aws-cdk-lib 2.162.1__py3-none-any.whl → 2.163.1__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (59) hide show
  1. aws_cdk/__init__.py +5 -7
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.162.1.jsii.tgz → aws-cdk-lib@2.163.1.jsii.tgz} +0 -0
  4. aws_cdk/aws_apigatewayv2/__init__.py +7 -7
  5. aws_cdk/aws_appflow/__init__.py +30 -16
  6. aws_cdk/aws_appsync/__init__.py +11 -21
  7. aws_cdk/aws_autoscaling/__init__.py +123 -0
  8. aws_cdk/aws_b2bi/__init__.py +83 -57
  9. aws_cdk/aws_cloudformation/__init__.py +5 -7
  10. aws_cdk/aws_codebuild/__init__.py +19 -40
  11. aws_cdk/aws_codepipeline/__init__.py +88 -7
  12. aws_cdk/aws_cognito/__init__.py +282 -168
  13. aws_cdk/aws_dms/__init__.py +1076 -117
  14. aws_cdk/aws_docdb/__init__.py +19 -13
  15. aws_cdk/aws_dynamodb/__init__.py +43 -22
  16. aws_cdk/aws_ec2/__init__.py +1213 -38
  17. aws_cdk/aws_ecs/__init__.py +187 -18
  18. aws_cdk/aws_ecs_patterns/__init__.py +189 -27
  19. aws_cdk/aws_efs/__init__.py +56 -37
  20. aws_cdk/aws_eks/__init__.py +6 -2
  21. aws_cdk/aws_elasticache/__init__.py +118 -118
  22. aws_cdk/aws_elasticloadbalancingv2/__init__.py +21 -1
  23. aws_cdk/aws_emr/__init__.py +124 -57
  24. aws_cdk/aws_events/__init__.py +40 -0
  25. aws_cdk/aws_fms/__init__.py +757 -8
  26. aws_cdk/aws_fsx/__init__.py +245 -10
  27. aws_cdk/aws_gamelift/__init__.py +121 -0
  28. aws_cdk/aws_glue/__init__.py +344 -61
  29. aws_cdk/aws_iam/__init__.py +44 -0
  30. aws_cdk/aws_identitystore/__init__.py +4 -2
  31. aws_cdk/aws_iot/__init__.py +40 -12
  32. aws_cdk/aws_kinesis/__init__.py +239 -0
  33. aws_cdk/aws_kms/__init__.py +92 -3
  34. aws_cdk/aws_lambda/__init__.py +2 -2
  35. aws_cdk/aws_mediapackagev2/__init__.py +26 -10
  36. aws_cdk/aws_memorydb/__init__.py +7 -7
  37. aws_cdk/aws_networkfirewall/__init__.py +89 -0
  38. aws_cdk/aws_qbusiness/__init__.py +51 -7
  39. aws_cdk/aws_quicksight/__init__.py +221 -87
  40. aws_cdk/aws_rds/__init__.py +376 -75
  41. aws_cdk/aws_redshift/__init__.py +493 -13
  42. aws_cdk/aws_route53profiles/__init__.py +4 -2
  43. aws_cdk/aws_route53resolver/__init__.py +26 -60
  44. aws_cdk/aws_s3/__init__.py +104 -4
  45. aws_cdk/aws_s3express/__init__.py +73 -13
  46. aws_cdk/aws_s3outposts/__init__.py +21 -12
  47. aws_cdk/aws_sagemaker/__init__.py +4 -44
  48. aws_cdk/aws_ssmquicksetup/__init__.py +2 -2
  49. aws_cdk/aws_stepfunctions/__init__.py +529 -156
  50. aws_cdk/aws_transfer/__init__.py +15 -4
  51. aws_cdk/aws_waf/__init__.py +11 -11
  52. aws_cdk/aws_wafregional/__init__.py +12 -12
  53. aws_cdk/aws_wisdom/__init__.py +710 -5
  54. {aws_cdk_lib-2.162.1.dist-info → aws_cdk_lib-2.163.1.dist-info}/METADATA +1 -1
  55. {aws_cdk_lib-2.162.1.dist-info → aws_cdk_lib-2.163.1.dist-info}/RECORD +59 -59
  56. {aws_cdk_lib-2.162.1.dist-info → aws_cdk_lib-2.163.1.dist-info}/LICENSE +0 -0
  57. {aws_cdk_lib-2.162.1.dist-info → aws_cdk_lib-2.163.1.dist-info}/NOTICE +0 -0
  58. {aws_cdk_lib-2.162.1.dist-info → aws_cdk_lib-2.163.1.dist-info}/WHEEL +0 -0
  59. {aws_cdk_lib-2.162.1.dist-info → aws_cdk_lib-2.163.1.dist-info}/top_level.txt +0 -0
@@ -130,7 +130,7 @@ class CfnChannel(
130
130
  :param channel_group_name: The name of the channel group associated with the channel configuration.
131
131
  :param channel_name: The name of the channel.
132
132
  :param description: The description of the channel.
133
- :param input_type:
133
+ :param input_type: The input type will be an immutable field which will be used to define whether the channel will allow CMAF ingest or HLS ingest. If unprovided, it will default to HLS to preserve current behavior. The allowed values are: - ``HLS`` - The HLS streaming specification (which defines M3U8 manifests and TS segments). - ``CMAF`` - The DASH-IF CMAF Ingest specification (which defines CMAF segments with optional DASH manifests).
134
134
  :param tags: The tags associated with the channel.
135
135
  '''
136
136
  if __debug__:
@@ -274,6 +274,7 @@ class CfnChannel(
274
274
  @builtins.property
275
275
  @jsii.member(jsii_name="inputType")
276
276
  def input_type(self) -> typing.Optional[builtins.str]:
277
+ '''The input type will be an immutable field which will be used to define whether the channel will allow CMAF ingest or HLS ingest.'''
277
278
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "inputType"))
278
279
 
279
280
  @input_type.setter
@@ -885,7 +886,7 @@ class CfnChannelProps:
885
886
  :param channel_group_name: The name of the channel group associated with the channel configuration.
886
887
  :param channel_name: The name of the channel.
887
888
  :param description: The description of the channel.
888
- :param input_type:
889
+ :param input_type: The input type will be an immutable field which will be used to define whether the channel will allow CMAF ingest or HLS ingest. If unprovided, it will default to HLS to preserve current behavior. The allowed values are: - ``HLS`` - The HLS streaming specification (which defines M3U8 manifests and TS segments). - ``CMAF`` - The DASH-IF CMAF Ingest specification (which defines CMAF segments with optional DASH manifests).
889
890
  :param tags: The tags associated with the channel.
890
891
 
891
892
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-channel.html
@@ -959,7 +960,15 @@ class CfnChannelProps:
959
960
 
960
961
  @builtins.property
961
962
  def input_type(self) -> typing.Optional[builtins.str]:
962
- '''
963
+ '''The input type will be an immutable field which will be used to define whether the channel will allow CMAF ingest or HLS ingest.
964
+
965
+ If unprovided, it will default to HLS to preserve current behavior.
966
+
967
+ The allowed values are:
968
+
969
+ - ``HLS`` - The HLS streaming specification (which defines M3U8 manifests and TS segments).
970
+ - ``CMAF`` - The DASH-IF CMAF Ingest specification (which defines CMAF segments with optional DASH manifests).
971
+
963
972
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-channel.html#cfn-mediapackagev2-channel-inputtype
964
973
  '''
965
974
  result = self._values.get("input_type")
@@ -1141,7 +1150,7 @@ class CfnOriginEndpoint(
1141
1150
  :param origin_endpoint_name: The name of the origin endpoint associated with the origin endpoint configuration.
1142
1151
  :param dash_manifests: A DASH manifest configuration.
1143
1152
  :param description: The description associated with the origin endpoint.
1144
- :param force_endpoint_error_configuration:
1153
+ :param force_endpoint_error_configuration: The failover settings for the endpoint.
1145
1154
  :param hls_manifests: The HLS manfiests associated with the origin endpoint configuration.
1146
1155
  :param low_latency_hls_manifests: The low-latency HLS (LL-HLS) manifests associated with the origin endpoint.
1147
1156
  :param segment: The segment associated with the origin endpoint.
@@ -1349,6 +1358,7 @@ class CfnOriginEndpoint(
1349
1358
  def force_endpoint_error_configuration(
1350
1359
  self,
1351
1360
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnOriginEndpoint.ForceEndpointErrorConfigurationProperty"]]:
1361
+ '''The failover settings for the endpoint.'''
1352
1362
  return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnOriginEndpoint.ForceEndpointErrorConfigurationProperty"]], jsii.get(self, "forceEndpointErrorConfiguration"))
1353
1363
 
1354
1364
  @force_endpoint_error_configuration.setter
@@ -2159,8 +2169,9 @@ class CfnOriginEndpoint(
2159
2169
  *,
2160
2170
  endpoint_error_conditions: typing.Optional[typing.Sequence[builtins.str]] = None,
2161
2171
  ) -> None:
2162
- '''
2163
- :param endpoint_error_conditions: The options are: STALE_MANIFEST - The manifest stalled and there a no new segments or parts. INCOMPLETE_MANIFEST - There is a gap in the manifest. MISSING_DRM_KEY - Key rotation is enabled but we're unable to fetch the key for the current key period.
2172
+ '''The failover settings for the endpoint.
2173
+
2174
+ :param endpoint_error_conditions: The failover conditions for the endpoint. The options are:. - ``STALE_MANIFEST`` - The manifest stalled and there are no new segments or parts. - ``INCOMPLETE_MANIFEST`` - There is a gap in the manifest. - ``MISSING_DRM_KEY`` - Key rotation is enabled but we're unable to fetch the key for the current key period. - ``SLATE_INPUT`` - The segments which contain slate content are considered to be missing content.
2164
2175
 
2165
2176
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackagev2-originendpoint-forceendpointerrorconfiguration.html
2166
2177
  :exampleMetadata: fixture=_generated
@@ -2186,8 +2197,12 @@ class CfnOriginEndpoint(
2186
2197
  def endpoint_error_conditions(
2187
2198
  self,
2188
2199
  ) -> typing.Optional[typing.List[builtins.str]]:
2189
- '''
2190
- The options are:
2200
+ '''The failover conditions for the endpoint. The options are:.
2201
+
2202
+ - ``STALE_MANIFEST`` - The manifest stalled and there are no new segments or parts.
2203
+ - ``INCOMPLETE_MANIFEST`` - There is a gap in the manifest.
2204
+ - ``MISSING_DRM_KEY`` - Key rotation is enabled but we're unable to fetch the key for the current key period.
2205
+ - ``SLATE_INPUT`` - The segments which contain slate content are considered to be missing content.
2191
2206
 
2192
2207
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackagev2-originendpoint-forceendpointerrorconfiguration.html#cfn-mediapackagev2-originendpoint-forceendpointerrorconfiguration-endpointerrorconditions
2193
2208
  '''
@@ -3336,7 +3351,7 @@ class CfnOriginEndpointProps:
3336
3351
  :param origin_endpoint_name: The name of the origin endpoint associated with the origin endpoint configuration.
3337
3352
  :param dash_manifests: A DASH manifest configuration.
3338
3353
  :param description: The description associated with the origin endpoint.
3339
- :param force_endpoint_error_configuration:
3354
+ :param force_endpoint_error_configuration: The failover settings for the endpoint.
3340
3355
  :param hls_manifests: The HLS manfiests associated with the origin endpoint configuration.
3341
3356
  :param low_latency_hls_manifests: The low-latency HLS (LL-HLS) manifests associated with the origin endpoint.
3342
3357
  :param segment: The segment associated with the origin endpoint.
@@ -3562,7 +3577,8 @@ class CfnOriginEndpointProps:
3562
3577
  def force_endpoint_error_configuration(
3563
3578
  self,
3564
3579
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnOriginEndpoint.ForceEndpointErrorConfigurationProperty]]:
3565
- '''
3580
+ '''The failover settings for the endpoint.
3581
+
3566
3582
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-originendpoint.html#cfn-mediapackagev2-originendpoint-forceendpointerrorconfiguration
3567
3583
  '''
3568
3584
  result = self._values.get("force_endpoint_error_configuration")
@@ -416,9 +416,9 @@ class CfnCluster(
416
416
  :param node_type: The cluster 's node type.
417
417
  :param auto_minor_version_upgrade: When set to true, the cluster will automatically receive minor engine version upgrades after launch.
418
418
  :param cluster_endpoint: The cluster 's configuration endpoint.
419
- :param data_tiering: Enables data tiering. Data tiering is only supported for replication groups using the r6gd node type. This parameter must be set to true when using r6gd nodes. For more information, see `Data tiering <https://docs.aws.amazon.com/memorydb/latest/devguide/data-tiering.html>`_ .
419
+ :param data_tiering: Enables data tiering. Data tiering is only supported for clusters using the r6gd node type. This parameter must be set when using r6gd nodes. For more information, see `Data tiering <https://docs.aws.amazon.com/memorydb/latest/devguide/data-tiering.html>`_ .
420
420
  :param description: A description of the cluster .
421
- :param engine_version: The Redis engine version used by the cluster .
421
+ :param engine_version: The Valkey or Redis OSS engine version used by the cluster .
422
422
  :param final_snapshot_name: The user-supplied name of a final cluster snapshot. This is the unique name that identifies the snapshot. MemoryDB creates the snapshot, and then deletes the cluster immediately afterward.
423
423
  :param kms_key_id: The ID of the KMS key used to encrypt the cluster .
424
424
  :param maintenance_window: Specifies the weekly time range during which maintenance on the cluster is performed. It is specified as a range in the format ``ddd:hh24:mi-ddd:hh24:mi`` (24H Clock UTC). The minimum maintenance window is a 60 minute period. *Pattern* : ``ddd:hh24:mi-ddd:hh24:mi``
@@ -663,7 +663,7 @@ class CfnCluster(
663
663
  @builtins.property
664
664
  @jsii.member(jsii_name="engineVersion")
665
665
  def engine_version(self) -> typing.Optional[builtins.str]:
666
- '''The Redis engine version used by the cluster .'''
666
+ '''The Valkey or Redis OSS engine version used by the cluster .'''
667
667
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "engineVersion"))
668
668
 
669
669
  @engine_version.setter
@@ -1041,9 +1041,9 @@ class CfnClusterProps:
1041
1041
  :param node_type: The cluster 's node type.
1042
1042
  :param auto_minor_version_upgrade: When set to true, the cluster will automatically receive minor engine version upgrades after launch.
1043
1043
  :param cluster_endpoint: The cluster 's configuration endpoint.
1044
- :param data_tiering: Enables data tiering. Data tiering is only supported for replication groups using the r6gd node type. This parameter must be set to true when using r6gd nodes. For more information, see `Data tiering <https://docs.aws.amazon.com/memorydb/latest/devguide/data-tiering.html>`_ .
1044
+ :param data_tiering: Enables data tiering. Data tiering is only supported for clusters using the r6gd node type. This parameter must be set when using r6gd nodes. For more information, see `Data tiering <https://docs.aws.amazon.com/memorydb/latest/devguide/data-tiering.html>`_ .
1045
1045
  :param description: A description of the cluster .
1046
- :param engine_version: The Redis engine version used by the cluster .
1046
+ :param engine_version: The Valkey or Redis OSS engine version used by the cluster .
1047
1047
  :param final_snapshot_name: The user-supplied name of a final cluster snapshot. This is the unique name that identifies the snapshot. MemoryDB creates the snapshot, and then deletes the cluster immediately afterward.
1048
1048
  :param kms_key_id: The ID of the KMS key used to encrypt the cluster .
1049
1049
  :param maintenance_window: Specifies the weekly time range during which maintenance on the cluster is performed. It is specified as a range in the format ``ddd:hh24:mi-ddd:hh24:mi`` (24H Clock UTC). The minimum maintenance window is a 60 minute period. *Pattern* : ``ddd:hh24:mi-ddd:hh24:mi``
@@ -1240,7 +1240,7 @@ class CfnClusterProps:
1240
1240
  def data_tiering(self) -> typing.Optional[builtins.str]:
1241
1241
  '''Enables data tiering.
1242
1242
 
1243
- Data tiering is only supported for replication groups using the r6gd node type. This parameter must be set to true when using r6gd nodes. For more information, see `Data tiering <https://docs.aws.amazon.com/memorydb/latest/devguide/data-tiering.html>`_ .
1243
+ Data tiering is only supported for clusters using the r6gd node type. This parameter must be set when using r6gd nodes. For more information, see `Data tiering <https://docs.aws.amazon.com/memorydb/latest/devguide/data-tiering.html>`_ .
1244
1244
 
1245
1245
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-cluster.html#cfn-memorydb-cluster-datatiering
1246
1246
  '''
@@ -1258,7 +1258,7 @@ class CfnClusterProps:
1258
1258
 
1259
1259
  @builtins.property
1260
1260
  def engine_version(self) -> typing.Optional[builtins.str]:
1261
- '''The Redis engine version used by the cluster .
1261
+ '''The Valkey or Redis OSS engine version used by the cluster .
1262
1262
 
1263
1263
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-cluster.html#cfn-memorydb-cluster-engineversion
1264
1264
  '''
@@ -479,6 +479,9 @@ class CfnFirewallPolicy(
479
479
  ),
480
480
  stateful_default_actions=["statefulDefaultActions"],
481
481
  stateful_engine_options=networkfirewall.CfnFirewallPolicy.StatefulEngineOptionsProperty(
482
+ flow_timeouts=networkfirewall.CfnFirewallPolicy.FlowTimeoutsProperty(
483
+ tcp_idle_timeout_seconds=123
484
+ ),
482
485
  rule_order="ruleOrder",
483
486
  stream_exception_policy="streamExceptionPolicy"
484
487
  ),
@@ -945,6 +948,9 @@ class CfnFirewallPolicy(
945
948
  ),
946
949
  stateful_default_actions=["statefulDefaultActions"],
947
950
  stateful_engine_options=networkfirewall.CfnFirewallPolicy.StatefulEngineOptionsProperty(
951
+ flow_timeouts=networkfirewall.CfnFirewallPolicy.FlowTimeoutsProperty(
952
+ tcp_idle_timeout_seconds=123
953
+ ),
948
954
  rule_order="ruleOrder",
949
955
  stream_exception_policy="streamExceptionPolicy"
950
956
  ),
@@ -1141,6 +1147,59 @@ class CfnFirewallPolicy(
1141
1147
  k + "=" + repr(v) for k, v in self._values.items()
1142
1148
  )
1143
1149
 
1150
+ @jsii.data_type(
1151
+ jsii_type="aws-cdk-lib.aws_networkfirewall.CfnFirewallPolicy.FlowTimeoutsProperty",
1152
+ jsii_struct_bases=[],
1153
+ name_mapping={"tcp_idle_timeout_seconds": "tcpIdleTimeoutSeconds"},
1154
+ )
1155
+ class FlowTimeoutsProperty:
1156
+ def __init__(
1157
+ self,
1158
+ *,
1159
+ tcp_idle_timeout_seconds: typing.Optional[jsii.Number] = None,
1160
+ ) -> None:
1161
+ '''
1162
+ :param tcp_idle_timeout_seconds:
1163
+
1164
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-flowtimeouts.html
1165
+ :exampleMetadata: fixture=_generated
1166
+
1167
+ Example::
1168
+
1169
+ # The code below shows an example of how to instantiate this type.
1170
+ # The values are placeholders you should change.
1171
+ from aws_cdk import aws_networkfirewall as networkfirewall
1172
+
1173
+ flow_timeouts_property = networkfirewall.CfnFirewallPolicy.FlowTimeoutsProperty(
1174
+ tcp_idle_timeout_seconds=123
1175
+ )
1176
+ '''
1177
+ if __debug__:
1178
+ type_hints = typing.get_type_hints(_typecheckingstub__4350128fa619a287451e7349f3a546602986e4c5bea091c0aa3703d7590bd54f)
1179
+ check_type(argname="argument tcp_idle_timeout_seconds", value=tcp_idle_timeout_seconds, expected_type=type_hints["tcp_idle_timeout_seconds"])
1180
+ self._values: typing.Dict[builtins.str, typing.Any] = {}
1181
+ if tcp_idle_timeout_seconds is not None:
1182
+ self._values["tcp_idle_timeout_seconds"] = tcp_idle_timeout_seconds
1183
+
1184
+ @builtins.property
1185
+ def tcp_idle_timeout_seconds(self) -> typing.Optional[jsii.Number]:
1186
+ '''
1187
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-flowtimeouts.html#cfn-networkfirewall-firewallpolicy-flowtimeouts-tcpidletimeoutseconds
1188
+ '''
1189
+ result = self._values.get("tcp_idle_timeout_seconds")
1190
+ return typing.cast(typing.Optional[jsii.Number], result)
1191
+
1192
+ def __eq__(self, rhs: typing.Any) -> builtins.bool:
1193
+ return isinstance(rhs, self.__class__) and rhs._values == self._values
1194
+
1195
+ def __ne__(self, rhs: typing.Any) -> builtins.bool:
1196
+ return not (rhs == self)
1197
+
1198
+ def __repr__(self) -> str:
1199
+ return "FlowTimeoutsProperty(%s)" % ", ".join(
1200
+ k + "=" + repr(v) for k, v in self._values.items()
1201
+ )
1202
+
1144
1203
  @jsii.data_type(
1145
1204
  jsii_type="aws-cdk-lib.aws_networkfirewall.CfnFirewallPolicy.IPSetProperty",
1146
1205
  jsii_struct_bases=[],
@@ -1326,6 +1385,7 @@ class CfnFirewallPolicy(
1326
1385
  jsii_type="aws-cdk-lib.aws_networkfirewall.CfnFirewallPolicy.StatefulEngineOptionsProperty",
1327
1386
  jsii_struct_bases=[],
1328
1387
  name_mapping={
1388
+ "flow_timeouts": "flowTimeouts",
1329
1389
  "rule_order": "ruleOrder",
1330
1390
  "stream_exception_policy": "streamExceptionPolicy",
1331
1391
  },
@@ -1334,11 +1394,13 @@ class CfnFirewallPolicy(
1334
1394
  def __init__(
1335
1395
  self,
1336
1396
  *,
1397
+ flow_timeouts: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnFirewallPolicy.FlowTimeoutsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
1337
1398
  rule_order: typing.Optional[builtins.str] = None,
1338
1399
  stream_exception_policy: typing.Optional[builtins.str] = None,
1339
1400
  ) -> None:
1340
1401
  '''Configuration settings for the handling of the stateful rule groups in a firewall policy.
1341
1402
 
1403
+ :param flow_timeouts:
1342
1404
  :param rule_order: Indicates how to manage the order of stateful rule evaluation for the policy. ``DEFAULT_ACTION_ORDER`` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see `Evaluation order for stateful rules <https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html>`_ in the *AWS Network Firewall Developer Guide* .
1343
1405
  :param stream_exception_policy: Configures how Network Firewall processes traffic when a network connection breaks midstream. Network connections can break due to disruptions in external networks or within the firewall itself. - ``DROP`` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. This is the default behavior. - ``CONTINUE`` - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to ``drop http`` traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a ``flow:stateless`` rule would still match, as would the ``aws:drop_strict`` default action. - ``REJECT`` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. Network Firewall also sends a TCP reject packet back to your client so that the client can immediately establish a new session. Network Firewall will have context about the new session and will apply rules to the subsequent traffic.
1344
1406
 
@@ -1352,20 +1414,36 @@ class CfnFirewallPolicy(
1352
1414
  from aws_cdk import aws_networkfirewall as networkfirewall
1353
1415
 
1354
1416
  stateful_engine_options_property = networkfirewall.CfnFirewallPolicy.StatefulEngineOptionsProperty(
1417
+ flow_timeouts=networkfirewall.CfnFirewallPolicy.FlowTimeoutsProperty(
1418
+ tcp_idle_timeout_seconds=123
1419
+ ),
1355
1420
  rule_order="ruleOrder",
1356
1421
  stream_exception_policy="streamExceptionPolicy"
1357
1422
  )
1358
1423
  '''
1359
1424
  if __debug__:
1360
1425
  type_hints = typing.get_type_hints(_typecheckingstub__69e95338d370bfb1bbb954499358a8d8914836eb171006f958c9fa4debca2e09)
1426
+ check_type(argname="argument flow_timeouts", value=flow_timeouts, expected_type=type_hints["flow_timeouts"])
1361
1427
  check_type(argname="argument rule_order", value=rule_order, expected_type=type_hints["rule_order"])
1362
1428
  check_type(argname="argument stream_exception_policy", value=stream_exception_policy, expected_type=type_hints["stream_exception_policy"])
1363
1429
  self._values: typing.Dict[builtins.str, typing.Any] = {}
1430
+ if flow_timeouts is not None:
1431
+ self._values["flow_timeouts"] = flow_timeouts
1364
1432
  if rule_order is not None:
1365
1433
  self._values["rule_order"] = rule_order
1366
1434
  if stream_exception_policy is not None:
1367
1435
  self._values["stream_exception_policy"] = stream_exception_policy
1368
1436
 
1437
+ @builtins.property
1438
+ def flow_timeouts(
1439
+ self,
1440
+ ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFirewallPolicy.FlowTimeoutsProperty"]]:
1441
+ '''
1442
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-statefulengineoptions.html#cfn-networkfirewall-firewallpolicy-statefulengineoptions-flowtimeouts
1443
+ '''
1444
+ result = self._values.get("flow_timeouts")
1445
+ return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFirewallPolicy.FlowTimeoutsProperty"]], result)
1446
+
1369
1447
  @builtins.property
1370
1448
  def rule_order(self) -> typing.Optional[builtins.str]:
1371
1449
  '''Indicates how to manage the order of stateful rule evaluation for the policy.
@@ -1682,6 +1760,9 @@ class CfnFirewallPolicyProps:
1682
1760
  ),
1683
1761
  stateful_default_actions=["statefulDefaultActions"],
1684
1762
  stateful_engine_options=networkfirewall.CfnFirewallPolicy.StatefulEngineOptionsProperty(
1763
+ flow_timeouts=networkfirewall.CfnFirewallPolicy.FlowTimeoutsProperty(
1764
+ tcp_idle_timeout_seconds=123
1765
+ ),
1685
1766
  rule_order="ruleOrder",
1686
1767
  stream_exception_policy="streamExceptionPolicy"
1687
1768
  ),
@@ -6491,6 +6572,13 @@ def _typecheckingstub__1b6a6014864b81482e4c4a383921c58673d84e8e882dc4fb7cea71a2d
6491
6572
  """Type checking stubs"""
6492
6573
  pass
6493
6574
 
6575
+ def _typecheckingstub__4350128fa619a287451e7349f3a546602986e4c5bea091c0aa3703d7590bd54f(
6576
+ *,
6577
+ tcp_idle_timeout_seconds: typing.Optional[jsii.Number] = None,
6578
+ ) -> None:
6579
+ """Type checking stubs"""
6580
+ pass
6581
+
6494
6582
  def _typecheckingstub__d067b828f689f1f983a48f9f4eb8d06f4dfe2f2e6a20585837d5fe154bfc4ae8(
6495
6583
  *,
6496
6584
  definition: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -6514,6 +6602,7 @@ def _typecheckingstub__eab9540ab80b4dd980d8dda17b30755d1e15a920591be54fdd8184a0a
6514
6602
 
6515
6603
  def _typecheckingstub__69e95338d370bfb1bbb954499358a8d8914836eb171006f958c9fa4debca2e09(
6516
6604
  *,
6605
+ flow_timeouts: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFirewallPolicy.FlowTimeoutsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
6517
6606
  rule_order: typing.Optional[builtins.str] = None,
6518
6607
  stream_exception_policy: typing.Optional[builtins.str] = None,
6519
6608
  ) -> None:
@@ -1197,7 +1197,7 @@ class CfnDataSource(
1197
1197
  :param scope: Scope in which this resource is defined.
1198
1198
  :param id: Construct identifier for this resource (unique in its scope).
1199
1199
  :param application_id: The identifier of the Amazon Q Business application the data source will be attached to.
1200
- :param configuration: Use this property to specify a JSON or YAML schema with configuration information specific to your data source connector to connect your data source repository to Amazon Q Business . You must use the JSON or YAML schema provided by Amazon Q . You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source connector of your choice. - Then, from that specific data source connector's page, select *Using AWS CloudFormation* to find the schemas for your data source connector, including parameter descriptions and examples.
1200
+ :param configuration: Configuration information to connect your data source repository to Amazon Q Business. Use this parameter to provide a JSON schema with configuration information specific to your data source connector. Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas: - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_ You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice. - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
1201
1201
  :param display_name: The name of the Amazon Q Business data source.
1202
1202
  :param index_id: The identifier of the index the data source is attached to.
1203
1203
  :param description: A description for the data source connector.
@@ -1337,7 +1337,7 @@ class CfnDataSource(
1337
1337
  @builtins.property
1338
1338
  @jsii.member(jsii_name="configuration")
1339
1339
  def configuration(self) -> typing.Any:
1340
- '''Use this property to specify a JSON or YAML schema with configuration information specific to your data source connector to connect your data source repository to Amazon Q Business .'''
1340
+ '''Configuration information to connect your data source repository to Amazon Q Business.'''
1341
1341
  return typing.cast(typing.Any, jsii.get(self, "configuration"))
1342
1342
 
1343
1343
  @configuration.setter
@@ -2317,7 +2317,7 @@ class CfnDataSourceProps:
2317
2317
  '''Properties for defining a ``CfnDataSource``.
2318
2318
 
2319
2319
  :param application_id: The identifier of the Amazon Q Business application the data source will be attached to.
2320
- :param configuration: Use this property to specify a JSON or YAML schema with configuration information specific to your data source connector to connect your data source repository to Amazon Q Business . You must use the JSON or YAML schema provided by Amazon Q . You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source connector of your choice. - Then, from that specific data source connector's page, select *Using AWS CloudFormation* to find the schemas for your data source connector, including parameter descriptions and examples.
2320
+ :param configuration: Configuration information to connect your data source repository to Amazon Q Business. Use this parameter to provide a JSON schema with configuration information specific to your data source connector. Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas: - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_ You can find configuration templates for your specific data source using the following steps: - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice. - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
2321
2321
  :param display_name: The name of the Amazon Q Business data source.
2322
2322
  :param index_id: The identifier of the index the data source is attached to.
2323
2323
  :param description: A description for the data source connector.
@@ -2464,14 +2464,19 @@ class CfnDataSourceProps:
2464
2464
 
2465
2465
  @builtins.property
2466
2466
  def configuration(self) -> typing.Any:
2467
- '''Use this property to specify a JSON or YAML schema with configuration information specific to your data source connector to connect your data source repository to Amazon Q Business .
2467
+ '''Configuration information to connect your data source repository to Amazon Q Business.
2468
2468
 
2469
- You must use the JSON or YAML schema provided by Amazon Q .
2469
+ Use this parameter to provide a JSON schema with configuration information specific to your data source connector.
2470
+
2471
+ Each data source has a JSON schema provided by Amazon Q Business that you must use. For example, the Amazon S3 and Web Crawler connectors require the following JSON schemas:
2472
+
2473
+ - `Amazon S3 JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-api.html>`_
2474
+ - `Web Crawler JSON schema <https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-api.html>`_
2470
2475
 
2471
2476
  You can find configuration templates for your specific data source using the following steps:
2472
2477
 
2473
- - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source connector of your choice.
2474
- - Then, from that specific data source connector's page, select *Using AWS CloudFormation* to find the schemas for your data source connector, including parameter descriptions and examples.
2478
+ - Navigate to the `Supported connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html>`_ page in the Amazon Q Business User Guide, and select the data source of your choice.
2479
+ - Then, from your specific data source connector page, select *Using the API* . You will find the JSON schema for your data source, including parameter descriptions, in this section.
2475
2480
 
2476
2481
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-datasource.html#cfn-qbusiness-datasource-configuration
2477
2482
  '''
@@ -4919,6 +4924,7 @@ class CfnWebExperience(
4919
4924
  authentication_url="authenticationUrl"
4920
4925
  )
4921
4926
  ),
4927
+ origins=["origins"],
4922
4928
  role_arn="roleArn",
4923
4929
  sample_prompts_control_mode="samplePromptsControlMode",
4924
4930
  subtitle="subtitle",
@@ -4938,6 +4944,7 @@ class CfnWebExperience(
4938
4944
  *,
4939
4945
  application_id: builtins.str,
4940
4946
  identity_provider_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebExperience.IdentityProviderConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
4947
+ origins: typing.Optional[typing.Sequence[builtins.str]] = None,
4941
4948
  role_arn: typing.Optional[builtins.str] = None,
4942
4949
  sample_prompts_control_mode: typing.Optional[builtins.str] = None,
4943
4950
  subtitle: typing.Optional[builtins.str] = None,
@@ -4950,6 +4957,7 @@ class CfnWebExperience(
4950
4957
  :param id: Construct identifier for this resource (unique in its scope).
4951
4958
  :param application_id: The identifier of the Amazon Q Business web experience.
4952
4959
  :param identity_provider_configuration: Provides information about the identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience.
4960
+ :param origins:
4953
4961
  :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience. .. epigraph:: You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
4954
4962
  :param sample_prompts_control_mode: Determines whether sample prompts are enabled in the web experience for an end user.
4955
4963
  :param subtitle: A subtitle to personalize your Amazon Q Business web experience.
@@ -4964,6 +4972,7 @@ class CfnWebExperience(
4964
4972
  props = CfnWebExperienceProps(
4965
4973
  application_id=application_id,
4966
4974
  identity_provider_configuration=identity_provider_configuration,
4975
+ origins=origins,
4967
4976
  role_arn=role_arn,
4968
4977
  sample_prompts_control_mode=sample_prompts_control_mode,
4969
4978
  subtitle=subtitle,
@@ -5102,6 +5111,18 @@ class CfnWebExperience(
5102
5111
  check_type(argname="argument value", value=value, expected_type=type_hints["value"])
5103
5112
  jsii.set(self, "identityProviderConfiguration", value) # pyright: ignore[reportArgumentType]
5104
5113
 
5114
+ @builtins.property
5115
+ @jsii.member(jsii_name="origins")
5116
+ def origins(self) -> typing.Optional[typing.List[builtins.str]]:
5117
+ return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "origins"))
5118
+
5119
+ @origins.setter
5120
+ def origins(self, value: typing.Optional[typing.List[builtins.str]]) -> None:
5121
+ if __debug__:
5122
+ type_hints = typing.get_type_hints(_typecheckingstub__efefc83f84ced0d16f9a7d4536640a373b6576081faef2262e41578447add1df)
5123
+ check_type(argname="argument value", value=value, expected_type=type_hints["value"])
5124
+ jsii.set(self, "origins", value) # pyright: ignore[reportArgumentType]
5125
+
5105
5126
  @builtins.property
5106
5127
  @jsii.member(jsii_name="roleArn")
5107
5128
  def role_arn(self) -> typing.Optional[builtins.str]:
@@ -5390,6 +5411,7 @@ class CfnWebExperience(
5390
5411
  name_mapping={
5391
5412
  "application_id": "applicationId",
5392
5413
  "identity_provider_configuration": "identityProviderConfiguration",
5414
+ "origins": "origins",
5393
5415
  "role_arn": "roleArn",
5394
5416
  "sample_prompts_control_mode": "samplePromptsControlMode",
5395
5417
  "subtitle": "subtitle",
@@ -5404,6 +5426,7 @@ class CfnWebExperienceProps:
5404
5426
  *,
5405
5427
  application_id: builtins.str,
5406
5428
  identity_provider_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebExperience.IdentityProviderConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
5429
+ origins: typing.Optional[typing.Sequence[builtins.str]] = None,
5407
5430
  role_arn: typing.Optional[builtins.str] = None,
5408
5431
  sample_prompts_control_mode: typing.Optional[builtins.str] = None,
5409
5432
  subtitle: typing.Optional[builtins.str] = None,
@@ -5415,6 +5438,7 @@ class CfnWebExperienceProps:
5415
5438
 
5416
5439
  :param application_id: The identifier of the Amazon Q Business web experience.
5417
5440
  :param identity_provider_configuration: Provides information about the identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience.
5441
+ :param origins:
5418
5442
  :param role_arn: The Amazon Resource Name (ARN) of the service role attached to your web experience. .. epigraph:: You must provide this value if you're using IAM Identity Center to manage end user access to your application. If you're using legacy identity management to manage user access, you don't need to provide this value.
5419
5443
  :param sample_prompts_control_mode: Determines whether sample prompts are enabled in the web experience for an end user.
5420
5444
  :param subtitle: A subtitle to personalize your Amazon Q Business web experience.
@@ -5444,6 +5468,7 @@ class CfnWebExperienceProps:
5444
5468
  authentication_url="authenticationUrl"
5445
5469
  )
5446
5470
  ),
5471
+ origins=["origins"],
5447
5472
  role_arn="roleArn",
5448
5473
  sample_prompts_control_mode="samplePromptsControlMode",
5449
5474
  subtitle="subtitle",
@@ -5459,6 +5484,7 @@ class CfnWebExperienceProps:
5459
5484
  type_hints = typing.get_type_hints(_typecheckingstub__58d2b12e60ffd88803f1746b34f5f9b5b77805b460b8074165db15b9de292293)
5460
5485
  check_type(argname="argument application_id", value=application_id, expected_type=type_hints["application_id"])
5461
5486
  check_type(argname="argument identity_provider_configuration", value=identity_provider_configuration, expected_type=type_hints["identity_provider_configuration"])
5487
+ check_type(argname="argument origins", value=origins, expected_type=type_hints["origins"])
5462
5488
  check_type(argname="argument role_arn", value=role_arn, expected_type=type_hints["role_arn"])
5463
5489
  check_type(argname="argument sample_prompts_control_mode", value=sample_prompts_control_mode, expected_type=type_hints["sample_prompts_control_mode"])
5464
5490
  check_type(argname="argument subtitle", value=subtitle, expected_type=type_hints["subtitle"])
@@ -5470,6 +5496,8 @@ class CfnWebExperienceProps:
5470
5496
  }
5471
5497
  if identity_provider_configuration is not None:
5472
5498
  self._values["identity_provider_configuration"] = identity_provider_configuration
5499
+ if origins is not None:
5500
+ self._values["origins"] = origins
5473
5501
  if role_arn is not None:
5474
5502
  self._values["role_arn"] = role_arn
5475
5503
  if sample_prompts_control_mode is not None:
@@ -5504,6 +5532,14 @@ class CfnWebExperienceProps:
5504
5532
  result = self._values.get("identity_provider_configuration")
5505
5533
  return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebExperience.IdentityProviderConfigurationProperty]], result)
5506
5534
 
5535
+ @builtins.property
5536
+ def origins(self) -> typing.Optional[typing.List[builtins.str]]:
5537
+ '''
5538
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-webexperience.html#cfn-qbusiness-webexperience-origins
5539
+ '''
5540
+ result = self._values.get("origins")
5541
+ return typing.cast(typing.Optional[typing.List[builtins.str]], result)
5542
+
5507
5543
  @builtins.property
5508
5544
  def role_arn(self) -> typing.Optional[builtins.str]:
5509
5545
  '''The Amazon Resource Name (ARN) of the service role attached to your web experience.
@@ -6285,6 +6321,7 @@ def _typecheckingstub__357871375e43a0ed6fbb398668ece13df26dff3afca5c98268a56fffd
6285
6321
  *,
6286
6322
  application_id: builtins.str,
6287
6323
  identity_provider_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebExperience.IdentityProviderConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
6324
+ origins: typing.Optional[typing.Sequence[builtins.str]] = None,
6288
6325
  role_arn: typing.Optional[builtins.str] = None,
6289
6326
  sample_prompts_control_mode: typing.Optional[builtins.str] = None,
6290
6327
  subtitle: typing.Optional[builtins.str] = None,
@@ -6319,6 +6356,12 @@ def _typecheckingstub__037151dbe9f2f36da364495e39b2467a261694df042a6b81d84e5c2c3
6319
6356
  """Type checking stubs"""
6320
6357
  pass
6321
6358
 
6359
+ def _typecheckingstub__efefc83f84ced0d16f9a7d4536640a373b6576081faef2262e41578447add1df(
6360
+ value: typing.Optional[typing.List[builtins.str]],
6361
+ ) -> None:
6362
+ """Type checking stubs"""
6363
+ pass
6364
+
6322
6365
  def _typecheckingstub__9e93af1c8c50a8fbbba5f2f4c0d1013951bd550b401230f1ec2637c4955cea1b(
6323
6366
  value: typing.Optional[builtins.str],
6324
6367
  ) -> None:
@@ -6382,6 +6425,7 @@ def _typecheckingstub__58d2b12e60ffd88803f1746b34f5f9b5b77805b460b8074165db15b9d
6382
6425
  *,
6383
6426
  application_id: builtins.str,
6384
6427
  identity_provider_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebExperience.IdentityProviderConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
6428
+ origins: typing.Optional[typing.Sequence[builtins.str]] = None,
6385
6429
  role_arn: typing.Optional[builtins.str] = None,
6386
6430
  sample_prompts_control_mode: typing.Optional[builtins.str] = None,
6387
6431
  subtitle: typing.Optional[builtins.str] = None,