aws-cdk-lib 2.158.0__py3-none-any.whl → 2.159.1__py3-none-any.whl

aws_cdk/aws_events/__init__.py

@@ -1520,8 +1520,6 @@ class CfnConnection(
         
         cfn_connection = events.CfnConnection(self, "MyCfnConnection",
             authorization_type="authorizationType",
-        
-            # the properties below are optional
             auth_parameters=events.CfnConnection.AuthParametersProperty(
                 api_key_auth_parameters=events.CfnConnection.ApiKeyAuthParametersProperty(
                     api_key_name="apiKeyName",
@@ -1588,6 +1586,8 @@ class CfnConnection(
                     )
                 )
             ),
+        
+            # the properties below are optional
             description="description",
             name="name"
         )
@@ -1599,7 +1599,7 @@ class CfnConnection(
         id: builtins.str,
         *,
         authorization_type: builtins.str,
-        auth_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnConnection.AuthParametersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        auth_parameters: typing.Union[_IResolvable_da3f097b, typing.Union["CfnConnection.AuthParametersProperty", typing.Dict[builtins.str, typing.Any]]],
         description: typing.Optional[builtins.str] = None,
         name: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -1694,14 +1694,14 @@ class CfnConnection(
     @jsii.member(jsii_name="authParameters")
     def auth_parameters(
         self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnConnection.AuthParametersProperty"]]:
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnConnection.AuthParametersProperty"]:
         '''A ``CreateConnectionAuthRequestParameters`` object that contains the authorization parameters to use to authorize with the endpoint.'''
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnConnection.AuthParametersProperty"]], jsii.get(self, "authParameters"))
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnConnection.AuthParametersProperty"], jsii.get(self, "authParameters"))
 
     @auth_parameters.setter
     def auth_parameters(
         self,
-        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnConnection.AuthParametersProperty"]],
+        value: typing.Union[_IResolvable_da3f097b, "CfnConnection.AuthParametersProperty"],
     ) -> None:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__57b3dc84742623dcc9dcc433aac0b117093002aa9686131e642748038958b67c)
@@ -2388,7 +2388,7 @@ class CfnConnection(
 
             :param key: The key for a query string parameter.
             :param value: The value associated with the key for the query string parameter.
-            :param is_value_secret: Specifies whether the value is secret.
+            :param is_value_secret: Specifies whether the value is secret. Default: - true
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-connection-parameter.html
             :exampleMetadata: fixture=_generated
@@ -2445,6 +2445,8 @@ class CfnConnection(
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
             '''Specifies whether the value is secret.
 
+            :default: - true
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-connection-parameter.html#cfn-events-connection-parameter-isvaluesecret
             '''
             result = self._values.get("is_value_secret")
@@ -2477,7 +2479,7 @@ class CfnConnectionProps:
         self,
         *,
         authorization_type: builtins.str,
-        auth_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnConnection.AuthParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        auth_parameters: typing.Union[_IResolvable_da3f097b, typing.Union[CfnConnection.AuthParametersProperty, typing.Dict[builtins.str, typing.Any]]],
         description: typing.Optional[builtins.str] = None,
         name: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -2499,8 +2501,6 @@ class CfnConnectionProps:
             
             cfn_connection_props = events.CfnConnectionProps(
                 authorization_type="authorizationType",
-            
-                # the properties below are optional
                 auth_parameters=events.CfnConnection.AuthParametersProperty(
                     api_key_auth_parameters=events.CfnConnection.ApiKeyAuthParametersProperty(
                         api_key_name="apiKeyName",
@@ -2567,6 +2567,8 @@ class CfnConnectionProps:
                         )
                     )
                 ),
+            
+                # the properties below are optional
                 description="description",
                 name="name"
             )
@@ -2579,9 +2581,8 @@ class CfnConnectionProps:
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "authorization_type": authorization_type,
+            "auth_parameters": auth_parameters,
         }
-        if auth_parameters is not None:
-            self._values["auth_parameters"] = auth_parameters
         if description is not None:
             self._values["description"] = description
         if name is not None:
@@ -2604,13 +2605,14 @@ class CfnConnectionProps:
     @builtins.property
     def auth_parameters(
         self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnConnection.AuthParametersProperty]]:
+    ) -> typing.Union[_IResolvable_da3f097b, CfnConnection.AuthParametersProperty]:
         '''A ``CreateConnectionAuthRequestParameters`` object that contains the authorization parameters to use to authorize with the endpoint.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-connection.html#cfn-events-connection-authparameters
         '''
         result = self._values.get("auth_parameters")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnConnection.AuthParametersProperty]], result)
+        assert result is not None, "Required property 'auth_parameters' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnConnection.AuthParametersProperty], result)
 
     @builtins.property
     def description(self) -> typing.Optional[builtins.str]:
@@ -11898,7 +11900,7 @@ def _typecheckingstub__65bde9b35de094b905dd335652d04503af85c50ac027a006a1d7ec926
     id: builtins.str,
     *,
     authorization_type: builtins.str,
-    auth_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnConnection.AuthParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    auth_parameters: typing.Union[_IResolvable_da3f097b, typing.Union[CfnConnection.AuthParametersProperty, typing.Dict[builtins.str, typing.Any]]],
     description: typing.Optional[builtins.str] = None,
     name: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -11924,7 +11926,7 @@ def _typecheckingstub__4f51f33cc16a16fcb52edb95bbc7ef5dd0bb5f97e31dd1f331adaf42e
     pass
 
 def _typecheckingstub__57b3dc84742623dcc9dcc433aac0b117093002aa9686131e642748038958b67c(
-    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnConnection.AuthParametersProperty]],
+    value: typing.Union[_IResolvable_da3f097b, CfnConnection.AuthParametersProperty],
 ) -> None:
     """Type checking stubs"""
     pass
@@ -12006,7 +12008,7 @@ def _typecheckingstub__8ef124487a6c31dc58a802230e7bf50f962f08be9cde1fb39c45b429d
 def _typecheckingstub__2b32e6c6e8c1c2772bb604474216b07683c108c349058e240d272750b95ff394(
     *,
     authorization_type: builtins.str,
-    auth_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnConnection.AuthParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    auth_parameters: typing.Union[_IResolvable_da3f097b, typing.Union[CfnConnection.AuthParametersProperty, typing.Dict[builtins.str, typing.Any]]],
     description: typing.Optional[builtins.str] = None,
     name: typing.Optional[builtins.str] = None,
 ) -> None:

aws_cdk/aws_events_targets/__init__.py

@@ -33,7 +33,7 @@ EventBridge.
 
 ## Event retry policy and using dead-letter queues
 
-The Codebuild, CodePipeline, Lambda, StepFunctions, LogGroup, SQSQueue, SNSTopic and ECSTask targets support attaching a [dead letter queue and setting retry policies](https://docs.aws.amazon.com/eventbridge/latest/userguide/rule-dlq.html). See the [lambda example](#invoke-a-lambda-function).
+The Codebuild, CodePipeline, Lambda, Kinesis Data Streams, StepFunctions, LogGroup, SQSQueue, SNSTopic and ECSTask targets support attaching a [dead letter queue and setting retry policies](https://docs.aws.amazon.com/eventbridge/latest/userguide/rule-dlq.html). See the [lambda example](#invoke-a-lambda-function).
 Use [escape hatches](https://docs.aws.amazon.com/cdk/latest/guide/cfn_layer.html) for the other target types.
 
 ## Invoke a Lambda function
@@ -2330,17 +2330,27 @@ class KinesisStream(
         *,
         message: typing.Optional[_RuleTargetInput_6beca786] = None,
         partition_key_path: typing.Optional[builtins.str] = None,
+        dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
+        max_event_age: typing.Optional[_Duration_4839e8c3] = None,
+        retry_attempts: typing.Optional[jsii.Number] = None,
     ) -> None:
         '''
         :param stream: -
         :param message: The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire CloudWatch event
         :param partition_key_path: Partition Key Path for records sent to this stream. Default: - eventId as the partition key
+        :param dead_letter_queue: The SQS queue to be used as deadLetterQueue. Check out the `considerations for using a dead-letter queue <https://docs.aws.amazon.com/eventbridge/latest/userguide/rule-dlq.html#dlq-considerations>`_. The events not successfully delivered are automatically retried for a specified period of time, depending on the retry policy of the target. If an event is not delivered before all retry attempts are exhausted, it will be sent to the dead letter queue. Default: - no dead-letter queue
+        :param max_event_age: The maximum age of a request that Lambda sends to a function for processing. Minimum value of 60. Maximum value of 86400. Default: Duration.hours(24)
+        :param retry_attempts: The maximum number of times to retry when the function returns an error. Minimum value of 0. Maximum value of 185. Default: 185
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__47a9d917a1971c5aa11b68bf823d9f34a57a7b1e7653b0f82809c06309cac1a6)
             check_type(argname="argument stream", value=stream, expected_type=type_hints["stream"])
         props = KinesisStreamProps(
-            message=message, partition_key_path=partition_key_path
+            message=message,
+            partition_key_path=partition_key_path,
+            dead_letter_queue=dead_letter_queue,
+            max_event_age=max_event_age,
+            retry_attempts=retry_attempts,
         )
 
         jsii.create(self.__class__, self, [stream, props])
@@ -2363,81 +2373,6 @@ class KinesisStream(
         return typing.cast(_RuleTargetConfig_4e70fe03, jsii.invoke(self, "bind", [_rule, _id]))
 
 
-@jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_events_targets.KinesisStreamProps",
-    jsii_struct_bases=[],
-    name_mapping={"message": "message", "partition_key_path": "partitionKeyPath"},
-)
-class KinesisStreamProps:
-    def __init__(
-        self,
-        *,
-        message: typing.Optional[_RuleTargetInput_6beca786] = None,
-        partition_key_path: typing.Optional[builtins.str] = None,
-    ) -> None:
-        '''Customize the Kinesis Stream Event Target.
-
-        :param message: The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire CloudWatch event
-        :param partition_key_path: Partition Key Path for records sent to this stream. Default: - eventId as the partition key
-
-        :exampleMetadata: fixture=_generated
-
-        Example::
-
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            from aws_cdk import aws_events as events
-            from aws_cdk import aws_events_targets as events_targets
-            
-            # rule_target_input: events.RuleTargetInput
-            
-            kinesis_stream_props = events_targets.KinesisStreamProps(
-                message=rule_target_input,
-                partition_key_path="partitionKeyPath"
-            )
-        '''
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__971b6fc6dc302be6b6401547a0731521d858936fe589a0d096ef25e81e707b46)
-            check_type(argname="argument message", value=message, expected_type=type_hints["message"])
-            check_type(argname="argument partition_key_path", value=partition_key_path, expected_type=type_hints["partition_key_path"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {}
-        if message is not None:
-            self._values["message"] = message
-        if partition_key_path is not None:
-            self._values["partition_key_path"] = partition_key_path
-
-    @builtins.property
-    def message(self) -> typing.Optional[_RuleTargetInput_6beca786]:
-        '''The message to send to the stream.
-
-        Must be a valid JSON text passed to the target stream.
-
-        :default: - the entire CloudWatch event
-        '''
-        result = self._values.get("message")
-        return typing.cast(typing.Optional[_RuleTargetInput_6beca786], result)
-
-    @builtins.property
-    def partition_key_path(self) -> typing.Optional[builtins.str]:
-        '''Partition Key Path for records sent to this stream.
-
-        :default: - eventId as the partition key
-        '''
-        result = self._values.get("partition_key_path")
-        return typing.cast(typing.Optional[builtins.str], result)
-
-    def __eq__(self, rhs: typing.Any) -> builtins.bool:
-        return isinstance(rhs, self.__class__) and rhs._values == self._values
-
-    def __ne__(self, rhs: typing.Any) -> builtins.bool:
-        return not (rhs == self)
-
-    def __repr__(self) -> str:
-        return "KinesisStreamProps(%s)" % ", ".join(
-            k + "=" + repr(v) for k, v in self._values.items()
-        )
-
-
 @jsii.implements(_IRuleTarget_7a91f454)
 class LambdaFunction(
     metaclass=jsii.JSIIMeta,
@@ -4817,6 +4752,145 @@ class EcsTaskProps(TargetBaseProps):
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_events_targets.KinesisStreamProps",
+    jsii_struct_bases=[TargetBaseProps],
+    name_mapping={
+        "dead_letter_queue": "deadLetterQueue",
+        "max_event_age": "maxEventAge",
+        "retry_attempts": "retryAttempts",
+        "message": "message",
+        "partition_key_path": "partitionKeyPath",
+    },
+)
+class KinesisStreamProps(TargetBaseProps):
+    def __init__(
+        self,
+        *,
+        dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
+        max_event_age: typing.Optional[_Duration_4839e8c3] = None,
+        retry_attempts: typing.Optional[jsii.Number] = None,
+        message: typing.Optional[_RuleTargetInput_6beca786] = None,
+        partition_key_path: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''Customize the Kinesis Stream Event Target.
+
+        :param dead_letter_queue: The SQS queue to be used as deadLetterQueue. Check out the `considerations for using a dead-letter queue <https://docs.aws.amazon.com/eventbridge/latest/userguide/rule-dlq.html#dlq-considerations>`_. The events not successfully delivered are automatically retried for a specified period of time, depending on the retry policy of the target. If an event is not delivered before all retry attempts are exhausted, it will be sent to the dead letter queue. Default: - no dead-letter queue
+        :param max_event_age: The maximum age of a request that Lambda sends to a function for processing. Minimum value of 60. Maximum value of 86400. Default: Duration.hours(24)
+        :param retry_attempts: The maximum number of times to retry when the function returns an error. Minimum value of 0. Maximum value of 185. Default: 185
+        :param message: The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire CloudWatch event
+        :param partition_key_path: Partition Key Path for records sent to this stream. Default: - eventId as the partition key
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            import aws_cdk as cdk
+            from aws_cdk import aws_events as events
+            from aws_cdk import aws_events_targets as events_targets
+            from aws_cdk import aws_sqs as sqs
+            
+            # queue: sqs.Queue
+            # rule_target_input: events.RuleTargetInput
+            
+            kinesis_stream_props = events_targets.KinesisStreamProps(
+                dead_letter_queue=queue,
+                max_event_age=cdk.Duration.minutes(30),
+                message=rule_target_input,
+                partition_key_path="partitionKeyPath",
+                retry_attempts=123
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__971b6fc6dc302be6b6401547a0731521d858936fe589a0d096ef25e81e707b46)
+            check_type(argname="argument dead_letter_queue", value=dead_letter_queue, expected_type=type_hints["dead_letter_queue"])
+            check_type(argname="argument max_event_age", value=max_event_age, expected_type=type_hints["max_event_age"])
+            check_type(argname="argument retry_attempts", value=retry_attempts, expected_type=type_hints["retry_attempts"])
+            check_type(argname="argument message", value=message, expected_type=type_hints["message"])
+            check_type(argname="argument partition_key_path", value=partition_key_path, expected_type=type_hints["partition_key_path"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if dead_letter_queue is not None:
+            self._values["dead_letter_queue"] = dead_letter_queue
+        if max_event_age is not None:
+            self._values["max_event_age"] = max_event_age
+        if retry_attempts is not None:
+            self._values["retry_attempts"] = retry_attempts
+        if message is not None:
+            self._values["message"] = message
+        if partition_key_path is not None:
+            self._values["partition_key_path"] = partition_key_path
+
+    @builtins.property
+    def dead_letter_queue(self) -> typing.Optional[_IQueue_7ed6f679]:
+        '''The SQS queue to be used as deadLetterQueue. Check out the `considerations for using a dead-letter queue <https://docs.aws.amazon.com/eventbridge/latest/userguide/rule-dlq.html#dlq-considerations>`_.
+
+        The events not successfully delivered are automatically retried for a specified period of time,
+        depending on the retry policy of the target.
+        If an event is not delivered before all retry attempts are exhausted, it will be sent to the dead letter queue.
+
+        :default: - no dead-letter queue
+        '''
+        result = self._values.get("dead_letter_queue")
+        return typing.cast(typing.Optional[_IQueue_7ed6f679], result)
+
+    @builtins.property
+    def max_event_age(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The maximum age of a request that Lambda sends to a function for processing.
+
+        Minimum value of 60.
+        Maximum value of 86400.
+
+        :default: Duration.hours(24)
+        '''
+        result = self._values.get("max_event_age")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
+    @builtins.property
+    def retry_attempts(self) -> typing.Optional[jsii.Number]:
+        '''The maximum number of times to retry when the function returns an error.
+
+        Minimum value of 0.
+        Maximum value of 185.
+
+        :default: 185
+        '''
+        result = self._values.get("retry_attempts")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def message(self) -> typing.Optional[_RuleTargetInput_6beca786]:
+        '''The message to send to the stream.
+
+        Must be a valid JSON text passed to the target stream.
+
+        :default: - the entire CloudWatch event
+        '''
+        result = self._values.get("message")
+        return typing.cast(typing.Optional[_RuleTargetInput_6beca786], result)
+
+    @builtins.property
+    def partition_key_path(self) -> typing.Optional[builtins.str]:
+        '''Partition Key Path for records sent to this stream.
+
+        :default: - eventId as the partition key
+        '''
+        result = self._values.get("partition_key_path")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "KinesisStreamProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_events_targets.LambdaFunctionProps",
     jsii_struct_bases=[TargetBaseProps],
@@ -5807,6 +5881,9 @@ def _typecheckingstub__47a9d917a1971c5aa11b68bf823d9f34a57a7b1e7653b0f82809c0630
     *,
     message: typing.Optional[_RuleTargetInput_6beca786] = None,
     partition_key_path: typing.Optional[builtins.str] = None,
+    dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
+    max_event_age: typing.Optional[_Duration_4839e8c3] = None,
+    retry_attempts: typing.Optional[jsii.Number] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5818,14 +5895,6 @@ def _typecheckingstub__ae222f596f043d31f56819c2cb64c58ef12e8e3d35bce41fa6f0cd929
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__971b6fc6dc302be6b6401547a0731521d858936fe589a0d096ef25e81e707b46(
-    *,
-    message: typing.Optional[_RuleTargetInput_6beca786] = None,
-    partition_key_path: typing.Optional[builtins.str] = None,
-) -> None:
-    """Type checking stubs"""
-    pass
-
 def _typecheckingstub__1ed39c6222adc3f41ac8913ef4f7e22134443e2aa19c19114f6650e1d987c3c4(
     handler: _IFunction_6adb0ab8,
     *,
@@ -6076,6 +6145,17 @@ def _typecheckingstub__3624031da4f9372e2ccdb3e422123cc459d01922cc36bab5b96caa98f
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__971b6fc6dc302be6b6401547a0731521d858936fe589a0d096ef25e81e707b46(
+    *,
+    dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
+    max_event_age: typing.Optional[_Duration_4839e8c3] = None,
+    retry_attempts: typing.Optional[jsii.Number] = None,
+    message: typing.Optional[_RuleTargetInput_6beca786] = None,
+    partition_key_path: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7e34dd9ce66add58b9a28d19d7823e686db2c0d099525e77c896c992c0318854(
     *,
     dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,

aws_cdk/aws_fms/__init__.py

@@ -300,6 +300,7 @@ class CfnPolicy(
                 # the properties below are optional
                 managed_service_data="managedServiceData",
                 policy_option=fms.CfnPolicy.PolicyOptionProperty(
+                    network_acl_common_policy=fms.CfnPolicy.NetworkAclCommonPolicyProperty(),
                     network_firewall_policy=fms.CfnPolicy.NetworkFirewallPolicyProperty(
                         firewall_deployment_model="firewallDeploymentModel"
                     ),
@@ -769,6 +770,43 @@ class CfnPolicy(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_fms.CfnPolicy.NetworkAclCommonPolicyProperty",
+        jsii_struct_bases=[],
+        name_mapping={},
+    )
+    class NetworkAclCommonPolicyProperty:
+        def __init__(self) -> None:
+            '''Defines a Firewall Manager network ACL policy.
+
+            This is used in the ``PolicyOption`` of a ``SecurityServicePolicyData`` for a ``Policy`` , when the ``SecurityServicePolicyData`` type is set to ``NETWORK_ACL_COMMON`` .
+
+            For information about network ACLs, see `Control traffic to subnets using network ACLs <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html>`_ in the *Amazon Virtual Private Cloud User Guide* .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclcommonpolicy.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_fms as fms
+                
+                network_acl_common_policy_property = fms.CfnPolicy.NetworkAclCommonPolicyProperty()
+            '''
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "NetworkAclCommonPolicyProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_fms.CfnPolicy.NetworkFirewallPolicyProperty",
         jsii_struct_bases=[],
@@ -829,6 +867,7 @@ class CfnPolicy(
         jsii_type="aws-cdk-lib.aws_fms.CfnPolicy.PolicyOptionProperty",
         jsii_struct_bases=[],
         name_mapping={
+            "network_acl_common_policy": "networkAclCommonPolicy",
             "network_firewall_policy": "networkFirewallPolicy",
             "third_party_firewall_policy": "thirdPartyFirewallPolicy",
         },
@@ -837,11 +876,13 @@ class CfnPolicy(
         def __init__(
             self,
             *,
+            network_acl_common_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPolicy.NetworkAclCommonPolicyProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             network_firewall_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPolicy.NetworkFirewallPolicyProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             third_party_firewall_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPolicy.ThirdPartyFirewallPolicyProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
             '''Contains the settings to configure a network ACL policy, a AWS Network Firewall firewall policy deployment model, or a third-party firewall policy.
 
+            :param network_acl_common_policy: Defines a Firewall Manager network ACL policy.
             :param network_firewall_policy: Defines the deployment model to use for the firewall policy.
             :param third_party_firewall_policy: Defines the policy options for a third-party firewall policy.
 
@@ -855,6 +896,7 @@ class CfnPolicy(
                 from aws_cdk import aws_fms as fms
                 
                 policy_option_property = fms.CfnPolicy.PolicyOptionProperty(
+                    network_acl_common_policy=fms.CfnPolicy.NetworkAclCommonPolicyProperty(),
                     network_firewall_policy=fms.CfnPolicy.NetworkFirewallPolicyProperty(
                         firewall_deployment_model="firewallDeploymentModel"
                     ),
@@ -865,14 +907,28 @@ class CfnPolicy(
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__5979520d8e95acd573ee171b00e0dcba3be3872b80af53615d64bc000f703299)
+                check_type(argname="argument network_acl_common_policy", value=network_acl_common_policy, expected_type=type_hints["network_acl_common_policy"])
                 check_type(argname="argument network_firewall_policy", value=network_firewall_policy, expected_type=type_hints["network_firewall_policy"])
                 check_type(argname="argument third_party_firewall_policy", value=third_party_firewall_policy, expected_type=type_hints["third_party_firewall_policy"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if network_acl_common_policy is not None:
+                self._values["network_acl_common_policy"] = network_acl_common_policy
             if network_firewall_policy is not None:
                 self._values["network_firewall_policy"] = network_firewall_policy
             if third_party_firewall_policy is not None:
                 self._values["third_party_firewall_policy"] = third_party_firewall_policy
 
+        @builtins.property
+        def network_acl_common_policy(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnPolicy.NetworkAclCommonPolicyProperty"]]:
+            '''Defines a Firewall Manager network ACL policy.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-policyoption.html#cfn-fms-policy-policyoption-networkaclcommonpolicy
+            '''
+            result = self._values.get("network_acl_common_policy")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnPolicy.NetworkAclCommonPolicyProperty"]], result)
+
         @builtins.property
         def network_firewall_policy(
             self,
@@ -1091,6 +1147,7 @@ class CfnPolicy(
                     # the properties below are optional
                     managed_service_data="managedServiceData",
                     policy_option=fms.CfnPolicy.PolicyOptionProperty(
+                        network_acl_common_policy=fms.CfnPolicy.NetworkAclCommonPolicyProperty(),
                         network_firewall_policy=fms.CfnPolicy.NetworkFirewallPolicyProperty(
                             firewall_deployment_model="firewallDeploymentModel"
                         ),
@@ -1379,6 +1436,7 @@ class CfnPolicyProps:
                     # the properties below are optional
                     managed_service_data="managedServiceData",
                     policy_option=fms.CfnPolicy.PolicyOptionProperty(
+                        network_acl_common_policy=fms.CfnPolicy.NetworkAclCommonPolicyProperty(),
                         network_firewall_policy=fms.CfnPolicy.NetworkFirewallPolicyProperty(
                             firewall_deployment_model="firewallDeploymentModel"
                         ),
@@ -2275,6 +2333,7 @@ def _typecheckingstub__1dee79c6872a0421399375d5fc2757431881011031a81ccd6674040de
 
 def _typecheckingstub__5979520d8e95acd573ee171b00e0dcba3be3872b80af53615d64bc000f703299(
     *,
+    network_acl_common_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPolicy.NetworkAclCommonPolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     network_firewall_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPolicy.NetworkFirewallPolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     third_party_firewall_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPolicy.ThirdPartyFirewallPolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:

aws_cdk/aws_fsx/__init__.py

@@ -331,7 +331,7 @@ class CfnDataRepositoryAssociation(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param data_repository_path: The path to the Amazon S3 data repository that will be linked to the file system. The path can be an S3 bucket or prefix in the format ``s3://myBucket/myPrefix/`` . This path specifies where in the S3 data repository files will be imported from or exported to.
+        :param data_repository_path: The path to the Amazon S3 data repository that will be linked to the file system. The path can be an S3 bucket or prefix in the format ``s3://bucket-name/prefix/`` . This path specifies where in the S3 data repository files will be imported from or exported to.
         :param file_system_id: The ID of the file system on which the data repository association is configured.
         :param file_system_path: A path on the Amazon FSx for Lustre file system that points to a high-level directory (such as ``/ns1/`` ) or subdirectory (such as ``/ns1/subdir/`` ) that will be mapped 1-1 with ``DataRepositoryPath`` . The leading forward slash in the name is required. Two data repository associations cannot have overlapping file system paths. For example, if a data repository is associated with file system path ``/ns1/`` , then you cannot link another data repository with file system path ``/ns1/ns2`` . This path specifies where in your file system files will be exported from or imported to. This file system directory can be linked to only one Amazon S3 bucket, and no other S3 bucket can be linked to the directory. .. epigraph:: If you specify only a forward slash ( ``/`` ) as the file system path, you can link only one data repository to the file system. You can only specify "/" as the file system path for the first data repository associated with a file system.
         :param batch_import_meta_data_on_create: A boolean flag indicating whether an import data repository task to import metadata should run after the data repository association is created. The task runs if this flag is set to ``true`` .
@@ -762,7 +762,7 @@ class CfnDataRepositoryAssociationProps:
     ) -> None:
         '''Properties for defining a ``CfnDataRepositoryAssociation``.
 
-        :param data_repository_path: The path to the Amazon S3 data repository that will be linked to the file system. The path can be an S3 bucket or prefix in the format ``s3://myBucket/myPrefix/`` . This path specifies where in the S3 data repository files will be imported from or exported to.
+        :param data_repository_path: The path to the Amazon S3 data repository that will be linked to the file system. The path can be an S3 bucket or prefix in the format ``s3://bucket-name/prefix/`` . This path specifies where in the S3 data repository files will be imported from or exported to.
         :param file_system_id: The ID of the file system on which the data repository association is configured.
         :param file_system_path: A path on the Amazon FSx for Lustre file system that points to a high-level directory (such as ``/ns1/`` ) or subdirectory (such as ``/ns1/subdir/`` ) that will be mapped 1-1 with ``DataRepositoryPath`` . The leading forward slash in the name is required. Two data repository associations cannot have overlapping file system paths. For example, if a data repository is associated with file system path ``/ns1/`` , then you cannot link another data repository with file system path ``/ns1/ns2`` . This path specifies where in your file system files will be exported from or imported to. This file system directory can be linked to only one Amazon S3 bucket, and no other S3 bucket can be linked to the directory. .. epigraph:: If you specify only a forward slash ( ``/`` ) as the file system path, you can link only one data repository to the file system. You can only specify "/" as the file system path for the first data repository associated with a file system.
         :param batch_import_meta_data_on_create: A boolean flag indicating whether an import data repository task to import metadata should run after the data repository association is created. The task runs if this flag is set to ``true`` .
@@ -828,7 +828,7 @@ class CfnDataRepositoryAssociationProps:
     def data_repository_path(self) -> builtins.str:
         '''The path to the Amazon S3 data repository that will be linked to the file system.
 
-        The path can be an S3 bucket or prefix in the format ``s3://myBucket/myPrefix/`` . This path specifies where in the S3 data repository files will be imported from or exported to.
+        The path can be an S3 bucket or prefix in the format ``s3://bucket-name/prefix/`` . This path specifies where in the S3 data repository files will be imported from or exported to.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-datarepositoryassociation.html#cfn-fsx-datarepositoryassociation-datarepositorypath
         '''