aws-cdk-lib 2.160.0__py3-none-any.whl → 2.161.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (51) hide show
  1. aws_cdk/__init__.py +21 -14
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.160.0.jsii.tgz → aws-cdk-lib@2.161.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_apigatewayv2/__init__.py +13 -14
  5. aws_cdk/aws_autoscaling/__init__.py +2 -2
  6. aws_cdk/aws_b2bi/__init__.py +2283 -672
  7. aws_cdk/aws_batch/__init__.py +9 -5
  8. aws_cdk/aws_bedrock/__init__.py +52 -20
  9. aws_cdk/aws_cloudformation/__init__.py +9 -9
  10. aws_cdk/aws_cloudtrail/__init__.py +97 -183
  11. aws_cdk/aws_cloudwatch/__init__.py +38 -42
  12. aws_cdk/aws_datasync/__init__.py +1 -1
  13. aws_cdk/aws_ec2/__init__.py +114 -8
  14. aws_cdk/aws_ecs/__init__.py +513 -2
  15. aws_cdk/aws_eks/__init__.py +118 -2
  16. aws_cdk/aws_elasticloadbalancingv2/__init__.py +5 -3
  17. aws_cdk/aws_glue/__init__.py +386 -0
  18. aws_cdk/aws_iotfleetwise/__init__.py +49 -49
  19. aws_cdk/aws_iottwinmaker/__init__.py +4 -4
  20. aws_cdk/aws_iotwireless/__init__.py +2 -1
  21. aws_cdk/aws_kinesisfirehose/__init__.py +52 -76
  22. aws_cdk/aws_lambda/__init__.py +383 -244
  23. aws_cdk/aws_logs/__init__.py +431 -3
  24. aws_cdk/aws_mediaconnect/__init__.py +6 -4
  25. aws_cdk/aws_medialive/__init__.py +36 -0
  26. aws_cdk/aws_organizations/__init__.py +4 -3
  27. aws_cdk/aws_pipes/__init__.py +2 -2
  28. aws_cdk/aws_quicksight/__init__.py +1086 -6
  29. aws_cdk/aws_rds/__init__.py +158 -3
  30. aws_cdk/aws_route53resolver/__init__.py +3 -17
  31. aws_cdk/aws_s3/__init__.py +20 -11
  32. aws_cdk/aws_s3_deployment/__init__.py +45 -0
  33. aws_cdk/aws_s3express/__init__.py +314 -4
  34. aws_cdk/aws_sagemaker/__init__.py +44 -4
  35. aws_cdk/aws_secretsmanager/__init__.py +14 -7
  36. aws_cdk/aws_securityhub/__init__.py +16 -14
  37. aws_cdk/aws_ses/__init__.py +52 -18
  38. aws_cdk/aws_sqs/__init__.py +16 -14
  39. aws_cdk/aws_ssm/__init__.py +6 -2
  40. aws_cdk/aws_synthetics/__init__.py +46 -0
  41. aws_cdk/aws_waf/__init__.py +33 -22
  42. aws_cdk/aws_wafregional/__init__.py +36 -24
  43. aws_cdk/aws_workspacesweb/__init__.py +54 -3
  44. aws_cdk/cloudformation_include/__init__.py +28 -0
  45. aws_cdk/cx_api/__init__.py +50 -0
  46. {aws_cdk_lib-2.160.0.dist-info → aws_cdk_lib-2.161.0.dist-info}/METADATA +1 -1
  47. {aws_cdk_lib-2.160.0.dist-info → aws_cdk_lib-2.161.0.dist-info}/RECORD +51 -51
  48. {aws_cdk_lib-2.160.0.dist-info → aws_cdk_lib-2.161.0.dist-info}/LICENSE +0 -0
  49. {aws_cdk_lib-2.160.0.dist-info → aws_cdk_lib-2.161.0.dist-info}/NOTICE +0 -0
  50. {aws_cdk_lib-2.160.0.dist-info → aws_cdk_lib-2.161.0.dist-info}/WHEEL +0 -0
  51. {aws_cdk_lib-2.160.0.dist-info → aws_cdk_lib-2.161.0.dist-info}/top_level.txt +0 -0
@@ -191,7 +191,7 @@ class CfnQueue(
191
191
  - If you delete a queue, you must wait at least 60 seconds before creating a queue with the same name.
192
192
  - To successfully create a new queue, you must provide a queue name that adheres to the `limits related to queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/limits-queues.html>`_ and is unique within the scope of your queues.
193
193
 
194
- For more information about creating FIFO (first-in-first-out) queues, see `Creating an Amazon SQS queue ( AWS CloudFormation ) <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/screate-queue-cloudformation.html>`_ in the *Amazon SQS Developer Guide* .
194
+ For more information about creating FIFO (first-in-first-out) queues, see `Creating an Amazon SQS queue ( AWS CloudFormation ) <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/create-queue-cloudformation.html>`_ in the *Amazon SQS Developer Guide* .
195
195
 
196
196
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html
197
197
  :cloudformationResource: AWS::SQS::Queue
@@ -257,13 +257,13 @@ class CfnQueue(
257
257
  :param content_based_deduplication: For first-in-first-out (FIFO) queues, specifies whether to enable content-based deduplication. During the deduplication interval, Amazon SQS treats messages that are sent with identical content as duplicates and delivers only one copy of the message. For more information, see the ``ContentBasedDeduplication`` attribute for the ``[CreateQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html)`` action in the *Amazon SQS API Reference* .
258
258
  :param deduplication_scope: For high throughput for FIFO queues, specifies whether message deduplication occurs at the message group or queue level. Valid values are ``messageGroup`` and ``queue`` . To enable high throughput for a FIFO queue, set this attribute to ``messageGroup`` *and* set the ``FifoThroughputLimit`` attribute to ``perMessageGroupId`` . If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see `High throughput for FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html>`_ and `Quotas related to messages <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html>`_ in the *Amazon SQS Developer Guide* .
259
259
  :param delay_seconds: The time in seconds for which the delivery of all messages in the queue is delayed. You can specify an integer value of ``0`` to ``900`` (15 minutes). The default value is ``0`` .
260
- :param fifo_queue: If set to true, creates a FIFO queue. If you don't specify this property, Amazon SQS creates a standard queue. For more information, see `FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html>`_ in the *Amazon SQS Developer Guide* .
260
+ :param fifo_queue: If set to true, creates a FIFO queue. If you don't specify this property, Amazon SQS creates a standard queue. For more information, see `Amazon SQS FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-fifo-queues.html>`_ in the *Amazon SQS Developer Guide* .
261
261
  :param fifo_throughput_limit: For high throughput for FIFO queues, specifies whether the FIFO queue throughput quota applies to the entire queue or per message group. Valid values are ``perQueue`` and ``perMessageGroupId`` . To enable high throughput for a FIFO queue, set this attribute to ``perMessageGroupId`` *and* set the ``DeduplicationScope`` attribute to ``messageGroup`` . If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see `High throughput for FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html>`_ and `Quotas related to messages <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html>`_ in the *Amazon SQS Developer Guide* .
262
262
  :param kms_data_key_reuse_period_seconds: The length of time in seconds for which Amazon SQS can reuse a data key to encrypt or decrypt messages before calling AWS KMS again. The value must be an integer between 60 (1 minute) and 86,400 (24 hours). The default is 300 (5 minutes). .. epigraph:: A shorter time period provides better security, but results in more calls to AWS KMS , which might incur charges after Free Tier. For more information, see `Encryption at rest <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html#sqs-how-does-the-data-key-reuse-period-work>`_ in the *Amazon SQS Developer Guide* .
263
- :param kms_master_key_id: The ID of an AWS Key Management Service (KMS) for Amazon SQS , or a custom KMS. To use the AWS managed KMS for Amazon SQS , specify a (default) alias ARN, alias name (e.g. ``alias/aws/sqs`` ), key ARN, or key ID. For more information, see the following: - `Encryption at rest <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html>`_ in the *Amazon SQS Developer Guide* - `CreateQueue <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html>`_ in the *Amazon SQS API Reference* - `Request Parameters <https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters>`_ in the *AWS Key Management Service API Reference* - The Key Management Service (KMS) section of the `AWS Key Management Service Best Practices <https://docs.aws.amazon.com/https://d0.awsstatic.com/whitepapers/aws-kms-best-practices.pdf>`_ whitepaper
263
+ :param kms_master_key_id: The ID of an AWS Key Management Service (KMS) for Amazon SQS , or a custom KMS. To use the AWS managed KMS for Amazon SQS , specify a (default) alias ARN, alias name (for example ``alias/aws/sqs`` ), key ARN, or key ID. For more information, see the following: - `Encryption at rest <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html>`_ in the *Amazon SQS Developer Guide* - `CreateQueue <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html>`_ in the *Amazon SQS API Reference* - `Request Parameters <https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters>`_ in the *AWS Key Management Service API Reference* - The Key Management Service (KMS) section of the `Security best practices for AWS Key Management Service <https://docs.aws.amazon.com/kms/latest/developerguide/best-practices.html>`_ in the *AWS Key Management Service Developer Guide*
264
264
  :param maximum_message_size: The limit of how many bytes that a message can contain before Amazon SQS rejects it. You can specify an integer value from ``1,024`` bytes (1 KiB) to ``262,144`` bytes (256 KiB). The default value is ``262,144`` (256 KiB).
265
265
  :param message_retention_period: The number of seconds that Amazon SQS retains a message. You can specify an integer value from ``60`` seconds (1 minute) to ``1,209,600`` seconds (14 days). The default value is ``345,600`` seconds (4 days).
266
- :param queue_name: A name for the queue. To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see `FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html>`_ in the *Amazon SQS Developer Guide* . If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the queue name. For more information, see `Name type <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html>`_ in the *AWS CloudFormation User Guide* . .. epigraph:: If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
266
+ :param queue_name: A name for the queue. To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see `Amazon SQS FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-fifo-queues.html>`_ in the *Amazon SQS Developer Guide* . If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the queue name. For more information, see `Name type <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html>`_ in the *AWS CloudFormation User Guide* . .. epigraph:: If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
267
267
  :param receive_message_wait_time_seconds: Specifies the duration, in seconds, that the ReceiveMessage action call waits until a message is in the queue in order to include it in the response, rather than returning an empty response if a message isn't yet available. You can specify an integer from 1 to 20. Short polling is used as the default or when you specify 0 for this property. For more information, see `Consuming messages using long polling <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-short-and-long-polling.html#sqs-long-polling>`_ in the *Amazon SQS Developer Guide* .
268
268
  :param redrive_allow_policy: The string that includes the parameters for the permissions for the dead-letter queue redrive permission and which source queues can specify dead-letter queues as a JSON object. The parameters are as follows: - ``redrivePermission`` : The permission type that defines which source queues can specify the current queue as the dead-letter queue. Valid values are: - ``allowAll`` : (Default) Any source queues in this AWS account in the same Region can specify this queue as the dead-letter queue. - ``denyAll`` : No source queues can specify this queue as the dead-letter queue. - ``byQueue`` : Only queues specified by the ``sourceQueueArns`` parameter can specify this queue as the dead-letter queue. - ``sourceQueueArns`` : The Amazon Resource Names (ARN)s of the source queues that can specify this queue as the dead-letter queue and redrive messages. You can specify this parameter only when the ``redrivePermission`` parameter is set to ``byQueue`` . You can specify up to 10 source queue ARNs. To allow more than 10 source queues to specify dead-letter queues, set the ``redrivePermission`` parameter to ``allowAll`` .
269
269
  :param redrive_policy: The string that includes the parameters for the dead-letter queue functionality of the source queue as a JSON object. The parameters are as follows: - ``deadLetterTargetArn`` : The Amazon Resource Name (ARN) of the dead-letter queue to which Amazon SQS moves messages after the value of ``maxReceiveCount`` is exceeded. - ``maxReceiveCount`` : The number of times a message is received by a consumer of the source queue before being moved to the dead-letter queue. When the ``ReceiveCount`` for a message exceeds the ``maxReceiveCount`` for a queue, Amazon SQS moves the message to the dead-letter-queue. .. epigraph:: The dead-letter queue of a FIFO queue must also be a FIFO queue. Similarly, the dead-letter queue of a standard queue must also be a standard queue. *JSON* ``{ "deadLetterTargetArn" : *String* , "maxReceiveCount" : *Integer* }`` *YAML* ``deadLetterTargetArn : *String*`` ``maxReceiveCount : *Integer*``
@@ -1028,13 +1028,13 @@ class CfnQueueProps:
1028
1028
  :param content_based_deduplication: For first-in-first-out (FIFO) queues, specifies whether to enable content-based deduplication. During the deduplication interval, Amazon SQS treats messages that are sent with identical content as duplicates and delivers only one copy of the message. For more information, see the ``ContentBasedDeduplication`` attribute for the ``[CreateQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html)`` action in the *Amazon SQS API Reference* .
1029
1029
  :param deduplication_scope: For high throughput for FIFO queues, specifies whether message deduplication occurs at the message group or queue level. Valid values are ``messageGroup`` and ``queue`` . To enable high throughput for a FIFO queue, set this attribute to ``messageGroup`` *and* set the ``FifoThroughputLimit`` attribute to ``perMessageGroupId`` . If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see `High throughput for FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html>`_ and `Quotas related to messages <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html>`_ in the *Amazon SQS Developer Guide* .
1030
1030
  :param delay_seconds: The time in seconds for which the delivery of all messages in the queue is delayed. You can specify an integer value of ``0`` to ``900`` (15 minutes). The default value is ``0`` .
1031
- :param fifo_queue: If set to true, creates a FIFO queue. If you don't specify this property, Amazon SQS creates a standard queue. For more information, see `FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html>`_ in the *Amazon SQS Developer Guide* .
1031
+ :param fifo_queue: If set to true, creates a FIFO queue. If you don't specify this property, Amazon SQS creates a standard queue. For more information, see `Amazon SQS FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-fifo-queues.html>`_ in the *Amazon SQS Developer Guide* .
1032
1032
  :param fifo_throughput_limit: For high throughput for FIFO queues, specifies whether the FIFO queue throughput quota applies to the entire queue or per message group. Valid values are ``perQueue`` and ``perMessageGroupId`` . To enable high throughput for a FIFO queue, set this attribute to ``perMessageGroupId`` *and* set the ``DeduplicationScope`` attribute to ``messageGroup`` . If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see `High throughput for FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html>`_ and `Quotas related to messages <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html>`_ in the *Amazon SQS Developer Guide* .
1033
1033
  :param kms_data_key_reuse_period_seconds: The length of time in seconds for which Amazon SQS can reuse a data key to encrypt or decrypt messages before calling AWS KMS again. The value must be an integer between 60 (1 minute) and 86,400 (24 hours). The default is 300 (5 minutes). .. epigraph:: A shorter time period provides better security, but results in more calls to AWS KMS , which might incur charges after Free Tier. For more information, see `Encryption at rest <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html#sqs-how-does-the-data-key-reuse-period-work>`_ in the *Amazon SQS Developer Guide* .
1034
- :param kms_master_key_id: The ID of an AWS Key Management Service (KMS) for Amazon SQS , or a custom KMS. To use the AWS managed KMS for Amazon SQS , specify a (default) alias ARN, alias name (e.g. ``alias/aws/sqs`` ), key ARN, or key ID. For more information, see the following: - `Encryption at rest <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html>`_ in the *Amazon SQS Developer Guide* - `CreateQueue <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html>`_ in the *Amazon SQS API Reference* - `Request Parameters <https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters>`_ in the *AWS Key Management Service API Reference* - The Key Management Service (KMS) section of the `AWS Key Management Service Best Practices <https://docs.aws.amazon.com/https://d0.awsstatic.com/whitepapers/aws-kms-best-practices.pdf>`_ whitepaper
1034
+ :param kms_master_key_id: The ID of an AWS Key Management Service (KMS) for Amazon SQS , or a custom KMS. To use the AWS managed KMS for Amazon SQS , specify a (default) alias ARN, alias name (for example ``alias/aws/sqs`` ), key ARN, or key ID. For more information, see the following: - `Encryption at rest <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html>`_ in the *Amazon SQS Developer Guide* - `CreateQueue <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html>`_ in the *Amazon SQS API Reference* - `Request Parameters <https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters>`_ in the *AWS Key Management Service API Reference* - The Key Management Service (KMS) section of the `Security best practices for AWS Key Management Service <https://docs.aws.amazon.com/kms/latest/developerguide/best-practices.html>`_ in the *AWS Key Management Service Developer Guide*
1035
1035
  :param maximum_message_size: The limit of how many bytes that a message can contain before Amazon SQS rejects it. You can specify an integer value from ``1,024`` bytes (1 KiB) to ``262,144`` bytes (256 KiB). The default value is ``262,144`` (256 KiB).
1036
1036
  :param message_retention_period: The number of seconds that Amazon SQS retains a message. You can specify an integer value from ``60`` seconds (1 minute) to ``1,209,600`` seconds (14 days). The default value is ``345,600`` seconds (4 days).
1037
- :param queue_name: A name for the queue. To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see `FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html>`_ in the *Amazon SQS Developer Guide* . If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the queue name. For more information, see `Name type <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html>`_ in the *AWS CloudFormation User Guide* . .. epigraph:: If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
1037
+ :param queue_name: A name for the queue. To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see `Amazon SQS FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-fifo-queues.html>`_ in the *Amazon SQS Developer Guide* . If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the queue name. For more information, see `Name type <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html>`_ in the *AWS CloudFormation User Guide* . .. epigraph:: If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
1038
1038
  :param receive_message_wait_time_seconds: Specifies the duration, in seconds, that the ReceiveMessage action call waits until a message is in the queue in order to include it in the response, rather than returning an empty response if a message isn't yet available. You can specify an integer from 1 to 20. Short polling is used as the default or when you specify 0 for this property. For more information, see `Consuming messages using long polling <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-short-and-long-polling.html#sqs-long-polling>`_ in the *Amazon SQS Developer Guide* .
1039
1039
  :param redrive_allow_policy: The string that includes the parameters for the permissions for the dead-letter queue redrive permission and which source queues can specify dead-letter queues as a JSON object. The parameters are as follows: - ``redrivePermission`` : The permission type that defines which source queues can specify the current queue as the dead-letter queue. Valid values are: - ``allowAll`` : (Default) Any source queues in this AWS account in the same Region can specify this queue as the dead-letter queue. - ``denyAll`` : No source queues can specify this queue as the dead-letter queue. - ``byQueue`` : Only queues specified by the ``sourceQueueArns`` parameter can specify this queue as the dead-letter queue. - ``sourceQueueArns`` : The Amazon Resource Names (ARN)s of the source queues that can specify this queue as the dead-letter queue and redrive messages. You can specify this parameter only when the ``redrivePermission`` parameter is set to ``byQueue`` . You can specify up to 10 source queue ARNs. To allow more than 10 source queues to specify dead-letter queues, set the ``redrivePermission`` parameter to ``allowAll`` .
1040
1040
  :param redrive_policy: The string that includes the parameters for the dead-letter queue functionality of the source queue as a JSON object. The parameters are as follows: - ``deadLetterTargetArn`` : The Amazon Resource Name (ARN) of the dead-letter queue to which Amazon SQS moves messages after the value of ``maxReceiveCount`` is exceeded. - ``maxReceiveCount`` : The number of times a message is received by a consumer of the source queue before being moved to the dead-letter queue. When the ``ReceiveCount`` for a message exceeds the ``maxReceiveCount`` for a queue, Amazon SQS moves the message to the dead-letter-queue. .. epigraph:: The dead-letter queue of a FIFO queue must also be a FIFO queue. Similarly, the dead-letter queue of a standard queue must also be a standard queue. *JSON* ``{ "deadLetterTargetArn" : *String* , "maxReceiveCount" : *Integer* }`` *YAML* ``deadLetterTargetArn : *String*`` ``maxReceiveCount : *Integer*``
@@ -1171,7 +1171,7 @@ class CfnQueueProps:
1171
1171
  ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
1172
1172
  '''If set to true, creates a FIFO queue.
1173
1173
 
1174
- If you don't specify this property, Amazon SQS creates a standard queue. For more information, see `FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html>`_ in the *Amazon SQS Developer Guide* .
1174
+ If you don't specify this property, Amazon SQS creates a standard queue. For more information, see `Amazon SQS FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-fifo-queues.html>`_ in the *Amazon SQS Developer Guide* .
1175
1175
 
1176
1176
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html#cfn-sqs-queue-fifoqueue
1177
1177
  '''
@@ -1209,12 +1209,12 @@ class CfnQueueProps:
1209
1209
  def kms_master_key_id(self) -> typing.Optional[builtins.str]:
1210
1210
  '''The ID of an AWS Key Management Service (KMS) for Amazon SQS , or a custom KMS.
1211
1211
 
1212
- To use the AWS managed KMS for Amazon SQS , specify a (default) alias ARN, alias name (e.g. ``alias/aws/sqs`` ), key ARN, or key ID. For more information, see the following:
1212
+ To use the AWS managed KMS for Amazon SQS , specify a (default) alias ARN, alias name (for example ``alias/aws/sqs`` ), key ARN, or key ID. For more information, see the following:
1213
1213
 
1214
1214
  - `Encryption at rest <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html>`_ in the *Amazon SQS Developer Guide*
1215
1215
  - `CreateQueue <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html>`_ in the *Amazon SQS API Reference*
1216
1216
  - `Request Parameters <https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters>`_ in the *AWS Key Management Service API Reference*
1217
- - The Key Management Service (KMS) section of the `AWS Key Management Service Best Practices <https://docs.aws.amazon.com/https://d0.awsstatic.com/whitepapers/aws-kms-best-practices.pdf>`_ whitepaper
1217
+ - The Key Management Service (KMS) section of the `Security best practices for AWS Key Management Service <https://docs.aws.amazon.com/kms/latest/developerguide/best-practices.html>`_ in the *AWS Key Management Service Developer Guide*
1218
1218
 
1219
1219
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html#cfn-sqs-queue-kmsmasterkeyid
1220
1220
  '''
@@ -1247,7 +1247,7 @@ class CfnQueueProps:
1247
1247
  def queue_name(self) -> typing.Optional[builtins.str]:
1248
1248
  '''A name for the queue.
1249
1249
 
1250
- To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see `FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html>`_ in the *Amazon SQS Developer Guide* .
1250
+ To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see `Amazon SQS FIFO queues <https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-fifo-queues.html>`_ in the *Amazon SQS Developer Guide* .
1251
1251
 
1252
1252
  If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the queue name. For more information, see `Name type <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html>`_ in the *AWS CloudFormation User Guide* .
1253
1253
  .. epigraph::
@@ -3830,11 +3830,13 @@ class Queue(QueueBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sqs.Q
3830
3830
  Example::
3831
3831
 
3832
3832
  # source_queue: sqs.Queue
3833
- # target_function: lambda.IFunction
3833
+ # target_queue: sqs.Queue
3834
3834
 
3835
3835
 
3836
- pipe_target = targets.LambdaFunction(target_function,
3837
- input_transformation=pipes.InputTransformation.from_object({"body": "👀"})
3836
+ pipe_target = targets.SqsTarget(target_queue,
3837
+ input_transformation=pipes.InputTransformation.from_object({
3838
+ "SomeKey": pipes.DynamicInput.from_event_path("$.body")
3839
+ })
3838
3840
  )
3839
3841
 
3840
3842
  pipe = pipes.Pipe(self, "Pipe",
@@ -5260,7 +5260,7 @@ class CfnPatchBaseline(
5260
5260
  :param approved_patches_enable_non_security: Indicates whether the list of approved patches includes non-security updates that should be applied to the managed nodes. The default value is ``false`` . Applies to Linux managed nodes only. Default: - false
5261
5261
  :param default_baseline: Set the baseline as default baseline. Only registering to default patch baseline is allowed. Default: - false
5262
5262
  :param description: A description of the patch baseline.
5263
- :param global_filters: A set of global filters used to include patches in the baseline.
5263
+ :param global_filters: A set of global filters used to include patches in the baseline. .. epigraph:: The ``GlobalFilters`` parameter can be configured only by using the AWS CLI or an AWS SDK. It can't be configured from the Patch Manager console, and its value isn't displayed in the console.
5264
5264
  :param operating_system: Defines the operating system the patch baseline applies to. The default value is ``WINDOWS`` . Default: - "WINDOWS"
5265
5265
  :param patch_groups: The name of the patch group to be registered with the patch baseline.
5266
5266
  :param rejected_patches: A list of explicitly rejected patches for the baseline. For information about accepted formats for lists of approved patches and rejected patches, see `Package name formats for approved and rejected patch lists <https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-approved-rejected-package-name-formats.html>`_ in the *AWS Systems Manager User Guide* .
@@ -6076,7 +6076,7 @@ class CfnPatchBaselineProps:
6076
6076
  :param approved_patches_enable_non_security: Indicates whether the list of approved patches includes non-security updates that should be applied to the managed nodes. The default value is ``false`` . Applies to Linux managed nodes only. Default: - false
6077
6077
  :param default_baseline: Set the baseline as default baseline. Only registering to default patch baseline is allowed. Default: - false
6078
6078
  :param description: A description of the patch baseline.
6079
- :param global_filters: A set of global filters used to include patches in the baseline.
6079
+ :param global_filters: A set of global filters used to include patches in the baseline. .. epigraph:: The ``GlobalFilters`` parameter can be configured only by using the AWS CLI or an AWS SDK. It can't be configured from the Patch Manager console, and its value isn't displayed in the console.
6080
6080
  :param operating_system: Defines the operating system the patch baseline applies to. The default value is ``WINDOWS`` . Default: - "WINDOWS"
6081
6081
  :param patch_groups: The name of the patch group to be registered with the patch baseline.
6082
6082
  :param rejected_patches: A list of explicitly rejected patches for the baseline. For information about accepted formats for lists of approved patches and rejected patches, see `Package name formats for approved and rejected patch lists <https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-approved-rejected-package-name-formats.html>`_ in the *AWS Systems Manager User Guide* .
@@ -6273,6 +6273,10 @@ class CfnPatchBaselineProps:
6273
6273
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnPatchBaseline.PatchFilterGroupProperty]]:
6274
6274
  '''A set of global filters used to include patches in the baseline.
6275
6275
 
6276
+ .. epigraph::
6277
+
6278
+ The ``GlobalFilters`` parameter can be configured only by using the AWS CLI or an AWS SDK. It can't be configured from the Patch Manager console, and its value isn't displayed in the console.
6279
+
6276
6280
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-globalfilters
6277
6281
  '''
6278
6282
  result = self._values.get("global_filters")
@@ -1183,6 +1183,7 @@ class CfnCanary(
1183
1183
  ),
1184
1184
  delete_lambda_resources_on_canary_deletion=False,
1185
1185
  failure_retention_period=123,
1186
+ resources_to_replicate_tags=["resourcesToReplicateTags"],
1186
1187
  run_config=synthetics.CfnCanary.RunConfigProperty(
1187
1188
  active_tracing=False,
1188
1189
  environment_variables={
@@ -1232,6 +1233,7 @@ class CfnCanary(
1232
1233
  artifact_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCanary.ArtifactConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
1233
1234
  delete_lambda_resources_on_canary_deletion: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
1234
1235
  failure_retention_period: typing.Optional[jsii.Number] = None,
1236
+ resources_to_replicate_tags: typing.Optional[typing.Sequence[builtins.str]] = None,
1235
1237
  run_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCanary.RunConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
1236
1238
  start_canary_after_creation: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
1237
1239
  success_retention_period: typing.Optional[jsii.Number] = None,
@@ -1251,6 +1253,7 @@ class CfnCanary(
1251
1253
  :param artifact_config: A structure that contains the configuration for canary artifacts, including the encryption-at-rest settings for artifacts that the canary uploads to Amazon S3.
1252
1254
  :param delete_lambda_resources_on_canary_deletion: (deprecated) Deletes associated lambda resources created by Synthetics if set to True. Default is False
1253
1255
  :param failure_retention_period: The number of days to retain data about failed runs of this canary. If you omit this field, the default of 31 days is used. The valid range is 1 to 455 days.
1256
+ :param resources_to_replicate_tags: To have the tags that you apply to this canary also be applied to the Lambda function that the canary uses, specify this property with the value ``lambda-function`` . If you do this, CloudWatch Synthetics will keep the tags of the canary and the Lambda function synchronized. Any future changes you make to the canary's tags will also be applied to the function.
1254
1257
  :param run_config: A structure that contains input information for a canary run. If you omit this structure, the frequency of the canary is used as canary's timeout value, up to a maximum of 900 seconds.
1255
1258
  :param start_canary_after_creation: Specify TRUE to have the canary start making runs immediately after it is created. A canary that you create using CloudFormation can't be used to monitor the CloudFormation stack that creates the canary or to roll back that stack if there is a failure.
1256
1259
  :param success_retention_period: The number of days to retain data about successful runs of this canary. If you omit this field, the default of 31 days is used. The valid range is 1 to 455 days.
@@ -1272,6 +1275,7 @@ class CfnCanary(
1272
1275
  artifact_config=artifact_config,
1273
1276
  delete_lambda_resources_on_canary_deletion=delete_lambda_resources_on_canary_deletion,
1274
1277
  failure_retention_period=failure_retention_period,
1278
+ resources_to_replicate_tags=resources_to_replicate_tags,
1275
1279
  run_config=run_config,
1276
1280
  start_canary_after_creation=start_canary_after_creation,
1277
1281
  success_retention_period=success_retention_period,
@@ -1492,6 +1496,22 @@ class CfnCanary(
1492
1496
  check_type(argname="argument value", value=value, expected_type=type_hints["value"])
1493
1497
  jsii.set(self, "failureRetentionPeriod", value) # pyright: ignore[reportArgumentType]
1494
1498
 
1499
+ @builtins.property
1500
+ @jsii.member(jsii_name="resourcesToReplicateTags")
1501
+ def resources_to_replicate_tags(self) -> typing.Optional[typing.List[builtins.str]]:
1502
+ '''To have the tags that you apply to this canary also be applied to the Lambda function that the canary uses, specify this property with the value ``lambda-function`` .'''
1503
+ return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "resourcesToReplicateTags"))
1504
+
1505
+ @resources_to_replicate_tags.setter
1506
+ def resources_to_replicate_tags(
1507
+ self,
1508
+ value: typing.Optional[typing.List[builtins.str]],
1509
+ ) -> None:
1510
+ if __debug__:
1511
+ type_hints = typing.get_type_hints(_typecheckingstub__97145dbcbdc52baa9bf7a42cbdc47e51d64c8bdad34335923fcf585d09e27978)
1512
+ check_type(argname="argument value", value=value, expected_type=type_hints["value"])
1513
+ jsii.set(self, "resourcesToReplicateTags", value) # pyright: ignore[reportArgumentType]
1514
+
1495
1515
  @builtins.property
1496
1516
  @jsii.member(jsii_name="runConfig")
1497
1517
  def run_config(
@@ -2370,6 +2390,7 @@ class CfnCanary(
2370
2390
  "artifact_config": "artifactConfig",
2371
2391
  "delete_lambda_resources_on_canary_deletion": "deleteLambdaResourcesOnCanaryDeletion",
2372
2392
  "failure_retention_period": "failureRetentionPeriod",
2393
+ "resources_to_replicate_tags": "resourcesToReplicateTags",
2373
2394
  "run_config": "runConfig",
2374
2395
  "start_canary_after_creation": "startCanaryAfterCreation",
2375
2396
  "success_retention_period": "successRetentionPeriod",
@@ -2391,6 +2412,7 @@ class CfnCanaryProps:
2391
2412
  artifact_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCanary.ArtifactConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
2392
2413
  delete_lambda_resources_on_canary_deletion: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
2393
2414
  failure_retention_period: typing.Optional[jsii.Number] = None,
2415
+ resources_to_replicate_tags: typing.Optional[typing.Sequence[builtins.str]] = None,
2394
2416
  run_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCanary.RunConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
2395
2417
  start_canary_after_creation: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
2396
2418
  success_retention_period: typing.Optional[jsii.Number] = None,
@@ -2409,6 +2431,7 @@ class CfnCanaryProps:
2409
2431
  :param artifact_config: A structure that contains the configuration for canary artifacts, including the encryption-at-rest settings for artifacts that the canary uploads to Amazon S3.
2410
2432
  :param delete_lambda_resources_on_canary_deletion: (deprecated) Deletes associated lambda resources created by Synthetics if set to True. Default is False
2411
2433
  :param failure_retention_period: The number of days to retain data about failed runs of this canary. If you omit this field, the default of 31 days is used. The valid range is 1 to 455 days.
2434
+ :param resources_to_replicate_tags: To have the tags that you apply to this canary also be applied to the Lambda function that the canary uses, specify this property with the value ``lambda-function`` . If you do this, CloudWatch Synthetics will keep the tags of the canary and the Lambda function synchronized. Any future changes you make to the canary's tags will also be applied to the function.
2412
2435
  :param run_config: A structure that contains input information for a canary run. If you omit this structure, the frequency of the canary is used as canary's timeout value, up to a maximum of 900 seconds.
2413
2436
  :param start_canary_after_creation: Specify TRUE to have the canary start making runs immediately after it is created. A canary that you create using CloudFormation can't be used to monitor the CloudFormation stack that creates the canary or to roll back that stack if there is a failure.
2414
2437
  :param success_retention_period: The number of days to retain data about successful runs of this canary. If you omit this field, the default of 31 days is used. The valid range is 1 to 455 days.
@@ -2456,6 +2479,7 @@ class CfnCanaryProps:
2456
2479
  ),
2457
2480
  delete_lambda_resources_on_canary_deletion=False,
2458
2481
  failure_retention_period=123,
2482
+ resources_to_replicate_tags=["resourcesToReplicateTags"],
2459
2483
  run_config=synthetics.CfnCanary.RunConfigProperty(
2460
2484
  active_tracing=False,
2461
2485
  environment_variables={
@@ -2501,6 +2525,7 @@ class CfnCanaryProps:
2501
2525
  check_type(argname="argument artifact_config", value=artifact_config, expected_type=type_hints["artifact_config"])
2502
2526
  check_type(argname="argument delete_lambda_resources_on_canary_deletion", value=delete_lambda_resources_on_canary_deletion, expected_type=type_hints["delete_lambda_resources_on_canary_deletion"])
2503
2527
  check_type(argname="argument failure_retention_period", value=failure_retention_period, expected_type=type_hints["failure_retention_period"])
2528
+ check_type(argname="argument resources_to_replicate_tags", value=resources_to_replicate_tags, expected_type=type_hints["resources_to_replicate_tags"])
2504
2529
  check_type(argname="argument run_config", value=run_config, expected_type=type_hints["run_config"])
2505
2530
  check_type(argname="argument start_canary_after_creation", value=start_canary_after_creation, expected_type=type_hints["start_canary_after_creation"])
2506
2531
  check_type(argname="argument success_retention_period", value=success_retention_period, expected_type=type_hints["success_retention_period"])
@@ -2521,6 +2546,8 @@ class CfnCanaryProps:
2521
2546
  self._values["delete_lambda_resources_on_canary_deletion"] = delete_lambda_resources_on_canary_deletion
2522
2547
  if failure_retention_period is not None:
2523
2548
  self._values["failure_retention_period"] = failure_retention_period
2549
+ if resources_to_replicate_tags is not None:
2550
+ self._values["resources_to_replicate_tags"] = resources_to_replicate_tags
2524
2551
  if run_config is not None:
2525
2552
  self._values["run_config"] = run_config
2526
2553
  if start_canary_after_creation is not None:
@@ -2654,6 +2681,17 @@ class CfnCanaryProps:
2654
2681
  result = self._values.get("failure_retention_period")
2655
2682
  return typing.cast(typing.Optional[jsii.Number], result)
2656
2683
 
2684
+ @builtins.property
2685
+ def resources_to_replicate_tags(self) -> typing.Optional[typing.List[builtins.str]]:
2686
+ '''To have the tags that you apply to this canary also be applied to the Lambda function that the canary uses, specify this property with the value ``lambda-function`` .
2687
+
2688
+ If you do this, CloudWatch Synthetics will keep the tags of the canary and the Lambda function synchronized. Any future changes you make to the canary's tags will also be applied to the function.
2689
+
2690
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html#cfn-synthetics-canary-resourcestoreplicatetags
2691
+ '''
2692
+ result = self._values.get("resources_to_replicate_tags")
2693
+ return typing.cast(typing.Optional[typing.List[builtins.str]], result)
2694
+
2657
2695
  @builtins.property
2658
2696
  def run_config(
2659
2697
  self,
@@ -4318,6 +4356,7 @@ def _typecheckingstub__b8fcb3f48eca9399b4d1d31a5ef709e22f9fa52ad1e174b75d8313ef2
4318
4356
  artifact_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCanary.ArtifactConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
4319
4357
  delete_lambda_resources_on_canary_deletion: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
4320
4358
  failure_retention_period: typing.Optional[jsii.Number] = None,
4359
+ resources_to_replicate_tags: typing.Optional[typing.Sequence[builtins.str]] = None,
4321
4360
  run_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCanary.RunConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
4322
4361
  start_canary_after_creation: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
4323
4362
  success_retention_period: typing.Optional[jsii.Number] = None,
@@ -4394,6 +4433,12 @@ def _typecheckingstub__02a7e43f45419c4cb8e909f309f8848d4ced91d17b01d14e5ea0b8cec
4394
4433
  """Type checking stubs"""
4395
4434
  pass
4396
4435
 
4436
+ def _typecheckingstub__97145dbcbdc52baa9bf7a42cbdc47e51d64c8bdad34335923fcf585d09e27978(
4437
+ value: typing.Optional[typing.List[builtins.str]],
4438
+ ) -> None:
4439
+ """Type checking stubs"""
4440
+ pass
4441
+
4397
4442
  def _typecheckingstub__e65fb80249e43aebfe46950832be73ed0795003be5d74ca1ef7cd12bb2408557(
4398
4443
  value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnCanary.RunConfigProperty]],
4399
4444
  ) -> None:
@@ -4511,6 +4556,7 @@ def _typecheckingstub__d869d56ce0d1d2e2add2f80bf39b28abbec2752c719e03194ee540bf1
4511
4556
  artifact_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCanary.ArtifactConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
4512
4557
  delete_lambda_resources_on_canary_deletion: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
4513
4558
  failure_retention_period: typing.Optional[jsii.Number] = None,
4559
+ resources_to_replicate_tags: typing.Optional[typing.Sequence[builtins.str]] = None,
4514
4560
  run_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCanary.RunConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
4515
4561
  start_canary_after_creation: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
4516
4562
  success_retention_period: typing.Optional[jsii.Number] = None,
@@ -233,11 +233,12 @@ class CfnByteMatchSet(
233
233
  ) -> None:
234
234
  '''.. epigraph::
235
235
 
236
- This is *AWS WAF Classic* documentation.
236
+ Deprecation notice: AWS WAF Classic support will end on September 30, 2025.
237
237
 
238
- For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
239
238
  .. epigraph::
240
239
 
240
+ This is *AWS WAF Classic* documentation. For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
241
+
241
242
  *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the `AWS WAF Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
242
243
 
243
244
  The bytes (typically a string that corresponds with ASCII characters) that you want AWS WAF to search for in web requests, the location in requests that you want AWS WAF to search, and other settings.
@@ -463,11 +464,12 @@ class CfnByteMatchSet(
463
464
  ) -> None:
464
465
  '''.. epigraph::
465
466
 
466
- This is *AWS WAF Classic* documentation.
467
+ Deprecation notice: AWS WAF Classic support will end on September 30, 2025.
467
468
 
468
- For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
469
469
  .. epigraph::
470
470
 
471
+ This is *AWS WAF Classic* documentation. For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
472
+
471
473
  *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the `AWS WAF Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
472
474
 
473
475
  Specifies where in a web request to look for ``TargetString`` .
@@ -647,11 +649,12 @@ class CfnIPSet(
647
649
  ):
648
650
  '''.. epigraph::
649
651
 
650
- This is *AWS WAF Classic* documentation.
652
+ Deprecation notice: AWS WAF Classic support will end on September 30, 2025.
651
653
 
652
- For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
653
654
  .. epigraph::
654
655
 
656
+ This is *AWS WAF Classic* documentation. For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
657
+
655
658
  *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the `AWS WAF Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
656
659
 
657
660
  Contains one or more IP addresses or blocks of IP addresses specified in Classless Inter-Domain Routing (CIDR) notation. AWS WAF supports IPv4 address ranges: /8 and any range between /16 through /32. AWS WAF supports IPv6 address ranges: /24, /32, /48, /56, /64, and /128.
@@ -784,11 +787,12 @@ class CfnIPSet(
784
787
  def __init__(self, *, type: builtins.str, value: builtins.str) -> None:
785
788
  '''.. epigraph::
786
789
 
787
- This is *AWS WAF Classic* documentation.
790
+ Deprecation notice: AWS WAF Classic support will end on September 30, 2025.
788
791
 
789
- For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
790
792
  .. epigraph::
791
793
 
794
+ This is *AWS WAF Classic* documentation. For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
795
+
792
796
  *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the `AWS WAF Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
793
797
 
794
798
  Specifies the IP address type ( ``IPV4`` or ``IPV6`` ) and the IP address range (in CIDR format) that web requests originate from.
@@ -1304,11 +1308,12 @@ class CfnSizeConstraintSet(
1304
1308
  ):
1305
1309
  '''.. epigraph::
1306
1310
 
1307
- This is *AWS WAF Classic* documentation.
1311
+ Deprecation notice: AWS WAF Classic support will end on September 30, 2025.
1308
1312
 
1309
- For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
1310
1313
  .. epigraph::
1311
1314
 
1315
+ This is *AWS WAF Classic* documentation. For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
1316
+
1312
1317
  *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the `AWS WAF Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
1313
1318
 
1314
1319
  A complex type that contains ``SizeConstraint`` objects, which specify the parts of web requests that you want AWS WAF to inspect the size of. If a ``SizeConstraintSet`` contains more than one ``SizeConstraint`` object, a request only needs to match one constraint to be considered a match.
@@ -1545,11 +1550,12 @@ class CfnSizeConstraintSet(
1545
1550
  ) -> None:
1546
1551
  '''.. epigraph::
1547
1552
 
1548
- This is *AWS WAF Classic* documentation.
1553
+ Deprecation notice: AWS WAF Classic support will end on September 30, 2025.
1549
1554
 
1550
- For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
1551
1555
  .. epigraph::
1552
1556
 
1557
+ This is *AWS WAF Classic* documentation. For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
1558
+
1553
1559
  *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the `AWS WAF Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
1554
1560
 
1555
1561
  Specifies a constraint on the size of a part of the web request. AWS WAF uses the ``Size`` , ``ComparisonOperator`` , and ``FieldToMatch`` to build an expression in the form of " ``Size`` ``ComparisonOperator`` size in bytes of ``FieldToMatch`` ". If that expression is true, the ``SizeConstraint`` is considered to match.
@@ -1811,11 +1817,12 @@ class CfnSqlInjectionMatchSet(
1811
1817
  ):
1812
1818
  '''.. epigraph::
1813
1819
 
1814
- This is *AWS WAF Classic* documentation.
1820
+ Deprecation notice: AWS WAF Classic support will end on September 30, 2025.
1815
1821
 
1816
- For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
1817
1822
  .. epigraph::
1818
1823
 
1824
+ This is *AWS WAF Classic* documentation. For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
1825
+
1819
1826
  *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the `AWS WAF Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
1820
1827
 
1821
1828
  A complex type that contains ``SqlInjectionMatchTuple`` objects, which specify the parts of web requests that you want AWS WAF to inspect for snippets of malicious SQL code and, if you want AWS WAF to inspect a header, the name of the header. If a ``SqlInjectionMatchSet`` contains more than one ``SqlInjectionMatchTuple`` object, a request needs to include snippets of SQL code in only one of the specified parts of the request to be considered a match.
@@ -2050,11 +2057,12 @@ class CfnSqlInjectionMatchSet(
2050
2057
  ) -> None:
2051
2058
  '''.. epigraph::
2052
2059
 
2053
- This is *AWS WAF Classic* documentation.
2060
+ Deprecation notice: AWS WAF Classic support will end on September 30, 2025.
2054
2061
 
2055
- For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
2056
2062
  .. epigraph::
2057
2063
 
2064
+ This is *AWS WAF Classic* documentation. For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
2065
+
2058
2066
  *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the `AWS WAF Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
2059
2067
 
2060
2068
  Specifies the part of a web request that you want AWS WAF to inspect for snippets of malicious SQL code and, if you want AWS WAF to inspect a header, the name of the header.
@@ -2561,11 +2569,12 @@ class CfnWebACL(
2561
2569
  def __init__(self, *, type: builtins.str) -> None:
2562
2570
  '''.. epigraph::
2563
2571
 
2564
- This is *AWS WAF Classic* documentation.
2572
+ Deprecation notice: AWS WAF Classic support will end on September 30, 2025.
2565
2573
 
2566
- For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
2567
2574
  .. epigraph::
2568
2575
 
2576
+ This is *AWS WAF Classic* documentation. For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
2577
+
2569
2578
  *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the `AWS WAF Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
2570
2579
 
2571
2580
  For the action that is associated with a rule in a ``WebACL`` , specifies the action that you want AWS WAF to perform when a web request matches all of the conditions in a rule. For the default action in a ``WebACL`` , specifies the action that you want AWS WAF to take when a web request doesn't match all of the conditions in any of the rules in a ``WebACL`` .
@@ -2757,11 +2766,12 @@ class CfnXssMatchSet(
2757
2766
  ):
2758
2767
  '''.. epigraph::
2759
2768
 
2760
- This is *AWS WAF Classic* documentation.
2769
+ Deprecation notice: AWS WAF Classic support will end on September 30, 2025.
2761
2770
 
2762
- For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
2763
2771
  .. epigraph::
2764
2772
 
2773
+ This is *AWS WAF Classic* documentation. For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
2774
+
2765
2775
  *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the `AWS WAF Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
2766
2776
 
2767
2777
  A complex type that contains ``XssMatchTuple`` objects, which specify the parts of web requests that you want AWS WAF to inspect for cross-site scripting attacks and, if you want AWS WAF to inspect a header, the name of the header. If a ``XssMatchSet`` contains more than one ``XssMatchTuple`` object, a request needs to include cross-site scripting attacks in only one of the specified parts of the request to be considered a match.
@@ -2992,11 +3002,12 @@ class CfnXssMatchSet(
2992
3002
  ) -> None:
2993
3003
  '''.. epigraph::
2994
3004
 
2995
- This is *AWS WAF Classic* documentation.
3005
+ Deprecation notice: AWS WAF Classic support will end on September 30, 2025.
2996
3006
 
2997
- For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
2998
3007
  .. epigraph::
2999
3008
 
3009
+ This is *AWS WAF Classic* documentation. For more information, see `AWS WAF Classic <https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html>`_ in the developer guide.
3010
+
3000
3011
  *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the `AWS WAF Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html>`_ . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
3001
3012
 
3002
3013
  Specifies the part of a web request that you want AWS WAF to inspect for cross-site scripting attacks and, if you want AWS WAF to inspect a header, the name of the header.