aws-cdk-lib 2.157.0__py3-none-any.whl → 2.159.0__py3-none-any.whl

aws_cdk/aws_securitylake/__init__.py

@@ -48,7 +48,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 
@@ -1110,7 +1125,7 @@ class CfnSubscriber(
         :param id: Construct identifier for this resource (unique in its scope).
         :param access_types: You can choose to notify subscribers of new objects with an Amazon Simple Queue Service (Amazon SQS) queue or through messaging to an HTTPS endpoint provided by the subscriber. Subscribers can consume data by directly querying AWS Lake Formation tables in your Amazon S3 bucket through services like Amazon Athena. This subscription type is defined as ``LAKEFORMATION`` .
         :param data_lake_arn: The Amazon Resource Name (ARN) used to create the data lake.
-        :param sources: Amazon Security Lake supports log and event collection for natively supported AWS-services . For more information, see the `Amazon Security Lake User Guide <https://docs.aws.amazon.com//security-lake/latest/userguide/source-management.html>`_ .
+        :param sources: Amazon Security Lake supports log and event collection for natively supported AWS services . For more information, see the `Amazon Security Lake User Guide <https://docs.aws.amazon.com//security-lake/latest/userguide/source-management.html>`_ .
         :param subscriber_identity: The AWS identity used to access your data.
         :param subscriber_name: The name of your Amazon Security Lake subscriber account.
         :param subscriber_description: The subscriber descriptions for a subscriber account. The description for a subscriber includes ``subscriberName`` , ``accountID`` , ``externalID`` , and ``subscriberId`` .
@@ -1249,7 +1264,7 @@ class CfnSubscriber(
     def sources(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.SourceProperty"]]]:
-        '''Amazon Security Lake supports log and event collection for natively supported AWS-services .'''
+        '''Amazon Security Lake supports log and event collection for natively supported AWS services .'''
         return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnSubscriber.SourceProperty"]]], jsii.get(self, "sources"))
 
     @sources.setter
@@ -1644,7 +1659,21 @@ class CfnSubscriberNotification(
         # The values are placeholders you should change.
         from aws_cdk import aws_securitylake as securitylake
         
+        # sqs_notification_configuration: Any
+        
         cfn_subscriber_notification = securitylake.CfnSubscriberNotification(self, "MyCfnSubscriberNotification",
+            notification_configuration=securitylake.CfnSubscriberNotification.NotificationConfigurationProperty(
+                https_notification_configuration=securitylake.CfnSubscriberNotification.HttpsNotificationConfigurationProperty(
+                    endpoint="endpoint",
+                    target_role_arn="targetRoleArn",
+        
+                    # the properties below are optional
+                    authorization_api_key_name="authorizationApiKeyName",
+                    authorization_api_key_value="authorizationApiKeyValue",
+                    http_method="httpMethod"
+                ),
+                sqs_notification_configuration=sqs_notification_configuration
+            ),
             subscriber_arn="subscriberArn"
         )
     '''
@@ -1654,18 +1683,23 @@ class CfnSubscriberNotification(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
+        notification_configuration: typing.Union[_IResolvable_da3f097b, typing.Union["CfnSubscriberNotification.NotificationConfigurationProperty", typing.Dict[builtins.str, typing.Any]]],
         subscriber_arn: builtins.str,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
+        :param notification_configuration: Specify the configurations you want to use for subscriber notification. The subscriber is notified when new data is written to the data lake for sources that the subscriber consumes in Security Lake .
         :param subscriber_arn: The Amazon Resource Name (ARN) of the Security Lake subscriber.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__12d097a0b2763ed8532079d34366f79ee45e7139fbdd98f5e181dd9c1fc456ee)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-        props = CfnSubscriberNotificationProps(subscriber_arn=subscriber_arn)
+        props = CfnSubscriberNotificationProps(
+            notification_configuration=notification_configuration,
+            subscriber_arn=subscriber_arn,
+        )
 
         jsii.create(self.__class__, self, [scope, id, props])
 
@@ -1713,6 +1747,24 @@ class CfnSubscriberNotification(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="notificationConfiguration")
+    def notification_configuration(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnSubscriberNotification.NotificationConfigurationProperty"]:
+        '''Specify the configurations you want to use for subscriber notification.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnSubscriberNotification.NotificationConfigurationProperty"], jsii.get(self, "notificationConfiguration"))
+
+    @notification_configuration.setter
+    def notification_configuration(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnSubscriberNotification.NotificationConfigurationProperty"],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f416322e55f2b44fbfc4db060d6295a8133d187a93c3b3323f90fb62986ced47)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "notificationConfiguration", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="subscriberArn")
     def subscriber_arn(self) -> builtins.str:
@@ -1726,16 +1778,242 @@ class CfnSubscriberNotification(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "subscriberArn", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriberNotification.HttpsNotificationConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "endpoint": "endpoint",
+            "target_role_arn": "targetRoleArn",
+            "authorization_api_key_name": "authorizationApiKeyName",
+            "authorization_api_key_value": "authorizationApiKeyValue",
+            "http_method": "httpMethod",
+        },
+    )
+    class HttpsNotificationConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            endpoint: builtins.str,
+            target_role_arn: builtins.str,
+            authorization_api_key_name: typing.Optional[builtins.str] = None,
+            authorization_api_key_value: typing.Optional[builtins.str] = None,
+            http_method: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Specify the configurations you want to use for HTTPS subscriber notification.
+
+            :param endpoint: The subscription endpoint in Security Lake . If you prefer notification with an HTTPS endpoint, populate this field.
+            :param target_role_arn: The Amazon Resource Name (ARN) of the EventBridge API destinations IAM role that you created. For more information about ARNs and how to use them in policies, see `Managing data access <https://docs.aws.amazon.com///security-lake/latest/userguide/subscriber-data-access.html>`_ and `AWS Managed Policies <https://docs.aws.amazon.com//security-lake/latest/userguide/security-iam-awsmanpol.html>`_ in the *Amazon Security Lake User Guide* .
+            :param authorization_api_key_name: The key name for the notification subscription.
+            :param authorization_api_key_value: The key value for the notification subscription.
+            :param http_method: The HTTPS method used for the notification subscription.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscribernotification-httpsnotificationconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_securitylake as securitylake
+                
+                https_notification_configuration_property = securitylake.CfnSubscriberNotification.HttpsNotificationConfigurationProperty(
+                    endpoint="endpoint",
+                    target_role_arn="targetRoleArn",
+                
+                    # the properties below are optional
+                    authorization_api_key_name="authorizationApiKeyName",
+                    authorization_api_key_value="authorizationApiKeyValue",
+                    http_method="httpMethod"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__5f660887f03241b04929c37749f449300fda16140134e83fad8aee07494b0fcc)
+                check_type(argname="argument endpoint", value=endpoint, expected_type=type_hints["endpoint"])
+                check_type(argname="argument target_role_arn", value=target_role_arn, expected_type=type_hints["target_role_arn"])
+                check_type(argname="argument authorization_api_key_name", value=authorization_api_key_name, expected_type=type_hints["authorization_api_key_name"])
+                check_type(argname="argument authorization_api_key_value", value=authorization_api_key_value, expected_type=type_hints["authorization_api_key_value"])
+                check_type(argname="argument http_method", value=http_method, expected_type=type_hints["http_method"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "endpoint": endpoint,
+                "target_role_arn": target_role_arn,
+            }
+            if authorization_api_key_name is not None:
+                self._values["authorization_api_key_name"] = authorization_api_key_name
+            if authorization_api_key_value is not None:
+                self._values["authorization_api_key_value"] = authorization_api_key_value
+            if http_method is not None:
+                self._values["http_method"] = http_method
+
+        @builtins.property
+        def endpoint(self) -> builtins.str:
+            '''The subscription endpoint in Security Lake .
+
+            If you prefer notification with an HTTPS endpoint, populate this field.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscribernotification-httpsnotificationconfiguration.html#cfn-securitylake-subscribernotification-httpsnotificationconfiguration-endpoint
+            '''
+            result = self._values.get("endpoint")
+            assert result is not None, "Required property 'endpoint' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def target_role_arn(self) -> builtins.str:
+            '''The Amazon Resource Name (ARN) of the EventBridge API destinations IAM role that you created.
+
+            For more information about ARNs and how to use them in policies, see `Managing data access <https://docs.aws.amazon.com///security-lake/latest/userguide/subscriber-data-access.html>`_ and `AWS Managed Policies <https://docs.aws.amazon.com//security-lake/latest/userguide/security-iam-awsmanpol.html>`_ in the *Amazon Security Lake User Guide* .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscribernotification-httpsnotificationconfiguration.html#cfn-securitylake-subscribernotification-httpsnotificationconfiguration-targetrolearn
+            '''
+            result = self._values.get("target_role_arn")
+            assert result is not None, "Required property 'target_role_arn' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def authorization_api_key_name(self) -> typing.Optional[builtins.str]:
+            '''The key name for the notification subscription.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscribernotification-httpsnotificationconfiguration.html#cfn-securitylake-subscribernotification-httpsnotificationconfiguration-authorizationapikeyname
+            '''
+            result = self._values.get("authorization_api_key_name")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def authorization_api_key_value(self) -> typing.Optional[builtins.str]:
+            '''The key value for the notification subscription.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscribernotification-httpsnotificationconfiguration.html#cfn-securitylake-subscribernotification-httpsnotificationconfiguration-authorizationapikeyvalue
+            '''
+            result = self._values.get("authorization_api_key_value")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def http_method(self) -> typing.Optional[builtins.str]:
+            '''The HTTPS method used for the notification subscription.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscribernotification-httpsnotificationconfiguration.html#cfn-securitylake-subscribernotification-httpsnotificationconfiguration-httpmethod
+            '''
+            result = self._values.get("http_method")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "HttpsNotificationConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriberNotification.NotificationConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "https_notification_configuration": "httpsNotificationConfiguration",
+            "sqs_notification_configuration": "sqsNotificationConfiguration",
+        },
+    )
+    class NotificationConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            https_notification_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSubscriberNotification.HttpsNotificationConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            sqs_notification_configuration: typing.Any = None,
+        ) -> None:
+            '''Specify the configurations you want to use for subscriber notification.
+
+            The subscriber is notified when new data is written to the data lake for sources that the subscriber consumes in Security Lake .
+
+            :param https_notification_configuration: The configurations used for HTTPS subscriber notification.
+            :param sqs_notification_configuration: The configurations for SQS subscriber notification. The members of this structure are context-dependent.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscribernotification-notificationconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_securitylake as securitylake
+                
+                # sqs_notification_configuration: Any
+                
+                notification_configuration_property = securitylake.CfnSubscriberNotification.NotificationConfigurationProperty(
+                    https_notification_configuration=securitylake.CfnSubscriberNotification.HttpsNotificationConfigurationProperty(
+                        endpoint="endpoint",
+                        target_role_arn="targetRoleArn",
+                
+                        # the properties below are optional
+                        authorization_api_key_name="authorizationApiKeyName",
+                        authorization_api_key_value="authorizationApiKeyValue",
+                        http_method="httpMethod"
+                    ),
+                    sqs_notification_configuration=sqs_notification_configuration
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__eda053f3e120e20df5120b1a8032bb559c0c4d069b5d67b0576d442df7f66b73)
+                check_type(argname="argument https_notification_configuration", value=https_notification_configuration, expected_type=type_hints["https_notification_configuration"])
+                check_type(argname="argument sqs_notification_configuration", value=sqs_notification_configuration, expected_type=type_hints["sqs_notification_configuration"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if https_notification_configuration is not None:
+                self._values["https_notification_configuration"] = https_notification_configuration
+            if sqs_notification_configuration is not None:
+                self._values["sqs_notification_configuration"] = sqs_notification_configuration
+
+        @builtins.property
+        def https_notification_configuration(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSubscriberNotification.HttpsNotificationConfigurationProperty"]]:
+            '''The configurations used for HTTPS subscriber notification.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscribernotification-notificationconfiguration.html#cfn-securitylake-subscribernotification-notificationconfiguration-httpsnotificationconfiguration
+            '''
+            result = self._values.get("https_notification_configuration")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSubscriberNotification.HttpsNotificationConfigurationProperty"]], result)
+
+        @builtins.property
+        def sqs_notification_configuration(self) -> typing.Any:
+            '''The configurations for SQS subscriber notification.
+
+            The members of this structure are context-dependent.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securitylake-subscribernotification-notificationconfiguration.html#cfn-securitylake-subscribernotification-notificationconfiguration-sqsnotificationconfiguration
+            '''
+            result = self._values.get("sqs_notification_configuration")
+            return typing.cast(typing.Any, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "NotificationConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_securitylake.CfnSubscriberNotificationProps",
     jsii_struct_bases=[],
-    name_mapping={"subscriber_arn": "subscriberArn"},
+    name_mapping={
+        "notification_configuration": "notificationConfiguration",
+        "subscriber_arn": "subscriberArn",
+    },
 )
 class CfnSubscriberNotificationProps:
-    def __init__(self, *, subscriber_arn: builtins.str) -> None:
+    def __init__(
+        self,
+        *,
+        notification_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriberNotification.NotificationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+        subscriber_arn: builtins.str,
+    ) -> None:
         '''Properties for defining a ``CfnSubscriberNotification``.
 
+        :param notification_configuration: Specify the configurations you want to use for subscriber notification. The subscriber is notified when new data is written to the data lake for sources that the subscriber consumes in Security Lake .
         :param subscriber_arn: The Amazon Resource Name (ARN) of the Security Lake subscriber.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscribernotification.html
@@ -1747,17 +2025,47 @@ class CfnSubscriberNotificationProps:
             # The values are placeholders you should change.
             from aws_cdk import aws_securitylake as securitylake
             
+            # sqs_notification_configuration: Any
+            
             cfn_subscriber_notification_props = securitylake.CfnSubscriberNotificationProps(
+                notification_configuration=securitylake.CfnSubscriberNotification.NotificationConfigurationProperty(
+                    https_notification_configuration=securitylake.CfnSubscriberNotification.HttpsNotificationConfigurationProperty(
+                        endpoint="endpoint",
+                        target_role_arn="targetRoleArn",
+            
+                        # the properties below are optional
+                        authorization_api_key_name="authorizationApiKeyName",
+                        authorization_api_key_value="authorizationApiKeyValue",
+                        http_method="httpMethod"
+                    ),
+                    sqs_notification_configuration=sqs_notification_configuration
+                ),
                 subscriber_arn="subscriberArn"
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__605e5ae993fc9297bdd697c853feff49b4a8fdf8c1ff96de11276f50e21c6a34)
+            check_type(argname="argument notification_configuration", value=notification_configuration, expected_type=type_hints["notification_configuration"])
             check_type(argname="argument subscriber_arn", value=subscriber_arn, expected_type=type_hints["subscriber_arn"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
+            "notification_configuration": notification_configuration,
             "subscriber_arn": subscriber_arn,
         }
 
+    @builtins.property
+    def notification_configuration(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnSubscriberNotification.NotificationConfigurationProperty]:
+        '''Specify the configurations you want to use for subscriber notification.
+
+        The subscriber is notified when new data is written to the data lake for sources that the subscriber consumes in Security Lake .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscribernotification.html#cfn-securitylake-subscribernotification-notificationconfiguration
+        '''
+        result = self._values.get("notification_configuration")
+        assert result is not None, "Required property 'notification_configuration' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnSubscriberNotification.NotificationConfigurationProperty], result)
+
     @builtins.property
     def subscriber_arn(self) -> builtins.str:
         '''The Amazon Resource Name (ARN) of the Security Lake subscriber.
@@ -1809,7 +2117,7 @@ class CfnSubscriberProps:
 
         :param access_types: You can choose to notify subscribers of new objects with an Amazon Simple Queue Service (Amazon SQS) queue or through messaging to an HTTPS endpoint provided by the subscriber. Subscribers can consume data by directly querying AWS Lake Formation tables in your Amazon S3 bucket through services like Amazon Athena. This subscription type is defined as ``LAKEFORMATION`` .
         :param data_lake_arn: The Amazon Resource Name (ARN) used to create the data lake.
-        :param sources: Amazon Security Lake supports log and event collection for natively supported AWS-services . For more information, see the `Amazon Security Lake User Guide <https://docs.aws.amazon.com//security-lake/latest/userguide/source-management.html>`_ .
+        :param sources: Amazon Security Lake supports log and event collection for natively supported AWS services . For more information, see the `Amazon Security Lake User Guide <https://docs.aws.amazon.com//security-lake/latest/userguide/source-management.html>`_ .
         :param subscriber_identity: The AWS identity used to access your data.
         :param subscriber_name: The name of your Amazon Security Lake subscriber account.
         :param subscriber_description: The subscriber descriptions for a subscriber account. The description for a subscriber includes ``subscriberName`` , ``accountID`` , ``externalID`` , and ``subscriberId`` .
@@ -1898,7 +2206,7 @@ class CfnSubscriberProps:
     def sources(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnSubscriber.SourceProperty]]]:
-        '''Amazon Security Lake supports log and event collection for natively supported AWS-services .
+        '''Amazon Security Lake supports log and event collection for natively supported AWS services .
 
         For more information, see the `Amazon Security Lake User Guide <https://docs.aws.amazon.com//security-lake/latest/userguide/source-management.html>`_ .
 
@@ -2244,6 +2552,7 @@ def _typecheckingstub__12d097a0b2763ed8532079d34366f79ee45e7139fbdd98f5e181dd9c1
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
+    notification_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriberNotification.NotificationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
     subscriber_arn: builtins.str,
 ) -> None:
     """Type checking stubs"""
@@ -2261,14 +2570,40 @@ def _typecheckingstub__ff98af95551675e894613a4790fc104d8ef8b4d9369543d68680140fb
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f416322e55f2b44fbfc4db060d6295a8133d187a93c3b3323f90fb62986ced47(
+    value: typing.Union[_IResolvable_da3f097b, CfnSubscriberNotification.NotificationConfigurationProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__9f1dfade8090ae9276abcfb558543bcdaf6174fe5b4b775b6634581d0a6ccdc8(
     value: builtins.str,
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__5f660887f03241b04929c37749f449300fda16140134e83fad8aee07494b0fcc(
+    *,
+    endpoint: builtins.str,
+    target_role_arn: builtins.str,
+    authorization_api_key_name: typing.Optional[builtins.str] = None,
+    authorization_api_key_value: typing.Optional[builtins.str] = None,
+    http_method: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__eda053f3e120e20df5120b1a8032bb559c0c4d069b5d67b0576d442df7f66b73(
+    *,
+    https_notification_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriberNotification.HttpsNotificationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    sqs_notification_configuration: typing.Any = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__605e5ae993fc9297bdd697c853feff49b4a8fdf8c1ff96de11276f50e21c6a34(
     *,
+    notification_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSubscriberNotification.NotificationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
     subscriber_arn: builtins.str,
 ) -> None:
     """Type checking stubs"""

aws_cdk/aws_servicecatalog/__init__.py

@@ -585,7 +585,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 

aws_cdk/aws_servicecatalogappregistry/__init__.py

@@ -43,7 +43,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 

aws_cdk/aws_servicediscovery/__init__.py

@@ -174,7 +174,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 
@@ -2333,11 +2348,7 @@ class CfnService(
         ) -> None:
             '''A complex type that contains information about the Amazon Route 53 DNS records that you want AWS Cloud Map to create when you register an instance.
 
-            .. epigraph::
-
-               The record types of a service can only be changed by deleting the service and recreating it with a new ``Dnsconfig`` .
-
-            :param dns_records: An array that contains one ``DnsRecord`` object for each Route 53 DNS record that you want AWS Cloud Map to create when you register an instance.
+            :param dns_records: An array that contains one ``DnsRecord`` object for each Route 53 DNS record that you want AWS Cloud Map to create when you register an instance. .. epigraph:: The record type of a service can't be updated directly and can only be changed by deleting the service and recreating it with a new ``DnsConfig`` .
             :param namespace_id: The ID of the namespace to use for DNS configuration. .. epigraph:: You must specify a value for ``NamespaceId`` either for ``DnsConfig`` or for the `service properties <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-service.html>`_ . Don't specify a value in both places.
             :param routing_policy: The routing policy that you want to apply to all Route 53 DNS records that AWS Cloud Map creates when you register an instance and specify this service. .. epigraph:: If you want to use this service to register instances that create alias records, specify ``WEIGHTED`` for the routing policy. You can specify the following values: - **MULTIVALUE** - If you define a health check for the service and the health check is healthy, Route 53 returns the applicable value for up to eight instances. For example, suppose that the service includes configurations for one ``A`` record and a health check. You use the service to register 10 instances. Route 53 responds to DNS queries with IP addresses for up to eight healthy instances. If fewer than eight instances are healthy, Route 53 responds to every DNS query with the IP addresses for all of the healthy instances. If you don't define a health check for the service, Route 53 assumes that all instances are healthy and returns the values for up to eight instances. For more information about the multivalue routing policy, see `Multivalue Answer Routing <https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html#routing-policy-multivalue>`_ in the *Route 53 Developer Guide* . - **WEIGHTED** - Route 53 returns the applicable value from one randomly selected instance from among the instances that you registered using the same service. Currently, all records have the same weight, so you can't route more or less traffic to any instances. For example, suppose that the service includes configurations for one ``A`` record and a health check. You use the service to register 10 instances. Route 53 responds to DNS queries with the IP address for one randomly selected instance from among the healthy instances. If no instances are healthy, Route 53 responds to DNS queries as if all of the instances were healthy. If you don't define a health check for the service, Route 53 assumes that all instances are healthy and returns the applicable value for one randomly selected instance. For more information about the weighted routing policy, see `Weighted Routing <https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html#routing-policy-weighted>`_ in the *Route 53 Developer Guide* .
 
@@ -2380,6 +2391,10 @@ class CfnService(
         ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnService.DnsRecordProperty"]]]:
             '''An array that contains one ``DnsRecord`` object for each Route 53 DNS record that you want AWS Cloud Map to create when you register an instance.
 
+            .. epigraph::
+
+               The record type of a service can't be updated directly and can only be changed by deleting the service and recreating it with a new ``DnsConfig`` .
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-servicediscovery-service-dnsconfig.html#cfn-servicediscovery-service-dnsconfig-dnsrecords
             '''
             result = self._values.get("dns_records")

aws_cdk/aws_ses/__init__.py

@@ -269,7 +269,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 

aws_cdk/aws_ses_actions/__init__.py

@@ -29,7 +29,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 

aws_cdk/aws_shield/__init__.py

@@ -48,7 +48,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *