aws-cdk-lib 2.153.0__py3-none-any.whl → 2.154.1__py3-none-any.whl

aws_cdk/aws_stepfunctions/__init__.py

@@ -1353,7 +1353,7 @@ class CfnActivity(
 ):
     '''An activity is a task that you write in any programming language and host on any machine that has access to AWS Step Functions .
 
-    Activities must poll Step Functions using the ``GetActivityTask`` API action and respond using ``SendTask*`` API actions. This function lets Step Functions know the existence of your activity and returns an identifier for use in a state machine and when polling from the activity.
+    Activities must poll Step Functions using the ``GetActivityTask`` API action and respond using ``SendTask*`` API actions. This function makes Step Functions aware of your activity and returns an identifier for use in a state machine and when polling from the activity.
 
     For information about creating an activity, see `Creating an Activity State Machine <https://docs.aws.amazon.com/step-functions/latest/dg/tutorial-creating-activity-state-machine.html>`_ in the *AWS Step Functions Developer Guide* and `CreateActivity <https://docs.aws.amazon.com/step-functions/latest/apireference/API_CreateActivity.html>`_ in the *AWS Step Functions API Reference* .
 
@@ -1371,6 +1371,13 @@ class CfnActivity(
             name="name",
         
             # the properties below are optional
+            encryption_configuration=stepfunctions.CfnActivity.EncryptionConfigurationProperty(
+                type="type",
+        
+                # the properties below are optional
+                kms_data_key_reuse_period_seconds=123,
+                kms_key_id="kmsKeyId"
+            ),
             tags=[stepfunctions.CfnActivity.TagsEntryProperty(
                 key="key",
                 value="value"
@@ -1384,19 +1391,23 @@ class CfnActivity(
         id: builtins.str,
         *,
         name: builtins.str,
+        encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnActivity.EncryptionConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union["CfnActivity.TagsEntryProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the activity. A name must *not* contain: - white space - brackets ``< > { } [ ]`` - wildcard characters ``? *`` - special characters ``" # % \\ ^ | ~ `` $ & , ; : /` - control characters ( ``U+0000-001F`` , ``U+007F-009F`` ) To enable logging with CloudWatch Logs, the name should only contain 0-9, A-Z, a-z, - and _.
+        :param encryption_configuration: Encryption configuration for the activity. Activity configuration is immutable, and resource names must be unique. To set customer managed keys for encryption, you must create a *new Activity* . If you attempt to change the configuration in your CFN template for an existing activity, you will receive an ``ActivityAlreadyExists`` exception. To update your activity to include customer managed keys, set a new activity name within your AWS CloudFormation template.
         :param tags: The list of tags to add to a resource. Tags may only contain Unicode letters, digits, white space, or these symbols: `_ . : / = + -
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e9cac9ccbc74858ea58acc13770fdeee7b204562b53992182f500d45a5f816a2)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-        props = CfnActivityProps(name=name, tags=tags)
+        props = CfnActivityProps(
+            name=name, encryption_configuration=encryption_configuration, tags=tags
+        )
 
         jsii.create(self.__class__, self, [scope, id, props])
 
@@ -1478,7 +1489,25 @@ class CfnActivity(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__8395bdf4e76b8a41673d28377cd1001ff25935aca9798745ebef40fe06572120)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="encryptionConfiguration")
+    def encryption_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnActivity.EncryptionConfigurationProperty"]]:
+        '''Encryption configuration for the activity.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnActivity.EncryptionConfigurationProperty"]], jsii.get(self, "encryptionConfiguration"))
+
+    @encryption_configuration.setter
+    def encryption_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnActivity.EncryptionConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__50ec6c3cd7c2d1844e46c4fd7f9d3d9befacc4e6129f6a8dea961ef8c315ae54)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "encryptionConfiguration", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
@@ -1494,7 +1523,105 @@ class CfnActivity(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__c963f19dfa2bfb12cf0d22b5bf287aec4f47a000b16928a2dd660ae295dcde65)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tagsRaw", value)
+        jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_stepfunctions.CfnActivity.EncryptionConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "type": "type",
+            "kms_data_key_reuse_period_seconds": "kmsDataKeyReusePeriodSeconds",
+            "kms_key_id": "kmsKeyId",
+        },
+    )
+    class EncryptionConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            type: builtins.str,
+            kms_data_key_reuse_period_seconds: typing.Optional[jsii.Number] = None,
+            kms_key_id: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Settings to configure server-side encryption for an activity.
+
+            By default, Step Functions provides transparent server-side encryption. With this configuration, you can specify a customer managed AWS KMS key for encryption.
+
+            :param type: Encryption option for an activity.
+            :param kms_data_key_reuse_period_seconds: Maximum duration that Step Functions will reuse data keys. When the period expires, Step Functions will call ``GenerateDataKey`` . Only applies to customer managed keys.
+            :param kms_key_id: An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS KMS key to encrypt data. To specify a AWS KMS key in a different AWS account, you must use the key ARN or alias ARN.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-activity-encryptionconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_stepfunctions as stepfunctions
+                
+                encryption_configuration_property = stepfunctions.CfnActivity.EncryptionConfigurationProperty(
+                    type="type",
+                
+                    # the properties below are optional
+                    kms_data_key_reuse_period_seconds=123,
+                    kms_key_id="kmsKeyId"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__1bda2f6d4f585c845fc70b11b2647945e78d856e759a1aaa657c54cd1fbbda1a)
+                check_type(argname="argument type", value=type, expected_type=type_hints["type"])
+                check_type(argname="argument kms_data_key_reuse_period_seconds", value=kms_data_key_reuse_period_seconds, expected_type=type_hints["kms_data_key_reuse_period_seconds"])
+                check_type(argname="argument kms_key_id", value=kms_key_id, expected_type=type_hints["kms_key_id"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "type": type,
+            }
+            if kms_data_key_reuse_period_seconds is not None:
+                self._values["kms_data_key_reuse_period_seconds"] = kms_data_key_reuse_period_seconds
+            if kms_key_id is not None:
+                self._values["kms_key_id"] = kms_key_id
+
+        @builtins.property
+        def type(self) -> builtins.str:
+            '''Encryption option for an activity.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-activity-encryptionconfiguration.html#cfn-stepfunctions-activity-encryptionconfiguration-type
+            '''
+            result = self._values.get("type")
+            assert result is not None, "Required property 'type' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def kms_data_key_reuse_period_seconds(self) -> typing.Optional[jsii.Number]:
+            '''Maximum duration that Step Functions will reuse data keys.
+
+            When the period expires, Step Functions will call ``GenerateDataKey`` . Only applies to customer managed keys.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-activity-encryptionconfiguration.html#cfn-stepfunctions-activity-encryptionconfiguration-kmsdatakeyreuseperiodseconds
+            '''
+            result = self._values.get("kms_data_key_reuse_period_seconds")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def kms_key_id(self) -> typing.Optional[builtins.str]:
+            '''An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS KMS key to encrypt data.
+
+            To specify a AWS KMS key in a different AWS account, you must use the key ARN or alias ARN.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-activity-encryptionconfiguration.html#cfn-stepfunctions-activity-encryptionconfiguration-kmskeyid
+            '''
+            result = self._values.get("kms_key_id")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "EncryptionConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_stepfunctions.CfnActivity.TagsEntryProperty",
@@ -1566,18 +1693,24 @@ class CfnActivity(
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_stepfunctions.CfnActivityProps",
     jsii_struct_bases=[],
-    name_mapping={"name": "name", "tags": "tags"},
+    name_mapping={
+        "name": "name",
+        "encryption_configuration": "encryptionConfiguration",
+        "tags": "tags",
+    },
 )
 class CfnActivityProps:
     def __init__(
         self,
         *,
         name: builtins.str,
+        encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnActivity.EncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[CfnActivity.TagsEntryProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnActivity``.
 
         :param name: The name of the activity. A name must *not* contain: - white space - brackets ``< > { } [ ]`` - wildcard characters ``? *`` - special characters ``" # % \\ ^ | ~ `` $ & , ; : /` - control characters ( ``U+0000-001F`` , ``U+007F-009F`` ) To enable logging with CloudWatch Logs, the name should only contain 0-9, A-Z, a-z, - and _.
+        :param encryption_configuration: Encryption configuration for the activity. Activity configuration is immutable, and resource names must be unique. To set customer managed keys for encryption, you must create a *new Activity* . If you attempt to change the configuration in your CFN template for an existing activity, you will receive an ``ActivityAlreadyExists`` exception. To update your activity to include customer managed keys, set a new activity name within your AWS CloudFormation template.
         :param tags: The list of tags to add to a resource. Tags may only contain Unicode letters, digits, white space, or these symbols: `_ . : / = + -
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-activity.html
@@ -1593,6 +1726,13 @@ class CfnActivityProps:
                 name="name",
             
                 # the properties below are optional
+                encryption_configuration=stepfunctions.CfnActivity.EncryptionConfigurationProperty(
+                    type="type",
+            
+                    # the properties below are optional
+                    kms_data_key_reuse_period_seconds=123,
+                    kms_key_id="kmsKeyId"
+                ),
                 tags=[stepfunctions.CfnActivity.TagsEntryProperty(
                     key="key",
                     value="value"
@@ -1602,10 +1742,13 @@ class CfnActivityProps:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__84792b5435bbf43a453a6bf0f4d6e6d61a7c86759e3f95b4d4af4d4e56f641c4)
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument encryption_configuration", value=encryption_configuration, expected_type=type_hints["encryption_configuration"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "name": name,
         }
+        if encryption_configuration is not None:
+            self._values["encryption_configuration"] = encryption_configuration
         if tags is not None:
             self._values["tags"] = tags
 
@@ -1629,6 +1772,21 @@ class CfnActivityProps:
         assert result is not None, "Required property 'name' is missing"
         return typing.cast(builtins.str, result)
 
+    @builtins.property
+    def encryption_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnActivity.EncryptionConfigurationProperty]]:
+        '''Encryption configuration for the activity.
+
+        Activity configuration is immutable, and resource names must be unique. To set customer managed keys for encryption, you must create a *new Activity* . If you attempt to change the configuration in your CFN template for an existing activity, you will receive an ``ActivityAlreadyExists`` exception.
+
+        To update your activity to include customer managed keys, set a new activity name within your AWS CloudFormation template.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-activity.html#cfn-stepfunctions-activity-encryptionconfiguration
+        '''
+        result = self._values.get("encryption_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnActivity.EncryptionConfigurationProperty]], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[CfnActivity.TagsEntryProperty]]:
         '''The list of tags to add to a resource.
@@ -1691,6 +1849,13 @@ class CfnStateMachine(
             definition_substitutions={
                 "definition_substitutions_key": "definitionSubstitutions"
             },
+            encryption_configuration=stepfunctions.CfnStateMachine.EncryptionConfigurationProperty(
+                type="type",
+        
+                # the properties below are optional
+                kms_data_key_reuse_period_seconds=123,
+                kms_key_id="kmsKeyId"
+            ),
             logging_configuration=stepfunctions.CfnStateMachine.LoggingConfigurationProperty(
                 destinations=[stepfunctions.CfnStateMachine.LogDestinationProperty(
                     cloud_watch_logs_log_group=stepfunctions.CfnStateMachine.CloudWatchLogsLogGroupProperty(
@@ -1722,6 +1887,7 @@ class CfnStateMachine(
         definition_s3_location: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnStateMachine.S3LocationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         definition_string: typing.Optional[builtins.str] = None,
         definition_substitutions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+        encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnStateMachine.EncryptionConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         logging_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnStateMachine.LoggingConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         state_machine_name: typing.Optional[builtins.str] = None,
         state_machine_type: typing.Optional[builtins.str] = None,
@@ -1736,6 +1902,7 @@ class CfnStateMachine(
         :param definition_s3_location: The name of the S3 bucket where the state machine definition is stored. The state machine definition must be a JSON or YAML file.
         :param definition_string: The Amazon States Language definition of the state machine. The state machine definition must be in JSON. See `Amazon States Language <https://docs.aws.amazon.com/step-functions/latest/dg/concepts-amazon-states-language.html>`_ .
         :param definition_substitutions: A map (string to string) that specifies the mappings for placeholder variables in the state machine definition. This enables the customer to inject values obtained at runtime, for example from intrinsic functions, in the state machine definition. Variables can be template parameter names, resource logical IDs, resource attributes, or a variable in a key-value map. Substitutions must follow the syntax: ``${key_name}`` or ``${variable_1,variable_2,...}`` .
+        :param encryption_configuration: Encryption configuration for the state machine.
         :param logging_configuration: Defines what execution history events are logged and where they are logged. .. epigraph:: By default, the ``level`` is set to ``OFF`` . For more information see `Log Levels <https://docs.aws.amazon.com/step-functions/latest/dg/cloudwatch-log-level.html>`_ in the AWS Step Functions User Guide.
         :param state_machine_name: The name of the state machine. A name must *not* contain: - white space - brackets ``< > { } [ ]`` - wildcard characters ``? *`` - special characters ``" # % \\ ^ | ~ `` $ & , ; : /` - control characters ( ``U+0000-001F`` , ``U+007F-009F`` ) .. epigraph:: If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
         :param state_machine_type: Determines whether a ``STANDARD`` or ``EXPRESS`` state machine is created. The default is ``STANDARD`` . You cannot update the ``type`` of a state machine once it has been created. For more information on ``STANDARD`` and ``EXPRESS`` workflows, see `Standard Versus Express Workflows <https://docs.aws.amazon.com/step-functions/latest/dg/concepts-standard-vs-express.html>`_ in the AWS Step Functions Developer Guide.
@@ -1752,6 +1919,7 @@ class CfnStateMachine(
             definition_s3_location=definition_s3_location,
             definition_string=definition_string,
             definition_substitutions=definition_substitutions,
+            encryption_configuration=encryption_configuration,
             logging_configuration=logging_configuration,
             state_machine_name=state_machine_name,
             state_machine_type=state_machine_type,
@@ -1852,7 +2020,7 @@ class CfnStateMachine(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3004fba1e9c0225151457c38edd4c7effc7d187628b86416f39849b982f49a1b)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "roleArn", value)
+        jsii.set(self, "roleArn", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="definition")
@@ -1865,7 +2033,7 @@ class CfnStateMachine(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f82f2a7642ea2ac7bdf170a2733a41594fd40eb07f7e540d495f22c6fa06b147)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "definition", value)
+        jsii.set(self, "definition", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="definitionS3Location")
@@ -1883,7 +2051,7 @@ class CfnStateMachine(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2c6f22451e8abd968219b59f11a227c9451d5cd7cb1ff91b3bd91c4ab25bd6da)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "definitionS3Location", value)
+        jsii.set(self, "definitionS3Location", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="definitionString")
@@ -1896,7 +2064,7 @@ class CfnStateMachine(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__c930aec966c75b589ce56dba8aee211d61eeb6c41d99c5c84ab2df4b703b35d3)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "definitionString", value)
+        jsii.set(self, "definitionString", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="definitionSubstitutions")
@@ -1914,7 +2082,25 @@ class CfnStateMachine(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e05fa36d2c9116cb2c90b1560cd6e7bc08699fa552a7e75ce5775a927ad53415)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "definitionSubstitutions", value)
+        jsii.set(self, "definitionSubstitutions", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="encryptionConfiguration")
+    def encryption_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnStateMachine.EncryptionConfigurationProperty"]]:
+        '''Encryption configuration for the state machine.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnStateMachine.EncryptionConfigurationProperty"]], jsii.get(self, "encryptionConfiguration"))
+
+    @encryption_configuration.setter
+    def encryption_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnStateMachine.EncryptionConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ce904333e518564adf04f2eb84a1f9cc5b437dde18f6aed04e958a4a0dac58a5)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "encryptionConfiguration", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="loggingConfiguration")
@@ -1932,7 +2118,7 @@ class CfnStateMachine(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__79f4c64119545b342b25a9aba40a7ac8de878e2ca38859e38a10004112309301)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "loggingConfiguration", value)
+        jsii.set(self, "loggingConfiguration", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="stateMachineName")
@@ -1945,7 +2131,7 @@ class CfnStateMachine(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f1c0751a8a3952639ad0b17cb78032a0bad0e3a1e983836e5c861a8129c0c542)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "stateMachineName", value)
+        jsii.set(self, "stateMachineName", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="stateMachineType")
@@ -1958,7 +2144,7 @@ class CfnStateMachine(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__0aef9754ddbe205b0e3cda858acb6182a9a911881b2f81e68f20b454cc9d738e)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "stateMachineType", value)
+        jsii.set(self, "stateMachineType", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
@@ -1976,7 +2162,7 @@ class CfnStateMachine(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__142d2d5d8871bd122c48cc77fb02230c828841e8672a11480c58d07a743ec8d0)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tagsRaw", value)
+        jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tracingConfiguration")
@@ -1994,7 +2180,7 @@ class CfnStateMachine(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7975c26bdc928c8d9fd66a2493df6fc6818b885815e25f63844e956d275c1d01)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tracingConfiguration", value)
+        jsii.set(self, "tracingConfiguration", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_stepfunctions.CfnStateMachine.CloudWatchLogsLogGroupProperty",
@@ -2057,6 +2243,104 @@ class CfnStateMachine(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_stepfunctions.CfnStateMachine.EncryptionConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "type": "type",
+            "kms_data_key_reuse_period_seconds": "kmsDataKeyReusePeriodSeconds",
+            "kms_key_id": "kmsKeyId",
+        },
+    )
+    class EncryptionConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            type: builtins.str,
+            kms_data_key_reuse_period_seconds: typing.Optional[jsii.Number] = None,
+            kms_key_id: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Settings to configure server-side encryption for a state machine.
+
+            By default, Step Functions provides transparent server-side encryption. With this configuration, you can specify a customer managed AWS KMS key for encryption.
+
+            :param type: Encryption option for a state machine.
+            :param kms_data_key_reuse_period_seconds: Maximum duration that Step Functions will reuse data keys. When the period expires, Step Functions will call ``GenerateDataKey`` . Only applies to customer managed keys.
+            :param kms_key_id: An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS KMS key to encrypt data. To specify a AWS KMS key in a different AWS account, you must use the key ARN or alias ARN.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachine-encryptionconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_stepfunctions as stepfunctions
+                
+                encryption_configuration_property = stepfunctions.CfnStateMachine.EncryptionConfigurationProperty(
+                    type="type",
+                
+                    # the properties below are optional
+                    kms_data_key_reuse_period_seconds=123,
+                    kms_key_id="kmsKeyId"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__341c0cd8235a25a0d302ecdb1bbf778638f5c811795090071279001e4e9d1a93)
+                check_type(argname="argument type", value=type, expected_type=type_hints["type"])
+                check_type(argname="argument kms_data_key_reuse_period_seconds", value=kms_data_key_reuse_period_seconds, expected_type=type_hints["kms_data_key_reuse_period_seconds"])
+                check_type(argname="argument kms_key_id", value=kms_key_id, expected_type=type_hints["kms_key_id"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "type": type,
+            }
+            if kms_data_key_reuse_period_seconds is not None:
+                self._values["kms_data_key_reuse_period_seconds"] = kms_data_key_reuse_period_seconds
+            if kms_key_id is not None:
+                self._values["kms_key_id"] = kms_key_id
+
+        @builtins.property
+        def type(self) -> builtins.str:
+            '''Encryption option for a state machine.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachine-encryptionconfiguration.html#cfn-stepfunctions-statemachine-encryptionconfiguration-type
+            '''
+            result = self._values.get("type")
+            assert result is not None, "Required property 'type' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def kms_data_key_reuse_period_seconds(self) -> typing.Optional[jsii.Number]:
+            '''Maximum duration that Step Functions will reuse data keys.
+
+            When the period expires, Step Functions will call ``GenerateDataKey`` . Only applies to customer managed keys.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachine-encryptionconfiguration.html#cfn-stepfunctions-statemachine-encryptionconfiguration-kmsdatakeyreuseperiodseconds
+            '''
+            result = self._values.get("kms_data_key_reuse_period_seconds")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def kms_key_id(self) -> typing.Optional[builtins.str]:
+            '''An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS KMS key to encrypt data.
+
+            To specify a AWS KMS key in a different AWS account, you must use the key ARN or alias ARN.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachine-encryptionconfiguration.html#cfn-stepfunctions-statemachine-encryptionconfiguration-kmskeyid
+            '''
+            result = self._values.get("kms_key_id")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "EncryptionConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_stepfunctions.CfnStateMachine.LogDestinationProperty",
         jsii_struct_bases=[],
@@ -2576,7 +2860,7 @@ class CfnStateMachineAlias(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__291c291374c3a7bdc720916a40ec17c8994233f17b521e36f88493f1dfea6abe)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "deploymentPreference", value)
+        jsii.set(self, "deploymentPreference", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="description")
@@ -2589,7 +2873,7 @@ class CfnStateMachineAlias(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__c1c4a9670d54e1fd8d9f71a40d8fe51ff4c20b8266100071f23c2fcd11c913f4)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "description", value)
+        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="name")
@@ -2602,7 +2886,7 @@ class CfnStateMachineAlias(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__af65681afd264c6830e6a2a7499c40b1a1c1cd59a8a9d0c2b4f69d4df6f9f358)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="routingConfiguration")
@@ -2620,7 +2904,7 @@ class CfnStateMachineAlias(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__91c36ec8b9a1fe59c6e03fb3ba3b15d8849aa3ea74c639879915303e21486168)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "routingConfiguration", value)
+        jsii.set(self, "routingConfiguration", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_stepfunctions.CfnStateMachineAlias.DeploymentPreferenceProperty",
@@ -3000,6 +3284,7 @@ class CfnStateMachineAliasProps:
         "definition_s3_location": "definitionS3Location",
         "definition_string": "definitionString",
         "definition_substitutions": "definitionSubstitutions",
+        "encryption_configuration": "encryptionConfiguration",
         "logging_configuration": "loggingConfiguration",
         "state_machine_name": "stateMachineName",
         "state_machine_type": "stateMachineType",
@@ -3016,6 +3301,7 @@ class CfnStateMachineProps:
         definition_s3_location: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnStateMachine.S3LocationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         definition_string: typing.Optional[builtins.str] = None,
         definition_substitutions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+        encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnStateMachine.EncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         logging_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnStateMachine.LoggingConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         state_machine_name: typing.Optional[builtins.str] = None,
         state_machine_type: typing.Optional[builtins.str] = None,
@@ -3029,6 +3315,7 @@ class CfnStateMachineProps:
         :param definition_s3_location: The name of the S3 bucket where the state machine definition is stored. The state machine definition must be a JSON or YAML file.
         :param definition_string: The Amazon States Language definition of the state machine. The state machine definition must be in JSON. See `Amazon States Language <https://docs.aws.amazon.com/step-functions/latest/dg/concepts-amazon-states-language.html>`_ .
         :param definition_substitutions: A map (string to string) that specifies the mappings for placeholder variables in the state machine definition. This enables the customer to inject values obtained at runtime, for example from intrinsic functions, in the state machine definition. Variables can be template parameter names, resource logical IDs, resource attributes, or a variable in a key-value map. Substitutions must follow the syntax: ``${key_name}`` or ``${variable_1,variable_2,...}`` .
+        :param encryption_configuration: Encryption configuration for the state machine.
         :param logging_configuration: Defines what execution history events are logged and where they are logged. .. epigraph:: By default, the ``level`` is set to ``OFF`` . For more information see `Log Levels <https://docs.aws.amazon.com/step-functions/latest/dg/cloudwatch-log-level.html>`_ in the AWS Step Functions User Guide.
         :param state_machine_name: The name of the state machine. A name must *not* contain: - white space - brackets ``< > { } [ ]`` - wildcard characters ``? *`` - special characters ``" # % \\ ^ | ~ `` $ & , ; : /` - control characters ( ``U+0000-001F`` , ``U+007F-009F`` ) .. epigraph:: If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
         :param state_machine_type: Determines whether a ``STANDARD`` or ``EXPRESS`` state machine is created. The default is ``STANDARD`` . You cannot update the ``type`` of a state machine once it has been created. For more information on ``STANDARD`` and ``EXPRESS`` workflows, see `Standard Versus Express Workflows <https://docs.aws.amazon.com/step-functions/latest/dg/concepts-standard-vs-express.html>`_ in the AWS Step Functions Developer Guide.
@@ -3062,6 +3349,13 @@ class CfnStateMachineProps:
                 definition_substitutions={
                     "definition_substitutions_key": "definitionSubstitutions"
                 },
+                encryption_configuration=stepfunctions.CfnStateMachine.EncryptionConfigurationProperty(
+                    type="type",
+            
+                    # the properties below are optional
+                    kms_data_key_reuse_period_seconds=123,
+                    kms_key_id="kmsKeyId"
+                ),
                 logging_configuration=stepfunctions.CfnStateMachine.LoggingConfigurationProperty(
                     destinations=[stepfunctions.CfnStateMachine.LogDestinationProperty(
                         cloud_watch_logs_log_group=stepfunctions.CfnStateMachine.CloudWatchLogsLogGroupProperty(
@@ -3089,6 +3383,7 @@ class CfnStateMachineProps:
             check_type(argname="argument definition_s3_location", value=definition_s3_location, expected_type=type_hints["definition_s3_location"])
             check_type(argname="argument definition_string", value=definition_string, expected_type=type_hints["definition_string"])
             check_type(argname="argument definition_substitutions", value=definition_substitutions, expected_type=type_hints["definition_substitutions"])
+            check_type(argname="argument encryption_configuration", value=encryption_configuration, expected_type=type_hints["encryption_configuration"])
             check_type(argname="argument logging_configuration", value=logging_configuration, expected_type=type_hints["logging_configuration"])
             check_type(argname="argument state_machine_name", value=state_machine_name, expected_type=type_hints["state_machine_name"])
             check_type(argname="argument state_machine_type", value=state_machine_type, expected_type=type_hints["state_machine_type"])
@@ -3105,6 +3400,8 @@ class CfnStateMachineProps:
             self._values["definition_string"] = definition_string
         if definition_substitutions is not None:
             self._values["definition_substitutions"] = definition_substitutions
+        if encryption_configuration is not None:
+            self._values["encryption_configuration"] = encryption_configuration
         if logging_configuration is not None:
             self._values["logging_configuration"] = logging_configuration
         if state_machine_name is not None:
@@ -3176,6 +3473,17 @@ class CfnStateMachineProps:
         result = self._values.get("definition_substitutions")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], result)
 
+    @builtins.property
+    def encryption_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnStateMachine.EncryptionConfigurationProperty]]:
+        '''Encryption configuration for the state machine.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-statemachine.html#cfn-stepfunctions-statemachine-encryptionconfiguration
+        '''
+        result = self._values.get("encryption_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnStateMachine.EncryptionConfigurationProperty]], result)
+
     @builtins.property
     def logging_configuration(
         self,
@@ -3375,7 +3683,7 @@ class CfnStateMachineVersion(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__8b5bffae2ab6951189d8934aa88a458856f9a4d6623a0832d0295941754bf70d)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "stateMachineArn", value)
+        jsii.set(self, "stateMachineArn", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="description")
@@ -3388,7 +3696,7 @@ class CfnStateMachineVersion(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f8425cdd1ce7e33098a65ff2357b57674f96a520fc7d3cc63794e265253928cf)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "description", value)
+        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="stateMachineRevisionId")
@@ -3401,7 +3709,7 @@ class CfnStateMachineVersion(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2a80351896d09cb747491b59d0460387f46b6f51704f091b54c4fecf9f3f4bac)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "stateMachineRevisionId", value)
+        jsii.set(self, "stateMachineRevisionId", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.data_type(
@@ -9851,7 +10159,7 @@ class State(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__daa9d14a638bb5fe2be1b697c5d2a93e5cb602c30d93b1a5ca1eece88b36b1df)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "defaultChoice", value)
+        jsii.set(self, "defaultChoice", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="iteration")
@@ -9863,7 +10171,7 @@ class State(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__fe26ac05d39997cba9f0b774e8732e0d7e33aa2715be53c5d2b6746630255f5f)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "iteration", value)
+        jsii.set(self, "iteration", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="processor")
@@ -9875,7 +10183,7 @@ class State(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__18c6226d92e32b97a3bd2c7822b52c85358b3bd9174c0fcf373dcb3292508540)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "processor", value)
+        jsii.set(self, "processor", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="processorConfig")
@@ -9887,7 +10195,7 @@ class State(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2064eb72a766ce7c2f9e0be9e43dd6ea46736ba5dd83721de5468681035dcb9f)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "processorConfig", value)
+        jsii.set(self, "processorConfig", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="processorMode")
@@ -9899,7 +10207,7 @@ class State(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2607af153540f000865a3d1354fc0086931cc826a2328eb0ae249231c9c35ef2)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "processorMode", value)
+        jsii.set(self, "processorMode", value) # pyright: ignore[reportArgumentType]
 
 
 class _StateProxy(State):
@@ -10054,7 +10362,7 @@ class StateGraph(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__0d70fd99dfd053938f6857187678eff1538a49411584203816fe1ee6e2e95a57)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "timeout", value)
+        jsii.set(self, "timeout", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.implements(IStateMachine)
@@ -15717,6 +16025,7 @@ def _typecheckingstub__e9cac9ccbc74858ea58acc13770fdeee7b204562b53992182f500d45a
     id: builtins.str,
     *,
     name: builtins.str,
+    encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnActivity.EncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[CfnActivity.TagsEntryProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -15740,12 +16049,27 @@ def _typecheckingstub__8395bdf4e76b8a41673d28377cd1001ff25935aca9798745ebef40fe0
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__50ec6c3cd7c2d1844e46c4fd7f9d3d9befacc4e6129f6a8dea961ef8c315ae54(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnActivity.EncryptionConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c963f19dfa2bfb12cf0d22b5bf287aec4f47a000b16928a2dd660ae295dcde65(
     value: typing.Optional[typing.List[CfnActivity.TagsEntryProperty]],
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__1bda2f6d4f585c845fc70b11b2647945e78d856e759a1aaa657c54cd1fbbda1a(
+    *,
+    type: builtins.str,
+    kms_data_key_reuse_period_seconds: typing.Optional[jsii.Number] = None,
+    kms_key_id: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__5e620d5be50cdb836aed85b2b5bbc76573db0139cccc1fa49f54e926f1e4cbc7(
     *,
     key: builtins.str,
@@ -15757,6 +16081,7 @@ def _typecheckingstub__5e620d5be50cdb836aed85b2b5bbc76573db0139cccc1fa49f54e926f
 def _typecheckingstub__84792b5435bbf43a453a6bf0f4d6e6d61a7c86759e3f95b4d4af4d4e56f641c4(
     *,
     name: builtins.str,
+    encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnActivity.EncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[CfnActivity.TagsEntryProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -15771,6 +16096,7 @@ def _typecheckingstub__8b19fff9309f98c9776cf416019a5217333b4d6f0f81e27e2256a87f9
     definition_s3_location: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnStateMachine.S3LocationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     definition_string: typing.Optional[builtins.str] = None,
     definition_substitutions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnStateMachine.EncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     logging_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnStateMachine.LoggingConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     state_machine_name: typing.Optional[builtins.str] = None,
     state_machine_type: typing.Optional[builtins.str] = None,
@@ -15822,6 +16148,12 @@ def _typecheckingstub__e05fa36d2c9116cb2c90b1560cd6e7bc08699fa552a7e75ce5775a927
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__ce904333e518564adf04f2eb84a1f9cc5b437dde18f6aed04e958a4a0dac58a5(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnStateMachine.EncryptionConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__79f4c64119545b342b25a9aba40a7ac8de878e2ca38859e38a10004112309301(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnStateMachine.LoggingConfigurationProperty]],
 ) -> None:
@@ -15859,6 +16191,15 @@ def _typecheckingstub__fd590e91d2c1399d369226ca3fcbd6666d564980b08611a4b5f952ef3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__341c0cd8235a25a0d302ecdb1bbf778638f5c811795090071279001e4e9d1a93(
+    *,
+    type: builtins.str,
+    kms_data_key_reuse_period_seconds: typing.Optional[jsii.Number] = None,
+    kms_key_id: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__0a5d8a3abcdb82fe13dbd692519b118f763c5de9bf0de6025642f4d45a207ab1(
     *,
     cloud_watch_logs_log_group: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnStateMachine.CloudWatchLogsLogGroupProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -15983,6 +16324,7 @@ def _typecheckingstub__bf4d4e83bd396b6667f5c30b66226d7e76f61626aea9c4ec1355f6e6a
     definition_s3_location: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnStateMachine.S3LocationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     definition_string: typing.Optional[builtins.str] = None,
     definition_substitutions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnStateMachine.EncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     logging_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnStateMachine.LoggingConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     state_machine_name: typing.Optional[builtins.str] = None,
     state_machine_type: typing.Optional[builtins.str] = None,