aws-cdk-lib 2.162.1__py3-none-any.whl → 2.163.0__py3-none-any.whl

aws_cdk/aws_efs/__init__.py

@@ -222,7 +222,10 @@ the access point can only access data in its own directory and below. To learn m
 Use the `addAccessPoint` API to create an access point from a fileSystem.
 
 ```python
-file_system.add_access_point("AccessPoint")
+file_system.add_access_point("MyAccessPoint",
+    # create a unique access point via an optional client token
+    client_token="client-token"
+)
 ```
 
 By default, when you create an access point, the root(`/`) directory is exposed to the client
@@ -448,6 +451,7 @@ class AccessPointAttributes:
     jsii_type="aws-cdk-lib.aws_efs.AccessPointOptions",
     jsii_struct_bases=[],
     name_mapping={
+        "client_token": "clientToken",
         "create_acl": "createAcl",
         "path": "path",
         "posix_user": "posixUser",
@@ -457,54 +461,25 @@ class AccessPointOptions:
     def __init__(
         self,
         *,
+        client_token: typing.Optional[builtins.str] = None,
         create_acl: typing.Optional[typing.Union["Acl", typing.Dict[builtins.str, typing.Any]]] = None,
         path: typing.Optional[builtins.str] = None,
         posix_user: typing.Optional[typing.Union["PosixUser", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''Options to create an AccessPoint.
 
+        :param client_token: The opaque string specified in the request to ensure idempotent creation. Default: - No client token
         :param create_acl: Specifies the POSIX IDs and permissions to apply when creating the access point's root directory. If the root directory specified by ``path`` does not exist, EFS creates the root directory and applies the permissions specified here. If the specified ``path`` does not exist, you must specify ``createAcl``. Default: - None. The directory specified by ``path`` must exist.
         :param path: Specifies the path on the EFS file system to expose as the root directory to NFS clients using the access point to access the EFS file system. Default: '/'
         :param posix_user: The full POSIX identity, including the user ID, group ID, and any secondary group IDs, on the access point that is used for all file system operations performed by NFS clients using the access point. Specify this to enforce a user identity using an access point. Default: - user identity not enforced
 
-        :exampleMetadata: infused
+        :exampleMetadata: fixture=with-filesystem-instance infused
 
         Example::
 
-            import aws_cdk.aws_ec2 as ec2
-            import aws_cdk.aws_efs as efs
-            
-            
-            # create a new VPC
-            vpc = ec2.Vpc(self, "VPC")
-            
-            # create a new Amazon EFS filesystem
-            file_system = efs.FileSystem(self, "Efs", vpc=vpc)
-            
-            # create a new access point from the filesystem
-            access_point = file_system.add_access_point("AccessPoint",
-                # set /export/lambda as the root of the access point
-                path="/export/lambda",
-                # as /export/lambda does not exist in a new efs filesystem, the efs will create the directory with the following createAcl
-                create_acl=efs.Acl(
-                    owner_uid="1001",
-                    owner_gid="1001",
-                    permissions="750"
-                ),
-                # enforce the POSIX identity so lambda function will access with this identity
-                posix_user=efs.PosixUser(
-                    uid="1001",
-                    gid="1001"
-                )
-            )
-            
-            fn = lambda_.Function(self, "MyLambda",
-                # mount the access point to /mnt/msg in the lambda runtime environment
-                filesystem=lambda_.FileSystem.from_efs_access_point(access_point, "/mnt/msg"),
-                runtime=lambda_.Runtime.NODEJS_18_X,
-                handler="index.handler",
-                code=lambda_.Code.from_asset(path.join(__dirname, "lambda-handler")),
-                vpc=vpc
+            file_system.add_access_point("MyAccessPoint",
+                # create a unique access point via an optional client token
+                client_token="client-token"
             )
         '''
         if isinstance(create_acl, dict):
@@ -513,10 +488,13 @@ class AccessPointOptions:
             posix_user = PosixUser(**posix_user)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__913ac22cf5c450fc4c0b0a7b6d77a1e412a1276f6c512fbacf766f6ab3a7d900)
+            check_type(argname="argument client_token", value=client_token, expected_type=type_hints["client_token"])
             check_type(argname="argument create_acl", value=create_acl, expected_type=type_hints["create_acl"])
             check_type(argname="argument path", value=path, expected_type=type_hints["path"])
             check_type(argname="argument posix_user", value=posix_user, expected_type=type_hints["posix_user"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if client_token is not None:
+            self._values["client_token"] = client_token
         if create_acl is not None:
             self._values["create_acl"] = create_acl
         if path is not None:
@@ -524,6 +502,17 @@ class AccessPointOptions:
         if posix_user is not None:
             self._values["posix_user"] = posix_user
 
+    @builtins.property
+    def client_token(self) -> typing.Optional[builtins.str]:
+        '''The opaque string specified in the request to ensure idempotent creation.
+
+        :default: - No client token
+
+        :see: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-accesspoint.html#cfn-efs-accesspoint-clienttoken
+        '''
+        result = self._values.get("client_token")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def create_acl(self) -> typing.Optional["Acl"]:
         '''Specifies the POSIX IDs and permissions to apply when creating the access point's root directory.
@@ -575,6 +564,7 @@ class AccessPointOptions:
     jsii_type="aws-cdk-lib.aws_efs.AccessPointProps",
     jsii_struct_bases=[AccessPointOptions],
     name_mapping={
+        "client_token": "clientToken",
         "create_acl": "createAcl",
         "path": "path",
         "posix_user": "posixUser",
@@ -585,6 +575,7 @@ class AccessPointProps(AccessPointOptions):
     def __init__(
         self,
         *,
+        client_token: typing.Optional[builtins.str] = None,
         create_acl: typing.Optional[typing.Union["Acl", typing.Dict[builtins.str, typing.Any]]] = None,
         path: typing.Optional[builtins.str] = None,
         posix_user: typing.Optional[typing.Union["PosixUser", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -592,6 +583,7 @@ class AccessPointProps(AccessPointOptions):
     ) -> None:
         '''Properties for the AccessPoint.
 
+        :param client_token: The opaque string specified in the request to ensure idempotent creation. Default: - No client token
         :param create_acl: Specifies the POSIX IDs and permissions to apply when creating the access point's root directory. If the root directory specified by ``path`` does not exist, EFS creates the root directory and applies the permissions specified here. If the specified ``path`` does not exist, you must specify ``createAcl``. Default: - None. The directory specified by ``path`` must exist.
         :param path: Specifies the path on the EFS file system to expose as the root directory to NFS clients using the access point to access the EFS file system. Default: '/'
         :param posix_user: The full POSIX identity, including the user ID, group ID, and any secondary group IDs, on the access point that is used for all file system operations performed by NFS clients using the access point. Specify this to enforce a user identity using an access point. Default: - user identity not enforced
@@ -611,6 +603,7 @@ class AccessPointProps(AccessPointOptions):
                 file_system=file_system,
             
                 # the properties below are optional
+                client_token="clientToken",
                 create_acl=efs.Acl(
                     owner_gid="ownerGid",
                     owner_uid="ownerUid",
@@ -632,6 +625,7 @@ class AccessPointProps(AccessPointOptions):
             posix_user = PosixUser(**posix_user)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__32b9cfe4790278ebfef38060a79ab8e87662b5508943b46c7da6a219e5bc224e)
+            check_type(argname="argument client_token", value=client_token, expected_type=type_hints["client_token"])
             check_type(argname="argument create_acl", value=create_acl, expected_type=type_hints["create_acl"])
             check_type(argname="argument path", value=path, expected_type=type_hints["path"])
             check_type(argname="argument posix_user", value=posix_user, expected_type=type_hints["posix_user"])
@@ -639,6 +633,8 @@ class AccessPointProps(AccessPointOptions):
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "file_system": file_system,
         }
+        if client_token is not None:
+            self._values["client_token"] = client_token
         if create_acl is not None:
             self._values["create_acl"] = create_acl
         if path is not None:
@@ -646,6 +642,17 @@ class AccessPointProps(AccessPointOptions):
         if posix_user is not None:
             self._values["posix_user"] = posix_user
 
+    @builtins.property
+    def client_token(self) -> typing.Optional[builtins.str]:
+        '''The opaque string specified in the request to ensure idempotent creation.
+
+        :default: - No client token
+
+        :see: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-accesspoint.html#cfn-efs-accesspoint-clienttoken
+        '''
+        result = self._values.get("client_token")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def create_acl(self) -> typing.Optional["Acl"]:
         '''Specifies the POSIX IDs and permissions to apply when creating the access point's root directory.
@@ -4414,6 +4421,7 @@ class AccessPoint(
         id: builtins.str,
         *,
         file_system: IFileSystem,
+        client_token: typing.Optional[builtins.str] = None,
         create_acl: typing.Optional[typing.Union[Acl, typing.Dict[builtins.str, typing.Any]]] = None,
         path: typing.Optional[builtins.str] = None,
         posix_user: typing.Optional[typing.Union[PosixUser, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -4422,6 +4430,7 @@ class AccessPoint(
         :param scope: -
         :param id: -
         :param file_system: The efs filesystem.
+        :param client_token: The opaque string specified in the request to ensure idempotent creation. Default: - No client token
         :param create_acl: Specifies the POSIX IDs and permissions to apply when creating the access point's root directory. If the root directory specified by ``path`` does not exist, EFS creates the root directory and applies the permissions specified here. If the specified ``path`` does not exist, you must specify ``createAcl``. Default: - None. The directory specified by ``path`` must exist.
         :param path: Specifies the path on the EFS file system to expose as the root directory to NFS clients using the access point to access the EFS file system. Default: '/'
         :param posix_user: The full POSIX identity, including the user ID, group ID, and any secondary group IDs, on the access point that is used for all file system operations performed by NFS clients using the access point. Specify this to enforce a user identity using an access point. Default: - user identity not enforced
@@ -4432,6 +4441,7 @@ class AccessPoint(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = AccessPointProps(
             file_system=file_system,
+            client_token=client_token,
             create_acl=create_acl,
             path=path,
             posix_user=posix_user,
@@ -4661,6 +4671,7 @@ class FileSystem(
         self,
         id: builtins.str,
         *,
+        client_token: typing.Optional[builtins.str] = None,
         create_acl: typing.Optional[typing.Union[Acl, typing.Dict[builtins.str, typing.Any]]] = None,
         path: typing.Optional[builtins.str] = None,
         posix_user: typing.Optional[typing.Union[PosixUser, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -4668,6 +4679,7 @@ class FileSystem(
         '''create access point from this filesystem.
 
         :param id: -
+        :param client_token: The opaque string specified in the request to ensure idempotent creation. Default: - No client token
         :param create_acl: Specifies the POSIX IDs and permissions to apply when creating the access point's root directory. If the root directory specified by ``path`` does not exist, EFS creates the root directory and applies the permissions specified here. If the specified ``path`` does not exist, you must specify ``createAcl``. Default: - None. The directory specified by ``path`` must exist.
         :param path: Specifies the path on the EFS file system to expose as the root directory to NFS clients using the access point to access the EFS file system. Default: '/'
         :param posix_user: The full POSIX identity, including the user ID, group ID, and any secondary group IDs, on the access point that is used for all file system operations performed by NFS clients using the access point. Specify this to enforce a user identity using an access point. Default: - user identity not enforced
@@ -4676,7 +4688,10 @@ class FileSystem(
             type_hints = typing.get_type_hints(_typecheckingstub__6ae17f92be1f854e9add049e3ad7507b46fbd97b0ceecc5921b74cffabc0fd7f)
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         access_point_options = AccessPointOptions(
-            create_acl=create_acl, path=path, posix_user=posix_user
+            client_token=client_token,
+            create_acl=create_acl,
+            path=path,
+            posix_user=posix_user,
         )
 
         return typing.cast(AccessPoint, jsii.invoke(self, "addAccessPoint", [id, access_point_options]))
@@ -4829,6 +4844,7 @@ def _typecheckingstub__a7d29db03188d21de563fa9ac94c4de056afa5ee45616d3e16e4b53de
 
 def _typecheckingstub__913ac22cf5c450fc4c0b0a7b6d77a1e412a1276f6c512fbacf766f6ab3a7d900(
     *,
+    client_token: typing.Optional[builtins.str] = None,
     create_acl: typing.Optional[typing.Union[Acl, typing.Dict[builtins.str, typing.Any]]] = None,
     path: typing.Optional[builtins.str] = None,
     posix_user: typing.Optional[typing.Union[PosixUser, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -4838,6 +4854,7 @@ def _typecheckingstub__913ac22cf5c450fc4c0b0a7b6d77a1e412a1276f6c512fbacf766f6ab
 
 def _typecheckingstub__32b9cfe4790278ebfef38060a79ab8e87662b5508943b46c7da6a219e5bc224e(
     *,
+    client_token: typing.Optional[builtins.str] = None,
     create_acl: typing.Optional[typing.Union[Acl, typing.Dict[builtins.str, typing.Any]]] = None,
     path: typing.Optional[builtins.str] = None,
     posix_user: typing.Optional[typing.Union[PosixUser, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5319,6 +5336,7 @@ def _typecheckingstub__b4cd5acd3aac2348517085a4188b85a5e2329da4dc443644482b9153e
     id: builtins.str,
     *,
     file_system: IFileSystem,
+    client_token: typing.Optional[builtins.str] = None,
     create_acl: typing.Optional[typing.Union[Acl, typing.Dict[builtins.str, typing.Any]]] = None,
     path: typing.Optional[builtins.str] = None,
     posix_user: typing.Optional[typing.Union[PosixUser, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5386,6 +5404,7 @@ def _typecheckingstub__dece37ce89e2cfb5f78f1232aff0c1114df92cbaea2ee4e9ea83cdad9
 def _typecheckingstub__6ae17f92be1f854e9add049e3ad7507b46fbd97b0ceecc5921b74cffabc0fd7f(
     id: builtins.str,
     *,
+    client_token: typing.Optional[builtins.str] = None,
     create_acl: typing.Optional[typing.Union[Acl, typing.Dict[builtins.str, typing.Any]]] = None,
     path: typing.Optional[builtins.str] = None,
     posix_user: typing.Optional[typing.Union[PosixUser, typing.Dict[builtins.str, typing.Any]]] = None,

aws_cdk/aws_eks/__init__.py

@@ -5858,7 +5858,7 @@ class CfnCluster(
         :param encryption_config: The encryption configuration for the cluster.
         :param kubernetes_network_config: The Kubernetes network configuration for the cluster.
         :param logging: The logging configuration for your cluster.
-        :param name: The unique name to give to your cluster.
+        :param name: The unique name to give to your cluster. The name can contain only alphanumeric characters (case-sensitive), hyphens, and underscores. It must start with an alphanumeric character and can't be longer than 100 characters. The name must be unique within the AWS Region and AWS account that you're creating the cluster in.
         :param outpost_config: An object representing the configuration of your local Amazon EKS cluster on an AWS Outpost. This object isn't available for clusters on the AWS cloud.
         :param tags: The metadata that you apply to the cluster to assist with categorization and organization. Each tag consists of a key and an optional value, both of which you define. Cluster tags don't propagate to any other resources associated with the cluster. .. epigraph:: You must have the ``eks:TagResource`` and ``eks:UntagResource`` permissions for your `IAM principal <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html>`_ to manage the AWS CloudFormation stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.
         :param upgrade_policy: This value indicates if extended support is enabled or disabled for the cluster. `Learn more about EKS Extended Support in the EKS User Guide. <https://docs.aws.amazon.com/eks/latest/userguide/extended-support-control.html>`_
@@ -7185,7 +7185,7 @@ class CfnClusterProps:
         :param encryption_config: The encryption configuration for the cluster.
         :param kubernetes_network_config: The Kubernetes network configuration for the cluster.
         :param logging: The logging configuration for your cluster.
-        :param name: The unique name to give to your cluster.
+        :param name: The unique name to give to your cluster. The name can contain only alphanumeric characters (case-sensitive), hyphens, and underscores. It must start with an alphanumeric character and can't be longer than 100 characters. The name must be unique within the AWS Region and AWS account that you're creating the cluster in.
         :param outpost_config: An object representing the configuration of your local Amazon EKS cluster on an AWS Outpost. This object isn't available for clusters on the AWS cloud.
         :param tags: The metadata that you apply to the cluster to assist with categorization and organization. Each tag consists of a key and an optional value, both of which you define. Cluster tags don't propagate to any other resources associated with the cluster. .. epigraph:: You must have the ``eks:TagResource`` and ``eks:UntagResource`` permissions for your `IAM principal <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html>`_ to manage the AWS CloudFormation stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.
         :param upgrade_policy: This value indicates if extended support is enabled or disabled for the cluster. `Learn more about EKS Extended Support in the EKS User Guide. <https://docs.aws.amazon.com/eks/latest/userguide/extended-support-control.html>`_
@@ -7391,6 +7391,10 @@ class CfnClusterProps:
     def name(self) -> typing.Optional[builtins.str]:
         '''The unique name to give to your cluster.
 
+        The name can contain only alphanumeric characters (case-sensitive),
+        hyphens, and underscores. It must start with an alphanumeric character and can't be longer than
+        100 characters. The name must be unique within the AWS Region and AWS account that you're creating the cluster in.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html#cfn-eks-cluster-name
         '''
         result = self._values.get("name")