aws-cdk-lib 2.156.0__py3-none-any.whl → 2.158.0__py3-none-any.whl

aws_cdk/aws_qbusiness/__init__.py

@@ -48,7 +48,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 
@@ -93,11 +108,23 @@ class CfnApplication(
             attachments_configuration=qbusiness.CfnApplication.AttachmentsConfigurationProperty(
                 attachments_control_mode="attachmentsControlMode"
             ),
+            auto_subscription_configuration=qbusiness.CfnApplication.AutoSubscriptionConfigurationProperty(
+                auto_subscribe="autoSubscribe",
+        
+                # the properties below are optional
+                default_subscription_type="defaultSubscriptionType"
+            ),
+            client_ids_for_oidc=["clientIdsForOidc"],
             description="description",
             encryption_configuration=qbusiness.CfnApplication.EncryptionConfigurationProperty(
                 kms_key_id="kmsKeyId"
             ),
+            iam_identity_provider_arn="iamIdentityProviderArn",
             identity_center_instance_arn="identityCenterInstanceArn",
+            identity_type="identityType",
+            personalization_configuration=qbusiness.CfnApplication.PersonalizationConfigurationProperty(
+                personalization_control_mode="personalizationControlMode"
+            ),
             q_apps_configuration=qbusiness.CfnApplication.QAppsConfigurationProperty(
                 q_apps_control_mode="qAppsControlMode"
             ),
@@ -116,9 +143,14 @@ class CfnApplication(
         *,
         display_name: builtins.str,
         attachments_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApplication.AttachmentsConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        auto_subscription_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApplication.AutoSubscriptionConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        client_ids_for_oidc: typing.Optional[typing.Sequence[builtins.str]] = None,
         description: typing.Optional[builtins.str] = None,
         encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApplication.EncryptionConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        iam_identity_provider_arn: typing.Optional[builtins.str] = None,
         identity_center_instance_arn: typing.Optional[builtins.str] = None,
+        identity_type: typing.Optional[builtins.str] = None,
+        personalization_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApplication.PersonalizationConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         q_apps_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApplication.QAppsConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         role_arn: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -128,10 +160,15 @@ class CfnApplication(
         :param id: Construct identifier for this resource (unique in its scope).
         :param display_name: The name of the Amazon Q Business application.
         :param attachments_configuration: Configuration information for the file upload during chat feature.
+        :param auto_subscription_configuration: Subscription configuration information for an Amazon Q Business application using IAM identity federation for user management.
+        :param client_ids_for_oidc: 
         :param description: A description for the Amazon Q Business application.
         :param encryption_configuration: Provides the identifier of the AWS KMS key used to encrypt data indexed by Amazon Q Business. Amazon Q Business doesn't support asymmetric keys.
+        :param iam_identity_provider_arn: The Amazon Resource Name (ARN) of an identity provider being used by an Amazon Q Business application.
         :param identity_center_instance_arn: The Amazon Resource Name (ARN) of the IAM Identity Center instance you are either creating for—or connecting to—your Amazon Q Business application. *Required* : ``Yes``
-        :param q_apps_configuration: Configuration information about Amazon Q Apps. (preview feature)
+        :param identity_type: The authentication type being used by a Amazon Q Business application.
+        :param personalization_configuration: Configuration information about chat response personalization. For more information, see `Personalizing chat responses <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html>`_ .
+        :param q_apps_configuration: Configuration information about Amazon Q Apps.
         :param role_arn: The Amazon Resource Name (ARN) of an IAM role with permissions to access your Amazon CloudWatch logs and metrics.
         :param tags: A list of key-value pairs that identify or categorize your Amazon Q Business application. You can also use tags to help control access to the application. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
         '''
@@ -142,9 +179,14 @@ class CfnApplication(
         props = CfnApplicationProps(
             display_name=display_name,
             attachments_configuration=attachments_configuration,
+            auto_subscription_configuration=auto_subscription_configuration,
+            client_ids_for_oidc=client_ids_for_oidc,
             description=description,
             encryption_configuration=encryption_configuration,
+            iam_identity_provider_arn=iam_identity_provider_arn,
             identity_center_instance_arn=identity_center_instance_arn,
+            identity_type=identity_type,
+            personalization_configuration=personalization_configuration,
             q_apps_configuration=q_apps_configuration,
             role_arn=role_arn,
             tags=tags,
@@ -280,6 +322,39 @@ class CfnApplication(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "attachmentsConfiguration", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="autoSubscriptionConfiguration")
+    def auto_subscription_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.AutoSubscriptionConfigurationProperty"]]:
+        '''Subscription configuration information for an Amazon Q Business application using IAM identity federation for user management.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.AutoSubscriptionConfigurationProperty"]], jsii.get(self, "autoSubscriptionConfiguration"))
+
+    @auto_subscription_configuration.setter
+    def auto_subscription_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.AutoSubscriptionConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2b35a2b0fba0b74bf88677e8d09b2943fd8623f4b30bfa5113d4dd6400769370)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "autoSubscriptionConfiguration", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="clientIdsForOidc")
+    def client_ids_for_oidc(self) -> typing.Optional[typing.List[builtins.str]]:
+        return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "clientIdsForOidc"))
+
+    @client_ids_for_oidc.setter
+    def client_ids_for_oidc(
+        self,
+        value: typing.Optional[typing.List[builtins.str]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e16dbf7c72949c3994e85619024d1169320455f5129fc42720ee3369ccfe5013)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "clientIdsForOidc", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="description")
     def description(self) -> typing.Optional[builtins.str]:
@@ -311,6 +386,19 @@ class CfnApplication(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "encryptionConfiguration", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="iamIdentityProviderArn")
+    def iam_identity_provider_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of an identity provider being used by an Amazon Q Business application.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "iamIdentityProviderArn"))
+
+    @iam_identity_provider_arn.setter
+    def iam_identity_provider_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2b960c5b2a263370b2ed8902e4658a930ce9de4e1d95a848786663e3d07945d0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "iamIdentityProviderArn", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="identityCenterInstanceArn")
     def identity_center_instance_arn(self) -> typing.Optional[builtins.str]:
@@ -327,6 +415,37 @@ class CfnApplication(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "identityCenterInstanceArn", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="identityType")
+    def identity_type(self) -> typing.Optional[builtins.str]:
+        '''The authentication type being used by a Amazon Q Business application.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "identityType"))
+
+    @identity_type.setter
+    def identity_type(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__44221a178b075fcdd809e631de43085ff6e3f91b9741304fd15e1a0dc442eae1)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "identityType", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="personalizationConfiguration")
+    def personalization_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.PersonalizationConfigurationProperty"]]:
+        '''Configuration information about chat response personalization.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.PersonalizationConfigurationProperty"]], jsii.get(self, "personalizationConfiguration"))
+
+    @personalization_configuration.setter
+    def personalization_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.PersonalizationConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__aa9c62867ef8fd21c925099f5633037e806bdc6c1fd8880e42968edf98de8ec2)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "personalizationConfiguration", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="qAppsConfiguration")
     def q_apps_configuration(
@@ -423,6 +542,84 @@ class CfnApplication(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_qbusiness.CfnApplication.AutoSubscriptionConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "auto_subscribe": "autoSubscribe",
+            "default_subscription_type": "defaultSubscriptionType",
+        },
+    )
+    class AutoSubscriptionConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            auto_subscribe: builtins.str,
+            default_subscription_type: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Subscription configuration information for an Amazon Q Business application using IAM identity federation for user management.
+
+            :param auto_subscribe: Describes whether automatic subscriptions are enabled for an Amazon Q Business application using IAM identity federation for user management.
+            :param default_subscription_type: Describes the default subscription type assigned to an Amazon Q Business application using IAM identity federation for user management. If the value for ``autoSubscribe`` is set to ``ENABLED`` you must select a value for this field.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-application-autosubscriptionconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_qbusiness as qbusiness
+                
+                auto_subscription_configuration_property = qbusiness.CfnApplication.AutoSubscriptionConfigurationProperty(
+                    auto_subscribe="autoSubscribe",
+                
+                    # the properties below are optional
+                    default_subscription_type="defaultSubscriptionType"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__14d50e4994c3366ddeb7da76131ecc6e103dc3ed4c7bb2ec4ce982b547d2ab3b)
+                check_type(argname="argument auto_subscribe", value=auto_subscribe, expected_type=type_hints["auto_subscribe"])
+                check_type(argname="argument default_subscription_type", value=default_subscription_type, expected_type=type_hints["default_subscription_type"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "auto_subscribe": auto_subscribe,
+            }
+            if default_subscription_type is not None:
+                self._values["default_subscription_type"] = default_subscription_type
+
+        @builtins.property
+        def auto_subscribe(self) -> builtins.str:
+            '''Describes whether automatic subscriptions are enabled for an Amazon Q Business application using IAM identity federation for user management.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-application-autosubscriptionconfiguration.html#cfn-qbusiness-application-autosubscriptionconfiguration-autosubscribe
+            '''
+            result = self._values.get("auto_subscribe")
+            assert result is not None, "Required property 'auto_subscribe' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def default_subscription_type(self) -> typing.Optional[builtins.str]:
+            '''Describes the default subscription type assigned to an Amazon Q Business application using IAM identity federation for user management.
+
+            If the value for ``autoSubscribe`` is set to ``ENABLED`` you must select a value for this field.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-application-autosubscriptionconfiguration.html#cfn-qbusiness-application-autosubscriptionconfiguration-defaultsubscriptiontype
+            '''
+            result = self._values.get("default_subscription_type")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "AutoSubscriptionConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_qbusiness.CfnApplication.EncryptionConfigurationProperty",
         jsii_struct_bases=[],
@@ -478,6 +675,60 @@ class CfnApplication(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_qbusiness.CfnApplication.PersonalizationConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"personalization_control_mode": "personalizationControlMode"},
+    )
+    class PersonalizationConfigurationProperty:
+        def __init__(self, *, personalization_control_mode: builtins.str) -> None:
+            '''Configuration information about chat response personalization.
+
+            For more information, see `Personalizing chat responses <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html>`_ .
+
+            :param personalization_control_mode: An option to allow Amazon Q Business to customize chat responses using user specific metadata—specifically, location and job information—in your IAM Identity Center instance.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-application-personalizationconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_qbusiness as qbusiness
+                
+                personalization_configuration_property = qbusiness.CfnApplication.PersonalizationConfigurationProperty(
+                    personalization_control_mode="personalizationControlMode"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__05c530a7a40f7de7f808af2f7755372bf178629a393e2508771fc91224c8446f)
+                check_type(argname="argument personalization_control_mode", value=personalization_control_mode, expected_type=type_hints["personalization_control_mode"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "personalization_control_mode": personalization_control_mode,
+            }
+
+        @builtins.property
+        def personalization_control_mode(self) -> builtins.str:
+            '''An option to allow Amazon Q Business to customize chat responses using user specific metadata—specifically, location and job information—in your IAM Identity Center instance.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-application-personalizationconfiguration.html#cfn-qbusiness-application-personalizationconfiguration-personalizationcontrolmode
+            '''
+            result = self._values.get("personalization_control_mode")
+            assert result is not None, "Required property 'personalization_control_mode' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "PersonalizationConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_qbusiness.CfnApplication.QAppsConfigurationProperty",
         jsii_struct_bases=[],
@@ -487,8 +738,6 @@ class CfnApplication(
         def __init__(self, *, q_apps_control_mode: builtins.str) -> None:
             '''Configuration information about Amazon Q Apps.
 
-            (preview feature)
-
             :param q_apps_control_mode: Status information about whether end users can create and use Amazon Q Apps in the web experience.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-application-qappsconfiguration.html
@@ -539,9 +788,14 @@ class CfnApplication(
     name_mapping={
         "display_name": "displayName",
         "attachments_configuration": "attachmentsConfiguration",
+        "auto_subscription_configuration": "autoSubscriptionConfiguration",
+        "client_ids_for_oidc": "clientIdsForOidc",
         "description": "description",
         "encryption_configuration": "encryptionConfiguration",
+        "iam_identity_provider_arn": "iamIdentityProviderArn",
         "identity_center_instance_arn": "identityCenterInstanceArn",
+        "identity_type": "identityType",
+        "personalization_configuration": "personalizationConfiguration",
         "q_apps_configuration": "qAppsConfiguration",
         "role_arn": "roleArn",
         "tags": "tags",
@@ -553,9 +807,14 @@ class CfnApplicationProps:
         *,
         display_name: builtins.str,
         attachments_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.AttachmentsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        auto_subscription_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.AutoSubscriptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        client_ids_for_oidc: typing.Optional[typing.Sequence[builtins.str]] = None,
         description: typing.Optional[builtins.str] = None,
         encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.EncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        iam_identity_provider_arn: typing.Optional[builtins.str] = None,
         identity_center_instance_arn: typing.Optional[builtins.str] = None,
+        identity_type: typing.Optional[builtins.str] = None,
+        personalization_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.PersonalizationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         q_apps_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.QAppsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         role_arn: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -564,10 +823,15 @@ class CfnApplicationProps:
 
         :param display_name: The name of the Amazon Q Business application.
         :param attachments_configuration: Configuration information for the file upload during chat feature.
+        :param auto_subscription_configuration: Subscription configuration information for an Amazon Q Business application using IAM identity federation for user management.
+        :param client_ids_for_oidc: 
         :param description: A description for the Amazon Q Business application.
         :param encryption_configuration: Provides the identifier of the AWS KMS key used to encrypt data indexed by Amazon Q Business. Amazon Q Business doesn't support asymmetric keys.
+        :param iam_identity_provider_arn: The Amazon Resource Name (ARN) of an identity provider being used by an Amazon Q Business application.
         :param identity_center_instance_arn: The Amazon Resource Name (ARN) of the IAM Identity Center instance you are either creating for—or connecting to—your Amazon Q Business application. *Required* : ``Yes``
-        :param q_apps_configuration: Configuration information about Amazon Q Apps. (preview feature)
+        :param identity_type: The authentication type being used by a Amazon Q Business application.
+        :param personalization_configuration: Configuration information about chat response personalization. For more information, see `Personalizing chat responses <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html>`_ .
+        :param q_apps_configuration: Configuration information about Amazon Q Apps.
         :param role_arn: The Amazon Resource Name (ARN) of an IAM role with permissions to access your Amazon CloudWatch logs and metrics.
         :param tags: A list of key-value pairs that identify or categorize your Amazon Q Business application. You can also use tags to help control access to the application. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
 
@@ -587,11 +851,23 @@ class CfnApplicationProps:
                 attachments_configuration=qbusiness.CfnApplication.AttachmentsConfigurationProperty(
                     attachments_control_mode="attachmentsControlMode"
                 ),
+                auto_subscription_configuration=qbusiness.CfnApplication.AutoSubscriptionConfigurationProperty(
+                    auto_subscribe="autoSubscribe",
+            
+                    # the properties below are optional
+                    default_subscription_type="defaultSubscriptionType"
+                ),
+                client_ids_for_oidc=["clientIdsForOidc"],
                 description="description",
                 encryption_configuration=qbusiness.CfnApplication.EncryptionConfigurationProperty(
                     kms_key_id="kmsKeyId"
                 ),
+                iam_identity_provider_arn="iamIdentityProviderArn",
                 identity_center_instance_arn="identityCenterInstanceArn",
+                identity_type="identityType",
+                personalization_configuration=qbusiness.CfnApplication.PersonalizationConfigurationProperty(
+                    personalization_control_mode="personalizationControlMode"
+                ),
                 q_apps_configuration=qbusiness.CfnApplication.QAppsConfigurationProperty(
                     q_apps_control_mode="qAppsControlMode"
                 ),
@@ -606,9 +882,14 @@ class CfnApplicationProps:
             type_hints = typing.get_type_hints(_typecheckingstub__cd218bde3aa6ce3304b30e1d4799c501a50db8db5cef8926c28924af066170bb)
             check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
             check_type(argname="argument attachments_configuration", value=attachments_configuration, expected_type=type_hints["attachments_configuration"])
+            check_type(argname="argument auto_subscription_configuration", value=auto_subscription_configuration, expected_type=type_hints["auto_subscription_configuration"])
+            check_type(argname="argument client_ids_for_oidc", value=client_ids_for_oidc, expected_type=type_hints["client_ids_for_oidc"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
             check_type(argname="argument encryption_configuration", value=encryption_configuration, expected_type=type_hints["encryption_configuration"])
+            check_type(argname="argument iam_identity_provider_arn", value=iam_identity_provider_arn, expected_type=type_hints["iam_identity_provider_arn"])
             check_type(argname="argument identity_center_instance_arn", value=identity_center_instance_arn, expected_type=type_hints["identity_center_instance_arn"])
+            check_type(argname="argument identity_type", value=identity_type, expected_type=type_hints["identity_type"])
+            check_type(argname="argument personalization_configuration", value=personalization_configuration, expected_type=type_hints["personalization_configuration"])
             check_type(argname="argument q_apps_configuration", value=q_apps_configuration, expected_type=type_hints["q_apps_configuration"])
             check_type(argname="argument role_arn", value=role_arn, expected_type=type_hints["role_arn"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
@@ -617,12 +898,22 @@ class CfnApplicationProps:
         }
         if attachments_configuration is not None:
             self._values["attachments_configuration"] = attachments_configuration
+        if auto_subscription_configuration is not None:
+            self._values["auto_subscription_configuration"] = auto_subscription_configuration
+        if client_ids_for_oidc is not None:
+            self._values["client_ids_for_oidc"] = client_ids_for_oidc
         if description is not None:
             self._values["description"] = description
         if encryption_configuration is not None:
             self._values["encryption_configuration"] = encryption_configuration
+        if iam_identity_provider_arn is not None:
+            self._values["iam_identity_provider_arn"] = iam_identity_provider_arn
         if identity_center_instance_arn is not None:
             self._values["identity_center_instance_arn"] = identity_center_instance_arn
+        if identity_type is not None:
+            self._values["identity_type"] = identity_type
+        if personalization_configuration is not None:
+            self._values["personalization_configuration"] = personalization_configuration
         if q_apps_configuration is not None:
             self._values["q_apps_configuration"] = q_apps_configuration
         if role_arn is not None:
@@ -651,6 +942,25 @@ class CfnApplicationProps:
         result = self._values.get("attachments_configuration")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.AttachmentsConfigurationProperty]], result)
 
+    @builtins.property
+    def auto_subscription_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.AutoSubscriptionConfigurationProperty]]:
+        '''Subscription configuration information for an Amazon Q Business application using IAM identity federation for user management.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-application.html#cfn-qbusiness-application-autosubscriptionconfiguration
+        '''
+        result = self._values.get("auto_subscription_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.AutoSubscriptionConfigurationProperty]], result)
+
+    @builtins.property
+    def client_ids_for_oidc(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-application.html#cfn-qbusiness-application-clientidsforoidc
+        '''
+        result = self._values.get("client_ids_for_oidc")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
     @builtins.property
     def description(self) -> typing.Optional[builtins.str]:
         '''A description for the Amazon Q Business application.
@@ -673,6 +983,15 @@ class CfnApplicationProps:
         result = self._values.get("encryption_configuration")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.EncryptionConfigurationProperty]], result)
 
+    @builtins.property
+    def iam_identity_provider_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of an identity provider being used by an Amazon Q Business application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-application.html#cfn-qbusiness-application-iamidentityproviderarn
+        '''
+        result = self._values.get("iam_identity_provider_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def identity_center_instance_arn(self) -> typing.Optional[builtins.str]:
         '''The Amazon Resource Name (ARN) of the IAM Identity Center instance you are either creating for—or connecting to—your Amazon Q Business application.
@@ -684,14 +1003,34 @@ class CfnApplicationProps:
         result = self._values.get("identity_center_instance_arn")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def identity_type(self) -> typing.Optional[builtins.str]:
+        '''The authentication type being used by a Amazon Q Business application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-application.html#cfn-qbusiness-application-identitytype
+        '''
+        result = self._values.get("identity_type")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def personalization_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.PersonalizationConfigurationProperty]]:
+        '''Configuration information about chat response personalization.
+
+        For more information, see `Personalizing chat responses <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html>`_ .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-application.html#cfn-qbusiness-application-personalizationconfiguration
+        '''
+        result = self._values.get("personalization_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.PersonalizationConfigurationProperty]], result)
+
     @builtins.property
     def q_apps_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.QAppsConfigurationProperty]]:
         '''Configuration information about Amazon Q Apps.
 
-        (preview feature)
-
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-application.html#cfn-qbusiness-application-qappsconfiguration
         '''
         result = self._values.get("q_apps_configuration")
@@ -4574,6 +4913,15 @@ class CfnWebExperience(
             application_id="applicationId",
         
             # the properties below are optional
+            identity_provider_configuration=qbusiness.CfnWebExperience.IdentityProviderConfigurationProperty(
+                open_id_connect_configuration=qbusiness.CfnWebExperience.OpenIDConnectProviderConfigurationProperty(
+                    secrets_arn="secretsArn",
+                    secrets_role="secretsRole"
+                ),
+                saml_configuration=qbusiness.CfnWebExperience.SamlProviderConfigurationProperty(
+                    authentication_url="authenticationUrl"
+                )
+            ),
             role_arn="roleArn",
             sample_prompts_control_mode="samplePromptsControlMode",
             subtitle="subtitle",
@@ -4592,6 +4940,7 @@ class CfnWebExperience(
         id: builtins.str,
         *,
         application_id: builtins.str,
+        identity_provider_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebExperience.IdentityProviderConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         role_arn: typing.Optional[builtins.str] = None,
         sample_prompts_control_mode: typing.Optional[builtins.str] = None,
         subtitle: typing.Optional[builtins.str] = None,
@@ -4603,6 +4952,7 @@ class CfnWebExperience(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param application_id: The identifier of the Amazon Q Business web experience.
+        :param identity_provider_configuration: Provides information about the identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience.
         :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience. .. epigraph:: You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
         :param sample_prompts_control_mode: Determines whether sample prompts are enabled in the web experience for an end user.
         :param subtitle: A subtitle to personalize your Amazon Q Business web experience.
@@ -4616,6 +4966,7 @@ class CfnWebExperience(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnWebExperienceProps(
             application_id=application_id,
+            identity_provider_configuration=identity_provider_configuration,
             role_arn=role_arn,
             sample_prompts_control_mode=sample_prompts_control_mode,
             subtitle=subtitle,
@@ -4736,6 +5087,24 @@ class CfnWebExperience(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "applicationId", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="identityProviderConfiguration")
+    def identity_provider_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebExperience.IdentityProviderConfigurationProperty"]]:
+        '''Provides information about the identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebExperience.IdentityProviderConfigurationProperty"]], jsii.get(self, "identityProviderConfiguration"))
+
+    @identity_provider_configuration.setter
+    def identity_provider_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebExperience.IdentityProviderConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__037151dbe9f2f36da364495e39b2467a261694df042a6b81d84e5c2c34771ac4)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "identityProviderConfiguration", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="roleArn")
     def role_arn(self) -> typing.Optional[builtins.str]:
@@ -4814,12 +5183,216 @@ class CfnWebExperience(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "welcomeMessage", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_qbusiness.CfnWebExperience.IdentityProviderConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "open_id_connect_configuration": "openIdConnectConfiguration",
+            "saml_configuration": "samlConfiguration",
+        },
+    )
+    class IdentityProviderConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            open_id_connect_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebExperience.OpenIDConnectProviderConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            saml_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebExperience.SamlProviderConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''Provides information about the identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience.
+
+            :param open_id_connect_configuration: 
+            :param saml_configuration: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-webexperience-identityproviderconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_qbusiness as qbusiness
+                
+                identity_provider_configuration_property = qbusiness.CfnWebExperience.IdentityProviderConfigurationProperty(
+                    open_id_connect_configuration=qbusiness.CfnWebExperience.OpenIDConnectProviderConfigurationProperty(
+                        secrets_arn="secretsArn",
+                        secrets_role="secretsRole"
+                    ),
+                    saml_configuration=qbusiness.CfnWebExperience.SamlProviderConfigurationProperty(
+                        authentication_url="authenticationUrl"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__f792f47d6a0722e8b808ad22d67aec07629a1e7351865cae0ee890cff9ba5c1a)
+                check_type(argname="argument open_id_connect_configuration", value=open_id_connect_configuration, expected_type=type_hints["open_id_connect_configuration"])
+                check_type(argname="argument saml_configuration", value=saml_configuration, expected_type=type_hints["saml_configuration"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if open_id_connect_configuration is not None:
+                self._values["open_id_connect_configuration"] = open_id_connect_configuration
+            if saml_configuration is not None:
+                self._values["saml_configuration"] = saml_configuration
+
+        @builtins.property
+        def open_id_connect_configuration(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebExperience.OpenIDConnectProviderConfigurationProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-webexperience-identityproviderconfiguration.html#cfn-qbusiness-webexperience-identityproviderconfiguration-openidconnectconfiguration
+            '''
+            result = self._values.get("open_id_connect_configuration")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebExperience.OpenIDConnectProviderConfigurationProperty"]], result)
+
+        @builtins.property
+        def saml_configuration(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebExperience.SamlProviderConfigurationProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-webexperience-identityproviderconfiguration.html#cfn-qbusiness-webexperience-identityproviderconfiguration-samlconfiguration
+            '''
+            result = self._values.get("saml_configuration")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebExperience.SamlProviderConfigurationProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "IdentityProviderConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_qbusiness.CfnWebExperience.OpenIDConnectProviderConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"secrets_arn": "secretsArn", "secrets_role": "secretsRole"},
+    )
+    class OpenIDConnectProviderConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            secrets_arn: builtins.str,
+            secrets_role: builtins.str,
+        ) -> None:
+            '''Information about the OIDC-compliant identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience.
+
+            :param secrets_arn: The Amazon Resource Name (ARN) of a Secrets Manager secret containing the OIDC client secret.
+            :param secrets_role: An IAM role with permissions to access AWS KMS to decrypt the Secrets Manager secret containing your OIDC client secret.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-webexperience-openidconnectproviderconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_qbusiness as qbusiness
+                
+                open_iDConnect_provider_configuration_property = qbusiness.CfnWebExperience.OpenIDConnectProviderConfigurationProperty(
+                    secrets_arn="secretsArn",
+                    secrets_role="secretsRole"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__83ea977b859d6c4c1e46fa972ce0e7d691c60d57b7c59adbe13d851526eb765e)
+                check_type(argname="argument secrets_arn", value=secrets_arn, expected_type=type_hints["secrets_arn"])
+                check_type(argname="argument secrets_role", value=secrets_role, expected_type=type_hints["secrets_role"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "secrets_arn": secrets_arn,
+                "secrets_role": secrets_role,
+            }
+
+        @builtins.property
+        def secrets_arn(self) -> builtins.str:
+            '''The Amazon Resource Name (ARN) of a Secrets Manager secret containing the OIDC client secret.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-webexperience-openidconnectproviderconfiguration.html#cfn-qbusiness-webexperience-openidconnectproviderconfiguration-secretsarn
+            '''
+            result = self._values.get("secrets_arn")
+            assert result is not None, "Required property 'secrets_arn' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def secrets_role(self) -> builtins.str:
+            '''An IAM role with permissions to access AWS KMS to decrypt the Secrets Manager secret containing your OIDC client secret.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-webexperience-openidconnectproviderconfiguration.html#cfn-qbusiness-webexperience-openidconnectproviderconfiguration-secretsrole
+            '''
+            result = self._values.get("secrets_role")
+            assert result is not None, "Required property 'secrets_role' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "OpenIDConnectProviderConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_qbusiness.CfnWebExperience.SamlProviderConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"authentication_url": "authenticationUrl"},
+    )
+    class SamlProviderConfigurationProperty:
+        def __init__(self, *, authentication_url: builtins.str) -> None:
+            '''Information about the SAML 2.0-compliant identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience.
+
+            :param authentication_url: The URL where Amazon Q Business end users will be redirected for authentication.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-webexperience-samlproviderconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_qbusiness as qbusiness
+                
+                saml_provider_configuration_property = qbusiness.CfnWebExperience.SamlProviderConfigurationProperty(
+                    authentication_url="authenticationUrl"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__7f19a9da1f3a1cf2eefff3580476a949609debe65a8fc477af11c893d5b4453b)
+                check_type(argname="argument authentication_url", value=authentication_url, expected_type=type_hints["authentication_url"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "authentication_url": authentication_url,
+            }
+
+        @builtins.property
+        def authentication_url(self) -> builtins.str:
+            '''The URL where Amazon Q Business end users will be redirected for authentication.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-qbusiness-webexperience-samlproviderconfiguration.html#cfn-qbusiness-webexperience-samlproviderconfiguration-authenticationurl
+            '''
+            result = self._values.get("authentication_url")
+            assert result is not None, "Required property 'authentication_url' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "SamlProviderConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_qbusiness.CfnWebExperienceProps",
     jsii_struct_bases=[],
     name_mapping={
         "application_id": "applicationId",
+        "identity_provider_configuration": "identityProviderConfiguration",
         "role_arn": "roleArn",
         "sample_prompts_control_mode": "samplePromptsControlMode",
         "subtitle": "subtitle",
@@ -4833,6 +5406,7 @@ class CfnWebExperienceProps:
         self,
         *,
         application_id: builtins.str,
+        identity_provider_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebExperience.IdentityProviderConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         role_arn: typing.Optional[builtins.str] = None,
         sample_prompts_control_mode: typing.Optional[builtins.str] = None,
         subtitle: typing.Optional[builtins.str] = None,
@@ -4843,6 +5417,7 @@ class CfnWebExperienceProps:
         '''Properties for defining a ``CfnWebExperience``.
 
         :param application_id: The identifier of the Amazon Q Business web experience.
+        :param identity_provider_configuration: Provides information about the identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience.
         :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience. .. epigraph:: You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
         :param sample_prompts_control_mode: Determines whether sample prompts are enabled in the web experience for an end user.
         :param subtitle: A subtitle to personalize your Amazon Q Business web experience.
@@ -4863,6 +5438,15 @@ class CfnWebExperienceProps:
                 application_id="applicationId",
             
                 # the properties below are optional
+                identity_provider_configuration=qbusiness.CfnWebExperience.IdentityProviderConfigurationProperty(
+                    open_id_connect_configuration=qbusiness.CfnWebExperience.OpenIDConnectProviderConfigurationProperty(
+                        secrets_arn="secretsArn",
+                        secrets_role="secretsRole"
+                    ),
+                    saml_configuration=qbusiness.CfnWebExperience.SamlProviderConfigurationProperty(
+                        authentication_url="authenticationUrl"
+                    )
+                ),
                 role_arn="roleArn",
                 sample_prompts_control_mode="samplePromptsControlMode",
                 subtitle="subtitle",
@@ -4877,6 +5461,7 @@ class CfnWebExperienceProps:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__58d2b12e60ffd88803f1746b34f5f9b5b77805b460b8074165db15b9de292293)
             check_type(argname="argument application_id", value=application_id, expected_type=type_hints["application_id"])
+            check_type(argname="argument identity_provider_configuration", value=identity_provider_configuration, expected_type=type_hints["identity_provider_configuration"])
             check_type(argname="argument role_arn", value=role_arn, expected_type=type_hints["role_arn"])
             check_type(argname="argument sample_prompts_control_mode", value=sample_prompts_control_mode, expected_type=type_hints["sample_prompts_control_mode"])
             check_type(argname="argument subtitle", value=subtitle, expected_type=type_hints["subtitle"])
@@ -4886,6 +5471,8 @@ class CfnWebExperienceProps:
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "application_id": application_id,
         }
+        if identity_provider_configuration is not None:
+            self._values["identity_provider_configuration"] = identity_provider_configuration
         if role_arn is not None:
             self._values["role_arn"] = role_arn
         if sample_prompts_control_mode is not None:
@@ -4909,6 +5496,17 @@ class CfnWebExperienceProps:
         assert result is not None, "Required property 'application_id' is missing"
         return typing.cast(builtins.str, result)
 
+    @builtins.property
+    def identity_provider_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebExperience.IdentityProviderConfigurationProperty]]:
+        '''Provides information about the identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-webexperience.html#cfn-qbusiness-webexperience-identityproviderconfiguration
+        '''
+        result = self._values.get("identity_provider_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebExperience.IdentityProviderConfigurationProperty]], result)
+
     @builtins.property
     def role_arn(self) -> typing.Optional[builtins.str]:
         '''The Amazon Resource Name (ARN) of the service role attached to your web experience.
@@ -5005,9 +5603,14 @@ def _typecheckingstub__e2c95edfee8896187b03149b15ce3604b3a59bfb3b08abd73c5672b7c
     *,
     display_name: builtins.str,
     attachments_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.AttachmentsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    auto_subscription_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.AutoSubscriptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    client_ids_for_oidc: typing.Optional[typing.Sequence[builtins.str]] = None,
     description: typing.Optional[builtins.str] = None,
     encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.EncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    iam_identity_provider_arn: typing.Optional[builtins.str] = None,
     identity_center_instance_arn: typing.Optional[builtins.str] = None,
+    identity_type: typing.Optional[builtins.str] = None,
+    personalization_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.PersonalizationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     q_apps_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.QAppsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     role_arn: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -5039,6 +5642,18 @@ def _typecheckingstub__57c12a095537be640da7b57fecbf3b07e85d4c25f19b33011eba52664
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__2b35a2b0fba0b74bf88677e8d09b2943fd8623f4b30bfa5113d4dd6400769370(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.AutoSubscriptionConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__e16dbf7c72949c3994e85619024d1169320455f5129fc42720ee3369ccfe5013(
+    value: typing.Optional[typing.List[builtins.str]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__cc81ccdbed36f390524b7f7b30696df462f8857fc5dbadb944cf0de3caf79186(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -5051,12 +5666,30 @@ def _typecheckingstub__6de90c5382cc0edcebad422dab80436e0194a3dee33a2061cee4fd766
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__2b960c5b2a263370b2ed8902e4658a930ce9de4e1d95a848786663e3d07945d0(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__0e51ab74f20033849c9b717566b2c1f59a066782ff0aafb4adb05ce552f5019a(
     value: typing.Optional[builtins.str],
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__44221a178b075fcdd809e631de43085ff6e3f91b9741304fd15e1a0dc442eae1(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__aa9c62867ef8fd21c925099f5633037e806bdc6c1fd8880e42968edf98de8ec2(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.PersonalizationConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__53d92c70961aea8a11ca2bb523fd9f10d2b780d9bda90114e0350e538ef5bd70(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.QAppsConfigurationProperty]],
 ) -> None:
@@ -5082,6 +5715,14 @@ def _typecheckingstub__e846388f34383d4a53c1ad7c73621d6c0612dd1cab1047d5850af6842
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__14d50e4994c3366ddeb7da76131ecc6e103dc3ed4c7bb2ec4ce982b547d2ab3b(
+    *,
+    auto_subscribe: builtins.str,
+    default_subscription_type: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__e3ddb5009b3c1bf36876f4e9d68c61c40a1e8a10287a7a292f89a801fcc9ca73(
     *,
     kms_key_id: typing.Optional[builtins.str] = None,
@@ -5089,6 +5730,13 @@ def _typecheckingstub__e3ddb5009b3c1bf36876f4e9d68c61c40a1e8a10287a7a292f89a801f
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__05c530a7a40f7de7f808af2f7755372bf178629a393e2508771fc91224c8446f(
+    *,
+    personalization_control_mode: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__6b7142160185e09a91c9d85e4a5dafc98a64398c744201a937b09ca7cc1de37e(
     *,
     q_apps_control_mode: builtins.str,
@@ -5100,9 +5748,14 @@ def _typecheckingstub__cd218bde3aa6ce3304b30e1d4799c501a50db8db5cef8926c28924af0
     *,
     display_name: builtins.str,
     attachments_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.AttachmentsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    auto_subscription_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.AutoSubscriptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    client_ids_for_oidc: typing.Optional[typing.Sequence[builtins.str]] = None,
     description: typing.Optional[builtins.str] = None,
     encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.EncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    iam_identity_provider_arn: typing.Optional[builtins.str] = None,
     identity_center_instance_arn: typing.Optional[builtins.str] = None,
+    identity_type: typing.Optional[builtins.str] = None,
+    personalization_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.PersonalizationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     q_apps_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.QAppsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     role_arn: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -5634,6 +6287,7 @@ def _typecheckingstub__357871375e43a0ed6fbb398668ece13df26dff3afca5c98268a56fffd
     id: builtins.str,
     *,
     application_id: builtins.str,
+    identity_provider_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebExperience.IdentityProviderConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     role_arn: typing.Optional[builtins.str] = None,
     sample_prompts_control_mode: typing.Optional[builtins.str] = None,
     subtitle: typing.Optional[builtins.str] = None,
@@ -5662,6 +6316,12 @@ def _typecheckingstub__994b24302ed92226579fa1ecdeef04d0cb66956019e467efcd9374ab2
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__037151dbe9f2f36da364495e39b2467a261694df042a6b81d84e5c2c34771ac4(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebExperience.IdentityProviderConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__9e93af1c8c50a8fbbba5f2f4c0d1013951bd550b401230f1ec2637c4955cea1b(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -5698,9 +6358,33 @@ def _typecheckingstub__4dc11f2c0364936c993f550de31ea07513a76ae6f389384341e03770b
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f792f47d6a0722e8b808ad22d67aec07629a1e7351865cae0ee890cff9ba5c1a(
+    *,
+    open_id_connect_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebExperience.OpenIDConnectProviderConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    saml_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebExperience.SamlProviderConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__83ea977b859d6c4c1e46fa972ce0e7d691c60d57b7c59adbe13d851526eb765e(
+    *,
+    secrets_arn: builtins.str,
+    secrets_role: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__7f19a9da1f3a1cf2eefff3580476a949609debe65a8fc477af11c893d5b4453b(
+    *,
+    authentication_url: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__58d2b12e60ffd88803f1746b34f5f9b5b77805b460b8074165db15b9de292293(
     *,
     application_id: builtins.str,
+    identity_provider_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebExperience.IdentityProviderConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     role_arn: typing.Optional[builtins.str] = None,
     sample_prompts_control_mode: typing.Optional[builtins.str] = None,
     subtitle: typing.Optional[builtins.str] = None,