aws-cdk-lib 2.157.0__py3-none-any.whl → 2.159.0__py3-none-any.whl

aws_cdk/aws_pcaconnectorscep/__init__.py

@@ -48,7 +48,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 
@@ -69,7 +84,11 @@ class CfnChallenge(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_pcaconnectorscep.CfnChallenge",
 ):
-    '''Represents a SCEP Challenge that is used for certificate enrollment.
+    '''For general-purpose connectors.
+
+    Creates a *challenge password* for the specified connector. The SCEP protocol uses a challenge password to authenticate a request before issuing a certificate from a certificate authority (CA). Your SCEP clients include the challenge password as part of their certificate request to Connector for SCEP. To retrieve the connector Amazon Resource Names (ARNs) for the connectors in your account, call `ListConnectors <https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_ListConnectors.html>`_ .
+
+    To create additional challenge passwords for the connector, call ``CreateChallenge`` again. We recommend frequently rotating your challenge passwords.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-challenge.html
     :cloudformationResource: AWS::PCAConnectorSCEP::Challenge
@@ -102,7 +121,7 @@ class CfnChallenge(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param connector_arn: 
+        :param connector_arn: The Amazon Resource Name (ARN) of the connector.
         :param tags: 
         '''
         if __debug__:
@@ -146,7 +165,8 @@ class CfnChallenge(
     @builtins.property
     @jsii.member(jsii_name="attrChallengeArn")
     def attr_challenge_arn(self) -> builtins.str:
-        '''
+        '''The Amazon Resource Name (ARN) of the challenge.
+
         :cloudformationAttribute: ChallengeArn
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrChallengeArn"))
@@ -165,6 +185,7 @@ class CfnChallenge(
     @builtins.property
     @jsii.member(jsii_name="connectorArn")
     def connector_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the connector.'''
         return typing.cast(builtins.str, jsii.get(self, "connectorArn"))
 
     @connector_arn.setter
@@ -204,7 +225,7 @@ class CfnChallengeProps:
     ) -> None:
         '''Properties for defining a ``CfnChallenge``.
 
-        :param connector_arn: 
+        :param connector_arn: The Amazon Resource Name (ARN) of the connector.
         :param tags: 
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-challenge.html
@@ -237,7 +258,8 @@ class CfnChallengeProps:
 
     @builtins.property
     def connector_arn(self) -> builtins.str:
-        '''
+        '''The Amazon Resource Name (ARN) of the connector.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-challenge.html#cfn-pcaconnectorscep-challenge-connectorarn
         '''
         result = self._values.get("connector_arn")
@@ -270,7 +292,9 @@ class CfnConnector(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_pcaconnectorscep.CfnConnector",
 ):
-    '''Represents a Connector that allows certificate issuance through Simple Certificate Enrollment Protocol (SCEP).
+    '''Connector for SCEP is a service that links AWS Private Certificate Authority to your SCEP-enabled devices.
+
+    The connector brokers the exchange of certificates from AWS Private CA to your SCEP-enabled devices and mobile device management systems. The connector is a complex type that contains the connector's configuration settings.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-connector.html
     :cloudformationResource: AWS::PCAConnectorSCEP::Connector
@@ -310,8 +334,8 @@ class CfnConnector(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param certificate_authority_arn: 
-        :param mobile_device_management: 
+        :param certificate_authority_arn: The Amazon Resource Name (ARN) of the certificate authority associated with the connector.
+        :param mobile_device_management: Contains settings relevant to the mobile device management system that you chose for the connector. If you didn't configure ``MobileDeviceManagement`` , then the connector is for general-purpose use and this object is empty.
         :param tags: 
         '''
         if __debug__:
@@ -359,7 +383,8 @@ class CfnConnector(
     @builtins.property
     @jsii.member(jsii_name="attrConnectorArn")
     def attr_connector_arn(self) -> builtins.str:
-        '''
+        '''The Amazon Resource Name (ARN) of the connector.
+
         :cloudformationAttribute: ConnectorArn
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrConnectorArn"))
@@ -367,7 +392,8 @@ class CfnConnector(
     @builtins.property
     @jsii.member(jsii_name="attrEndpoint")
     def attr_endpoint(self) -> builtins.str:
-        '''
+        '''The connector's HTTPS public SCEP URL.
+
         :cloudformationAttribute: Endpoint
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrEndpoint"))
@@ -383,7 +409,8 @@ class CfnConnector(
     @builtins.property
     @jsii.member(jsii_name="attrType")
     def attr_type(self) -> builtins.str:
-        '''
+        '''The connector type.
+
         :cloudformationAttribute: Type
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrType"))
@@ -402,6 +429,7 @@ class CfnConnector(
     @builtins.property
     @jsii.member(jsii_name="certificateAuthorityArn")
     def certificate_authority_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the certificate authority associated with the connector.'''
         return typing.cast(builtins.str, jsii.get(self, "certificateAuthorityArn"))
 
     @certificate_authority_arn.setter
@@ -416,6 +444,7 @@ class CfnConnector(
     def mobile_device_management(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnConnector.MobileDeviceManagementProperty"]]:
+        '''Contains settings relevant to the mobile device management system that you chose for the connector.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnConnector.MobileDeviceManagementProperty"]], jsii.get(self, "mobileDeviceManagement"))
 
     @mobile_device_management.setter
@@ -458,9 +487,14 @@ class CfnConnector(
             azure_application_id: builtins.str,
             domain: builtins.str,
         ) -> None:
-            '''
-            :param azure_application_id: 
-            :param domain: 
+            '''Contains configuration details for use with Microsoft Intune.
+
+            For information about using Connector for SCEP for Microsoft Intune, see `Using Connector for SCEP for Microsoft Intune <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlconnector-for-scep-intune.html>`_ .
+
+            When you use Connector for SCEP for Microsoft Intune, certain functionalities are enabled by accessing Microsoft Intune through the Microsoft API. Your use of the Connector for SCEP and accompanying AWS services doesn't remove your need to have a valid license for your use of the Microsoft Intune service. You should also review the `Microsoft Intune® App Protection Policies <https://docs.aws.amazon.com/https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy>`_ .
+
+            :param azure_application_id: The directory (tenant) ID from your Microsoft Entra ID app registration.
+            :param domain: The primary domain from your Microsoft Entra ID app registration.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-intuneconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -487,7 +521,8 @@ class CfnConnector(
 
         @builtins.property
         def azure_application_id(self) -> builtins.str:
-            '''
+            '''The directory (tenant) ID from your Microsoft Entra ID app registration.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-intuneconfiguration.html#cfn-pcaconnectorscep-connector-intuneconfiguration-azureapplicationid
             '''
             result = self._values.get("azure_application_id")
@@ -496,7 +531,8 @@ class CfnConnector(
 
         @builtins.property
         def domain(self) -> builtins.str:
-            '''
+            '''The primary domain from your Microsoft Entra ID app registration.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-intuneconfiguration.html#cfn-pcaconnectorscep-connector-intuneconfiguration-domain
             '''
             result = self._values.get("domain")
@@ -525,8 +561,13 @@ class CfnConnector(
             *,
             intune: typing.Union[_IResolvable_da3f097b, typing.Union["CfnConnector.IntuneConfigurationProperty", typing.Dict[builtins.str, typing.Any]]],
         ) -> None:
-            '''
-            :param intune: 
+            '''If you don't supply a value, by default Connector for SCEP creates a connector for general-purpose use.
+
+            A general-purpose connector is designed to work with clients or endpoints that support the SCEP protocol, except Connector for SCEP for Microsoft Intune. For information about considerations and limitations with using Connector for SCEP, see `Considerations and Limitations <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlc4scep-considerations-limitations.html>`_ .
+
+            If you provide an ``IntuneConfiguration`` , Connector for SCEP creates a connector for use with Microsoft Intune, and you manage the challenge passwords using Microsoft Intune. For more information, see `Using Connector for SCEP for Microsoft Intune <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlconnector-for-scep-intune.html>`_ .
+
+            :param intune: Configuration settings for use with Microsoft Intune. For information about using Connector for SCEP for Microsoft Intune, see `Using Connector for SCEP for Microsoft Intune <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlconnector-for-scep-intune.html>`_ .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-mobiledevicemanagement.html
             :exampleMetadata: fixture=_generated
@@ -555,7 +596,10 @@ class CfnConnector(
         def intune(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, "CfnConnector.IntuneConfigurationProperty"]:
-            '''
+            '''Configuration settings for use with Microsoft Intune.
+
+            For information about using Connector for SCEP for Microsoft Intune, see `Using Connector for SCEP for Microsoft Intune <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlconnector-for-scep-intune.html>`_ .
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-mobiledevicemanagement.html#cfn-pcaconnectorscep-connector-mobiledevicemanagement-intune
             '''
             result = self._values.get("intune")
@@ -590,10 +634,13 @@ class CfnConnector(
             issuer: typing.Optional[builtins.str] = None,
             subject: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''
-            :param audience: 
-            :param issuer: 
-            :param subject: 
+            '''Contains OpenID Connect (OIDC) parameters for use with Microsoft Intune.
+
+            For more information about using Connector for SCEP for Microsoft Intune, see `Using Connector for SCEP for Microsoft Intune <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlconnector-for-scep-intune.html>`_ .
+
+            :param audience: The audience value to copy into your Microsoft Entra app registration's OIDC.
+            :param issuer: The issuer value to copy into your Microsoft Entra app registration's OIDC.
+            :param subject: The subject value to copy into your Microsoft Entra app registration's OIDC.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-openidconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -625,7 +672,8 @@ class CfnConnector(
 
         @builtins.property
         def audience(self) -> typing.Optional[builtins.str]:
-            '''
+            '''The audience value to copy into your Microsoft Entra app registration's OIDC.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-openidconfiguration.html#cfn-pcaconnectorscep-connector-openidconfiguration-audience
             '''
             result = self._values.get("audience")
@@ -633,7 +681,8 @@ class CfnConnector(
 
         @builtins.property
         def issuer(self) -> typing.Optional[builtins.str]:
-            '''
+            '''The issuer value to copy into your Microsoft Entra app registration's OIDC.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-openidconfiguration.html#cfn-pcaconnectorscep-connector-openidconfiguration-issuer
             '''
             result = self._values.get("issuer")
@@ -641,7 +690,8 @@ class CfnConnector(
 
         @builtins.property
         def subject(self) -> typing.Optional[builtins.str]:
-            '''
+            '''The subject value to copy into your Microsoft Entra app registration's OIDC.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-openidconfiguration.html#cfn-pcaconnectorscep-connector-openidconfiguration-subject
             '''
             result = self._values.get("subject")
@@ -678,8 +728,8 @@ class CfnConnectorProps:
     ) -> None:
         '''Properties for defining a ``CfnConnector``.
 
-        :param certificate_authority_arn: 
-        :param mobile_device_management: 
+        :param certificate_authority_arn: The Amazon Resource Name (ARN) of the certificate authority associated with the connector.
+        :param mobile_device_management: Contains settings relevant to the mobile device management system that you chose for the connector. If you didn't configure ``MobileDeviceManagement`` , then the connector is for general-purpose use and this object is empty.
         :param tags: 
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-connector.html
@@ -721,7 +771,8 @@ class CfnConnectorProps:
 
     @builtins.property
     def certificate_authority_arn(self) -> builtins.str:
-        '''
+        '''The Amazon Resource Name (ARN) of the certificate authority associated with the connector.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-connector.html#cfn-pcaconnectorscep-connector-certificateauthorityarn
         '''
         result = self._values.get("certificate_authority_arn")
@@ -732,7 +783,10 @@ class CfnConnectorProps:
     def mobile_device_management(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnConnector.MobileDeviceManagementProperty]]:
-        '''
+        '''Contains settings relevant to the mobile device management system that you chose for the connector.
+
+        If you didn't configure ``MobileDeviceManagement`` , then the connector is for general-purpose use and this object is empty.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-connector.html#cfn-pcaconnectorscep-connector-mobiledevicemanagement
         '''
         result = self._values.get("mobile_device_management")

aws_cdk/aws_personalize/__init__.py

@@ -38,7 +38,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 

aws_cdk/aws_pinpoint/__init__.py

@@ -38,7 +38,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 

aws_cdk/aws_pinpointemail/__init__.py

@@ -38,7 +38,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 

aws_cdk/aws_pipes/__init__.py

@@ -38,7 +38,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 
@@ -98,6 +113,7 @@ class CfnPipe(
                 ),
                 input_template="inputTemplate"
             ),
+            kms_key_identifier="kmsKeyIdentifier",
             log_configuration=pipes.CfnPipe.PipeLogConfigurationProperty(
                 cloudwatch_logs_log_destination=pipes.CfnPipe.CloudwatchLogsLogDestinationProperty(
                     log_group_arn="logGroupArn"
@@ -411,6 +427,7 @@ class CfnPipe(
         desired_state: typing.Optional[builtins.str] = None,
         enrichment: typing.Optional[builtins.str] = None,
         enrichment_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPipe.PipeEnrichmentParametersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        kms_key_identifier: typing.Optional[builtins.str] = None,
         log_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPipe.PipeLogConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
         source_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPipe.PipeSourceParametersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -427,6 +444,7 @@ class CfnPipe(
         :param desired_state: The state the pipe should be in.
         :param enrichment: The ARN of the enrichment resource.
         :param enrichment_parameters: The parameters required to set up enrichment on your pipe.
+        :param kms_key_identifier: The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt pipe data. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN. To update a pipe that is using the default AWS owned key to use a customer managed key instead, or update a pipe that is using a customer managed key to use a different customer managed key, specify a customer managed key identifier. To update a pipe that is using a customer managed key to use the default AWS owned key , specify an empty string. For more information, see `Managing keys <https://docs.aws.amazon.com/kms/latest/developerguide/getting-started.html>`_ in the *AWS Key Management Service Developer Guide* .
         :param log_configuration: The logging configuration settings for the pipe.
         :param name: The name of the pipe.
         :param source_parameters: The parameters required to set up a source for your pipe.
@@ -445,6 +463,7 @@ class CfnPipe(
             desired_state=desired_state,
             enrichment=enrichment,
             enrichment_parameters=enrichment_parameters,
+            kms_key_identifier=kms_key_identifier,
             log_configuration=log_configuration,
             name=name,
             source_parameters=source_parameters,
@@ -636,6 +655,19 @@ class CfnPipe(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "enrichmentParameters", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="kmsKeyIdentifier")
+    def kms_key_identifier(self) -> typing.Optional[builtins.str]:
+        '''The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt pipe data.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsKeyIdentifier"))
+
+    @kms_key_identifier.setter
+    def kms_key_identifier(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1052edd5ce80236ce4a971335ad896a6630839b27758cef9a2858368e2da759b)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "kmsKeyIdentifier", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="logConfiguration")
     def log_configuration(
@@ -7012,6 +7044,7 @@ class CfnPipe(
         "desired_state": "desiredState",
         "enrichment": "enrichment",
         "enrichment_parameters": "enrichmentParameters",
+        "kms_key_identifier": "kmsKeyIdentifier",
         "log_configuration": "logConfiguration",
         "name": "name",
         "source_parameters": "sourceParameters",
@@ -7030,6 +7063,7 @@ class CfnPipeProps:
         desired_state: typing.Optional[builtins.str] = None,
         enrichment: typing.Optional[builtins.str] = None,
         enrichment_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeEnrichmentParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        kms_key_identifier: typing.Optional[builtins.str] = None,
         log_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeLogConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
         source_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeSourceParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -7045,6 +7079,7 @@ class CfnPipeProps:
         :param desired_state: The state the pipe should be in.
         :param enrichment: The ARN of the enrichment resource.
         :param enrichment_parameters: The parameters required to set up enrichment on your pipe.
+        :param kms_key_identifier: The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt pipe data. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN. To update a pipe that is using the default AWS owned key to use a customer managed key instead, or update a pipe that is using a customer managed key to use a different customer managed key, specify a customer managed key identifier. To update a pipe that is using a customer managed key to use the default AWS owned key , specify an empty string. For more information, see `Managing keys <https://docs.aws.amazon.com/kms/latest/developerguide/getting-started.html>`_ in the *AWS Key Management Service Developer Guide* .
         :param log_configuration: The logging configuration settings for the pipe.
         :param name: The name of the pipe.
         :param source_parameters: The parameters required to set up a source for your pipe.
@@ -7081,6 +7116,7 @@ class CfnPipeProps:
                     ),
                     input_template="inputTemplate"
                 ),
+                kms_key_identifier="kmsKeyIdentifier",
                 log_configuration=pipes.CfnPipe.PipeLogConfigurationProperty(
                     cloudwatch_logs_log_destination=pipes.CfnPipe.CloudwatchLogsLogDestinationProperty(
                         log_group_arn="logGroupArn"
@@ -7390,6 +7426,7 @@ class CfnPipeProps:
             check_type(argname="argument desired_state", value=desired_state, expected_type=type_hints["desired_state"])
             check_type(argname="argument enrichment", value=enrichment, expected_type=type_hints["enrichment"])
             check_type(argname="argument enrichment_parameters", value=enrichment_parameters, expected_type=type_hints["enrichment_parameters"])
+            check_type(argname="argument kms_key_identifier", value=kms_key_identifier, expected_type=type_hints["kms_key_identifier"])
             check_type(argname="argument log_configuration", value=log_configuration, expected_type=type_hints["log_configuration"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
             check_type(argname="argument source_parameters", value=source_parameters, expected_type=type_hints["source_parameters"])
@@ -7408,6 +7445,8 @@ class CfnPipeProps:
             self._values["enrichment"] = enrichment
         if enrichment_parameters is not None:
             self._values["enrichment_parameters"] = enrichment_parameters
+        if kms_key_identifier is not None:
+            self._values["kms_key_identifier"] = kms_key_identifier
         if log_configuration is not None:
             self._values["log_configuration"] = log_configuration
         if name is not None:
@@ -7487,6 +7526,23 @@ class CfnPipeProps:
         result = self._values.get("enrichment_parameters")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnPipe.PipeEnrichmentParametersProperty]], result)
 
+    @builtins.property
+    def kms_key_identifier(self) -> typing.Optional[builtins.str]:
+        '''The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt pipe data.
+
+        The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.
+
+        To update a pipe that is using the default AWS owned key to use a customer managed key instead, or update a pipe that is using a customer managed key to use a different customer managed key, specify a customer managed key identifier.
+
+        To update a pipe that is using a customer managed key to use the default AWS owned key , specify an empty string.
+
+        For more information, see `Managing keys <https://docs.aws.amazon.com/kms/latest/developerguide/getting-started.html>`_ in the *AWS Key Management Service Developer Guide* .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pipes-pipe.html#cfn-pipes-pipe-kmskeyidentifier
+        '''
+        result = self._values.get("kms_key_identifier")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def log_configuration(
         self,
@@ -7570,6 +7626,7 @@ def _typecheckingstub__2590746a77e697feb25a71ec367eb957a7632f9fe5a46ae7e30476068
     desired_state: typing.Optional[builtins.str] = None,
     enrichment: typing.Optional[builtins.str] = None,
     enrichment_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeEnrichmentParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    kms_key_identifier: typing.Optional[builtins.str] = None,
     log_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeLogConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
     source_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeSourceParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -7633,6 +7690,12 @@ def _typecheckingstub__75aa67d8831c93b78f85f7319ad758289b207fec83baf9b92034cab44
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__1052edd5ce80236ce4a971335ad896a6630839b27758cef9a2858368e2da759b(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__3975e792335934f36dcb66bc10ba0ab93afe079dae88c2011a2bacc35a8fe756(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnPipe.PipeLogConfigurationProperty]],
 ) -> None:
@@ -8218,6 +8281,7 @@ def _typecheckingstub__f6a6720db1bd2e7acc178f6bd481fd8e3e740405a24c01b669c4c4595
     desired_state: typing.Optional[builtins.str] = None,
     enrichment: typing.Optional[builtins.str] = None,
     enrichment_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeEnrichmentParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    kms_key_identifier: typing.Optional[builtins.str] = None,
     log_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeLogConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
     source_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeSourceParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,

aws_cdk/aws_proton/__init__.py

@@ -48,7 +48,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *