aws-cdk-lib 2.167.2__py3-none-any.whl → 2.169.0__py3-none-any.whl

aws_cdk/aws_kinesisfirehose/__init__.py

@@ -118,6 +118,7 @@ class CfnDeliveryStream(
         *,
         amazon_open_search_serverless_destination_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDeliveryStream.AmazonOpenSearchServerlessDestinationConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         amazonopensearchservice_destination_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDeliveryStream.AmazonopensearchserviceDestinationConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        database_source_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDeliveryStream.DatabaseSourceConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         delivery_stream_encryption_configuration_input: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDeliveryStream.DeliveryStreamEncryptionConfigurationInputProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         delivery_stream_name: typing.Optional[builtins.str] = None,
         delivery_stream_type: typing.Optional[builtins.str] = None,
@@ -138,6 +139,7 @@ class CfnDeliveryStream(
         :param id: Construct identifier for this resource (unique in its scope).
         :param amazon_open_search_serverless_destination_configuration: Describes the configuration of a destination in the Serverless offering for Amazon OpenSearch Service.
         :param amazonopensearchservice_destination_configuration: The destination in Amazon OpenSearch Service. You can specify only one destination.
+        :param database_source_configuration: The top level object for configuring streams with database as a source. Amazon Data Firehose is in preview release and is subject to change.
         :param delivery_stream_encryption_configuration_input: Specifies the type and Amazon Resource Name (ARN) of the CMK to use for Server-Side Encryption (SSE).
         :param delivery_stream_name: The name of the Firehose stream.
         :param delivery_stream_type: The Firehose stream type. This can be one of the following values:. - ``DirectPut`` : Provider applications access the Firehose stream directly. - ``KinesisStreamAsSource`` : The Firehose stream uses a Kinesis data stream as a source.
@@ -151,7 +153,7 @@ class CfnDeliveryStream(
         :param s3_destination_configuration: The ``S3DestinationConfiguration`` property type specifies an Amazon Simple Storage Service (Amazon S3) destination to which Amazon Kinesis Data Firehose (Kinesis Data Firehose) delivers data. Conditional. You must specify only one destination configuration. If you change the delivery stream destination from an Amazon S3 destination to an Amazon ES destination, update requires `some interruptions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt>`_ .
         :param snowflake_destination_configuration: Configure Snowflake destination.
         :param splunk_destination_configuration: The configuration of a destination in Splunk for the delivery stream.
-        :param tags: A set of tags to assign to the Firehose stream. A tag is a key-value pair that you can define and assign to AWS resources. Tags are metadata. For example, you can add friendly names and descriptions or other types of information that can help you distinguish the Firehose stream. For more information about tags, see `Using Cost Allocation Tags <https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html>`_ in the AWS Billing and Cost Management User Guide. You can specify up to 50 tags when creating a Firehose stream. If you specify tags in the ``CreateDeliveryStream`` action, Amazon Data Firehose performs an additional authorization on the ``firehose:TagDeliveryStream`` action to verify if users have permissions to create tags. If you do not provide this permission, requests to create new Firehose Firehose streams with IAM resource tags will fail with an ``AccessDeniedException`` such as following. *AccessDeniedException* User: arn:aws:sts::x:assumed-role/x/x is not authorized to perform: firehose:TagDeliveryStream on resource: arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an identity-based policy. For an example IAM policy, see `Tag example. <https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples>`_
+        :param tags: A set of tags to assign to the Firehose stream. A tag is a key-value pair that you can define and assign to AWS resources. Tags are metadata. For example, you can add friendly names and descriptions or other types of information that can help you distinguish the Firehose stream. For more information about tags, see `Using Cost Allocation Tags <https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html>`_ in the AWS Billing and Cost Management User Guide. You can specify up to 50 tags when creating a Firehose stream. If you specify tags in the ``CreateDeliveryStream`` action, Amazon Data Firehose performs an additional authorization on the ``firehose:TagDeliveryStream`` action to verify if users have permissions to create tags. If you do not provide this permission, requests to create new Firehose streams with IAM resource tags will fail with an ``AccessDeniedException`` such as following. *AccessDeniedException* User: arn:aws:sts::x:assumed-role/x/x is not authorized to perform: firehose:TagDeliveryStream on resource: arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an identity-based policy. For an example IAM policy, see `Tag example. <https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples>`_
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b3cd824a2680c7d043cac684bd1be9ca77e94201f1ba00785d60a50ff43c2288)
@@ -160,6 +162,7 @@ class CfnDeliveryStream(
         props = CfnDeliveryStreamProps(
             amazon_open_search_serverless_destination_configuration=amazon_open_search_serverless_destination_configuration,
             amazonopensearchservice_destination_configuration=amazonopensearchservice_destination_configuration,
+            database_source_configuration=database_source_configuration,
             delivery_stream_encryption_configuration_input=delivery_stream_encryption_configuration_input,
             delivery_stream_name=delivery_stream_name,
             delivery_stream_type=delivery_stream_type,
@@ -264,6 +267,24 @@ class CfnDeliveryStream(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "amazonopensearchserviceDestinationConfiguration", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="databaseSourceConfiguration")
+    def database_source_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabaseSourceConfigurationProperty"]]:
+        '''The top level object for configuring streams with database as a source.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabaseSourceConfigurationProperty"]], jsii.get(self, "databaseSourceConfiguration"))
+
+    @database_source_configuration.setter
+    def database_source_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabaseSourceConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__671f3a3eb25ab7249d3b64fb9d1c6865a8a68b8a7b92841ab6890851853da1f5)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "databaseSourceConfiguration", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="deliveryStreamEncryptionConfigurationInput")
     def delivery_stream_encryption_configuration_input(
@@ -1944,6 +1965,639 @@ class CfnDeliveryStream(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_kinesisfirehose.CfnDeliveryStream.DatabaseColumnsProperty",
+        jsii_struct_bases=[],
+        name_mapping={"exclude": "exclude", "include": "include"},
+    )
+    class DatabaseColumnsProperty:
+        def __init__(
+            self,
+            *,
+            exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+            include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''
+            :param exclude: 
+            :param include: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasecolumns.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_kinesisfirehose as kinesisfirehose
+                
+                database_columns_property = kinesisfirehose.CfnDeliveryStream.DatabaseColumnsProperty(
+                    exclude=["exclude"],
+                    include=["include"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__111648b092f5dd75408d33db5fb1adea30dc7a8b58549cef95459f9224ccb26a)
+                check_type(argname="argument exclude", value=exclude, expected_type=type_hints["exclude"])
+                check_type(argname="argument include", value=include, expected_type=type_hints["include"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if exclude is not None:
+                self._values["exclude"] = exclude
+            if include is not None:
+                self._values["include"] = include
+
+        @builtins.property
+        def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasecolumns.html#cfn-kinesisfirehose-deliverystream-databasecolumns-exclude
+            '''
+            result = self._values.get("exclude")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def include(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasecolumns.html#cfn-kinesisfirehose-deliverystream-databasecolumns-include
+            '''
+            result = self._values.get("include")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "DatabaseColumnsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_kinesisfirehose.CfnDeliveryStream.DatabaseSourceAuthenticationConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"secrets_manager_configuration": "secretsManagerConfiguration"},
+    )
+    class DatabaseSourceAuthenticationConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            secrets_manager_configuration: typing.Union[_IResolvable_da3f097b, typing.Union["CfnDeliveryStream.SecretsManagerConfigurationProperty", typing.Dict[builtins.str, typing.Any]]],
+        ) -> None:
+            '''The structure to configure the authentication methods for Firehose to connect to source database endpoint.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :param secrets_manager_configuration: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceauthenticationconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_kinesisfirehose as kinesisfirehose
+                
+                database_source_authentication_configuration_property = kinesisfirehose.CfnDeliveryStream.DatabaseSourceAuthenticationConfigurationProperty(
+                    secrets_manager_configuration=kinesisfirehose.CfnDeliveryStream.SecretsManagerConfigurationProperty(
+                        enabled=False,
+                
+                        # the properties below are optional
+                        role_arn="roleArn",
+                        secret_arn="secretArn"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__cecf7807b45586be03c0bc76f8fcdf6ad93c6bd34a795d26aeaf365dd3d297c4)
+                check_type(argname="argument secrets_manager_configuration", value=secrets_manager_configuration, expected_type=type_hints["secrets_manager_configuration"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "secrets_manager_configuration": secrets_manager_configuration,
+            }
+
+        @builtins.property
+        def secrets_manager_configuration(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.SecretsManagerConfigurationProperty"]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceauthenticationconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceauthenticationconfiguration-secretsmanagerconfiguration
+            '''
+            result = self._values.get("secrets_manager_configuration")
+            assert result is not None, "Required property 'secrets_manager_configuration' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.SecretsManagerConfigurationProperty"], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "DatabaseSourceAuthenticationConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_kinesisfirehose.CfnDeliveryStream.DatabaseSourceConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "databases": "databases",
+            "database_source_authentication_configuration": "databaseSourceAuthenticationConfiguration",
+            "database_source_vpc_configuration": "databaseSourceVpcConfiguration",
+            "endpoint": "endpoint",
+            "port": "port",
+            "snapshot_watermark_table": "snapshotWatermarkTable",
+            "tables": "tables",
+            "type": "type",
+            "columns": "columns",
+            "digest": "digest",
+            "public_certificate": "publicCertificate",
+            "ssl_mode": "sslMode",
+            "surrogate_keys": "surrogateKeys",
+        },
+    )
+    class DatabaseSourceConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            databases: typing.Union[_IResolvable_da3f097b, typing.Union["CfnDeliveryStream.DatabasesProperty", typing.Dict[builtins.str, typing.Any]]],
+            database_source_authentication_configuration: typing.Union[_IResolvable_da3f097b, typing.Union["CfnDeliveryStream.DatabaseSourceAuthenticationConfigurationProperty", typing.Dict[builtins.str, typing.Any]]],
+            database_source_vpc_configuration: typing.Union[_IResolvable_da3f097b, typing.Union["CfnDeliveryStream.DatabaseSourceVPCConfigurationProperty", typing.Dict[builtins.str, typing.Any]]],
+            endpoint: builtins.str,
+            port: jsii.Number,
+            snapshot_watermark_table: builtins.str,
+            tables: typing.Union[_IResolvable_da3f097b, typing.Union["CfnDeliveryStream.DatabaseTablesProperty", typing.Dict[builtins.str, typing.Any]]],
+            type: builtins.str,
+            columns: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDeliveryStream.DatabaseColumnsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            digest: typing.Optional[builtins.str] = None,
+            public_certificate: typing.Optional[builtins.str] = None,
+            ssl_mode: typing.Optional[builtins.str] = None,
+            surrogate_keys: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''The top level object for configuring streams with database as a source.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :param databases: The list of database patterns in source database endpoint for Firehose to read from. Amazon Data Firehose is in preview release and is subject to change.
+            :param database_source_authentication_configuration: The structure to configure the authentication methods for Firehose to connect to source database endpoint. Amazon Data Firehose is in preview release and is subject to change.
+            :param database_source_vpc_configuration: The details of the VPC Endpoint Service which Firehose uses to create a PrivateLink to the database. Amazon Data Firehose is in preview release and is subject to change.
+            :param endpoint: The endpoint of the database server. Amazon Data Firehose is in preview release and is subject to change.
+            :param port: The port of the database. This can be one of the following values. - 3306 for MySQL database type - 5432 for PostgreSQL database type Amazon Data Firehose is in preview release and is subject to change.
+            :param snapshot_watermark_table: The fully qualified name of the table in source database endpoint that Firehose uses to track snapshot progress. Amazon Data Firehose is in preview release and is subject to change.
+            :param tables: The list of table patterns in source database endpoint for Firehose to read from. Amazon Data Firehose is in preview release and is subject to change.
+            :param type: The type of database engine. This can be one of the following values. - MySQL - PostgreSQL Amazon Data Firehose is in preview release and is subject to change.
+            :param columns: The list of column patterns in source database endpoint for Firehose to read from. Amazon Data Firehose is in preview release and is subject to change.
+            :param digest: 
+            :param public_certificate: 
+            :param ssl_mode: The mode to enable or disable SSL when Firehose connects to the database endpoint. Amazon Data Firehose is in preview release and is subject to change.
+            :param surrogate_keys: The optional list of table and column names used as unique key columns when taking snapshot if the tables don’t have primary keys configured. Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_kinesisfirehose as kinesisfirehose
+                
+                database_source_configuration_property = kinesisfirehose.CfnDeliveryStream.DatabaseSourceConfigurationProperty(
+                    databases=kinesisfirehose.CfnDeliveryStream.DatabasesProperty(
+                        exclude=["exclude"],
+                        include=["include"]
+                    ),
+                    database_source_authentication_configuration=kinesisfirehose.CfnDeliveryStream.DatabaseSourceAuthenticationConfigurationProperty(
+                        secrets_manager_configuration=kinesisfirehose.CfnDeliveryStream.SecretsManagerConfigurationProperty(
+                            enabled=False,
+                
+                            # the properties below are optional
+                            role_arn="roleArn",
+                            secret_arn="secretArn"
+                        )
+                    ),
+                    database_source_vpc_configuration=kinesisfirehose.CfnDeliveryStream.DatabaseSourceVPCConfigurationProperty(
+                        vpc_endpoint_service_name="vpcEndpointServiceName"
+                    ),
+                    endpoint="endpoint",
+                    port=123,
+                    snapshot_watermark_table="snapshotWatermarkTable",
+                    tables=kinesisfirehose.CfnDeliveryStream.DatabaseTablesProperty(
+                        exclude=["exclude"],
+                        include=["include"]
+                    ),
+                    type="type",
+                
+                    # the properties below are optional
+                    columns=kinesisfirehose.CfnDeliveryStream.DatabaseColumnsProperty(
+                        exclude=["exclude"],
+                        include=["include"]
+                    ),
+                    digest="digest",
+                    public_certificate="publicCertificate",
+                    ssl_mode="sslMode",
+                    surrogate_keys=["surrogateKeys"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__dfa32769046e99e73e35a8b5e878b72f25abcaa661bf955ff25e794601e2126d)
+                check_type(argname="argument databases", value=databases, expected_type=type_hints["databases"])
+                check_type(argname="argument database_source_authentication_configuration", value=database_source_authentication_configuration, expected_type=type_hints["database_source_authentication_configuration"])
+                check_type(argname="argument database_source_vpc_configuration", value=database_source_vpc_configuration, expected_type=type_hints["database_source_vpc_configuration"])
+                check_type(argname="argument endpoint", value=endpoint, expected_type=type_hints["endpoint"])
+                check_type(argname="argument port", value=port, expected_type=type_hints["port"])
+                check_type(argname="argument snapshot_watermark_table", value=snapshot_watermark_table, expected_type=type_hints["snapshot_watermark_table"])
+                check_type(argname="argument tables", value=tables, expected_type=type_hints["tables"])
+                check_type(argname="argument type", value=type, expected_type=type_hints["type"])
+                check_type(argname="argument columns", value=columns, expected_type=type_hints["columns"])
+                check_type(argname="argument digest", value=digest, expected_type=type_hints["digest"])
+                check_type(argname="argument public_certificate", value=public_certificate, expected_type=type_hints["public_certificate"])
+                check_type(argname="argument ssl_mode", value=ssl_mode, expected_type=type_hints["ssl_mode"])
+                check_type(argname="argument surrogate_keys", value=surrogate_keys, expected_type=type_hints["surrogate_keys"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "databases": databases,
+                "database_source_authentication_configuration": database_source_authentication_configuration,
+                "database_source_vpc_configuration": database_source_vpc_configuration,
+                "endpoint": endpoint,
+                "port": port,
+                "snapshot_watermark_table": snapshot_watermark_table,
+                "tables": tables,
+                "type": type,
+            }
+            if columns is not None:
+                self._values["columns"] = columns
+            if digest is not None:
+                self._values["digest"] = digest
+            if public_certificate is not None:
+                self._values["public_certificate"] = public_certificate
+            if ssl_mode is not None:
+                self._values["ssl_mode"] = ssl_mode
+            if surrogate_keys is not None:
+                self._values["surrogate_keys"] = surrogate_keys
+
+        @builtins.property
+        def databases(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabasesProperty"]:
+            '''The list of database patterns in source database endpoint for Firehose to read from.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-databases
+            '''
+            result = self._values.get("databases")
+            assert result is not None, "Required property 'databases' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabasesProperty"], result)
+
+        @builtins.property
+        def database_source_authentication_configuration(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabaseSourceAuthenticationConfigurationProperty"]:
+            '''The structure to configure the authentication methods for Firehose to connect to source database endpoint.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-databasesourceauthenticationconfiguration
+            '''
+            result = self._values.get("database_source_authentication_configuration")
+            assert result is not None, "Required property 'database_source_authentication_configuration' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabaseSourceAuthenticationConfigurationProperty"], result)
+
+        @builtins.property
+        def database_source_vpc_configuration(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabaseSourceVPCConfigurationProperty"]:
+            '''The details of the VPC Endpoint Service which Firehose uses to create a PrivateLink to the database.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-databasesourcevpcconfiguration
+            '''
+            result = self._values.get("database_source_vpc_configuration")
+            assert result is not None, "Required property 'database_source_vpc_configuration' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabaseSourceVPCConfigurationProperty"], result)
+
+        @builtins.property
+        def endpoint(self) -> builtins.str:
+            '''The endpoint of the database server.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-endpoint
+            '''
+            result = self._values.get("endpoint")
+            assert result is not None, "Required property 'endpoint' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def port(self) -> jsii.Number:
+            '''The port of the database. This can be one of the following values.
+
+            - 3306 for MySQL database type
+            - 5432 for PostgreSQL database type
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-port
+            '''
+            result = self._values.get("port")
+            assert result is not None, "Required property 'port' is missing"
+            return typing.cast(jsii.Number, result)
+
+        @builtins.property
+        def snapshot_watermark_table(self) -> builtins.str:
+            '''The fully qualified name of the table in source database endpoint that Firehose uses to track snapshot progress.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-snapshotwatermarktable
+            '''
+            result = self._values.get("snapshot_watermark_table")
+            assert result is not None, "Required property 'snapshot_watermark_table' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def tables(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabaseTablesProperty"]:
+            '''The list of table patterns in source database endpoint for Firehose to read from.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-tables
+            '''
+            result = self._values.get("tables")
+            assert result is not None, "Required property 'tables' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabaseTablesProperty"], result)
+
+        @builtins.property
+        def type(self) -> builtins.str:
+            '''The type of database engine. This can be one of the following values.
+
+            - MySQL
+            - PostgreSQL
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-type
+            '''
+            result = self._values.get("type")
+            assert result is not None, "Required property 'type' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def columns(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabaseColumnsProperty"]]:
+            '''The list of column patterns in source database endpoint for Firehose to read from.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-columns
+            '''
+            result = self._values.get("columns")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.DatabaseColumnsProperty"]], result)
+
+        @builtins.property
+        def digest(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-digest
+            '''
+            result = self._values.get("digest")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def public_certificate(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-publiccertificate
+            '''
+            result = self._values.get("public_certificate")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def ssl_mode(self) -> typing.Optional[builtins.str]:
+            '''The mode to enable or disable SSL when Firehose connects to the database endpoint.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-sslmode
+            '''
+            result = self._values.get("ssl_mode")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def surrogate_keys(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''The optional list of table and column names used as unique key columns when taking snapshot if the tables don’t have primary keys configured.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourceconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration-surrogatekeys
+            '''
+            result = self._values.get("surrogate_keys")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "DatabaseSourceConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_kinesisfirehose.CfnDeliveryStream.DatabaseSourceVPCConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"vpc_endpoint_service_name": "vpcEndpointServiceName"},
+    )
+    class DatabaseSourceVPCConfigurationProperty:
+        def __init__(self, *, vpc_endpoint_service_name: builtins.str) -> None:
+            '''The structure for details of the VPC Endpoint Service which Firehose uses to create a PrivateLink to the database.
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :param vpc_endpoint_service_name: The VPC endpoint service name which Firehose uses to create a PrivateLink to the database. The endpoint service must have the Firehose service principle ``firehose.amazonaws.com`` as an allowed principal on the VPC endpoint service. The VPC endpoint service name is a string that looks like ``com.amazonaws.vpce.<region>.<vpc-endpoint-service-id>`` . Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourcevpcconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_kinesisfirehose as kinesisfirehose
+                
+                database_source_vPCConfiguration_property = kinesisfirehose.CfnDeliveryStream.DatabaseSourceVPCConfigurationProperty(
+                    vpc_endpoint_service_name="vpcEndpointServiceName"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__4616b4a1f40a4e175751eda3777e82055e2397fd9dad0a6cd009c18c89e97cd3)
+                check_type(argname="argument vpc_endpoint_service_name", value=vpc_endpoint_service_name, expected_type=type_hints["vpc_endpoint_service_name"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "vpc_endpoint_service_name": vpc_endpoint_service_name,
+            }
+
+        @builtins.property
+        def vpc_endpoint_service_name(self) -> builtins.str:
+            '''The VPC endpoint service name which Firehose uses to create a PrivateLink to the database.
+
+            The endpoint service must have the Firehose service principle ``firehose.amazonaws.com`` as an allowed principal on the VPC endpoint service. The VPC endpoint service name is a string that looks like ``com.amazonaws.vpce.<region>.<vpc-endpoint-service-id>`` .
+
+            Amazon Data Firehose is in preview release and is subject to change.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasesourcevpcconfiguration.html#cfn-kinesisfirehose-deliverystream-databasesourcevpcconfiguration-vpcendpointservicename
+            '''
+            result = self._values.get("vpc_endpoint_service_name")
+            assert result is not None, "Required property 'vpc_endpoint_service_name' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "DatabaseSourceVPCConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_kinesisfirehose.CfnDeliveryStream.DatabaseTablesProperty",
+        jsii_struct_bases=[],
+        name_mapping={"exclude": "exclude", "include": "include"},
+    )
+    class DatabaseTablesProperty:
+        def __init__(
+            self,
+            *,
+            exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+            include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''
+            :param exclude: 
+            :param include: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasetables.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_kinesisfirehose as kinesisfirehose
+                
+                database_tables_property = kinesisfirehose.CfnDeliveryStream.DatabaseTablesProperty(
+                    exclude=["exclude"],
+                    include=["include"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__b669ca3e532e36dd3f6bf714eda78c90c8c90c4c1bc6dbebfab5c56e74950ddb)
+                check_type(argname="argument exclude", value=exclude, expected_type=type_hints["exclude"])
+                check_type(argname="argument include", value=include, expected_type=type_hints["include"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if exclude is not None:
+                self._values["exclude"] = exclude
+            if include is not None:
+                self._values["include"] = include
+
+        @builtins.property
+        def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasetables.html#cfn-kinesisfirehose-deliverystream-databasetables-exclude
+            '''
+            result = self._values.get("exclude")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def include(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databasetables.html#cfn-kinesisfirehose-deliverystream-databasetables-include
+            '''
+            result = self._values.get("include")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "DatabaseTablesProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_kinesisfirehose.CfnDeliveryStream.DatabasesProperty",
+        jsii_struct_bases=[],
+        name_mapping={"exclude": "exclude", "include": "include"},
+    )
+    class DatabasesProperty:
+        def __init__(
+            self,
+            *,
+            exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+            include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''
+            :param exclude: 
+            :param include: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databases.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_kinesisfirehose as kinesisfirehose
+                
+                databases_property = kinesisfirehose.CfnDeliveryStream.DatabasesProperty(
+                    exclude=["exclude"],
+                    include=["include"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__b6aa9553c52b253113ab9a3fd740ae3235a38fc2d9a582fa85db01832e154931)
+                check_type(argname="argument exclude", value=exclude, expected_type=type_hints["exclude"])
+                check_type(argname="argument include", value=include, expected_type=type_hints["include"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if exclude is not None:
+                self._values["exclude"] = exclude
+            if include is not None:
+                self._values["include"] = include
+
+        @builtins.property
+        def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databases.html#cfn-kinesisfirehose-deliverystream-databases-exclude
+            '''
+            result = self._values.get("exclude")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def include(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-databases.html#cfn-kinesisfirehose-deliverystream-databases-include
+            '''
+            result = self._values.get("include")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "DatabasesProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_kinesisfirehose.CfnDeliveryStream.DeliveryStreamEncryptionConfigurationInputProperty",
         jsii_struct_bases=[],
@@ -6227,10 +6881,10 @@ class CfnDeliveryStream(
         ) -> None:
             '''The serializer that you want Firehose to use to convert data to the target format before writing it to Amazon S3.
 
-            Firehose supports two types of serializers: the `ORC SerDe <https://docs.aws.amazon.com/https://hive.apache.org/javadocs/r1.2.2/api/org/apache/hadoop/hive/ql/io/orc/OrcSerde.html>`_ and the `Parquet SerDe <https://docs.aws.amazon.com/https://hive.apache.org/javadocs/r1.2.2/api/org/apache/hadoop/hive/ql/io/parquet/serde/ParquetHiveSerDe.html>`_ .
+            Firehose supports two types of serializers: the ORC SerDe and the Parquet SerDe.
 
             :param orc_ser_de: A serializer to use for converting data to the ORC format before storing it in Amazon S3. For more information, see `Apache ORC <https://docs.aws.amazon.com/https://orc.apache.org/docs/>`_ .
-            :param parquet_ser_de: A serializer to use for converting data to the Parquet format before storing it in Amazon S3. For more information, see `Apache Parquet <https://docs.aws.amazon.com/https://parquet.apache.org/documentation/latest/>`_ .
+            :param parquet_ser_de: A serializer to use for converting data to the Parquet format before storing it in Amazon S3. For more information, see `Apache Parquet <https://docs.aws.amazon.com/https://parquet.apache.org/docs/contribution-guidelines/>`_ .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-serializer.html
             :exampleMetadata: fixture=_generated
@@ -6293,7 +6947,7 @@ class CfnDeliveryStream(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDeliveryStream.ParquetSerDeProperty"]]:
             '''A serializer to use for converting data to the Parquet format before storing it in Amazon S3.
 
-            For more information, see `Apache Parquet <https://docs.aws.amazon.com/https://parquet.apache.org/documentation/latest/>`_ .
+            For more information, see `Apache Parquet <https://docs.aws.amazon.com/https://parquet.apache.org/docs/contribution-guidelines/>`_ .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-serializer.html#cfn-kinesisfirehose-deliverystream-serializer-parquetserde
             '''
@@ -6454,7 +7108,7 @@ class CfnDeliveryStream(
             :param content_column_name: The name of the record content column.
             :param data_loading_option: Choose to load JSON keys mapped to table column names or choose to split the JSON payload where content is mapped to a record content column and source metadata is mapped to a record metadata column.
             :param key_passphrase: Passphrase to decrypt the private key when the key is encrypted. For information, see `Using Key Pair Authentication & Key Rotation <https://docs.aws.amazon.com/https://docs.snowflake.com/en/user-guide/data-load-snowpipe-streaming-configuration#using-key-pair-authentication-key-rotation>`_ .
-            :param meta_data_column_name: The name of the record metadata column.
+            :param meta_data_column_name: Specify a column name in the table, where the metadata information has to be loaded. When you enable this field, you will see the following column in the snowflake table, which differs based on the source type. For Direct PUT as source ``{ "firehoseDeliveryStreamName" : "streamname", "IngestionTime" : "timestamp" }`` For Kinesis Data Stream as source ``"kinesisStreamName" : "streamname", "kinesisShardId" : "Id", "kinesisPartitionKey" : "key", "kinesisSequenceNumber" : "1234", "subsequenceNumber" : "2334", "IngestionTime" : "timestamp" }``
             :param private_key: The private key used to encrypt your Snowflake client. For information, see `Using Key Pair Authentication & Key Rotation <https://docs.aws.amazon.com/https://docs.snowflake.com/en/user-guide/data-load-snowpipe-streaming-configuration#using-key-pair-authentication-key-rotation>`_ .
             :param processing_configuration: Specifies configuration for Snowflake.
             :param retry_options: The time period where Firehose will retry sending data to the chosen HTTP endpoint.
@@ -6728,7 +7382,17 @@ class CfnDeliveryStream(
 
         @builtins.property
         def meta_data_column_name(self) -> typing.Optional[builtins.str]:
-            '''The name of the record metadata column.
+            '''Specify a column name in the table, where the metadata information has to be loaded.
+
+            When you enable this field, you will see the following column in the snowflake table, which differs based on the source type.
+
+            For Direct PUT as source
+
+            ``{ "firehoseDeliveryStreamName" : "streamname", "IngestionTime" : "timestamp" }``
+
+            For Kinesis Data Stream as source
+
+            ``"kinesisStreamName" : "streamname", "kinesisShardId" : "Id", "kinesisPartitionKey" : "key", "kinesisSequenceNumber" : "1234", "subsequenceNumber" : "2334", "IngestionTime" : "timestamp" }``
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-snowflakedestinationconfiguration.html#cfn-kinesisfirehose-deliverystream-snowflakedestinationconfiguration-metadatacolumnname
             '''
@@ -7560,6 +8224,7 @@ class CfnDeliveryStream(
     name_mapping={
         "amazon_open_search_serverless_destination_configuration": "amazonOpenSearchServerlessDestinationConfiguration",
         "amazonopensearchservice_destination_configuration": "amazonopensearchserviceDestinationConfiguration",
+        "database_source_configuration": "databaseSourceConfiguration",
         "delivery_stream_encryption_configuration_input": "deliveryStreamEncryptionConfigurationInput",
         "delivery_stream_name": "deliveryStreamName",
         "delivery_stream_type": "deliveryStreamType",
@@ -7582,6 +8247,7 @@ class CfnDeliveryStreamProps:
         *,
         amazon_open_search_serverless_destination_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.AmazonOpenSearchServerlessDestinationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         amazonopensearchservice_destination_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.AmazonopensearchserviceDestinationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        database_source_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.DatabaseSourceConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         delivery_stream_encryption_configuration_input: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.DeliveryStreamEncryptionConfigurationInputProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         delivery_stream_name: typing.Optional[builtins.str] = None,
         delivery_stream_type: typing.Optional[builtins.str] = None,
@@ -7601,6 +8267,7 @@ class CfnDeliveryStreamProps:
 
         :param amazon_open_search_serverless_destination_configuration: Describes the configuration of a destination in the Serverless offering for Amazon OpenSearch Service.
         :param amazonopensearchservice_destination_configuration: The destination in Amazon OpenSearch Service. You can specify only one destination.
+        :param database_source_configuration: The top level object for configuring streams with database as a source. Amazon Data Firehose is in preview release and is subject to change.
         :param delivery_stream_encryption_configuration_input: Specifies the type and Amazon Resource Name (ARN) of the CMK to use for Server-Side Encryption (SSE).
         :param delivery_stream_name: The name of the Firehose stream.
         :param delivery_stream_type: The Firehose stream type. This can be one of the following values:. - ``DirectPut`` : Provider applications access the Firehose stream directly. - ``KinesisStreamAsSource`` : The Firehose stream uses a Kinesis data stream as a source.
@@ -7614,7 +8281,7 @@ class CfnDeliveryStreamProps:
         :param s3_destination_configuration: The ``S3DestinationConfiguration`` property type specifies an Amazon Simple Storage Service (Amazon S3) destination to which Amazon Kinesis Data Firehose (Kinesis Data Firehose) delivers data. Conditional. You must specify only one destination configuration. If you change the delivery stream destination from an Amazon S3 destination to an Amazon ES destination, update requires `some interruptions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt>`_ .
         :param snowflake_destination_configuration: Configure Snowflake destination.
         :param splunk_destination_configuration: The configuration of a destination in Splunk for the delivery stream.
-        :param tags: A set of tags to assign to the Firehose stream. A tag is a key-value pair that you can define and assign to AWS resources. Tags are metadata. For example, you can add friendly names and descriptions or other types of information that can help you distinguish the Firehose stream. For more information about tags, see `Using Cost Allocation Tags <https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html>`_ in the AWS Billing and Cost Management User Guide. You can specify up to 50 tags when creating a Firehose stream. If you specify tags in the ``CreateDeliveryStream`` action, Amazon Data Firehose performs an additional authorization on the ``firehose:TagDeliveryStream`` action to verify if users have permissions to create tags. If you do not provide this permission, requests to create new Firehose Firehose streams with IAM resource tags will fail with an ``AccessDeniedException`` such as following. *AccessDeniedException* User: arn:aws:sts::x:assumed-role/x/x is not authorized to perform: firehose:TagDeliveryStream on resource: arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an identity-based policy. For an example IAM policy, see `Tag example. <https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples>`_
+        :param tags: A set of tags to assign to the Firehose stream. A tag is a key-value pair that you can define and assign to AWS resources. Tags are metadata. For example, you can add friendly names and descriptions or other types of information that can help you distinguish the Firehose stream. For more information about tags, see `Using Cost Allocation Tags <https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html>`_ in the AWS Billing and Cost Management User Guide. You can specify up to 50 tags when creating a Firehose stream. If you specify tags in the ``CreateDeliveryStream`` action, Amazon Data Firehose performs an additional authorization on the ``firehose:TagDeliveryStream`` action to verify if users have permissions to create tags. If you do not provide this permission, requests to create new Firehose streams with IAM resource tags will fail with an ``AccessDeniedException`` such as following. *AccessDeniedException* User: arn:aws:sts::x:assumed-role/x/x is not authorized to perform: firehose:TagDeliveryStream on resource: arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an identity-based policy. For an example IAM policy, see `Tag example. <https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples>`_
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesisfirehose-deliverystream.html
         :exampleMetadata: infused
@@ -7645,6 +8312,7 @@ class CfnDeliveryStreamProps:
             type_hints = typing.get_type_hints(_typecheckingstub__4f4e310bf0ff2c76f9c126ea4431fb25b9b53c8ba7e0c0eacc1c934debd05a95)
             check_type(argname="argument amazon_open_search_serverless_destination_configuration", value=amazon_open_search_serverless_destination_configuration, expected_type=type_hints["amazon_open_search_serverless_destination_configuration"])
             check_type(argname="argument amazonopensearchservice_destination_configuration", value=amazonopensearchservice_destination_configuration, expected_type=type_hints["amazonopensearchservice_destination_configuration"])
+            check_type(argname="argument database_source_configuration", value=database_source_configuration, expected_type=type_hints["database_source_configuration"])
             check_type(argname="argument delivery_stream_encryption_configuration_input", value=delivery_stream_encryption_configuration_input, expected_type=type_hints["delivery_stream_encryption_configuration_input"])
             check_type(argname="argument delivery_stream_name", value=delivery_stream_name, expected_type=type_hints["delivery_stream_name"])
             check_type(argname="argument delivery_stream_type", value=delivery_stream_type, expected_type=type_hints["delivery_stream_type"])
@@ -7664,6 +8332,8 @@ class CfnDeliveryStreamProps:
             self._values["amazon_open_search_serverless_destination_configuration"] = amazon_open_search_serverless_destination_configuration
         if amazonopensearchservice_destination_configuration is not None:
             self._values["amazonopensearchservice_destination_configuration"] = amazonopensearchservice_destination_configuration
+        if database_source_configuration is not None:
+            self._values["database_source_configuration"] = database_source_configuration
         if delivery_stream_encryption_configuration_input is not None:
             self._values["delivery_stream_encryption_configuration_input"] = delivery_stream_encryption_configuration_input
         if delivery_stream_name is not None:
@@ -7717,6 +8387,19 @@ class CfnDeliveryStreamProps:
         result = self._values.get("amazonopensearchservice_destination_configuration")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDeliveryStream.AmazonopensearchserviceDestinationConfigurationProperty]], result)
 
+    @builtins.property
+    def database_source_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDeliveryStream.DatabaseSourceConfigurationProperty]]:
+        '''The top level object for configuring streams with database as a source.
+
+        Amazon Data Firehose is in preview release and is subject to change.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesisfirehose-deliverystream.html#cfn-kinesisfirehose-deliverystream-databasesourceconfiguration
+        '''
+        result = self._values.get("database_source_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDeliveryStream.DatabaseSourceConfigurationProperty]], result)
+
     @builtins.property
     def delivery_stream_encryption_configuration_input(
         self,
@@ -7885,7 +8568,7 @@ class CfnDeliveryStreamProps:
 
         You can specify up to 50 tags when creating a Firehose stream.
 
-        If you specify tags in the ``CreateDeliveryStream`` action, Amazon Data Firehose performs an additional authorization on the ``firehose:TagDeliveryStream`` action to verify if users have permissions to create tags. If you do not provide this permission, requests to create new Firehose Firehose streams with IAM resource tags will fail with an ``AccessDeniedException`` such as following.
+        If you specify tags in the ``CreateDeliveryStream`` action, Amazon Data Firehose performs an additional authorization on the ``firehose:TagDeliveryStream`` action to verify if users have permissions to create tags. If you do not provide this permission, requests to create new Firehose streams with IAM resource tags will fail with an ``AccessDeniedException`` such as following.
 
         *AccessDeniedException*
 
@@ -7923,6 +8606,7 @@ def _typecheckingstub__b3cd824a2680c7d043cac684bd1be9ca77e94201f1ba00785d60a50ff
     *,
     amazon_open_search_serverless_destination_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.AmazonOpenSearchServerlessDestinationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     amazonopensearchservice_destination_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.AmazonopensearchserviceDestinationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    database_source_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.DatabaseSourceConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     delivery_stream_encryption_configuration_input: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.DeliveryStreamEncryptionConfigurationInputProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     delivery_stream_name: typing.Optional[builtins.str] = None,
     delivery_stream_type: typing.Optional[builtins.str] = None,
@@ -7965,6 +8649,12 @@ def _typecheckingstub__58964b8831d37cbba22a48328508a0d1fc866bb6da992a0c3f544fc66
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__671f3a3eb25ab7249d3b64fb9d1c6865a8a68b8a7b92841ab6890851853da1f5(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDeliveryStream.DatabaseSourceConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__3b541613844a306d329ee6aaf12a513672a01cea651f015810fd2ab896394415(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDeliveryStream.DeliveryStreamEncryptionConfigurationInputProperty]],
 ) -> None:
@@ -8166,6 +8856,63 @@ def _typecheckingstub__d2fd0a4fb437e036bd2436bcfd397fa35f08aba48c5a25c4aac36dedb
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__111648b092f5dd75408d33db5fb1adea30dc7a8b58549cef95459f9224ccb26a(
+    *,
+    exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+    include: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__cecf7807b45586be03c0bc76f8fcdf6ad93c6bd34a795d26aeaf365dd3d297c4(
+    *,
+    secrets_manager_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.SecretsManagerConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__dfa32769046e99e73e35a8b5e878b72f25abcaa661bf955ff25e794601e2126d(
+    *,
+    databases: typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.DatabasesProperty, typing.Dict[builtins.str, typing.Any]]],
+    database_source_authentication_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.DatabaseSourceAuthenticationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+    database_source_vpc_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.DatabaseSourceVPCConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+    endpoint: builtins.str,
+    port: jsii.Number,
+    snapshot_watermark_table: builtins.str,
+    tables: typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.DatabaseTablesProperty, typing.Dict[builtins.str, typing.Any]]],
+    type: builtins.str,
+    columns: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.DatabaseColumnsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    digest: typing.Optional[builtins.str] = None,
+    public_certificate: typing.Optional[builtins.str] = None,
+    ssl_mode: typing.Optional[builtins.str] = None,
+    surrogate_keys: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4616b4a1f40a4e175751eda3777e82055e2397fd9dad0a6cd009c18c89e97cd3(
+    *,
+    vpc_endpoint_service_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b669ca3e532e36dd3f6bf714eda78c90c8c90c4c1bc6dbebfab5c56e74950ddb(
+    *,
+    exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+    include: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b6aa9553c52b253113ab9a3fd740ae3235a38fc2d9a582fa85db01832e154931(
+    *,
+    exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+    include: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__a51e3602fa39b19119cb43ff1945ccb136f7909bb7d76a42abc9195cb0d725a3(
     *,
     key_type: builtins.str,
@@ -8610,6 +9357,7 @@ def _typecheckingstub__4f4e310bf0ff2c76f9c126ea4431fb25b9b53c8ba7e0c0eacc1c934de
     *,
     amazon_open_search_serverless_destination_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.AmazonOpenSearchServerlessDestinationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     amazonopensearchservice_destination_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.AmazonopensearchserviceDestinationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    database_source_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.DatabaseSourceConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     delivery_stream_encryption_configuration_input: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDeliveryStream.DeliveryStreamEncryptionConfigurationInputProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     delivery_stream_name: typing.Optional[builtins.str] = None,
     delivery_stream_type: typing.Optional[builtins.str] = None,