aws-cdk-lib 2.152.0__py3-none-any.whl → 2.154.0__py3-none-any.whl

aws_cdk/aws_securitylake/__init__.py

@@ -174,7 +174,7 @@ class CfnAwsLogSource(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ed09f296c9b906f7011ea796fce3b42122e1c0490eb544e941f5953a5b0f8403)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "dataLakeArn", value)
+        jsii.set(self, "dataLakeArn", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="sourceName")
@@ -187,7 +187,7 @@ class CfnAwsLogSource(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__786699bc5ed670115ad16fc2d5cab658ddb4c20d9afccc0010adb67c796143ba)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "sourceName", value)
+        jsii.set(self, "sourceName", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="sourceVersion")
@@ -200,7 +200,7 @@ class CfnAwsLogSource(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2369f0ca541c99625731d8a7db77fa2a9f1346eab63190644c2695d471ddda46)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "sourceVersion", value)
+        jsii.set(self, "sourceVersion", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="accounts")
@@ -213,7 +213,7 @@ class CfnAwsLogSource(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a1f564a49d096390f47538b02cc909d2927202e7d6b998b761aaf21810dcf11c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "accounts", value)
+        jsii.set(self, "accounts", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.data_type(
@@ -485,7 +485,7 @@ class CfnDataLake(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__12edf08ab82b633325fe7034b3424955ea7bff566dfa00928107723a5d0f6a72)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "encryptionConfiguration", value)
+        jsii.set(self, "encryptionConfiguration", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="lifecycleConfiguration")
@@ -503,7 +503,7 @@ class CfnDataLake(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__916659d1bcdf1d6d40de689f3b334b766e1a8fb681a493926742e61ce5ba40b7)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "lifecycleConfiguration", value)
+        jsii.set(self, "lifecycleConfiguration", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="metaStoreManagerRoleArn")
@@ -516,7 +516,7 @@ class CfnDataLake(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__23cd82335763114e4ff9c52f4ff2b4db4b4be68cc8f5b468e1325fa0e0e79558)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "metaStoreManagerRoleArn", value)
+        jsii.set(self, "metaStoreManagerRoleArn", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="replicationConfiguration")
@@ -534,7 +534,7 @@ class CfnDataLake(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__647257bd68002b29a89b3128d4883d0c748e98d2c70a5b154446993271225230)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "replicationConfiguration", value)
+        jsii.set(self, "replicationConfiguration", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tags")
@@ -547,7 +547,7 @@ class CfnDataLake(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__6654ce3b2fa02feedc8f03797f96ae7270d4bd79ef3c3791b522e8277fa3798c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tags", value)
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_securitylake.CfnDataLake.EncryptionConfigurationProperty",
@@ -1067,6 +1067,16 @@ class CfnSubscriber(
         cfn_subscriber = securitylake.CfnSubscriber(self, "MyCfnSubscriber",
             access_types=["accessTypes"],
             data_lake_arn="dataLakeArn",
+            sources=[securitylake.CfnSubscriber.SourceProperty(
+                aws_log_source=securitylake.CfnSubscriber.AwsLogSourceProperty(
+                    source_name="sourceName",
+                    source_version="sourceVersion"
+                ),
+                custom_log_source=securitylake.CfnSubscriber.CustomLogSourceProperty(
+                    source_name="sourceName",
+                    source_version="sourceVersion"
+                )
+            )],
             subscriber_identity=securitylake.CfnSubscriber.SubscriberIdentityProperty(
                 external_id="externalId",
                 principal="principal"
@@ -1089,6 +1099,7 @@ class CfnSubscriber(
         *,
         access_types: typing.Sequence[builtins.str],
         data_lake_arn: builtins.str,
+        sources: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSubscriber.SourceProperty", typing.Dict[builtins.str, typing.Any]]]]],
         subscriber_identity: typing.Union[_IResolvable_da3f097b, typing.Union["CfnSubscriber.SubscriberIdentityProperty", typing.Dict[builtins.str, typing.Any]]],
         subscriber_name: builtins.str,
         subscriber_description: typing.Optional[builtins.str] = None,
@@ -1099,6 +1110,7 @@ class CfnSubscriber(
         :param id: Construct identifier for this resource (unique in its scope).
         :param access_types: You can choose to notify subscribers of new objects with an Amazon Simple Queue Service (Amazon SQS) queue or through messaging to an HTTPS endpoint provided by the subscriber. Subscribers can consume data by directly querying AWS Lake Formation tables in your Amazon S3 bucket through services like Amazon Athena. This subscription type is defined as ``LAKEFORMATION`` .
         :param data_lake_arn: The Amazon Resource Name (ARN) used to create the data lake.
+        :param sources: Amazon Security Lake supports log and event collection for natively supported AWS-services . For more information, see the `Amazon Security Lake User Guide <https://docs.aws.amazon.com//security-lake/latest/userguide/source-management.html>`_ .
         :param subscriber_identity: The AWS identity used to access your data.
         :param subscriber_name: The name of your Amazon Security Lake subscriber account.
         :param subscriber_description: The subscriber descriptions for a subscriber account. The description for a subscriber includes ``subscriberName`` , ``accountID`` , ``externalID`` , and ``subscriberId`` .
@@ -1111,6 +1123,7 @@ class CfnSubscriber(
         props = CfnSubscriberProps(
             access_types=access_types,
             data_lake_arn=data_lake_arn,
+            sources=sources,
             subscriber_identity=subscriber_identity,
             subscriber_name=subscriber_name,
             subscriber_description=subscriber_description,
@@ -1216,7 +1229,7 @@ class CfnSubscriber(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3f5e7268ca27d6f9f4f7235ed5dc11031e3dcfecbb97acb334a181ffa62b0550)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "accessTypes", value)
+        jsii.set(self, "accessTypes", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="dataLakeArn")
@@ -1229,7 +1242,25 @@ class CfnSubscriber(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__6b6df05258f367a78b9fe1e83d93bbb4170db63eebfcfcaf47743e3795fdea19)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "dataLakeArn", value)
+        jsii.set(self, "dataLakeArn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="sources")
+    def sources(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.SourceProperty"]]]:
+        '''Amazon Security Lake supports log and event collection for natively supported AWS-services .'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.SourceProperty"]]], jsii.get(self, "sources"))
+
+    @sources.setter
+    def sources(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.SourceProperty"]]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__bc932de85d8e0823efeb32cd9962639ee0df5d9caf72a0cc1bd8a74abd3853f1)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "sources", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="subscriberIdentity")
@@ -1247,7 +1278,7 @@ class CfnSubscriber(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__844ac1bd9005c05fc49f39ac053da7c40f778e558a2e4cf96983161b114d88a7)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "subscriberIdentity", value)
+        jsii.set(self, "subscriberIdentity", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="subscriberName")
@@ -1260,7 +1291,7 @@ class CfnSubscriber(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__cd9beb9187d8345c4ae00d2ee6483cd5f3841d1801dffe9de561ed1934ddd965)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "subscriberName", value)
+        jsii.set(self, "subscriberName", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="subscriberDescription")
@@ -1273,7 +1304,7 @@ class CfnSubscriber(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3147cb4779ff5832faddc8bdeac62a5ff6db17ddc1eddee78b4f5ca463a0ed76)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "subscriberDescription", value)
+        jsii.set(self, "subscriberDescription", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tags")
@@ -1286,7 +1317,240 @@ class CfnSubscriber(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b8f06145c3b30c94dc03a8f547df3132c6f47f465dc815eb5282aab9542906c1)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tags", value)
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriber.AwsLogSourceProperty",
+        jsii_struct_bases=[],
+        name_mapping={"source_name": "sourceName", "source_version": "sourceVersion"},
+    )
+    class AwsLogSourceProperty:
+        def __init__(
+            self,
+            *,
+            source_name: typing.Optional[builtins.str] = None,
+            source_version: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Adds a natively supported AWS service as an Amazon Security Lake source.
+
+            Enables source types for member accounts in required AWS Regions, based on the parameters you specify. You can choose any source type in any Region for either accounts that are part of a trusted organization or standalone accounts. Once you add an AWS service as a source, Security Lake starts collecting logs and events from it.
+
+            :param source_name: Source name of the natively supported AWS service that is supported as an Amazon Security Lake source. For the list of sources supported by Amazon Security Lake see `Collecting data from AWS services <https://docs.aws.amazon.com//security-lake/latest/userguide/internal-sources.html>`_ in the Amazon Security Lake User Guide.
+            :param source_version: Source version of the natively supported AWS service that is supported as an Amazon Security Lake source. For more details about source versions supported by Amazon Security Lake see `OCSF source identification <https://docs.aws.amazon.com//security-lake/latest/userguide/open-cybersecurity-schema-framework.html#ocsf-source-identification>`_ in the Amazon Security Lake User Guide.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-awslogsource.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_securitylake as securitylake
+                
+                aws_log_source_property = securitylake.CfnSubscriber.AwsLogSourceProperty(
+                    source_name="sourceName",
+                    source_version="sourceVersion"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__f7b68bdff72d0a83be28cc208139e37398a7b328722b97984e752440b8b9b167)
+                check_type(argname="argument source_name", value=source_name, expected_type=type_hints["source_name"])
+                check_type(argname="argument source_version", value=source_version, expected_type=type_hints["source_version"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if source_name is not None:
+                self._values["source_name"] = source_name
+            if source_version is not None:
+                self._values["source_version"] = source_version
+
+        @builtins.property
+        def source_name(self) -> typing.Optional[builtins.str]:
+            '''Source name of the natively supported AWS service that is supported as an Amazon Security Lake source.
+
+            For the list of sources supported by Amazon Security Lake see `Collecting data from AWS services <https://docs.aws.amazon.com//security-lake/latest/userguide/internal-sources.html>`_ in the Amazon Security Lake User Guide.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-awslogsource.html#cfn-securitylake-subscriber-awslogsource-sourcename
+            '''
+            result = self._values.get("source_name")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def source_version(self) -> typing.Optional[builtins.str]:
+            '''Source version of the natively supported AWS service that is supported as an Amazon Security Lake source.
+
+            For more details about source versions supported by Amazon Security Lake see `OCSF source identification <https://docs.aws.amazon.com//security-lake/latest/userguide/open-cybersecurity-schema-framework.html#ocsf-source-identification>`_ in the Amazon Security Lake User Guide.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-awslogsource.html#cfn-securitylake-subscriber-awslogsource-sourceversion
+            '''
+            result = self._values.get("source_version")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "AwsLogSourceProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriber.CustomLogSourceProperty",
+        jsii_struct_bases=[],
+        name_mapping={"source_name": "sourceName", "source_version": "sourceVersion"},
+    )
+    class CustomLogSourceProperty:
+        def __init__(
+            self,
+            *,
+            source_name: typing.Optional[builtins.str] = None,
+            source_version: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Third-party custom log source that meets the requirements to be added to Amazon Security Lake .
+
+            For more details, see `Custom log source <https://docs.aws.amazon.com//security-lake/latest/userguide/custom-sources.html#iam-roles-custom-sources>`_ in the *Amazon Security Lake User Guide* .
+
+            :param source_name: The name of the custom log source.
+            :param source_version: The source version of the custom log source.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-customlogsource.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_securitylake as securitylake
+                
+                custom_log_source_property = securitylake.CfnSubscriber.CustomLogSourceProperty(
+                    source_name="sourceName",
+                    source_version="sourceVersion"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__be7ff1808e2250d74fc3f0286676c85a2ac63ab562fb09265ceb5138256bdb3a)
+                check_type(argname="argument source_name", value=source_name, expected_type=type_hints["source_name"])
+                check_type(argname="argument source_version", value=source_version, expected_type=type_hints["source_version"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if source_name is not None:
+                self._values["source_name"] = source_name
+            if source_version is not None:
+                self._values["source_version"] = source_version
+
+        @builtins.property
+        def source_name(self) -> typing.Optional[builtins.str]:
+            '''The name of the custom log source.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-customlogsource.html#cfn-securitylake-subscriber-customlogsource-sourcename
+            '''
+            result = self._values.get("source_name")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def source_version(self) -> typing.Optional[builtins.str]:
+            '''The source version of the custom log source.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-customlogsource.html#cfn-securitylake-subscriber-customlogsource-sourceversion
+            '''
+            result = self._values.get("source_version")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CustomLogSourceProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriber.SourceProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "aws_log_source": "awsLogSource",
+            "custom_log_source": "customLogSource",
+        },
+    )
+    class SourceProperty:
+        def __init__(
+            self,
+            *,
+            aws_log_source: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSubscriber.AwsLogSourceProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            custom_log_source: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSubscriber.CustomLogSourceProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''Sources are logs and events generated from a single system that match a specific event class in the Open Cybersecurity Schema Framework (OCSF) schema.
+
+            Amazon Security Lake can collect logs and events from a variety of sources, including natively supported AWS services and third-party custom sources.
+
+            :param aws_log_source: The natively supported AWS service which is used a Amazon Security Lake source to collect logs and events from.
+            :param custom_log_source: The custom log source AWS which is used a Amazon Security Lake source to collect logs and events from.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-source.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_securitylake as securitylake
+                
+                source_property = securitylake.CfnSubscriber.SourceProperty(
+                    aws_log_source=securitylake.CfnSubscriber.AwsLogSourceProperty(
+                        source_name="sourceName",
+                        source_version="sourceVersion"
+                    ),
+                    custom_log_source=securitylake.CfnSubscriber.CustomLogSourceProperty(
+                        source_name="sourceName",
+                        source_version="sourceVersion"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__09624bc0a82e7efd60186ff6e6eeff97f2daca3d7d705b8e7e3451a7add8d126)
+                check_type(argname="argument aws_log_source", value=aws_log_source, expected_type=type_hints["aws_log_source"])
+                check_type(argname="argument custom_log_source", value=custom_log_source, expected_type=type_hints["custom_log_source"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if aws_log_source is not None:
+                self._values["aws_log_source"] = aws_log_source
+            if custom_log_source is not None:
+                self._values["custom_log_source"] = custom_log_source
+
+        @builtins.property
+        def aws_log_source(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.AwsLogSourceProperty"]]:
+            '''The natively supported AWS service which is used a Amazon Security Lake source to collect logs and events from.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-source.html#cfn-securitylake-subscriber-source-awslogsource
+            '''
+            result = self._values.get("aws_log_source")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.AwsLogSourceProperty"]], result)
+
+        @builtins.property
+        def custom_log_source(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.CustomLogSourceProperty"]]:
+            '''The custom log source AWS which is used a Amazon Security Lake source to collect logs and events from.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscriber-source.html#cfn-securitylake-subscriber-source-customlogsource
+            '''
+            result = self._values.get("custom_log_source")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.CustomLogSourceProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "SourceProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriber.SubscriberIdentityProperty",
@@ -1460,7 +1724,7 @@ class CfnSubscriberNotification(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9f1dfade8090ae9276abcfb558543bcdaf6174fe5b4b775b6634581d0a6ccdc8)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "subscriberArn", value)
+        jsii.set(self, "subscriberArn", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.data_type(
@@ -1522,6 +1786,7 @@ class CfnSubscriberNotificationProps:
     name_mapping={
         "access_types": "accessTypes",
         "data_lake_arn": "dataLakeArn",
+        "sources": "sources",
         "subscriber_identity": "subscriberIdentity",
         "subscriber_name": "subscriberName",
         "subscriber_description": "subscriberDescription",
@@ -1534,6 +1799,7 @@ class CfnSubscriberProps:
         *,
         access_types: typing.Sequence[builtins.str],
         data_lake_arn: builtins.str,
+        sources: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SourceProperty, typing.Dict[builtins.str, typing.Any]]]]],
         subscriber_identity: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SubscriberIdentityProperty, typing.Dict[builtins.str, typing.Any]]],
         subscriber_name: builtins.str,
         subscriber_description: typing.Optional[builtins.str] = None,
@@ -1543,6 +1809,7 @@ class CfnSubscriberProps:
 
         :param access_types: You can choose to notify subscribers of new objects with an Amazon Simple Queue Service (Amazon SQS) queue or through messaging to an HTTPS endpoint provided by the subscriber. Subscribers can consume data by directly querying AWS Lake Formation tables in your Amazon S3 bucket through services like Amazon Athena. This subscription type is defined as ``LAKEFORMATION`` .
         :param data_lake_arn: The Amazon Resource Name (ARN) used to create the data lake.
+        :param sources: Amazon Security Lake supports log and event collection for natively supported AWS-services . For more information, see the `Amazon Security Lake User Guide <https://docs.aws.amazon.com//security-lake/latest/userguide/source-management.html>`_ .
         :param subscriber_identity: The AWS identity used to access your data.
         :param subscriber_name: The name of your Amazon Security Lake subscriber account.
         :param subscriber_description: The subscriber descriptions for a subscriber account. The description for a subscriber includes ``subscriberName`` , ``accountID`` , ``externalID`` , and ``subscriberId`` .
@@ -1560,6 +1827,16 @@ class CfnSubscriberProps:
             cfn_subscriber_props = securitylake.CfnSubscriberProps(
                 access_types=["accessTypes"],
                 data_lake_arn="dataLakeArn",
+                sources=[securitylake.CfnSubscriber.SourceProperty(
+                    aws_log_source=securitylake.CfnSubscriber.AwsLogSourceProperty(
+                        source_name="sourceName",
+                        source_version="sourceVersion"
+                    ),
+                    custom_log_source=securitylake.CfnSubscriber.CustomLogSourceProperty(
+                        source_name="sourceName",
+                        source_version="sourceVersion"
+                    )
+                )],
                 subscriber_identity=securitylake.CfnSubscriber.SubscriberIdentityProperty(
                     external_id="externalId",
                     principal="principal"
@@ -1578,6 +1855,7 @@ class CfnSubscriberProps:
             type_hints = typing.get_type_hints(_typecheckingstub__48b4dffc39d9aeba296ada6ed3b12f7273758033f731faa94da735c639fb2f10)
             check_type(argname="argument access_types", value=access_types, expected_type=type_hints["access_types"])
             check_type(argname="argument data_lake_arn", value=data_lake_arn, expected_type=type_hints["data_lake_arn"])
+            check_type(argname="argument sources", value=sources, expected_type=type_hints["sources"])
             check_type(argname="argument subscriber_identity", value=subscriber_identity, expected_type=type_hints["subscriber_identity"])
             check_type(argname="argument subscriber_name", value=subscriber_name, expected_type=type_hints["subscriber_name"])
             check_type(argname="argument subscriber_description", value=subscriber_description, expected_type=type_hints["subscriber_description"])
@@ -1585,6 +1863,7 @@ class CfnSubscriberProps:
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "access_types": access_types,
             "data_lake_arn": data_lake_arn,
+            "sources": sources,
             "subscriber_identity": subscriber_identity,
             "subscriber_name": subscriber_name,
         }
@@ -1615,6 +1894,20 @@ class CfnSubscriberProps:
         assert result is not None, "Required property 'data_lake_arn' is missing"
         return typing.cast(builtins.str, result)
 
+    @builtins.property
+    def sources(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnSubscriber.SourceProperty]]]:
+        '''Amazon Security Lake supports log and event collection for natively supported AWS-services .
+
+        For more information, see the `Amazon Security Lake User Guide <https://docs.aws.amazon.com//security-lake/latest/userguide/source-management.html>`_ .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html#cfn-securitylake-subscriber-sources
+        '''
+        result = self._values.get("sources")
+        assert result is not None, "Required property 'sources' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnSubscriber.SourceProperty]]], result)
+
     @builtins.property
     def subscriber_identity(
         self,
@@ -1852,6 +2145,7 @@ def _typecheckingstub__7cfdc1f6a6f3c553e914b6e8b917c7abd1db0a1142db24f189c29526a
     *,
     access_types: typing.Sequence[builtins.str],
     data_lake_arn: builtins.str,
+    sources: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SourceProperty, typing.Dict[builtins.str, typing.Any]]]]],
     subscriber_identity: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SubscriberIdentityProperty, typing.Dict[builtins.str, typing.Any]]],
     subscriber_name: builtins.str,
     subscriber_description: typing.Optional[builtins.str] = None,
@@ -1884,6 +2178,12 @@ def _typecheckingstub__6b6df05258f367a78b9fe1e83d93bbb4170db63eebfcfcaf47743e379
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__bc932de85d8e0823efeb32cd9962639ee0df5d9caf72a0cc1bd8a74abd3853f1(
+    value: typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnSubscriber.SourceProperty]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__844ac1bd9005c05fc49f39ac053da7c40f778e558a2e4cf96983161b114d88a7(
     value: typing.Union[_IResolvable_da3f097b, CfnSubscriber.SubscriberIdentityProperty],
 ) -> None:
@@ -1908,6 +2208,30 @@ def _typecheckingstub__b8f06145c3b30c94dc03a8f547df3132c6f47f465dc815eb5282aab95
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f7b68bdff72d0a83be28cc208139e37398a7b328722b97984e752440b8b9b167(
+    *,
+    source_name: typing.Optional[builtins.str] = None,
+    source_version: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__be7ff1808e2250d74fc3f0286676c85a2ac63ab562fb09265ceb5138256bdb3a(
+    *,
+    source_name: typing.Optional[builtins.str] = None,
+    source_version: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__09624bc0a82e7efd60186ff6e6eeff97f2daca3d7d705b8e7e3451a7add8d126(
+    *,
+    aws_log_source: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.AwsLogSourceProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    custom_log_source: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.CustomLogSourceProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__a2dd3305d7b56ebd933e9b9e7b243865a7a5c734ed08bef308334f82a70d692e(
     *,
     external_id: builtins.str,
@@ -1954,6 +2278,7 @@ def _typecheckingstub__48b4dffc39d9aeba296ada6ed3b12f7273758033f731faa94da735c63
     *,
     access_types: typing.Sequence[builtins.str],
     data_lake_arn: builtins.str,
+    sources: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SourceProperty, typing.Dict[builtins.str, typing.Any]]]]],
     subscriber_identity: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriber.SubscriberIdentityProperty, typing.Dict[builtins.str, typing.Any]]],
     subscriber_name: builtins.str,
     subscriber_description: typing.Optional[builtins.str] = None,