aws-cdk-lib 2.162.0__py3-none-any.whl → 2.163.0__py3-none-any.whl

aws_cdk/aws_docdb/__init__.py

@@ -622,13 +622,13 @@ class CfnDBCluster(
         :param id: Construct identifier for this resource (unique in its scope).
         :param availability_zones: A list of Amazon EC2 Availability Zones that instances in the cluster can be created in.
         :param backup_retention_period: The number of days for which automated backups are retained. You must specify a minimum value of 1. Default: 1 Constraints: - Must be a value from 1 to 35.
-        :param copy_tags_to_snapshot: 
+        :param copy_tags_to_snapshot: Set to ``true`` to copy all tags from the source cluster snapshot to the target cluster snapshot, and otherwise ``false`` . The default is ``false`` .
         :param db_cluster_identifier: The cluster identifier. This parameter is stored as a lowercase string. Constraints: - Must contain from 1 to 63 letters, numbers, or hyphens. - The first character must be a letter. - Cannot end with a hyphen or contain two consecutive hyphens. Example: ``my-cluster``
         :param db_cluster_parameter_group_name: The name of the cluster parameter group to associate with this cluster.
         :param db_subnet_group_name: A subnet group to associate with this cluster. Constraints: Must match the name of an existing ``DBSubnetGroup`` . Must not be default. Example: ``mySubnetgroup``
         :param deletion_protection: Protects clusters from being accidentally deleted. If enabled, the cluster cannot be deleted unless it is modified and ``DeletionProtection`` is disabled.
         :param enable_cloudwatch_logs_exports: The list of log types that need to be enabled for exporting to Amazon CloudWatch Logs. You can enable audit logs or profiler logs. For more information, see `Auditing Amazon DocumentDB Events <https://docs.aws.amazon.com/documentdb/latest/developerguide/event-auditing.html>`_ and `Profiling Amazon DocumentDB Operations <https://docs.aws.amazon.com/documentdb/latest/developerguide/profiling.html>`_ .
-        :param engine_version: The version number of the database engine to use. The ``--engine-version`` will default to the latest major engine version. For production workloads, we recommend explicitly declaring this parameter with the intended major engine version.
+        :param engine_version: The version number of the database engine to use. The ``--engine-version`` will default to the latest major engine version. For production workloads, we recommend explicitly declaring this parameter with the intended major engine version. Changing the ``EngineVersion`` will start an in-place engine version upgrade. Note that in-place engine version upgrade will cause downtime in the cluster. See `Amazon DocumentDB in-place major version upgrade <https://docs.aws.amazon.com/documentdb/latest/developerguide/docdb-mvu.html>`_ before starting an in-place engine version upgrade.
         :param kms_key_id: The AWS KMS key identifier for an encrypted cluster. The AWS KMS key identifier is the Amazon Resource Name (ARN) for the AWS KMS encryption key. If you are creating a cluster using the same AWS account that owns the AWS KMS encryption key that is used to encrypt the new cluster, you can use the AWS KMS key alias instead of the ARN for the AWS KMS encryption key. If an encryption key is not specified in ``KmsKeyId`` : - If the ``StorageEncrypted`` parameter is ``true`` , Amazon DocumentDB uses your default encryption key. AWS KMS creates the default encryption key for your AWS account . Your AWS account has a different default encryption key for each AWS Regions .
         :param master_username: The name of the master user for the cluster. Constraints: - Must be from 1 to 63 letters or numbers. - The first character must be a letter. - Cannot be a reserved word for the chosen database engine.
         :param master_user_password: The password for the master database user. This password can contain any printable ASCII character except forward slash (/), double quote ("), or the "at" symbol (@). Constraints: Must contain from 8 to 100 characters.
@@ -639,7 +639,7 @@ class CfnDBCluster(
         :param restore_type: The type of restore to be performed. You can specify one of the following values:. - ``full-copy`` - The new DB cluster is restored as a full copy of the source DB cluster. - ``copy-on-write`` - The new DB cluster is restored as a clone of the source DB cluster. Constraints: You can't specify ``copy-on-write`` if the engine version of the source DB cluster is earlier than 1.11. If you don't specify a ``RestoreType`` value, then the new DB cluster is restored as a full copy of the source DB cluster.
         :param snapshot_identifier: The identifier for the snapshot or cluster snapshot to restore from. You can use either the name or the Amazon Resource Name (ARN) to specify a cluster snapshot. However, you can use only the ARN to specify a snapshot. Constraints: - Must match the identifier of an existing snapshot.
         :param source_db_cluster_identifier: The identifier of the source cluster from which to restore. Constraints: - Must match the identifier of an existing ``DBCluster`` .
-        :param storage_encrypted: Specifies whether the cluster is encrypted.
+        :param storage_encrypted: Specifies whether the cluster is encrypted. If you specify ``SourceDBClusterIdentifier`` or ``SnapshotIdentifier`` and don’t specify ``StorageEncrypted`` , the encryption property is inherited from the source cluster or snapshot (unless ``KMSKeyId`` is specified, in which case the restored cluster will be encrypted with that KMS key). If the source is encrypted and ``StorageEncrypted`` is specified to be true, the restored cluster will be encrypted (if you want to use a different KMS key, specify the ``KMSKeyId`` property as well). If the source is unencrypted and ``StorageEncrypted`` is specified to be true, then the ``KMSKeyId`` property must be specified. If the source is encrypted, don’t specify ``StorageEncrypted`` to be false as opting out of encryption is not allowed.
         :param storage_type: The storage type to associate with the DB cluster. For information on storage types for Amazon DocumentDB clusters, see Cluster storage configurations in the *Amazon DocumentDB Developer Guide* . Valid values for storage type - ``standard | iopt1`` Default value is ``standard`` .. epigraph:: When you create a DocumentDB DB cluster with the storage type set to ``iopt1`` , the storage type is returned in the response. The storage type isn't returned when you set it to ``standard`` .
         :param tags: The tags to be assigned to the cluster.
         :param use_latest_restorable_time: A value that is set to ``true`` to restore the cluster to the latest restorable backup time, and ``false`` otherwise. Default: ``false`` Constraints: Cannot be specified if the ``RestoreToTime`` parameter is provided.
@@ -806,6 +806,7 @@ class CfnDBCluster(
     def copy_tags_to_snapshot(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''Set to ``true`` to copy all tags from the source cluster snapshot to the target cluster snapshot, and otherwise ``false`` .'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "copyTagsToSnapshot"))
 
     @copy_tags_to_snapshot.setter
@@ -1523,13 +1524,13 @@ class CfnDBClusterProps:
 
         :param availability_zones: A list of Amazon EC2 Availability Zones that instances in the cluster can be created in.
         :param backup_retention_period: The number of days for which automated backups are retained. You must specify a minimum value of 1. Default: 1 Constraints: - Must be a value from 1 to 35.
-        :param copy_tags_to_snapshot: 
+        :param copy_tags_to_snapshot: Set to ``true`` to copy all tags from the source cluster snapshot to the target cluster snapshot, and otherwise ``false`` . The default is ``false`` .
         :param db_cluster_identifier: The cluster identifier. This parameter is stored as a lowercase string. Constraints: - Must contain from 1 to 63 letters, numbers, or hyphens. - The first character must be a letter. - Cannot end with a hyphen or contain two consecutive hyphens. Example: ``my-cluster``
         :param db_cluster_parameter_group_name: The name of the cluster parameter group to associate with this cluster.
         :param db_subnet_group_name: A subnet group to associate with this cluster. Constraints: Must match the name of an existing ``DBSubnetGroup`` . Must not be default. Example: ``mySubnetgroup``
         :param deletion_protection: Protects clusters from being accidentally deleted. If enabled, the cluster cannot be deleted unless it is modified and ``DeletionProtection`` is disabled.
         :param enable_cloudwatch_logs_exports: The list of log types that need to be enabled for exporting to Amazon CloudWatch Logs. You can enable audit logs or profiler logs. For more information, see `Auditing Amazon DocumentDB Events <https://docs.aws.amazon.com/documentdb/latest/developerguide/event-auditing.html>`_ and `Profiling Amazon DocumentDB Operations <https://docs.aws.amazon.com/documentdb/latest/developerguide/profiling.html>`_ .
-        :param engine_version: The version number of the database engine to use. The ``--engine-version`` will default to the latest major engine version. For production workloads, we recommend explicitly declaring this parameter with the intended major engine version.
+        :param engine_version: The version number of the database engine to use. The ``--engine-version`` will default to the latest major engine version. For production workloads, we recommend explicitly declaring this parameter with the intended major engine version. Changing the ``EngineVersion`` will start an in-place engine version upgrade. Note that in-place engine version upgrade will cause downtime in the cluster. See `Amazon DocumentDB in-place major version upgrade <https://docs.aws.amazon.com/documentdb/latest/developerguide/docdb-mvu.html>`_ before starting an in-place engine version upgrade.
         :param kms_key_id: The AWS KMS key identifier for an encrypted cluster. The AWS KMS key identifier is the Amazon Resource Name (ARN) for the AWS KMS encryption key. If you are creating a cluster using the same AWS account that owns the AWS KMS encryption key that is used to encrypt the new cluster, you can use the AWS KMS key alias instead of the ARN for the AWS KMS encryption key. If an encryption key is not specified in ``KmsKeyId`` : - If the ``StorageEncrypted`` parameter is ``true`` , Amazon DocumentDB uses your default encryption key. AWS KMS creates the default encryption key for your AWS account . Your AWS account has a different default encryption key for each AWS Regions .
         :param master_username: The name of the master user for the cluster. Constraints: - Must be from 1 to 63 letters or numbers. - The first character must be a letter. - Cannot be a reserved word for the chosen database engine.
         :param master_user_password: The password for the master database user. This password can contain any printable ASCII character except forward slash (/), double quote ("), or the "at" symbol (@). Constraints: Must contain from 8 to 100 characters.
@@ -1540,7 +1541,7 @@ class CfnDBClusterProps:
         :param restore_type: The type of restore to be performed. You can specify one of the following values:. - ``full-copy`` - The new DB cluster is restored as a full copy of the source DB cluster. - ``copy-on-write`` - The new DB cluster is restored as a clone of the source DB cluster. Constraints: You can't specify ``copy-on-write`` if the engine version of the source DB cluster is earlier than 1.11. If you don't specify a ``RestoreType`` value, then the new DB cluster is restored as a full copy of the source DB cluster.
         :param snapshot_identifier: The identifier for the snapshot or cluster snapshot to restore from. You can use either the name or the Amazon Resource Name (ARN) to specify a cluster snapshot. However, you can use only the ARN to specify a snapshot. Constraints: - Must match the identifier of an existing snapshot.
         :param source_db_cluster_identifier: The identifier of the source cluster from which to restore. Constraints: - Must match the identifier of an existing ``DBCluster`` .
-        :param storage_encrypted: Specifies whether the cluster is encrypted.
+        :param storage_encrypted: Specifies whether the cluster is encrypted. If you specify ``SourceDBClusterIdentifier`` or ``SnapshotIdentifier`` and don’t specify ``StorageEncrypted`` , the encryption property is inherited from the source cluster or snapshot (unless ``KMSKeyId`` is specified, in which case the restored cluster will be encrypted with that KMS key). If the source is encrypted and ``StorageEncrypted`` is specified to be true, the restored cluster will be encrypted (if you want to use a different KMS key, specify the ``KMSKeyId`` property as well). If the source is unencrypted and ``StorageEncrypted`` is specified to be true, then the ``KMSKeyId`` property must be specified. If the source is encrypted, don’t specify ``StorageEncrypted`` to be false as opting out of encryption is not allowed.
         :param storage_type: The storage type to associate with the DB cluster. For information on storage types for Amazon DocumentDB clusters, see Cluster storage configurations in the *Amazon DocumentDB Developer Guide* . Valid values for storage type - ``standard | iopt1`` Default value is ``standard`` .. epigraph:: When you create a DocumentDB DB cluster with the storage type set to ``iopt1`` , the storage type is returned in the response. The storage type isn't returned when you set it to ``standard`` .
         :param tags: The tags to be assigned to the cluster.
         :param use_latest_restorable_time: A value that is set to ``true`` to restore the cluster to the latest restorable backup time, and ``false`` otherwise. Default: ``false`` Constraints: Cannot be specified if the ``RestoreToTime`` parameter is provided.
@@ -1689,7 +1690,10 @@ class CfnDBClusterProps:
     def copy_tags_to_snapshot(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''
+        '''Set to ``true`` to copy all tags from the source cluster snapshot to the target cluster snapshot, and otherwise ``false`` .
+
+        The default is ``false`` .
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-dbcluster.html#cfn-docdb-dbcluster-copytagstosnapshot
         '''
         result = self._values.get("copy_tags_to_snapshot")
@@ -1766,6 +1770,8 @@ class CfnDBClusterProps:
 
         The ``--engine-version`` will default to the latest major engine version. For production workloads, we recommend explicitly declaring this parameter with the intended major engine version.
 
+        Changing the ``EngineVersion`` will start an in-place engine version upgrade. Note that in-place engine version upgrade will cause downtime in the cluster. See `Amazon DocumentDB in-place major version upgrade <https://docs.aws.amazon.com/documentdb/latest/developerguide/docdb-mvu.html>`_ before starting an in-place engine version upgrade.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-dbcluster.html#cfn-docdb-dbcluster-engineversion
         '''
         result = self._values.get("engine_version")
@@ -1930,6 +1936,8 @@ class CfnDBClusterProps:
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
         '''Specifies whether the cluster is encrypted.
 
+        If you specify ``SourceDBClusterIdentifier`` or ``SnapshotIdentifier`` and don’t specify ``StorageEncrypted`` , the encryption property is inherited from the source cluster or snapshot (unless ``KMSKeyId`` is specified, in which case the restored cluster will be encrypted with that KMS key). If the source is encrypted and ``StorageEncrypted`` is specified to be true, the restored cluster will be encrypted (if you want to use a different KMS key, specify the ``KMSKeyId`` property as well). If the source is unencrypted and ``StorageEncrypted`` is specified to be true, then the ``KMSKeyId`` property must be specified. If the source is encrypted, don’t specify ``StorageEncrypted`` to be false as opting out of encryption is not allowed.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-dbcluster.html#cfn-docdb-dbcluster-storageencrypted
         '''
         result = self._values.get("storage_encrypted")
@@ -2060,7 +2068,7 @@ class CfnDBInstance(
         :param db_instance_class: The compute and memory capacity of the instance; for example, ``db.m4.large`` . If you change the class of an instance there can be some interruption in the cluster's service.
         :param auto_minor_version_upgrade: This parameter does not apply to Amazon DocumentDB. Amazon DocumentDB does not perform minor version upgrades regardless of the value set. Default: ``false``
         :param availability_zone: The Amazon EC2 Availability Zone that the instance is created in. Default: A random, system-chosen Availability Zone in the endpoint's AWS Region . Example: ``us-east-1d``
-        :param ca_certificate_identifier: The CA certificate identifier to use for the DB instance's server certificate. For more information, see `Updating Your Amazon DocumentDB TLS Certificates <https://docs.aws.amazon.com/documentdb/latest/developerguide/ca_cert_rotation.html>`_ and `Encrypting Data in Transit <https://docs.aws.amazon.com/documentdb/latest/developerguide/security.encryption.ssl.html>`_ in the *Amazon DocumentDB Developer Guide* .
+        :param ca_certificate_identifier: The identifier of the CA certificate for this DB instance.
         :param certificate_rotation_restart: Specifies whether the DB instance is restarted when you rotate your SSL/TLS certificate. By default, the DB instance is restarted when you rotate your SSL/TLS certificate. The certificate is not updated until the DB instance is restarted. .. epigraph:: Set this parameter only if you are *not* using SSL/TLS to connect to the DB instance. If you are using SSL/TLS to connect to the DB instance, see `Updating Your Amazon DocumentDB TLS Certificates <https://docs.aws.amazon.com/documentdb/latest/developerguide/ca_cert_rotation.html>`_ and `Encrypting Data in Transit <https://docs.aws.amazon.com/documentdb/latest/developerguide/security.encryption.ssl.html>`_ in the *Amazon DocumentDB Developer Guide* .
         :param db_instance_identifier: The instance identifier. This parameter is stored as a lowercase string. Constraints: - Must contain from 1 to 63 letters, numbers, or hyphens. - The first character must be a letter. - Cannot end with a hyphen or contain two consecutive hyphens. Example: ``mydbinstance``
         :param enable_performance_insights: A value that indicates whether to enable Performance Insights for the DB Instance. For more information, see `Using Amazon Performance Insights <https://docs.aws.amazon.com/documentdb/latest/developerguide/performance-insights.html>`_ .
@@ -2215,7 +2223,7 @@ class CfnDBInstance(
     @builtins.property
     @jsii.member(jsii_name="caCertificateIdentifier")
     def ca_certificate_identifier(self) -> typing.Optional[builtins.str]:
-        '''The CA certificate identifier to use for the DB instance's server certificate.'''
+        '''The identifier of the CA certificate for this DB instance.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "caCertificateIdentifier"))
 
     @ca_certificate_identifier.setter
@@ -2344,7 +2352,7 @@ class CfnDBInstanceProps:
         :param db_instance_class: The compute and memory capacity of the instance; for example, ``db.m4.large`` . If you change the class of an instance there can be some interruption in the cluster's service.
         :param auto_minor_version_upgrade: This parameter does not apply to Amazon DocumentDB. Amazon DocumentDB does not perform minor version upgrades regardless of the value set. Default: ``false``
         :param availability_zone: The Amazon EC2 Availability Zone that the instance is created in. Default: A random, system-chosen Availability Zone in the endpoint's AWS Region . Example: ``us-east-1d``
-        :param ca_certificate_identifier: The CA certificate identifier to use for the DB instance's server certificate. For more information, see `Updating Your Amazon DocumentDB TLS Certificates <https://docs.aws.amazon.com/documentdb/latest/developerguide/ca_cert_rotation.html>`_ and `Encrypting Data in Transit <https://docs.aws.amazon.com/documentdb/latest/developerguide/security.encryption.ssl.html>`_ in the *Amazon DocumentDB Developer Guide* .
+        :param ca_certificate_identifier: The identifier of the CA certificate for this DB instance.
         :param certificate_rotation_restart: Specifies whether the DB instance is restarted when you rotate your SSL/TLS certificate. By default, the DB instance is restarted when you rotate your SSL/TLS certificate. The certificate is not updated until the DB instance is restarted. .. epigraph:: Set this parameter only if you are *not* using SSL/TLS to connect to the DB instance. If you are using SSL/TLS to connect to the DB instance, see `Updating Your Amazon DocumentDB TLS Certificates <https://docs.aws.amazon.com/documentdb/latest/developerguide/ca_cert_rotation.html>`_ and `Encrypting Data in Transit <https://docs.aws.amazon.com/documentdb/latest/developerguide/security.encryption.ssl.html>`_ in the *Amazon DocumentDB Developer Guide* .
         :param db_instance_identifier: The instance identifier. This parameter is stored as a lowercase string. Constraints: - Must contain from 1 to 63 letters, numbers, or hyphens. - The first character must be a letter. - Cannot end with a hyphen or contain two consecutive hyphens. Example: ``mydbinstance``
         :param enable_performance_insights: A value that indicates whether to enable Performance Insights for the DB Instance. For more information, see `Using Amazon Performance Insights <https://docs.aws.amazon.com/documentdb/latest/developerguide/performance-insights.html>`_ .
@@ -2463,9 +2471,7 @@ class CfnDBInstanceProps:
 
     @builtins.property
     def ca_certificate_identifier(self) -> typing.Optional[builtins.str]:
-        '''The CA certificate identifier to use for the DB instance's server certificate.
-
-        For more information, see `Updating Your Amazon DocumentDB TLS Certificates <https://docs.aws.amazon.com/documentdb/latest/developerguide/ca_cert_rotation.html>`_ and `Encrypting Data in Transit <https://docs.aws.amazon.com/documentdb/latest/developerguide/security.encryption.ssl.html>`_ in the *Amazon DocumentDB Developer Guide* .
+        '''The identifier of the CA certificate for this DB instance.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-dbinstance.html#cfn-docdb-dbinstance-cacertificateidentifier
         '''

aws_cdk/aws_dynamodb/__init__.py

@@ -506,6 +506,21 @@ table = dynamodb.TableV2(self, "Table",
 )
 ```
 
+When you use `Table`, you can enable contributor insights for a table or specific global secondary index by setting `contributorInsightsEnabled` to `true`.
+
+```python
+table = dynamodb.Table(self, "Table",
+    partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
+    contributor_insights_enabled=True
+)
+
+table.add_global_secondary_index(
+    contributor_insights_enabled=True,  # for a specific global secondary index
+    index_name="gsi",
+    partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING)
+)
+```
+
 Further reading:
 https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/contributorinsights_HowItWorks.html
 
@@ -13550,6 +13565,7 @@ class UtilizationScalingProps(_BaseTargetTrackingProps_540ba713):
         "projection_type": "projectionType",
         "partition_key": "partitionKey",
         "sort_key": "sortKey",
+        "contributor_insights_enabled": "contributorInsightsEnabled",
         "max_read_request_units": "maxReadRequestUnits",
         "max_write_request_units": "maxWriteRequestUnits",
         "read_capacity": "readCapacity",
@@ -13565,6 +13581,7 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
         projection_type: typing.Optional[ProjectionType] = None,
         partition_key: typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]],
         sort_key: typing.Optional[typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]]] = None,
+        contributor_insights_enabled: typing.Optional[builtins.bool] = None,
         max_read_request_units: typing.Optional[jsii.Number] = None,
         max_write_request_units: typing.Optional[jsii.Number] = None,
         read_capacity: typing.Optional[jsii.Number] = None,
@@ -13577,37 +13594,25 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
         :param projection_type: The set of attributes that are projected into the secondary index. Default: ALL
         :param partition_key: Partition key attribute definition.
         :param sort_key: Sort key attribute definition. Default: no sort key
+        :param contributor_insights_enabled: Whether CloudWatch contributor insights is enabled for the specified global secondary index. Default: false
         :param max_read_request_units: The maximum read request units for the global secondary index. Can only be provided if table billingMode is PAY_PER_REQUEST. Default: - on-demand throughput is disabled
         :param max_write_request_units: The maximum write request units for the global secondary index. Can only be provided if table billingMode is PAY_PER_REQUEST. Default: - on-demand throughput is disabled
         :param read_capacity: The read capacity for the global secondary index. Can only be provided if table billingMode is Provisioned or undefined. Default: 5
         :param write_capacity: The write capacity for the global secondary index. Can only be provided if table billingMode is Provisioned or undefined. Default: 5
 
-        :exampleMetadata: fixture=_generated
+        :exampleMetadata: infused
 
         Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            from aws_cdk import aws_dynamodb as dynamodb
-            
-            global_secondary_index_props = dynamodb.GlobalSecondaryIndexProps(
-                index_name="indexName",
-                partition_key=dynamodb.Attribute(
-                    name="name",
-                    type=dynamodb.AttributeType.BINARY
-                ),
+            table = dynamodb.Table(self, "Table",
+                partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
+                contributor_insights_enabled=True
+            )
             
-                # the properties below are optional
-                max_read_request_units=123,
-                max_write_request_units=123,
-                non_key_attributes=["nonKeyAttributes"],
-                projection_type=dynamodb.ProjectionType.KEYS_ONLY,
-                read_capacity=123,
-                sort_key=dynamodb.Attribute(
-                    name="name",
-                    type=dynamodb.AttributeType.BINARY
-                ),
-                write_capacity=123
+            table.add_global_secondary_index(
+                contributor_insights_enabled=True,  # for a specific global secondary index
+                index_name="gsi",
+                partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING)
             )
         '''
         if isinstance(partition_key, dict):
@@ -13621,6 +13626,7 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
             check_type(argname="argument projection_type", value=projection_type, expected_type=type_hints["projection_type"])
             check_type(argname="argument partition_key", value=partition_key, expected_type=type_hints["partition_key"])
             check_type(argname="argument sort_key", value=sort_key, expected_type=type_hints["sort_key"])
+            check_type(argname="argument contributor_insights_enabled", value=contributor_insights_enabled, expected_type=type_hints["contributor_insights_enabled"])
             check_type(argname="argument max_read_request_units", value=max_read_request_units, expected_type=type_hints["max_read_request_units"])
             check_type(argname="argument max_write_request_units", value=max_write_request_units, expected_type=type_hints["max_write_request_units"])
             check_type(argname="argument read_capacity", value=read_capacity, expected_type=type_hints["read_capacity"])
@@ -13635,6 +13641,8 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
             self._values["projection_type"] = projection_type
         if sort_key is not None:
             self._values["sort_key"] = sort_key
+        if contributor_insights_enabled is not None:
+            self._values["contributor_insights_enabled"] = contributor_insights_enabled
         if max_read_request_units is not None:
             self._values["max_read_request_units"] = max_read_request_units
         if max_write_request_units is not None:
@@ -13685,6 +13693,15 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
         result = self._values.get("sort_key")
         return typing.cast(typing.Optional[Attribute], result)
 
+    @builtins.property
+    def contributor_insights_enabled(self) -> typing.Optional[builtins.bool]:
+        '''Whether CloudWatch contributor insights is enabled for the specified global secondary index.
+
+        :default: false
+        '''
+        result = self._values.get("contributor_insights_enabled")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def max_read_request_units(self) -> typing.Optional[jsii.Number]:
         '''The maximum read request units for the global secondary index.
@@ -14691,6 +14708,7 @@ class Table(
     def add_global_secondary_index(
         self,
         *,
+        contributor_insights_enabled: typing.Optional[builtins.bool] = None,
         max_read_request_units: typing.Optional[jsii.Number] = None,
         max_write_request_units: typing.Optional[jsii.Number] = None,
         read_capacity: typing.Optional[jsii.Number] = None,
@@ -14703,6 +14721,7 @@ class Table(
     ) -> None:
         '''Add a global secondary index of table.
 
+        :param contributor_insights_enabled: Whether CloudWatch contributor insights is enabled for the specified global secondary index. Default: false
         :param max_read_request_units: The maximum read request units for the global secondary index. Can only be provided if table billingMode is PAY_PER_REQUEST. Default: - on-demand throughput is disabled
         :param max_write_request_units: The maximum write request units for the global secondary index. Can only be provided if table billingMode is PAY_PER_REQUEST. Default: - on-demand throughput is disabled
         :param read_capacity: The read capacity for the global secondary index. Can only be provided if table billingMode is Provisioned or undefined. Default: 5
@@ -14714,6 +14733,7 @@ class Table(
         :param sort_key: Sort key attribute definition. Default: no sort key
         '''
         props = GlobalSecondaryIndexProps(
+            contributor_insights_enabled=contributor_insights_enabled,
             max_read_request_units=max_read_request_units,
             max_write_request_units=max_write_request_units,
             read_capacity=read_capacity,
@@ -16212,6 +16232,7 @@ def _typecheckingstub__7f586bf63a567e16bde337be791f392306be66abca1c4abb791989fb9
     projection_type: typing.Optional[ProjectionType] = None,
     partition_key: typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]],
     sort_key: typing.Optional[typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]]] = None,
+    contributor_insights_enabled: typing.Optional[builtins.bool] = None,
     max_read_request_units: typing.Optional[jsii.Number] = None,
     max_write_request_units: typing.Optional[jsii.Number] = None,
     read_capacity: typing.Optional[jsii.Number] = None,