aws-cdk-lib 2.171.1__py3-none-any.whl → 2.173.0__py3-none-any.whl

aws_cdk/aws_workspacesweb/__init__.py

@@ -377,6 +377,927 @@ class CfnBrowserSettingsProps:
         )
 
 
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnDataProtectionSettings(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettings",
+):
+    '''The data protection settings resource that can be associated with a web portal.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html
+    :cloudformationResource: AWS::WorkSpacesWeb::DataProtectionSettings
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_workspacesweb as workspacesweb
+        
+        cfn_data_protection_settings = workspacesweb.CfnDataProtectionSettings(self, "MyCfnDataProtectionSettings",
+            additional_encryption_context={
+                "additional_encryption_context_key": "additionalEncryptionContext"
+            },
+            customer_managed_key="customerManagedKey",
+            description="description",
+            display_name="displayName",
+            inline_redaction_configuration=workspacesweb.CfnDataProtectionSettings.InlineRedactionConfigurationProperty(
+                inline_redaction_patterns=[workspacesweb.CfnDataProtectionSettings.InlineRedactionPatternProperty(
+                    redaction_place_holder=workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty(
+                        redaction_place_holder_type="redactionPlaceHolderType",
+        
+                        # the properties below are optional
+                        redaction_place_holder_text="redactionPlaceHolderText"
+                    ),
+        
+                    # the properties below are optional
+                    built_in_pattern_id="builtInPatternId",
+                    confidence_level=123,
+                    custom_pattern=workspacesweb.CfnDataProtectionSettings.CustomPatternProperty(
+                        pattern_name="patternName",
+                        pattern_regex="patternRegex",
+        
+                        # the properties below are optional
+                        keyword_regex="keywordRegex",
+                        pattern_description="patternDescription"
+                    ),
+                    enforced_urls=["enforcedUrls"],
+                    exempt_urls=["exemptUrls"]
+                )],
+        
+                # the properties below are optional
+                global_confidence_level=123,
+                global_enforced_urls=["globalEnforcedUrls"],
+                global_exempt_urls=["globalExemptUrls"]
+            ),
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        additional_encryption_context: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+        customer_managed_key: typing.Optional[builtins.str] = None,
+        description: typing.Optional[builtins.str] = None,
+        display_name: typing.Optional[builtins.str] = None,
+        inline_redaction_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDataProtectionSettings.InlineRedactionConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param additional_encryption_context: The additional encryption context of the data protection settings.
+        :param customer_managed_key: The customer managed key used to encrypt sensitive information in the data protection settings.
+        :param description: The description of the data protection settings.
+        :param display_name: The display name of the data protection settings.
+        :param inline_redaction_configuration: The inline redaction configuration for the data protection settings.
+        :param tags: The tags of the data protection settings.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__851565cba0af7c67b6951a864a7d6671af0039654a56671ed86d28919552d73e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnDataProtectionSettingsProps(
+            additional_encryption_context=additional_encryption_context,
+            customer_managed_key=customer_managed_key,
+            description=description,
+            display_name=display_name,
+            inline_redaction_configuration=inline_redaction_configuration,
+            tags=tags,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3afc83d9e43528cc13b5abd50d4826acf870643c24640ed022e2bd621b1dec5f)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__029b8eb91b5f7341d86b33581460523348eedfa665657364ac1293ba7954ad5e)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrAssociatedPortalArns")
+    def attr_associated_portal_arns(self) -> typing.List[builtins.str]:
+        '''A list of web portal ARNs that this data protection settings resource is associated with.
+
+        :cloudformationAttribute: AssociatedPortalArns
+        '''
+        return typing.cast(typing.List[builtins.str], jsii.get(self, "attrAssociatedPortalArns"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrCreationDate")
+    def attr_creation_date(self) -> builtins.str:
+        '''The creation date timestamp of the data protection settings.
+
+        :cloudformationAttribute: CreationDate
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrCreationDate"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrDataProtectionSettingsArn")
+    def attr_data_protection_settings_arn(self) -> builtins.str:
+        '''The ARN of the data protection settings resource.
+
+        :cloudformationAttribute: DataProtectionSettingsArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrDataProtectionSettingsArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="additionalEncryptionContext")
+    def additional_encryption_context(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
+        '''The additional encryption context of the data protection settings.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], jsii.get(self, "additionalEncryptionContext"))
+
+    @additional_encryption_context.setter
+    def additional_encryption_context(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3fb99479367371b2a6c52e976d47a87740ba2c6f65f4fcf0c11ef7787923a279)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "additionalEncryptionContext", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="customerManagedKey")
+    def customer_managed_key(self) -> typing.Optional[builtins.str]:
+        '''The customer managed key used to encrypt sensitive information in the data protection settings.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "customerManagedKey"))
+
+    @customer_managed_key.setter
+    def customer_managed_key(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b8794b55f834ff23fceefb4949f1c9ca0f88d0253e16fe02de823fd78e704f6a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "customerManagedKey", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="description")
+    def description(self) -> typing.Optional[builtins.str]:
+        '''The description of the data protection settings.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "description"))
+
+    @description.setter
+    def description(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7e6f16d355910af3e0d25ae4869bb9019e44d7bb8454311659d9581fbff7ad5f)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="displayName")
+    def display_name(self) -> typing.Optional[builtins.str]:
+        '''The display name of the data protection settings.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "displayName"))
+
+    @display_name.setter
+    def display_name(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4bbbc104f6c3d94f0c1f63bd93d3ec5849325aa58b7e06f06e3c37f6b101823f)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "displayName", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="inlineRedactionConfiguration")
+    def inline_redaction_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.InlineRedactionConfigurationProperty"]]:
+        '''The inline redaction configuration for the data protection settings.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.InlineRedactionConfigurationProperty"]], jsii.get(self, "inlineRedactionConfiguration"))
+
+    @inline_redaction_configuration.setter
+    def inline_redaction_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.InlineRedactionConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a80d3be6cd6ed07f4c7a5f51acbace505548a335789227fb3e70735f66c484f6)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "inlineRedactionConfiguration", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags of the data protection settings.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d82a664a0d9b6e2a4f59784e5f13b3f39994ef205d8513718b40fba2b6daf513)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettings.CustomPatternProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "pattern_name": "patternName",
+            "pattern_regex": "patternRegex",
+            "keyword_regex": "keywordRegex",
+            "pattern_description": "patternDescription",
+        },
+    )
+    class CustomPatternProperty:
+        def __init__(
+            self,
+            *,
+            pattern_name: builtins.str,
+            pattern_regex: builtins.str,
+            keyword_regex: typing.Optional[builtins.str] = None,
+            pattern_description: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''The pattern configuration for redacting custom data types in session.
+
+            :param pattern_name: The pattern name for the custom pattern.
+            :param pattern_regex: The pattern regex for the customer pattern. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example: “/ab+c/gi”.
+            :param keyword_regex: The keyword regex for the customer pattern. After there is a match to the pattern regex, the keyword regex is used to search within the proximity of the match. If there is a keyword match, then the match is confirmed. If no keyword regex is provided, the pattern regex match will automatically be confirmed. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example, “/ab+c/gi”
+            :param pattern_description: The pattern description for the customer pattern.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-custompattern.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_workspacesweb as workspacesweb
+                
+                custom_pattern_property = workspacesweb.CfnDataProtectionSettings.CustomPatternProperty(
+                    pattern_name="patternName",
+                    pattern_regex="patternRegex",
+                
+                    # the properties below are optional
+                    keyword_regex="keywordRegex",
+                    pattern_description="patternDescription"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__6114d751d2647346cb8b4fe7fc495c1b5e4ec1ffbe6904abf91d6b44adec7548)
+                check_type(argname="argument pattern_name", value=pattern_name, expected_type=type_hints["pattern_name"])
+                check_type(argname="argument pattern_regex", value=pattern_regex, expected_type=type_hints["pattern_regex"])
+                check_type(argname="argument keyword_regex", value=keyword_regex, expected_type=type_hints["keyword_regex"])
+                check_type(argname="argument pattern_description", value=pattern_description, expected_type=type_hints["pattern_description"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "pattern_name": pattern_name,
+                "pattern_regex": pattern_regex,
+            }
+            if keyword_regex is not None:
+                self._values["keyword_regex"] = keyword_regex
+            if pattern_description is not None:
+                self._values["pattern_description"] = pattern_description
+
+        @builtins.property
+        def pattern_name(self) -> builtins.str:
+            '''The pattern name for the custom pattern.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-custompattern.html#cfn-workspacesweb-dataprotectionsettings-custompattern-patternname
+            '''
+            result = self._values.get("pattern_name")
+            assert result is not None, "Required property 'pattern_name' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def pattern_regex(self) -> builtins.str:
+            '''The pattern regex for the customer pattern.
+
+            The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example: “/ab+c/gi”.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-custompattern.html#cfn-workspacesweb-dataprotectionsettings-custompattern-patternregex
+            '''
+            result = self._values.get("pattern_regex")
+            assert result is not None, "Required property 'pattern_regex' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def keyword_regex(self) -> typing.Optional[builtins.str]:
+            '''The keyword regex for the customer pattern.
+
+            After there is a match to the pattern regex, the keyword regex is used to search within the proximity of the match. If there is a keyword match, then the match is confirmed. If no keyword regex is provided, the pattern regex match will automatically be confirmed. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example, “/ab+c/gi”
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-custompattern.html#cfn-workspacesweb-dataprotectionsettings-custompattern-keywordregex
+            '''
+            result = self._values.get("keyword_regex")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def pattern_description(self) -> typing.Optional[builtins.str]:
+            '''The pattern description for the customer pattern.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-custompattern.html#cfn-workspacesweb-dataprotectionsettings-custompattern-patterndescription
+            '''
+            result = self._values.get("pattern_description")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CustomPatternProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettings.InlineRedactionConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "inline_redaction_patterns": "inlineRedactionPatterns",
+            "global_confidence_level": "globalConfidenceLevel",
+            "global_enforced_urls": "globalEnforcedUrls",
+            "global_exempt_urls": "globalExemptUrls",
+        },
+    )
+    class InlineRedactionConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            inline_redaction_patterns: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDataProtectionSettings.InlineRedactionPatternProperty", typing.Dict[builtins.str, typing.Any]]]]],
+            global_confidence_level: typing.Optional[jsii.Number] = None,
+            global_enforced_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+            global_exempt_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''The configuration for in-session inline redaction.
+
+            :param inline_redaction_patterns: The inline redaction patterns to be enabled for the inline redaction configuration.
+            :param global_confidence_level: The global confidence level for the inline redaction configuration. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This is applied to patterns that do not have a pattern-level confidence level. Defaults to confidence level 2.
+            :param global_enforced_urls: The global enforced URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level enforced URL list.
+            :param global_exempt_urls: The global exempt URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level exempt URL list.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_workspacesweb as workspacesweb
+                
+                inline_redaction_configuration_property = workspacesweb.CfnDataProtectionSettings.InlineRedactionConfigurationProperty(
+                    inline_redaction_patterns=[workspacesweb.CfnDataProtectionSettings.InlineRedactionPatternProperty(
+                        redaction_place_holder=workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty(
+                            redaction_place_holder_type="redactionPlaceHolderType",
+                
+                            # the properties below are optional
+                            redaction_place_holder_text="redactionPlaceHolderText"
+                        ),
+                
+                        # the properties below are optional
+                        built_in_pattern_id="builtInPatternId",
+                        confidence_level=123,
+                        custom_pattern=workspacesweb.CfnDataProtectionSettings.CustomPatternProperty(
+                            pattern_name="patternName",
+                            pattern_regex="patternRegex",
+                
+                            # the properties below are optional
+                            keyword_regex="keywordRegex",
+                            pattern_description="patternDescription"
+                        ),
+                        enforced_urls=["enforcedUrls"],
+                        exempt_urls=["exemptUrls"]
+                    )],
+                
+                    # the properties below are optional
+                    global_confidence_level=123,
+                    global_enforced_urls=["globalEnforcedUrls"],
+                    global_exempt_urls=["globalExemptUrls"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__552bfd927d431d6795b0b5add23e48f1a25b4db6addb149426e81afc6686dc63)
+                check_type(argname="argument inline_redaction_patterns", value=inline_redaction_patterns, expected_type=type_hints["inline_redaction_patterns"])
+                check_type(argname="argument global_confidence_level", value=global_confidence_level, expected_type=type_hints["global_confidence_level"])
+                check_type(argname="argument global_enforced_urls", value=global_enforced_urls, expected_type=type_hints["global_enforced_urls"])
+                check_type(argname="argument global_exempt_urls", value=global_exempt_urls, expected_type=type_hints["global_exempt_urls"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "inline_redaction_patterns": inline_redaction_patterns,
+            }
+            if global_confidence_level is not None:
+                self._values["global_confidence_level"] = global_confidence_level
+            if global_enforced_urls is not None:
+                self._values["global_enforced_urls"] = global_enforced_urls
+            if global_exempt_urls is not None:
+                self._values["global_exempt_urls"] = global_exempt_urls
+
+        @builtins.property
+        def inline_redaction_patterns(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.InlineRedactionPatternProperty"]]]:
+            '''The inline redaction patterns to be enabled for the inline redaction configuration.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionconfiguration.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionconfiguration-inlineredactionpatterns
+            '''
+            result = self._values.get("inline_redaction_patterns")
+            assert result is not None, "Required property 'inline_redaction_patterns' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.InlineRedactionPatternProperty"]]], result)
+
+        @builtins.property
+        def global_confidence_level(self) -> typing.Optional[jsii.Number]:
+            '''The global confidence level for the inline redaction configuration.
+
+            This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This is applied to patterns that do not have a pattern-level confidence level. Defaults to confidence level 2.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionconfiguration.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionconfiguration-globalconfidencelevel
+            '''
+            result = self._values.get("global_confidence_level")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def global_enforced_urls(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''The global enforced URL configuration for the inline redaction configuration.
+
+            This is applied to patterns that do not have a pattern-level enforced URL list.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionconfiguration.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionconfiguration-globalenforcedurls
+            '''
+            result = self._values.get("global_enforced_urls")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def global_exempt_urls(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''The global exempt URL configuration for the inline redaction configuration.
+
+            This is applied to patterns that do not have a pattern-level exempt URL list.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionconfiguration.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionconfiguration-globalexempturls
+            '''
+            result = self._values.get("global_exempt_urls")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "InlineRedactionConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettings.InlineRedactionPatternProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "redaction_place_holder": "redactionPlaceHolder",
+            "built_in_pattern_id": "builtInPatternId",
+            "confidence_level": "confidenceLevel",
+            "custom_pattern": "customPattern",
+            "enforced_urls": "enforcedUrls",
+            "exempt_urls": "exemptUrls",
+        },
+    )
+    class InlineRedactionPatternProperty:
+        def __init__(
+            self,
+            *,
+            redaction_place_holder: typing.Union[_IResolvable_da3f097b, typing.Union["CfnDataProtectionSettings.RedactionPlaceHolderProperty", typing.Dict[builtins.str, typing.Any]]],
+            built_in_pattern_id: typing.Optional[builtins.str] = None,
+            confidence_level: typing.Optional[jsii.Number] = None,
+            custom_pattern: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDataProtectionSettings.CustomPatternProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            enforced_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+            exempt_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''The set of patterns that determine the data types redacted in session.
+
+            :param redaction_place_holder: The redaction placeholder that will replace the redacted text in session for the inline redaction pattern.
+            :param built_in_pattern_id: The built-in pattern from the list of preconfigured patterns. Either a customPattern or builtInPatternId is required. To view the entire list of data types and their corresponding built-in pattern IDs, see `Base inline redaction <https://docs.aws.amazon.com/workspaces-web/latest/adminguide/base-inline-redaction.html>`_ .
+            :param confidence_level: The confidence level for inline redaction pattern. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This overrides the global confidence level.
+            :param custom_pattern: The configuration for a custom pattern. Either a customPattern or builtInPatternId is required.
+            :param enforced_urls: The enforced URL configuration for the inline redaction pattern. This will override the global enforced URL configuration.
+            :param exempt_urls: The exempt URL configuration for the inline redaction pattern. This will override the global exempt URL configuration for the inline redaction pattern.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_workspacesweb as workspacesweb
+                
+                inline_redaction_pattern_property = workspacesweb.CfnDataProtectionSettings.InlineRedactionPatternProperty(
+                    redaction_place_holder=workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty(
+                        redaction_place_holder_type="redactionPlaceHolderType",
+                
+                        # the properties below are optional
+                        redaction_place_holder_text="redactionPlaceHolderText"
+                    ),
+                
+                    # the properties below are optional
+                    built_in_pattern_id="builtInPatternId",
+                    confidence_level=123,
+                    custom_pattern=workspacesweb.CfnDataProtectionSettings.CustomPatternProperty(
+                        pattern_name="patternName",
+                        pattern_regex="patternRegex",
+                
+                        # the properties below are optional
+                        keyword_regex="keywordRegex",
+                        pattern_description="patternDescription"
+                    ),
+                    enforced_urls=["enforcedUrls"],
+                    exempt_urls=["exemptUrls"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__f28e305e326d3f4c9ac306ecac6e0d132c560d8cb368e6c1d255bce2256c5953)
+                check_type(argname="argument redaction_place_holder", value=redaction_place_holder, expected_type=type_hints["redaction_place_holder"])
+                check_type(argname="argument built_in_pattern_id", value=built_in_pattern_id, expected_type=type_hints["built_in_pattern_id"])
+                check_type(argname="argument confidence_level", value=confidence_level, expected_type=type_hints["confidence_level"])
+                check_type(argname="argument custom_pattern", value=custom_pattern, expected_type=type_hints["custom_pattern"])
+                check_type(argname="argument enforced_urls", value=enforced_urls, expected_type=type_hints["enforced_urls"])
+                check_type(argname="argument exempt_urls", value=exempt_urls, expected_type=type_hints["exempt_urls"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "redaction_place_holder": redaction_place_holder,
+            }
+            if built_in_pattern_id is not None:
+                self._values["built_in_pattern_id"] = built_in_pattern_id
+            if confidence_level is not None:
+                self._values["confidence_level"] = confidence_level
+            if custom_pattern is not None:
+                self._values["custom_pattern"] = custom_pattern
+            if enforced_urls is not None:
+                self._values["enforced_urls"] = enforced_urls
+            if exempt_urls is not None:
+                self._values["exempt_urls"] = exempt_urls
+
+        @builtins.property
+        def redaction_place_holder(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.RedactionPlaceHolderProperty"]:
+            '''The redaction placeholder that will replace the redacted text in session for the inline redaction pattern.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-redactionplaceholder
+            '''
+            result = self._values.get("redaction_place_holder")
+            assert result is not None, "Required property 'redaction_place_holder' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.RedactionPlaceHolderProperty"], result)
+
+        @builtins.property
+        def built_in_pattern_id(self) -> typing.Optional[builtins.str]:
+            '''The built-in pattern from the list of preconfigured patterns.
+
+            Either a customPattern or builtInPatternId is required. To view the entire list of data types and their corresponding built-in pattern IDs, see `Base inline redaction <https://docs.aws.amazon.com/workspaces-web/latest/adminguide/base-inline-redaction.html>`_ .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-builtinpatternid
+            '''
+            result = self._values.get("built_in_pattern_id")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def confidence_level(self) -> typing.Optional[jsii.Number]:
+            '''The confidence level for inline redaction pattern.
+
+            This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This overrides the global confidence level.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-confidencelevel
+            '''
+            result = self._values.get("confidence_level")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def custom_pattern(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.CustomPatternProperty"]]:
+            '''The configuration for a custom pattern.
+
+            Either a customPattern or builtInPatternId is required.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-custompattern
+            '''
+            result = self._values.get("custom_pattern")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDataProtectionSettings.CustomPatternProperty"]], result)
+
+        @builtins.property
+        def enforced_urls(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''The enforced URL configuration for the inline redaction pattern.
+
+            This will override the global enforced URL configuration.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-enforcedurls
+            '''
+            result = self._values.get("enforced_urls")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def exempt_urls(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''The exempt URL configuration for the inline redaction pattern.
+
+            This will override the global exempt URL configuration for the inline redaction pattern.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-inlineredactionpattern.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionpattern-exempturls
+            '''
+            result = self._values.get("exempt_urls")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "InlineRedactionPatternProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "redaction_place_holder_type": "redactionPlaceHolderType",
+            "redaction_place_holder_text": "redactionPlaceHolderText",
+        },
+    )
+    class RedactionPlaceHolderProperty:
+        def __init__(
+            self,
+            *,
+            redaction_place_holder_type: builtins.str,
+            redaction_place_holder_text: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''The redaction placeholder that will replace the redacted text in session.
+
+            :param redaction_place_holder_type: The redaction placeholder type that will replace the redacted text in session.
+            :param redaction_place_holder_text: The redaction placeholder text that will replace the redacted text in session for the custom text redaction placeholder type.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-redactionplaceholder.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_workspacesweb as workspacesweb
+                
+                redaction_place_holder_property = workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty(
+                    redaction_place_holder_type="redactionPlaceHolderType",
+                
+                    # the properties below are optional
+                    redaction_place_holder_text="redactionPlaceHolderText"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__93e3fa90dfeb5ed27de42632610186e3eec8e8ee42bce56d7f8dcb07d9c19f53)
+                check_type(argname="argument redaction_place_holder_type", value=redaction_place_holder_type, expected_type=type_hints["redaction_place_holder_type"])
+                check_type(argname="argument redaction_place_holder_text", value=redaction_place_holder_text, expected_type=type_hints["redaction_place_holder_text"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "redaction_place_holder_type": redaction_place_holder_type,
+            }
+            if redaction_place_holder_text is not None:
+                self._values["redaction_place_holder_text"] = redaction_place_holder_text
+
+        @builtins.property
+        def redaction_place_holder_type(self) -> builtins.str:
+            '''The redaction placeholder type that will replace the redacted text in session.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-redactionplaceholder.html#cfn-workspacesweb-dataprotectionsettings-redactionplaceholder-redactionplaceholdertype
+            '''
+            result = self._values.get("redaction_place_holder_type")
+            assert result is not None, "Required property 'redaction_place_holder_type' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def redaction_place_holder_text(self) -> typing.Optional[builtins.str]:
+            '''The redaction placeholder text that will replace the redacted text in session for the custom text redaction placeholder type.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-dataprotectionsettings-redactionplaceholder.html#cfn-workspacesweb-dataprotectionsettings-redactionplaceholder-redactionplaceholdertext
+            '''
+            result = self._values.get("redaction_place_holder_text")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "RedactionPlaceHolderProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnDataProtectionSettingsProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "additional_encryption_context": "additionalEncryptionContext",
+        "customer_managed_key": "customerManagedKey",
+        "description": "description",
+        "display_name": "displayName",
+        "inline_redaction_configuration": "inlineRedactionConfiguration",
+        "tags": "tags",
+    },
+)
+class CfnDataProtectionSettingsProps:
+    def __init__(
+        self,
+        *,
+        additional_encryption_context: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+        customer_managed_key: typing.Optional[builtins.str] = None,
+        description: typing.Optional[builtins.str] = None,
+        display_name: typing.Optional[builtins.str] = None,
+        inline_redaction_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.InlineRedactionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnDataProtectionSettings``.
+
+        :param additional_encryption_context: The additional encryption context of the data protection settings.
+        :param customer_managed_key: The customer managed key used to encrypt sensitive information in the data protection settings.
+        :param description: The description of the data protection settings.
+        :param display_name: The display name of the data protection settings.
+        :param inline_redaction_configuration: The inline redaction configuration for the data protection settings.
+        :param tags: The tags of the data protection settings.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_workspacesweb as workspacesweb
+            
+            cfn_data_protection_settings_props = workspacesweb.CfnDataProtectionSettingsProps(
+                additional_encryption_context={
+                    "additional_encryption_context_key": "additionalEncryptionContext"
+                },
+                customer_managed_key="customerManagedKey",
+                description="description",
+                display_name="displayName",
+                inline_redaction_configuration=workspacesweb.CfnDataProtectionSettings.InlineRedactionConfigurationProperty(
+                    inline_redaction_patterns=[workspacesweb.CfnDataProtectionSettings.InlineRedactionPatternProperty(
+                        redaction_place_holder=workspacesweb.CfnDataProtectionSettings.RedactionPlaceHolderProperty(
+                            redaction_place_holder_type="redactionPlaceHolderType",
+            
+                            # the properties below are optional
+                            redaction_place_holder_text="redactionPlaceHolderText"
+                        ),
+            
+                        # the properties below are optional
+                        built_in_pattern_id="builtInPatternId",
+                        confidence_level=123,
+                        custom_pattern=workspacesweb.CfnDataProtectionSettings.CustomPatternProperty(
+                            pattern_name="patternName",
+                            pattern_regex="patternRegex",
+            
+                            # the properties below are optional
+                            keyword_regex="keywordRegex",
+                            pattern_description="patternDescription"
+                        ),
+                        enforced_urls=["enforcedUrls"],
+                        exempt_urls=["exemptUrls"]
+                    )],
+            
+                    # the properties below are optional
+                    global_confidence_level=123,
+                    global_enforced_urls=["globalEnforcedUrls"],
+                    global_exempt_urls=["globalExemptUrls"]
+                ),
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9bd186c92264d6b6332cc9ff86b6f530f1f3d30da79101020cac77924b86ea5a)
+            check_type(argname="argument additional_encryption_context", value=additional_encryption_context, expected_type=type_hints["additional_encryption_context"])
+            check_type(argname="argument customer_managed_key", value=customer_managed_key, expected_type=type_hints["customer_managed_key"])
+            check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
+            check_type(argname="argument inline_redaction_configuration", value=inline_redaction_configuration, expected_type=type_hints["inline_redaction_configuration"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if additional_encryption_context is not None:
+            self._values["additional_encryption_context"] = additional_encryption_context
+        if customer_managed_key is not None:
+            self._values["customer_managed_key"] = customer_managed_key
+        if description is not None:
+            self._values["description"] = description
+        if display_name is not None:
+            self._values["display_name"] = display_name
+        if inline_redaction_configuration is not None:
+            self._values["inline_redaction_configuration"] = inline_redaction_configuration
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def additional_encryption_context(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
+        '''The additional encryption context of the data protection settings.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-additionalencryptioncontext
+        '''
+        result = self._values.get("additional_encryption_context")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], result)
+
+    @builtins.property
+    def customer_managed_key(self) -> typing.Optional[builtins.str]:
+        '''The customer managed key used to encrypt sensitive information in the data protection settings.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-customermanagedkey
+        '''
+        result = self._values.get("customer_managed_key")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def description(self) -> typing.Optional[builtins.str]:
+        '''The description of the data protection settings.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-description
+        '''
+        result = self._values.get("description")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def display_name(self) -> typing.Optional[builtins.str]:
+        '''The display name of the data protection settings.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-displayname
+        '''
+        result = self._values.get("display_name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def inline_redaction_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataProtectionSettings.InlineRedactionConfigurationProperty]]:
+        '''The inline redaction configuration for the data protection settings.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-inlineredactionconfiguration
+        '''
+        result = self._values.get("inline_redaction_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataProtectionSettings.InlineRedactionConfigurationProperty]], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags of the data protection settings.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html#cfn-workspacesweb-dataprotectionsettings-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnDataProtectionSettingsProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
 class CfnIdentityProvider(
     _CfnResource_9df397a6,
@@ -1534,6 +2455,7 @@ class CfnPortal(
             authentication_type="authenticationType",
             browser_settings_arn="browserSettingsArn",
             customer_managed_key="customerManagedKey",
+            data_protection_settings_arn="dataProtectionSettingsArn",
             display_name="displayName",
             instance_type="instanceType",
             ip_access_settings_arn="ipAccessSettingsArn",
@@ -1558,6 +2480,7 @@ class CfnPortal(
         authentication_type: typing.Optional[builtins.str] = None,
         browser_settings_arn: typing.Optional[builtins.str] = None,
         customer_managed_key: typing.Optional[builtins.str] = None,
+        data_protection_settings_arn: typing.Optional[builtins.str] = None,
         display_name: typing.Optional[builtins.str] = None,
         instance_type: typing.Optional[builtins.str] = None,
         ip_access_settings_arn: typing.Optional[builtins.str] = None,
@@ -1575,6 +2498,7 @@ class CfnPortal(
         :param authentication_type: The type of authentication integration points used when signing into the web portal. Defaults to ``Standard`` . ``Standard`` web portals are authenticated directly through your identity provider (IdP). User and group access to your web portal is controlled through your IdP. You need to include an IdP resource in your template to integrate your IdP with your web portal. Completing the configuration for your IdP requires exchanging WorkSpaces Secure Browser’s SP metadata with your IdP’s IdP metadata. If your IdP requires the SP metadata first before returning the IdP metadata, you should follow these steps: 1. Create and deploy a CloudFormation template with a ``Standard`` portal with no ``IdentityProvider`` resource. 2. Retrieve the SP metadata using ``Fn:GetAtt`` , the WorkSpaces Secure Browser console, or by the calling the ``GetPortalServiceProviderMetadata`` API. 3. Submit the data to your IdP. 4. Add an ``IdentityProvider`` resource to your CloudFormation template. ``IAM Identity Center`` web portals are authenticated through AWS IAM Identity Center . They provide additional features, such as IdP-initiated authentication. Identity sources (including external identity provider integration) and other identity provider information must be configured in IAM Identity Center . User and group assignment must be done through the WorkSpaces Secure Browser console. These cannot be configured in CloudFormation.
         :param browser_settings_arn: The ARN of the browser settings that is associated with this web portal.
         :param customer_managed_key: The customer managed key of the web portal. *Pattern* : ``^arn:[\\w+=\\/,.@-]+:kms:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:key\\/[a-zA-Z0-9-]+$``
+        :param data_protection_settings_arn: The ARN of the data protection settings.
         :param display_name: The name of the web portal.
         :param instance_type: The type and resources of the underlying instance.
         :param ip_access_settings_arn: The ARN of the IP access settings that is associated with the web portal.
@@ -1594,6 +2518,7 @@ class CfnPortal(
             authentication_type=authentication_type,
             browser_settings_arn=browser_settings_arn,
             customer_managed_key=customer_managed_key,
+            data_protection_settings_arn=data_protection_settings_arn,
             display_name=display_name,
             instance_type=instance_type,
             ip_access_settings_arn=ip_access_settings_arn,
@@ -1780,6 +2705,22 @@ class CfnPortal(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "customerManagedKey", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="dataProtectionSettingsArn")
+    def data_protection_settings_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the data protection settings.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "dataProtectionSettingsArn"))
+
+    @data_protection_settings_arn.setter
+    def data_protection_settings_arn(
+        self,
+        value: typing.Optional[builtins.str],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__dfde357dad34994249d2ece8cb99322e6a84a2af5763685459271a2545a12e6f)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "dataProtectionSettingsArn", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="displayName")
     def display_name(self) -> typing.Optional[builtins.str]:
@@ -1909,6 +2850,7 @@ class CfnPortal(
         "authentication_type": "authenticationType",
         "browser_settings_arn": "browserSettingsArn",
         "customer_managed_key": "customerManagedKey",
+        "data_protection_settings_arn": "dataProtectionSettingsArn",
         "display_name": "displayName",
         "instance_type": "instanceType",
         "ip_access_settings_arn": "ipAccessSettingsArn",
@@ -1928,6 +2870,7 @@ class CfnPortalProps:
         authentication_type: typing.Optional[builtins.str] = None,
         browser_settings_arn: typing.Optional[builtins.str] = None,
         customer_managed_key: typing.Optional[builtins.str] = None,
+        data_protection_settings_arn: typing.Optional[builtins.str] = None,
         display_name: typing.Optional[builtins.str] = None,
         instance_type: typing.Optional[builtins.str] = None,
         ip_access_settings_arn: typing.Optional[builtins.str] = None,
@@ -1944,6 +2887,7 @@ class CfnPortalProps:
         :param authentication_type: The type of authentication integration points used when signing into the web portal. Defaults to ``Standard`` . ``Standard`` web portals are authenticated directly through your identity provider (IdP). User and group access to your web portal is controlled through your IdP. You need to include an IdP resource in your template to integrate your IdP with your web portal. Completing the configuration for your IdP requires exchanging WorkSpaces Secure Browser’s SP metadata with your IdP’s IdP metadata. If your IdP requires the SP metadata first before returning the IdP metadata, you should follow these steps: 1. Create and deploy a CloudFormation template with a ``Standard`` portal with no ``IdentityProvider`` resource. 2. Retrieve the SP metadata using ``Fn:GetAtt`` , the WorkSpaces Secure Browser console, or by the calling the ``GetPortalServiceProviderMetadata`` API. 3. Submit the data to your IdP. 4. Add an ``IdentityProvider`` resource to your CloudFormation template. ``IAM Identity Center`` web portals are authenticated through AWS IAM Identity Center . They provide additional features, such as IdP-initiated authentication. Identity sources (including external identity provider integration) and other identity provider information must be configured in IAM Identity Center . User and group assignment must be done through the WorkSpaces Secure Browser console. These cannot be configured in CloudFormation.
         :param browser_settings_arn: The ARN of the browser settings that is associated with this web portal.
         :param customer_managed_key: The customer managed key of the web portal. *Pattern* : ``^arn:[\\w+=\\/,.@-]+:kms:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:key\\/[a-zA-Z0-9-]+$``
+        :param data_protection_settings_arn: The ARN of the data protection settings.
         :param display_name: The name of the web portal.
         :param instance_type: The type and resources of the underlying instance.
         :param ip_access_settings_arn: The ARN of the IP access settings that is associated with the web portal.
@@ -1970,6 +2914,7 @@ class CfnPortalProps:
                 authentication_type="authenticationType",
                 browser_settings_arn="browserSettingsArn",
                 customer_managed_key="customerManagedKey",
+                data_protection_settings_arn="dataProtectionSettingsArn",
                 display_name="displayName",
                 instance_type="instanceType",
                 ip_access_settings_arn="ipAccessSettingsArn",
@@ -1990,6 +2935,7 @@ class CfnPortalProps:
             check_type(argname="argument authentication_type", value=authentication_type, expected_type=type_hints["authentication_type"])
             check_type(argname="argument browser_settings_arn", value=browser_settings_arn, expected_type=type_hints["browser_settings_arn"])
             check_type(argname="argument customer_managed_key", value=customer_managed_key, expected_type=type_hints["customer_managed_key"])
+            check_type(argname="argument data_protection_settings_arn", value=data_protection_settings_arn, expected_type=type_hints["data_protection_settings_arn"])
             check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
             check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
             check_type(argname="argument ip_access_settings_arn", value=ip_access_settings_arn, expected_type=type_hints["ip_access_settings_arn"])
@@ -2008,6 +2954,8 @@ class CfnPortalProps:
             self._values["browser_settings_arn"] = browser_settings_arn
         if customer_managed_key is not None:
             self._values["customer_managed_key"] = customer_managed_key
+        if data_protection_settings_arn is not None:
+            self._values["data_protection_settings_arn"] = data_protection_settings_arn
         if display_name is not None:
             self._values["display_name"] = display_name
         if instance_type is not None:
@@ -2076,6 +3024,15 @@ class CfnPortalProps:
         result = self._values.get("customer_managed_key")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def data_protection_settings_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the data protection settings.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-portal.html#cfn-workspacesweb-portal-dataprotectionsettingsarn
+        '''
+        result = self._values.get("data_protection_settings_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def display_name(self) -> typing.Optional[builtins.str]:
         '''The name of the web portal.
@@ -3405,6 +4362,8 @@ class CfnUserSettingsProps:
 __all__ = [
     "CfnBrowserSettings",
     "CfnBrowserSettingsProps",
+    "CfnDataProtectionSettings",
+    "CfnDataProtectionSettingsProps",
     "CfnIdentityProvider",
     "CfnIdentityProviderProps",
     "CfnIpAccessSettings",
@@ -3481,6 +4440,120 @@ def _typecheckingstub__f99c227d497f6d51d01cc19398b94784835fab55afca7c6488466bb1c
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__851565cba0af7c67b6951a864a7d6671af0039654a56671ed86d28919552d73e(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    additional_encryption_context: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    customer_managed_key: typing.Optional[builtins.str] = None,
+    description: typing.Optional[builtins.str] = None,
+    display_name: typing.Optional[builtins.str] = None,
+    inline_redaction_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.InlineRedactionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3afc83d9e43528cc13b5abd50d4826acf870643c24640ed022e2bd621b1dec5f(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__029b8eb91b5f7341d86b33581460523348eedfa665657364ac1293ba7954ad5e(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3fb99479367371b2a6c52e976d47a87740ba2c6f65f4fcf0c11ef7787923a279(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b8794b55f834ff23fceefb4949f1c9ca0f88d0253e16fe02de823fd78e704f6a(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__7e6f16d355910af3e0d25ae4869bb9019e44d7bb8454311659d9581fbff7ad5f(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4bbbc104f6c3d94f0c1f63bd93d3ec5849325aa58b7e06f06e3c37f6b101823f(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a80d3be6cd6ed07f4c7a5f51acbace505548a335789227fb3e70735f66c484f6(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDataProtectionSettings.InlineRedactionConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d82a664a0d9b6e2a4f59784e5f13b3f39994ef205d8513718b40fba2b6daf513(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6114d751d2647346cb8b4fe7fc495c1b5e4ec1ffbe6904abf91d6b44adec7548(
+    *,
+    pattern_name: builtins.str,
+    pattern_regex: builtins.str,
+    keyword_regex: typing.Optional[builtins.str] = None,
+    pattern_description: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__552bfd927d431d6795b0b5add23e48f1a25b4db6addb149426e81afc6686dc63(
+    *,
+    inline_redaction_patterns: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.InlineRedactionPatternProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    global_confidence_level: typing.Optional[jsii.Number] = None,
+    global_enforced_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+    global_exempt_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f28e305e326d3f4c9ac306ecac6e0d132c560d8cb368e6c1d255bce2256c5953(
+    *,
+    redaction_place_holder: typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.RedactionPlaceHolderProperty, typing.Dict[builtins.str, typing.Any]]],
+    built_in_pattern_id: typing.Optional[builtins.str] = None,
+    confidence_level: typing.Optional[jsii.Number] = None,
+    custom_pattern: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.CustomPatternProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    enforced_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+    exempt_urls: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__93e3fa90dfeb5ed27de42632610186e3eec8e8ee42bce56d7f8dcb07d9c19f53(
+    *,
+    redaction_place_holder_type: builtins.str,
+    redaction_place_holder_text: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9bd186c92264d6b6332cc9ff86b6f530f1f3d30da79101020cac77924b86ea5a(
+    *,
+    additional_encryption_context: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    customer_managed_key: typing.Optional[builtins.str] = None,
+    description: typing.Optional[builtins.str] = None,
+    display_name: typing.Optional[builtins.str] = None,
+    inline_redaction_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDataProtectionSettings.InlineRedactionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__439cd32d129b1f0a69c13fb5a494170084be122497b619a7175debec51c3635e(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -3695,6 +4768,7 @@ def _typecheckingstub__239c61bc87a1a693f01a28198d2d3000f7ef790e9684279e807a890b0
     authentication_type: typing.Optional[builtins.str] = None,
     browser_settings_arn: typing.Optional[builtins.str] = None,
     customer_managed_key: typing.Optional[builtins.str] = None,
+    data_protection_settings_arn: typing.Optional[builtins.str] = None,
     display_name: typing.Optional[builtins.str] = None,
     instance_type: typing.Optional[builtins.str] = None,
     ip_access_settings_arn: typing.Optional[builtins.str] = None,
@@ -3744,6 +4818,12 @@ def _typecheckingstub__319e821fe7e2a17153f7832a389ae0c48e1f0517453d29fa3e26fa732
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__dfde357dad34994249d2ece8cb99322e6a84a2af5763685459271a2545a12e6f(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__cd1b9794e835c2ffeb3dc42a40224afa89d92cb7704c5a59dd75c1d3dd4ef495(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -3804,6 +4884,7 @@ def _typecheckingstub__aa147912cdfb0d9ea5356fccc59e7ae5b02c822d1e3f5ae2e4826ae39
     authentication_type: typing.Optional[builtins.str] = None,
     browser_settings_arn: typing.Optional[builtins.str] = None,
     customer_managed_key: typing.Optional[builtins.str] = None,
+    data_protection_settings_arn: typing.Optional[builtins.str] = None,
     display_name: typing.Optional[builtins.str] = None,
     instance_type: typing.Optional[builtins.str] = None,
     ip_access_settings_arn: typing.Optional[builtins.str] = None,