aws-cdk-lib 2.150.0__py3-none-any.whl → 2.151.1__py3-none-any.whl

aws_cdk/aws_events/__init__.py

@@ -206,7 +206,8 @@ It is possible to archive all or some events sent to an event bus. It is then po
 
 ```python
 bus = events.EventBus(self, "bus",
-    event_bus_name="MyCustomEventBus"
+    event_bus_name="MyCustomEventBus",
+    description="MyCustomEventBus"
 )
 
 bus.archive("MyArchive",
@@ -235,6 +236,25 @@ event_bus = events.EventBus.from_event_bus_arn(self, "ImportedEventBus", "arn:aw
 # now you can just call methods on the eventbus
 event_bus.grant_put_events_to(lambda_function)
 ```
+
+## Use a customer managed key
+
+To use a customer managed key for events on the event bus, use the `kmsKey` attribute.
+
+```python
+import aws_cdk.aws_kms as kms
+
+# kms_key: kms.IKey
+
+
+events.EventBus(self, "Bus",
+    kms_key=kms_key
+)
+```
+
+**Note**: Archives and schema discovery are not supported for event buses encrypted using a customer managed key.
+To enable archives or schema discovery on an event bus, choose to use an AWS owned key.
+For more information, see [KMS key options for event bus encryption](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-encryption-at-rest-key-options.html).
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)
@@ -275,6 +295,7 @@ from ..aws_iam import (
     IRole as _IRole_235f5d8e,
     PolicyStatement as _PolicyStatement_0fe33853,
 )
+from ..aws_kms import IKey as _IKey_5f11635f
 
 
 @jsii.data_type(
@@ -720,7 +741,8 @@ class BaseArchiveProps:
         Example::
 
             bus = events.EventBus(self, "bus",
-                event_bus_name="MyCustomEventBus"
+                event_bus_name="MyCustomEventBus",
+                description="MyCustomEventBus"
             )
             
             bus.archive("MyArchive",
@@ -8164,21 +8186,27 @@ class EventBusPolicyProps:
     jsii_type="aws-cdk-lib.aws_events.EventBusProps",
     jsii_struct_bases=[],
     name_mapping={
+        "description": "description",
         "event_bus_name": "eventBusName",
         "event_source_name": "eventSourceName",
+        "kms_key": "kmsKey",
     },
 )
 class EventBusProps:
     def __init__(
         self,
         *,
+        description: typing.Optional[builtins.str] = None,
         event_bus_name: typing.Optional[builtins.str] = None,
         event_source_name: typing.Optional[builtins.str] = None,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
     ) -> None:
         '''Properties to define an event bus.
 
+        :param description: The event bus description. The description can be up to 512 characters long. Default: - no description
         :param event_bus_name: The name of the event bus you are creating Note: If 'eventSourceName' is passed in, you cannot set this. Default: - automatically generated name
         :param event_source_name: The partner event source to associate with this event bus resource Note: If 'eventBusName' is passed in, you cannot set this. Default: - no partner event source
+        :param kms_key: The customer managed key that encrypt events on this event bus. Default: - Use an AWS managed key
 
         :exampleMetadata: infused
 
@@ -8187,31 +8215,49 @@ class EventBusProps:
             import aws_cdk.aws_events as events
             
             
-            event_bus = events.EventBus(self, "EventBus",
-                event_bus_name="DomainEvents"
-            )
-            
-            event_entry = targets.EventBridgePutEventsEntry(
-                event_bus=event_bus,
-                source="PetService",
-                detail=ScheduleTargetInput.from_object({"Name": "Fluffy"}),
-                detail_type="🐶"
+            my_event_bus = events.EventBus(self, "EventBus",
+                event_bus_name="MyEventBus1"
             )
             
-            Schedule(self, "Schedule",
-                schedule=ScheduleExpression.rate(Duration.hours(1)),
-                target=targets.EventBridgePutEvents(event_entry)
+            tasks.EventBridgePutEvents(self, "Send an event to EventBridge",
+                entries=[tasks.EventBridgePutEventsEntry(
+                    detail=sfn.TaskInput.from_object({
+                        "Message": "Hello from Step Functions!"
+                    }),
+                    event_bus=my_event_bus,
+                    detail_type="MessageFromStepFunctions",
+                    source="step.functions"
+                )]
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__298a8c4285f4e039344007a0deb097d820ddec52c59d396d7a8faa1aa9c8b743)
+            check_type(argname="argument description", value=description, expected_type=type_hints["description"])
             check_type(argname="argument event_bus_name", value=event_bus_name, expected_type=type_hints["event_bus_name"])
             check_type(argname="argument event_source_name", value=event_source_name, expected_type=type_hints["event_source_name"])
+            check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if description is not None:
+            self._values["description"] = description
         if event_bus_name is not None:
             self._values["event_bus_name"] = event_bus_name
         if event_source_name is not None:
             self._values["event_source_name"] = event_source_name
+        if kms_key is not None:
+            self._values["kms_key"] = kms_key
+
+    @builtins.property
+    def description(self) -> typing.Optional[builtins.str]:
+        '''The event bus description.
+
+        The description can be up to 512 characters long.
+
+        :default: - no description
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbus.html#cfn-events-eventbus-description
+        '''
+        result = self._values.get("description")
+        return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
     def event_bus_name(self) -> typing.Optional[builtins.str]:
@@ -8235,6 +8281,15 @@ class EventBusProps:
         result = self._values.get("event_source_name")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''The customer managed key that encrypt events on this event bus.
+
+        :default: - Use an AWS managed key
+        '''
+        result = self._values.get("kms_key")
+        return typing.cast(typing.Optional[_IKey_5f11635f], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -11331,7 +11386,8 @@ class EventBus(
     Example::
 
         bus = events.EventBus(self, "bus",
-            event_bus_name="MyCustomEventBus"
+            event_bus_name="MyCustomEventBus",
+            description="MyCustomEventBus"
         )
         
         bus.archive("MyArchive",
@@ -11349,21 +11405,28 @@ class EventBus(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
+        description: typing.Optional[builtins.str] = None,
         event_bus_name: typing.Optional[builtins.str] = None,
         event_source_name: typing.Optional[builtins.str] = None,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
     ) -> None:
         '''
         :param scope: -
         :param id: -
+        :param description: The event bus description. The description can be up to 512 characters long. Default: - no description
         :param event_bus_name: The name of the event bus you are creating Note: If 'eventSourceName' is passed in, you cannot set this. Default: - automatically generated name
         :param event_source_name: The partner event source to associate with this event bus resource Note: If 'eventBusName' is passed in, you cannot set this. Default: - no partner event source
+        :param kms_key: The customer managed key that encrypt events on this event bus. Default: - Use an AWS managed key
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__95a51d19a0503daf5e05f08738b44a6276eaa23c373c99735de37b1247783380)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = EventBusProps(
-            event_bus_name=event_bus_name, event_source_name=event_source_name
+            description=description,
+            event_bus_name=event_bus_name,
+            event_source_name=event_source_name,
+            kms_key=kms_key,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -12566,8 +12629,10 @@ def _typecheckingstub__30683f3da3ccc9235ea663f165631b4ac57c807c1878517c5051bcd78
 
 def _typecheckingstub__298a8c4285f4e039344007a0deb097d820ddec52c59d396d7a8faa1aa9c8b743(
     *,
+    description: typing.Optional[builtins.str] = None,
     event_bus_name: typing.Optional[builtins.str] = None,
     event_source_name: typing.Optional[builtins.str] = None,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -12960,8 +13025,10 @@ def _typecheckingstub__95a51d19a0503daf5e05f08738b44a6276eaa23c373c99735de37b124
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
+    description: typing.Optional[builtins.str] = None,
     event_bus_name: typing.Optional[builtins.str] = None,
     event_source_name: typing.Optional[builtins.str] = None,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
 ) -> None:
     """Type checking stubs"""
     pass

aws_cdk/aws_iam/__init__.py

@@ -2383,8 +2383,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrAttachmentCount")
     def attr_attachment_count(self) -> jsii.Number:
-        '''The number of principal entities (users, groups, and roles) that the policy is attached to.
-
+        '''
         :cloudformationAttribute: AttachmentCount
         '''
         return typing.cast(jsii.Number, jsii.get(self, "attrAttachmentCount"))
@@ -2392,8 +2391,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrCreateDate")
     def attr_create_date(self) -> builtins.str:
-        '''The date and time, in `ISO 8601 date-time format <https://docs.aws.amazon.com/http://www.iso.org/iso/iso8601>`_ , when the policy was created.
-
+        '''
         :cloudformationAttribute: CreateDate
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrCreateDate"))
@@ -2401,10 +2399,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrDefaultVersionId")
     def attr_default_version_id(self) -> builtins.str:
-        '''The identifier for the version of the policy that is set as the default (operative) version.
-
-        For more information about policy versions, see `Versioning for managed policies <https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-versions.html>`_ in the *IAM User Guide* .
-
+        '''
         :cloudformationAttribute: DefaultVersionId
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrDefaultVersionId"))
@@ -2412,8 +2407,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrIsAttachable")
     def attr_is_attachable(self) -> _IResolvable_da3f097b:
-        '''Specifies whether the policy can be attached to an IAM user, group, or role.
-
+        '''
         :cloudformationAttribute: IsAttachable
         '''
         return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrIsAttachable"))
@@ -2421,10 +2415,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrPermissionsBoundaryUsageCount")
     def attr_permissions_boundary_usage_count(self) -> jsii.Number:
-        '''The number of entities (users and roles) for which the policy is used as the permissions boundary.
-
-        For more information about permissions boundaries, see `Permissions boundaries for IAM identities <https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html>`_ in the *IAM User Guide* .
-
+        '''
         :cloudformationAttribute: PermissionsBoundaryUsageCount
         '''
         return typing.cast(jsii.Number, jsii.get(self, "attrPermissionsBoundaryUsageCount"))
@@ -2440,10 +2431,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrPolicyId")
     def attr_policy_id(self) -> builtins.str:
-        '''The stable and unique string identifying the policy.
-
-        For more information about IDs, see `IAM identifiers <https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html>`_ in the *IAM User Guide* .
-
+        '''
         :cloudformationAttribute: PolicyId
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrPolicyId"))
@@ -2451,10 +2439,7 @@ class CfnManagedPolicy(
     @builtins.property
     @jsii.member(jsii_name="attrUpdateDate")
     def attr_update_date(self) -> builtins.str:
-        '''The date and time, in `ISO 8601 date-time format <https://docs.aws.amazon.com/http://www.iso.org/iso/iso8601>`_ , when the policy was last updated.
-
-        When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.
-
+        '''
         :cloudformationAttribute: UpdateDate
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrUpdateDate"))
@@ -2826,7 +2811,7 @@ class CfnOIDCProvider(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param thumbprint_list: A list of certificate thumbprints that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
+        :param thumbprint_list: A list of certificate thumbprints that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ . This property is optional. If it is not included, IAM will retrieve and use the top intermediate certificate authority (CA) thumbprint of the OpenID Connect identity provider server certificate.
         :param client_id_list: A list of client IDs (also known as audiences) that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
         :param tags: A list of tags that are attached to the specified IAM OIDC provider. The returned list of tags is sorted by tag key. For more information about tagging, see `Tagging IAM resources <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html>`_ in the *IAM User Guide* .
         :param url: The URL that the IAM OIDC provider resource object is associated with. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
@@ -2968,7 +2953,7 @@ class CfnOIDCProviderProps:
     ) -> None:
         '''Properties for defining a ``CfnOIDCProvider``.
 
-        :param thumbprint_list: A list of certificate thumbprints that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
+        :param thumbprint_list: A list of certificate thumbprints that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ . This property is optional. If it is not included, IAM will retrieve and use the top intermediate certificate authority (CA) thumbprint of the OpenID Connect identity provider server certificate.
         :param client_id_list: A list of client IDs (also known as audiences) that are associated with the specified IAM OIDC provider resource object. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
         :param tags: A list of tags that are attached to the specified IAM OIDC provider. The returned list of tags is sorted by tag key. For more information about tagging, see `Tagging IAM resources <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html>`_ in the *IAM User Guide* .
         :param url: The URL that the IAM OIDC provider resource object is associated with. For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
@@ -3016,6 +3001,8 @@ class CfnOIDCProviderProps:
 
         For more information, see `CreateOpenIDConnectProvider <https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html>`_ .
 
+        This property is optional. If it is not included, IAM will retrieve and use the top intermediate certificate authority (CA) thumbprint of the OpenID Connect identity provider server certificate.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-oidcprovider.html#cfn-iam-oidcprovider-thumbprintlist
         '''
         result = self._values.get("thumbprint_list")

aws_cdk/aws_iotsitewise/__init__.py

@@ -1502,7 +1502,7 @@ class CfnAssetModel(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param asset_model_name: A unique, friendly name for the asset model.
+        :param asset_model_name: A unique name for the asset model.
         :param asset_model_composite_models: The composite models that are part of this asset model. It groups properties (such as attributes, measurements, transforms, and metrics) and child composite models that model parts of your industrial equipment. Each composite model has a type that defines the properties that the composite model supports. Use composite models to define alarms on this asset model. .. epigraph:: When creating custom composite models, you need to use `CreateAssetModelCompositeModel <https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateAssetModelCompositeModel.html>`_ . For more information, see `Creating custom composite models (Components) <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/create-custom-composite-models.html>`_ in the *AWS IoT SiteWise User Guide* .
         :param asset_model_description: A description for the asset model.
         :param asset_model_external_id: The external ID of the asset model. For more information, see `Using external IDs <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/object-ids.html#external-ids>`_ in the *AWS IoT SiteWise User Guide* .
@@ -1590,7 +1590,7 @@ class CfnAssetModel(
     @builtins.property
     @jsii.member(jsii_name="assetModelName")
     def asset_model_name(self) -> builtins.str:
-        '''A unique, friendly name for the asset model.'''
+        '''A unique name for the asset model.'''
         return typing.cast(builtins.str, jsii.get(self, "assetModelName"))
 
     @asset_model_name.setter
@@ -3311,7 +3311,7 @@ class CfnAssetModelProps:
     ) -> None:
         '''Properties for defining a ``CfnAssetModel``.
 
-        :param asset_model_name: A unique, friendly name for the asset model.
+        :param asset_model_name: A unique name for the asset model.
         :param asset_model_composite_models: The composite models that are part of this asset model. It groups properties (such as attributes, measurements, transforms, and metrics) and child composite models that model parts of your industrial equipment. Each composite model has a type that defines the properties that the composite model supports. Use composite models to define alarms on this asset model. .. epigraph:: When creating custom composite models, you need to use `CreateAssetModelCompositeModel <https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateAssetModelCompositeModel.html>`_ . For more information, see `Creating custom composite models (Components) <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/create-custom-composite-models.html>`_ in the *AWS IoT SiteWise User Guide* .
         :param asset_model_description: A description for the asset model.
         :param asset_model_external_id: The external ID of the asset model. For more information, see `Using external IDs <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/object-ids.html#external-ids>`_ in the *AWS IoT SiteWise User Guide* .
@@ -3515,7 +3515,7 @@ class CfnAssetModelProps:
 
     @builtins.property
     def asset_model_name(self) -> builtins.str:
-        '''A unique, friendly name for the asset model.
+        '''A unique name for the asset model.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html#cfn-iotsitewise-assetmodel-assetmodelname
         '''
@@ -4195,7 +4195,7 @@ class CfnGateway(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param gateway_name: A unique, friendly name for the gateway.
+        :param gateway_name: A unique name for the gateway.
         :param gateway_platform: The gateway's platform. You can only specify one platform in a gateway.
         :param gateway_capability_summaries: A list of gateway capability summaries that each contain a namespace and status. Each gateway capability defines data sources for the gateway. To retrieve a capability configuration's definition, use `DescribeGatewayCapabilityConfiguration <https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeGatewayCapabilityConfiguration.html>`_ .
         :param tags: A list of key-value pairs that contain metadata for the gateway. For more information, see `Tagging your AWS IoT SiteWise resources <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/tag-resources.html>`_ in the *AWS IoT SiteWise User Guide* .
@@ -4266,7 +4266,7 @@ class CfnGateway(
     @builtins.property
     @jsii.member(jsii_name="gatewayName")
     def gateway_name(self) -> builtins.str:
-        '''A unique, friendly name for the gateway.'''
+        '''A unique name for the gateway.'''
         return typing.cast(builtins.str, jsii.get(self, "gatewayName"))
 
     @gateway_name.setter
@@ -4613,7 +4613,7 @@ class CfnGatewayProps:
     ) -> None:
         '''Properties for defining a ``CfnGateway``.
 
-        :param gateway_name: A unique, friendly name for the gateway.
+        :param gateway_name: A unique name for the gateway.
         :param gateway_platform: The gateway's platform. You can only specify one platform in a gateway.
         :param gateway_capability_summaries: A list of gateway capability summaries that each contain a namespace and status. Each gateway capability defines data sources for the gateway. To retrieve a capability configuration's definition, use `DescribeGatewayCapabilityConfiguration <https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeGatewayCapabilityConfiguration.html>`_ .
         :param tags: A list of key-value pairs that contain metadata for the gateway. For more information, see `Tagging your AWS IoT SiteWise resources <https://docs.aws.amazon.com/iot-sitewise/latest/userguide/tag-resources.html>`_ in the *AWS IoT SiteWise User Guide* .
@@ -4668,7 +4668,7 @@ class CfnGatewayProps:
 
     @builtins.property
     def gateway_name(self) -> builtins.str:
-        '''A unique, friendly name for the gateway.
+        '''A unique name for the gateway.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-gateway.html#cfn-iotsitewise-gateway-gatewayname
         '''

aws_cdk/aws_lambda/__init__.py

@@ -1594,6 +1594,8 @@ class AdotLambdaExecWrapper(enum.Enum):
     '''Wrapping streaming handlers (implementing RequestStreamHandler), enabling HTTP context propagation for HTTP requests.'''
     INSTRUMENT_HANDLER = "INSTRUMENT_HANDLER"
     '''Wrapping python lambda handlers see https://aws-otel.github.io/docs/getting-started/lambda/lambda-python.'''
+    SQS_HANDLER = "SQS_HANDLER"
+    '''Wrapping SQS-triggered function handlers (implementing RequestHandler).'''
 
 
 class AdotLambdaLayerGenericVersion(

aws_cdk/aws_mwaa/__init__.py

@@ -170,7 +170,7 @@ class CfnEnvironment(
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of your Amazon MWAA environment.
         :param airflow_configuration_options: A list of key-value pairs containing the Airflow configuration options for your environment. For example, ``core.default_timezone: utc`` . To learn more, see `Apache Airflow configuration options <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-env-variables.html>`_ .
-        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` (latest)
+        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` | ``2.8.1`` | ``2.9.2`` (latest)
         :param dag_s3_path: The relative path to the DAGs folder on your Amazon S3 bucket. For example, ``dags`` . To learn more, see `Adding or updating DAGs <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-folder.html>`_ .
         :param endpoint_management: Defines whether the VPC endpoints configured for the environment are created, and managed, by the customer or by Amazon MWAA. If set to ``SERVICE`` , Amazon MWAA will create and manage the required VPC endpoints in your VPC. If set to ``CUSTOMER`` , you must create, and manage, the VPC endpoints in your VPC.
         :param environment_class: The environment class type. Valid values: ``mw1.small`` , ``mw1.medium`` , ``mw1.large`` . To learn more, see `Amazon MWAA environment class <https://docs.aws.amazon.com/mwaa/latest/userguide/environment-class.html>`_ .
@@ -1113,7 +1113,7 @@ class CfnEnvironmentProps:
 
         :param name: The name of your Amazon MWAA environment.
         :param airflow_configuration_options: A list of key-value pairs containing the Airflow configuration options for your environment. For example, ``core.default_timezone: utc`` . To learn more, see `Apache Airflow configuration options <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-env-variables.html>`_ .
-        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` (latest)
+        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` | ``2.8.1`` | ``2.9.2`` (latest)
         :param dag_s3_path: The relative path to the DAGs folder on your Amazon S3 bucket. For example, ``dags`` . To learn more, see `Adding or updating DAGs <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-folder.html>`_ .
         :param endpoint_management: Defines whether the VPC endpoints configured for the environment are created, and managed, by the customer or by Amazon MWAA. If set to ``SERVICE`` , Amazon MWAA will create and manage the required VPC endpoints in your VPC. If set to ``CUSTOMER`` , you must create, and manage, the VPC endpoints in your VPC.
         :param environment_class: The environment class type. Valid values: ``mw1.small`` , ``mw1.medium`` , ``mw1.large`` . To learn more, see `Amazon MWAA environment class <https://docs.aws.amazon.com/mwaa/latest/userguide/environment-class.html>`_ .
@@ -1316,7 +1316,7 @@ class CfnEnvironmentProps:
 
         If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect.
 
-        *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` (latest)
+        *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` | ``2.8.1`` | ``2.9.2`` (latest)
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion
         '''

aws_cdk/aws_pipes/__init__.py

@@ -6850,7 +6850,7 @@ class CfnPipe(
         ) -> None:
             '''This structure specifies the VPC subnets and security groups for the stream, and whether a public IP address is to be used.
 
-            :param security_group: Specifies the security groups associated with the stream. These security groups must all be in the same VPC. You can specify as many as five security groups. If you do not specify a security group, the default security group for the VPC is used.
+            :param security_group: Specifies the security groups associated with the stream. These security groups must all be in the same VPC. You can specify as many as five security groups.
             :param subnets: Specifies the subnets associated with the stream. These subnets must all be in the same VPC. You can specify as many as 16 subnets.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pipes-pipe-selfmanagedkafkaaccessconfigurationvpc.html
@@ -6881,7 +6881,7 @@ class CfnPipe(
         def security_group(self) -> typing.Optional[typing.List[builtins.str]]:
             '''Specifies the security groups associated with the stream.
 
-            These security groups must all be in the same VPC. You can specify as many as five security groups. If you do not specify a security group, the default security group for the VPC is used.
+            These security groups must all be in the same VPC. You can specify as many as five security groups.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pipes-pipe-selfmanagedkafkaaccessconfigurationvpc.html#cfn-pipes-pipe-selfmanagedkafkaaccessconfigurationvpc-securitygroup
             '''