aws-cdk-lib 2.152.0__py3-none-any.whl → 2.154.0__py3-none-any.whl

aws_cdk/aws_ssm/__init__.py

@@ -96,6 +96,39 @@ arn_lookup = ssm.StringParameter.value_from_lookup(self, "/my/role/arn")
 iam.Role.from_role_arn(self, "role", Lazy.string({"produce": () => arnLookup}))
 ```
 
+### cross-account SSM Parameters sharing
+
+AWS Systems Manager (SSM) Parameter Store supports cross-account sharing of parameters using the AWS Resource Access Manager (AWS RAM)
+service. In a multi-account environment, this feature enables accounts (referred to as "consuming accounts") to access and retrieve
+parameter values that are shared by other accounts (referred to as "sharing accounts"). To reference and use a shared SSM parameter
+in a consuming account, the `fromStringParameterArn()` method can be employed.
+
+The `fromStringParameterArn()` method provides a way for consuming accounts to create an instance of the StringParameter
+class from the Amazon Resource Name (ARN) of a shared SSM parameter. This allows the consuming account to retrieve and utilize the
+parameter value, even though the parameter itself is owned and managed by a different sharing account.
+
+```python
+sharing_parameter_arn = "arn:aws:ssm:us-east-1:1234567890:parameter/dummyName"
+shared_param = ssm.StringParameter.from_string_parameter_arn(self, "SharedParam", sharing_parameter_arn)
+```
+
+Things to note:
+
+* The account that owns the AWS Systems Manager (SSM) parameter and wants to share it with other accounts (referred to as the "sharing account") must create the parameter in the advanced tier. This is a prerequisite for sharing SSM parameters across accounts.
+* After creating the parameter in the advanced tier, the sharing account needs to set up a resource share using AWS Resource Access Manager (RAM). This resource share will specify the SSM parameter(s) to be shared and the accounts (referred to as "consuming accounts") with which the parameter(s) should be shared.
+* Once the resource share is created by the sharing account, the consuming account(s) will receive an invitation to join the resource share. For the consuming account(s) to access and use the shared SSM parameter(s), they must accept the resource share invitation from the sharing account.
+* The AWS Systems Manager Parameter Store parameter being referenced must be located in the same AWS region as the AWS CDK stack that is consuming or using the parameter.
+
+In summary, the process involves three main steps:
+
+1. The sharing account creates the SSM parameter(s) in the advanced tier.
+2. The sharing account creates a resource share using AWS RAM, specifying the SSM parameter(s) and the consuming account(s).
+3. The consuming account(s) accept the resource share invitation to gain access to the shared SSM parameter(s).
+
+This cross-account sharing mechanism allows for centralized management and distribution of configuration data (stored as SSM parameters) across multiple AWS accounts within an organization or between different organizations.
+
+Read [Working with shared parameters](https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-shared-parameters.html) for more details.
+
 ## Creating new SSM Parameters in your CDK app
 
 You can create either `ssm.StringParameter` or `ssm.StringListParameter`s in
@@ -380,7 +413,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e92bf5492040a0299998b0a9b059a356249d33ec61a41eeee594e093a7d0fb93)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="applyOnlyAtCronInterval")
@@ -398,7 +431,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b9023084f7868b14116f97ca76b80fe2c8428bca0dc340c9e250534372a8882b)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "applyOnlyAtCronInterval", value)
+        jsii.set(self, "applyOnlyAtCronInterval", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="associationName")
@@ -411,7 +444,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__bb049dd8f3d81baa9ccd163bb3c0e0c5f10114fd3a4d9ed4a1da2dfaa2e7a70c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "associationName", value)
+        jsii.set(self, "associationName", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="automationTargetParameterName")
@@ -427,7 +460,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__784e8ad1b8f5f3c269d31598a3121d33ed36eb41074ed3c1c4d612eed6484920)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "automationTargetParameterName", value)
+        jsii.set(self, "automationTargetParameterName", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="calendarNames")
@@ -440,7 +473,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__89f46620766a6cb92f5e7135d5be6128d4d6e6dc8da7d7a49f8216a2bd89ce04)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "calendarNames", value)
+        jsii.set(self, "calendarNames", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="complianceSeverity")
@@ -453,7 +486,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9e8a1f13b08374e8b174f211647e4f9aee7820e96b01b93747f906958e9aff43)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "complianceSeverity", value)
+        jsii.set(self, "complianceSeverity", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="documentVersion")
@@ -466,7 +499,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e6852a105eba64031e2ab4c7f0f0c2569933f7be795a2d958593d091f277a667)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "documentVersion", value)
+        jsii.set(self, "documentVersion", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="instanceId")
@@ -479,7 +512,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a1a40e1278e729960017eba97f7aaf904bfa9d528733d2142f2710e6cf17306f)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "instanceId", value)
+        jsii.set(self, "instanceId", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="maxConcurrency")
@@ -492,7 +525,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a8a46c913675e9198e679ed1f83d648c1ccd40b2341879145404fd2ebc256093)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "maxConcurrency", value)
+        jsii.set(self, "maxConcurrency", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="maxErrors")
@@ -505,7 +538,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__97c0c0ebc4e8f350ab107d93e7f4ebce7994eb4e9c23da3d470fbd5a5fd349e9)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "maxErrors", value)
+        jsii.set(self, "maxErrors", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="outputLocation")
@@ -523,7 +556,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b7f2d6bae4a2f47caddaa51675bf95100b06b460f639a924aec4c36f3e0dfe13)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "outputLocation", value)
+        jsii.set(self, "outputLocation", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="parameters")
@@ -536,7 +569,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a7bc72c1573e12dfc32dfc15c4125adfa3aee907e4c231fb1dc195260483bca5)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "parameters", value)
+        jsii.set(self, "parameters", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="scheduleExpression")
@@ -549,7 +582,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1b45e3419b475a4d33fe733aa9418e965aeddb232d631f9b2024913c92d22947)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "scheduleExpression", value)
+        jsii.set(self, "scheduleExpression", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="scheduleOffset")
@@ -562,7 +595,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ae92d319670461482db27cc5bf559ad4df2f8df83ba4d88119ce8f83e9169873)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "scheduleOffset", value)
+        jsii.set(self, "scheduleOffset", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="syncCompliance")
@@ -575,7 +608,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2d7078ea082466fa5a28a7853d4916de9d395e0a7adf5ae826e9a2028bdb9a93)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "syncCompliance", value)
+        jsii.set(self, "syncCompliance", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="targets")
@@ -593,7 +626,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3ce3b93eff1353677d4fb546ad1db9172eecc860870a57f1426f1ff63ce088d4)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "targets", value)
+        jsii.set(self, "targets", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="waitForSuccessTimeoutSeconds")
@@ -609,7 +642,7 @@ class CfnAssociation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__43bea7a30e23800585f05a151814b8ef7b0f58707fa06c13448e65157d2bac89)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "waitForSuccessTimeoutSeconds", value)
+        jsii.set(self, "waitForSuccessTimeoutSeconds", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_ssm.CfnAssociation.InstanceAssociationOutputLocationProperty",
@@ -1359,7 +1392,7 @@ class CfnDocument(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__5959ba776c476fbcff87b818558733698ac254ec78c13e966dec8b6d890dba49)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "content", value)
+        jsii.set(self, "content", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="attachments")
@@ -1377,7 +1410,7 @@ class CfnDocument(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__175aeee83820e4c740052899af41bd6da137e36dc8a7c97e1979f2a38dfb8ad5)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "attachments", value)
+        jsii.set(self, "attachments", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="documentFormat")
@@ -1390,7 +1423,7 @@ class CfnDocument(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__d78f0fc9dc92bbdeda2dcfc1e140d76d56dba997674014f72aaf4c862bf73256)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "documentFormat", value)
+        jsii.set(self, "documentFormat", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="documentType")
@@ -1403,7 +1436,7 @@ class CfnDocument(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1470169f5980c3b4dc4cbba07fd16d25490957e1af4df9aaa44a046e8043856f)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "documentType", value)
+        jsii.set(self, "documentType", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="name")
@@ -1416,7 +1449,7 @@ class CfnDocument(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__73b1ce30b81e0af0ed907c214243ea20a6ec6304887e3dd6da9e7f40c535dfd3)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="requires")
@@ -1434,7 +1467,7 @@ class CfnDocument(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9f21e2047334ed6671ad1892afe1b670d99e12c8d4d4404c82dc71a489c595d3)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "requires", value)
+        jsii.set(self, "requires", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
@@ -1447,7 +1480,7 @@ class CfnDocument(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__562d6c2a06cbb316f503d8b64a06c9f80424782257db2c710c729b1f8466d90f)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tagsRaw", value)
+        jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="targetType")
@@ -1460,7 +1493,7 @@ class CfnDocument(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__05561a31234b57ff868b8ce303562a7ae870c3d8d67ddf5a4937ba4df268d903)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "targetType", value)
+        jsii.set(self, "targetType", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="updateMethod")
@@ -1473,7 +1506,7 @@ class CfnDocument(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__02ecd7f9b655f49b73ab05cdb2e63068bb0cb928f2b663d4563fb23457450917)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "updateMethod", value)
+        jsii.set(self, "updateMethod", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="versionName")
@@ -1486,7 +1519,7 @@ class CfnDocument(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__aa50c9cd05e6bdac375dbcdf81332154e8628548ba5da12e0a6064a42b8587d7)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "versionName", value)
+        jsii.set(self, "versionName", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_ssm.CfnDocument.AttachmentsSourceProperty",
@@ -2076,7 +2109,7 @@ class CfnMaintenanceWindow(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__5b59de04623e80b94c25e028af2976d77afe2bc536f6dd59cd55cec25843686a)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "allowUnassociatedTargets", value)
+        jsii.set(self, "allowUnassociatedTargets", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="cutoff")
@@ -2089,7 +2122,7 @@ class CfnMaintenanceWindow(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__d56bec4e39b855ff10336eb33b0d79cd1e1176cf1b7f78e5e405719c4eca1f2d)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "cutoff", value)
+        jsii.set(self, "cutoff", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="duration")
@@ -2102,7 +2135,7 @@ class CfnMaintenanceWindow(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2b5c28ccb571d4df4caa3b264761f43b63e629207366a74c8d3f485171df3bc4)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "duration", value)
+        jsii.set(self, "duration", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="name")
@@ -2115,7 +2148,7 @@ class CfnMaintenanceWindow(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__995c29377559e15e0f1c56e36005d64d6364a914f20d79cfc82b5914d73bd876)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="schedule")
@@ -2128,7 +2161,7 @@ class CfnMaintenanceWindow(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__54f38a694c05ce44a00d9222454ce9730a88ab55b543178b87550f611fa66317)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "schedule", value)
+        jsii.set(self, "schedule", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="description")
@@ -2141,7 +2174,7 @@ class CfnMaintenanceWindow(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__28aeaf50f7690fe17faf3319ac5908dca8bb57fac700b1295b0de46996a76ff3)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "description", value)
+        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="endDate")
@@ -2154,7 +2187,7 @@ class CfnMaintenanceWindow(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__96bd2ef248cf8835b029f6a8d83774b266650f228ec191067204d5eef38b6d70)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "endDate", value)
+        jsii.set(self, "endDate", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="scheduleOffset")
@@ -2167,7 +2200,7 @@ class CfnMaintenanceWindow(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__5e109a6d18454ed60fdaa5c9f3665397d813614a627e51216d6a6c4c328f703a)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "scheduleOffset", value)
+        jsii.set(self, "scheduleOffset", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="scheduleTimezone")
@@ -2180,7 +2213,7 @@ class CfnMaintenanceWindow(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e8759638f42d7bafe21e1d7ac7c933693408b493eb89b2e82e61fb4407805b0e)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "scheduleTimezone", value)
+        jsii.set(self, "scheduleTimezone", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="startDate")
@@ -2193,7 +2226,7 @@ class CfnMaintenanceWindow(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a011b6550ec143adc25e489b9d0cd4d88120fed5047ded6ab0b4191dcda41f59)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "startDate", value)
+        jsii.set(self, "startDate", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
@@ -2206,7 +2239,7 @@ class CfnMaintenanceWindow(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ff8aedf9ec0e769950717671246b7841aefbc47689520e9925ec90bc7e70a148)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tagsRaw", value)
+        jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.data_type(
@@ -2567,7 +2600,7 @@ class CfnMaintenanceWindowTarget(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a13388269754c40d63f1299c7452e64c78999e96e3c4e045f5b0d2e28a6a50d8)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "resourceType", value)
+        jsii.set(self, "resourceType", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="targets")
@@ -2585,7 +2618,7 @@ class CfnMaintenanceWindowTarget(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__803208e9f40c4e62295f82d8ba5e2943d3dba56d9a7f29d414b3e56f6b4ffdb3)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "targets", value)
+        jsii.set(self, "targets", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="windowId")
@@ -2598,7 +2631,7 @@ class CfnMaintenanceWindowTarget(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f880c1d4dc9c35b640f583b5a1eae791d6b9aba785b421257fce0c13f84f94ea)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "windowId", value)
+        jsii.set(self, "windowId", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="description")
@@ -2611,7 +2644,7 @@ class CfnMaintenanceWindowTarget(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__cd052b26378460dad14d691180cd79953a8b934b32bf7c740b62447530a2480b)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "description", value)
+        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="name")
@@ -2624,7 +2657,7 @@ class CfnMaintenanceWindowTarget(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b12333ebaf74b7018641702cfa3157bc7e93dd94bce92bbf2ba08eb43c2e47c1)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="ownerInformation")
@@ -2637,7 +2670,7 @@ class CfnMaintenanceWindowTarget(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7edbe00367604f6dbbbf871d14ab1b0b6484dc2ec9985bdff2795cb5d1183d4e)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "ownerInformation", value)
+        jsii.set(self, "ownerInformation", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_ssm.CfnMaintenanceWindowTarget.TargetsProperty",
@@ -3070,7 +3103,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__0776f1dec28892f4f039655f4bd58dbab218be1a93993a08a46b2b3fee1a05f3)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "priority", value)
+        jsii.set(self, "priority", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="taskArn")
@@ -3083,7 +3116,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__adccf6935c75e32f84ba21008278bed07a786695c2220217c969ece517a13e19)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "taskArn", value)
+        jsii.set(self, "taskArn", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="taskType")
@@ -3096,7 +3129,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e764d7191dd17ad7c6af4e9cf3288e2143c2b9bebf0395428c7823743dc7e4ea)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "taskType", value)
+        jsii.set(self, "taskType", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="windowId")
@@ -3109,7 +3142,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e4911136cee1564bf01fe47e9aee783650f347033d01719aeec40bbbfa56ab6f)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "windowId", value)
+        jsii.set(self, "windowId", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="cutoffBehavior")
@@ -3122,7 +3155,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e56747468a672310155a1a7bd35fab9b92e4e9c51a4e0adec7ff48e95da06e65)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "cutoffBehavior", value)
+        jsii.set(self, "cutoffBehavior", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="description")
@@ -3135,7 +3168,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__4f65b28dee7cbeaeef25a47438a9bee61026d458be2cbab4f789904d33e0ca84)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "description", value)
+        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="loggingInfo")
@@ -3153,7 +3186,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7420eb69352c5dffbc63903691d96642ddd213905d4bd87088eb40562b6c37b7)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "loggingInfo", value)
+        jsii.set(self, "loggingInfo", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="maxConcurrency")
@@ -3166,7 +3199,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__fe2c1e1cc2613320a5ea339c1908852d8fafbd3051c7edda4b2494635526ea55)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "maxConcurrency", value)
+        jsii.set(self, "maxConcurrency", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="maxErrors")
@@ -3179,7 +3212,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ba4e556931384c4cf77d1adc667d26d5be5fe17ea89e74b7cfd53f51ed9d3d1c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "maxErrors", value)
+        jsii.set(self, "maxErrors", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="name")
@@ -3192,7 +3225,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ce0290645c39827e48ca0d011a90f954ce1b5035c94f2b2a84769599cd94116a)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="serviceRoleArn")
@@ -3205,7 +3238,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__aa12d14b73c4415f857256339d8c9efbbeb6b154b5de888ae2db34a195687f34)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "serviceRoleArn", value)
+        jsii.set(self, "serviceRoleArn", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="targets")
@@ -3223,7 +3256,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ba1a5fa6e80a94431946dcbb6c59475e65e96ae172de3aac908aa8b1fbbad49c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "targets", value)
+        jsii.set(self, "targets", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="taskInvocationParameters")
@@ -3241,7 +3274,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e676346c741943a2f14e79e926c8b5230365f4924b6a9161db3fc3486bab0d22)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "taskInvocationParameters", value)
+        jsii.set(self, "taskInvocationParameters", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="taskParameters")
@@ -3254,7 +3287,7 @@ class CfnMaintenanceWindowTask(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__308ea737f8a21130dc4ef906e4efbdd26c268158e16c66982b9d8f555370f880)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "taskParameters", value)
+        jsii.set(self, "taskParameters", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_ssm.CfnMaintenanceWindowTask.CloudWatchOutputConfigProperty",
@@ -4798,7 +4831,7 @@ class CfnParameter(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7c3c8b1ff99cbeb84d6bfa4ec55c0f338baba344c4f051a0df40febf91e77b57)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "type", value)
+        jsii.set(self, "type", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="value")
@@ -4811,7 +4844,7 @@ class CfnParameter(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3d784f981b1fc2fc2f326f9c00450c9509a7f7f86b9e9c7aa8701327c2cfc389)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "value", value)
+        jsii.set(self, "value", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="allowedPattern")
@@ -4824,7 +4857,7 @@ class CfnParameter(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e9ffaa1025f846ad6a1c834ac9cdadb606682213a46ea55fc7ef79f038fc126c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "allowedPattern", value)
+        jsii.set(self, "allowedPattern", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="dataType")
@@ -4837,7 +4870,7 @@ class CfnParameter(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ccd34f48cc80688e3dee3c3e867bce351bd1d94df72caf85b542394330a8aeed)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "dataType", value)
+        jsii.set(self, "dataType", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="description")
@@ -4850,7 +4883,7 @@ class CfnParameter(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7395ed2d127b103cdc493e73e958c2b96d25307408ac9f8056cb7f8c798f4d39)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "description", value)
+        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="name")
@@ -4863,7 +4896,7 @@ class CfnParameter(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1d1b8e4a82c71a91758906c6a03031ca428e2b03893385cf6e7897fedbbacd6b)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="policies")
@@ -4876,7 +4909,7 @@ class CfnParameter(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__bcb1627df3e7fc8ca9be15411b137e27706b40b83c560792cf371422ee8ec910)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "policies", value)
+        jsii.set(self, "policies", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
@@ -4892,7 +4925,7 @@ class CfnParameter(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f7f4d99885d1dde8bc3c789853e6ea39c5cd0a37d0d287307cad2a15a84707f4)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tagsRaw", value)
+        jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tier")
@@ -4905,7 +4938,7 @@ class CfnParameter(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__0cb309cb97ef3622d8ccca3962a03b455578863222196e6d48ee076e28591cdc)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tier", value)
+        jsii.set(self, "tier", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.data_type(
@@ -5216,7 +5249,7 @@ class CfnPatchBaseline(
         :param operating_system: Defines the operating system the patch baseline applies to. The default value is ``WINDOWS`` . Default: - "WINDOWS"
         :param patch_groups: The name of the patch group to be registered with the patch baseline.
         :param rejected_patches: A list of explicitly rejected patches for the baseline. For information about accepted formats for lists of approved patches and rejected patches, see `About package name formats for approved and rejected patch lists <https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-approved-rejected-package-name-formats.html>`_ in the *AWS Systems Manager User Guide* .
-        :param rejected_patches_action: The action for Patch Manager to take on patches included in the ``RejectedPackages`` list. - *``ALLOW_AS_DEPENDENCY``* : A package in the ``Rejected`` patches list is installed only if it is a dependency of another package. It is considered compliant with the patch baseline, and its status is reported as ``InstalledOther`` . This is the default action if no option is specified. - *BLOCK* : Packages in the *Rejected patches* list, and packages that include them as dependencies, aren't installed by Patch Manager under any circumstances. If a package was installed before it was added to the *Rejected patches* list, or is installed outside of Patch Manager afterward, it's considered noncompliant with the patch baseline and its status is reported as *InstalledRejected* . Default: - "ALLOW_AS_DEPENDENCY"
+        :param rejected_patches_action: The action for Patch Manager to take on patches included in the ``RejectedPackages`` list. - **ALLOW_AS_DEPENDENCY** - *Linux and macOS* : A package in the rejected patches list is installed only if it is a dependency of another package. It is considered compliant with the patch baseline, and its status is reported as ``INSTALLED_OTHER`` . This is the default action if no option is specified. *Windows Server* : Windows Server doesn't support the concept of package dependencies. If a package in the rejected patches list and already installed on the node, its status is reported as ``INSTALLED_OTHER`` . Any package not already installed on the node is skipped. This is the default action if no option is specified. - **BLOCK** - *All OSs* : Packages in the rejected patches list, and packages that include them as dependencies, aren't installed by Patch Manager under any circumstances. If a package was installed before it was added to the rejected patches list, or is installed outside of Patch Manager afterward, it's considered noncompliant with the patch baseline and its status is reported as ``INSTALLED_REJECTED`` . Default: - "ALLOW_AS_DEPENDENCY"
         :param sources: Information about the patches to use to update the managed nodes, including target operating systems and source repositories. Applies to Linux managed nodes only.
         :param tags: Optional metadata that you assign to a resource. Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag a patch baseline to identify the severity level of patches it specifies and the operating system family it applies to.
         '''
@@ -5304,7 +5337,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a0c34df6132dc5024ae19aefdba7302eb801aba72f7c63d23a2977bb99d1ce66)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="approvalRules")
@@ -5322,7 +5355,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1b56dfe31210955c8b1e478e9b12fb384520f16c624a7f1fd4ca7edc6c9d052e)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "approvalRules", value)
+        jsii.set(self, "approvalRules", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="approvedPatches")
@@ -5338,7 +5371,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__cfb6e3b5beff742671c1a2d820ffcd05e84cefb124894eba054fac867f1c23bc)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "approvedPatches", value)
+        jsii.set(self, "approvedPatches", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="approvedPatchesComplianceLevel")
@@ -5354,7 +5387,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__bff7659e5eeaba10646c1802753fc8aa922feac17eee3bc2e16dadf1450be553)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "approvedPatchesComplianceLevel", value)
+        jsii.set(self, "approvedPatchesComplianceLevel", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="approvedPatchesEnableNonSecurity")
@@ -5372,7 +5405,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__596ca4adbe9b66ae96ac84884c609e25720aab40b7f9d665e6ea16808f1a16ca)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "approvedPatchesEnableNonSecurity", value)
+        jsii.set(self, "approvedPatchesEnableNonSecurity", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="defaultBaseline")
@@ -5390,7 +5423,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a82f38addd776fccd7d2225bc356d9a6e4dc42b938cbf56c083c34cd4994c239)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "defaultBaseline", value)
+        jsii.set(self, "defaultBaseline", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="description")
@@ -5403,7 +5436,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__4e0764881f21962614874d74c4570aaad8c8757ec8f88735329f4ff151db61a0)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "description", value)
+        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="globalFilters")
@@ -5421,7 +5454,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2179c7d6864a34b00339c58eb461fef37a68a420e457e90e7c0c7a25130bfbdf)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "globalFilters", value)
+        jsii.set(self, "globalFilters", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="operatingSystem")
@@ -5434,7 +5467,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__0c5260a35c066fde54beec3890872a19db9827a2ab6171144440289a949dffe9)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "operatingSystem", value)
+        jsii.set(self, "operatingSystem", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="patchGroups")
@@ -5447,7 +5480,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__26a4ed06dc125b4ee77b4188a5d083535e272de23709a82c49ee2701451adddd)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "patchGroups", value)
+        jsii.set(self, "patchGroups", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="rejectedPatches")
@@ -5463,7 +5496,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f1770686b2069f49c778417afc185314be92ad98da528f69041a98291bbffdf6)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "rejectedPatches", value)
+        jsii.set(self, "rejectedPatches", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="rejectedPatchesAction")
@@ -5476,7 +5509,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__4f95da053faafa2fab292f8a8670cf900b1d6f8c4edba0b0adb5dc8cb58a805c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "rejectedPatchesAction", value)
+        jsii.set(self, "rejectedPatchesAction", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="sources")
@@ -5494,7 +5527,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__d0b14c56c59457cef6fb23f44714aa782c4d1965f4fe83bb31bf5f3ff58e6d22)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "sources", value)
+        jsii.set(self, "sources", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
@@ -5507,7 +5540,7 @@ class CfnPatchBaseline(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__8dc0a5821b51a90338294cb305cbf01102292e653fb3aa3f3b379b34ab3a9d0b)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tagsRaw", value)
+        jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_ssm.CfnPatchBaseline.PatchFilterGroupProperty",
@@ -5846,8 +5879,8 @@ class CfnPatchBaseline(
 
             The ``PatchRules`` property of the `RuleGroup <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssm-patchbaseline-rulegroup.html>`_ property type contains a list of ``Rule`` property types.
 
-            :param approve_after_days: The number of days after the release date of each patch matched by the rule that the patch is marked as approved in the patch baseline. For example, a value of ``7`` means that patches are approved seven days after they are released. You must specify a value for ``ApproveAfterDays`` . Exception: Not supported on Debian Server or Ubuntu Server.
-            :param approve_until_date: The cutoff date for auto approval of released patches. Any patches released on or before this date are installed automatically. Not supported on Debian Server or Ubuntu Server. Enter dates in the format ``YYYY-MM-DD`` . For example, ``2021-12-31`` .
+            :param approve_after_days: The number of days after the release date of each patch matched by the rule that the patch is marked as approved in the patch baseline. For example, a value of ``7`` means that patches are approved seven days after they are released. .. epigraph:: This parameter is marked as not required, but your request must include a value for either ``ApproveAfterDays`` or ``ApproveUntilDate`` . Not supported for Debian Server or Ubuntu Server.
+            :param approve_until_date: The cutoff date for auto approval of released patches. Any patches released on or before this date are installed automatically. Enter dates in the format ``YYYY-MM-DD`` . For example, ``2021-12-31`` . .. epigraph:: This parameter is marked as not required, but your request must include a value for either ``ApproveUntilDate`` or ``ApproveAfterDays`` . Not supported for Debian Server or Ubuntu Server.
             :param compliance_level: A compliance severity level for all approved patches in a patch baseline. Valid compliance severity levels include the following: ``UNSPECIFIED`` , ``CRITICAL`` , ``HIGH`` , ``MEDIUM`` , ``LOW`` , and ``INFORMATIONAL`` .
             :param enable_non_security: For managed nodes identified by the approval rule filters, enables a patch baseline to apply non-security updates available in the specified repository. The default value is ``false`` . Applies to Linux managed nodes only. Default: - false
             :param patch_filter_group: The patch filter group that defines the criteria for the rule.
@@ -5898,10 +5931,11 @@ class CfnPatchBaseline(
             '''The number of days after the release date of each patch matched by the rule that the patch is marked as approved in the patch baseline.
 
             For example, a value of ``7`` means that patches are approved seven days after they are released.
+            .. epigraph::
 
-            You must specify a value for ``ApproveAfterDays`` .
+               This parameter is marked as not required, but your request must include a value for either ``ApproveAfterDays`` or ``ApproveUntilDate`` .
 
-            Exception: Not supported on Debian Server or Ubuntu Server.
+            Not supported for Debian Server or Ubuntu Server.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssm-patchbaseline-rule.html#cfn-ssm-patchbaseline-rule-approveafterdays
             '''
@@ -5912,9 +5946,14 @@ class CfnPatchBaseline(
         def approve_until_date(self) -> typing.Optional[builtins.str]:
             '''The cutoff date for auto approval of released patches.
 
-            Any patches released on or before this date are installed automatically. Not supported on Debian Server or Ubuntu Server.
+            Any patches released on or before this date are installed automatically.
 
             Enter dates in the format ``YYYY-MM-DD`` . For example, ``2021-12-31`` .
+            .. epigraph::
+
+               This parameter is marked as not required, but your request must include a value for either ``ApproveUntilDate`` or ``ApproveAfterDays`` .
+
+            Not supported for Debian Server or Ubuntu Server.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssm-patchbaseline-rule.html#cfn-ssm-patchbaseline-rule-approveuntildate
             '''
@@ -6022,7 +6061,7 @@ class CfnPatchBaselineProps:
         :param operating_system: Defines the operating system the patch baseline applies to. The default value is ``WINDOWS`` . Default: - "WINDOWS"
         :param patch_groups: The name of the patch group to be registered with the patch baseline.
         :param rejected_patches: A list of explicitly rejected patches for the baseline. For information about accepted formats for lists of approved patches and rejected patches, see `About package name formats for approved and rejected patch lists <https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-approved-rejected-package-name-formats.html>`_ in the *AWS Systems Manager User Guide* .
-        :param rejected_patches_action: The action for Patch Manager to take on patches included in the ``RejectedPackages`` list. - *``ALLOW_AS_DEPENDENCY``* : A package in the ``Rejected`` patches list is installed only if it is a dependency of another package. It is considered compliant with the patch baseline, and its status is reported as ``InstalledOther`` . This is the default action if no option is specified. - *BLOCK* : Packages in the *Rejected patches* list, and packages that include them as dependencies, aren't installed by Patch Manager under any circumstances. If a package was installed before it was added to the *Rejected patches* list, or is installed outside of Patch Manager afterward, it's considered noncompliant with the patch baseline and its status is reported as *InstalledRejected* . Default: - "ALLOW_AS_DEPENDENCY"
+        :param rejected_patches_action: The action for Patch Manager to take on patches included in the ``RejectedPackages`` list. - **ALLOW_AS_DEPENDENCY** - *Linux and macOS* : A package in the rejected patches list is installed only if it is a dependency of another package. It is considered compliant with the patch baseline, and its status is reported as ``INSTALLED_OTHER`` . This is the default action if no option is specified. *Windows Server* : Windows Server doesn't support the concept of package dependencies. If a package in the rejected patches list and already installed on the node, its status is reported as ``INSTALLED_OTHER`` . Any package not already installed on the node is skipped. This is the default action if no option is specified. - **BLOCK** - *All OSs* : Packages in the rejected patches list, and packages that include them as dependencies, aren't installed by Patch Manager under any circumstances. If a package was installed before it was added to the rejected patches list, or is installed outside of Patch Manager afterward, it's considered noncompliant with the patch baseline and its status is reported as ``INSTALLED_REJECTED`` . Default: - "ALLOW_AS_DEPENDENCY"
         :param sources: Information about the patches to use to update the managed nodes, including target operating systems and source repositories. Applies to Linux managed nodes only.
         :param tags: Optional metadata that you assign to a resource. Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag a patch baseline to identify the severity level of patches it specifies and the operating system family it applies to.
 
@@ -6257,8 +6296,11 @@ class CfnPatchBaselineProps:
     def rejected_patches_action(self) -> typing.Optional[builtins.str]:
         '''The action for Patch Manager to take on patches included in the ``RejectedPackages`` list.
 
-        - *``ALLOW_AS_DEPENDENCY``* : A package in the ``Rejected`` patches list is installed only if it is a dependency of another package. It is considered compliant with the patch baseline, and its status is reported as ``InstalledOther`` . This is the default action if no option is specified.
-        - *BLOCK* : Packages in the *Rejected patches* list, and packages that include them as dependencies, aren't installed by Patch Manager under any circumstances. If a package was installed before it was added to the *Rejected patches* list, or is installed outside of Patch Manager afterward, it's considered noncompliant with the patch baseline and its status is reported as *InstalledRejected* .
+        - **ALLOW_AS_DEPENDENCY** - *Linux and macOS* : A package in the rejected patches list is installed only if it is a dependency of another package. It is considered compliant with the patch baseline, and its status is reported as ``INSTALLED_OTHER`` . This is the default action if no option is specified.
+
+        *Windows Server* : Windows Server doesn't support the concept of package dependencies. If a package in the rejected patches list and already installed on the node, its status is reported as ``INSTALLED_OTHER`` . Any package not already installed on the node is skipped. This is the default action if no option is specified.
+
+        - **BLOCK** - *All OSs* : Packages in the rejected patches list, and packages that include them as dependencies, aren't installed by Patch Manager under any circumstances. If a package was installed before it was added to the rejected patches list, or is installed outside of Patch Manager afterward, it's considered noncompliant with the patch baseline and its status is reported as ``INSTALLED_REJECTED`` .
 
         :default: - "ALLOW_AS_DEPENDENCY"
 
@@ -6472,7 +6514,7 @@ class CfnResourceDataSync(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__c904544eb14d61bbdd853398a4e1561df17c1a6dbed2a5cec6fa0c804f538935)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "syncName", value)
+        jsii.set(self, "syncName", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="bucketName")
@@ -6485,7 +6527,7 @@ class CfnResourceDataSync(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b5fa255fdf6d438f6ead55de15298ce164aeda7ca776148e57fdae84a901f60c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "bucketName", value)
+        jsii.set(self, "bucketName", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="bucketPrefix")
@@ -6498,7 +6540,7 @@ class CfnResourceDataSync(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a924763b3a0b031560d9453176bd0f0f3a33209abc82be03fd9bf29cf6d0d559)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "bucketPrefix", value)
+        jsii.set(self, "bucketPrefix", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="bucketRegion")
@@ -6511,7 +6553,7 @@ class CfnResourceDataSync(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__fcb2a87b52c756e5533d55b08fe153a077d0b17d2d12326edf29ea9e3aa883c6)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "bucketRegion", value)
+        jsii.set(self, "bucketRegion", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="kmsKeyArn")
@@ -6524,7 +6566,7 @@ class CfnResourceDataSync(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__fd64605b976fdaf20986b520b1f9002208a35fba878e5874ecbba8eac65dbce3)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "kmsKeyArn", value)
+        jsii.set(self, "kmsKeyArn", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="s3Destination")
@@ -6542,7 +6584,7 @@ class CfnResourceDataSync(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1b7a3560b2c82654cd5bf6fbf841a21a5f937cad116af54ea4ddd8a8d62231d8)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "s3Destination", value)
+        jsii.set(self, "s3Destination", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="syncFormat")
@@ -6555,7 +6597,7 @@ class CfnResourceDataSync(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__02ab77fd76bb25d5f48e8e3d49dfc9bc861b987ebca523a2e7fca2a67a78a7f5)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "syncFormat", value)
+        jsii.set(self, "syncFormat", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="syncSource")
@@ -6573,7 +6615,7 @@ class CfnResourceDataSync(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__157e7eb014224199daee91a842f040069c8ada6fa6deb70c8401e5815620c3e5)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "syncSource", value)
+        jsii.set(self, "syncSource", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="syncType")
@@ -6586,7 +6628,7 @@ class CfnResourceDataSync(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__d63d5c9fe36723e0e44dc178597f64394fe6601f2bea49c310bbb449d99b5c06)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "syncType", value)
+        jsii.set(self, "syncType", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_ssm.CfnResourceDataSync.AwsOrganizationsSourceProperty",
@@ -7253,7 +7295,7 @@ class CfnResourcePolicy(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__0e10ca1482b529c76d3760f3dda887f46d2071ff060e4a0a11d253064701edec)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "policy", value)
+        jsii.set(self, "policy", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="resourceArn")
@@ -7266,7 +7308,7 @@ class CfnResourcePolicy(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__cd166322a09f9cd5b0060ba3a485fb9349539a442b3ae8ec7ee33b0ad035d8f4)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "resourceArn", value)
+        jsii.set(self, "resourceArn", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.data_type(
@@ -8570,6 +8612,27 @@ class StringParameter(
 
         return typing.cast(IStringParameter, jsii.sinvoke(cls, "fromSecureStringParameterAttributes", [scope, id, attrs]))
 
+    @jsii.member(jsii_name="fromStringParameterArn")
+    @builtins.classmethod
+    def from_string_parameter_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        string_parameter_arn: builtins.str,
+    ) -> IStringParameter:
+        '''Imports an external string parameter by ARN.
+
+        :param scope: -
+        :param id: -
+        :param string_parameter_arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9575783638c75217cf30c3b85a444f0d969712861524ca788f0f3c83fa889f88)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument string_parameter_arn", value=string_parameter_arn, expected_type=type_hints["string_parameter_arn"])
+        return typing.cast(IStringParameter, jsii.sinvoke(cls, "fromStringParameterArn", [scope, id, string_parameter_arn]))
+
     @jsii.member(jsii_name="fromStringParameterAttributes")
     @builtins.classmethod
     def from_string_parameter_attributes(
@@ -10543,6 +10606,14 @@ def _typecheckingstub__ef716b2d64b7c95b87119e190e88504880c3f46c45b769e05e9f4f805
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__9575783638c75217cf30c3b85a444f0d969712861524ca788f0f3c83fa889f88(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    string_parameter_arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__e612c2654654e8b8bb7821bcd1e47680b025862a2a411467ffa6334e46371b05(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,