aws-cdk-lib 2.153.0__py3-none-any.whl → 2.154.1__py3-none-any.whl

aws_cdk/aws_cloudfront/__init__.py

@@ -118,6 +118,16 @@ cloudfront.Distribution(self, "myDist",
 )
 ```
 
+#### Moving an alternate domain name to a different distribution
+
+When you try to add an alternate domain name to a distribution but the alternate domain name is already in use on a different distribution, you get a `CNAMEAlreadyExists` error (One or more of the CNAMEs you provided are already associated with a different resource).
+
+In that case, you might want to move the existing alternate domain name from one distribution (the source distribution) to another (the target distribution). The following steps are an overview of the process. For more information, see [Moving an alternate domain name to a different distribution](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/alternate-domain-names-move.html).
+
+1. Deploy the stack with the target distribution. The `certificate` property must be specified but the `domainNames` should be absent.
+2. Move the alternate domain name by running CloudFront `associate-alias` command. For the example and preconditions, see the AWS documentation above.
+3. Specify the `domainNames` property with the alternative domain name, then deploy the stack again to resolve the drift at the alternative domain name.
+
 #### Cross Region Certificates
 
 > **This feature is currently experimental**
@@ -2760,7 +2770,7 @@ class CfnCachePolicy(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__368f0f7bddba18df11229a8928c7cef7fa894a962c8f2f2c356a58aafc898f60)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "cachePolicyConfig", value)
+        jsii.set(self, "cachePolicyConfig", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnCachePolicy.CachePolicyConfigProperty",
@@ -3578,7 +3588,7 @@ class CfnCloudFrontOriginAccessIdentity(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__dbd0afebd21ffa009f133a600072844fc5616264b7a1829c3dea492b21c75315)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "cloudFrontOriginAccessIdentityConfig", value)
+        jsii.set(self, "cloudFrontOriginAccessIdentityConfig", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnCloudFrontOriginAccessIdentity.CloudFrontOriginAccessIdentityConfigProperty",
@@ -3855,7 +3865,7 @@ class CfnContinuousDeploymentPolicy(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f4581f42e1117e6de93836f594986c28a2378e8200e2f4a535cce028879382c9)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "continuousDeploymentPolicyConfig", value)
+        jsii.set(self, "continuousDeploymentPolicyConfig", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnContinuousDeploymentPolicy.ContinuousDeploymentPolicyConfigProperty",
@@ -4748,7 +4758,7 @@ class CfnDistribution(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__5e8ff8a9cdfd4490d2e3cfaa371fe6e07d1dd8cd413e3d3ac95e589565d9ed0c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "distributionConfig", value)
+        jsii.set(self, "distributionConfig", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
@@ -4761,7 +4771,7 @@ class CfnDistribution(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__56e2d827e2f2ba5a0841aa9995f521ce75ad3be3fba3d8a6a555ca39d319d2f4)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tagsRaw", value)
+        jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnDistribution.CacheBehaviorProperty",
@@ -9183,7 +9193,7 @@ class CfnFunction(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__97599332fb85693253c87028142c0596a8f097fc2e5e5c08def898b5d875a746)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "functionCode", value)
+        jsii.set(self, "functionCode", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="functionConfig")
@@ -9201,7 +9211,7 @@ class CfnFunction(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__4e1085109b32e0c76599f999f799894997c5e13b7588671859ed027f4d0eceaf)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "functionConfig", value)
+        jsii.set(self, "functionConfig", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="name")
@@ -9214,7 +9224,7 @@ class CfnFunction(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__49e27efb9a632d18d709cce44f4c9025bc32523c224dcb735351068e4a2f071f)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="autoPublish")
@@ -9232,7 +9242,7 @@ class CfnFunction(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__827ae5409caf9c9196670ea90d3ee72840fe49ac20cace1bd57d5f83fc2617cc)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "autoPublish", value)
+        jsii.set(self, "autoPublish", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="functionMetadata")
@@ -9250,7 +9260,7 @@ class CfnFunction(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__fe3c43f2af2adeb7b33e657cb565ba1627c04114bab013dcd445631d30026b9e)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "functionMetadata", value)
+        jsii.set(self, "functionMetadata", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnFunction.FunctionConfigProperty",
@@ -9723,7 +9733,7 @@ class CfnKeyGroup(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f5ed72b1e268631c85b0ecd81a9bcb5dda1c9af4f25021249f63cf35b6102f2a)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "keyGroupConfig", value)
+        jsii.set(self, "keyGroupConfig", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnKeyGroup.KeyGroupConfigProperty",
@@ -10016,7 +10026,7 @@ class CfnKeyValueStore(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__31c81f83ed9c5a25440ffda441f09dcb33411d9684b0a3146646cb289054da0c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="comment")
@@ -10029,7 +10039,7 @@ class CfnKeyValueStore(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e7ef3d5363a87ed84c6584e05c362a97bac2792589a6003e1851446b936205f8)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "comment", value)
+        jsii.set(self, "comment", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="importSource")
@@ -10047,7 +10057,7 @@ class CfnKeyValueStore(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__bfd48a97d25e7b681206f3f821672b491cdb6e27eb4858257cc5f853e5674c56)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "importSource", value)
+        jsii.set(self, "importSource", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnKeyValueStore.ImportSourceProperty",
@@ -10320,7 +10330,7 @@ class CfnMonitoringSubscription(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7800c3e8dc8908a3f056fdb42d3210ab64e0eab502963a833ad4c34e4f9fd397)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "distributionId", value)
+        jsii.set(self, "distributionId", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="monitoringSubscription")
@@ -10338,7 +10348,7 @@ class CfnMonitoringSubscription(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a6a73e9da7bd64c6f8edfeda9db92c61f11177fd45e61323cc95783240a1f833)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "monitoringSubscription", value)
+        jsii.set(self, "monitoringSubscription", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnMonitoringSubscription.MonitoringSubscriptionProperty",
@@ -10662,7 +10672,7 @@ class CfnOriginAccessControl(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__0ce66d3b823fd9ddad2c2b62c7851eb33500f3dcb8168e58af67867c2f6aae9d)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "originAccessControlConfig", value)
+        jsii.set(self, "originAccessControlConfig", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnOriginAccessControl.OriginAccessControlConfigProperty",
@@ -11021,7 +11031,7 @@ class CfnOriginRequestPolicy(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__708e0c2a481cb4e4b68fc467580d318614020b97e17eaa433b6804731ced5237)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "originRequestPolicyConfig", value)
+        jsii.set(self, "originRequestPolicyConfig", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnOriginRequestPolicy.CookiesConfigProperty",
@@ -11622,7 +11632,7 @@ class CfnPublicKey(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__58d675c3580a784a3be69561798d55507bf948f7a586b6ccaa1aca861f3e22dd)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "publicKeyConfig", value)
+        jsii.set(self, "publicKeyConfig", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnPublicKey.PublicKeyConfigProperty",
@@ -11926,7 +11936,7 @@ class CfnRealtimeLogConfig(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a399b0f2984cadefbe5ab1596b0a4763a8f456c302dc65036725f1ad9a543e5b)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "endPoints", value)
+        jsii.set(self, "endPoints", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="fields")
@@ -11939,7 +11949,7 @@ class CfnRealtimeLogConfig(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2f4acb3fc802e66b33d46f5f1737506960b7058ccd04caba1ad1db22c81983a4)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "fields", value)
+        jsii.set(self, "fields", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="name")
@@ -11952,7 +11962,7 @@ class CfnRealtimeLogConfig(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__4611dc2e52a8827da74b1cab9e79ef1a4b59423fda9e0b7a1f949d411f767a55)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value)
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="samplingRate")
@@ -11965,7 +11975,7 @@ class CfnRealtimeLogConfig(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__fae7e2f43229ce281266cc0e965c660b0c47348bdab2a464e668be589b0b8256)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "samplingRate", value)
+        jsii.set(self, "samplingRate", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnRealtimeLogConfig.EndPointProperty",
@@ -12435,7 +12445,7 @@ class CfnResponseHeadersPolicy(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9664ad8baf2a412170daf27d190c8b070be288076aab09583c9dbfb1818b4229)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "responseHeadersPolicyConfig", value)
+        jsii.set(self, "responseHeadersPolicyConfig", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnResponseHeadersPolicy.AccessControlAllowHeadersProperty",
@@ -14439,7 +14449,7 @@ class CfnStreamingDistribution(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__dc8a8d78e195f1bab99bca7ea58d3b6a029844997b8e6940d737f147d8dcc6d2)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "streamingDistributionConfig", value)
+        jsii.set(self, "streamingDistributionConfig", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
@@ -14452,7 +14462,7 @@ class CfnStreamingDistribution(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3a91a3a4fec8e270215622a8e9c4af00c6cfb4cfbe6700e58871b60ab722463f)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tagsRaw", value)
+        jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudfront.CfnStreamingDistribution.LoggingProperty",
@@ -15677,7 +15687,7 @@ class DistributionProps:
         :param certificate: A certificate to associate with the distribution. The certificate must be located in N. Virginia (us-east-1). Default: - the CloudFront wildcard certificate (*.cloudfront.net) will be used.
         :param comment: Any comments you want to include about the distribution. Default: - no comment
         :param default_root_object: The object that you want CloudFront to request from your origin (for example, index.html) when a viewer requests the root URL for your distribution. If no default object is set, the request goes to the origin's root (e.g., example.com/). Default: - no default root object
-        :param domain_names: Alternative domain names for this distribution. If you want to use your own domain name, such as www.example.com, instead of the cloudfront.net domain name, you can add an alternate domain name to your distribution. If you attach a certificate to the distribution, you must add (at least one of) the domain names of the certificate to this list. Default: - The distribution will only support the default generated name (e.g., d111111abcdef8.cloudfront.net)
+        :param domain_names: Alternative domain names for this distribution. If you want to use your own domain name, such as www.example.com, instead of the cloudfront.net domain name, you can add an alternate domain name to your distribution. If you attach a certificate to the distribution, you should add (at least one of) the domain names of the certificate to this list. When you want to move a domain name between distributions, you can associate a certificate without specifying any domain names. For more information, see the *Moving an alternate domain name to a different distribution* section in the README. Default: - The distribution will only support the default generated name (e.g., d111111abcdef8.cloudfront.net)
         :param enabled: Enable or disable the distribution. Default: true
         :param enable_ipv6: Whether CloudFront will respond to IPv6 DNS requests with an IPv6 address. If you specify false, CloudFront responds to IPv6 DNS requests with the DNS response code NOERROR and with no IP addresses. This allows viewers to submit a second request, for an IPv4 address for your distribution. Default: true
         :param enable_logging: Enable access logging for the distribution. Default: - false, unless ``logBucket`` is specified.
@@ -15833,7 +15843,10 @@ class DistributionProps:
 
         If you want to use your own domain name, such as www.example.com, instead of the cloudfront.net domain name,
         you can add an alternate domain name to your distribution. If you attach a certificate to the distribution,
-        you must add (at least one of) the domain names of the certificate to this list.
+        you should add (at least one of) the domain names of the certificate to this list.
+
+        When you want to move a domain name between distributions, you can associate a certificate without specifying any domain names.
+        For more information, see the *Moving an alternate domain name to a different distribution* section in the README.
 
         :default: - The distribution will only support the default generated name (e.g., d111111abcdef8.cloudfront.net)
         '''
@@ -18215,7 +18228,7 @@ class LambdaFunctionAssociation:
         '''
         :param event_type: The lambda event type defines at which event the lambda is called during the request lifecycle.
         :param lambda_function: A version of the lambda to associate.
-        :param include_body: Allows a Lambda function to have read access to the body content. Only valid for "request" event types (``ORIGIN_REQUEST`` or ``VIEWER_REQUEST``). See https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-include-body-access.html Default: false
+        :param include_body: Allows a Lambda function to have read access to the body content. Only valid for "request" event types (``ORIGIN_REQUEST`` or ``VIEWER_REQUEST``). Default: false
 
         :exampleMetadata: fixture=_generated
 
@@ -18267,9 +18280,10 @@ class LambdaFunctionAssociation:
         '''Allows a Lambda function to have read access to the body content.
 
         Only valid for "request" event types (``ORIGIN_REQUEST`` or ``VIEWER_REQUEST``).
-        See https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-include-body-access.html
 
         :default: false
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-include-body-access.html
         '''
         result = self._values.get("include_body")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -22032,7 +22046,7 @@ class SourceConfiguration:
     ) -> None:
         '''A source configuration is a wrapper for CloudFront origins and behaviors.
 
-        An origin is what CloudFront will "be in front of" - that is, CloudFront will pull it's assets from an origin.
+        An origin is what CloudFront will "be in front of" - that is, CloudFront will pull its assets from an origin.
 
         If you're using s3 as a source - pass the ``s3Origin`` property, otherwise, pass the ``customOriginSource`` property.
 
@@ -22810,7 +22824,7 @@ class CloudFrontWebDistribution(
            ]
        )
 
-    This will create a CloudFront distribution that uses your S3Bucket as it's origin.
+    This will create a CloudFront distribution that uses your S3Bucket as its origin.
 
     You can customize the distribution using additional properties from the CloudFrontWebDistributionProps interface.
 
@@ -23043,7 +23057,7 @@ class Distribution(
         :param certificate: A certificate to associate with the distribution. The certificate must be located in N. Virginia (us-east-1). Default: - the CloudFront wildcard certificate (*.cloudfront.net) will be used.
         :param comment: Any comments you want to include about the distribution. Default: - no comment
         :param default_root_object: The object that you want CloudFront to request from your origin (for example, index.html) when a viewer requests the root URL for your distribution. If no default object is set, the request goes to the origin's root (e.g., example.com/). Default: - no default root object
-        :param domain_names: Alternative domain names for this distribution. If you want to use your own domain name, such as www.example.com, instead of the cloudfront.net domain name, you can add an alternate domain name to your distribution. If you attach a certificate to the distribution, you must add (at least one of) the domain names of the certificate to this list. Default: - The distribution will only support the default generated name (e.g., d111111abcdef8.cloudfront.net)
+        :param domain_names: Alternative domain names for this distribution. If you want to use your own domain name, such as www.example.com, instead of the cloudfront.net domain name, you can add an alternate domain name to your distribution. If you attach a certificate to the distribution, you should add (at least one of) the domain names of the certificate to this list. When you want to move a domain name between distributions, you can associate a certificate without specifying any domain names. For more information, see the *Moving an alternate domain name to a different distribution* section in the README. Default: - The distribution will only support the default generated name (e.g., d111111abcdef8.cloudfront.net)
         :param enabled: Enable or disable the distribution. Default: true
         :param enable_ipv6: Whether CloudFront will respond to IPv6 DNS requests with an IPv6 address. If you specify false, CloudFront responds to IPv6 DNS requests with the DNS response code NOERROR and with no IP addresses. This allows viewers to submit a second request, for an IPv4 address for your distribution. Default: true
         :param enable_logging: Enable access logging for the distribution. Default: - false, unless ``logBucket`` is specified.