aws-cdk-lib 2.155.0__py3-none-any.whl → 2.157.0__py3-none-any.whl

aws_cdk/aws_cloudfront/experimental/__init__.py

@@ -138,6 +138,7 @@ class EdgeFunction(
         handler: builtins.str,
         runtime: _Runtime_b4eaa844,
         adot_instrumentation: typing.Optional[typing.Union[_AdotInstrumentationConfig_7c38d65d, typing.Dict[builtins.str, typing.Any]]] = None,
+        allow_all_ipv6_outbound: typing.Optional[builtins.bool] = None,
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
         application_log_level: typing.Optional[builtins.str] = None,
@@ -194,7 +195,8 @@ class EdgeFunction(
         :param handler: The name of the method within your code that Lambda calls to execute your function. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see https://docs.aws.amazon.com/lambda/latest/dg/foundation-progmodel.html. Use ``Handler.FROM_IMAGE`` when defining a function from a Docker image. NOTE: If you specify your source code as inline text by specifying the ZipFile property within the Code property, specify index.function_name as the handler.
         :param runtime: The runtime environment for the Lambda function that you are uploading. For valid values, see the Runtime property in the AWS Lambda Developer Guide. Use ``Runtime.FROM_IMAGE`` when defining a function from a Docker image.
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
-        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
+        :param allow_all_ipv6_outbound: Whether to allow the Lambda to send all ipv6 network traffic. If set to true, there will only be a single egress rule which allows all outbound ipv6 traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets using ipv6. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllIpv6Outbound`` directly on the security group. Default: false
+        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic (except ipv6). If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
         :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
         :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
@@ -252,6 +254,7 @@ class EdgeFunction(
             handler=handler,
             runtime=runtime,
             adot_instrumentation=adot_instrumentation,
+            allow_all_ipv6_outbound=allow_all_ipv6_outbound,
             allow_all_outbound=allow_all_outbound,
             allow_public_subnet=allow_public_subnet,
             application_log_level=application_log_level,
@@ -909,6 +912,7 @@ class EdgeFunction(
         "on_success": "onSuccess",
         "retry_attempts": "retryAttempts",
         "adot_instrumentation": "adotInstrumentation",
+        "allow_all_ipv6_outbound": "allowAllIpv6Outbound",
         "allow_all_outbound": "allowAllOutbound",
         "allow_public_subnet": "allowPublicSubnet",
         "application_log_level": "applicationLogLevel",
@@ -967,6 +971,7 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
         on_success: typing.Optional[_IDestination_40f19de4] = None,
         retry_attempts: typing.Optional[jsii.Number] = None,
         adot_instrumentation: typing.Optional[typing.Union[_AdotInstrumentationConfig_7c38d65d, typing.Dict[builtins.str, typing.Any]]] = None,
+        allow_all_ipv6_outbound: typing.Optional[builtins.bool] = None,
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
         application_log_level: typing.Optional[builtins.str] = None,
@@ -1022,7 +1027,8 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
         :param on_success: The destination for successful invocations. Default: - no destination
         :param retry_attempts: The maximum number of times to retry when the function returns an error. Minimum: 0 Maximum: 2 Default: 2
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
-        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
+        :param allow_all_ipv6_outbound: Whether to allow the Lambda to send all ipv6 network traffic. If set to true, there will only be a single egress rule which allows all outbound ipv6 traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets using ipv6. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllIpv6Outbound`` directly on the security group. Default: false
+        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic (except ipv6). If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
         :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
         :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
@@ -1108,6 +1114,7 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
             check_type(argname="argument on_success", value=on_success, expected_type=type_hints["on_success"])
             check_type(argname="argument retry_attempts", value=retry_attempts, expected_type=type_hints["retry_attempts"])
             check_type(argname="argument adot_instrumentation", value=adot_instrumentation, expected_type=type_hints["adot_instrumentation"])
+            check_type(argname="argument allow_all_ipv6_outbound", value=allow_all_ipv6_outbound, expected_type=type_hints["allow_all_ipv6_outbound"])
             check_type(argname="argument allow_all_outbound", value=allow_all_outbound, expected_type=type_hints["allow_all_outbound"])
             check_type(argname="argument allow_public_subnet", value=allow_public_subnet, expected_type=type_hints["allow_public_subnet"])
             check_type(argname="argument application_log_level", value=application_log_level, expected_type=type_hints["application_log_level"])
@@ -1170,6 +1177,8 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
             self._values["retry_attempts"] = retry_attempts
         if adot_instrumentation is not None:
             self._values["adot_instrumentation"] = adot_instrumentation
+        if allow_all_ipv6_outbound is not None:
+            self._values["allow_all_ipv6_outbound"] = allow_all_ipv6_outbound
         if allow_all_outbound is not None:
             self._values["allow_all_outbound"] = allow_all_outbound
         if allow_public_subnet is not None:
@@ -1314,9 +1323,25 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
         result = self._values.get("adot_instrumentation")
         return typing.cast(typing.Optional[_AdotInstrumentationConfig_7c38d65d], result)
 
+    @builtins.property
+    def allow_all_ipv6_outbound(self) -> typing.Optional[builtins.bool]:
+        '''Whether to allow the Lambda to send all ipv6 network traffic.
+
+        If set to true, there will only be a single egress rule which allows all
+        outbound ipv6 traffic. If set to false, you must individually add traffic rules to allow the
+        Lambda to connect to network targets using ipv6.
+
+        Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set.
+        Instead, configure ``allowAllIpv6Outbound`` directly on the security group.
+
+        :default: false
+        '''
+        result = self._values.get("allow_all_ipv6_outbound")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def allow_all_outbound(self) -> typing.Optional[builtins.bool]:
-        '''Whether to allow the Lambda to send all network traffic.
+        '''Whether to allow the Lambda to send all network traffic (except ipv6).
 
         If set to false, you must individually add traffic rules to allow the
         Lambda to connect to network targets.
@@ -1921,6 +1946,7 @@ def _typecheckingstub__b2f96e5632f259adb036f7aba2bbc7c19fd9840c647d67a10a8135cb3
     handler: builtins.str,
     runtime: _Runtime_b4eaa844,
     adot_instrumentation: typing.Optional[typing.Union[_AdotInstrumentationConfig_7c38d65d, typing.Dict[builtins.str, typing.Any]]] = None,
+    allow_all_ipv6_outbound: typing.Optional[builtins.bool] = None,
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
     application_log_level: typing.Optional[builtins.str] = None,
@@ -2094,6 +2120,7 @@ def _typecheckingstub__709cdcb05c7a5fc7f7bcd1d72557097c39c5c534076a00b6b8db807bd
     on_success: typing.Optional[_IDestination_40f19de4] = None,
     retry_attempts: typing.Optional[jsii.Number] = None,
     adot_instrumentation: typing.Optional[typing.Union[_AdotInstrumentationConfig_7c38d65d, typing.Dict[builtins.str, typing.Any]]] = None,
+    allow_all_ipv6_outbound: typing.Optional[builtins.bool] = None,
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
     application_log_level: typing.Optional[builtins.str] = None,