aws-cdk-lib 2.156.0__py3-none-any.whl → 2.157.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (53) hide show
  1. aws_cdk/__init__.py +26 -22
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.156.0.jsii.tgz → aws-cdk-lib@2.157.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_acmpca/__init__.py +10 -75
  5. aws_cdk/aws_amplify/__init__.py +106 -0
  6. aws_cdk/aws_apigatewayv2/__init__.py +81 -13
  7. aws_cdk/aws_appintegrations/__init__.py +14 -14
  8. aws_cdk/aws_applicationsignals/__init__.py +750 -1
  9. aws_cdk/aws_appsync/__init__.py +50 -18
  10. aws_cdk/aws_autoscaling/__init__.py +6 -6
  11. aws_cdk/aws_backup/__init__.py +39 -0
  12. aws_cdk/aws_batch/__init__.py +41 -0
  13. aws_cdk/aws_bedrock/__init__.py +1513 -94
  14. aws_cdk/aws_chatbot/__init__.py +6 -6
  15. aws_cdk/aws_cloudformation/__init__.py +22 -22
  16. aws_cdk/aws_cloudfront/experimental/__init__.py +30 -3
  17. aws_cdk/aws_datasync/__init__.py +40 -29
  18. aws_cdk/aws_ec2/__init__.py +373 -49
  19. aws_cdk/aws_ecs/__init__.py +253 -87
  20. aws_cdk/aws_elasticloadbalancingv2/__init__.py +4 -4
  21. aws_cdk/aws_entityresolution/__init__.py +117 -4
  22. aws_cdk/aws_glue/__init__.py +0 -8
  23. aws_cdk/aws_groundstation/__init__.py +27 -16
  24. aws_cdk/aws_guardduty/__init__.py +26 -14
  25. aws_cdk/aws_iotfleetwise/__init__.py +108 -0
  26. aws_cdk/aws_lambda/__init__.py +147 -17
  27. aws_cdk/aws_lambda_nodejs/__init__.py +30 -3
  28. aws_cdk/aws_macie/__init__.py +4 -4
  29. aws_cdk/aws_medialive/__init__.py +348 -0
  30. aws_cdk/aws_mediapackagev2/__init__.py +38 -38
  31. aws_cdk/aws_neptune/__init__.py +14 -8
  32. aws_cdk/aws_opensearchservice/__init__.py +194 -0
  33. aws_cdk/aws_pcaconnectorscep/__init__.py +884 -0
  34. aws_cdk/aws_personalize/__init__.py +2 -2
  35. aws_cdk/aws_pipes/__init__.py +22 -22
  36. aws_cdk/aws_qbusiness/__init__.py +675 -6
  37. aws_cdk/aws_quicksight/__init__.py +3285 -0
  38. aws_cdk/aws_rds/__init__.py +18 -0
  39. aws_cdk/aws_sagemaker/__init__.py +1167 -0
  40. aws_cdk/aws_secretsmanager/__init__.py +2 -3
  41. aws_cdk/aws_securityhub/__init__.py +108 -103
  42. aws_cdk/aws_ses/__init__.py +31 -0
  43. aws_cdk/aws_sns/__init__.py +19 -13
  44. aws_cdk/aws_ssm/__init__.py +10 -6
  45. aws_cdk/aws_ssmquicksetup/__init__.py +967 -0
  46. aws_cdk/aws_stepfunctions_tasks/__init__.py +4 -4
  47. aws_cdk/triggers/__init__.py +30 -3
  48. {aws_cdk_lib-2.156.0.dist-info → aws_cdk_lib-2.157.0.dist-info}/METADATA +1 -1
  49. {aws_cdk_lib-2.156.0.dist-info → aws_cdk_lib-2.157.0.dist-info}/RECORD +53 -51
  50. {aws_cdk_lib-2.156.0.dist-info → aws_cdk_lib-2.157.0.dist-info}/LICENSE +0 -0
  51. {aws_cdk_lib-2.156.0.dist-info → aws_cdk_lib-2.157.0.dist-info}/NOTICE +0 -0
  52. {aws_cdk_lib-2.156.0.dist-info → aws_cdk_lib-2.157.0.dist-info}/WHEEL +0 -0
  53. {aws_cdk_lib-2.156.0.dist-info → aws_cdk_lib-2.157.0.dist-info}/top_level.txt +0 -0
@@ -179,7 +179,7 @@ class CfnMicrosoftTeamsChannelConfiguration(
179
179
  :param id: Construct identifier for this resource (unique in its scope).
180
180
  :param configuration_name: The name of the configuration.
181
181
  :param iam_role_arn: The ARN of the IAM role that defines the permissions for AWS Chatbot . This is a user-defined role that AWS Chatbot will assume. This is not the service-linked role. For more information, see `IAM Policies for AWS Chatbot <https://docs.aws.amazon.com/chatbot/latest/adminguide/chatbot-iam-policies.html>`_ .
182
- :param team_id: The ID of the Microsoft Team authorized with AWS Chatbot . To get the team ID, you must perform the initial authorization flow with Microsoft Teams in the AWS Chatbot console. Then you can copy and paste the team ID from the console. For more details, see steps 1-4 in `Get started with Microsoft Teams <https://docs.aws.amazon.com/chatbot/latest/adminguide/teams-setup.html#teams-client-setup>`_ in the *AWS Chatbot Administrator Guide* .
182
+ :param team_id: The ID of the Microsoft Team authorized with AWS Chatbot . To get the team ID, you must perform the initial authorization flow with Microsoft Teams in the AWS Chatbot console. Then you can copy and paste the team ID from the console. For more details, see steps 1-3 in `Get started with Microsoft Teams <https://docs.aws.amazon.com/chatbot/latest/adminguide/teams-setup.html#teams-client-setup>`_ in the *AWS Chatbot Administrator Guide* .
183
183
  :param teams_channel_id: The ID of the Microsoft Teams channel. To get the channel ID, open Microsoft Teams, right click on the channel name in the left pane, then choose Copy. An example of the channel ID syntax is: ``19%3ab6ef35dc342d56ba5654e6fc6d25a071%40thread.tacv2`` .
184
184
  :param teams_tenant_id: The ID of the Microsoft Teams tenant. To get the tenant ID, you must perform the initial authorization flow with Microsoft Teams in the AWS Chatbot console. Then you can copy and paste the tenant ID from the console. For more details, see steps 1-4 in `Get started with Microsoft Teams <https://docs.aws.amazon.com/chatbot/latest/adminguide/teams-setup.html#teams-client-setup>`_ in the *AWS Chatbot Administrator Guide* .
185
185
  :param guardrail_policies: The list of IAM policy ARNs that are applied as channel guardrails. The AWS managed 'AdministratorAccess' policy is applied as a default if this is not set.
@@ -434,7 +434,7 @@ class CfnMicrosoftTeamsChannelConfigurationProps:
434
434
 
435
435
  :param configuration_name: The name of the configuration.
436
436
  :param iam_role_arn: The ARN of the IAM role that defines the permissions for AWS Chatbot . This is a user-defined role that AWS Chatbot will assume. This is not the service-linked role. For more information, see `IAM Policies for AWS Chatbot <https://docs.aws.amazon.com/chatbot/latest/adminguide/chatbot-iam-policies.html>`_ .
437
- :param team_id: The ID of the Microsoft Team authorized with AWS Chatbot . To get the team ID, you must perform the initial authorization flow with Microsoft Teams in the AWS Chatbot console. Then you can copy and paste the team ID from the console. For more details, see steps 1-4 in `Get started with Microsoft Teams <https://docs.aws.amazon.com/chatbot/latest/adminguide/teams-setup.html#teams-client-setup>`_ in the *AWS Chatbot Administrator Guide* .
437
+ :param team_id: The ID of the Microsoft Team authorized with AWS Chatbot . To get the team ID, you must perform the initial authorization flow with Microsoft Teams in the AWS Chatbot console. Then you can copy and paste the team ID from the console. For more details, see steps 1-3 in `Get started with Microsoft Teams <https://docs.aws.amazon.com/chatbot/latest/adminguide/teams-setup.html#teams-client-setup>`_ in the *AWS Chatbot Administrator Guide* .
438
438
  :param teams_channel_id: The ID of the Microsoft Teams channel. To get the channel ID, open Microsoft Teams, right click on the channel name in the left pane, then choose Copy. An example of the channel ID syntax is: ``19%3ab6ef35dc342d56ba5654e6fc6d25a071%40thread.tacv2`` .
439
439
  :param teams_tenant_id: The ID of the Microsoft Teams tenant. To get the tenant ID, you must perform the initial authorization flow with Microsoft Teams in the AWS Chatbot console. Then you can copy and paste the tenant ID from the console. For more details, see steps 1-4 in `Get started with Microsoft Teams <https://docs.aws.amazon.com/chatbot/latest/adminguide/teams-setup.html#teams-client-setup>`_ in the *AWS Chatbot Administrator Guide* .
440
440
  :param guardrail_policies: The list of IAM policy ARNs that are applied as channel guardrails. The AWS managed 'AdministratorAccess' policy is applied as a default if this is not set.
@@ -526,7 +526,7 @@ class CfnMicrosoftTeamsChannelConfigurationProps:
526
526
  def team_id(self) -> builtins.str:
527
527
  '''The ID of the Microsoft Team authorized with AWS Chatbot .
528
528
 
529
- To get the team ID, you must perform the initial authorization flow with Microsoft Teams in the AWS Chatbot console. Then you can copy and paste the team ID from the console. For more details, see steps 1-4 in `Get started with Microsoft Teams <https://docs.aws.amazon.com/chatbot/latest/adminguide/teams-setup.html#teams-client-setup>`_ in the *AWS Chatbot Administrator Guide* .
529
+ To get the team ID, you must perform the initial authorization flow with Microsoft Teams in the AWS Chatbot console. Then you can copy and paste the team ID from the console. For more details, see steps 1-3 in `Get started with Microsoft Teams <https://docs.aws.amazon.com/chatbot/latest/adminguide/teams-setup.html#teams-client-setup>`_ in the *AWS Chatbot Administrator Guide* .
530
530
 
531
531
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-microsoftteamschannelconfiguration.html#cfn-chatbot-microsoftteamschannelconfiguration-teamid
532
532
  '''
@@ -684,7 +684,7 @@ class CfnSlackChannelConfiguration(
684
684
  :param configuration_name: The name of the configuration.
685
685
  :param iam_role_arn: The ARN of the IAM role that defines the permissions for AWS Chatbot . This is a user-defined role that AWS Chatbot will assume. This is not the service-linked role. For more information, see `IAM Policies for AWS Chatbot <https://docs.aws.amazon.com/chatbot/latest/adminguide/chatbot-iam-policies.html>`_ .
686
686
  :param slack_channel_id: The ID of the Slack channel. To get the ID, open Slack, right click on the channel name in the left pane, then choose Copy Link. The channel ID is the character string at the end of the URL. For example, ``ABCBBLZZZ`` .
687
- :param slack_workspace_id: The ID of the Slack workspace authorized with AWS Chatbot . To get the workspace ID, you must perform the initial authorization flow with Slack in the AWS Chatbot console. Then you can copy and paste the workspace ID from the console. For more details, see steps 1-4 in `Setting Up AWS Chatbot with Slack <https://docs.aws.amazon.com/chatbot/latest/adminguide/setting-up.html#Setup_intro>`_ in the *AWS Chatbot User Guide* .
687
+ :param slack_workspace_id: The ID of the Slack workspace authorized with AWS Chatbot . To get the workspace ID, you must perform the initial authorization flow with Slack in the AWS Chatbot console. Then you can copy and paste the workspace ID from the console. For more details, see steps 1-3 in `Tutorial: Get started with Slack <https://docs.aws.amazon.com/chatbot/latest/adminguide/slack-setup.html>`_ in the *AWS Chatbot User Guide* .
688
688
  :param guardrail_policies: The list of IAM policy ARNs that are applied as channel guardrails. The AWS managed 'AdministratorAccess' policy is applied as a default if this is not set.
689
689
  :param logging_level: Specifies the logging level for this configuration. This property affects the log entries pushed to Amazon CloudWatch Logs. Logging levels include ``ERROR`` , ``INFO`` , or ``NONE`` . Default: - "NONE"
690
690
  :param sns_topic_arns: The ARNs of the SNS topics that deliver notifications to AWS Chatbot .
@@ -922,7 +922,7 @@ class CfnSlackChannelConfigurationProps:
922
922
  :param configuration_name: The name of the configuration.
923
923
  :param iam_role_arn: The ARN of the IAM role that defines the permissions for AWS Chatbot . This is a user-defined role that AWS Chatbot will assume. This is not the service-linked role. For more information, see `IAM Policies for AWS Chatbot <https://docs.aws.amazon.com/chatbot/latest/adminguide/chatbot-iam-policies.html>`_ .
924
924
  :param slack_channel_id: The ID of the Slack channel. To get the ID, open Slack, right click on the channel name in the left pane, then choose Copy Link. The channel ID is the character string at the end of the URL. For example, ``ABCBBLZZZ`` .
925
- :param slack_workspace_id: The ID of the Slack workspace authorized with AWS Chatbot . To get the workspace ID, you must perform the initial authorization flow with Slack in the AWS Chatbot console. Then you can copy and paste the workspace ID from the console. For more details, see steps 1-4 in `Setting Up AWS Chatbot with Slack <https://docs.aws.amazon.com/chatbot/latest/adminguide/setting-up.html#Setup_intro>`_ in the *AWS Chatbot User Guide* .
925
+ :param slack_workspace_id: The ID of the Slack workspace authorized with AWS Chatbot . To get the workspace ID, you must perform the initial authorization flow with Slack in the AWS Chatbot console. Then you can copy and paste the workspace ID from the console. For more details, see steps 1-3 in `Tutorial: Get started with Slack <https://docs.aws.amazon.com/chatbot/latest/adminguide/slack-setup.html>`_ in the *AWS Chatbot User Guide* .
926
926
  :param guardrail_policies: The list of IAM policy ARNs that are applied as channel guardrails. The AWS managed 'AdministratorAccess' policy is applied as a default if this is not set.
927
927
  :param logging_level: Specifies the logging level for this configuration. This property affects the log entries pushed to Amazon CloudWatch Logs. Logging levels include ``ERROR`` , ``INFO`` , or ``NONE`` . Default: - "NONE"
928
928
  :param sns_topic_arns: The ARNs of the SNS topics that deliver notifications to AWS Chatbot .
@@ -1021,7 +1021,7 @@ class CfnSlackChannelConfigurationProps:
1021
1021
  def slack_workspace_id(self) -> builtins.str:
1022
1022
  '''The ID of the Slack workspace authorized with AWS Chatbot .
1023
1023
 
1024
- To get the workspace ID, you must perform the initial authorization flow with Slack in the AWS Chatbot console. Then you can copy and paste the workspace ID from the console. For more details, see steps 1-4 in `Setting Up AWS Chatbot with Slack <https://docs.aws.amazon.com/chatbot/latest/adminguide/setting-up.html#Setup_intro>`_ in the *AWS Chatbot User Guide* .
1024
+ To get the workspace ID, you must perform the initial authorization flow with Slack in the AWS Chatbot console. Then you can copy and paste the workspace ID from the console. For more details, see steps 1-3 in `Tutorial: Get started with Slack <https://docs.aws.amazon.com/chatbot/latest/adminguide/slack-setup.html>`_ in the *AWS Chatbot User Guide* .
1025
1025
 
1026
1026
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-slackchannelconfiguration.html#cfn-chatbot-slackchannelconfiguration-slackworkspaceid
1027
1027
  '''
@@ -1769,7 +1769,7 @@ class CfnModuleVersion(
1769
1769
  def attr_schema(self) -> builtins.str:
1770
1770
  '''The schema that defines the extension.
1771
1771
 
1772
- For more information about extension schemas, see `Resource Provider Schema <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-schema.html>`_ in the *CloudFormation CLI User Guide* .
1772
+ For more information about extension schemas, see `Resource Provider Schema <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-schema.html>`_ in the *AWS CloudFormation Command Line Interface (CLI) User Guide* .
1773
1773
 
1774
1774
  :cloudformationAttribute: Schema
1775
1775
  '''
@@ -1800,7 +1800,7 @@ class CfnModuleVersion(
1800
1800
 
1801
1801
  Valid values include:
1802
1802
 
1803
- - ``PRIVATE`` : The extension is only visible and usable within the account in which it is registered. AWS CloudFormation marks any extensions you register as ``PRIVATE`` .
1803
+ - ``PRIVATE`` : The extension is only visible and usable within the account in which it is registered. CloudFormation marks any extensions you register as ``PRIVATE`` .
1804
1804
  - ``PUBLIC`` : The extension is publicly visible and usable within any AWS account.
1805
1805
 
1806
1806
  :cloudformationAttribute: Visibility
@@ -1971,7 +1971,7 @@ class CfnPublicTypeVersion(
1971
1971
  :param id: Construct identifier for this resource (unique in its scope).
1972
1972
  :param arn: The Amazon Resource Number (ARN) of the extension. Conditional: You must specify ``Arn`` , or ``TypeName`` and ``Type`` .
1973
1973
  :param log_delivery_bucket: The S3 bucket to which CloudFormation delivers the contract test execution logs. CloudFormation delivers the logs by the time contract testing has completed and the extension has been assigned a test type status of ``PASSED`` or ``FAILED`` . The user initiating the stack operation must be able to access items in the specified S3 bucket. Specifically, the user needs the following permissions: - GetObject - PutObject For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
1974
- :param public_version_number: The version number to assign to this version of the extension. Use the following format, and adhere to semantic versioning when assigning a version number to your extension: ``MAJOR.MINOR.PATCH`` For more information, see `Semantic Versioning 2.0.0 <https://docs.aws.amazon.com/https://semver.org/>`_ . If you don't specify a version number, CloudFormation increments the version number by one minor version release. You cannot specify a version number the first time you publish a type. AWS CloudFormation automatically sets the first version number to be ``1.0.0`` .
1974
+ :param public_version_number: The version number to assign to this version of the extension. Use the following format, and adhere to semantic versioning when assigning a version number to your extension: ``MAJOR.MINOR.PATCH`` For more information, see `Semantic Versioning 2.0.0 <https://docs.aws.amazon.com/https://semver.org/>`_ . If you don't specify a version number, CloudFormation increments the version number by one minor version release. You cannot specify a version number the first time you publish a type. CloudFormation automatically sets the first version number to be ``1.0.0`` .
1975
1975
  :param type: The type of the extension to test. Conditional: You must specify ``Arn`` , or ``TypeName`` and ``Type`` .
1976
1976
  :param type_name: The name of the extension to test. Conditional: You must specify ``Arn`` , or ``TypeName`` and ``Type`` .
1977
1977
  '''
@@ -2144,7 +2144,7 @@ class CfnPublicTypeVersionProps:
2144
2144
 
2145
2145
  :param arn: The Amazon Resource Number (ARN) of the extension. Conditional: You must specify ``Arn`` , or ``TypeName`` and ``Type`` .
2146
2146
  :param log_delivery_bucket: The S3 bucket to which CloudFormation delivers the contract test execution logs. CloudFormation delivers the logs by the time contract testing has completed and the extension has been assigned a test type status of ``PASSED`` or ``FAILED`` . The user initiating the stack operation must be able to access items in the specified S3 bucket. Specifically, the user needs the following permissions: - GetObject - PutObject For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
2147
- :param public_version_number: The version number to assign to this version of the extension. Use the following format, and adhere to semantic versioning when assigning a version number to your extension: ``MAJOR.MINOR.PATCH`` For more information, see `Semantic Versioning 2.0.0 <https://docs.aws.amazon.com/https://semver.org/>`_ . If you don't specify a version number, CloudFormation increments the version number by one minor version release. You cannot specify a version number the first time you publish a type. AWS CloudFormation automatically sets the first version number to be ``1.0.0`` .
2147
+ :param public_version_number: The version number to assign to this version of the extension. Use the following format, and adhere to semantic versioning when assigning a version number to your extension: ``MAJOR.MINOR.PATCH`` For more information, see `Semantic Versioning 2.0.0 <https://docs.aws.amazon.com/https://semver.org/>`_ . If you don't specify a version number, CloudFormation increments the version number by one minor version release. You cannot specify a version number the first time you publish a type. CloudFormation automatically sets the first version number to be ``1.0.0`` .
2148
2148
  :param type: The type of the extension to test. Conditional: You must specify ``Arn`` , or ``TypeName`` and ``Type`` .
2149
2149
  :param type_name: The name of the extension to test. Conditional: You must specify ``Arn`` , or ``TypeName`` and ``Type`` .
2150
2150
 
@@ -2225,7 +2225,7 @@ class CfnPublicTypeVersionProps:
2225
2225
 
2226
2226
  If you don't specify a version number, CloudFormation increments the version number by one minor version release.
2227
2227
 
2228
- You cannot specify a version number the first time you publish a type. AWS CloudFormation automatically sets the first version number to be ``1.0.0`` .
2228
+ You cannot specify a version number the first time you publish a type. CloudFormation automatically sets the first version number to be ``1.0.0`` .
2229
2229
 
2230
2230
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-publictypeversion.html#cfn-cloudformation-publictypeversion-publicversionnumber
2231
2231
  '''
@@ -2308,7 +2308,7 @@ class CfnPublisher(
2308
2308
  :param scope: Scope in which this resource is defined.
2309
2309
  :param id: Construct identifier for this resource (unique in its scope).
2310
2310
  :param accept_terms_and_conditions: Whether you accept the `Terms and Conditions <https://docs.aws.amazon.com/https://cloudformation-registry-documents.s3.amazonaws.com/Terms_and_Conditions_for_AWS_CloudFormation_Registry_Publishers.pdf>`_ for publishing extensions in the CloudFormation registry. You must accept the terms and conditions in order to register to publish public extensions to the CloudFormation registry. The default is ``false`` .
2311
- :param connection_arn: If you are using a Bitbucket or GitHub account for identity verification, the Amazon Resource Name (ARN) for your connection to that account. For more information, see `Registering your account to publish CloudFormation extensions <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/publish-extension.html#publish-extension-prereqs>`_ in the *CloudFormation CLI User Guide* .
2311
+ :param connection_arn: If you are using a Bitbucket or GitHub account for identity verification, the Amazon Resource Name (ARN) for your connection to that account. For more information, see `Registering your account to publish CloudFormation extensions <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/publish-extension.html#publish-extension-prereqs>`_ in the *AWS CloudFormation Command Line Interface (CLI) User Guide* .
2312
2312
  '''
2313
2313
  if __debug__:
2314
2314
  type_hints = typing.get_type_hints(_typecheckingstub__98c7559405984ded6c9804bd442f72ad08edd6b60ad34619af070342a90bb1f0)
@@ -2444,7 +2444,7 @@ class CfnPublisherProps:
2444
2444
  '''Properties for defining a ``CfnPublisher``.
2445
2445
 
2446
2446
  :param accept_terms_and_conditions: Whether you accept the `Terms and Conditions <https://docs.aws.amazon.com/https://cloudformation-registry-documents.s3.amazonaws.com/Terms_and_Conditions_for_AWS_CloudFormation_Registry_Publishers.pdf>`_ for publishing extensions in the CloudFormation registry. You must accept the terms and conditions in order to register to publish public extensions to the CloudFormation registry. The default is ``false`` .
2447
- :param connection_arn: If you are using a Bitbucket or GitHub account for identity verification, the Amazon Resource Name (ARN) for your connection to that account. For more information, see `Registering your account to publish CloudFormation extensions <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/publish-extension.html#publish-extension-prereqs>`_ in the *CloudFormation CLI User Guide* .
2447
+ :param connection_arn: If you are using a Bitbucket or GitHub account for identity verification, the Amazon Resource Name (ARN) for your connection to that account. For more information, see `Registering your account to publish CloudFormation extensions <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/publish-extension.html#publish-extension-prereqs>`_ in the *AWS CloudFormation Command Line Interface (CLI) User Guide* .
2448
2448
 
2449
2449
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-publisher.html
2450
2450
  :exampleMetadata: fixture=_generated
@@ -2490,7 +2490,7 @@ class CfnPublisherProps:
2490
2490
  def connection_arn(self) -> typing.Optional[builtins.str]:
2491
2491
  '''If you are using a Bitbucket or GitHub account for identity verification, the Amazon Resource Name (ARN) for your connection to that account.
2492
2492
 
2493
- For more information, see `Registering your account to publish CloudFormation extensions <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/publish-extension.html#publish-extension-prereqs>`_ in the *CloudFormation CLI User Guide* .
2493
+ For more information, see `Registering your account to publish CloudFormation extensions <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/publish-extension.html#publish-extension-prereqs>`_ in the *AWS CloudFormation Command Line Interface (CLI) User Guide* .
2494
2494
 
2495
2495
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-publisher.html#cfn-cloudformation-publisher-connectionarn
2496
2496
  '''
@@ -2873,7 +2873,7 @@ class CfnResourceVersion(
2873
2873
  def attr_provisioning_type(self) -> builtins.str:
2874
2874
  '''For resource type extensions, the provisioning behavior of the resource type.
2875
2875
 
2876
- AWS CloudFormation determines the provisioning type during registration, based on the types of handlers in the schema handler package submitted.
2876
+ CloudFormation determines the provisioning type during registration, based on the types of handlers in the schema handler package submitted.
2877
2877
 
2878
2878
  Valid values include:
2879
2879
 
@@ -2917,7 +2917,7 @@ class CfnResourceVersion(
2917
2917
 
2918
2918
  Valid values include:
2919
2919
 
2920
- - ``PRIVATE`` : The extension is only visible and usable within the account in which it is registered. AWS CloudFormation marks any extensions you register as ``PRIVATE`` .
2920
+ - ``PRIVATE`` : The extension is only visible and usable within the account in which it is registered. CloudFormation marks any extensions you register as ``PRIVATE`` .
2921
2921
  - ``PUBLIC`` : The extension is publicly visible and usable within any AWS account.
2922
2922
 
2923
2923
  :cloudformationAttribute: Visibility
@@ -3278,9 +3278,9 @@ class CfnStack(
3278
3278
  '''
3279
3279
  :param scope: Scope in which this resource is defined.
3280
3280
  :param id: Construct identifier for this resource (unique in its scope).
3281
- :param notification_arns: The Amazon Simple Notification Service (Amazon SNS) topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).
3281
+ :param notification_arns: The Amazon SNS topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).
3282
3282
  :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Conditional. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
3283
- :param tags: Key-value pairs to associate with this stack. AWS CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
3283
+ :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
3284
3284
  :param template_url: Location of file containing the template body. The URL must point to a template (max size: 460,800 bytes) that's located in an Amazon S3 bucket. For more information, see `Template anatomy <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-anatomy.html>`_ . Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
3285
3285
  :param timeout_in_minutes: The length of time, in minutes, that CloudFormation waits for the nested stack to reach the ``CREATE_COMPLETE`` state. The default is no timeout. When CloudFormation detects that the nested stack has reached the ``CREATE_COMPLETE`` state, it marks the nested stack resource as ``CREATE_COMPLETE`` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches ``CREATE_COMPLETE`` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack. Updates aren't supported.
3286
3286
  '''
@@ -3422,7 +3422,7 @@ class CfnStack(
3422
3422
  @builtins.property
3423
3423
  @jsii.member(jsii_name="notificationArns")
3424
3424
  def notification_arns(self) -> typing.Optional[typing.List[builtins.str]]:
3425
- '''The Amazon Simple Notification Service (Amazon SNS) topic ARNs to publish stack related events.'''
3425
+ '''The Amazon SNS topic ARNs to publish stack related events.'''
3426
3426
  return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "notificationArns"))
3427
3427
 
3428
3428
  @notification_arns.setter
@@ -3621,9 +3621,9 @@ class CfnStackProps:
3621
3621
  ) -> None:
3622
3622
  '''Properties for defining a ``CfnStack``.
3623
3623
 
3624
- :param notification_arns: The Amazon Simple Notification Service (Amazon SNS) topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).
3624
+ :param notification_arns: The Amazon SNS topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).
3625
3625
  :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Conditional. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
3626
- :param tags: Key-value pairs to associate with this stack. AWS CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
3626
+ :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
3627
3627
  :param template_url: Location of file containing the template body. The URL must point to a template (max size: 460,800 bytes) that's located in an Amazon S3 bucket. For more information, see `Template anatomy <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-anatomy.html>`_ . Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
3628
3628
  :param timeout_in_minutes: The length of time, in minutes, that CloudFormation waits for the nested stack to reach the ``CREATE_COMPLETE`` state. The default is no timeout. When CloudFormation detects that the nested stack has reached the ``CREATE_COMPLETE`` state, it marks the nested stack resource as ``CREATE_COMPLETE`` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches ``CREATE_COMPLETE`` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack. Updates aren't supported.
3629
3629
 
@@ -3670,7 +3670,7 @@ class CfnStackProps:
3670
3670
 
3671
3671
  @builtins.property
3672
3672
  def notification_arns(self) -> typing.Optional[typing.List[builtins.str]]:
3673
- '''The Amazon Simple Notification Service (Amazon SNS) topic ARNs to publish stack related events.
3673
+ '''The Amazon SNS topic ARNs to publish stack related events.
3674
3674
 
3675
3675
  You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).
3676
3676
 
@@ -3703,7 +3703,7 @@ class CfnStackProps:
3703
3703
  def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
3704
3704
  '''Key-value pairs to associate with this stack.
3705
3705
 
3706
- AWS CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
3706
+ CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
3707
3707
 
3708
3708
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stack.html#cfn-cloudformation-stack-tags
3709
3709
  '''
@@ -3861,7 +3861,7 @@ class CfnStackSet(
3861
3861
  :param operation_preferences: The user-specified preferences for how AWS CloudFormation performs a stack set operation.
3862
3862
  :param parameters: The input parameters for the stack set template.
3863
3863
  :param stack_instances_group: A group of stack instances with parameters in some specific accounts and Regions.
3864
- :param tags: Key-value pairs to associate with this stack. AWS CloudFormation also propagates these tags to supported resources in the stack. You can specify a maximum number of 50 tags. If you don't specify this parameter, AWS CloudFormation doesn't modify the stack's tags. If you specify an empty value, AWS CloudFormation removes all associated tags.
3864
+ :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to supported resources in the stack. You can specify a maximum number of 50 tags. If you don't specify this parameter, CloudFormation doesn't modify the stack's tags. If you specify an empty value, CloudFormation removes all associated tags.
3865
3865
  :param template_body: The structure that contains the template body, with a minimum length of 1 byte and a maximum length of 51,200 bytes. You must include either ``TemplateURL`` or ``TemplateBody`` in a StackSet, but you can't use both. Dynamic references in the ``TemplateBody`` may not work correctly in all cases. It's recommended to pass templates containing dynamic references through ``TemplateUrl`` instead.
3866
3866
  :param template_url: Location of file containing the template body. The URL must point to a template that's located in an Amazon S3 bucket or a Systems Manager document. For more information, go to `Template Anatomy <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-anatomy.html>`_ in the AWS CloudFormation User Guide. Conditional: You must specify only one of the following parameters: ``TemplateBody`` , ``TemplateURL`` .
3867
3867
  '''
@@ -4839,7 +4839,7 @@ class CfnStackSetProps:
4839
4839
  :param operation_preferences: The user-specified preferences for how AWS CloudFormation performs a stack set operation.
4840
4840
  :param parameters: The input parameters for the stack set template.
4841
4841
  :param stack_instances_group: A group of stack instances with parameters in some specific accounts and Regions.
4842
- :param tags: Key-value pairs to associate with this stack. AWS CloudFormation also propagates these tags to supported resources in the stack. You can specify a maximum number of 50 tags. If you don't specify this parameter, AWS CloudFormation doesn't modify the stack's tags. If you specify an empty value, AWS CloudFormation removes all associated tags.
4842
+ :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to supported resources in the stack. You can specify a maximum number of 50 tags. If you don't specify this parameter, CloudFormation doesn't modify the stack's tags. If you specify an empty value, CloudFormation removes all associated tags.
4843
4843
  :param template_body: The structure that contains the template body, with a minimum length of 1 byte and a maximum length of 51,200 bytes. You must include either ``TemplateURL`` or ``TemplateBody`` in a StackSet, but you can't use both. Dynamic references in the ``TemplateBody`` may not work correctly in all cases. It's recommended to pass templates containing dynamic references through ``TemplateUrl`` instead.
4844
4844
  :param template_url: Location of file containing the template body. The URL must point to a template that's located in an Amazon S3 bucket or a Systems Manager document. For more information, go to `Template Anatomy <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-anatomy.html>`_ in the AWS CloudFormation User Guide. Conditional: You must specify only one of the following parameters: ``TemplateBody`` , ``TemplateURL`` .
4845
4845
 
@@ -5125,9 +5125,9 @@ class CfnStackSetProps:
5125
5125
  def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
5126
5126
  '''Key-value pairs to associate with this stack.
5127
5127
 
5128
- AWS CloudFormation also propagates these tags to supported resources in the stack. You can specify a maximum number of 50 tags.
5128
+ CloudFormation also propagates these tags to supported resources in the stack. You can specify a maximum number of 50 tags.
5129
5129
 
5130
- If you don't specify this parameter, AWS CloudFormation doesn't modify the stack's tags. If you specify an empty value, AWS CloudFormation removes all associated tags.
5130
+ If you don't specify this parameter, CloudFormation doesn't modify the stack's tags. If you specify an empty value, CloudFormation removes all associated tags.
5131
5131
 
5132
5132
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-tags
5133
5133
  '''
@@ -5180,7 +5180,7 @@ class CfnTypeActivation(
5180
5180
 
5181
5181
  For more information, see `Using public extensions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-public.html>`_ in the *AWS CloudFormation User Guide* .
5182
5182
 
5183
- Once you have activated a public third-party extension in your account and Region, use `SetTypeConfiguration <https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_SetTypeConfiguration.html>`_ to specify configuration properties for the extension. For more information, see `Configuring extensions at the account level <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-private.html#registry-set-configuration>`_ in the *CloudFormation User Guide* .
5183
+ Once you have activated a public third-party extension in your account and Region, use `SetTypeConfiguration <https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_SetTypeConfiguration.html>`_ to specify configuration properties for the extension. For more information, see `Configuring extensions at the account level <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-private.html#registry-set-configuration>`_ in the *AWS CloudFormation User Guide* .
5184
5184
 
5185
5185
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-typeactivation.html
5186
5186
  :cloudformationResource: AWS::CloudFormation::TypeActivation
@@ -138,6 +138,7 @@ class EdgeFunction(
138
138
  handler: builtins.str,
139
139
  runtime: _Runtime_b4eaa844,
140
140
  adot_instrumentation: typing.Optional[typing.Union[_AdotInstrumentationConfig_7c38d65d, typing.Dict[builtins.str, typing.Any]]] = None,
141
+ allow_all_ipv6_outbound: typing.Optional[builtins.bool] = None,
141
142
  allow_all_outbound: typing.Optional[builtins.bool] = None,
142
143
  allow_public_subnet: typing.Optional[builtins.bool] = None,
143
144
  application_log_level: typing.Optional[builtins.str] = None,
@@ -194,7 +195,8 @@ class EdgeFunction(
194
195
  :param handler: The name of the method within your code that Lambda calls to execute your function. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see https://docs.aws.amazon.com/lambda/latest/dg/foundation-progmodel.html. Use ``Handler.FROM_IMAGE`` when defining a function from a Docker image. NOTE: If you specify your source code as inline text by specifying the ZipFile property within the Code property, specify index.function_name as the handler.
195
196
  :param runtime: The runtime environment for the Lambda function that you are uploading. For valid values, see the Runtime property in the AWS Lambda Developer Guide. Use ``Runtime.FROM_IMAGE`` when defining a function from a Docker image.
196
197
  :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
197
- :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
198
+ :param allow_all_ipv6_outbound: Whether to allow the Lambda to send all ipv6 network traffic. If set to true, there will only be a single egress rule which allows all outbound ipv6 traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets using ipv6. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllIpv6Outbound`` directly on the security group. Default: false
199
+ :param allow_all_outbound: Whether to allow the Lambda to send all network traffic (except ipv6). If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
198
200
  :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
199
201
  :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
200
202
  :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
@@ -252,6 +254,7 @@ class EdgeFunction(
252
254
  handler=handler,
253
255
  runtime=runtime,
254
256
  adot_instrumentation=adot_instrumentation,
257
+ allow_all_ipv6_outbound=allow_all_ipv6_outbound,
255
258
  allow_all_outbound=allow_all_outbound,
256
259
  allow_public_subnet=allow_public_subnet,
257
260
  application_log_level=application_log_level,
@@ -909,6 +912,7 @@ class EdgeFunction(
909
912
  "on_success": "onSuccess",
910
913
  "retry_attempts": "retryAttempts",
911
914
  "adot_instrumentation": "adotInstrumentation",
915
+ "allow_all_ipv6_outbound": "allowAllIpv6Outbound",
912
916
  "allow_all_outbound": "allowAllOutbound",
913
917
  "allow_public_subnet": "allowPublicSubnet",
914
918
  "application_log_level": "applicationLogLevel",
@@ -967,6 +971,7 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
967
971
  on_success: typing.Optional[_IDestination_40f19de4] = None,
968
972
  retry_attempts: typing.Optional[jsii.Number] = None,
969
973
  adot_instrumentation: typing.Optional[typing.Union[_AdotInstrumentationConfig_7c38d65d, typing.Dict[builtins.str, typing.Any]]] = None,
974
+ allow_all_ipv6_outbound: typing.Optional[builtins.bool] = None,
970
975
  allow_all_outbound: typing.Optional[builtins.bool] = None,
971
976
  allow_public_subnet: typing.Optional[builtins.bool] = None,
972
977
  application_log_level: typing.Optional[builtins.str] = None,
@@ -1022,7 +1027,8 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
1022
1027
  :param on_success: The destination for successful invocations. Default: - no destination
1023
1028
  :param retry_attempts: The maximum number of times to retry when the function returns an error. Minimum: 0 Maximum: 2 Default: 2
1024
1029
  :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
1025
- :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
1030
+ :param allow_all_ipv6_outbound: Whether to allow the Lambda to send all ipv6 network traffic. If set to true, there will only be a single egress rule which allows all outbound ipv6 traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets using ipv6. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllIpv6Outbound`` directly on the security group. Default: false
1031
+ :param allow_all_outbound: Whether to allow the Lambda to send all network traffic (except ipv6). If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
1026
1032
  :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
1027
1033
  :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
1028
1034
  :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
@@ -1108,6 +1114,7 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
1108
1114
  check_type(argname="argument on_success", value=on_success, expected_type=type_hints["on_success"])
1109
1115
  check_type(argname="argument retry_attempts", value=retry_attempts, expected_type=type_hints["retry_attempts"])
1110
1116
  check_type(argname="argument adot_instrumentation", value=adot_instrumentation, expected_type=type_hints["adot_instrumentation"])
1117
+ check_type(argname="argument allow_all_ipv6_outbound", value=allow_all_ipv6_outbound, expected_type=type_hints["allow_all_ipv6_outbound"])
1111
1118
  check_type(argname="argument allow_all_outbound", value=allow_all_outbound, expected_type=type_hints["allow_all_outbound"])
1112
1119
  check_type(argname="argument allow_public_subnet", value=allow_public_subnet, expected_type=type_hints["allow_public_subnet"])
1113
1120
  check_type(argname="argument application_log_level", value=application_log_level, expected_type=type_hints["application_log_level"])
@@ -1170,6 +1177,8 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
1170
1177
  self._values["retry_attempts"] = retry_attempts
1171
1178
  if adot_instrumentation is not None:
1172
1179
  self._values["adot_instrumentation"] = adot_instrumentation
1180
+ if allow_all_ipv6_outbound is not None:
1181
+ self._values["allow_all_ipv6_outbound"] = allow_all_ipv6_outbound
1173
1182
  if allow_all_outbound is not None:
1174
1183
  self._values["allow_all_outbound"] = allow_all_outbound
1175
1184
  if allow_public_subnet is not None:
@@ -1314,9 +1323,25 @@ class EdgeFunctionProps(_FunctionProps_a308e854):
1314
1323
  result = self._values.get("adot_instrumentation")
1315
1324
  return typing.cast(typing.Optional[_AdotInstrumentationConfig_7c38d65d], result)
1316
1325
 
1326
+ @builtins.property
1327
+ def allow_all_ipv6_outbound(self) -> typing.Optional[builtins.bool]:
1328
+ '''Whether to allow the Lambda to send all ipv6 network traffic.
1329
+
1330
+ If set to true, there will only be a single egress rule which allows all
1331
+ outbound ipv6 traffic. If set to false, you must individually add traffic rules to allow the
1332
+ Lambda to connect to network targets using ipv6.
1333
+
1334
+ Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set.
1335
+ Instead, configure ``allowAllIpv6Outbound`` directly on the security group.
1336
+
1337
+ :default: false
1338
+ '''
1339
+ result = self._values.get("allow_all_ipv6_outbound")
1340
+ return typing.cast(typing.Optional[builtins.bool], result)
1341
+
1317
1342
  @builtins.property
1318
1343
  def allow_all_outbound(self) -> typing.Optional[builtins.bool]:
1319
- '''Whether to allow the Lambda to send all network traffic.
1344
+ '''Whether to allow the Lambda to send all network traffic (except ipv6).
1320
1345
 
1321
1346
  If set to false, you must individually add traffic rules to allow the
1322
1347
  Lambda to connect to network targets.
@@ -1921,6 +1946,7 @@ def _typecheckingstub__b2f96e5632f259adb036f7aba2bbc7c19fd9840c647d67a10a8135cb3
1921
1946
  handler: builtins.str,
1922
1947
  runtime: _Runtime_b4eaa844,
1923
1948
  adot_instrumentation: typing.Optional[typing.Union[_AdotInstrumentationConfig_7c38d65d, typing.Dict[builtins.str, typing.Any]]] = None,
1949
+ allow_all_ipv6_outbound: typing.Optional[builtins.bool] = None,
1924
1950
  allow_all_outbound: typing.Optional[builtins.bool] = None,
1925
1951
  allow_public_subnet: typing.Optional[builtins.bool] = None,
1926
1952
  application_log_level: typing.Optional[builtins.str] = None,
@@ -2094,6 +2120,7 @@ def _typecheckingstub__709cdcb05c7a5fc7f7bcd1d72557097c39c5c534076a00b6b8db807bd
2094
2120
  on_success: typing.Optional[_IDestination_40f19de4] = None,
2095
2121
  retry_attempts: typing.Optional[jsii.Number] = None,
2096
2122
  adot_instrumentation: typing.Optional[typing.Union[_AdotInstrumentationConfig_7c38d65d, typing.Dict[builtins.str, typing.Any]]] = None,
2123
+ allow_all_ipv6_outbound: typing.Optional[builtins.bool] = None,
2097
2124
  allow_all_outbound: typing.Optional[builtins.bool] = None,
2098
2125
  allow_public_subnet: typing.Optional[builtins.bool] = None,
2099
2126
  application_log_level: typing.Optional[builtins.str] = None,
@@ -997,12 +997,12 @@ class CfnLocationEFS(
997
997
  '''
998
998
  :param scope: Scope in which this resource is defined.
999
999
  :param id: Construct identifier for this resource (unique in its scope).
1000
- :param ec2_config: Specifies the subnet and security groups DataSync uses to access your Amazon EFS file system.
1001
- :param access_point_arn: Specifies the Amazon Resource Name (ARN) of the access point that DataSync uses to access the Amazon EFS file system.
1002
- :param efs_filesystem_arn: Specifies the ARN for the Amazon EFS file system.
1003
- :param file_system_access_role_arn: Specifies an AWS Identity and Access Management (IAM) role that DataSync assumes when mounting the Amazon EFS file system.
1004
- :param in_transit_encryption: Specifies whether you want DataSync to use Transport Layer Security (TLS) 1.2 encryption when it copies data to or from the Amazon EFS file system. If you specify an access point using ``AccessPointArn`` or an IAM role using ``FileSystemAccessRoleArn`` , you must set this parameter to ``TLS1_2`` .
1005
- :param subdirectory: Specifies a mount path for your Amazon EFS file system. This is where DataSync reads or writes data (depending on if this is a source or destination location). By default, DataSync uses the root directory, but you can also include subdirectories. .. epigraph:: You must specify a value with forward slashes (for example, ``/path/to/folder`` ).
1000
+ :param ec2_config: Specifies the subnet and security groups DataSync uses to connect to one of your Amazon EFS file system's `mount targets <https://docs.aws.amazon.com/efs/latest/ug/accessing-fs.html>`_ .
1001
+ :param access_point_arn: Specifies the Amazon Resource Name (ARN) of the access point that DataSync uses to mount your Amazon EFS file system. For more information, see `Accessing restricted file systems <https://docs.aws.amazon.com/datasync/latest/userguide/create-efs-location.html#create-efs-location-iam>`_ .
1002
+ :param efs_filesystem_arn: Specifies the ARN for your Amazon EFS file system.
1003
+ :param file_system_access_role_arn: Specifies an AWS Identity and Access Management (IAM) role that allows DataSync to access your Amazon EFS file system. For information on creating this role, see `Creating a DataSync IAM role for file system access <https://docs.aws.amazon.com/datasync/latest/userguide/create-efs-location.html#create-efs-location-iam-role>`_ .
1004
+ :param in_transit_encryption: Specifies whether you want DataSync to use Transport Layer Security (TLS) 1.2 encryption when it transfers data to or from your Amazon EFS file system. If you specify an access point using ``AccessPointArn`` or an IAM role using ``FileSystemAccessRoleArn`` , you must set this parameter to ``TLS1_2`` .
1005
+ :param subdirectory: Specifies a mount path for your Amazon EFS file system. This is where DataSync reads or writes data (depending on if this is a source or destination location) on your file system. By default, DataSync uses the root directory (or `access point <https://docs.aws.amazon.com/efs/latest/ug/efs-access-points.html>`_ if you provide one by using ``AccessPointArn`` ). You can also include subdirectories using forward slashes (for example, ``/path/to/folder`` ).
1006
1006
  :param tags: Specifies the key-value pair that represents a tag that you want to add to the resource. The value can be an empty string. This value helps you manage, filter, and search for your resources. We recommend that you create a name tag for your location.
1007
1007
  '''
1008
1008
  if __debug__:
@@ -1085,7 +1085,7 @@ class CfnLocationEFS(
1085
1085
  def ec2_config(
1086
1086
  self,
1087
1087
  ) -> typing.Union[_IResolvable_da3f097b, "CfnLocationEFS.Ec2ConfigProperty"]:
1088
- '''Specifies the subnet and security groups DataSync uses to access your Amazon EFS file system.'''
1088
+ '''Specifies the subnet and security groups DataSync uses to connect to one of your Amazon EFS file system's `mount targets <https://docs.aws.amazon.com/efs/latest/ug/accessing-fs.html>`_ .'''
1089
1089
  return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnLocationEFS.Ec2ConfigProperty"], jsii.get(self, "ec2Config"))
1090
1090
 
1091
1091
  @ec2_config.setter
@@ -1101,7 +1101,7 @@ class CfnLocationEFS(
1101
1101
  @builtins.property
1102
1102
  @jsii.member(jsii_name="accessPointArn")
1103
1103
  def access_point_arn(self) -> typing.Optional[builtins.str]:
1104
- '''Specifies the Amazon Resource Name (ARN) of the access point that DataSync uses to access the Amazon EFS file system.'''
1104
+ '''Specifies the Amazon Resource Name (ARN) of the access point that DataSync uses to mount your Amazon EFS file system.'''
1105
1105
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "accessPointArn"))
1106
1106
 
1107
1107
  @access_point_arn.setter
@@ -1114,7 +1114,7 @@ class CfnLocationEFS(
1114
1114
  @builtins.property
1115
1115
  @jsii.member(jsii_name="efsFilesystemArn")
1116
1116
  def efs_filesystem_arn(self) -> typing.Optional[builtins.str]:
1117
- '''Specifies the ARN for the Amazon EFS file system.'''
1117
+ '''Specifies the ARN for your Amazon EFS file system.'''
1118
1118
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "efsFilesystemArn"))
1119
1119
 
1120
1120
  @efs_filesystem_arn.setter
@@ -1127,7 +1127,7 @@ class CfnLocationEFS(
1127
1127
  @builtins.property
1128
1128
  @jsii.member(jsii_name="fileSystemAccessRoleArn")
1129
1129
  def file_system_access_role_arn(self) -> typing.Optional[builtins.str]:
1130
- '''Specifies an AWS Identity and Access Management (IAM) role that DataSync assumes when mounting the Amazon EFS file system.'''
1130
+ '''Specifies an AWS Identity and Access Management (IAM) role that allows DataSync to access your Amazon EFS file system.'''
1131
1131
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "fileSystemAccessRoleArn"))
1132
1132
 
1133
1133
  @file_system_access_role_arn.setter
@@ -1140,7 +1140,7 @@ class CfnLocationEFS(
1140
1140
  @builtins.property
1141
1141
  @jsii.member(jsii_name="inTransitEncryption")
1142
1142
  def in_transit_encryption(self) -> typing.Optional[builtins.str]:
1143
- '''Specifies whether you want DataSync to use Transport Layer Security (TLS) 1.2 encryption when it copies data to or from the Amazon EFS file system.'''
1143
+ '''Specifies whether you want DataSync to use Transport Layer Security (TLS) 1.2 encryption when it transfers data to or from your Amazon EFS file system.'''
1144
1144
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "inTransitEncryption"))
1145
1145
 
1146
1146
  @in_transit_encryption.setter
@@ -1191,7 +1191,7 @@ class CfnLocationEFS(
1191
1191
  security_group_arns: typing.Sequence[builtins.str],
1192
1192
  subnet_arn: builtins.str,
1193
1193
  ) -> None:
1194
- '''The subnet and security groups that AWS DataSync uses to access your Amazon EFS file system.
1194
+ '''The subnet and security groups that AWS DataSync uses to connect to one of your Amazon EFS file system's `mount targets <https://docs.aws.amazon.com/efs/latest/ug/accessing-fs.html>`_ .
1195
1195
 
1196
1196
  :param security_group_arns: Specifies the Amazon Resource Names (ARNs) of the security groups associated with an Amazon EFS file system's mount target.
1197
1197
  :param subnet_arn: Specifies the ARN of a subnet where DataSync creates the `network interfaces <https://docs.aws.amazon.com/datasync/latest/userguide/datasync-network.html#required-network-interfaces>`_ for managing traffic during your transfer. The subnet must be located: - In the same virtual private cloud (VPC) as the Amazon EFS file system. - In the same Availability Zone as at least one mount target for the Amazon EFS file system. .. epigraph:: You don't need to specify a subnet that includes a file system mount target.
@@ -1287,12 +1287,12 @@ class CfnLocationEFSProps:
1287
1287
  ) -> None:
1288
1288
  '''Properties for defining a ``CfnLocationEFS``.
1289
1289
 
1290
- :param ec2_config: Specifies the subnet and security groups DataSync uses to access your Amazon EFS file system.
1291
- :param access_point_arn: Specifies the Amazon Resource Name (ARN) of the access point that DataSync uses to access the Amazon EFS file system.
1292
- :param efs_filesystem_arn: Specifies the ARN for the Amazon EFS file system.
1293
- :param file_system_access_role_arn: Specifies an AWS Identity and Access Management (IAM) role that DataSync assumes when mounting the Amazon EFS file system.
1294
- :param in_transit_encryption: Specifies whether you want DataSync to use Transport Layer Security (TLS) 1.2 encryption when it copies data to or from the Amazon EFS file system. If you specify an access point using ``AccessPointArn`` or an IAM role using ``FileSystemAccessRoleArn`` , you must set this parameter to ``TLS1_2`` .
1295
- :param subdirectory: Specifies a mount path for your Amazon EFS file system. This is where DataSync reads or writes data (depending on if this is a source or destination location). By default, DataSync uses the root directory, but you can also include subdirectories. .. epigraph:: You must specify a value with forward slashes (for example, ``/path/to/folder`` ).
1290
+ :param ec2_config: Specifies the subnet and security groups DataSync uses to connect to one of your Amazon EFS file system's `mount targets <https://docs.aws.amazon.com/efs/latest/ug/accessing-fs.html>`_ .
1291
+ :param access_point_arn: Specifies the Amazon Resource Name (ARN) of the access point that DataSync uses to mount your Amazon EFS file system. For more information, see `Accessing restricted file systems <https://docs.aws.amazon.com/datasync/latest/userguide/create-efs-location.html#create-efs-location-iam>`_ .
1292
+ :param efs_filesystem_arn: Specifies the ARN for your Amazon EFS file system.
1293
+ :param file_system_access_role_arn: Specifies an AWS Identity and Access Management (IAM) role that allows DataSync to access your Amazon EFS file system. For information on creating this role, see `Creating a DataSync IAM role for file system access <https://docs.aws.amazon.com/datasync/latest/userguide/create-efs-location.html#create-efs-location-iam-role>`_ .
1294
+ :param in_transit_encryption: Specifies whether you want DataSync to use Transport Layer Security (TLS) 1.2 encryption when it transfers data to or from your Amazon EFS file system. If you specify an access point using ``AccessPointArn`` or an IAM role using ``FileSystemAccessRoleArn`` , you must set this parameter to ``TLS1_2`` .
1295
+ :param subdirectory: Specifies a mount path for your Amazon EFS file system. This is where DataSync reads or writes data (depending on if this is a source or destination location) on your file system. By default, DataSync uses the root directory (or `access point <https://docs.aws.amazon.com/efs/latest/ug/efs-access-points.html>`_ if you provide one by using ``AccessPointArn`` ). You can also include subdirectories using forward slashes (for example, ``/path/to/folder`` ).
1296
1296
  :param tags: Specifies the key-value pair that represents a tag that you want to add to the resource. The value can be an empty string. This value helps you manage, filter, and search for your resources. We recommend that you create a name tag for your location.
1297
1297
 
1298
1298
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationefs.html
@@ -1351,7 +1351,7 @@ class CfnLocationEFSProps:
1351
1351
  def ec2_config(
1352
1352
  self,
1353
1353
  ) -> typing.Union[_IResolvable_da3f097b, CfnLocationEFS.Ec2ConfigProperty]:
1354
- '''Specifies the subnet and security groups DataSync uses to access your Amazon EFS file system.
1354
+ '''Specifies the subnet and security groups DataSync uses to connect to one of your Amazon EFS file system's `mount targets <https://docs.aws.amazon.com/efs/latest/ug/accessing-fs.html>`_ .
1355
1355
 
1356
1356
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationefs.html#cfn-datasync-locationefs-ec2config
1357
1357
  '''
@@ -1361,7 +1361,9 @@ class CfnLocationEFSProps:
1361
1361
 
1362
1362
  @builtins.property
1363
1363
  def access_point_arn(self) -> typing.Optional[builtins.str]:
1364
- '''Specifies the Amazon Resource Name (ARN) of the access point that DataSync uses to access the Amazon EFS file system.
1364
+ '''Specifies the Amazon Resource Name (ARN) of the access point that DataSync uses to mount your Amazon EFS file system.
1365
+
1366
+ For more information, see `Accessing restricted file systems <https://docs.aws.amazon.com/datasync/latest/userguide/create-efs-location.html#create-efs-location-iam>`_ .
1365
1367
 
1366
1368
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationefs.html#cfn-datasync-locationefs-accesspointarn
1367
1369
  '''
@@ -1370,7 +1372,7 @@ class CfnLocationEFSProps:
1370
1372
 
1371
1373
  @builtins.property
1372
1374
  def efs_filesystem_arn(self) -> typing.Optional[builtins.str]:
1373
- '''Specifies the ARN for the Amazon EFS file system.
1375
+ '''Specifies the ARN for your Amazon EFS file system.
1374
1376
 
1375
1377
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationefs.html#cfn-datasync-locationefs-efsfilesystemarn
1376
1378
  '''
@@ -1379,7 +1381,9 @@ class CfnLocationEFSProps:
1379
1381
 
1380
1382
  @builtins.property
1381
1383
  def file_system_access_role_arn(self) -> typing.Optional[builtins.str]:
1382
- '''Specifies an AWS Identity and Access Management (IAM) role that DataSync assumes when mounting the Amazon EFS file system.
1384
+ '''Specifies an AWS Identity and Access Management (IAM) role that allows DataSync to access your Amazon EFS file system.
1385
+
1386
+ For information on creating this role, see `Creating a DataSync IAM role for file system access <https://docs.aws.amazon.com/datasync/latest/userguide/create-efs-location.html#create-efs-location-iam-role>`_ .
1383
1387
 
1384
1388
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationefs.html#cfn-datasync-locationefs-filesystemaccessrolearn
1385
1389
  '''
@@ -1388,7 +1392,7 @@ class CfnLocationEFSProps:
1388
1392
 
1389
1393
  @builtins.property
1390
1394
  def in_transit_encryption(self) -> typing.Optional[builtins.str]:
1391
- '''Specifies whether you want DataSync to use Transport Layer Security (TLS) 1.2 encryption when it copies data to or from the Amazon EFS file system.
1395
+ '''Specifies whether you want DataSync to use Transport Layer Security (TLS) 1.2 encryption when it transfers data to or from your Amazon EFS file system.
1392
1396
 
1393
1397
  If you specify an access point using ``AccessPointArn`` or an IAM role using ``FileSystemAccessRoleArn`` , you must set this parameter to ``TLS1_2`` .
1394
1398
 
@@ -1401,10 +1405,9 @@ class CfnLocationEFSProps:
1401
1405
  def subdirectory(self) -> typing.Optional[builtins.str]:
1402
1406
  '''Specifies a mount path for your Amazon EFS file system.
1403
1407
 
1404
- This is where DataSync reads or writes data (depending on if this is a source or destination location). By default, DataSync uses the root directory, but you can also include subdirectories.
1405
- .. epigraph::
1408
+ This is where DataSync reads or writes data (depending on if this is a source or destination location) on your file system.
1406
1409
 
1407
- You must specify a value with forward slashes (for example, ``/path/to/folder`` ).
1410
+ By default, DataSync uses the root directory (or `access point <https://docs.aws.amazon.com/efs/latest/ug/efs-access-points.html>`_ if you provide one by using ``AccessPointArn`` ). You can also include subdirectories using forward slashes (for example, ``/path/to/folder`` ).
1408
1411
 
1409
1412
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationefs.html#cfn-datasync-locationefs-subdirectory
1410
1413
  '''
@@ -8428,7 +8431,7 @@ class CfnTask(
8428
8431
  ) -> None:
8429
8432
  '''Configures your AWS DataSync task to run on a `schedule <https://docs.aws.amazon.com/datasync/latest/userguide/task-scheduling.html>`_ (at a minimum interval of 1 hour).
8430
8433
 
8431
- :param schedule_expression: Specifies your task schedule by using a cron expression in UTC time. For information about cron expression syntax, see the `*Amazon EventBridge User Guide* <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-cron-expressions.html>`_ .
8434
+ :param schedule_expression: Specifies your task schedule by using a cron or rate expression. Use cron expressions for task schedules that run on a specific time and day. For example, the following cron expression creates a task schedule that runs at 8 AM on the first Wednesday of every month: ``cron(0 8 * * 3#1)`` Use rate expressions for task schedules that run on a regular interval. For example, the following rate expression creates a task schedule that runs every 12 hours: ``rate(12 hours)`` For information about cron and rate expression syntax, see the `*Amazon EventBridge User Guide* <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-scheduled-rule-pattern.html>`_ .
8432
8435
  :param status: Specifies whether to enable or disable your task schedule. Your schedule is enabled by default, but there can be situations where you need to disable it. For example, you might need to perform maintenance on a storage system before you can begin a recurring DataSync transfer. DataSync might disable your schedule automatically if your task fails repeatedly with the same error. For more information, see the `*DataSync User Guide* <https://docs.aws.amazon.com/datasync/latest/userguide/task-scheduling.html#pause-task-schedule>`_ .
8433
8436
 
8434
8437
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-task-taskschedule.html
@@ -8457,9 +8460,17 @@ class CfnTask(
8457
8460
 
8458
8461
  @builtins.property
8459
8462
  def schedule_expression(self) -> typing.Optional[builtins.str]:
8460
- '''Specifies your task schedule by using a cron expression in UTC time.
8463
+ '''Specifies your task schedule by using a cron or rate expression.
8464
+
8465
+ Use cron expressions for task schedules that run on a specific time and day. For example, the following cron expression creates a task schedule that runs at 8 AM on the first Wednesday of every month:
8466
+
8467
+ ``cron(0 8 * * 3#1)``
8468
+
8469
+ Use rate expressions for task schedules that run on a regular interval. For example, the following rate expression creates a task schedule that runs every 12 hours:
8470
+
8471
+ ``rate(12 hours)``
8461
8472
 
8462
- For information about cron expression syntax, see the `*Amazon EventBridge User Guide* <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-cron-expressions.html>`_ .
8473
+ For information about cron and rate expression syntax, see the `*Amazon EventBridge User Guide* <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-scheduled-rule-pattern.html>`_ .
8463
8474
 
8464
8475
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-task-taskschedule.html#cfn-datasync-task-taskschedule-scheduleexpression
8465
8476
  '''