aws-cdk-lib 2.171.1__py3-none-any.whl → 2.173.0__py3-none-any.whl

aws_cdk/aws_lambda_event_sources/__init__.py

@@ -1326,7 +1326,8 @@ class ProvisionedPollerConfig:
         maximum_pollers: jsii.Number,
         minimum_pollers: jsii.Number,
     ) -> None:
-        '''
+        '''(Amazon MSK and self-managed Apache Kafka only) The provisioned mode configuration for the event source.
+
         :param maximum_pollers: The maximum number of pollers that can be provisioned. Default: 200
         :param minimum_pollers: The minimum number of pollers that should be provisioned. Default: 1
 

aws_cdk/aws_lambda_nodejs/__init__.py

@@ -109,7 +109,7 @@ With the `@aws-cdk/aws-lambda-nodejs:useLatestRuntimeVersion` disabled, the runt
 
 ## Lock file
 
-The `NodejsFunction` requires a dependencies lock file (`yarn.lock`, `pnpm-lock.yaml` or
+The `NodejsFunction` requires a dependencies lock file (`yarn.lock`, `pnpm-lock.yaml`, `bun.lockb` or
 `package-lock.json`). When bundling in a Docker container, the path containing this lock file is
 used as the source (`/asset-input`) for the volume mounted in the container.
 
@@ -200,8 +200,8 @@ nodejs.NodejsFunction(self, "my-handler",
 
 The modules listed in `nodeModules` must be present in the `package.json`'s dependencies or
 installed. The same version will be used for installation. The lock file (`yarn.lock`,
-`pnpm-lock.yaml` or `package-lock.json`) will be used along with the right installer (`yarn`,
-`pnpm` or `npm`).
+`pnpm-lock.yaml`, `bun.lockb` or `package-lock.json`) will be used along with the right installer (`yarn`,
+`pnpm`, `bun` or `npm`).
 
 When working with `nodeModules` using native dependencies, you might want to force bundling in a
 Docker container even if `esbuild` is available in your environment. This can be done by setting
@@ -338,7 +338,7 @@ nodejs.NodejsFunction(self, "my-handler",
 ```
 
 This image should have `esbuild` installed **globally**. If you plan to use `nodeModules` it
-should also have `npm`, `yarn` or `pnpm` depending on the lock file you're using.
+should also have `npm`, `yarn`, `bun` or `pnpm` depending on the lock file you're using.
 
 Use the [default image provided by `aws-cdk-lib/aws-lambda-nodejs`](https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-lambda-nodejs/lib/Dockerfile)
 as a source of inspiration.
@@ -640,7 +640,7 @@ class BundlingOptions(_DockerRunOptions_81583d32):
         :param charset: The charset to use for esbuild's output. By default esbuild's output is ASCII-only. Any non-ASCII characters are escaped using backslash escape sequences. Using escape sequences makes the generated output slightly bigger, and also makes it harder to read. If you would like for esbuild to print the original characters without using escape sequences, use ``Charset.UTF8``. Default: Charset.ASCII
         :param command_hooks: Command hooks. Default: - do not run additional commands
         :param define: Replace global identifiers with constant expressions. For example, ``{ 'process.env.DEBUG': 'true' }``. Another example, ``{ 'process.env.API_KEY': JSON.stringify('xxx-xxxx-xxx') }``. Default: - no replacements are made
-        :param docker_image: A custom bundling Docker image. This image should have esbuild installed globally. If you plan to use ``nodeModules`` it should also have ``npm``, ``yarn`` or ``pnpm`` depending on the lock file you're using. See https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-lambda-nodejs/lib/Dockerfile for the default image provided by aws-cdk-lib/aws-lambda-nodejs. Default: - use the Docker image provided by aws-cdk-lib/aws-lambda-nodejs
+        :param docker_image: A custom bundling Docker image. This image should have esbuild installed globally. If you plan to use ``nodeModules`` it should also have ``npm``, ``yarn``, ``bun`` or ``pnpm`` depending on the lock file you're using. See https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-lambda-nodejs/lib/Dockerfile for the default image provided by aws-cdk-lib/aws-lambda-nodejs. Default: - use the Docker image provided by aws-cdk-lib/aws-lambda-nodejs
         :param esbuild_args: Build arguments to pass into esbuild. For example, to add the `--log-limit <https://esbuild.github.io/api/#log-limit>`_ flag:: new NodejsFunction(scope, id, { ... bundling: { esbuildArgs: { "--log-limit": "0", } } }); Default: - no additional esbuild arguments are passed
         :param esbuild_version: The version of esbuild to use when running in a Docker container. Default: - latest v0
         :param external_modules: A list of modules that should be considered as externals (already available in the runtime). Default: - no replacements are made
@@ -995,7 +995,7 @@ class BundlingOptions(_DockerRunOptions_81583d32):
         '''A custom bundling Docker image.
 
         This image should have esbuild installed globally. If you plan to use ``nodeModules``
-        it should also have ``npm``, ``yarn`` or ``pnpm`` depending on the lock file you're using.
+        it should also have ``npm``, ``yarn``, ``bun`` or ``pnpm`` depending on the lock file you're using.
 
         See https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-lambda-nodejs/lib/Dockerfile
         for the default image provided by aws-cdk-lib/aws-lambda-nodejs.
@@ -1625,7 +1625,7 @@ class NodejsFunction(
         :param aws_sdk_connection_reuse: The ``AWS_NODEJS_CONNECTION_REUSE_ENABLED`` environment variable does not exist in the AWS SDK for JavaScript v3. This prop will be deprecated when the Lambda Node16 runtime is deprecated on June 12, 2024. See https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-support-policy Info for Node 16 runtimes / SDK v2 users: Whether to automatically reuse TCP connections when working with the AWS SDK for JavaScript v2. This sets the ``AWS_NODEJS_CONNECTION_REUSE_ENABLED`` environment variable to ``1``. Default: - false (obsolete) for runtimes >= Node 18, true for runtimes <= Node 16.
         :param bundling: Bundling options. Default: - use default bundling options: no minify, no sourcemap, all modules are bundled.
         :param code: The code that will be deployed to the Lambda Handler. If included, then properties related to bundling of the code are ignored. - If the ``code`` field is specified, then you must include the ``handler`` property. Default: - the code is bundled by esbuild
-        :param deps_lock_file_path: The path to the dependencies lock file (``yarn.lock``, ``pnpm-lock.yaml`` or ``package-lock.json``). This will be used as the source for the volume mounted in the Docker container. Modules specified in ``nodeModules`` will be installed using the right installer (``yarn``, ``pnpm`` or ``npm``) along with this lock file. Default: - the path is found by walking up parent directories searching for a ``yarn.lock``, ``pnpm-lock.yaml`` or ``package-lock.json`` file
+        :param deps_lock_file_path: The path to the dependencies lock file (``yarn.lock``, ``pnpm-lock.yaml``, ``bun.lockb`` or ``package-lock.json``). This will be used as the source for the volume mounted in the Docker container. Modules specified in ``nodeModules`` will be installed using the right installer (``yarn``, ``pnpm``, ``bun`` or ``npm``) along with this lock file. Default: - the path is found by walking up parent directories searching for a ``yarn.lock``, ``pnpm-lock.yaml``, ``bun.lockb`` or ``package-lock.json`` file
         :param entry: Path to the entry file (JavaScript or TypeScript). Default: - Derived from the name of the defining file and the construct's id. If the ``NodejsFunction`` is defined in ``stack.ts`` with ``my-handler`` as id (``new NodejsFunction(this, 'my-handler')``), the construct will look at ``stack.my-handler.ts`` and ``stack.my-handler.js``.
         :param handler: The name of the exported handler in the entry file. - If the ``code`` property is supplied, then you must include the ``handler`` property. The handler should be the name of the file that contains the exported handler and the function that should be called when the AWS Lambda is invoked. For example, if you had a file called ``myLambda.js`` and the function to be invoked was ``myHandler``, then you should input ``handler`` property as ``myLambda.myHandler``. - If the ``code`` property is not supplied and the handler input does not contain a ``.``, then the handler is prefixed with ``index.`` (index period). Otherwise, the handler property is not modified. Default: handler
         :param project_root: The path to the directory containing project config files (``package.json`` or ``tsconfig.json``). Default: - the directory containing the ``depsLockFilePath``
@@ -1926,7 +1926,7 @@ class NodejsFunctionProps(_FunctionOptions_328f4d39):
         :param aws_sdk_connection_reuse: The ``AWS_NODEJS_CONNECTION_REUSE_ENABLED`` environment variable does not exist in the AWS SDK for JavaScript v3. This prop will be deprecated when the Lambda Node16 runtime is deprecated on June 12, 2024. See https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-support-policy Info for Node 16 runtimes / SDK v2 users: Whether to automatically reuse TCP connections when working with the AWS SDK for JavaScript v2. This sets the ``AWS_NODEJS_CONNECTION_REUSE_ENABLED`` environment variable to ``1``. Default: - false (obsolete) for runtimes >= Node 18, true for runtimes <= Node 16.
         :param bundling: Bundling options. Default: - use default bundling options: no minify, no sourcemap, all modules are bundled.
         :param code: The code that will be deployed to the Lambda Handler. If included, then properties related to bundling of the code are ignored. - If the ``code`` field is specified, then you must include the ``handler`` property. Default: - the code is bundled by esbuild
-        :param deps_lock_file_path: The path to the dependencies lock file (``yarn.lock``, ``pnpm-lock.yaml`` or ``package-lock.json``). This will be used as the source for the volume mounted in the Docker container. Modules specified in ``nodeModules`` will be installed using the right installer (``yarn``, ``pnpm`` or ``npm``) along with this lock file. Default: - the path is found by walking up parent directories searching for a ``yarn.lock``, ``pnpm-lock.yaml`` or ``package-lock.json`` file
+        :param deps_lock_file_path: The path to the dependencies lock file (``yarn.lock``, ``pnpm-lock.yaml``, ``bun.lockb`` or ``package-lock.json``). This will be used as the source for the volume mounted in the Docker container. Modules specified in ``nodeModules`` will be installed using the right installer (``yarn``, ``pnpm``, ``bun`` or ``npm``) along with this lock file. Default: - the path is found by walking up parent directories searching for a ``yarn.lock``, ``pnpm-lock.yaml``, ``bun.lockb`` or ``package-lock.json`` file
         :param entry: Path to the entry file (JavaScript or TypeScript). Default: - Derived from the name of the defining file and the construct's id. If the ``NodejsFunction`` is defined in ``stack.ts`` with ``my-handler`` as id (``new NodejsFunction(this, 'my-handler')``), the construct will look at ``stack.my-handler.ts`` and ``stack.my-handler.js``.
         :param handler: The name of the exported handler in the entry file. - If the ``code`` property is supplied, then you must include the ``handler`` property. The handler should be the name of the file that contains the exported handler and the function that should be called when the AWS Lambda is invoked. For example, if you had a file called ``myLambda.js`` and the function to be invoked was ``myHandler``, then you should input ``handler`` property as ``myLambda.myHandler``. - If the ``code`` property is not supplied and the handler input does not contain a ``.``, then the handler is prefixed with ``index.`` (index period). Otherwise, the handler property is not modified. Default: handler
         :param project_root: The path to the directory containing project config files (``package.json`` or ``tsconfig.json``). Default: - the directory containing the ``depsLockFilePath``
@@ -2779,18 +2779,18 @@ class NodejsFunctionProps(_FunctionOptions_328f4d39):
 
     @builtins.property
     def deps_lock_file_path(self) -> typing.Optional[builtins.str]:
-        '''The path to the dependencies lock file (``yarn.lock``, ``pnpm-lock.yaml`` or ``package-lock.json``).
+        '''The path to the dependencies lock file (``yarn.lock``, ``pnpm-lock.yaml``, ``bun.lockb`` or ``package-lock.json``).
 
         This will be used as the source for the volume mounted in the Docker
         container.
 
         Modules specified in ``nodeModules`` will be installed using the right
-        installer (``yarn``, ``pnpm`` or ``npm``) along with this lock file.
+        installer (``yarn``, ``pnpm``, ``bun`` or ``npm``) along with this lock file.
 
         :default:
 
         - the path is found by walking up parent directories searching for
-        a ``yarn.lock``, ``pnpm-lock.yaml`` or ``package-lock.json`` file
+        a ``yarn.lock``, ``pnpm-lock.yaml``, ``bun.lockb`` or ``package-lock.json`` file
         '''
         result = self._values.get("deps_lock_file_path")
         return typing.cast(typing.Optional[builtins.str], result)

aws_cdk/aws_logs/__init__.py

@@ -2215,6 +2215,468 @@ class CfnDestinationProps:
         )
 
 
+@jsii.implements(_IInspectable_c2943556)
+class CfnIntegration(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_logs.CfnIntegration",
+):
+    '''Creates an integration between CloudWatch Logs and another service in this account.
+
+    Currently, only integrations with OpenSearch Service are supported, and currently you can have only one integration in your account.
+
+    Integrating with OpenSearch Service makes it possible for you to create curated vended logs dashboards, powered by OpenSearch Service analytics. For more information, see `Vended log dashboards powered by Amazon OpenSearch Service <https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-OpenSearch-Dashboards.html>`_ .
+
+    You can use this operation only to create a new integration. You can't modify an existing integration.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-integration.html
+    :cloudformationResource: AWS::Logs::Integration
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_logs as logs
+        
+        cfn_integration = logs.CfnIntegration(self, "MyCfnIntegration",
+            integration_name="integrationName",
+            integration_type="integrationType",
+            resource_config=logs.CfnIntegration.ResourceConfigProperty(
+                open_search_resource_config=logs.CfnIntegration.OpenSearchResourceConfigProperty(
+                    dashboard_viewer_principals=["dashboardViewerPrincipals"],
+                    data_source_role_arn="dataSourceRoleArn",
+        
+                    # the properties below are optional
+                    application_arn="applicationArn",
+                    kms_key_arn="kmsKeyArn",
+                    retention_days=123
+                )
+            )
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        integration_name: builtins.str,
+        integration_type: builtins.str,
+        resource_config: typing.Union[_IResolvable_da3f097b, typing.Union["CfnIntegration.ResourceConfigProperty", typing.Dict[builtins.str, typing.Any]]],
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param integration_name: The name of this integration.
+        :param integration_type: The type of integration. Integrations with OpenSearch Service have the type ``OPENSEARCH`` .
+        :param resource_config: This structure contains configuration details about an integration between CloudWatch Logs and another entity.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7d25ae5aedb6cfa0b6f3765f329d81581fbcd3ff378cc552133e5d0fdd6d99ff)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnIntegrationProps(
+            integration_name=integration_name,
+            integration_type=integration_type,
+            resource_config=resource_config,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4444f0ef7fd9d069bfce488a66baa068bb1b87a18239a8510d4cfa183a652a0b)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ed5813f598ecc3cd5a557ae647d3d2e9b8b9b4d638ea5a9a5ac68d4ef1281007)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrIntegrationStatus")
+    def attr_integration_status(self) -> builtins.str:
+        '''The current status of this integration.
+
+        :cloudformationAttribute: IntegrationStatus
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrIntegrationStatus"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="integrationName")
+    def integration_name(self) -> builtins.str:
+        '''The name of this integration.'''
+        return typing.cast(builtins.str, jsii.get(self, "integrationName"))
+
+    @integration_name.setter
+    def integration_name(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c789029fae3c40d804160d555fcd880577fad4f74f1191f7b52562964594751e)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "integrationName", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="integrationType")
+    def integration_type(self) -> builtins.str:
+        '''The type of integration.'''
+        return typing.cast(builtins.str, jsii.get(self, "integrationType"))
+
+    @integration_type.setter
+    def integration_type(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4e7ea06be2423b6609ab61f003f306246fb58e590842d8ee6d0b889e4e4d1bce)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "integrationType", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="resourceConfig")
+    def resource_config(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnIntegration.ResourceConfigProperty"]:
+        '''This structure contains configuration details about an integration between CloudWatch Logs and another entity.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnIntegration.ResourceConfigProperty"], jsii.get(self, "resourceConfig"))
+
+    @resource_config.setter
+    def resource_config(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnIntegration.ResourceConfigProperty"],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e70a870af94762893ff1564b472074d1ad1ea7d25c502af37606c4cce91a529a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "resourceConfig", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_logs.CfnIntegration.OpenSearchResourceConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "dashboard_viewer_principals": "dashboardViewerPrincipals",
+            "data_source_role_arn": "dataSourceRoleArn",
+            "application_arn": "applicationArn",
+            "kms_key_arn": "kmsKeyArn",
+            "retention_days": "retentionDays",
+        },
+    )
+    class OpenSearchResourceConfigProperty:
+        def __init__(
+            self,
+            *,
+            dashboard_viewer_principals: typing.Sequence[builtins.str],
+            data_source_role_arn: builtins.str,
+            application_arn: typing.Optional[builtins.str] = None,
+            kms_key_arn: typing.Optional[builtins.str] = None,
+            retention_days: typing.Optional[jsii.Number] = None,
+        ) -> None:
+            '''This structure contains configuration details about an integration between CloudWatch Logs and OpenSearch Service.
+
+            :param dashboard_viewer_principals: Specify the ARNs of IAM roles and IAM users who you want to grant permission to for viewing the dashboards. .. epigraph:: In addition to specifying these users here, you must also grant them the *CloudWatchOpenSearchDashboardsAccess* IAM policy. For more information, see
+            :param data_source_role_arn: Specify the ARN of an IAM role that CloudWatch Logs will use to create the integration. This role must have the permissions necessary to access the OpenSearch Service collection to be able to create the dashboards. For more information about the permissions needed, see `Create an IAM role to access the OpenSearch Service collection <https://docs.aws.amazon.com/OpenSearch-Dashboards-CreateRole>`_ in the CloudWatch Logs User Guide.
+            :param application_arn: If you want to use an existing OpenSearch Service application for your integration with OpenSearch Service, specify it here. If you omit this, a new application will be created.
+            :param kms_key_arn: To have the vended dashboard data encrypted with AWS KMS instead of the CloudWatch Logs default encryption method, specify the ARN of the AWS KMS key that you want to use.
+            :param retention_days: Specify how many days that you want the data derived by OpenSearch Service to be retained in the index that the dashboard refers to. This also sets the maximum time period that you can choose when viewing data in the dashboard. Choosing a longer time frame will incur additional costs.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-logs-integration-opensearchresourceconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_logs as logs
+                
+                open_search_resource_config_property = logs.CfnIntegration.OpenSearchResourceConfigProperty(
+                    dashboard_viewer_principals=["dashboardViewerPrincipals"],
+                    data_source_role_arn="dataSourceRoleArn",
+                
+                    # the properties below are optional
+                    application_arn="applicationArn",
+                    kms_key_arn="kmsKeyArn",
+                    retention_days=123
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__0c674a258b3e224416fabb1fbddb9ff6620ca73f500c2c766f439b1ff2d42221)
+                check_type(argname="argument dashboard_viewer_principals", value=dashboard_viewer_principals, expected_type=type_hints["dashboard_viewer_principals"])
+                check_type(argname="argument data_source_role_arn", value=data_source_role_arn, expected_type=type_hints["data_source_role_arn"])
+                check_type(argname="argument application_arn", value=application_arn, expected_type=type_hints["application_arn"])
+                check_type(argname="argument kms_key_arn", value=kms_key_arn, expected_type=type_hints["kms_key_arn"])
+                check_type(argname="argument retention_days", value=retention_days, expected_type=type_hints["retention_days"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "dashboard_viewer_principals": dashboard_viewer_principals,
+                "data_source_role_arn": data_source_role_arn,
+            }
+            if application_arn is not None:
+                self._values["application_arn"] = application_arn
+            if kms_key_arn is not None:
+                self._values["kms_key_arn"] = kms_key_arn
+            if retention_days is not None:
+                self._values["retention_days"] = retention_days
+
+        @builtins.property
+        def dashboard_viewer_principals(self) -> typing.List[builtins.str]:
+            '''Specify the ARNs of IAM roles and IAM users who you want to grant permission to for viewing the dashboards.
+
+            .. epigraph::
+
+               In addition to specifying these users here, you must also grant them the *CloudWatchOpenSearchDashboardsAccess* IAM policy. For more information, see
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-logs-integration-opensearchresourceconfig.html#cfn-logs-integration-opensearchresourceconfig-dashboardviewerprincipals
+            '''
+            result = self._values.get("dashboard_viewer_principals")
+            assert result is not None, "Required property 'dashboard_viewer_principals' is missing"
+            return typing.cast(typing.List[builtins.str], result)
+
+        @builtins.property
+        def data_source_role_arn(self) -> builtins.str:
+            '''Specify the ARN of an IAM role that CloudWatch Logs will use to create the integration.
+
+            This role must have the permissions necessary to access the OpenSearch Service collection to be able to create the dashboards. For more information about the permissions needed, see `Create an IAM role to access the OpenSearch Service collection <https://docs.aws.amazon.com/OpenSearch-Dashboards-CreateRole>`_ in the CloudWatch Logs User Guide.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-logs-integration-opensearchresourceconfig.html#cfn-logs-integration-opensearchresourceconfig-datasourcerolearn
+            '''
+            result = self._values.get("data_source_role_arn")
+            assert result is not None, "Required property 'data_source_role_arn' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def application_arn(self) -> typing.Optional[builtins.str]:
+            '''If you want to use an existing OpenSearch Service application for your integration with OpenSearch Service, specify it here.
+
+            If you omit this, a new application will be created.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-logs-integration-opensearchresourceconfig.html#cfn-logs-integration-opensearchresourceconfig-applicationarn
+            '''
+            result = self._values.get("application_arn")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def kms_key_arn(self) -> typing.Optional[builtins.str]:
+            '''To have the vended dashboard data encrypted with AWS KMS instead of the CloudWatch Logs default encryption method, specify the ARN of the AWS KMS key that you want to use.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-logs-integration-opensearchresourceconfig.html#cfn-logs-integration-opensearchresourceconfig-kmskeyarn
+            '''
+            result = self._values.get("kms_key_arn")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def retention_days(self) -> typing.Optional[jsii.Number]:
+            '''Specify how many days that you want the data derived by OpenSearch Service to be retained in the index that the dashboard refers to.
+
+            This also sets the maximum time period that you can choose when viewing data in the dashboard. Choosing a longer time frame will incur additional costs.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-logs-integration-opensearchresourceconfig.html#cfn-logs-integration-opensearchresourceconfig-retentiondays
+            '''
+            result = self._values.get("retention_days")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "OpenSearchResourceConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_logs.CfnIntegration.ResourceConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={"open_search_resource_config": "openSearchResourceConfig"},
+    )
+    class ResourceConfigProperty:
+        def __init__(
+            self,
+            *,
+            open_search_resource_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnIntegration.OpenSearchResourceConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''This structure contains configuration details about an integration between CloudWatch Logs and another entity.
+
+            :param open_search_resource_config: This structure contains configuration details about an integration between CloudWatch Logs and OpenSearch Service.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-logs-integration-resourceconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_logs as logs
+                
+                resource_config_property = logs.CfnIntegration.ResourceConfigProperty(
+                    open_search_resource_config=logs.CfnIntegration.OpenSearchResourceConfigProperty(
+                        dashboard_viewer_principals=["dashboardViewerPrincipals"],
+                        data_source_role_arn="dataSourceRoleArn",
+                
+                        # the properties below are optional
+                        application_arn="applicationArn",
+                        kms_key_arn="kmsKeyArn",
+                        retention_days=123
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__d0dad8c7beab9d66f0a9d16731a931e58e75731a8cb6142e5ecd221eea5f4bab)
+                check_type(argname="argument open_search_resource_config", value=open_search_resource_config, expected_type=type_hints["open_search_resource_config"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if open_search_resource_config is not None:
+                self._values["open_search_resource_config"] = open_search_resource_config
+
+        @builtins.property
+        def open_search_resource_config(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnIntegration.OpenSearchResourceConfigProperty"]]:
+            '''This structure contains configuration details about an integration between CloudWatch Logs and OpenSearch Service.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-logs-integration-resourceconfig.html#cfn-logs-integration-resourceconfig-opensearchresourceconfig
+            '''
+            result = self._values.get("open_search_resource_config")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnIntegration.OpenSearchResourceConfigProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "ResourceConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_logs.CfnIntegrationProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "integration_name": "integrationName",
+        "integration_type": "integrationType",
+        "resource_config": "resourceConfig",
+    },
+)
+class CfnIntegrationProps:
+    def __init__(
+        self,
+        *,
+        integration_name: builtins.str,
+        integration_type: builtins.str,
+        resource_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnIntegration.ResourceConfigProperty, typing.Dict[builtins.str, typing.Any]]],
+    ) -> None:
+        '''Properties for defining a ``CfnIntegration``.
+
+        :param integration_name: The name of this integration.
+        :param integration_type: The type of integration. Integrations with OpenSearch Service have the type ``OPENSEARCH`` .
+        :param resource_config: This structure contains configuration details about an integration between CloudWatch Logs and another entity.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-integration.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_logs as logs
+            
+            cfn_integration_props = logs.CfnIntegrationProps(
+                integration_name="integrationName",
+                integration_type="integrationType",
+                resource_config=logs.CfnIntegration.ResourceConfigProperty(
+                    open_search_resource_config=logs.CfnIntegration.OpenSearchResourceConfigProperty(
+                        dashboard_viewer_principals=["dashboardViewerPrincipals"],
+                        data_source_role_arn="dataSourceRoleArn",
+            
+                        # the properties below are optional
+                        application_arn="applicationArn",
+                        kms_key_arn="kmsKeyArn",
+                        retention_days=123
+                    )
+                )
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e3fde65aad1184bb5a5e5498b7fec6844a978b48eb0a9d57607f44ec0c65fc3a)
+            check_type(argname="argument integration_name", value=integration_name, expected_type=type_hints["integration_name"])
+            check_type(argname="argument integration_type", value=integration_type, expected_type=type_hints["integration_type"])
+            check_type(argname="argument resource_config", value=resource_config, expected_type=type_hints["resource_config"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "integration_name": integration_name,
+            "integration_type": integration_type,
+            "resource_config": resource_config,
+        }
+
+    @builtins.property
+    def integration_name(self) -> builtins.str:
+        '''The name of this integration.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-integration.html#cfn-logs-integration-integrationname
+        '''
+        result = self._values.get("integration_name")
+        assert result is not None, "Required property 'integration_name' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def integration_type(self) -> builtins.str:
+        '''The type of integration.
+
+        Integrations with OpenSearch Service have the type ``OPENSEARCH`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-integration.html#cfn-logs-integration-integrationtype
+        '''
+        result = self._values.get("integration_type")
+        assert result is not None, "Required property 'integration_type' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def resource_config(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnIntegration.ResourceConfigProperty]:
+        '''This structure contains configuration details about an integration between CloudWatch Logs and another entity.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-integration.html#cfn-logs-integration-resourceconfig
+        '''
+        result = self._values.get("resource_config")
+        assert result is not None, "Required property 'resource_config' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnIntegration.ResourceConfigProperty], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnIntegrationProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556)
 class CfnLogAnomalyDetector(
     _CfnResource_9df397a6,
@@ -9443,6 +9905,8 @@ __all__ = [
     "CfnDeliverySourceProps",
     "CfnDestination",
     "CfnDestinationProps",
+    "CfnIntegration",
+    "CfnIntegrationProps",
     "CfnLogAnomalyDetector",
     "CfnLogAnomalyDetectorProps",
     "CfnLogGroup",
@@ -9829,6 +10293,74 @@ def _typecheckingstub__faf2f9f88fd096e79a2445aab3efdc3a85509df7ba06ffc305c9faf39
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__7d25ae5aedb6cfa0b6f3765f329d81581fbcd3ff378cc552133e5d0fdd6d99ff(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    integration_name: builtins.str,
+    integration_type: builtins.str,
+    resource_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnIntegration.ResourceConfigProperty, typing.Dict[builtins.str, typing.Any]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4444f0ef7fd9d069bfce488a66baa068bb1b87a18239a8510d4cfa183a652a0b(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ed5813f598ecc3cd5a557ae647d3d2e9b8b9b4d638ea5a9a5ac68d4ef1281007(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c789029fae3c40d804160d555fcd880577fad4f74f1191f7b52562964594751e(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4e7ea06be2423b6609ab61f003f306246fb58e590842d8ee6d0b889e4e4d1bce(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__e70a870af94762893ff1564b472074d1ad1ea7d25c502af37606c4cce91a529a(
+    value: typing.Union[_IResolvable_da3f097b, CfnIntegration.ResourceConfigProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0c674a258b3e224416fabb1fbddb9ff6620ca73f500c2c766f439b1ff2d42221(
+    *,
+    dashboard_viewer_principals: typing.Sequence[builtins.str],
+    data_source_role_arn: builtins.str,
+    application_arn: typing.Optional[builtins.str] = None,
+    kms_key_arn: typing.Optional[builtins.str] = None,
+    retention_days: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d0dad8c7beab9d66f0a9d16731a931e58e75731a8cb6142e5ecd221eea5f4bab(
+    *,
+    open_search_resource_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnIntegration.OpenSearchResourceConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__e3fde65aad1184bb5a5e5498b7fec6844a978b48eb0a9d57607f44ec0c65fc3a(
+    *,
+    integration_name: builtins.str,
+    integration_type: builtins.str,
+    resource_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnIntegration.ResourceConfigProperty, typing.Dict[builtins.str, typing.Any]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7d152ea0809d051d39430771f957ddf1edb48a2711f5f1dac144632c4025106f(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,