aws-cdk-lib 2.158.0__py3-none-any.whl → 2.159.1__py3-none-any.whl

aws_cdk/aws_opensearchservice/__init__.py

@@ -5555,6 +5555,12 @@ class EngineVersion(
         '''AWS OpenSearch 2.13.'''
         return typing.cast("EngineVersion", jsii.sget(cls, "OPENSEARCH_2_13"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="OPENSEARCH_2_15")
+    def OPENSEARCH_2_15(cls) -> "EngineVersion":
+        '''AWS OpenSearch 2.15.'''
+        return typing.cast("EngineVersion", jsii.sget(cls, "OPENSEARCH_2_15"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="OPENSEARCH_2_3")
     def OPENSEARCH_2_3(cls) -> "EngineVersion":

aws_cdk/aws_pcaconnectorscep/__init__.py

@@ -84,7 +84,11 @@ class CfnChallenge(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_pcaconnectorscep.CfnChallenge",
 ):
-    '''Represents a SCEP Challenge that is used for certificate enrollment.
+    '''For general-purpose connectors.
+
+    Creates a *challenge password* for the specified connector. The SCEP protocol uses a challenge password to authenticate a request before issuing a certificate from a certificate authority (CA). Your SCEP clients include the challenge password as part of their certificate request to Connector for SCEP. To retrieve the connector Amazon Resource Names (ARNs) for the connectors in your account, call `ListConnectors <https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_ListConnectors.html>`_ .
+
+    To create additional challenge passwords for the connector, call ``CreateChallenge`` again. We recommend frequently rotating your challenge passwords.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-challenge.html
     :cloudformationResource: AWS::PCAConnectorSCEP::Challenge
@@ -117,7 +121,7 @@ class CfnChallenge(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param connector_arn: 
+        :param connector_arn: The Amazon Resource Name (ARN) of the connector.
         :param tags: 
         '''
         if __debug__:
@@ -161,7 +165,8 @@ class CfnChallenge(
     @builtins.property
     @jsii.member(jsii_name="attrChallengeArn")
     def attr_challenge_arn(self) -> builtins.str:
-        '''
+        '''The Amazon Resource Name (ARN) of the challenge.
+
         :cloudformationAttribute: ChallengeArn
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrChallengeArn"))
@@ -180,6 +185,7 @@ class CfnChallenge(
     @builtins.property
     @jsii.member(jsii_name="connectorArn")
     def connector_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the connector.'''
         return typing.cast(builtins.str, jsii.get(self, "connectorArn"))
 
     @connector_arn.setter
@@ -219,7 +225,7 @@ class CfnChallengeProps:
     ) -> None:
         '''Properties for defining a ``CfnChallenge``.
 
-        :param connector_arn: 
+        :param connector_arn: The Amazon Resource Name (ARN) of the connector.
         :param tags: 
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-challenge.html
@@ -252,7 +258,8 @@ class CfnChallengeProps:
 
     @builtins.property
     def connector_arn(self) -> builtins.str:
-        '''
+        '''The Amazon Resource Name (ARN) of the connector.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-challenge.html#cfn-pcaconnectorscep-challenge-connectorarn
         '''
         result = self._values.get("connector_arn")
@@ -285,7 +292,9 @@ class CfnConnector(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_pcaconnectorscep.CfnConnector",
 ):
-    '''Represents a Connector that allows certificate issuance through Simple Certificate Enrollment Protocol (SCEP).
+    '''Connector for SCEP is a service that links AWS Private Certificate Authority to your SCEP-enabled devices.
+
+    The connector brokers the exchange of certificates from AWS Private CA to your SCEP-enabled devices and mobile device management systems. The connector is a complex type that contains the connector's configuration settings.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-connector.html
     :cloudformationResource: AWS::PCAConnectorSCEP::Connector
@@ -325,8 +334,8 @@ class CfnConnector(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param certificate_authority_arn: 
-        :param mobile_device_management: 
+        :param certificate_authority_arn: The Amazon Resource Name (ARN) of the certificate authority associated with the connector.
+        :param mobile_device_management: Contains settings relevant to the mobile device management system that you chose for the connector. If you didn't configure ``MobileDeviceManagement`` , then the connector is for general-purpose use and this object is empty.
         :param tags: 
         '''
         if __debug__:
@@ -374,7 +383,8 @@ class CfnConnector(
     @builtins.property
     @jsii.member(jsii_name="attrConnectorArn")
     def attr_connector_arn(self) -> builtins.str:
-        '''
+        '''The Amazon Resource Name (ARN) of the connector.
+
         :cloudformationAttribute: ConnectorArn
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrConnectorArn"))
@@ -382,7 +392,8 @@ class CfnConnector(
     @builtins.property
     @jsii.member(jsii_name="attrEndpoint")
     def attr_endpoint(self) -> builtins.str:
-        '''
+        '''The connector's HTTPS public SCEP URL.
+
         :cloudformationAttribute: Endpoint
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrEndpoint"))
@@ -398,7 +409,8 @@ class CfnConnector(
     @builtins.property
     @jsii.member(jsii_name="attrType")
     def attr_type(self) -> builtins.str:
-        '''
+        '''The connector type.
+
         :cloudformationAttribute: Type
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrType"))
@@ -417,6 +429,7 @@ class CfnConnector(
     @builtins.property
     @jsii.member(jsii_name="certificateAuthorityArn")
     def certificate_authority_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the certificate authority associated with the connector.'''
         return typing.cast(builtins.str, jsii.get(self, "certificateAuthorityArn"))
 
     @certificate_authority_arn.setter
@@ -431,6 +444,7 @@ class CfnConnector(
     def mobile_device_management(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnConnector.MobileDeviceManagementProperty"]]:
+        '''Contains settings relevant to the mobile device management system that you chose for the connector.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnConnector.MobileDeviceManagementProperty"]], jsii.get(self, "mobileDeviceManagement"))
 
     @mobile_device_management.setter
@@ -473,9 +487,14 @@ class CfnConnector(
             azure_application_id: builtins.str,
             domain: builtins.str,
         ) -> None:
-            '''
-            :param azure_application_id: 
-            :param domain: 
+            '''Contains configuration details for use with Microsoft Intune.
+
+            For information about using Connector for SCEP for Microsoft Intune, see `Using Connector for SCEP for Microsoft Intune <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlconnector-for-scep-intune.html>`_ .
+
+            When you use Connector for SCEP for Microsoft Intune, certain functionalities are enabled by accessing Microsoft Intune through the Microsoft API. Your use of the Connector for SCEP and accompanying AWS services doesn't remove your need to have a valid license for your use of the Microsoft Intune service. You should also review the `Microsoft Intune® App Protection Policies <https://docs.aws.amazon.com/https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy>`_ .
+
+            :param azure_application_id: The directory (tenant) ID from your Microsoft Entra ID app registration.
+            :param domain: The primary domain from your Microsoft Entra ID app registration.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-intuneconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -502,7 +521,8 @@ class CfnConnector(
 
         @builtins.property
         def azure_application_id(self) -> builtins.str:
-            '''
+            '''The directory (tenant) ID from your Microsoft Entra ID app registration.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-intuneconfiguration.html#cfn-pcaconnectorscep-connector-intuneconfiguration-azureapplicationid
             '''
             result = self._values.get("azure_application_id")
@@ -511,7 +531,8 @@ class CfnConnector(
 
         @builtins.property
         def domain(self) -> builtins.str:
-            '''
+            '''The primary domain from your Microsoft Entra ID app registration.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-intuneconfiguration.html#cfn-pcaconnectorscep-connector-intuneconfiguration-domain
             '''
             result = self._values.get("domain")
@@ -540,8 +561,13 @@ class CfnConnector(
             *,
             intune: typing.Union[_IResolvable_da3f097b, typing.Union["CfnConnector.IntuneConfigurationProperty", typing.Dict[builtins.str, typing.Any]]],
         ) -> None:
-            '''
-            :param intune: 
+            '''If you don't supply a value, by default Connector for SCEP creates a connector for general-purpose use.
+
+            A general-purpose connector is designed to work with clients or endpoints that support the SCEP protocol, except Connector for SCEP for Microsoft Intune. For information about considerations and limitations with using Connector for SCEP, see `Considerations and Limitations <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlc4scep-considerations-limitations.html>`_ .
+
+            If you provide an ``IntuneConfiguration`` , Connector for SCEP creates a connector for use with Microsoft Intune, and you manage the challenge passwords using Microsoft Intune. For more information, see `Using Connector for SCEP for Microsoft Intune <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlconnector-for-scep-intune.html>`_ .
+
+            :param intune: Configuration settings for use with Microsoft Intune. For information about using Connector for SCEP for Microsoft Intune, see `Using Connector for SCEP for Microsoft Intune <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlconnector-for-scep-intune.html>`_ .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-mobiledevicemanagement.html
             :exampleMetadata: fixture=_generated
@@ -570,7 +596,10 @@ class CfnConnector(
         def intune(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, "CfnConnector.IntuneConfigurationProperty"]:
-            '''
+            '''Configuration settings for use with Microsoft Intune.
+
+            For information about using Connector for SCEP for Microsoft Intune, see `Using Connector for SCEP for Microsoft Intune <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlconnector-for-scep-intune.html>`_ .
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-mobiledevicemanagement.html#cfn-pcaconnectorscep-connector-mobiledevicemanagement-intune
             '''
             result = self._values.get("intune")
@@ -605,10 +634,13 @@ class CfnConnector(
             issuer: typing.Optional[builtins.str] = None,
             subject: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''
-            :param audience: 
-            :param issuer: 
-            :param subject: 
+            '''Contains OpenID Connect (OIDC) parameters for use with Microsoft Intune.
+
+            For more information about using Connector for SCEP for Microsoft Intune, see `Using Connector for SCEP for Microsoft Intune <https://docs.aws.amazon.com/privateca/latest/userguide/scep-connector.htmlconnector-for-scep-intune.html>`_ .
+
+            :param audience: The audience value to copy into your Microsoft Entra app registration's OIDC.
+            :param issuer: The issuer value to copy into your Microsoft Entra app registration's OIDC.
+            :param subject: The subject value to copy into your Microsoft Entra app registration's OIDC.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-openidconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -640,7 +672,8 @@ class CfnConnector(
 
         @builtins.property
         def audience(self) -> typing.Optional[builtins.str]:
-            '''
+            '''The audience value to copy into your Microsoft Entra app registration's OIDC.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-openidconfiguration.html#cfn-pcaconnectorscep-connector-openidconfiguration-audience
             '''
             result = self._values.get("audience")
@@ -648,7 +681,8 @@ class CfnConnector(
 
         @builtins.property
         def issuer(self) -> typing.Optional[builtins.str]:
-            '''
+            '''The issuer value to copy into your Microsoft Entra app registration's OIDC.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-openidconfiguration.html#cfn-pcaconnectorscep-connector-openidconfiguration-issuer
             '''
             result = self._values.get("issuer")
@@ -656,7 +690,8 @@ class CfnConnector(
 
         @builtins.property
         def subject(self) -> typing.Optional[builtins.str]:
-            '''
+            '''The subject value to copy into your Microsoft Entra app registration's OIDC.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorscep-connector-openidconfiguration.html#cfn-pcaconnectorscep-connector-openidconfiguration-subject
             '''
             result = self._values.get("subject")
@@ -693,8 +728,8 @@ class CfnConnectorProps:
     ) -> None:
         '''Properties for defining a ``CfnConnector``.
 
-        :param certificate_authority_arn: 
-        :param mobile_device_management: 
+        :param certificate_authority_arn: The Amazon Resource Name (ARN) of the certificate authority associated with the connector.
+        :param mobile_device_management: Contains settings relevant to the mobile device management system that you chose for the connector. If you didn't configure ``MobileDeviceManagement`` , then the connector is for general-purpose use and this object is empty.
         :param tags: 
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-connector.html
@@ -736,7 +771,8 @@ class CfnConnectorProps:
 
     @builtins.property
     def certificate_authority_arn(self) -> builtins.str:
-        '''
+        '''The Amazon Resource Name (ARN) of the certificate authority associated with the connector.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-connector.html#cfn-pcaconnectorscep-connector-certificateauthorityarn
         '''
         result = self._values.get("certificate_authority_arn")
@@ -747,7 +783,10 @@ class CfnConnectorProps:
     def mobile_device_management(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnConnector.MobileDeviceManagementProperty]]:
-        '''
+        '''Contains settings relevant to the mobile device management system that you chose for the connector.
+
+        If you didn't configure ``MobileDeviceManagement`` , then the connector is for general-purpose use and this object is empty.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-connector.html#cfn-pcaconnectorscep-connector-mobiledevicemanagement
         '''
         result = self._values.get("mobile_device_management")

aws_cdk/aws_pipes/__init__.py

@@ -113,6 +113,7 @@ class CfnPipe(
                 ),
                 input_template="inputTemplate"
             ),
+            kms_key_identifier="kmsKeyIdentifier",
             log_configuration=pipes.CfnPipe.PipeLogConfigurationProperty(
                 cloudwatch_logs_log_destination=pipes.CfnPipe.CloudwatchLogsLogDestinationProperty(
                     log_group_arn="logGroupArn"
@@ -426,6 +427,7 @@ class CfnPipe(
         desired_state: typing.Optional[builtins.str] = None,
         enrichment: typing.Optional[builtins.str] = None,
         enrichment_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPipe.PipeEnrichmentParametersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        kms_key_identifier: typing.Optional[builtins.str] = None,
         log_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPipe.PipeLogConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
         source_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPipe.PipeSourceParametersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -442,6 +444,7 @@ class CfnPipe(
         :param desired_state: The state the pipe should be in.
         :param enrichment: The ARN of the enrichment resource.
         :param enrichment_parameters: The parameters required to set up enrichment on your pipe.
+        :param kms_key_identifier: The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt pipe data. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN. To update a pipe that is using the default AWS owned key to use a customer managed key instead, or update a pipe that is using a customer managed key to use a different customer managed key, specify a customer managed key identifier. To update a pipe that is using a customer managed key to use the default AWS owned key , specify an empty string. For more information, see `Managing keys <https://docs.aws.amazon.com/kms/latest/developerguide/getting-started.html>`_ in the *AWS Key Management Service Developer Guide* .
         :param log_configuration: The logging configuration settings for the pipe.
         :param name: The name of the pipe.
         :param source_parameters: The parameters required to set up a source for your pipe.
@@ -460,6 +463,7 @@ class CfnPipe(
             desired_state=desired_state,
             enrichment=enrichment,
             enrichment_parameters=enrichment_parameters,
+            kms_key_identifier=kms_key_identifier,
             log_configuration=log_configuration,
             name=name,
             source_parameters=source_parameters,
@@ -651,6 +655,19 @@ class CfnPipe(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "enrichmentParameters", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="kmsKeyIdentifier")
+    def kms_key_identifier(self) -> typing.Optional[builtins.str]:
+        '''The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt pipe data.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsKeyIdentifier"))
+
+    @kms_key_identifier.setter
+    def kms_key_identifier(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1052edd5ce80236ce4a971335ad896a6630839b27758cef9a2858368e2da759b)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "kmsKeyIdentifier", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="logConfiguration")
     def log_configuration(
@@ -7027,6 +7044,7 @@ class CfnPipe(
         "desired_state": "desiredState",
         "enrichment": "enrichment",
         "enrichment_parameters": "enrichmentParameters",
+        "kms_key_identifier": "kmsKeyIdentifier",
         "log_configuration": "logConfiguration",
         "name": "name",
         "source_parameters": "sourceParameters",
@@ -7045,6 +7063,7 @@ class CfnPipeProps:
         desired_state: typing.Optional[builtins.str] = None,
         enrichment: typing.Optional[builtins.str] = None,
         enrichment_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeEnrichmentParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        kms_key_identifier: typing.Optional[builtins.str] = None,
         log_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeLogConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
         source_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeSourceParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -7060,6 +7079,7 @@ class CfnPipeProps:
         :param desired_state: The state the pipe should be in.
         :param enrichment: The ARN of the enrichment resource.
         :param enrichment_parameters: The parameters required to set up enrichment on your pipe.
+        :param kms_key_identifier: The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt pipe data. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN. To update a pipe that is using the default AWS owned key to use a customer managed key instead, or update a pipe that is using a customer managed key to use a different customer managed key, specify a customer managed key identifier. To update a pipe that is using a customer managed key to use the default AWS owned key , specify an empty string. For more information, see `Managing keys <https://docs.aws.amazon.com/kms/latest/developerguide/getting-started.html>`_ in the *AWS Key Management Service Developer Guide* .
         :param log_configuration: The logging configuration settings for the pipe.
         :param name: The name of the pipe.
         :param source_parameters: The parameters required to set up a source for your pipe.
@@ -7096,6 +7116,7 @@ class CfnPipeProps:
                     ),
                     input_template="inputTemplate"
                 ),
+                kms_key_identifier="kmsKeyIdentifier",
                 log_configuration=pipes.CfnPipe.PipeLogConfigurationProperty(
                     cloudwatch_logs_log_destination=pipes.CfnPipe.CloudwatchLogsLogDestinationProperty(
                         log_group_arn="logGroupArn"
@@ -7405,6 +7426,7 @@ class CfnPipeProps:
             check_type(argname="argument desired_state", value=desired_state, expected_type=type_hints["desired_state"])
             check_type(argname="argument enrichment", value=enrichment, expected_type=type_hints["enrichment"])
             check_type(argname="argument enrichment_parameters", value=enrichment_parameters, expected_type=type_hints["enrichment_parameters"])
+            check_type(argname="argument kms_key_identifier", value=kms_key_identifier, expected_type=type_hints["kms_key_identifier"])
             check_type(argname="argument log_configuration", value=log_configuration, expected_type=type_hints["log_configuration"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
             check_type(argname="argument source_parameters", value=source_parameters, expected_type=type_hints["source_parameters"])
@@ -7423,6 +7445,8 @@ class CfnPipeProps:
             self._values["enrichment"] = enrichment
         if enrichment_parameters is not None:
             self._values["enrichment_parameters"] = enrichment_parameters
+        if kms_key_identifier is not None:
+            self._values["kms_key_identifier"] = kms_key_identifier
         if log_configuration is not None:
             self._values["log_configuration"] = log_configuration
         if name is not None:
@@ -7502,6 +7526,23 @@ class CfnPipeProps:
         result = self._values.get("enrichment_parameters")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnPipe.PipeEnrichmentParametersProperty]], result)
 
+    @builtins.property
+    def kms_key_identifier(self) -> typing.Optional[builtins.str]:
+        '''The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt pipe data.
+
+        The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.
+
+        To update a pipe that is using the default AWS owned key to use a customer managed key instead, or update a pipe that is using a customer managed key to use a different customer managed key, specify a customer managed key identifier.
+
+        To update a pipe that is using a customer managed key to use the default AWS owned key , specify an empty string.
+
+        For more information, see `Managing keys <https://docs.aws.amazon.com/kms/latest/developerguide/getting-started.html>`_ in the *AWS Key Management Service Developer Guide* .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pipes-pipe.html#cfn-pipes-pipe-kmskeyidentifier
+        '''
+        result = self._values.get("kms_key_identifier")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def log_configuration(
         self,
@@ -7585,6 +7626,7 @@ def _typecheckingstub__2590746a77e697feb25a71ec367eb957a7632f9fe5a46ae7e30476068
     desired_state: typing.Optional[builtins.str] = None,
     enrichment: typing.Optional[builtins.str] = None,
     enrichment_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeEnrichmentParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    kms_key_identifier: typing.Optional[builtins.str] = None,
     log_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeLogConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
     source_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeSourceParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -7648,6 +7690,12 @@ def _typecheckingstub__75aa67d8831c93b78f85f7319ad758289b207fec83baf9b92034cab44
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__1052edd5ce80236ce4a971335ad896a6630839b27758cef9a2858368e2da759b(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__3975e792335934f36dcb66bc10ba0ab93afe079dae88c2011a2bacc35a8fe756(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnPipe.PipeLogConfigurationProperty]],
 ) -> None:
@@ -8233,6 +8281,7 @@ def _typecheckingstub__f6a6720db1bd2e7acc178f6bd481fd8e3e740405a24c01b669c4c4595
     desired_state: typing.Optional[builtins.str] = None,
     enrichment: typing.Optional[builtins.str] = None,
     enrichment_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeEnrichmentParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    kms_key_identifier: typing.Optional[builtins.str] = None,
     log_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeLogConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
     source_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipe.PipeSourceParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,

aws_cdk/aws_qbusiness/__init__.py

@@ -169,7 +169,7 @@ class CfnApplication(
         :param identity_type: The authentication type being used by a Amazon Q Business application.
         :param personalization_configuration: Configuration information about chat response personalization. For more information, see `Personalizing chat responses <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html>`_ .
         :param q_apps_configuration: Configuration information about Amazon Q Apps.
-        :param role_arn: The Amazon Resource Name (ARN) of an IAM role with permissions to access your Amazon CloudWatch logs and metrics.
+        :param role_arn: The Amazon Resource Name (ARN) of an IAM role with permissions to access your Amazon CloudWatch logs and metrics. If this property is not specified, Amazon Q Business will create a `service linked role (SLR) <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/using-service-linked-roles.html#slr-permissions>`_ and use it as the application's role.
         :param tags: A list of key-value pairs that identify or categorize your Amazon Q Business application. You can also use tags to help control access to the application. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
         '''
         if __debug__:
@@ -832,7 +832,7 @@ class CfnApplicationProps:
         :param identity_type: The authentication type being used by a Amazon Q Business application.
         :param personalization_configuration: Configuration information about chat response personalization. For more information, see `Personalizing chat responses <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html>`_ .
         :param q_apps_configuration: Configuration information about Amazon Q Apps.
-        :param role_arn: The Amazon Resource Name (ARN) of an IAM role with permissions to access your Amazon CloudWatch logs and metrics.
+        :param role_arn: The Amazon Resource Name (ARN) of an IAM role with permissions to access your Amazon CloudWatch logs and metrics. If this property is not specified, Amazon Q Business will create a `service linked role (SLR) <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/using-service-linked-roles.html#slr-permissions>`_ and use it as the application's role.
         :param tags: A list of key-value pairs that identify or categorize your Amazon Q Business application. You can also use tags to help control access to the application. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-application.html
@@ -1040,6 +1040,8 @@ class CfnApplicationProps:
     def role_arn(self) -> typing.Optional[builtins.str]:
         '''The Amazon Resource Name (ARN) of an IAM role with permissions to access your Amazon CloudWatch logs and metrics.
 
+        If this property is not specified, Amazon Q Business will create a `service linked role (SLR) <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/using-service-linked-roles.html#slr-permissions>`_ and use it as the application's role.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-application.html#cfn-qbusiness-application-rolearn
         '''
         result = self._values.get("role_arn")
@@ -1195,7 +1197,7 @@ class CfnDataSource(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param application_id: The identifier of the Amazon Q Business application the data source will be attached to.
-        :param configuration: Configuration information to connect your data source repository to Amazon Q Business. Use this parameter to provide a JSON schema with configuration information specific to your data source connector. Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas: - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_ You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice. - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
+        :param configuration: Use this property to specify a JSON or YAML schema with configuration information specific to your data source connector to connect your data source repository to Amazon Q Business . You must use the JSON or YAML schema provided by Amazon Q . You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source connector of your choice. - Then, from that specific data source connector's page, select *Using AWS CloudFormation* to find the schemas for your data source connector, including parameter descriptions and examples.
         :param display_name: The name of the Amazon Q Business data source.
         :param index_id: The identifier of the index the data source is attached to.
         :param description: A description for the data source connector.
@@ -1335,7 +1337,7 @@ class CfnDataSource(
     @builtins.property
     @jsii.member(jsii_name="configuration")
     def configuration(self) -> typing.Any:
-        '''Configuration information to connect your data source repository to Amazon Q Business.'''
+        '''Use this property to specify a JSON or YAML schema with configuration information specific to your data source connector to connect your data source repository to Amazon Q Business .'''
         return typing.cast(typing.Any, jsii.get(self, "configuration"))
 
     @configuration.setter
@@ -2315,7 +2317,7 @@ class CfnDataSourceProps:
         '''Properties for defining a ``CfnDataSource``.
 
         :param application_id: The identifier of the Amazon Q Business application the data source will be attached to.
-        :param configuration: Configuration information to connect your data source repository to Amazon Q Business. Use this parameter to provide a JSON schema with configuration information specific to your data source connector. Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas: - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_ You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice. - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
+        :param configuration: Use this property to specify a JSON or YAML schema with configuration information specific to your data source connector to connect your data source repository to Amazon Q Business . You must use the JSON or YAML schema provided by Amazon Q . You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source connector of your choice. - Then, from that specific data source connector's page, select *Using AWS CloudFormation* to find the schemas for your data source connector, including parameter descriptions and examples.
         :param display_name: The name of the Amazon Q Business data source.
         :param index_id: The identifier of the index the data source is attached to.
         :param description: A description for the data source connector.
@@ -2462,19 +2464,14 @@ class CfnDataSourceProps:
 
     @builtins.property
     def configuration(self) -> typing.Any:
-        '''Configuration information to connect your data source repository to Amazon Q Business.
-
-        Use this parameter to provide a JSON schema with configuration information specific to your data source connector.
-
-        Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas:
+        '''Use this property to specify a JSON or YAML schema with configuration information specific to your data source connector to connect your data source repository to Amazon Q Business .
 
-        - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_
-        - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_
+        You must use the JSON or YAML schema provided by Amazon Q .
 
         You can find configuration templates for your specific data source using the following steps:
 
-        - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice.
-        - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
+        - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source connector of your choice.
+        - Then, from that specific data source connector's page, select *Using AWS CloudFormation* to find the schemas for your data source connector, including parameter descriptions and examples.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-datasource.html#cfn-qbusiness-datasource-configuration
         '''