aws-cdk-lib 2.166.0__py3-none-any.whl → 2.167.0__py3-none-any.whl

aws_cdk/aws_appsync/__init__.py

@@ -992,6 +992,7 @@ from ..aws_iam import (
     IRole as _IRole_235f5d8e,
     Role as _Role_e8c6e11f,
 )
+from ..aws_kms import IKey as _IKey_5f11635f
 from ..aws_lambda import IFunction as _IFunction_6adb0ab8
 from ..aws_logs import (
     ILogGroup as _ILogGroup_3c4fa718, RetentionDays as _RetentionDays_070f99f0
@@ -2452,7 +2453,7 @@ class CfnApi(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_appsync.CfnApi",
 ):
-    '''Creates a ``GraphqlApi`` object.
+    '''The ``AWS::AppSync::Api`` resource creates an AWS AppSync API that you can use for an AWS AppSync API with your preferred configuration, such as an Event API that provides real-time message publishing and message subscriptions over WebSockets.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html
     :cloudformationResource: AWS::AppSync::Api
@@ -2533,10 +2534,10 @@ class CfnApi(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param name: The API name.
-        :param event_config: The configuration for an Event Api.
+        :param name: The name of the ``Api`` .
+        :param event_config: Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API.
         :param owner_contact: The owner contact information for an API resource. This field accepts any string input with a length of 0 - 256 characters.
-        :param tags: The tags.
+        :param tags: A set of tags (key-value pairs) for this API.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9b24e030284e4cb760e04c0345cc69b457962fa5c53b82f009a5c412ad0fa1e5)
@@ -2584,7 +2585,7 @@ class CfnApi(
     @builtins.property
     @jsii.member(jsii_name="attrApiArn")
     def attr_api_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) of the AppSync Api.
+        '''The Amazon Resource Name (ARN) of the AWS AppSync Api.
 
         :cloudformationAttribute: ApiArn
         '''
@@ -2593,7 +2594,7 @@ class CfnApi(
     @builtins.property
     @jsii.member(jsii_name="attrApiId")
     def attr_api_id(self) -> builtins.str:
-        '''The API ID.
+        '''The unique identifier for the AWS AppSync Api generated by the service.
 
         :cloudformationAttribute: ApiId
         '''
@@ -2608,6 +2609,24 @@ class CfnApi(
         '''
         return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrDns"))
 
+    @builtins.property
+    @jsii.member(jsii_name="attrDnsHttp")
+    def attr_dns_http(self) -> builtins.str:
+        '''The domain name of the Api's HTTP endpoint.
+
+        :cloudformationAttribute: Dns.Http
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrDnsHttp"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrDnsRealtime")
+    def attr_dns_realtime(self) -> builtins.str:
+        '''The domain name of the Api's real-time endpoint.
+
+        :cloudformationAttribute: Dns.Realtime
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrDnsRealtime"))
+
     @builtins.property
     @jsii.member(jsii_name="cdkTagManager")
     def cdk_tag_manager(self) -> _TagManager_0a598cb3:
@@ -2622,7 +2641,7 @@ class CfnApi(
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
-        '''The API name.'''
+        '''The name of the ``Api`` .'''
         return typing.cast(builtins.str, jsii.get(self, "name"))
 
     @name.setter
@@ -2637,7 +2656,7 @@ class CfnApi(
     def event_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventConfigProperty"]]:
-        '''The configuration for an Event Api.'''
+        '''Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventConfigProperty"]], jsii.get(self, "eventConfig"))
 
     @event_config.setter
@@ -2666,7 +2685,7 @@ class CfnApi(
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''The tags.'''
+        '''A set of tags (key-value pairs) for this API.'''
         return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
 
     @tags.setter
@@ -2683,9 +2702,11 @@ class CfnApi(
     )
     class AuthModeProperty:
         def __init__(self, *, auth_type: typing.Optional[builtins.str] = None) -> None:
-            '''An auth mode.
+            '''Describes an authorization configuration.
+
+            Use ``AuthMode`` to specify the publishing and subscription authorization configuration for an Event API.
 
-            :param auth_type: Security configuration for your AppSync API.
+            :param auth_type: The authorization type.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authmode.html
             :exampleMetadata: fixture=_generated
@@ -2709,7 +2730,7 @@ class CfnApi(
 
         @builtins.property
         def auth_type(self) -> typing.Optional[builtins.str]:
-            '''Security configuration for your AppSync API.
+            '''The authorization type.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authmode.html#cfn-appsync-api-authmode-authtype
             '''
@@ -2746,12 +2767,12 @@ class CfnApi(
             lambda_authorizer_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.LambdaAuthorizerConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             open_id_connect_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.OpenIDConnectConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
-            '''An auth provider for the AppSync API.
+            '''Describes an authorization provider.
 
-            :param auth_type: Security configuration for your AppSync API.
-            :param cognito_config: Optional authorization configuration for using Amazon Cognito user pools with your API endpoint.
-            :param lambda_authorizer_config: A LambdaAuthorizerConfig holds configuration on how to authorize AWS AppSync API access when using the AWS_LAMBDA authorizer mode. Be aware that an AWS AppSync API may have only one Lambda authorizer configured at a time.
-            :param open_id_connect_config: The OpenID Connect configuration.
+            :param auth_type: The authorization type.
+            :param cognito_config: Describes an Amazon Cognito user pool configuration.
+            :param lambda_authorizer_config: A ``LambdaAuthorizerConfig`` specifies how to authorize AWS AppSync API access when using the ``AWS_LAMBDA`` authorizer mode. Be aware that an AWS AppSync API can have only one AWS Lambda authorizer configured at a time.
+            :param open_id_connect_config: Describes an OpenID Connect (OIDC) configuration.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html
             :exampleMetadata: fixture=_generated
@@ -2808,7 +2829,7 @@ class CfnApi(
 
         @builtins.property
         def auth_type(self) -> builtins.str:
-            '''Security configuration for your AppSync API.
+            '''The authorization type.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-authtype
             '''
@@ -2820,7 +2841,7 @@ class CfnApi(
         def cognito_config(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.CognitoConfigProperty"]]:
-            '''Optional authorization configuration for using Amazon Cognito user pools with your API endpoint.
+            '''Describes an Amazon Cognito user pool configuration.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-cognitoconfig
             '''
@@ -2831,9 +2852,9 @@ class CfnApi(
         def lambda_authorizer_config(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.LambdaAuthorizerConfigProperty"]]:
-            '''A LambdaAuthorizerConfig holds configuration on how to authorize AWS AppSync API access when using the AWS_LAMBDA authorizer mode.
+            '''A ``LambdaAuthorizerConfig`` specifies how to authorize AWS AppSync API access when using the ``AWS_LAMBDA`` authorizer mode.
 
-            Be aware that an AWS AppSync API may have only one Lambda authorizer configured at a time.
+            Be aware that an AWS AppSync API can have only one AWS Lambda authorizer configured at a time.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-lambdaauthorizerconfig
             '''
@@ -2844,7 +2865,7 @@ class CfnApi(
         def open_id_connect_config(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.OpenIDConnectConfigProperty"]]:
-            '''The OpenID Connect configuration.
+            '''Describes an OpenID Connect (OIDC) configuration.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-openidconnectconfig
             '''
@@ -2879,11 +2900,11 @@ class CfnApi(
             user_pool_id: builtins.str,
             app_id_client_regex: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Optional authorization configuration for using Amazon Cognito user pools with your API endpoint.
+            '''Describes an Amazon Cognito configuration.
 
-            :param aws_region: 
-            :param user_pool_id: 
-            :param app_id_client_regex: 
+            :param aws_region: The AWS Region in which the user pool was created.
+            :param user_pool_id: The user pool ID.
+            :param app_id_client_regex: A regular expression for validating the incoming Amazon Cognito user pool app client ID. If this value isn't set, no filtering is applied.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html
             :exampleMetadata: fixture=_generated
@@ -2916,7 +2937,8 @@ class CfnApi(
 
         @builtins.property
         def aws_region(self) -> builtins.str:
-            '''
+            '''The AWS Region in which the user pool was created.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html#cfn-appsync-api-cognitoconfig-awsregion
             '''
             result = self._values.get("aws_region")
@@ -2925,7 +2947,8 @@ class CfnApi(
 
         @builtins.property
         def user_pool_id(self) -> builtins.str:
-            '''
+            '''The user pool ID.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html#cfn-appsync-api-cognitoconfig-userpoolid
             '''
             result = self._values.get("user_pool_id")
@@ -2934,7 +2957,10 @@ class CfnApi(
 
         @builtins.property
         def app_id_client_regex(self) -> typing.Optional[builtins.str]:
-            '''
+            '''A regular expression for validating the incoming Amazon Cognito user pool app client ID.
+
+            If this value isn't set, no filtering is applied.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html#cfn-appsync-api-cognitoconfig-appidclientregex
             '''
             result = self._values.get("app_id_client_regex")
@@ -2951,6 +2977,76 @@ class CfnApi(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.DnsMapProperty",
+        jsii_struct_bases=[],
+        name_mapping={"http": "http", "realtime": "realtime"},
+    )
+    class DnsMapProperty:
+        def __init__(
+            self,
+            *,
+            http: typing.Optional[builtins.str] = None,
+            realtime: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''A map of DNS names for the Api.
+
+            :param http: The domain name of the Api's HTTP endpoint.
+            :param realtime: The domain name of the Api's real-time endpoint.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-dnsmap.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                dns_map_property = appsync.CfnApi.DnsMapProperty(
+                    http="http",
+                    realtime="realtime"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__312a111f84f5f64be12d3d7c09cc00f4c64e4fe99cd1bf78561ebcfd82084e0c)
+                check_type(argname="argument http", value=http, expected_type=type_hints["http"])
+                check_type(argname="argument realtime", value=realtime, expected_type=type_hints["realtime"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if http is not None:
+                self._values["http"] = http
+            if realtime is not None:
+                self._values["realtime"] = realtime
+
+        @builtins.property
+        def http(self) -> typing.Optional[builtins.str]:
+            '''The domain name of the Api's HTTP endpoint.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-dnsmap.html#cfn-appsync-api-dnsmap-http
+            '''
+            result = self._values.get("http")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def realtime(self) -> typing.Optional[builtins.str]:
+            '''The domain name of the Api's real-time endpoint.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-dnsmap.html#cfn-appsync-api-dnsmap-realtime
+            '''
+            result = self._values.get("realtime")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "DnsMapProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_appsync.CfnApi.EventConfigProperty",
         jsii_struct_bases=[],
@@ -2972,13 +3068,13 @@ class CfnApi(
             default_subscribe_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.AuthModeProperty", typing.Dict[builtins.str, typing.Any]]]]],
             log_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.EventLogConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
-            '''The configuration for an Event Api.
+            '''Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API.
 
-            :param auth_providers: A list of auth providers for the AppSync API.
-            :param connection_auth_modes: A list of auth modes for the AppSync API.
-            :param default_publish_auth_modes: A list of auth modes for the AppSync API.
-            :param default_subscribe_auth_modes: A list of auth modes for the AppSync API.
-            :param log_config: The log config for the AppSync API.
+            :param auth_providers: A list of authorization providers.
+            :param connection_auth_modes: A list of valid authorization modes for the Event API connections.
+            :param default_publish_auth_modes: A list of valid authorization modes for the Event API publishing.
+            :param default_subscribe_auth_modes: A list of valid authorization modes for the Event API subscriptions.
+            :param log_config: The CloudWatch Logs configuration for the Event API.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html
             :exampleMetadata: fixture=_generated
@@ -3054,7 +3150,7 @@ class CfnApi(
         def auth_providers(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthProviderProperty"]]]:
-            '''A list of auth providers for the AppSync API.
+            '''A list of authorization providers.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-authproviders
             '''
@@ -3066,7 +3162,7 @@ class CfnApi(
         def connection_auth_modes(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]]:
-            '''A list of auth modes for the AppSync API.
+            '''A list of valid authorization modes for the Event API connections.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-connectionauthmodes
             '''
@@ -3078,7 +3174,7 @@ class CfnApi(
         def default_publish_auth_modes(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]]:
-            '''A list of auth modes for the AppSync API.
+            '''A list of valid authorization modes for the Event API publishing.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-defaultpublishauthmodes
             '''
@@ -3090,7 +3186,7 @@ class CfnApi(
         def default_subscribe_auth_modes(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]]:
-            '''A list of auth modes for the AppSync API.
+            '''A list of valid authorization modes for the Event API subscriptions.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-defaultsubscribeauthmodes
             '''
@@ -3102,7 +3198,7 @@ class CfnApi(
         def log_config(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventLogConfigProperty"]]:
-            '''The log config for the AppSync API.
+            '''The CloudWatch Logs configuration for the Event API.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-logconfig
             '''
@@ -3135,10 +3231,10 @@ class CfnApi(
             cloud_watch_logs_role_arn: builtins.str,
             log_level: builtins.str,
         ) -> None:
-            '''The log config for the AppSync API.
+            '''Describes the CloudWatch Logs configuration for the Event API.
 
-            :param cloud_watch_logs_role_arn: 
-            :param log_level: Logging level for the AppSync API.
+            :param cloud_watch_logs_role_arn: The IAM service role that AWS AppSync assumes to publish CloudWatch Logs in your account.
+            :param log_level: The type of information to log for the Event API.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventlogconfig.html
             :exampleMetadata: fixture=_generated
@@ -3165,7 +3261,8 @@ class CfnApi(
 
         @builtins.property
         def cloud_watch_logs_role_arn(self) -> builtins.str:
-            '''
+            '''The IAM service role that AWS AppSync assumes to publish CloudWatch Logs in your account.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventlogconfig.html#cfn-appsync-api-eventlogconfig-cloudwatchlogsrolearn
             '''
             result = self._values.get("cloud_watch_logs_role_arn")
@@ -3174,7 +3271,7 @@ class CfnApi(
 
         @builtins.property
         def log_level(self) -> builtins.str:
-            '''Logging level for the AppSync API.
+            '''The type of information to log for the Event API.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventlogconfig.html#cfn-appsync-api-eventlogconfig-loglevel
             '''
@@ -4095,10 +4192,10 @@ class CfnApiProps:
     ) -> None:
         '''Properties for defining a ``CfnApi``.
 
-        :param name: The API name.
-        :param event_config: The configuration for an Event Api.
+        :param name: The name of the ``Api`` .
+        :param event_config: Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API.
         :param owner_contact: The owner contact information for an API resource. This field accepts any string input with a length of 0 - 256 characters.
-        :param tags: The tags.
+        :param tags: A set of tags (key-value pairs) for this API.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html
         :exampleMetadata: fixture=_generated
@@ -4182,7 +4279,7 @@ class CfnApiProps:
 
     @builtins.property
     def name(self) -> builtins.str:
-        '''The API name.
+        '''The name of the ``Api`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html#cfn-appsync-api-name
         '''
@@ -4194,7 +4291,7 @@ class CfnApiProps:
     def event_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApi.EventConfigProperty]]:
-        '''The configuration for an Event Api.
+        '''Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html#cfn-appsync-api-eventconfig
         '''
@@ -4214,7 +4311,7 @@ class CfnApiProps:
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''The tags.
+        '''A set of tags (key-value pairs) for this API.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html#cfn-appsync-api-tags
         '''
@@ -4239,7 +4336,9 @@ class CfnChannelNamespace(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_appsync.CfnChannelNamespace",
 ):
-    '''Resource schema for AppSync ChannelNamespace.
+    '''The ``AWS::AppSync::ChannelNamespace`` resource creates a channel namespace associated with an ``Api`` .
+
+    The ``ChannelNamespace`` contains the definitions for code handlers for the ``Api`` .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html
     :cloudformationResource: AWS::AppSync::ChannelNamespace
@@ -4287,13 +4386,13 @@ class CfnChannelNamespace(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param api_id: AppSync Api Id that this Channel Namespace belongs to.
-        :param name: Namespace indentifier.
-        :param code_handlers: String of APPSYNC_JS code to be used by the handlers.
+        :param api_id: The ``Api`` ID.
+        :param name: The name of the channel namespace. This name must be unique within the ``Api`` .
+        :param code_handlers: The event handler functions that run custom business logic to process published events and subscribe requests.
         :param code_s3_location: The Amazon S3 endpoint where the code is located.
-        :param publish_auth_modes: 
-        :param subscribe_auth_modes: 
-        :param tags: An arbitrary set of tags (key-value pairs) for this AppSync API.
+        :param publish_auth_modes: The authorization mode to use for publishing messages on the channel namespace. This configuration overrides the default ``Api`` authorization configuration.
+        :param subscribe_auth_modes: The authorization mode to use for subscribing to messages on the channel namespace. This configuration overrides the default ``Api`` authorization configuration.
+        :param tags: A set of tags (key-value pairs) for this channel namespace.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a093c57f7353830d56f8cde41e8653e333d0f0b91da87dd9ca86d72460c39119)
@@ -4344,7 +4443,7 @@ class CfnChannelNamespace(
     @builtins.property
     @jsii.member(jsii_name="attrChannelNamespaceArn")
     def attr_channel_namespace_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) for the Channel Namespace.
+        '''The Amazon Resource Name (ARN) of the channel namespace.
 
         :cloudformationAttribute: ChannelNamespaceArn
         '''
@@ -4364,7 +4463,7 @@ class CfnChannelNamespace(
     @builtins.property
     @jsii.member(jsii_name="apiId")
     def api_id(self) -> builtins.str:
-        '''AppSync Api Id that this Channel Namespace belongs to.'''
+        '''The ``Api`` ID.'''
         return typing.cast(builtins.str, jsii.get(self, "apiId"))
 
     @api_id.setter
@@ -4377,7 +4476,7 @@ class CfnChannelNamespace(
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
-        '''Namespace indentifier.'''
+        '''The name of the channel namespace.'''
         return typing.cast(builtins.str, jsii.get(self, "name"))
 
     @name.setter
@@ -4390,7 +4489,7 @@ class CfnChannelNamespace(
     @builtins.property
     @jsii.member(jsii_name="codeHandlers")
     def code_handlers(self) -> typing.Optional[builtins.str]:
-        '''String of APPSYNC_JS code to be used by the handlers.'''
+        '''The event handler functions that run custom business logic to process published events and subscribe requests.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "codeHandlers"))
 
     @code_handlers.setter
@@ -4418,6 +4517,7 @@ class CfnChannelNamespace(
     def publish_auth_modes(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]]:
+        '''The authorization mode to use for publishing messages on the channel namespace.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]], jsii.get(self, "publishAuthModes"))
 
     @publish_auth_modes.setter
@@ -4435,6 +4535,7 @@ class CfnChannelNamespace(
     def subscribe_auth_modes(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]]:
+        '''The authorization mode to use for subscribing to messages on the channel namespace.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]], jsii.get(self, "subscribeAuthModes"))
 
     @subscribe_auth_modes.setter
@@ -4450,7 +4551,7 @@ class CfnChannelNamespace(
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''An arbitrary set of tags (key-value pairs) for this AppSync API.'''
+        '''A set of tags (key-value pairs) for this channel namespace.'''
         return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
 
     @tags.setter
@@ -4467,9 +4568,11 @@ class CfnChannelNamespace(
     )
     class AuthModeProperty:
         def __init__(self, *, auth_type: typing.Optional[builtins.str] = None) -> None:
-            '''An auth mode.
+            '''Describes an authorization configuration.
 
-            :param auth_type: Security configuration for your AppSync API.
+            Use ``AuthMode`` to specify the publishing and subscription authorization configuration for an Event API.
+
+            :param auth_type: The authorization type.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-channelnamespace-authmode.html
             :exampleMetadata: fixture=_generated
@@ -4493,7 +4596,7 @@ class CfnChannelNamespace(
 
         @builtins.property
         def auth_type(self) -> typing.Optional[builtins.str]:
-            '''Security configuration for your AppSync API.
+            '''The authorization type.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-channelnamespace-authmode.html#cfn-appsync-channelnamespace-authmode-authtype
             '''
@@ -4539,13 +4642,13 @@ class CfnChannelNamespaceProps:
     ) -> None:
         '''Properties for defining a ``CfnChannelNamespace``.
 
-        :param api_id: AppSync Api Id that this Channel Namespace belongs to.
-        :param name: Namespace indentifier.
-        :param code_handlers: String of APPSYNC_JS code to be used by the handlers.
+        :param api_id: The ``Api`` ID.
+        :param name: The name of the channel namespace. This name must be unique within the ``Api`` .
+        :param code_handlers: The event handler functions that run custom business logic to process published events and subscribe requests.
         :param code_s3_location: The Amazon S3 endpoint where the code is located.
-        :param publish_auth_modes: 
-        :param subscribe_auth_modes: 
-        :param tags: An arbitrary set of tags (key-value pairs) for this AppSync API.
+        :param publish_auth_modes: The authorization mode to use for publishing messages on the channel namespace. This configuration overrides the default ``Api`` authorization configuration.
+        :param subscribe_auth_modes: The authorization mode to use for subscribing to messages on the channel namespace. This configuration overrides the default ``Api`` authorization configuration.
+        :param tags: A set of tags (key-value pairs) for this channel namespace.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html
         :exampleMetadata: fixture=_generated
@@ -4601,7 +4704,7 @@ class CfnChannelNamespaceProps:
 
     @builtins.property
     def api_id(self) -> builtins.str:
-        '''AppSync Api Id that this Channel Namespace belongs to.
+        '''The ``Api`` ID.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-apiid
         '''
@@ -4611,7 +4714,9 @@ class CfnChannelNamespaceProps:
 
     @builtins.property
     def name(self) -> builtins.str:
-        '''Namespace indentifier.
+        '''The name of the channel namespace.
+
+        This name must be unique within the ``Api`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-name
         '''
@@ -4621,7 +4726,7 @@ class CfnChannelNamespaceProps:
 
     @builtins.property
     def code_handlers(self) -> typing.Optional[builtins.str]:
-        '''String of APPSYNC_JS code to be used by the handlers.
+        '''The event handler functions that run custom business logic to process published events and subscribe requests.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-codehandlers
         '''
@@ -4641,7 +4746,10 @@ class CfnChannelNamespaceProps:
     def publish_auth_modes(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]]:
-        '''
+        '''The authorization mode to use for publishing messages on the channel namespace.
+
+        This configuration overrides the default ``Api`` authorization configuration.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-publishauthmodes
         '''
         result = self._values.get("publish_auth_modes")
@@ -4651,7 +4759,10 @@ class CfnChannelNamespaceProps:
     def subscribe_auth_modes(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]]:
-        '''
+        '''The authorization mode to use for subscribing to messages on the channel namespace.
+
+        This configuration overrides the default ``Api`` authorization configuration.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-subscribeauthmodes
         '''
         result = self._values.get("subscribe_auth_modes")
@@ -4659,7 +4770,7 @@ class CfnChannelNamespaceProps:
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''An arbitrary set of tags (key-value pairs) for this AppSync API.
+        '''A set of tags (key-value pairs) for this channel namespace.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-tags
         '''
@@ -11345,6 +11456,7 @@ class Code(metaclass=jsii.JSIIAbstractClass, jsii_type="aws-cdk-lib.aws_appsync.
         *,
         deploy_time: typing.Optional[builtins.bool] = None,
         readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+        source_kms_key: typing.Optional[_IKey_5f11635f] = None,
         asset_hash: typing.Optional[builtins.str] = None,
         asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
         bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -11357,6 +11469,7 @@ class Code(metaclass=jsii.JSIIAbstractClass, jsii_type="aws-cdk-lib.aws_appsync.
         :param path: The path to the source code file.
         :param deploy_time: Whether or not the asset needs to exist beyond deployment time; i.e. are copied over to a different location and not needed afterwards. Setting this property to true has an impact on the lifecycle of the asset, because we will assume that it is safe to delete after the CloudFormation deployment succeeds. For example, Lambda Function assets are copied over to Lambda during deployment. Therefore, it is not necessary to store the asset in S3, so we consider those deployTime assets. Default: false
         :param readers: A list of principals that should be able to read this asset from S3. You can use ``asset.grantRead(principal)`` to grant read permissions later. Default: - No principals that can read file asset.
+        :param source_kms_key: The ARN of the KMS key used to encrypt the handler code. Default: - the default server-side encryption with Amazon S3 managed keys(SSE-S3) key will be used.
         :param asset_hash: Specify a custom hash for this asset. If ``assetHashType`` is set it must be set to ``AssetHashType.CUSTOM``. For consistency, this custom hash will be SHA256 hashed and encoded as hex. The resulting hash will be the asset hash. NOTE: the hash is used in order to identify a specific revision of the asset, and used for optimizing and caching deployment activities related to this asset such as packaging, uploading to Amazon S3, etc. If you chose to customize the hash, you will need to make sure it is updated every time the asset changes, or otherwise it is possible that some deployments will not be invalidated. Default: - based on ``assetHashType``
         :param asset_hash_type: Specifies the type of hash to calculate for this asset. If ``assetHash`` is configured, this option must be ``undefined`` or ``AssetHashType.CUSTOM``. Default: - the default is ``AssetHashType.SOURCE``, but if ``assetHash`` is explicitly specified this value defaults to ``AssetHashType.CUSTOM``.
         :param bundling: Bundle the asset by executing a command in a Docker container or a custom bundling provider. The asset path will be mounted at ``/asset-input``. The Docker container is responsible for putting content at ``/asset-output``. The content at ``/asset-output`` will be zipped and used as the final asset. Default: - uploaded as-is to S3 if the asset is a regular file or a .zip file, archived into a .zip file and uploaded to S3 otherwise
@@ -11370,6 +11483,7 @@ class Code(metaclass=jsii.JSIIAbstractClass, jsii_type="aws-cdk-lib.aws_appsync.
         options = _AssetOptions_2aa69621(
             deploy_time=deploy_time,
             readers=readers,
+            source_kms_key=source_kms_key,
             asset_hash=asset_hash,
             asset_hash_type=asset_hash_type,
             bundling=bundling,
@@ -16744,9 +16858,11 @@ class AssetCode(
         import aws_cdk as cdk
         from aws_cdk import aws_appsync as appsync
         from aws_cdk import aws_iam as iam
+        from aws_cdk import aws_kms as kms
         
         # docker_image: cdk.DockerImage
         # grantable: iam.IGrantable
+        # key: kms.Key
         # local_bundling: cdk.ILocalBundling
         
         asset_code = appsync.AssetCode("path",
@@ -16782,7 +16898,8 @@ class AssetCode(
             exclude=["exclude"],
             follow_symlinks=cdk.SymlinkFollowMode.NEVER,
             ignore_mode=cdk.IgnoreMode.GLOB,
-            readers=[grantable]
+            readers=[grantable],
+            source_kMSKey=key
         )
     '''
 
@@ -16792,6 +16909,7 @@ class AssetCode(
         *,
         deploy_time: typing.Optional[builtins.bool] = None,
         readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+        source_kms_key: typing.Optional[_IKey_5f11635f] = None,
         asset_hash: typing.Optional[builtins.str] = None,
         asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
         bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -16803,6 +16921,7 @@ class AssetCode(
         :param path: The path to the asset file.
         :param deploy_time: Whether or not the asset needs to exist beyond deployment time; i.e. are copied over to a different location and not needed afterwards. Setting this property to true has an impact on the lifecycle of the asset, because we will assume that it is safe to delete after the CloudFormation deployment succeeds. For example, Lambda Function assets are copied over to Lambda during deployment. Therefore, it is not necessary to store the asset in S3, so we consider those deployTime assets. Default: false
         :param readers: A list of principals that should be able to read this asset from S3. You can use ``asset.grantRead(principal)`` to grant read permissions later. Default: - No principals that can read file asset.
+        :param source_kms_key: The ARN of the KMS key used to encrypt the handler code. Default: - the default server-side encryption with Amazon S3 managed keys(SSE-S3) key will be used.
         :param asset_hash: Specify a custom hash for this asset. If ``assetHashType`` is set it must be set to ``AssetHashType.CUSTOM``. For consistency, this custom hash will be SHA256 hashed and encoded as hex. The resulting hash will be the asset hash. NOTE: the hash is used in order to identify a specific revision of the asset, and used for optimizing and caching deployment activities related to this asset such as packaging, uploading to Amazon S3, etc. If you chose to customize the hash, you will need to make sure it is updated every time the asset changes, or otherwise it is possible that some deployments will not be invalidated. Default: - based on ``assetHashType``
         :param asset_hash_type: Specifies the type of hash to calculate for this asset. If ``assetHash`` is configured, this option must be ``undefined`` or ``AssetHashType.CUSTOM``. Default: - the default is ``AssetHashType.SOURCE``, but if ``assetHash`` is explicitly specified this value defaults to ``AssetHashType.CUSTOM``.
         :param bundling: Bundle the asset by executing a command in a Docker container or a custom bundling provider. The asset path will be mounted at ``/asset-input``. The Docker container is responsible for putting content at ``/asset-output``. The content at ``/asset-output`` will be zipped and used as the final asset. Default: - uploaded as-is to S3 if the asset is a regular file or a .zip file, archived into a .zip file and uploaded to S3 otherwise
@@ -16816,6 +16935,7 @@ class AssetCode(
         options = _AssetOptions_2aa69621(
             deploy_time=deploy_time,
             readers=readers,
+            source_kms_key=source_kms_key,
             asset_hash=asset_hash,
             asset_hash_type=asset_hash_type,
             bundling=bundling,
@@ -19688,6 +19808,14 @@ def _typecheckingstub__012c8ad0fa2d1afcda68ca532d5e287baa9e170049fe0c4e05e77dab9
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__312a111f84f5f64be12d3d7c09cc00f4c64e4fe99cd1bf78561ebcfd82084e0c(
+    *,
+    http: typing.Optional[builtins.str] = None,
+    realtime: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__53f8b01a4596f6e890e45a2870f92278e02fc06e912e096c33920157038135cf(
     *,
     auth_providers: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.AuthProviderProperty, typing.Dict[builtins.str, typing.Any]]]]],
@@ -20991,6 +21119,7 @@ def _typecheckingstub__8eafa9f4fd31cdfcc23e497d115c1733ce980674eb036dad379eb9102
     *,
     deploy_time: typing.Optional[builtins.bool] = None,
     readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+    source_kms_key: typing.Optional[_IKey_5f11635f] = None,
     asset_hash: typing.Optional[builtins.str] = None,
     asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
     bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -21726,6 +21855,7 @@ def _typecheckingstub__f64c3b5b60096d2f072c0237f4540425eb18b7539e311bcd346760100
     *,
     deploy_time: typing.Optional[builtins.bool] = None,
     readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+    source_kms_key: typing.Optional[_IKey_5f11635f] = None,
     asset_hash: typing.Optional[builtins.str] = None,
     asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
     bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,