aws-cdk-lib 2.153.0__py3-none-any.whl → 2.154.0__py3-none-any.whl

aws_cdk/_jsii/__init__.py

@@ -16,10 +16,11 @@ from typeguard import check_type
 import aws_cdk.asset_awscli_v1._jsii
 import aws_cdk.asset_kubectl_v20._jsii
 import aws_cdk.asset_node_proxy_agent_v6._jsii
+import aws_cdk.cloud_assembly_schema._jsii
 import constructs._jsii
 
 __jsii_assembly__ = jsii.JSIIAssembly.load(
-    "aws-cdk-lib", "2.153.0", __name__[0:-6], "aws-cdk-lib@2.153.0.jsii.tgz"
+    "aws-cdk-lib", "2.154.0", __name__[0:-6], "aws-cdk-lib@2.154.0.jsii.tgz"
 )
 
 __all__ = [

aws_cdk/alexa_ask/__init__.py

@@ -181,7 +181,7 @@ class CfnSkill(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7f79ad56de5a233709bfa180b3886229464b9d28a88416bdaabab40400468843)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "authenticationConfiguration", value)
+        jsii.set(self, "authenticationConfiguration", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="skillPackage")
@@ -199,7 +199,7 @@ class CfnSkill(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1160f84c06aa4769b57c3cf0e89867f1c310c0c73387afad6e0e174defac367a)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "skillPackage", value)
+        jsii.set(self, "skillPackage", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="vendorId")
@@ -212,7 +212,7 @@ class CfnSkill(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1e19323a763e3e7ce004953363ef3f20809f72e8931c75312b88fc85064e5d44)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "vendorId", value)
+        jsii.set(self, "vendorId", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.alexa_ask.CfnSkill.AuthenticationConfigurationProperty",

aws_cdk/aws_accessanalyzer/__init__.py

@@ -198,7 +198,7 @@ class CfnAnalyzer(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ae0ebe072220649d8253f3011fe641bc781e24d2bbf9d9a1cc55fdf1fb9124cf)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "type", value)
+        jsii.set(self, "type", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="analyzerConfiguration")
@@ -216,7 +216,7 @@ class CfnAnalyzer(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3b65a5d08bf50e1911863b6e4854f804654921017c34f668f95a5081f5c25b8c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "analyzerConfiguration", value)
+        jsii.set(self, "analyzerConfiguration", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="analyzerName")
@@ -229,7 +229,7 @@ class CfnAnalyzer(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2f49c019c0256461aaf3c1e401ec662652b0851ed050ba88de78bf16d1886d0d)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "analyzerName", value)
+        jsii.set(self, "analyzerName", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="archiveRules")
@@ -247,7 +247,7 @@ class CfnAnalyzer(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a6e8df0db0833319fd0b7c019964ba2ec4f399928538e323239bc668cacd0434)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "archiveRules", value)
+        jsii.set(self, "archiveRules", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
@@ -260,7 +260,7 @@ class CfnAnalyzer(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a60563761f5e2faa4dde6d3c0daa593ac20d10acf23bf72fc62050810a7b3e48)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tagsRaw", value)
+        jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_accessanalyzer.CfnAnalyzer.AnalyzerConfigurationProperty",

aws_cdk/aws_acmpca/__init__.py

@@ -372,7 +372,7 @@ class CfnCertificate(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__929f46388471884d412a93caaec6152169738bcde7736082806fa61355f38450)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "certificateAuthorityArn", value)
+        jsii.set(self, "certificateAuthorityArn", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="certificateSigningRequest")
@@ -385,7 +385,7 @@ class CfnCertificate(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__16a09377d92f4e276678c2c81de91b48247f6567816f2a450052d3564b74e969)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "certificateSigningRequest", value)
+        jsii.set(self, "certificateSigningRequest", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="signingAlgorithm")
@@ -398,7 +398,7 @@ class CfnCertificate(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__643e9821d5b63922252de6f66c05ac417883bee41b28c13cf3db8cd2632e14e8)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "signingAlgorithm", value)
+        jsii.set(self, "signingAlgorithm", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="validity")
@@ -416,7 +416,7 @@ class CfnCertificate(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__4b0f98fada0460f1013060888886a3c2a49f08cade3f294d7b78ab8077353d28)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "validity", value)
+        jsii.set(self, "validity", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="apiPassthrough")
@@ -434,7 +434,7 @@ class CfnCertificate(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__07edd7fc55218dbdda428adf3aa29d974595465ca0c1084ed6f98a79f08d4841)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "apiPassthrough", value)
+        jsii.set(self, "apiPassthrough", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="templateArn")
@@ -447,7 +447,7 @@ class CfnCertificate(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__20f419f7a37472cedd9954e752bfa553241909264a1db9544a8edce9404b9552)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "templateArn", value)
+        jsii.set(self, "templateArn", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="validityNotBefore")
@@ -465,7 +465,7 @@ class CfnCertificate(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ce4f5fb71e1d9798d96fd2e8524ac910685f8e895b03a85141518face166fd7e)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "validityNotBefore", value)
+        jsii.set(self, "validityNotBefore", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_acmpca.CfnCertificate.ApiPassthroughProperty",
@@ -2389,7 +2389,7 @@ class CfnCertificateAuthority(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b7e6c5981edef9a3b3627b2003de2630869e19cd61c48d608bfd86a7f219e472)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "keyAlgorithm", value)
+        jsii.set(self, "keyAlgorithm", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="signingAlgorithm")
@@ -2402,7 +2402,7 @@ class CfnCertificateAuthority(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b7e2832fbc61e46c30f08119509dacf6b15d90881721ef6f70b6331442b62041)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "signingAlgorithm", value)
+        jsii.set(self, "signingAlgorithm", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="subject")
@@ -2420,7 +2420,7 @@ class CfnCertificateAuthority(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__65bb497527ac064e6e2dac08377e39c6239f7e846ca18078132927a75d6471bb)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "subject", value)
+        jsii.set(self, "subject", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="type")
@@ -2433,7 +2433,7 @@ class CfnCertificateAuthority(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__77017d7803db08d3adb6df13436c6f61e9248dba04cb27f3ad2c009449c54235)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "type", value)
+        jsii.set(self, "type", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="csrExtensions")
@@ -2451,7 +2451,7 @@ class CfnCertificateAuthority(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__672400fc9d101cb3557ef2b74a3ed2c3389e8f619013c4b2a84263707b9ad5d3)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "csrExtensions", value)
+        jsii.set(self, "csrExtensions", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="keyStorageSecurityStandard")
@@ -2467,7 +2467,7 @@ class CfnCertificateAuthority(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__be8e4d5ae1e7416c87aef05e06dfd53984f27b32f1d6ac821bb176da70ccf89f)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "keyStorageSecurityStandard", value)
+        jsii.set(self, "keyStorageSecurityStandard", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="revocationConfiguration")
@@ -2485,7 +2485,7 @@ class CfnCertificateAuthority(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__203567ece18e0659c536811874601c021c570afc77b0834d25d2e06ac2849f57)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "revocationConfiguration", value)
+        jsii.set(self, "revocationConfiguration", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
@@ -2498,7 +2498,7 @@ class CfnCertificateAuthority(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__01bad6d3cb4db9f6f71a433aa44c7435297b8f644c8fdcbe06a0550035a76fa5)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tagsRaw", value)
+        jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="usageMode")
@@ -2511,7 +2511,7 @@ class CfnCertificateAuthority(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__8d183c3c1616f42e791fb50dd3640b6710dbdb67c4b67d83635a3687f5abb9d0)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "usageMode", value)
+        jsii.set(self, "usageMode", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_acmpca.CfnCertificateAuthority.AccessDescriptionProperty",
@@ -2714,7 +2714,10 @@ class CfnCertificateAuthority(
             "enabled": "enabled",
             "crl_distribution_point_extension_configuration": "crlDistributionPointExtensionConfiguration",
             "custom_cname": "customCname",
+            "custom_path": "customPath",
             "expiration_in_days": "expirationInDays",
+            "partitioning_enabled": "partitioningEnabled",
+            "retain_expired_certificates": "retainExpiredCertificates",
             "s3_bucket_name": "s3BucketName",
             "s3_object_acl": "s3ObjectAcl",
         },
@@ -2726,7 +2729,10 @@ class CfnCertificateAuthority(
             enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
             crl_distribution_point_extension_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCertificateAuthority.CrlDistributionPointExtensionConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             custom_cname: typing.Optional[builtins.str] = None,
+            custom_path: typing.Optional[builtins.str] = None,
             expiration_in_days: typing.Optional[jsii.Number] = None,
+            partitioning_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+            retain_expired_certificates: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             s3_bucket_name: typing.Optional[builtins.str] = None,
             s3_object_acl: typing.Optional[builtins.str] = None,
         ) -> None:
@@ -2767,7 +2773,10 @@ class CfnCertificateAuthority(
             :param enabled: Boolean value that specifies whether certificate revocation lists (CRLs) are enabled. You can use this value to enable certificate revocation for a new CA when you call the ``CreateCertificateAuthority`` operation or for an existing CA when you call the ``UpdateCertificateAuthority`` operation.
             :param crl_distribution_point_extension_configuration: Configures the default behavior of the CRL Distribution Point extension for certificates issued by your CA. If this field is not provided, then the CRL Distribution Point extension will be present and contain the default CRL URL.
             :param custom_cname: Name inserted into the certificate *CRL Distribution Points* extension that enables the use of an alias for the CRL distribution point. Use this value if you don't want the name of your S3 bucket to be public. .. epigraph:: The content of a Canonical Name (CNAME) record must conform to `RFC2396 <https://docs.aws.amazon.com/https://www.ietf.org/rfc/rfc2396.txt>`_ restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as "http://" or "https://".
+            :param custom_path: 
             :param expiration_in_days: Validity period of the CRL in days.
+            :param partitioning_enabled: 
+            :param retain_expired_certificates: 
             :param s3_bucket_name: Name of the S3 bucket that contains the CRL. If you do not provide a value for the *CustomCname* argument, the name of your S3 bucket is placed into the *CRL Distribution Points* extension of the issued certificate. You can change the name of your bucket by calling the `UpdateCertificateAuthority <https://docs.aws.amazon.com/privateca/latest/APIReference/API_UpdateCertificateAuthority.html>`_ operation. You must specify a `bucket policy <https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-policies>`_ that allows AWS Private CA to write the CRL to your bucket. .. epigraph:: The ``S3BucketName`` parameter must conform to the `S3 bucket naming rules <https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html>`_ .
             :param s3_object_acl: Determines whether the CRL will be publicly readable or privately held in the CRL Amazon S3 bucket. If you choose PUBLIC_READ, the CRL will be accessible over the public internet. If you choose BUCKET_OWNER_FULL_CONTROL, only the owner of the CRL S3 bucket can access the CRL, and your PKI clients may need an alternative method of access. If no value is specified, the default is PUBLIC_READ. *Note:* This default can cause CA creation to fail in some circumstances. If you have have enabled the Block Public Access (BPA) feature in your S3 account, then you must specify the value of this parameter as ``BUCKET_OWNER_FULL_CONTROL`` , and not doing so results in an error. If you have disabled BPA in S3, then you can specify either ``BUCKET_OWNER_FULL_CONTROL`` or ``PUBLIC_READ`` as the value. For more information, see `Blocking public access to the S3 bucket <https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-bpa>`_ .
 
@@ -2788,7 +2797,10 @@ class CfnCertificateAuthority(
                         omit_extension=False
                     ),
                     custom_cname="customCname",
+                    custom_path="customPath",
                     expiration_in_days=123,
+                    partitioning_enabled=False,
+                    retain_expired_certificates=False,
                     s3_bucket_name="s3BucketName",
                     s3_object_acl="s3ObjectAcl"
                 )
@@ -2798,7 +2810,10 @@ class CfnCertificateAuthority(
                 check_type(argname="argument enabled", value=enabled, expected_type=type_hints["enabled"])
                 check_type(argname="argument crl_distribution_point_extension_configuration", value=crl_distribution_point_extension_configuration, expected_type=type_hints["crl_distribution_point_extension_configuration"])
                 check_type(argname="argument custom_cname", value=custom_cname, expected_type=type_hints["custom_cname"])
+                check_type(argname="argument custom_path", value=custom_path, expected_type=type_hints["custom_path"])
                 check_type(argname="argument expiration_in_days", value=expiration_in_days, expected_type=type_hints["expiration_in_days"])
+                check_type(argname="argument partitioning_enabled", value=partitioning_enabled, expected_type=type_hints["partitioning_enabled"])
+                check_type(argname="argument retain_expired_certificates", value=retain_expired_certificates, expected_type=type_hints["retain_expired_certificates"])
                 check_type(argname="argument s3_bucket_name", value=s3_bucket_name, expected_type=type_hints["s3_bucket_name"])
                 check_type(argname="argument s3_object_acl", value=s3_object_acl, expected_type=type_hints["s3_object_acl"])
             self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -2808,8 +2823,14 @@ class CfnCertificateAuthority(
                 self._values["crl_distribution_point_extension_configuration"] = crl_distribution_point_extension_configuration
             if custom_cname is not None:
                 self._values["custom_cname"] = custom_cname
+            if custom_path is not None:
+                self._values["custom_path"] = custom_path
             if expiration_in_days is not None:
                 self._values["expiration_in_days"] = expiration_in_days
+            if partitioning_enabled is not None:
+                self._values["partitioning_enabled"] = partitioning_enabled
+            if retain_expired_certificates is not None:
+                self._values["retain_expired_certificates"] = retain_expired_certificates
             if s3_bucket_name is not None:
                 self._values["s3_bucket_name"] = s3_bucket_name
             if s3_object_acl is not None:
@@ -2854,6 +2875,14 @@ class CfnCertificateAuthority(
             result = self._values.get("custom_cname")
             return typing.cast(typing.Optional[builtins.str], result)
 
+        @builtins.property
+        def custom_path(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-crlconfiguration.html#cfn-acmpca-certificateauthority-crlconfiguration-custompath
+            '''
+            result = self._values.get("custom_path")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         @builtins.property
         def expiration_in_days(self) -> typing.Optional[jsii.Number]:
             '''Validity period of the CRL in days.
@@ -2863,6 +2892,26 @@ class CfnCertificateAuthority(
             result = self._values.get("expiration_in_days")
             return typing.cast(typing.Optional[jsii.Number], result)
 
+        @builtins.property
+        def partitioning_enabled(
+            self,
+        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-crlconfiguration.html#cfn-acmpca-certificateauthority-crlconfiguration-partitioningenabled
+            '''
+            result = self._values.get("partitioning_enabled")
+            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+        @builtins.property
+        def retain_expired_certificates(
+            self,
+        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-crlconfiguration.html#cfn-acmpca-certificateauthority-crlconfiguration-retainexpiredcertificates
+            '''
+            result = self._values.get("retain_expired_certificates")
+            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
         @builtins.property
         def s3_bucket_name(self) -> typing.Optional[builtins.str]:
             '''Name of the S3 bucket that contains the CRL.
@@ -3863,7 +3912,10 @@ class CfnCertificateAuthority(
                             omit_extension=False
                         ),
                         custom_cname="customCname",
+                        custom_path="customPath",
                         expiration_in_days=123,
+                        partitioning_enabled=False,
+                        retain_expired_certificates=False,
                         s3_bucket_name="s3BucketName",
                         s3_object_acl="s3ObjectAcl"
                     ),
@@ -4329,7 +4381,7 @@ class CfnCertificateAuthorityActivation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b279179f6b525656e5ee2f3b4d595cb75d494cf246f2e92a8469589c5395bfdd)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "certificate", value)
+        jsii.set(self, "certificate", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="certificateAuthorityArn")
@@ -4342,7 +4394,7 @@ class CfnCertificateAuthorityActivation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__43dd6c4689519828c2c042c80ee0ae6a9d3b03512aaac4693b2c9abdf2799b92)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "certificateAuthorityArn", value)
+        jsii.set(self, "certificateAuthorityArn", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="certificateChain")
@@ -4355,7 +4407,7 @@ class CfnCertificateAuthorityActivation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__87c41ac4f9f42cd4127fcc9a6dfc22f017ed7eeba7dd94714974f3af2143dce1)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "certificateChain", value)
+        jsii.set(self, "certificateChain", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="status")
@@ -4368,7 +4420,7 @@ class CfnCertificateAuthorityActivation(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__4bb84ac3ee8ec3f7d2297504aaca248c351bd9fd6b388a9a80a5c547a8b217eb)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "status", value)
+        jsii.set(self, "status", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.data_type(
@@ -5094,7 +5146,7 @@ class CfnPermission(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__d66768d9ebbeae3804aef733e92b2f439fa97176bd7c8fe4678fdb5bcb1a203c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "actions", value)
+        jsii.set(self, "actions", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="certificateAuthorityArn")
@@ -5107,7 +5159,7 @@ class CfnPermission(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3cedc10edb2bf740d73d914ce4705a9a6c80297d3e34901af9a5206b3fe6d131)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "certificateAuthorityArn", value)
+        jsii.set(self, "certificateAuthorityArn", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="principal")
@@ -5120,7 +5172,7 @@ class CfnPermission(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__15c3392ebc670af42af684ca42dddcffe29ad37af007e2788604447f884ea595)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "principal", value)
+        jsii.set(self, "principal", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="sourceAccount")
@@ -5133,7 +5185,7 @@ class CfnPermission(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__336a294e18ad34a8379580ec71e5c0dca499ba44efb4e2cad4bf5190ba57b1fd)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "sourceAccount", value)
+        jsii.set(self, "sourceAccount", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.data_type(
@@ -5620,7 +5672,10 @@ def _typecheckingstub__de72782a3b3117c1f101c2c6c2fad457863e581a5bdcd67a1280a825d
     enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
     crl_distribution_point_extension_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCertificateAuthority.CrlDistributionPointExtensionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     custom_cname: typing.Optional[builtins.str] = None,
+    custom_path: typing.Optional[builtins.str] = None,
     expiration_in_days: typing.Optional[jsii.Number] = None,
+    partitioning_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    retain_expired_certificates: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     s3_bucket_name: typing.Optional[builtins.str] = None,
     s3_object_acl: typing.Optional[builtins.str] = None,
 ) -> None: