPoolProps:
         :param auto_import: If selected, IPAM will continuously look for resources within the CIDR range of this pool and automatically import them as allocations into your IPAM. The CIDRs that will be allocated for these resources must not already be allocated to other resources in order for the import to succeed. IPAM will import a CIDR regardless of its compliance with the pool's allocation rules, so a resource might be imported and subsequently marked as noncompliant. If IPAM discovers multiple CIDRs that overlap, IPAM will import the largest CIDR only. If IPAM discovers multiple CIDRs with matching CIDRs, IPAM will randomly import one of them only. A locale must be set on the pool for this feature to work.
         :param aws_service: Limits which service in AWS that the pool can be used in. "ec2", for example, allows users to use space for Elastic IP addresses and VPCs.
         :param description: The description of the IPAM pool.
-        :param locale: The locale of the IPAM pool. In IPAM, the locale is the AWS Region where you want to make an IPAM pool available for allocations. Only resources in the same Region as the locale of the pool can get IP address allocations from the pool. You can only allocate a CIDR for a VPC, for example, from an IPAM pool that shares a locale with the VPC’s Region. Note that once you choose a Locale for a pool, you cannot modify it. If you choose an AWS Region for locale that has not been configured as an operating Region for the IPAM, you'll get an error.
+        :param locale: The locale of the IPAM pool. The locale for the pool should be one of the following: - An AWS Region where you want this IPAM pool to be available for allocations. - The network border group for an AWS Local Zone where you want this IPAM pool to be available for allocations ( `supported Local Zones <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html#byoip-zone-avail>`_ ). This option is only available for IPAM IPv4 pools in the public scope. If you choose an AWS Region for locale that has not been configured as an operating Region for the IPAM, you'll get an error.
         :param provisioned_cidrs: Information about the CIDRs provisioned to an IPAM pool.
         :param public_ip_source: The IP address source for pools in the public scope. Only used for provisioning IP address CIDRs to pools in the public scope. Default is ``BYOIP`` . For more information, see `Create IPv6 pools <https://docs.aws.amazon.com//vpc/latest/ipam/intro-create-ipv6-pools.html>`_ in the *Amazon VPC IPAM User Guide* . By default, you can add only one Amazon-provided IPv6 CIDR block to a top-level IPv6 pool. For information on increasing the default limit, see `Quotas for your IPAM <https://docs.aws.amazon.com//vpc/latest/ipam/quotas-ipam.html>`_ in the *Amazon VPC IPAM User Guide* .
         :param publicly_advertisable: Determines if a pool is publicly advertisable. This option is not available for pools with AddressFamily set to ``ipv4`` .
@@ -17984,7 +17986,12 @@ class CfnIPAMPoolProps:
     def locale(self) -> typing.Optional[builtins.str]:
         '''The locale of the IPAM pool.
 
-        In IPAM, the locale is the AWS Region where you want to make an IPAM pool available for allocations. Only resources in the same Region as the locale of the pool can get IP address allocations from the pool. You can only allocate a CIDR for a VPC, for example, from an IPAM pool that shares a locale with the VPC’s Region. Note that once you choose a Locale for a pool, you cannot modify it. If you choose an AWS Region for locale that has not been configured as an operating Region for the IPAM, you'll get an error.
+        The locale for the pool should be one of the following:
+
+        - An AWS Region where you want this IPAM pool to be available for allocations.
+        - The network border group for an AWS Local Zone where you want this IPAM pool to be available for allocations ( `supported Local Zones <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html#byoip-zone-avail>`_ ). This option is only available for IPAM IPv4 pools in the public scope.
+
+        If you choose an AWS Region for locale that has not been configured as an operating Region for the IPAM, you'll get an error.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipampool.html#cfn-ec2-ipampool-locale
         '''
@@ -76628,6 +76635,7 @@ class LaunchTemplate(
         security_group: typing.Optional[ISecurityGroup] = None,
         spot_options: typing.Optional[typing.Union["LaunchTemplateSpotOptions", typing.Dict[builtins.str, typing.Any]]] = None,
         user_data: typing.Optional["UserData"] = None,
+        version_description: typing.Optional[builtins.str] = None,
     ) -> None:
         '''
         :param scope: -
@@ -76657,6 +76665,7 @@ class LaunchTemplate(
         :param security_group: Security group to assign to instances created with the launch template. Default: No security group is assigned.
         :param spot_options: If this property is defined, then the Launch Template's InstanceMarketOptions will be set to use Spot instances, and the options for the Spot instances will be as defined. Default: - Instance launched with this template will not be spot instances.
         :param user_data: The AMI that will be used by instances. Default: - This Launch Template creates a UserData based on the type of provided machineImage; no UserData is created if a machineImage is not provided
+        :param version_description: A description for the first version of the launch template. The version description must be maximum 255 characters long. Default: - No description
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__544aef11081ec87047935491f75a3d5bc9d5075de77f96969bd2ffd1a0d78cc9)
@@ -76688,6 +76697,7 @@ class LaunchTemplate(
             security_group=security_group,
             spot_options=spot_options,
             user_data=user_data,
+            version_description=version_description,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -76996,6 +77006,7 @@ class LaunchTemplateHttpTokens(enum.Enum):
         "security_group": "securityGroup",
         "spot_options": "spotOptions",
         "user_data": "userData",
+        "version_description": "versionDescription",
     },
 )
 class LaunchTemplateProps:
@@ -77027,6 +77038,7 @@ class LaunchTemplateProps:
         security_group: typing.Optional[ISecurityGroup] = None,
         spot_options: typing.Optional[typing.Union["LaunchTemplateSpotOptions", typing.Dict[builtins.str, typing.Any]]] = None,
         user_data: typing.Optional["UserData"] = None,
+        version_description: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties of a LaunchTemplate.
 
@@ -77055,6 +77067,7 @@ class LaunchTemplateProps:
         :param security_group: Security group to assign to instances created with the launch template. Default: No security group is assigned.
         :param spot_options: If this property is defined, then the Launch Template's InstanceMarketOptions will be set to use Spot instances, and the options for the Spot instances will be as defined. Default: - Instance launched with this template will not be spot instances.
         :param user_data: The AMI that will be used by instances. Default: - This Launch Template creates a UserData based on the type of provided machineImage; no UserData is created if a machineImage is not provided
+        :param version_description: A description for the first version of the launch template. The version description must be maximum 255 characters long. Default: - No description
 
         :exampleMetadata: infused
 
@@ -77106,6 +77119,7 @@ class LaunchTemplateProps:
             check_type(argname="argument security_group", value=security_group, expected_type=type_hints["security_group"])
             check_type(argname="argument spot_options", value=spot_options, expected_type=type_hints["spot_options"])
             check_type(argname="argument user_data", value=user_data, expected_type=type_hints["user_data"])
+            check_type(argname="argument version_description", value=version_description, expected_type=type_hints["version_description"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if associate_public_ip_address is not None:
             self._values["associate_public_ip_address"] = associate_public_ip_address
@@ -77157,6 +77171,8 @@ class LaunchTemplateProps:
             self._values["spot_options"] = spot_options
         if user_data is not None:
             self._values["user_data"] = user_data
+        if version_description is not None:
+            self._values["version_description"] = version_description
 
     @builtins.property
     def associate_public_ip_address(self) -> typing.Optional[builtins.bool]:
@@ -77441,6 +77457,19 @@ class LaunchTemplateProps:
         result = self._values.get("user_data")
         return typing.cast(typing.Optional["UserData"], result)
 
+    @builtins.property
+    def version_description(self) -> typing.Optional[builtins.str]:
+        '''A description for the first version of the launch template.
+
+        The version description must be maximum 255 characters long.
+
+        :default: - No description
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#cfn-ec2-launchtemplate-versiondescription
+        '''
+        result = self._values.get("version_description")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -77984,6 +78013,72 @@ class LogFormat(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_ec2.LogForma
         '''The destination port of the traffic.'''
         return typing.cast("LogFormat", jsii.sget(cls, "DST_PORT"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_CLUSTER_ARN")
+    def ECS_CLUSTER_ARN(cls) -> "LogFormat":
+        '''AWS Resource Name (ARN) of the ECS cluster if the traffic is from a running ECS task.'''
+        return typing.cast("LogFormat", jsii.sget(cls, "ECS_CLUSTER_ARN"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_CLUSTER_NAME")
+    def ECS_CLUSTER_NAME(cls) -> "LogFormat":
+        '''Name of the ECS cluster if the traffic is from a running ECS task.'''
+        return typing.cast("LogFormat", jsii.sget(cls, "ECS_CLUSTER_NAME"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_CONTAINER_ID")
+    def ECS_CONTAINER_ID(cls) -> "LogFormat":
+        '''Docker runtime ID of the container if the traffic is from a running ECS task.
+
+        If there is one container or more in the ECS task, this will be the docker runtime ID of the first container.
+        '''
+        return typing.cast("LogFormat", jsii.sget(cls, "ECS_CONTAINER_ID"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_CONTAINER_INSTANCE_ARN")
+    def ECS_CONTAINER_INSTANCE_ARN(cls) -> "LogFormat":
+        '''ARN of the ECS container instance if the traffic is from a running ECS task on an EC2 instance.'''
+        return typing.cast("LogFormat", jsii.sget(cls, "ECS_CONTAINER_INSTANCE_ARN"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_CONTAINER_INSTANCE_ID")
+    def ECS_CONTAINER_INSTANCE_ID(cls) -> "LogFormat":
+        '''ID of the ECS container instance if the traffic is from a running ECS task on an EC2 instance.'''
+        return typing.cast("LogFormat", jsii.sget(cls, "ECS_CONTAINER_INSTANCE_ID"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_SECOND_CONTAINER_ID")
+    def ECS_SECOND_CONTAINER_ID(cls) -> "LogFormat":
+        '''Docker runtime ID of the container if the traffic is from a running ECS task.
+
+        If there is more than one container in the ECS task, this will be the Docker runtime ID of the second container.
+        '''
+        return typing.cast("LogFormat", jsii.sget(cls, "ECS_SECOND_CONTAINER_ID"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_SERVICE_NAME")
+    def ECS_SERVICE_NAME(cls) -> "LogFormat":
+        '''Name of the ECS service if the traffic is from a running ECS task and the ECS task is started by an ECS service.'''
+        return typing.cast("LogFormat", jsii.sget(cls, "ECS_SERVICE_NAME"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_TASK_ARN")
+    def ECS_TASK_ARN(cls) -> "LogFormat":
+        '''ARN of the ECS task if the traffic is from a running ECS task.'''
+        return typing.cast("LogFormat", jsii.sget(cls, "ECS_TASK_ARN"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_TASK_DEFINITION_ARN")
+    def ECS_TASK_DEFINITION_ARN(cls) -> "LogFormat":
+        '''ARN of the ECS task definition if the traffic is from a running ECS task.'''
+        return typing.cast("LogFormat", jsii.sget(cls, "ECS_TASK_DEFINITION_ARN"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_TASK_ID")
+    def ECS_TASK_ID(cls) -> "LogFormat":
+        '''ID of the ECS task if the traffic is from a running ECS task.'''
+        return typing.cast("LogFormat", jsii.sget(cls, "ECS_TASK_ID"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="END_TIMESTAMP")
     def END_TIMESTAMP(cls) -> "LogFormat":
@@ -91953,6 +92048,80 @@ class MultipartUserData(
         return typing.cast(builtins.str, jsii.invoke(self, "render", []))
 
 
+class NatGatewayProvider(
+    NatProvider,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_ec2.NatGatewayProvider",
+):
+    '''Provider for NAT Gateways.
+
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_ec2 as ec2
+        
+        nat_gateway_provider = ec2.NatGatewayProvider(
+            eip_allocation_ids=["eipAllocationIds"]
+        )
+    '''
+
+    def __init__(
+        self,
+        *,
+        eip_allocation_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
+    ) -> None:
+        '''
+        :param eip_allocation_ids: EIP allocation IDs for the NAT gateways. Default: - No fixed EIPs allocated for the NAT gateways
+        '''
+        props = NatGatewayProps(eip_allocation_ids=eip_allocation_ids)
+
+        jsii.create(self.__class__, self, [props])
+
+    @jsii.member(jsii_name="configureNat")
+    def configure_nat(
+        self,
+        *,
+        nat_subnets: typing.Sequence["PublicSubnet"],
+        private_subnets: typing.Sequence["PrivateSubnet"],
+        vpc: Vpc,
+    ) -> None:
+        '''Called by the VPC to configure NAT.
+
+        Don't call this directly, the VPC will call it automatically.
+
+        :param nat_subnets: The public subnets where the NAT providers need to be placed.
+        :param private_subnets: The private subnets that need to route through the NAT providers. There may be more private subnets than public subnets with NAT providers.
+        :param vpc: The VPC we're configuring NAT for.
+        '''
+        options = ConfigureNatOptions(
+            nat_subnets=nat_subnets, private_subnets=private_subnets, vpc=vpc
+        )
+
+        return typing.cast(None, jsii.invoke(self, "configureNat", [options]))
+
+    @jsii.member(jsii_name="configureSubnet")
+    def configure_subnet(self, subnet: "PrivateSubnet") -> None:
+        '''Configures subnet with the gateway.
+
+        Don't call this directly, the VPC will call it automatically.
+
+        :param subnet: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2c352330578bedc14b307b90db4cdd21ccfc59ed0e509c561759015133bdfac9)
+            check_type(argname="argument subnet", value=subnet, expected_type=type_hints["subnet"])
+        return typing.cast(None, jsii.invoke(self, "configureSubnet", [subnet]))
+
+    @builtins.property
+    @jsii.member(jsii_name="configuredGateways")
+    def configured_gateways(self) -> typing.List[GatewayConfig]:
+        '''Return list of gateways spawned by the provider.'''
+        return typing.cast(typing.List[GatewayConfig], jsii.get(self, "configuredGateways"))
+
+
 @jsii.implements(IConnectable)
 class NatInstanceProvider(
     NatProvider,
@@ -94356,6 +94525,7 @@ __all__ = [
     "MultipartUserDataOptions",
     "NamedPackageOptions",
     "NatGatewayProps",
+    "NatGatewayProvider",
     "NatInstanceImage",
     "NatInstanceProps",
     "NatInstanceProvider",
@@ -104620,6 +104790,7 @@ def _typecheckingstub__544aef11081ec87047935491f75a3d5bc9d5075de77f96969bd2ffd1a
     security_group: typing.Optional[ISecurityGroup] = None,
     spot_options: typing.Optional[typing.Union[LaunchTemplateSpotOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     user_data: typing.Optional[UserData] = None,
+    version_description: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -104677,6 +104848,7 @@ def _typecheckingstub__e2ebb1bf0fbb2f9e894169a610cd9fb7cc3f827d34d3a10351bd2f517
     security_group: typing.Optional[ISecurityGroup] = None,
     spot_options: typing.Optional[typing.Union[LaunchTemplateSpotOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     user_data: typing.Optional[UserData] = None,
+    version_description: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -106353,6 +106525,12 @@ def _typecheckingstub__d7099fb74981d61c8dfdb2cc1b9c36254deb6f003b7e88f104b7a0a35
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__2c352330578bedc14b307b90db4cdd21ccfc59ed0e509c561759015133bdfac9(
+    subnet: PrivateSubnet,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__53772cd5bc705ccbd691b4063a85c8427a71a5c9fc29d3af5c0a334c7df3f57a(
     subnet: PrivateSubnet,
 ) -> None:

aws_cdk/aws_ecs/__init__.py

@@ -21438,7 +21438,7 @@ class ContainerImage(
         '''Reference an image in an ECR repository.
 
         :param repository: -
-        :param tag: -
+        :param tag: If you don't specify this parameter, ``latest`` is used as default.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__c7678d92c566cb839a4e76a199bb9ba47a55910493c94a6a2568984d1b6bd374)
@@ -30343,6 +30343,7 @@ class ListenerConfig(
         listener: _ApplicationListener_e0620bf5,
         *,
         deregistration_delay: typing.Optional[_Duration_4839e8c3] = None,
+        enable_anomaly_mitigation: typing.Optional[builtins.bool] = None,
         health_check: typing.Optional[typing.Union[_HealthCheck_6f291880, typing.Dict[builtins.str, typing.Any]]] = None,
         load_balancing_algorithm_type: typing.Optional[_TargetGroupLoadBalancingAlgorithmType_ed070d6d] = None,
         port: typing.Optional[jsii.Number] = None,
@@ -30360,6 +30361,7 @@ class ListenerConfig(
 
         :param listener: -
         :param deregistration_delay: The amount of time for Elastic Load Balancing to wait before deregistering a target. The range is 0-3600 seconds. Default: Duration.minutes(5)
+        :param enable_anomaly_mitigation: Indicates whether anomaly mitigation is enabled. Only available when ``loadBalancingAlgorithmType`` is ``TargetGroupLoadBalancingAlgorithmType.WEIGHTED_RANDOM`` Default: false
         :param health_check: Health check configuration. Default: - The default value for each property in this configuration varies depending on the target.
         :param load_balancing_algorithm_type: The load balancing algorithm to select targets for routing requests. Default: round_robin.
         :param port: The port on which the listener listens for requests. Default: Determined from protocol if known
@@ -30378,6 +30380,7 @@ class ListenerConfig(
             check_type(argname="argument listener", value=listener, expected_type=type_hints["listener"])
         props = _AddApplicationTargetsProps_76c7d190(
             deregistration_delay=deregistration_delay,
+            enable_anomaly_mitigation=enable_anomaly_mitigation,
             health_check=health_check,
             load_balancing_algorithm_type=load_balancing_algorithm_type,
             port=port,
@@ -43740,6 +43743,7 @@ def _typecheckingstub__49e49c7f39199be5ac444df54afd1bd33a772db0f97806964e1456680
     listener: _ApplicationListener_e0620bf5,
     *,
     deregistration_delay: typing.Optional[_Duration_4839e8c3] = None,
+    enable_anomaly_mitigation: typing.Optional[builtins.bool] = None,
     health_check: typing.Optional[typing.Union[_HealthCheck_6f291880, typing.Dict[builtins.str, typing.Any]]] = None,
     load_balancing_algorithm_type: typing.Optional[_TargetGroupLoadBalancingAlgorithmType_ed070d6d] = None,
     port: typing.Optional[jsii.Number] = None,