aws-cdk-lib 2.171.1__py3-none-any.whl → 2.172.0__py3-none-any.whl

aws_cdk/aws_workspacesweb/__init__.py

@@ -377,6 +377,872 @@ class CfnBrowserSettingsProps:
         )
 
 
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnDataProtectionSettings(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettings",
+):
+    '''Definition of AWS::WorkSpacesWeb::DataProtectionSettings Resource Type.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html
+    :cloudformationResource: AWS::WorkSpacesWeb::DataProtectionSettings
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_workspacesweb as workspacesweb
+        
+        cfn_data_protection_settings = workspacesweb.CfnDataProtectionSettings(self, "MyCfnDataProtectionSettings",
+            additional_encryption_context={
+                "additional_encryption_context_key": "additionalEncryptionContext"
+            },
+            customer_managed_key="customerManagedKey",
+            description="description",
+            display_name="displayName",
+            inline_redaction_configuration=workspacesweb.CfnDataProtectionSettings.InlineRedactionConfigurationProperty(
+                inline_redaction_patterns=[workspacesweb.CfnDataProtectionSettings.InlineRedactionPatternProperty(
+                    redaction_place_holder=workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty(
+                        redaction_place_holder_type="redactionPlaceHolderType",
+        
+                        # the properties below are optional
+                        redaction_place_holder_text="redactionPlaceHolderText"
+                    ),
+        
+                    # the properties below are optional
+                    built_in_pattern_id="builtInPatternId",
+                    confidence_level=123,
+                    custom_pattern=workspacesweb.CfnDataProtectionSettings.CustomPatternProperty(
+                        pattern_name="patternName",
+                        pattern_regex="patternRegex",
+        
+                        # the properties below are optional
+                        keyword_regex="keywordRegex",
+                        pattern_description="patternDescription"
+                    ),
+                    enforced_urls=["enforcedUrls"],
+                    exempt_urls=["exemptUrls"]
+                )],
+        
+                # the properties below are optional
+                global_confidence_level=123,
+                global_enforced_urls=["globalEnforcedUrls"],
+                global_exempt_urls=["globalExemptUrls"]
+            ),
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        additional_encryption_context: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+        customer_managed_key: typing.Optional[builtins.str] = None,
+        description: typing.Optional[builtins.str] = None,
+        display_name: typing.Optional[builtins.str] = None,
+        inline_redaction_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDataProtectionSettings.InlineRedactionConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param additional_encryption_context: 
+        :param customer_managed_key: 
+        :param description: 
+        :param display_name: 
+        :param inline_redaction_configuration: 
+        :param tags: 
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__851565cba0af7c67b6951a864a7d6671af0039654a56671ed86d28919552d73e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnDataProtectionSettingsProps(
+            additional_encryption_context=additional_encryption_context,
+            customer_managed_key=customer_managed_key,
+            description=description,
+            display_name=display_name,
+            inline_redaction_configuration=inline_redaction_configuration,
+            tags=tags,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3afc83d9e43528cc13b5abd50d4826acf870643c24640ed022e2bd621b1dec5f)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__029b8eb91b5f7341d86b33581460523348eedfa665657364ac1293ba7954ad5e)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrAssociatedPortalArns")
+    def attr_associated_portal_arns(self) -> typing.List[builtins.str]:
+        '''
+        :cloudformationAttribute: AssociatedPortalArns
+        '''
+        return typing.cast(typing.List[builtins.str], jsii.get(self, "attrAssociatedPortalArns"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrCreationDate")
+    def attr_creation_date(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: CreationDate
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrCreationDate"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrDataProtectionSettingsArn")
+    def attr_data_protection_settings_arn(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: DataProtectionSettingsArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrDataProtectionSettingsArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="additionalEncryptionContext")
+    def additional_encryption_context(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], jsii.get(self, "additionalEncryptionContext"))
+
+    @additional_encryption_context.setter
+    def additional_encryption_context(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3fb99479367371b2a6c52e976d47a87740ba2c6f65f4fcf0c11ef7787923a279)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "additionalEncryptionContext", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="customerManagedKey")
+    def customer_managed_key(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "customerManagedKey"))
+
+    @customer_managed_key.setter
+    def customer_managed_key(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b8794b55f834ff23fceefb4949f1c9ca0f88d0253e16fe02de823fd78e704f6a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "customerManagedKey", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="description")
+    def description(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "description"))
+
+    @description.setter
+    def description(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7e6f16d355910af3e0d25ae4869bb9019e44d7bb8454311659d9581fbff7ad5f)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="displayName")
+    def display_name(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "displayName"))
+
+    @display_name.setter
+    def display_name(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4bbbc104f6c3d94f0c1f63bd93d3ec5849325aa58b7e06f06e3c37f6b101823f)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "displayName", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="inlineRedactionConfiguration")
+    def inline_redaction_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.InlineRedactionConfigurationProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.InlineRedactionConfigurationProperty"]], jsii.get(self, "inlineRedactionConfiguration"))
+
+    @inline_redaction_configuration.setter
+    def inline_redaction_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.InlineRedactionConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a80d3be6cd6ed07f4c7a5f51acbace505548a335789227fb3e70735f66c484f6)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "inlineRedactionConfiguration", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d82a664a0d9b6e2a4f59784e5f13b3f39994ef205d8513718b40fba2b6daf513)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettings.CustomPatternProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "pattern_name": "patternName",
+            "pattern_regex": "patternRegex",
+            "keyword_regex": "keywordRegex",
+            "pattern_description": "patternDescription",
+        },
+    )
+    class CustomPatternProperty:
+        def __init__(
+            self,
+            *,
+            pattern_name: builtins.str,
+            pattern_regex: builtins.str,
+            keyword_regex: typing.Optional[builtins.str] = None,
+            pattern_description: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''
+            :param pattern_name: 
+            :param pattern_regex: 
+            :param keyword_regex: 
+            :param pattern_description: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-custompattern.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_workspacesweb as workspacesweb
+                
+                custom_pattern_property = workspacesweb.CfnDataProtectionSettings.CustomPatternProperty(
+                    pattern_name="patternName",
+                    pattern_regex="patternRegex",
+                
+                    # the properties below are optional
+                    keyword_regex="keywordRegex",
+                    pattern_description="patternDescription"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__6114d751d2647346cb8b4fe7fc495c1b5e4ec1ffbe6904abf91d6b44adec7548)
+                check_type(argname="argument pattern_name", value=pattern_name, expected_type=type_hints["pattern_name"])
+                check_type(argname="argument pattern_regex", value=pattern_regex, expected_type=type_hints["pattern_regex"])
+                check_type(argname="argument keyword_regex", value=keyword_regex, expected_type=type_hints["keyword_regex"])
+                check_type(argname="argument pattern_description", value=pattern_description, expected_type=type_hints["pattern_description"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "pattern_name": pattern_name,
+                "pattern_regex": pattern_regex,
+            }
+            if keyword_regex is not None:
+                self._values["keyword_regex"] = keyword_regex
+            if pattern_description is not None:
+                self._values["pattern_description"] = pattern_description
+
+        @builtins.property
+        def pattern_name(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-custompattern.html#cfn-workspacesweb-dataprotectionsettings-custompattern-patternname
+            '''
+            result = self._values.get("pattern_name")
+            assert result is not None, "Required property 'pattern_name' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def pattern_regex(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-custompattern.html#cfn-workspacesweb-dataprotectionsettings-custompattern-patternregex
+            '''
+            result = self._values.get("pattern_regex")
+            assert result is not None, "Required property 'pattern_regex' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def keyword_regex(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-custompattern.html#cfn-workspacesweb-dataprotectionsettings-custompattern-keywordregex
+            '''
+            result = self._values.get("keyword_regex")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def pattern_description(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-custompattern.html#cfn-workspacesweb-dataprotectionsettings-custompattern-patterndescription
+            '''
+            result = self._values.get("pattern_description")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CustomPatternProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettings.InlineRedactionConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "inline_redaction_patterns": "inlineRedactionPatterns",
+            "global_confidence_level": "globalConfidenceLevel",
+            "global_enforced_urls": "globalEnforcedUrls",
+            "global_exempt_urls": "globalExemptUrls",
+        },
+    )
+    class InlineRedactionConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            inline_redaction_patterns: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDataProtectionSettings.InlineRedactionPatternProperty", typing.Dict[builtins.str, typing.Any]]]]],
+            global_confidence_level: typing.Optional[jsii.Number] = None,
+            global_enforced_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+            global_exempt_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''
+            :param inline_redaction_patterns: 
+            :param global_confidence_level: 
+            :param global_enforced_urls: 
+            :param global_exempt_urls: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_workspacesweb as workspacesweb
+                
+                inline_redaction_configuration_property = workspacesweb.CfnDataProtectionSettings.InlineRedactionConfigurationProperty(
+                    inline_redaction_patterns=[workspacesweb.CfnDataProtectionSettings.InlineRedactionPatternProperty(
+                        redaction_place_holder=workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty(
+                            redaction_place_holder_type="redactionPlaceHolderType",
+                
+                            # the properties below are optional
+                            redaction_place_holder_text="redactionPlaceHolderText"
+                        ),
+                
+                        # the properties below are optional
+                        built_in_pattern_id="builtInPatternId",
+                        confidence_level=123,
+                        custom_pattern=workspacesweb.CfnDataProtectionSettings.CustomPatternProperty(
+                            pattern_name="patternName",
+                            pattern_regex="patternRegex",
+                
+                            # the properties below are optional
+                            keyword_regex="keywordRegex",
+                            pattern_description="patternDescription"
+                        ),
+                        enforced_urls=["enforcedUrls"],
+                        exempt_urls=["exemptUrls"]
+                    )],
+                
+                    # the properties below are optional
+                    global_confidence_level=123,
+                    global_enforced_urls=["globalEnforcedUrls"],
+                    global_exempt_urls=["globalExemptUrls"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__552bfd927d431d6795b0b5add23e48f1a25b4db6addb149426e81afc6686dc63)
+                check_type(argname="argument inline_redaction_patterns", value=inline_redaction_patterns, expected_type=type_hints["inline_redaction_patterns"])
+                check_type(argname="argument global_confidence_level", value=global_confidence_level, expected_type=type_hints["global_confidence_level"])
+                check_type(argname="argument global_enforced_urls", value=global_enforced_urls, expected_type=type_hints["global_enforced_urls"])
+                check_type(argname="argument global_exempt_urls", value=global_exempt_urls, expected_type=type_hints["global_exempt_urls"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "inline_redaction_patterns": inline_redaction_patterns,
+            }
+            if global_confidence_level is not None:
+                self._values["global_confidence_level"] = global_confidence_level
+            if global_enforced_urls is not None:
+                self._values["global_enforced_urls"] = global_enforced_urls
+            if global_exempt_urls is not None:
+                self._values["global_exempt_urls"] = global_exempt_urls
+
+        @builtins.property
+        def inline_redaction_patterns(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.InlineRedactionPatternProperty"]]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionconfiguration.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionconfiguration-inlineredactionpatterns
+            '''
+            result = self._values.get("inline_redaction_patterns")
+            assert result is not None, "Required property 'inline_redaction_patterns' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.InlineRedactionPatternProperty"]]], result)
+
+        @builtins.property
+        def global_confidence_level(self) -> typing.Optional[jsii.Number]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionconfiguration.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionconfiguration-globalconfidencelevel
+            '''
+            result = self._values.get("global_confidence_level")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def global_enforced_urls(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionconfiguration.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionconfiguration-globalenforcedurls
+            '''
+            result = self._values.get("global_enforced_urls")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def global_exempt_urls(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionconfiguration.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionconfiguration-globalexempturls
+            '''
+            result = self._values.get("global_exempt_urls")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "InlineRedactionConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettings.InlineRedactionPatternProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "redaction_place_holder": "redactionPlaceHolder",
+            "built_in_pattern_id": "builtInPatternId",
+            "confidence_level": "confidenceLevel",
+            "custom_pattern": "customPattern",
+            "enforced_urls": "enforcedUrls",
+            "exempt_urls": "exemptUrls",
+        },
+    )
+    class InlineRedactionPatternProperty:
+        def __init__(
+            self,
+            *,
+            redaction_place_holder: typing.Union[_IResolvable_da3f097b, typing.Union["CfnDataProtectionSettings.RedactionPlaceHolderProperty", typing.Dict[builtins.str, typing.Any]]],
+            built_in_pattern_id: typing.Optional[builtins.str] = None,
+            confidence_level: typing.Optional[jsii.Number] = None,
+            custom_pattern: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDataProtectionSettings.CustomPatternProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            enforced_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+            exempt_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''
+            :param redaction_place_holder: 
+            :param built_in_pattern_id: 
+            :param confidence_level: 
+            :param custom_pattern: 
+            :param enforced_urls: 
+            :param exempt_urls: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_workspacesweb as workspacesweb
+                
+                inline_redaction_pattern_property = workspacesweb.CfnDataProtectionSettings.InlineRedactionPatternProperty(
+                    redaction_place_holder=workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty(
+                        redaction_place_holder_type="redactionPlaceHolderType",
+                
+                        # the properties below are optional
+                        redaction_place_holder_text="redactionPlaceHolderText"
+                    ),
+                
+                    # the properties below are optional
+                    built_in_pattern_id="builtInPatternId",
+                    confidence_level=123,
+                    custom_pattern=workspacesweb.CfnDataProtectionSettings.CustomPatternProperty(
+                        pattern_name="patternName",
+                        pattern_regex="patternRegex",
+                
+                        # the properties below are optional
+                        keyword_regex="keywordRegex",
+                        pattern_description="patternDescription"
+                    ),
+                    enforced_urls=["enforcedUrls"],
+                    exempt_urls=["exemptUrls"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__f28e305e326d3f4c9ac306ecac6e0d132c560d8cb368e6c1d255bce2256c5953)
+                check_type(argname="argument redaction_place_holder", value=redaction_place_holder, expected_type=type_hints["redaction_place_holder"])
+                check_type(argname="argument built_in_pattern_id", value=built_in_pattern_id, expected_type=type_hints["built_in_pattern_id"])
+                check_type(argname="argument confidence_level", value=confidence_level, expected_type=type_hints["confidence_level"])
+                check_type(argname="argument custom_pattern", value=custom_pattern, expected_type=type_hints["custom_pattern"])
+                check_type(argname="argument enforced_urls", value=enforced_urls, expected_type=type_hints["enforced_urls"])
+                check_type(argname="argument exempt_urls", value=exempt_urls, expected_type=type_hints["exempt_urls"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "redaction_place_holder": redaction_place_holder,
+            }
+            if built_in_pattern_id is not None:
+                self._values["built_in_pattern_id"] = built_in_pattern_id
+            if confidence_level is not None:
+                self._values["confidence_level"] = confidence_level
+            if custom_pattern is not None:
+                self._values["custom_pattern"] = custom_pattern
+            if enforced_urls is not None:
+                self._values["enforced_urls"] = enforced_urls
+            if exempt_urls is not None:
+                self._values["exempt_urls"] = exempt_urls
+
+        @builtins.property
+        def redaction_place_holder(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.RedactionPlaceHolderProperty"]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-redactionplaceholder
+            '''
+            result = self._values.get("redaction_place_holder")
+            assert result is not None, "Required property 'redaction_place_holder' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.RedactionPlaceHolderProperty"], result)
+
+        @builtins.property
+        def built_in_pattern_id(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-builtinpatternid
+            '''
+            result = self._values.get("built_in_pattern_id")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def confidence_level(self) -> typing.Optional[jsii.Number]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-confidencelevel
+            '''
+            result = self._values.get("confidence_level")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def custom_pattern(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.CustomPatternProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-custompattern
+            '''
+            result = self._values.get("custom_pattern")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.CustomPatternProperty"]], result)
+
+        @builtins.property
+        def enforced_urls(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-enforcedurls
+            '''
+            result = self._values.get("enforced_urls")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def exempt_urls(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-exempturls
+            '''
+            result = self._values.get("exempt_urls")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "InlineRedactionPatternProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "redaction_place_holder_type": "redactionPlaceHolderType",
+            "redaction_place_holder_text": "redactionPlaceHolderText",
+        },
+    )
+    class RedactionPlaceHolderProperty:
+        def __init__(
+            self,
+            *,
+            redaction_place_holder_type: builtins.str,
+            redaction_place_holder_text: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''
+            :param redaction_place_holder_type: 
+            :param redaction_place_holder_text: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-redactionplaceholder.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_workspacesweb as workspacesweb
+                
+                redaction_place_holder_property = workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty(
+                    redaction_place_holder_type="redactionPlaceHolderType",
+                
+                    # the properties below are optional
+                    redaction_place_holder_text="redactionPlaceHolderText"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__93e3fa90dfeb5ed27de42632610186e3eec8e8ee42bce56d7f8dcb07d9c19f53)
+                check_type(argname="argument redaction_place_holder_type", value=redaction_place_holder_type, expected_type=type_hints["redaction_place_holder_type"])
+                check_type(argname="argument redaction_place_holder_text", value=redaction_place_holder_text, expected_type=type_hints["redaction_place_holder_text"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "redaction_place_holder_type": redaction_place_holder_type,
+            }
+            if redaction_place_holder_text is not None:
+                self._values["redaction_place_holder_text"] = redaction_place_holder_text
+
+        @builtins.property
+        def redaction_place_holder_type(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-redactionplaceholder.html#cfn-workspacesweb-dataprotectionsettings-redactionplaceholder-redactionplaceholdertype
+            '''
+            result = self._values.get("redaction_place_holder_type")
+            assert result is not None, "Required property 'redaction_place_holder_type' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def redaction_place_holder_text(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-redactionplaceholder.html#cfn-workspacesweb-dataprotectionsettings-redactionplaceholder-redactionplaceholdertext
+            '''
+            result = self._values.get("redaction_place_holder_text")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "RedactionPlaceHolderProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettingsProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "additional_encryption_context": "additionalEncryptionContext",
+        "customer_managed_key": "customerManagedKey",
+        "description": "description",
+        "display_name": "displayName",
+        "inline_redaction_configuration": "inlineRedactionConfiguration",
+        "tags": "tags",
+    },
+)
+class CfnDataProtectionSettingsProps:
+    def __init__(
+        self,
+        *,
+        additional_encryption_context: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+        customer_managed_key: typing.Optional[builtins.str] = None,
+        description: typing.Optional[builtins.str] = None,
+        display_name: typing.Optional[builtins.str] = None,
+        inline_redaction_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.InlineRedactionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnDataProtectionSettings``.
+
+        :param additional_encryption_context: 
+        :param customer_managed_key: 
+        :param description: 
+        :param display_name: 
+        :param inline_redaction_configuration: 
+        :param tags: 
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_workspacesweb as workspacesweb
+            
+            cfn_data_protection_settings_props = workspacesweb.CfnDataProtectionSettingsProps(
+                additional_encryption_context={
+                    "additional_encryption_context_key": "additionalEncryptionContext"
+                },
+                customer_managed_key="customerManagedKey",
+                description="description",
+                display_name="displayName",
+                inline_redaction_configuration=workspacesweb.CfnDataProtectionSettings.InlineRedactionConfigurationProperty(
+                    inline_redaction_patterns=[workspacesweb.CfnDataProtectionSettings.InlineRedactionPatternProperty(
+                        redaction_place_holder=workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty(
+                            redaction_place_holder_type="redactionPlaceHolderType",
+            
+                            # the properties below are optional
+                            redaction_place_holder_text="redactionPlaceHolderText"
+                        ),
+            
+                        # the properties below are optional
+                        built_in_pattern_id="builtInPatternId",
+                        confidence_level=123,
+                        custom_pattern=workspacesweb.CfnDataProtectionSettings.CustomPatternProperty(
+                            pattern_name="patternName",
+                            pattern_regex="patternRegex",
+            
+                            # the properties below are optional
+                            keyword_regex="keywordRegex",
+                            pattern_description="patternDescription"
+                        ),
+                        enforced_urls=["enforcedUrls"],
+                        exempt_urls=["exemptUrls"]
+                    )],
+            
+                    # the properties below are optional
+                    global_confidence_level=123,
+                    global_enforced_urls=["globalEnforcedUrls"],
+                    global_exempt_urls=["globalExemptUrls"]
+                ),
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9bd186c92264d6b6332cc9ff86b6f530f1f3d30da79101020cac77924b86ea5a)
+            check_type(argname="argument additional_encryption_context", value=additional_encryption_context, expected_type=type_hints["additional_encryption_context"])
+            check_type(argname="argument customer_managed_key", value=customer_managed_key, expected_type=type_hints["customer_managed_key"])
+            check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
+            check_type(argname="argument inline_redaction_configuration", value=inline_redaction_configuration, expected_type=type_hints["inline_redaction_configuration"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if additional_encryption_context is not None:
+            self._values["additional_encryption_context"] = additional_encryption_context
+        if customer_managed_key is not None:
+            self._values["customer_managed_key"] = customer_managed_key
+        if description is not None:
+            self._values["description"] = description
+        if display_name is not None:
+            self._values["display_name"] = display_name
+        if inline_redaction_configuration is not None:
+            self._values["inline_redaction_configuration"] = inline_redaction_configuration
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def additional_encryption_context(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-additionalencryptioncontext
+        '''
+        result = self._values.get("additional_encryption_context")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], result)
+
+    @builtins.property
+    def customer_managed_key(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-customermanagedkey
+        '''
+        result = self._values.get("customer_managed_key")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def description(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-description
+        '''
+        result = self._values.get("description")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def display_name(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-displayname
+        '''
+        result = self._values.get("display_name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def inline_redaction_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataProtectionSettings.InlineRedactionConfigurationProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionconfiguration
+        '''
+        result = self._values.get("inline_redaction_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataProtectionSettings.InlineRedactionConfigurationProperty]], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnDataProtectionSettingsProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
 class CfnIdentityProvider(
     _CfnResource_9df397a6,
@@ -1534,6 +2400,7 @@ class CfnPortal(
             authentication_type="authenticationType",
             browser_settings_arn="browserSettingsArn",
             customer_managed_key="customerManagedKey",
+            data_protection_settings_arn="dataProtectionSettingsArn",
             display_name="displayName",
             instance_type="instanceType",
             ip_access_settings_arn="ipAccessSettingsArn",
@@ -1558,6 +2425,7 @@ class CfnPortal(
         authentication_type: typing.Optional[builtins.str] = None,
         browser_settings_arn: typing.Optional[builtins.str] = None,
         customer_managed_key: typing.Optional[builtins.str] = None,
+        data_protection_settings_arn: typing.Optional[builtins.str] = None,
         display_name: typing.Optional[builtins.str] = None,
         instance_type: typing.Optional[builtins.str] = None,
         ip_access_settings_arn: typing.Optional[builtins.str] = None,
@@ -1575,6 +2443,7 @@ class CfnPortal(
         :param authentication_type: The type of authentication integration points used when signing into the web portal. Defaults to ``Standard`` . ``Standard`` web portals are authenticated directly through your identity provider (IdP). User and group access to your web portal is controlled through your IdP. You need to include an IdP resource in your template to integrate your IdP with your web portal. Completing the configuration for your IdP requires exchanging WorkSpaces Secure Browser’s SP metadata with your IdP’s IdP metadata. If your IdP requires the SP metadata first before returning the IdP metadata, you should follow these steps: 1. Create and deploy a CloudFormation template with a ``Standard`` portal with no ``IdentityProvider`` resource. 2. Retrieve the SP metadata using ``Fn:GetAtt`` , the WorkSpaces Secure Browser console, or by the calling the ``GetPortalServiceProviderMetadata`` API. 3. Submit the data to your IdP. 4. Add an ``IdentityProvider`` resource to your CloudFormation template. ``IAM Identity Center`` web portals are authenticated through AWS IAM Identity Center . They provide additional features, such as IdP-initiated authentication. Identity sources (including external identity provider integration) and other identity provider information must be configured in IAM Identity Center . User and group assignment must be done through the WorkSpaces Secure Browser console. These cannot be configured in CloudFormation.
         :param browser_settings_arn: The ARN of the browser settings that is associated with this web portal.
         :param customer_managed_key: The customer managed key of the web portal. *Pattern* : ``^arn:[\\w+=\\/,.@-]+:kms:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:key\\/[a-zA-Z0-9-]+$``
+        :param data_protection_settings_arn: 
         :param display_name: The name of the web portal.
         :param instance_type: The type and resources of the underlying instance.
         :param ip_access_settings_arn: The ARN of the IP access settings that is associated with the web portal.
@@ -1594,6 +2463,7 @@ class CfnPortal(
             authentication_type=authentication_type,
             browser_settings_arn=browser_settings_arn,
             customer_managed_key=customer_managed_key,
+            data_protection_settings_arn=data_protection_settings_arn,
             display_name=display_name,
             instance_type=instance_type,
             ip_access_settings_arn=ip_access_settings_arn,
@@ -1780,6 +2650,21 @@ class CfnPortal(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "customerManagedKey", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="dataProtectionSettingsArn")
+    def data_protection_settings_arn(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "dataProtectionSettingsArn"))
+
+    @data_protection_settings_arn.setter
+    def data_protection_settings_arn(
+        self,
+        value: typing.Optional[builtins.str],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__dfde357dad34994249d2ece8cb99322e6a84a2af5763685459271a2545a12e6f)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "dataProtectionSettingsArn", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="displayName")
     def display_name(self) -> typing.Optional[builtins.str]:
@@ -1909,6 +2794,7 @@ class CfnPortal(
         "authentication_type": "authenticationType",
         "browser_settings_arn": "browserSettingsArn",
         "customer_managed_key": "customerManagedKey",
+        "data_protection_settings_arn": "dataProtectionSettingsArn",
         "display_name": "displayName",
         "instance_type": "instanceType",
         "ip_access_settings_arn": "ipAccessSettingsArn",
@@ -1928,6 +2814,7 @@ class CfnPortalProps:
         authentication_type: typing.Optional[builtins.str] = None,
         browser_settings_arn: typing.Optional[builtins.str] = None,
         customer_managed_key: typing.Optional[builtins.str] = None,
+        data_protection_settings_arn: typing.Optional[builtins.str] = None,
         display_name: typing.Optional[builtins.str] = None,
         instance_type: typing.Optional[builtins.str] = None,
         ip_access_settings_arn: typing.Optional[builtins.str] = None,
@@ -1944,6 +2831,7 @@ class CfnPortalProps:
         :param authentication_type: The type of authentication integration points used when signing into the web portal. Defaults to ``Standard`` . ``Standard`` web portals are authenticated directly through your identity provider (IdP). User and group access to your web portal is controlled through your IdP. You need to include an IdP resource in your template to integrate your IdP with your web portal. Completing the configuration for your IdP requires exchanging WorkSpaces Secure Browser’s SP metadata with your IdP’s IdP metadata. If your IdP requires the SP metadata first before returning the IdP metadata, you should follow these steps: 1. Create and deploy a CloudFormation template with a ``Standard`` portal with no ``IdentityProvider`` resource. 2. Retrieve the SP metadata using ``Fn:GetAtt`` , the WorkSpaces Secure Browser console, or by the calling the ``GetPortalServiceProviderMetadata`` API. 3. Submit the data to your IdP. 4. Add an ``IdentityProvider`` resource to your CloudFormation template. ``IAM Identity Center`` web portals are authenticated through AWS IAM Identity Center . They provide additional features, such as IdP-initiated authentication. Identity sources (including external identity provider integration) and other identity provider information must be configured in IAM Identity Center . User and group assignment must be done through the WorkSpaces Secure Browser console. These cannot be configured in CloudFormation.
         :param browser_settings_arn: The ARN of the browser settings that is associated with this web portal.
         :param customer_managed_key: The customer managed key of the web portal. *Pattern* : ``^arn:[\\w+=\\/,.@-]+:kms:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:key\\/[a-zA-Z0-9-]+$``
+        :param data_protection_settings_arn: 
         :param display_name: The name of the web portal.
         :param instance_type: The type and resources of the underlying instance.
         :param ip_access_settings_arn: The ARN of the IP access settings that is associated with the web portal.
@@ -1970,6 +2858,7 @@ class CfnPortalProps:
                 authentication_type="authenticationType",
                 browser_settings_arn="browserSettingsArn",
                 customer_managed_key="customerManagedKey",
+                data_protection_settings_arn="dataProtectionSettingsArn",
                 display_name="displayName",
                 instance_type="instanceType",
                 ip_access_settings_arn="ipAccessSettingsArn",
@@ -1990,6 +2879,7 @@ class CfnPortalProps:
             check_type(argname="argument authentication_type", value=authentication_type, expected_type=type_hints["authentication_type"])
             check_type(argname="argument browser_settings_arn", value=browser_settings_arn, expected_type=type_hints["browser_settings_arn"])
             check_type(argname="argument customer_managed_key", value=customer_managed_key, expected_type=type_hints["customer_managed_key"])
+            check_type(argname="argument data_protection_settings_arn", value=data_protection_settings_arn, expected_type=type_hints["data_protection_settings_arn"])
             check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
             check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
             check_type(argname="argument ip_access_settings_arn", value=ip_access_settings_arn, expected_type=type_hints["ip_access_settings_arn"])
@@ -2008,6 +2898,8 @@ class CfnPortalProps:
             self._values["browser_settings_arn"] = browser_settings_arn
         if customer_managed_key is not None:
             self._values["customer_managed_key"] = customer_managed_key
+        if data_protection_settings_arn is not None:
+            self._values["data_protection_settings_arn"] = data_protection_settings_arn
         if display_name is not None:
             self._values["display_name"] = display_name
         if instance_type is not None:
@@ -2076,6 +2968,14 @@ class CfnPortalProps:
         result = self._values.get("customer_managed_key")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def data_protection_settings_arn(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-portal.html#cfn-workspacesweb-portal-dataprotectionsettingsarn
+        '''
+        result = self._values.get("data_protection_settings_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def display_name(self) -> typing.Optional[builtins.str]:
         '''The name of the web portal.
@@ -3405,6 +4305,8 @@ class CfnUserSettingsProps:
 __all__ = [
     "CfnBrowserSettings",
     "CfnBrowserSettingsProps",
+    "CfnDataProtectionSettings",
+    "CfnDataProtectionSettingsProps",
     "CfnIdentityProvider",
     "CfnIdentityProviderProps",
     "CfnIpAccessSettings",
@@ -3481,6 +4383,120 @@ def _typecheckingstub__f99c227d497f6d51d01cc19398b94784835fab55afca7c6488466bb1c
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__851565cba0af7c67b6951a864a7d6671af0039654a56671ed86d28919552d73e(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    additional_encryption_context: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    customer_managed_key: typing.Optional[builtins.str] = None,
+    description: typing.Optional[builtins.str] = None,
+    display_name: typing.Optional[builtins.str] = None,
+    inline_redaction_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.InlineRedactionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3afc83d9e43528cc13b5abd50d4826acf870643c24640ed022e2bd621b1dec5f(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__029b8eb91b5f7341d86b33581460523348eedfa665657364ac1293ba7954ad5e(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3fb99479367371b2a6c52e976d47a87740ba2c6f65f4fcf0c11ef7787923a279(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b8794b55f834ff23fceefb4949f1c9ca0f88d0253e16fe02de823fd78e704f6a(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__7e6f16d355910af3e0d25ae4869bb9019e44d7bb8454311659d9581fbff7ad5f(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4bbbc104f6c3d94f0c1f63bd93d3ec5849325aa58b7e06f06e3c37f6b101823f(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a80d3be6cd6ed07f4c7a5f51acbace505548a335789227fb3e70735f66c484f6(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataProtectionSettings.InlineRedactionConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d82a664a0d9b6e2a4f59784e5f13b3f39994ef205d8513718b40fba2b6daf513(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6114d751d2647346cb8b4fe7fc495c1b5e4ec1ffbe6904abf91d6b44adec7548(
+    *,
+    pattern_name: builtins.str,
+    pattern_regex: builtins.str,
+    keyword_regex: typing.Optional[builtins.str] = None,
+    pattern_description: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__552bfd927d431d6795b0b5add23e48f1a25b4db6addb149426e81afc6686dc63(
+    *,
+    inline_redaction_patterns: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.InlineRedactionPatternProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    global_confidence_level: typing.Optional[jsii.Number] = None,
+    global_enforced_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+    global_exempt_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f28e305e326d3f4c9ac306ecac6e0d132c560d8cb368e6c1d255bce2256c5953(
+    *,
+    redaction_place_holder: typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.RedactionPlaceHolderProperty, typing.Dict[builtins.str, typing.Any]]],
+    built_in_pattern_id: typing.Optional[builtins.str] = None,
+    confidence_level: typing.Optional[jsii.Number] = None,
+    custom_pattern: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.CustomPatternProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    enforced_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+    exempt_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__93e3fa90dfeb5ed27de42632610186e3eec8e8ee42bce56d7f8dcb07d9c19f53(
+    *,
+    redaction_place_holder_type: builtins.str,
+    redaction_place_holder_text: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9bd186c92264d6b6332cc9ff86b6f530f1f3d30da79101020cac77924b86ea5a(
+    *,
+    additional_encryption_context: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    customer_managed_key: typing.Optional[builtins.str] = None,
+    description: typing.Optional[builtins.str] = None,
+    display_name: typing.Optional[builtins.str] = None,
+    inline_redaction_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.InlineRedactionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__439cd32d129b1f0a69c13fb5a494170084be122497b619a7175debec51c3635e(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -3695,6 +4711,7 @@ def _typecheckingstub__239c61bc87a1a693f01a28198d2d3000f7ef790e9684279e807a890b0
     authentication_type: typing.Optional[builtins.str] = None,
     browser_settings_arn: typing.Optional[builtins.str] = None,
     customer_managed_key: typing.Optional[builtins.str] = None,
+    data_protection_settings_arn: typing.Optional[builtins.str] = None,
     display_name: typing.Optional[builtins.str] = None,
     instance_type: typing.Optional[builtins.str] = None,
     ip_access_settings_arn: typing.Optional[builtins.str] = None,
@@ -3744,6 +4761,12 @@ def _typecheckingstub__319e821fe7e2a17153f7832a389ae0c48e1f0517453d29fa3e26fa732
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__dfde357dad34994249d2ece8cb99322e6a84a2af5763685459271a2545a12e6f(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__cd1b9794e835c2ffeb3dc42a40224afa89d92cb7704c5a59dd75c1d3dd4ef495(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -3804,6 +4827,7 @@ def _typecheckingstub__aa147912cdfb0d9ea5356fccc59e7ae5b02c822d1e3f5ae2e4826ae39
     authentication_type: typing.Optional[builtins.str] = None,
     browser_settings_arn: typing.Optional[builtins.str] = None,
     customer_managed_key: typing.Optional[builtins.str] = None,
+    data_protection_settings_arn: typing.Optional[builtins.str] = None,
     display_name: typing.Optional[builtins.str] = None,
     instance_type: typing.Optional[builtins.str] = None,
     ip_access_settings_arn: typing.Optional[builtins.str] = None,