aws-cdk-lib 2.155.0__py3-none-any.whl → 2.157.0__py3-none-any.whl

aws_cdk/aws_opensearchservice/__init__.py

@@ -907,6 +907,12 @@ class CfnDomain(
                 anonymous_auth_enabled=False,
                 enabled=False,
                 internal_user_database_enabled=False,
+                jwt_options=opensearchservice.CfnDomain.JWTOptionsProperty(
+                    enabled=False,
+                    public_key="publicKey",
+                    roles_key="rolesKey",
+                    subject_key="subjectKey"
+                ),
                 master_user_options=opensearchservice.CfnDomain.MasterUserOptionsProperty(
                     master_user_arn="masterUserArn",
                     master_user_name="masterUserName",
@@ -989,6 +995,7 @@ class CfnDomain(
                     )
                 )
             ),
+            skip_shard_migration_wait=False,
             snapshot_options=opensearchservice.CfnDomain.SnapshotOptionsProperty(
                 automated_snapshot_start_hour=123
             ),
@@ -1026,6 +1033,7 @@ class CfnDomain(
         log_publishing_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, typing.Union["CfnDomain.LogPublishingOptionProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         node_to_node_encryption_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDomain.NodeToNodeEncryptionOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         off_peak_window_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDomain.OffPeakWindowOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        skip_shard_migration_wait: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         snapshot_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDomain.SnapshotOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         software_update_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDomain.SoftwareUpdateOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -1049,6 +1057,7 @@ class CfnDomain(
         :param log_publishing_options: An object with one or more of the following keys: ``SEARCH_SLOW_LOGS`` , ``ES_APPLICATION_LOGS`` , ``INDEX_SLOW_LOGS`` , ``AUDIT_LOGS`` , depending on the types of logs you want to publish. Each key needs a valid ``LogPublishingOption`` value. For the full syntax, see the `examples <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html#aws-resource-opensearchservice-domain--examples>`_ .
         :param node_to_node_encryption_options: Specifies whether node-to-node encryption is enabled. See `Node-to-node encryption for Amazon OpenSearch Service <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ntn.html>`_ .
         :param off_peak_window_options: Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain.
+        :param skip_shard_migration_wait: 
         :param snapshot_options: *DEPRECATED* . The automated snapshot configuration for the OpenSearch Service domain indexes.
         :param software_update_options: Service software update options for the domain.
         :param tags: An arbitrary set of tags (key–value pairs) to associate with the OpenSearch Service domain.
@@ -1074,6 +1083,7 @@ class CfnDomain(
             log_publishing_options=log_publishing_options,
             node_to_node_encryption_options=node_to_node_encryption_options,
             off_peak_window_options=off_peak_window_options,
+            skip_shard_migration_wait=skip_shard_migration_wait,
             snapshot_options=snapshot_options,
             software_update_options=software_update_options,
             tags=tags,
@@ -1502,6 +1512,23 @@ class CfnDomain(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "offPeakWindowOptions", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="skipShardMigrationWait")
+    def skip_shard_migration_wait(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "skipShardMigrationWait"))
+
+    @skip_shard_migration_wait.setter
+    def skip_shard_migration_wait(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2219753353ca3a6a30279b3606e2de2e1ee4acbc605b0d2bfd0ddf82122d2440)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "skipShardMigrationWait", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="snapshotOptions")
     def snapshot_options(
@@ -1577,6 +1604,7 @@ class CfnDomain(
             "anonymous_auth_enabled": "anonymousAuthEnabled",
             "enabled": "enabled",
             "internal_user_database_enabled": "internalUserDatabaseEnabled",
+            "jwt_options": "jwtOptions",
             "master_user_options": "masterUserOptions",
             "saml_options": "samlOptions",
         },
@@ -1589,6 +1617,7 @@ class CfnDomain(
             anonymous_auth_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             internal_user_database_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+            jwt_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDomain.JWTOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             master_user_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDomain.MasterUserOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             saml_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDomain.SAMLOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
@@ -1600,6 +1629,7 @@ class CfnDomain(
             :param anonymous_auth_enabled: True to enable a 30-day migration period during which administrators can create role mappings. Only necessary when `enabling fine-grained access control on an existing domain <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html#fgac-enabling-existing>`_ .
             :param enabled: True to enable fine-grained access control. You must also enable encryption of data at rest and node-to-node encryption. See `Fine-grained access control in Amazon OpenSearch Service <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html>`_ .
             :param internal_user_database_enabled: True to enable the internal user database.
+            :param jwt_options: Container for information about the JWT configuration of the Amazon OpenSearch Service.
             :param master_user_options: Specifies information about the master user.
             :param saml_options: Container for information about the SAML configuration for OpenSearch Dashboards.
 
@@ -1617,6 +1647,12 @@ class CfnDomain(
                     anonymous_auth_enabled=False,
                     enabled=False,
                     internal_user_database_enabled=False,
+                    jwt_options=opensearchservice.CfnDomain.JWTOptionsProperty(
+                        enabled=False,
+                        public_key="publicKey",
+                        roles_key="rolesKey",
+                        subject_key="subjectKey"
+                    ),
                     master_user_options=opensearchservice.CfnDomain.MasterUserOptionsProperty(
                         master_user_arn="masterUserArn",
                         master_user_name="masterUserName",
@@ -1642,6 +1678,7 @@ class CfnDomain(
                 check_type(argname="argument anonymous_auth_enabled", value=anonymous_auth_enabled, expected_type=type_hints["anonymous_auth_enabled"])
                 check_type(argname="argument enabled", value=enabled, expected_type=type_hints["enabled"])
                 check_type(argname="argument internal_user_database_enabled", value=internal_user_database_enabled, expected_type=type_hints["internal_user_database_enabled"])
+                check_type(argname="argument jwt_options", value=jwt_options, expected_type=type_hints["jwt_options"])
                 check_type(argname="argument master_user_options", value=master_user_options, expected_type=type_hints["master_user_options"])
                 check_type(argname="argument saml_options", value=saml_options, expected_type=type_hints["saml_options"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -1653,6 +1690,8 @@ class CfnDomain(
                 self._values["enabled"] = enabled
             if internal_user_database_enabled is not None:
                 self._values["internal_user_database_enabled"] = internal_user_database_enabled
+            if jwt_options is not None:
+                self._values["jwt_options"] = jwt_options
             if master_user_options is not None:
                 self._values["master_user_options"] = master_user_options
             if saml_options is not None:
@@ -1706,6 +1745,17 @@ class CfnDomain(
             result = self._values.get("internal_user_database_enabled")
             return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
+        @builtins.property
+        def jwt_options(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomain.JWTOptionsProperty"]]:
+            '''Container for information about the JWT configuration of the Amazon OpenSearch Service.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html#cfn-opensearchservice-domain-advancedsecurityoptionsinput-jwtoptions
+            '''
+            result = self._values.get("jwt_options")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomain.JWTOptionsProperty"]], result)
+
         @builtins.property
         def master_user_options(
             self,
@@ -2597,6 +2647,108 @@ class CfnDomain(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_opensearchservice.CfnDomain.JWTOptionsProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "enabled": "enabled",
+            "public_key": "publicKey",
+            "roles_key": "rolesKey",
+            "subject_key": "subjectKey",
+        },
+    )
+    class JWTOptionsProperty:
+        def __init__(
+            self,
+            *,
+            enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+            public_key: typing.Optional[builtins.str] = None,
+            roles_key: typing.Optional[builtins.str] = None,
+            subject_key: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''
+            :param enabled: 
+            :param public_key: 
+            :param roles_key: 
+            :param subject_key: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-jwtoptions.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_opensearchservice as opensearchservice
+                
+                j_wTOptions_property = opensearchservice.CfnDomain.JWTOptionsProperty(
+                    enabled=False,
+                    public_key="publicKey",
+                    roles_key="rolesKey",
+                    subject_key="subjectKey"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__be8fc4de4af3d5862315e2f6983641a93c9f0277e7b66f8223fd6ca32d8b02e6)
+                check_type(argname="argument enabled", value=enabled, expected_type=type_hints["enabled"])
+                check_type(argname="argument public_key", value=public_key, expected_type=type_hints["public_key"])
+                check_type(argname="argument roles_key", value=roles_key, expected_type=type_hints["roles_key"])
+                check_type(argname="argument subject_key", value=subject_key, expected_type=type_hints["subject_key"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if enabled is not None:
+                self._values["enabled"] = enabled
+            if public_key is not None:
+                self._values["public_key"] = public_key
+            if roles_key is not None:
+                self._values["roles_key"] = roles_key
+            if subject_key is not None:
+                self._values["subject_key"] = subject_key
+
+        @builtins.property
+        def enabled(
+            self,
+        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-jwtoptions.html#cfn-opensearchservice-domain-jwtoptions-enabled
+            '''
+            result = self._values.get("enabled")
+            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+        @builtins.property
+        def public_key(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-jwtoptions.html#cfn-opensearchservice-domain-jwtoptions-publickey
+            '''
+            result = self._values.get("public_key")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def roles_key(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-jwtoptions.html#cfn-opensearchservice-domain-jwtoptions-roleskey
+            '''
+            result = self._values.get("roles_key")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def subject_key(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-jwtoptions.html#cfn-opensearchservice-domain-jwtoptions-subjectkey
+            '''
+            result = self._values.get("subject_key")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "JWTOptionsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_opensearchservice.CfnDomain.LogPublishingOptionProperty",
         jsii_struct_bases=[],
@@ -3678,6 +3830,7 @@ class CfnDomain(
         "log_publishing_options": "logPublishingOptions",
         "node_to_node_encryption_options": "nodeToNodeEncryptionOptions",
         "off_peak_window_options": "offPeakWindowOptions",
+        "skip_shard_migration_wait": "skipShardMigrationWait",
         "snapshot_options": "snapshotOptions",
         "software_update_options": "softwareUpdateOptions",
         "tags": "tags",
@@ -3703,6 +3856,7 @@ class CfnDomainProps:
         log_publishing_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.LogPublishingOptionProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         node_to_node_encryption_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.NodeToNodeEncryptionOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         off_peak_window_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.OffPeakWindowOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        skip_shard_migration_wait: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         snapshot_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.SnapshotOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         software_update_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.SoftwareUpdateOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -3725,6 +3879,7 @@ class CfnDomainProps:
         :param log_publishing_options: An object with one or more of the following keys: ``SEARCH_SLOW_LOGS`` , ``ES_APPLICATION_LOGS`` , ``INDEX_SLOW_LOGS`` , ``AUDIT_LOGS`` , depending on the types of logs you want to publish. Each key needs a valid ``LogPublishingOption`` value. For the full syntax, see the `examples <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html#aws-resource-opensearchservice-domain--examples>`_ .
         :param node_to_node_encryption_options: Specifies whether node-to-node encryption is enabled. See `Node-to-node encryption for Amazon OpenSearch Service <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ntn.html>`_ .
         :param off_peak_window_options: Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain.
+        :param skip_shard_migration_wait: 
         :param snapshot_options: *DEPRECATED* . The automated snapshot configuration for the OpenSearch Service domain indexes.
         :param software_update_options: Service software update options for the domain.
         :param tags: An arbitrary set of tags (key–value pairs) to associate with the OpenSearch Service domain.
@@ -3751,6 +3906,12 @@ class CfnDomainProps:
                     anonymous_auth_enabled=False,
                     enabled=False,
                     internal_user_database_enabled=False,
+                    jwt_options=opensearchservice.CfnDomain.JWTOptionsProperty(
+                        enabled=False,
+                        public_key="publicKey",
+                        roles_key="rolesKey",
+                        subject_key="subjectKey"
+                    ),
                     master_user_options=opensearchservice.CfnDomain.MasterUserOptionsProperty(
                         master_user_arn="masterUserArn",
                         master_user_name="masterUserName",
@@ -3833,6 +3994,7 @@ class CfnDomainProps:
                         )
                     )
                 ),
+                skip_shard_migration_wait=False,
                 snapshot_options=opensearchservice.CfnDomain.SnapshotOptionsProperty(
                     automated_snapshot_start_hour=123
                 ),
@@ -3866,6 +4028,7 @@ class CfnDomainProps:
             check_type(argname="argument log_publishing_options", value=log_publishing_options, expected_type=type_hints["log_publishing_options"])
             check_type(argname="argument node_to_node_encryption_options", value=node_to_node_encryption_options, expected_type=type_hints["node_to_node_encryption_options"])
             check_type(argname="argument off_peak_window_options", value=off_peak_window_options, expected_type=type_hints["off_peak_window_options"])
+            check_type(argname="argument skip_shard_migration_wait", value=skip_shard_migration_wait, expected_type=type_hints["skip_shard_migration_wait"])
             check_type(argname="argument snapshot_options", value=snapshot_options, expected_type=type_hints["snapshot_options"])
             check_type(argname="argument software_update_options", value=software_update_options, expected_type=type_hints["software_update_options"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
@@ -3901,6 +4064,8 @@ class CfnDomainProps:
             self._values["node_to_node_encryption_options"] = node_to_node_encryption_options
         if off_peak_window_options is not None:
             self._values["off_peak_window_options"] = off_peak_window_options
+        if skip_shard_migration_wait is not None:
+            self._values["skip_shard_migration_wait"] = skip_shard_migration_wait
         if snapshot_options is not None:
             self._values["snapshot_options"] = snapshot_options
         if software_update_options is not None:
@@ -4093,6 +4258,16 @@ class CfnDomainProps:
         result = self._values.get("off_peak_window_options")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomain.OffPeakWindowOptionsProperty]], result)
 
+    @builtins.property
+    def skip_shard_migration_wait(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html#cfn-opensearchservice-domain-skipshardmigrationwait
+        '''
+        result = self._values.get("skip_shard_migration_wait")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
     @builtins.property
     def snapshot_options(
         self,
@@ -8428,6 +8603,7 @@ def _typecheckingstub__6fcd2545392b3f48f314c640881e38e167b5936f1165d2eb1ce21766d
     log_publishing_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.LogPublishingOptionProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     node_to_node_encryption_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.NodeToNodeEncryptionOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     off_peak_window_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.OffPeakWindowOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    skip_shard_migration_wait: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     snapshot_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.SnapshotOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     software_update_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.SoftwareUpdateOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -8538,6 +8714,12 @@ def _typecheckingstub__9a3a2b200397209bed0a90cb39485a3ccb08bcbb3d56bbecc1ef0b66b
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__2219753353ca3a6a30279b3606e2de2e1ee4acbc605b0d2bfd0ddf82122d2440(
+    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__4355f39393b86da5d9d2bb3c03113864e6a1293ce3a4a9b21ccbc2f55009520a(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomain.SnapshotOptionsProperty]],
 ) -> None:
@@ -8568,6 +8750,7 @@ def _typecheckingstub__fd5c3c68239a044600ab387ec52e22ed8852c6e213d5626aa4396b28a
     anonymous_auth_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     internal_user_database_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    jwt_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.JWTOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     master_user_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.MasterUserOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     saml_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.SAMLOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
@@ -8647,6 +8830,16 @@ def _typecheckingstub__df207d57c5bf0c99afe86b2563e40142d554f359eddff25bfecdf22c9
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__be8fc4de4af3d5862315e2f6983641a93c9f0277e7b66f8223fd6ca32d8b02e6(
+    *,
+    enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    public_key: typing.Optional[builtins.str] = None,
+    roles_key: typing.Optional[builtins.str] = None,
+    subject_key: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__f619e98a16faa2be95396251f0c046225b41dc39039c1064a235021c6127a509(
     *,
     cloud_watch_logs_log_group_arn: typing.Optional[builtins.str] = None,
@@ -8767,6 +8960,7 @@ def _typecheckingstub__4a3bbf8db74762f8d49d2ee572e0b31eef8650964dd0e8a168a5fe2d6
     log_publishing_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.LogPublishingOptionProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     node_to_node_encryption_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.NodeToNodeEncryptionOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     off_peak_window_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.OffPeakWindowOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    skip_shard_migration_wait: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     snapshot_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.SnapshotOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     software_update_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomain.SoftwareUpdateOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,