aws-cdk-lib 2.154.0__py3-none-any.whl → 2.155.0__py3-none-any.whl

aws_cdk/aws_secretsmanager/__init__.py

@@ -2251,7 +2251,7 @@ class CfnSecretTargetAttachment(
         :param id: Construct identifier for this resource (unique in its scope).
         :param secret_id: The ARN or name of the secret. To reference a secret also created in this template, use the see `Ref <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ref.html>`_ function with the secret's logical ID.
         :param target_id: The ID of the database or cluster.
-        :param target_type: A string that defines the type of service or database associated with the secret. This value instructs Secrets Manager how to update the secret with the details of the service or database. This value must be one of the following: - AWS::RDS::DBInstance - AWS::RDS::DBCluster - AWS::Redshift::Cluster - AWS::DocDB::DBInstance - AWS::DocDB::DBCluster
+        :param target_type: A string that defines the type of service or database associated with the secret. This value instructs Secrets Manager how to update the secret with the details of the service or database. This value must be one of the following: - AWS::RDS::DBInstance - AWS::RDS::DBCluster - AWS::Redshift::Cluster - AWS::DocDB::DBInstance - AWS::DocDB::DBCluster - AWS::DocDBElastic::Cluster
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f27548ced74eb3d06a9cd3710e7d562d307b5a2c264476a3e685fcb94ccdee58)
@@ -2367,7 +2367,7 @@ class CfnSecretTargetAttachmentProps:
 
         :param secret_id: The ARN or name of the secret. To reference a secret also created in this template, use the see `Ref <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ref.html>`_ function with the secret's logical ID.
         :param target_id: The ID of the database or cluster.
-        :param target_type: A string that defines the type of service or database associated with the secret. This value instructs Secrets Manager how to update the secret with the details of the service or database. This value must be one of the following: - AWS::RDS::DBInstance - AWS::RDS::DBCluster - AWS::Redshift::Cluster - AWS::DocDB::DBInstance - AWS::DocDB::DBCluster
+        :param target_type: A string that defines the type of service or database associated with the secret. This value instructs Secrets Manager how to update the secret with the details of the service or database. This value must be one of the following: - AWS::RDS::DBInstance - AWS::RDS::DBCluster - AWS::Redshift::Cluster - AWS::DocDB::DBInstance - AWS::DocDB::DBCluster - AWS::DocDBElastic::Cluster
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-secrettargetattachment.html
         :exampleMetadata: fixture=_generated
@@ -2428,6 +2428,7 @@ class CfnSecretTargetAttachmentProps:
         - AWS::Redshift::Cluster
         - AWS::DocDB::DBInstance
         - AWS::DocDB::DBCluster
+        - AWS::DocDBElastic::Cluster
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-secrettargetattachment.html#cfn-secretsmanager-secrettargetattachment-targettype
         '''

aws_cdk/aws_ses/__init__.py

@@ -10850,7 +10850,7 @@ class CfnReceiptRule(
             For information about specifying Amazon S3 actions in receipt rules, see the `Amazon SES Developer Guide <https://docs.aws.amazon.com/ses/latest/dg/receiving-email-action-s3.html>`_ .
 
             :param bucket_name: The name of the Amazon S3 bucket for incoming email.
-            :param kms_key_arn: The customer master key that Amazon SES should use to encrypt your emails before saving them to the Amazon S3 bucket. You can use the default master key or a custom master key that you created in AWS KMS as follows: - To use the default master key, provide an ARN in the form of ``arn:aws:kms:REGION:ACCOUNT-ID-WITHOUT-HYPHENS:alias/aws/ses`` . For example, if your AWS account ID is 123456789012 and you want to use the default master key in the US West (Oregon) Region, the ARN of the default master key would be ``arn:aws:kms:us-west-2:123456789012:alias/aws/ses`` . If you use the default master key, you don't need to perform any extra steps to give Amazon SES permission to use the key. - To use a custom master key that you created in AWS KMS, provide the ARN of the master key and ensure that you add a statement to your key's policy to give Amazon SES permission to use it. For more information about giving permissions, see the `Amazon SES Developer Guide <https://docs.aws.amazon.com/ses/latest/dg/receiving-email-permissions.html>`_ . For more information about key policies, see the `AWS KMS Developer Guide <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html>`_ . If you do not specify a master key, Amazon SES does not encrypt your emails. .. epigraph:: Your mail is encrypted by Amazon SES using the Amazon S3 encryption client before the mail is submitted to Amazon S3 for storage. It is not encrypted using Amazon S3 server-side encryption. This means that you must use the Amazon S3 encryption client to decrypt the email after retrieving it from Amazon S3, as the service has no access to use your AWS KMS keys for decryption. This encryption client is currently available with the `AWS SDK for Java <https://docs.aws.amazon.com/sdk-for-java/>`_ and `AWS SDK for Ruby <https://docs.aws.amazon.com/sdk-for-ruby/>`_ only. For more information about client-side encryption using AWS KMS master keys, see the `Amazon S3 Developer Guide <https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html>`_ .
+            :param kms_key_arn: The customer managed key that Amazon SES should use to encrypt your emails before saving them to the Amazon S3 bucket. You can use the AWS managed key or a customer managed key that you created in AWS KMS as follows: - To use the AWS managed key, provide an ARN in the form of ``arn:aws:kms:REGION:ACCOUNT-ID-WITHOUT-HYPHENS:alias/aws/ses`` . For example, if your AWS account ID is 123456789012 and you want to use the AWS managed key in the US West (Oregon) Region, the ARN of the AWS managed key would be ``arn:aws:kms:us-west-2:123456789012:alias/aws/ses`` . If you use the AWS managed key, you don't need to perform any extra steps to give Amazon SES permission to use the key. - To use a customer managed key that you created in AWS KMS, provide the ARN of the customer managed key and ensure that you add a statement to your key's policy to give Amazon SES permission to use it. For more information about giving permissions, see the `Amazon SES Developer Guide <https://docs.aws.amazon.com/ses/latest/dg/receiving-email-permissions.html>`_ . For more information about key policies, see the `AWS KMS Developer Guide <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html>`_ . If you do not specify an AWS KMS key, Amazon SES does not encrypt your emails. .. epigraph:: Your mail is encrypted by Amazon SES using the Amazon S3 encryption client before the mail is submitted to Amazon S3 for storage. It is not encrypted using Amazon S3 server-side encryption. This means that you must use the Amazon S3 encryption client to decrypt the email after retrieving it from Amazon S3, as the service has no access to use your AWS KMS keys for decryption. This encryption client is currently available with the `AWS SDK for Java <https://docs.aws.amazon.com/sdk-for-java/>`_ and `AWS SDK for Ruby <https://docs.aws.amazon.com/sdk-for-ruby/>`_ only. For more information about client-side encryption using AWS KMS managed keys, see the `Amazon S3 Developer Guide <https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html>`_ .
             :param object_key_prefix: The key prefix of the Amazon S3 bucket. The key prefix is similar to a directory name that enables you to store similar data under the same directory in a bucket.
             :param topic_arn: The ARN of the Amazon SNS topic to notify when the message is saved to the Amazon S3 bucket. You can find the ARN of a topic by using the `ListTopics <https://docs.aws.amazon.com/sns/latest/api/API_ListTopics.html>`_ operation in Amazon SNS. For more information about Amazon SNS topics, see the `Amazon SNS Developer Guide <https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html>`_ .
 
@@ -10900,17 +10900,17 @@ class CfnReceiptRule(
 
         @builtins.property
         def kms_key_arn(self) -> typing.Optional[builtins.str]:
-            '''The customer master key that Amazon SES should use to encrypt your emails before saving them to the Amazon S3 bucket.
+            '''The customer managed key that Amazon SES should use to encrypt your emails before saving them to the Amazon S3 bucket.
 
-            You can use the default master key or a custom master key that you created in AWS KMS as follows:
+            You can use the AWS managed key or a customer managed key that you created in AWS KMS as follows:
 
-            - To use the default master key, provide an ARN in the form of ``arn:aws:kms:REGION:ACCOUNT-ID-WITHOUT-HYPHENS:alias/aws/ses`` . For example, if your AWS account ID is 123456789012 and you want to use the default master key in the US West (Oregon) Region, the ARN of the default master key would be ``arn:aws:kms:us-west-2:123456789012:alias/aws/ses`` . If you use the default master key, you don't need to perform any extra steps to give Amazon SES permission to use the key.
-            - To use a custom master key that you created in AWS KMS, provide the ARN of the master key and ensure that you add a statement to your key's policy to give Amazon SES permission to use it. For more information about giving permissions, see the `Amazon SES Developer Guide <https://docs.aws.amazon.com/ses/latest/dg/receiving-email-permissions.html>`_ .
+            - To use the AWS managed key, provide an ARN in the form of ``arn:aws:kms:REGION:ACCOUNT-ID-WITHOUT-HYPHENS:alias/aws/ses`` . For example, if your AWS account ID is 123456789012 and you want to use the AWS managed key in the US West (Oregon) Region, the ARN of the AWS managed key would be ``arn:aws:kms:us-west-2:123456789012:alias/aws/ses`` . If you use the AWS managed key, you don't need to perform any extra steps to give Amazon SES permission to use the key.
+            - To use a customer managed key that you created in AWS KMS, provide the ARN of the customer managed key and ensure that you add a statement to your key's policy to give Amazon SES permission to use it. For more information about giving permissions, see the `Amazon SES Developer Guide <https://docs.aws.amazon.com/ses/latest/dg/receiving-email-permissions.html>`_ .
 
-            For more information about key policies, see the `AWS KMS Developer Guide <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html>`_ . If you do not specify a master key, Amazon SES does not encrypt your emails.
+            For more information about key policies, see the `AWS KMS Developer Guide <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html>`_ . If you do not specify an AWS KMS key, Amazon SES does not encrypt your emails.
             .. epigraph::
 
-               Your mail is encrypted by Amazon SES using the Amazon S3 encryption client before the mail is submitted to Amazon S3 for storage. It is not encrypted using Amazon S3 server-side encryption. This means that you must use the Amazon S3 encryption client to decrypt the email after retrieving it from Amazon S3, as the service has no access to use your AWS KMS keys for decryption. This encryption client is currently available with the `AWS SDK for Java <https://docs.aws.amazon.com/sdk-for-java/>`_ and `AWS SDK for Ruby <https://docs.aws.amazon.com/sdk-for-ruby/>`_ only. For more information about client-side encryption using AWS KMS master keys, see the `Amazon S3 Developer Guide <https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html>`_ .
+               Your mail is encrypted by Amazon SES using the Amazon S3 encryption client before the mail is submitted to Amazon S3 for storage. It is not encrypted using Amazon S3 server-side encryption. This means that you must use the Amazon S3 encryption client to decrypt the email after retrieving it from Amazon S3, as the service has no access to use your AWS KMS keys for decryption. This encryption client is currently available with the `AWS SDK for Java <https://docs.aws.amazon.com/sdk-for-java/>`_ and `AWS SDK for Ruby <https://docs.aws.amazon.com/sdk-for-ruby/>`_ only. For more information about client-side encryption using AWS KMS managed keys, see the `Amazon S3 Developer Guide <https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html>`_ .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ses-receiptrule-s3action.html#cfn-ses-receiptrule-s3action-kmskeyarn
             '''

aws_cdk/aws_ssm/__init__.py

@@ -1538,7 +1538,7 @@ class CfnDocument(
 
             :param key: The key of a key-value pair that identifies the location of an attachment to a document.
             :param name: The name of the document attachment file.
-            :param values: The value of a key-value pair that identifies the location of an attachment to a document. The format for *Value* depends on the type of key you specify. - For the key *SourceUrl* , the value is an S3 bucket location. For example: ``"Values": [ "s3://doc-example-bucket/my-folder" ]`` - For the key *S3FileUrl* , the value is a file in an S3 bucket. For example: ``"Values": [ "s3://doc-example-bucket/my-folder/my-file.py" ]`` - For the key *AttachmentReference* , the value is constructed from the name of another SSM document in your account, a version number of that document, and a file attached to that document version that you want to reuse. For example: ``"Values": [ "MyOtherDocument/3/my-other-file.py" ]`` However, if the SSM document is shared with you from another account, the full SSM document ARN must be specified instead of the document name only. For example: ``"Values": [ "arn:aws:ssm:us-east-2:111122223333:document/OtherAccountDocument/3/their-file.py" ]``
+            :param values: The value of a key-value pair that identifies the location of an attachment to a document. The format for *Value* depends on the type of key you specify. - For the key *SourceUrl* , the value is an S3 bucket location. For example: ``"Values": [ "s3://amzn-s3-demo-bucket/my-prefix" ]`` - For the key *S3FileUrl* , the value is a file in an S3 bucket. For example: ``"Values": [ "s3://amzn-s3-demo-bucket/my-prefix/my-file.py" ]`` - For the key *AttachmentReference* , the value is constructed from the name of another SSM document in your account, a version number of that document, and a file attached to that document version that you want to reuse. For example: ``"Values": [ "MyOtherDocument/3/my-other-file.py" ]`` However, if the SSM document is shared with you from another account, the full SSM document ARN must be specified instead of the document name only. For example: ``"Values": [ "arn:aws:ssm:us-east-2:111122223333:document/OtherAccountDocument/3/their-file.py" ]``
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssm-document-attachmentssource.html
             :exampleMetadata: fixture=_generated
@@ -1594,11 +1594,11 @@ class CfnDocument(
 
             - For the key *SourceUrl* , the value is an S3 bucket location. For example:
 
-            ``"Values": [ "s3://doc-example-bucket/my-folder" ]``
+            ``"Values": [ "s3://amzn-s3-demo-bucket/my-prefix" ]``
 
             - For the key *S3FileUrl* , the value is a file in an S3 bucket. For example:
 
-            ``"Values": [ "s3://doc-example-bucket/my-folder/my-file.py" ]``
+            ``"Values": [ "s3://amzn-s3-demo-bucket/my-prefix/my-file.py" ]``
 
             - For the key *AttachmentReference* , the value is constructed from the name of another SSM document in your account, a version number of that document, and a file attached to that document version that you want to reuse. For example:
 
@@ -5880,7 +5880,7 @@ class CfnPatchBaseline(
             The ``PatchRules`` property of the `RuleGroup <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssm-patchbaseline-rulegroup.html>`_ property type contains a list of ``Rule`` property types.
 
             :param approve_after_days: The number of days after the release date of each patch matched by the rule that the patch is marked as approved in the patch baseline. For example, a value of ``7`` means that patches are approved seven days after they are released. .. epigraph:: This parameter is marked as not required, but your request must include a value for either ``ApproveAfterDays`` or ``ApproveUntilDate`` . Not supported for Debian Server or Ubuntu Server.
-            :param approve_until_date: The cutoff date for auto approval of released patches. Any patches released on or before this date are installed automatically. Enter dates in the format ``YYYY-MM-DD`` . For example, ``2021-12-31`` . .. epigraph:: This parameter is marked as not required, but your request must include a value for either ``ApproveUntilDate`` or ``ApproveAfterDays`` . Not supported for Debian Server or Ubuntu Server.
+            :param approve_until_date: The cutoff date for auto approval of released patches. Any patches released on or before this date are installed automatically. Enter dates in the format ``YYYY-MM-DD`` . For example, ``2024-12-31`` . .. epigraph:: This parameter is marked as not required, but your request must include a value for either ``ApproveUntilDate`` or ``ApproveAfterDays`` . Not supported for Debian Server or Ubuntu Server.
             :param compliance_level: A compliance severity level for all approved patches in a patch baseline. Valid compliance severity levels include the following: ``UNSPECIFIED`` , ``CRITICAL`` , ``HIGH`` , ``MEDIUM`` , ``LOW`` , and ``INFORMATIONAL`` .
             :param enable_non_security: For managed nodes identified by the approval rule filters, enables a patch baseline to apply non-security updates available in the specified repository. The default value is ``false`` . Applies to Linux managed nodes only. Default: - false
             :param patch_filter_group: The patch filter group that defines the criteria for the rule.
@@ -5948,7 +5948,7 @@ class CfnPatchBaseline(
 
             Any patches released on or before this date are installed automatically.
 
-            Enter dates in the format ``YYYY-MM-DD`` . For example, ``2021-12-31`` .
+            Enter dates in the format ``YYYY-MM-DD`` . For example, ``2024-12-31`` .
             .. epigraph::
 
                This parameter is marked as not required, but your request must include a value for either ``ApproveUntilDate`` or ``ApproveAfterDays`` .

aws_cdk/aws_ssmcontacts/__init__.py

@@ -565,6 +565,10 @@ class CfnContactChannel(
 ):
     '''The ``AWS::SSMContacts::ContactChannel`` resource specifies a contact channel as the method that Incident Manager uses to engage your contact.
 
+    .. epigraph::
+
+       *Template example* : We recommend creating all Incident Manager ``Contacts`` resources using a single AWS CloudFormation template. For a demonstration, see the examples for `AWS::SSMContacts::Contacts <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-contact.html>`_ .
+
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-contactchannel.html
     :cloudformationResource: AWS::SSMContacts::ContactChannel
     :exampleMetadata: fixture=_generated
@@ -1009,6 +1013,10 @@ class CfnPlan(
 ):
     '''Information about the stages and on-call rotation teams associated with an escalation plan or engagement plan.
 
+    .. epigraph::
+
+       *Template example* : We recommend creating all Incident Manager ``Contacts`` resources using a single AWS CloudFormation template. For a demonstration, see the examples for `AWS::SSMContacts::Contacts <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-contact.html>`_ .
+
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-plan.html
     :cloudformationResource: AWS::SSMContacts::Plan
     :exampleMetadata: fixture=_generated
@@ -1591,6 +1599,10 @@ class CfnRotation(
 ):
     '''Specifies a rotation in an on-call schedule.
 
+    .. epigraph::
+
+       *Template example* : We recommend creating all Incident Manager ``Contacts`` resources using a single AWS CloudFormation template. For a demonstration, see the examples for `AWS::SSMContacts::Contacts <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-contact.html>`_ .
+
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-rotation.html
     :cloudformationResource: AWS::SSMContacts::Rotation
     :exampleMetadata: fixture=_generated

aws_cdk/aws_stepfunctions/__init__.py

@@ -6663,28 +6663,26 @@ class IntegrationPattern(enum.Enum):
         import aws_cdk.aws_codebuild as codebuild
         
         
-        project = codebuild.Project(self, "Project",
+        codebuild_project = codebuild.Project(self, "Project",
             project_name="MyTestProject",
-            build_spec=codebuild.BuildSpec.from_object_to_yaml({
-                "version": 0.2,
-                "batch": {
-                    "build-list": [{
-                        "identifier": "id",
-                        "buildspec": "version: 0.2\nphases:\n  build:\n    commands:\n      - echo \"Hello, from small!\""
+            build_spec=codebuild.BuildSpec.from_object({
+                "version": "0.2",
+                "phases": {
+                    "build": {
+                        "commands": ["echo \"Hello, CodeBuild!\""
+                        ]
                     }
-                    ]
                 }
             })
         )
-        project.enable_batch_builds()
         
-        task = tasks.CodeBuildStartBuildBatch(self, "buildBatchTask",
-            project=project,
-            integration_pattern=sfn.IntegrationPattern.REQUEST_RESPONSE,
+        task = tasks.CodeBuildStartBuild(self, "Task",
+            project=codebuild_project,
+            integration_pattern=sfn.IntegrationPattern.RUN_JOB,
             environment_variables_override={
-                "test": codebuild.BuildEnvironmentVariable(
+                "ZONE": codebuild.BuildEnvironmentVariable(
                     type=codebuild.BuildEnvironmentVariableType.PLAINTEXT,
-                    value="testValue"
+                    value=sfn.JsonPath.string_at("$.envVariables.zone")
                 )
             }
         )

aws_cdk/aws_stepfunctions_tasks/__init__.py

@@ -716,6 +716,38 @@ run_task = tasks.EcsRunTask(self, "RunFargate",
 )
 ```
 
+#### Override CPU and Memory Parameter
+
+By setting the property cpu or memoryMiB, you can override the Fargate or EC2 task instance size at runtime.
+
+see: https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_TaskOverride.html
+
+```python
+vpc = ec2.Vpc.from_lookup(self, "Vpc",
+    is_default=True
+)
+cluster = ecs.Cluster(self, "ECSCluster", vpc=vpc)
+
+task_definition = ecs.TaskDefinition(self, "TD",
+    compatibility=ecs.Compatibility.FARGATE,
+    cpu="256",
+    memory_mi_b="512"
+)
+
+task_definition.add_container("TheContainer",
+    image=ecs.ContainerImage.from_registry("foo/bar")
+)
+
+run_task = tasks.EcsRunTask(self, "Run",
+    integration_pattern=sfn.IntegrationPattern.RUN_JOB,
+    cluster=cluster,
+    task_definition=task_definition,
+    launch_target=tasks.EcsFargateLaunchTarget(),
+    cpu="1024",
+    memory_mi_b="1048"
+)
+```
+
 #### ECS enable Exec
 
 By setting the property [`enableExecuteCommand`](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RunTask.html#ECS-RunTask-request-enableExecuteCommand) to `true`, you can enable the [ECS Exec feature](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.html) for the task for either Fargate or EC2 launch types.
@@ -12718,7 +12750,9 @@ class EcsRunTask(
         task_definition: _TaskDefinition_a541a103,
         assign_public_ip: typing.Optional[builtins.bool] = None,
         container_overrides: typing.Optional[typing.Sequence[typing.Union[ContainerOverride, typing.Dict[builtins.str, typing.Any]]]] = None,
+        cpu: typing.Optional[builtins.str] = None,
         enable_execute_command: typing.Optional[builtins.bool] = None,
+        memory_mib: typing.Optional[builtins.str] = None,
         propagated_tag_source: typing.Optional[_PropagatedTagSource_ad4e874a] = None,
         revision_number: typing.Optional[jsii.Number] = None,
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
@@ -12744,7 +12778,9 @@ class EcsRunTask(
         :param task_definition: [disable-awslint:ref-via-interface] Task Definition used for running tasks in the service. Note: this must be TaskDefinition, and not ITaskDefinition, as it requires properties that are not known for imported task definitions If you want to run a RunTask with an imported task definition, consider using CustomState
         :param assign_public_ip: Assign public IP addresses to each task. Default: false
         :param container_overrides: Container setting overrides. Specify the container to use and the overrides to apply. Default: - No overrides
+        :param cpu: Cpu setting override. Default: - No override
         :param enable_execute_command: Whether ECS Exec should be enabled. Default: false
+        :param memory_mib: Memory setting override. Default: - No override
         :param propagated_tag_source: Specifies whether to propagate the tags from the task definition to the task. An error will be received if you specify the SERVICE option when running a task. Default: - No tags are propagated.
         :param revision_number: The revision number of ECS task definition family. Default: - '$latest'
         :param security_groups: Existing security groups to use for the tasks. Default: - A new security group is created
@@ -12772,7 +12808,9 @@ class EcsRunTask(
             task_definition=task_definition,
             assign_public_ip=assign_public_ip,
             container_overrides=container_overrides,
+            cpu=cpu,
             enable_execute_command=enable_execute_command,
+            memory_mib=memory_mib,
             propagated_tag_source=propagated_tag_source,
             revision_number=revision_number,
             security_groups=security_groups,
@@ -12831,7 +12869,9 @@ class EcsRunTask(
         "task_definition": "taskDefinition",
         "assign_public_ip": "assignPublicIp",
         "container_overrides": "containerOverrides",
+        "cpu": "cpu",
         "enable_execute_command": "enableExecuteCommand",
+        "memory_mib": "memoryMiB",
         "propagated_tag_source": "propagatedTagSource",
         "revision_number": "revisionNumber",
         "security_groups": "securityGroups",
@@ -12859,7 +12899,9 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
         task_definition: _TaskDefinition_a541a103,
         assign_public_ip: typing.Optional[builtins.bool] = None,
         container_overrides: typing.Optional[typing.Sequence[typing.Union[ContainerOverride, typing.Dict[builtins.str, typing.Any]]]] = None,
+        cpu: typing.Optional[builtins.str] = None,
         enable_execute_command: typing.Optional[builtins.bool] = None,
+        memory_mib: typing.Optional[builtins.str] = None,
         propagated_tag_source: typing.Optional[_PropagatedTagSource_ad4e874a] = None,
         revision_number: typing.Optional[jsii.Number] = None,
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
@@ -12884,7 +12926,9 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
         :param task_definition: [disable-awslint:ref-via-interface] Task Definition used for running tasks in the service. Note: this must be TaskDefinition, and not ITaskDefinition, as it requires properties that are not known for imported task definitions If you want to run a RunTask with an imported task definition, consider using CustomState
         :param assign_public_ip: Assign public IP addresses to each task. Default: false
         :param container_overrides: Container setting overrides. Specify the container to use and the overrides to apply. Default: - No overrides
+        :param cpu: Cpu setting override. Default: - No override
         :param enable_execute_command: Whether ECS Exec should be enabled. Default: false
+        :param memory_mib: Memory setting override. Default: - No override
         :param propagated_tag_source: Specifies whether to propagate the tags from the task definition to the task. An error will be received if you specify the SERVICE option when running a task. Default: - No tags are propagated.
         :param revision_number: The revision number of ECS task definition family. Default: - '$latest'
         :param security_groups: Existing security groups to use for the tasks. Default: - A new security group is created
@@ -12947,7 +12991,9 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
             check_type(argname="argument task_definition", value=task_definition, expected_type=type_hints["task_definition"])
             check_type(argname="argument assign_public_ip", value=assign_public_ip, expected_type=type_hints["assign_public_ip"])
             check_type(argname="argument container_overrides", value=container_overrides, expected_type=type_hints["container_overrides"])
+            check_type(argname="argument cpu", value=cpu, expected_type=type_hints["cpu"])
             check_type(argname="argument enable_execute_command", value=enable_execute_command, expected_type=type_hints["enable_execute_command"])
+            check_type(argname="argument memory_mib", value=memory_mib, expected_type=type_hints["memory_mib"])
             check_type(argname="argument propagated_tag_source", value=propagated_tag_source, expected_type=type_hints["propagated_tag_source"])
             check_type(argname="argument revision_number", value=revision_number, expected_type=type_hints["revision_number"])
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
@@ -12985,8 +13031,12 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
             self._values["assign_public_ip"] = assign_public_ip
         if container_overrides is not None:
             self._values["container_overrides"] = container_overrides
+        if cpu is not None:
+            self._values["cpu"] = cpu
         if enable_execute_command is not None:
             self._values["enable_execute_command"] = enable_execute_command
+        if memory_mib is not None:
+            self._values["memory_mib"] = memory_mib
         if propagated_tag_source is not None:
             self._values["propagated_tag_source"] = propagated_tag_source
         if revision_number is not None:
@@ -13201,6 +13251,17 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
         result = self._values.get("container_overrides")
         return typing.cast(typing.Optional[typing.List[ContainerOverride]], result)
 
+    @builtins.property
+    def cpu(self) -> typing.Optional[builtins.str]:
+        '''Cpu setting override.
+
+        :default: - No override
+
+        :see: https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_TaskOverride.html
+        '''
+        result = self._values.get("cpu")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def enable_execute_command(self) -> typing.Optional[builtins.bool]:
         '''Whether ECS Exec should be enabled.
@@ -13212,6 +13273,17 @@ class EcsRunTaskProps(_TaskStateBaseProps_3a62b6d0):
         result = self._values.get("enable_execute_command")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def memory_mib(self) -> typing.Optional[builtins.str]:
+        '''Memory setting override.
+
+        :default: - No override
+
+        :see: https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_TaskOverride.html
+        '''
+        result = self._values.get("memory_mib")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def propagated_tag_source(self) -> typing.Optional[_PropagatedTagSource_ad4e874a]:
         '''Specifies whether to propagate the tags from the task definition to the task.
@@ -35530,7 +35602,9 @@ def _typecheckingstub__1b9fa1de6876853cd0aa59517079cbcfc7017daf643f17b13556a7a5f
     task_definition: _TaskDefinition_a541a103,
     assign_public_ip: typing.Optional[builtins.bool] = None,
     container_overrides: typing.Optional[typing.Sequence[typing.Union[ContainerOverride, typing.Dict[builtins.str, typing.Any]]]] = None,
+    cpu: typing.Optional[builtins.str] = None,
     enable_execute_command: typing.Optional[builtins.bool] = None,
+    memory_mib: typing.Optional[builtins.str] = None,
     propagated_tag_source: typing.Optional[_PropagatedTagSource_ad4e874a] = None,
     revision_number: typing.Optional[jsii.Number] = None,
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
@@ -35570,7 +35644,9 @@ def _typecheckingstub__4f880997570006602fac387ce93510039132ec3f42612722766b67ec6
     task_definition: _TaskDefinition_a541a103,
     assign_public_ip: typing.Optional[builtins.bool] = None,
     container_overrides: typing.Optional[typing.Sequence[typing.Union[ContainerOverride, typing.Dict[builtins.str, typing.Any]]]] = None,
+    cpu: typing.Optional[builtins.str] = None,
     enable_execute_command: typing.Optional[builtins.bool] = None,
+    memory_mib: typing.Optional[builtins.str] = None,
     propagated_tag_source: typing.Optional[_PropagatedTagSource_ad4e874a] = None,
     revision_number: typing.Optional[jsii.Number] = None,
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,

aws_cdk/aws_synthetics/__init__.py

@@ -3839,6 +3839,19 @@ class Runtime(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_synthetics.Run
         '''
         return typing.cast("Runtime", jsii.sget(cls, "SYNTHETICS_PYTHON_SELENIUM_3_0"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="SYNTHETICS_PYTHON_SELENIUM_4_0")
+    def SYNTHETICS_PYTHON_SELENIUM_4_0(cls) -> "Runtime":
+        '''``syn-python-selenium-4.0`` includes the following: - Lambda runtime Python 3.9 - Selenium version 4.15.1 - Chromium version 126.0.6478.126.
+
+        New Features:
+
+        - **Bug fixes** for errors in HAR parser logging.
+
+        :see: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_python_selenium.html#CloudWatch_Synthetics_runtimeversion-syn-python-selenium-4.0
+        '''
+        return typing.cast("Runtime", jsii.sget(cls, "SYNTHETICS_PYTHON_SELENIUM_4_0"))
+
     @builtins.property
     @jsii.member(jsii_name="family")
     def family(self) -> "RuntimeFamily":

aws_cdk/custom_resources/__init__.py

@@ -842,6 +842,8 @@ Note that `CustomResourceConfig` uses Aspects to modify your constructs. There i
 CustomResourceConfig.of(App).addLogRetentionLifetime(logs.RetentionDays.TEN_YEARS);
 CustomResourceConfig.of(App).addLogRetentionLifetime(logs.RetentionDays.ONE_DAY);
 
+### Setting Log Retention Lifetime
+
 The following example configures every custom resource in this CDK app to retain its logs for ten years:
 
 ```python
@@ -918,6 +920,8 @@ s3deploy.BucketDeployment(nested_stack_b, "s3deployB",
 )
 ```
 
+### Setting Log Group Removal Policy
+
 The `addLogRetentionLifetime` method of `CustomResourceConfig` will associate a log group with a AWS-vended custom resource lambda.
 The `addRemovalPolicy` method will configure the custom resource lambda log group removal policy to `DESTROY`.
 
@@ -936,6 +940,27 @@ ses.ReceiptRuleSet(app, "RuleSet",
     drop_spam=True
 )
 ```
+
+### Setting Lambda Runtimes
+
+The `addLambdaRuntime` method of `CustomResourceConfig` will set every AWS-vended custom resource to the specified lambda runtime, provided that the custom resource lambda is in the same runtime family as the one you specified. The S3 BucketDeployment construct uses lambda runtime Python 3.9. The following example sets the custom resource lambda runtime to `PYTHON_3_12`:
+
+```python
+import aws_cdk as cdk
+import aws_cdk.aws_s3_deployment as s3deploy
+from aws_cdk.custom_resources import CustomResourceConfig
+
+
+app = cdk.App()
+stack = cdk.Stack(app, "Stack")
+CustomResourceConfig.of(app).add_lambda_runtime(lambda_.Runtime.PYTHON_3_12)
+
+website_bucket = s3.Bucket(stack, "WebsiteBucket")
+s3deploy.BucketDeployment(stack, "s3deploy",
+    sources=[s3deploy.Source.json_data("file.json", {"a": "b"})],
+    destination_bucket=website_bucket
+)
+```
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)
@@ -976,7 +1001,7 @@ from ..aws_iam import (
     PolicyStatement as _PolicyStatement_0fe33853,
 )
 from ..aws_kms import IKey as _IKey_5f11635f
-from ..aws_lambda import IFunction as _IFunction_6adb0ab8
+from ..aws_lambda import IFunction as _IFunction_6adb0ab8, Runtime as _Runtime_b4eaa844
 from ..aws_logs import (
     ILogGroup as _ILogGroup_3c4fa718, RetentionDays as _RetentionDays_070f99f0
 )
@@ -1797,7 +1822,9 @@ class CustomResourceConfig(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.custom_resources.CustomResourceConfig",
 ):
-    '''Manages AWS-vended Custom Resources This feature is currently experimental.
+    '''Manages AWS-vended Custom Resources.
+
+    This feature is currently experimental.
 
     :exampleMetadata: fixture=_generated
 
@@ -1822,10 +1849,25 @@ class CustomResourceConfig(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
         return typing.cast("CustomResourceConfig", jsii.sinvoke(cls, "of", [scope]))
 
+    @jsii.member(jsii_name="addLambdaRuntime")
+    def add_lambda_runtime(self, lambda_runtime: _Runtime_b4eaa844) -> None:
+        '''Set the runtime version on AWS-vended custom resources lambdas.
+
+        This feature is currently experimental.
+
+        :param lambda_runtime: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__78a138e921609d9dcf95b341aa403897a831e305855b6a8bf80efcf60f0acc0e)
+            check_type(argname="argument lambda_runtime", value=lambda_runtime, expected_type=type_hints["lambda_runtime"])
+        return typing.cast(None, jsii.invoke(self, "addLambdaRuntime", [lambda_runtime]))
+
     @jsii.member(jsii_name="addLogRetentionLifetime")
     def add_log_retention_lifetime(self, rentention: _RetentionDays_070f99f0) -> None:
         '''Set the log retention of AWS-vended custom resource lambdas.
 
+        This feature is currently experimental.
+
         :param rentention: -
         '''
         if __debug__:
@@ -1837,6 +1879,8 @@ class CustomResourceConfig(
     def add_removal_policy(self, removal_policy: _RemovalPolicy_9f93c814) -> None:
         '''Set the removal policy of AWS-vended custom resource logGroup.
 
+        This feature is currently experimental.
+
         :param removal_policy: -
         '''
         if __debug__:
@@ -1845,6 +1889,50 @@ class CustomResourceConfig(
         return typing.cast(None, jsii.invoke(self, "addRemovalPolicy", [removal_policy]))
 
 
+@jsii.implements(_IAspect_118c810a)
+class CustomResourceLambdaRuntime(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.custom_resources.CustomResourceLambdaRuntime",
+):
+    '''Manages lambda runtime for AWS-vended custom resources.
+
+    This feature is currently experimental.
+
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_lambda as lambda_
+        from aws_cdk import custom_resources
+        
+        # runtime: lambda.Runtime
+        
+        custom_resource_lambda_runtime = custom_resources.CustomResourceLambdaRuntime(runtime)
+    '''
+
+    def __init__(self, lambda_runtime: _Runtime_b4eaa844) -> None:
+        '''
+        :param lambda_runtime: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__12285526f811e0d37f024a5fdf89253f5dd9d8adfeb44ea4697e8a0c2722e8f4)
+            check_type(argname="argument lambda_runtime", value=lambda_runtime, expected_type=type_hints["lambda_runtime"])
+        jsii.create(self.__class__, self, [lambda_runtime])
+
+    @jsii.member(jsii_name="visit")
+    def visit(self, node: _constructs_77d1e7e8.IConstruct) -> None:
+        '''All aspects can visit an IConstruct.
+
+        :param node: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4a41e38bc97de5d240895d2afbccd81c124833c332c3dca576ae7d31e5fc3f21)
+            check_type(argname="argument node", value=node, expected_type=type_hints["node"])
+        return typing.cast(None, jsii.invoke(self, "visit", [node]))
+
+
 @jsii.implements(_IAspect_118c810a)
 class CustomResourceLogRetention(
     metaclass=jsii.JSIIMeta,
@@ -1852,6 +1940,8 @@ class CustomResourceLogRetention(
 ):
     '''Manages log retention for AWS-vended custom resources.
 
+    This feature is currently experimental.
+
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -1892,6 +1982,8 @@ class CustomResourceRemovalPolicy(
 ):
     '''Manages removal policy for AWS-vended custom resources.
 
+    This feature is currently experimental.
+
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -3043,6 +3135,7 @@ __all__ = [
     "AwsCustomResourceProps",
     "AwsSdkCall",
     "CustomResourceConfig",
+    "CustomResourceLambdaRuntime",
     "CustomResourceLogRetention",
     "CustomResourceRemovalPolicy",
     "LogOptions",
@@ -3143,6 +3236,12 @@ def _typecheckingstub__71c1178bbfb24d2c3974ce93648bb5eea2ec04e86060e04ce5e125d82
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__78a138e921609d9dcf95b341aa403897a831e305855b6a8bf80efcf60f0acc0e(
+    lambda_runtime: _Runtime_b4eaa844,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__b24e4182dd0a87c24dfd3d5c1bc10b91914571416d15e209d3fbd01cdcca86c3(
     rentention: _RetentionDays_070f99f0,
 ) -> None:
@@ -3155,6 +3254,18 @@ def _typecheckingstub__40b6d12e0fa498dd2bcee3634487a6647d3a4e2c1241e542a57e63d03
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__12285526f811e0d37f024a5fdf89253f5dd9d8adfeb44ea4697e8a0c2722e8f4(
+    lambda_runtime: _Runtime_b4eaa844,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4a41e38bc97de5d240895d2afbccd81c124833c332c3dca576ae7d31e5fc3f21(
+    node: _constructs_77d1e7e8.IConstruct,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__d9817c2e505de7a66bfdd5dae2d9307acfd8d0c9c65dd6bd79ef0eb799e16ac3(
     set_log_retention: _RetentionDays_070f99f0,
 ) -> None:

{aws_cdk_lib-2.154.0.dist-info → aws_cdk_lib-2.155.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: aws-cdk-lib
-Version: 2.154.0
+Version: 2.155.0
 Summary: Version 2 of the AWS Cloud Development Kit library
 Home-page: https://github.com/aws/aws-cdk
 Author: Amazon Web Services