aws-cdk-lib 2.156.0__py3-none-any.whl → 2.157.0__py3-none-any.whl

aws_cdk/aws_mediapackagev2/__init__.py

@@ -992,10 +992,10 @@ class CfnOriginEndpoint(
         cfn_origin_endpoint = mediapackagev2.CfnOriginEndpoint(self, "MyCfnOriginEndpoint",
             channel_group_name="channelGroupName",
             channel_name="channelName",
+            container_type="containerType",
             origin_endpoint_name="originEndpointName",
         
             # the properties below are optional
-            container_type="containerType",
             dash_manifests=[mediapackagev2.CfnOriginEndpoint.DashManifestConfigurationProperty(
                 manifest_name="manifestName",
         
@@ -1106,8 +1106,8 @@ class CfnOriginEndpoint(
         *,
         channel_group_name: builtins.str,
         channel_name: builtins.str,
+        container_type: builtins.str,
         origin_endpoint_name: builtins.str,
-        container_type: typing.Optional[builtins.str] = None,
         dash_manifests: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnOriginEndpoint.DashManifestConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         description: typing.Optional[builtins.str] = None,
         force_endpoint_error_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnOriginEndpoint.ForceEndpointErrorConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -1122,8 +1122,8 @@ class CfnOriginEndpoint(
         :param id: Construct identifier for this resource (unique in its scope).
         :param channel_group_name: The name of the channel group associated with the origin endpoint configuration.
         :param channel_name: The channel name associated with the origin endpoint.
-        :param origin_endpoint_name: The name of the origin endpoint associated with the origin endpoint configuration.
         :param container_type: The container type associated with the origin endpoint configuration.
+        :param origin_endpoint_name: The name of the origin endpoint associated with the origin endpoint configuration.
         :param dash_manifests: A DASH manifest configuration.
         :param description: The description associated with the origin endpoint.
         :param force_endpoint_error_configuration: 
@@ -1140,8 +1140,8 @@ class CfnOriginEndpoint(
         props = CfnOriginEndpointProps(
             channel_group_name=channel_group_name,
             channel_name=channel_name,
-            origin_endpoint_name=origin_endpoint_name,
             container_type=container_type,
+            origin_endpoint_name=origin_endpoint_name,
             dash_manifests=dash_manifests,
             description=description,
             force_endpoint_error_configuration=force_endpoint_error_configuration,
@@ -1272,6 +1272,19 @@ class CfnOriginEndpoint(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "channelName", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="containerType")
+    def container_type(self) -> builtins.str:
+        '''The container type associated with the origin endpoint configuration.'''
+        return typing.cast(builtins.str, jsii.get(self, "containerType"))
+
+    @container_type.setter
+    def container_type(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7ded0ec9a4a78b0a13f4013526976d3ef27bae8928fb665d57679f95325a85b6)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "containerType", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="originEndpointName")
     def origin_endpoint_name(self) -> builtins.str:
@@ -1285,19 +1298,6 @@ class CfnOriginEndpoint(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "originEndpointName", value) # pyright: ignore[reportArgumentType]
 
-    @builtins.property
-    @jsii.member(jsii_name="containerType")
-    def container_type(self) -> typing.Optional[builtins.str]:
-        '''The container type associated with the origin endpoint configuration.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "containerType"))
-
-    @container_type.setter
-    def container_type(self, value: typing.Optional[builtins.str]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__7ded0ec9a4a78b0a13f4013526976d3ef27bae8928fb665d57679f95325a85b6)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "containerType", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="dashManifests")
     def dash_manifests(
@@ -3284,8 +3284,8 @@ class CfnOriginEndpointPolicyProps:
     name_mapping={
         "channel_group_name": "channelGroupName",
         "channel_name": "channelName",
-        "origin_endpoint_name": "originEndpointName",
         "container_type": "containerType",
+        "origin_endpoint_name": "originEndpointName",
         "dash_manifests": "dashManifests",
         "description": "description",
         "force_endpoint_error_configuration": "forceEndpointErrorConfiguration",
@@ -3302,8 +3302,8 @@ class CfnOriginEndpointProps:
         *,
         channel_group_name: builtins.str,
         channel_name: builtins.str,
+        container_type: builtins.str,
         origin_endpoint_name: builtins.str,
-        container_type: typing.Optional[builtins.str] = None,
         dash_manifests: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnOriginEndpoint.DashManifestConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         description: typing.Optional[builtins.str] = None,
         force_endpoint_error_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnOriginEndpoint.ForceEndpointErrorConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -3317,8 +3317,8 @@ class CfnOriginEndpointProps:
 
         :param channel_group_name: The name of the channel group associated with the origin endpoint configuration.
         :param channel_name: The channel name associated with the origin endpoint.
-        :param origin_endpoint_name: The name of the origin endpoint associated with the origin endpoint configuration.
         :param container_type: The container type associated with the origin endpoint configuration.
+        :param origin_endpoint_name: The name of the origin endpoint associated with the origin endpoint configuration.
         :param dash_manifests: A DASH manifest configuration.
         :param description: The description associated with the origin endpoint.
         :param force_endpoint_error_configuration: 
@@ -3340,10 +3340,10 @@ class CfnOriginEndpointProps:
             cfn_origin_endpoint_props = mediapackagev2.CfnOriginEndpointProps(
                 channel_group_name="channelGroupName",
                 channel_name="channelName",
+                container_type="containerType",
                 origin_endpoint_name="originEndpointName",
             
                 # the properties below are optional
-                container_type="containerType",
                 dash_manifests=[mediapackagev2.CfnOriginEndpoint.DashManifestConfigurationProperty(
                     manifest_name="manifestName",
             
@@ -3450,8 +3450,8 @@ class CfnOriginEndpointProps:
             type_hints = typing.get_type_hints(_typecheckingstub__d261c9ffb32b381ea679962b9a614498343af1f15dd4bdfdbf788de765f62402)
             check_type(argname="argument channel_group_name", value=channel_group_name, expected_type=type_hints["channel_group_name"])
             check_type(argname="argument channel_name", value=channel_name, expected_type=type_hints["channel_name"])
-            check_type(argname="argument origin_endpoint_name", value=origin_endpoint_name, expected_type=type_hints["origin_endpoint_name"])
             check_type(argname="argument container_type", value=container_type, expected_type=type_hints["container_type"])
+            check_type(argname="argument origin_endpoint_name", value=origin_endpoint_name, expected_type=type_hints["origin_endpoint_name"])
             check_type(argname="argument dash_manifests", value=dash_manifests, expected_type=type_hints["dash_manifests"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
             check_type(argname="argument force_endpoint_error_configuration", value=force_endpoint_error_configuration, expected_type=type_hints["force_endpoint_error_configuration"])
@@ -3463,10 +3463,9 @@ class CfnOriginEndpointProps:
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "channel_group_name": channel_group_name,
             "channel_name": channel_name,
+            "container_type": container_type,
             "origin_endpoint_name": origin_endpoint_name,
         }
-        if container_type is not None:
-            self._values["container_type"] = container_type
         if dash_manifests is not None:
             self._values["dash_manifests"] = dash_manifests
         if description is not None:
@@ -3504,6 +3503,16 @@ class CfnOriginEndpointProps:
         assert result is not None, "Required property 'channel_name' is missing"
         return typing.cast(builtins.str, result)
 
+    @builtins.property
+    def container_type(self) -> builtins.str:
+        '''The container type associated with the origin endpoint configuration.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-originendpoint.html#cfn-mediapackagev2-originendpoint-containertype
+        '''
+        result = self._values.get("container_type")
+        assert result is not None, "Required property 'container_type' is missing"
+        return typing.cast(builtins.str, result)
+
     @builtins.property
     def origin_endpoint_name(self) -> builtins.str:
         '''The name of the origin endpoint associated with the origin endpoint configuration.
@@ -3514,15 +3523,6 @@ class CfnOriginEndpointProps:
         assert result is not None, "Required property 'origin_endpoint_name' is missing"
         return typing.cast(builtins.str, result)
 
-    @builtins.property
-    def container_type(self) -> typing.Optional[builtins.str]:
-        '''The container type associated with the origin endpoint configuration.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-originendpoint.html#cfn-mediapackagev2-originendpoint-containertype
-        '''
-        result = self._values.get("container_type")
-        return typing.cast(typing.Optional[builtins.str], result)
-
     @builtins.property
     def dash_manifests(
         self,
@@ -3813,8 +3813,8 @@ def _typecheckingstub__7dba3dfc2892c78e53aee7675a7a24aa25c0b29481aca92446e31a0d8
     *,
     channel_group_name: builtins.str,
     channel_name: builtins.str,
+    container_type: builtins.str,
     origin_endpoint_name: builtins.str,
-    container_type: typing.Optional[builtins.str] = None,
     dash_manifests: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnOriginEndpoint.DashManifestConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     description: typing.Optional[builtins.str] = None,
     force_endpoint_error_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnOriginEndpoint.ForceEndpointErrorConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -3851,14 +3851,14 @@ def _typecheckingstub__300d202906247d29b698e05c2891ad6a3e8f72748a5cb046f44ee1cde
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__32b645ac54fdc447a14891e1f23268d3a802e1d51ab06333dab9a1ae79ae88fb(
+def _typecheckingstub__7ded0ec9a4a78b0a13f4013526976d3ef27bae8928fb665d57679f95325a85b6(
     value: builtins.str,
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__7ded0ec9a4a78b0a13f4013526976d3ef27bae8928fb665d57679f95325a85b6(
-    value: typing.Optional[builtins.str],
+def _typecheckingstub__32b645ac54fdc447a14891e1f23268d3a802e1d51ab06333dab9a1ae79ae88fb(
+    value: builtins.str,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -4112,8 +4112,8 @@ def _typecheckingstub__d261c9ffb32b381ea679962b9a614498343af1f15dd4bdfdbf788de76
     *,
     channel_group_name: builtins.str,
     channel_name: builtins.str,
+    container_type: builtins.str,
     origin_endpoint_name: builtins.str,
-    container_type: typing.Optional[builtins.str] = None,
     dash_manifests: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnOriginEndpoint.DashManifestConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     description: typing.Optional[builtins.str] = None,
     force_endpoint_error_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnOriginEndpoint.ForceEndpointErrorConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,

aws_cdk/aws_neptune/__init__.py

@@ -172,7 +172,7 @@ class CfnDBCluster(
         :param enable_cloudwatch_logs_exports: Specifies a list of log types that are enabled for export to CloudWatch Logs.
         :param engine_version: Indicates the database engine version.
         :param iam_auth_enabled: True if mapping of Amazon Identity and Access Management (IAM) accounts to database accounts is enabled, and otherwise false.
-        :param kms_key_id: If ``StorageEncrypted`` is true, the Amazon KMS key identifier for the encrypted DB cluster.
+        :param kms_key_id: The Amazon Resource Name (ARN) of the KMS key that is used to encrypt the database instances in the DB cluster, such as ``arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef`` . If you enable the ``StorageEncrypted`` property but don't specify this property, the default KMS key is used. If you specify this property, you must set the ``StorageEncrypted`` property to ``true`` .
         :param preferred_backup_window: Specifies the daily time range during which automated backups are created if automated backups are enabled, as determined by the ``BackupRetentionPeriod`` . An update may require some interruption.
         :param preferred_maintenance_window: Specifies the weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).
         :param restore_to_time: Creates a new DB cluster from a DB snapshot or DB cluster snapshot. If a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group. If a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group.
@@ -180,7 +180,7 @@ class CfnDBCluster(
         :param serverless_scaling_configuration: Contains the scaling configuration of an Neptune Serverless DB cluster.
         :param snapshot_identifier: Specifies the identifier for a DB cluster snapshot. Must match the identifier of an existing snapshot. After you restore a DB cluster using a ``SnapshotIdentifier`` , you must specify the same ``SnapshotIdentifier`` for any future updates to the DB cluster. When you specify this property for an update, the DB cluster is not restored from the snapshot again, and the data in the database is not changed. However, if you don't specify the ``SnapshotIdentifier`` , an empty DB cluster is created, and the original DB cluster is deleted. If you specify a property that is different from the previous snapshot restore property, the DB cluster is restored from the snapshot specified by the ``SnapshotIdentifier`` , and the original DB cluster is deleted.
         :param source_db_cluster_identifier: Creates a new DB cluster from a DB snapshot or DB cluster snapshot. If a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group. If a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group.
-        :param storage_encrypted: Indicates whether the DB cluster is encrypted. If you specify the ``DBClusterIdentifier`` , ``DBSnapshotIdentifier`` , or ``SourceDBInstanceIdentifier`` property, don't specify this property. The value is inherited from the cluster, snapshot, or source DB instance. If you specify the ``KmsKeyId`` property, you must enable encryption. If you specify the ``KmsKeyId`` , you must enable encryption by setting ``StorageEncrypted`` to true.
+        :param storage_encrypted: Indicates whether the DB cluster is encrypted. If you specify the ``KmsKeyId`` property, then you must enable encryption and set this property to ``true`` . If you enable the ``StorageEncrypted`` property but don't specify the ``KmsKeyId`` property, then the default KMS key is used. If you specify the ``KmsKeyId`` property, then that KMS key is used to encrypt the database instances in the DB cluster. If you specify the ``SourceDBClusterIdentifier`` property, and don't specify this property or disable it, the value is inherited from the source DB cluster. If the source DB cluster is encrypted, the ``KmsKeyId`` property from the source cluster is used. If you specify the ``DBSnapshotIdentifier`` and don't specify this property or disable it, the value is inherited from the snapshot and the specified ``KmsKeyId`` property from the snapshot is used.
         :param tags: The tags assigned to this cluster.
         :param use_latest_restorable_time: Creates a new DB cluster from a DB snapshot or DB cluster snapshot. If a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group. If a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group.
         :param vpc_security_group_ids: Provides a list of VPC security groups that the DB cluster belongs to.
@@ -508,7 +508,7 @@ class CfnDBCluster(
     @builtins.property
     @jsii.member(jsii_name="kmsKeyId")
     def kms_key_id(self) -> typing.Optional[builtins.str]:
-        '''If ``StorageEncrypted`` is true, the Amazon KMS key identifier for the encrypted DB cluster.'''
+        '''The Amazon Resource Name (ARN) of the KMS key that is used to encrypt the database instances in the DB cluster, such as ``arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef`` .'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsKeyId"))
 
     @kms_key_id.setter
@@ -1236,7 +1236,7 @@ class CfnDBClusterProps:
         :param enable_cloudwatch_logs_exports: Specifies a list of log types that are enabled for export to CloudWatch Logs.
         :param engine_version: Indicates the database engine version.
         :param iam_auth_enabled: True if mapping of Amazon Identity and Access Management (IAM) accounts to database accounts is enabled, and otherwise false.
-        :param kms_key_id: If ``StorageEncrypted`` is true, the Amazon KMS key identifier for the encrypted DB cluster.
+        :param kms_key_id: The Amazon Resource Name (ARN) of the KMS key that is used to encrypt the database instances in the DB cluster, such as ``arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef`` . If you enable the ``StorageEncrypted`` property but don't specify this property, the default KMS key is used. If you specify this property, you must set the ``StorageEncrypted`` property to ``true`` .
         :param preferred_backup_window: Specifies the daily time range during which automated backups are created if automated backups are enabled, as determined by the ``BackupRetentionPeriod`` . An update may require some interruption.
         :param preferred_maintenance_window: Specifies the weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).
         :param restore_to_time: Creates a new DB cluster from a DB snapshot or DB cluster snapshot. If a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group. If a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group.
@@ -1244,7 +1244,7 @@ class CfnDBClusterProps:
         :param serverless_scaling_configuration: Contains the scaling configuration of an Neptune Serverless DB cluster.
         :param snapshot_identifier: Specifies the identifier for a DB cluster snapshot. Must match the identifier of an existing snapshot. After you restore a DB cluster using a ``SnapshotIdentifier`` , you must specify the same ``SnapshotIdentifier`` for any future updates to the DB cluster. When you specify this property for an update, the DB cluster is not restored from the snapshot again, and the data in the database is not changed. However, if you don't specify the ``SnapshotIdentifier`` , an empty DB cluster is created, and the original DB cluster is deleted. If you specify a property that is different from the previous snapshot restore property, the DB cluster is restored from the snapshot specified by the ``SnapshotIdentifier`` , and the original DB cluster is deleted.
         :param source_db_cluster_identifier: Creates a new DB cluster from a DB snapshot or DB cluster snapshot. If a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group. If a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group.
-        :param storage_encrypted: Indicates whether the DB cluster is encrypted. If you specify the ``DBClusterIdentifier`` , ``DBSnapshotIdentifier`` , or ``SourceDBInstanceIdentifier`` property, don't specify this property. The value is inherited from the cluster, snapshot, or source DB instance. If you specify the ``KmsKeyId`` property, you must enable encryption. If you specify the ``KmsKeyId`` , you must enable encryption by setting ``StorageEncrypted`` to true.
+        :param storage_encrypted: Indicates whether the DB cluster is encrypted. If you specify the ``KmsKeyId`` property, then you must enable encryption and set this property to ``true`` . If you enable the ``StorageEncrypted`` property but don't specify the ``KmsKeyId`` property, then the default KMS key is used. If you specify the ``KmsKeyId`` property, then that KMS key is used to encrypt the database instances in the DB cluster. If you specify the ``SourceDBClusterIdentifier`` property, and don't specify this property or disable it, the value is inherited from the source DB cluster. If the source DB cluster is encrypted, the ``KmsKeyId`` property from the source cluster is used. If you specify the ``DBSnapshotIdentifier`` and don't specify this property or disable it, the value is inherited from the snapshot and the specified ``KmsKeyId`` property from the snapshot is used.
         :param tags: The tags assigned to this cluster.
         :param use_latest_restorable_time: Creates a new DB cluster from a DB snapshot or DB cluster snapshot. If a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group. If a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group.
         :param vpc_security_group_ids: Provides a list of VPC security groups that the DB cluster belongs to.
@@ -1530,7 +1530,9 @@ class CfnDBClusterProps:
 
     @builtins.property
     def kms_key_id(self) -> typing.Optional[builtins.str]:
-        '''If ``StorageEncrypted`` is true, the Amazon KMS key identifier for the encrypted DB cluster.
+        '''The Amazon Resource Name (ARN) of the KMS key that is used to encrypt the database instances in the DB cluster, such as ``arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef`` .
+
+        If you enable the ``StorageEncrypted`` property but don't specify this property, the default KMS key is used. If you specify this property, you must set the ``StorageEncrypted`` property to ``true`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-neptune-dbcluster.html#cfn-neptune-dbcluster-kmskeyid
         '''
@@ -1628,9 +1630,13 @@ class CfnDBClusterProps:
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
         '''Indicates whether the DB cluster is encrypted.
 
-        If you specify the ``DBClusterIdentifier`` , ``DBSnapshotIdentifier`` , or ``SourceDBInstanceIdentifier`` property, don't specify this property. The value is inherited from the cluster, snapshot, or source DB instance. If you specify the ``KmsKeyId`` property, you must enable encryption.
+        If you specify the ``KmsKeyId`` property, then you must enable encryption and set this property to ``true`` .
+
+        If you enable the ``StorageEncrypted`` property but don't specify the ``KmsKeyId`` property, then the default KMS key is used. If you specify the ``KmsKeyId`` property, then that KMS key is used to encrypt the database instances in the DB cluster.
+
+        If you specify the ``SourceDBClusterIdentifier`` property, and don't specify this property or disable it, the value is inherited from the source DB cluster. If the source DB cluster is encrypted, the ``KmsKeyId`` property from the source cluster is used.
 
-        If you specify the ``KmsKeyId`` , you must enable encryption by setting ``StorageEncrypted`` to true.
+        If you specify the ``DBSnapshotIdentifier`` and don't specify this property or disable it, the value is inherited from the snapshot and the specified ``KmsKeyId`` property from the snapshot is used.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-neptune-dbcluster.html#cfn-neptune-dbcluster-storageencrypted
         '''