aws-cdk-lib 2.172.0__py3-none-any.whl → 2.173.1__py3-none-any.whl

aws_cdk/aws_cloudtrail/__init__.py

@@ -725,9 +725,16 @@ class CfnDashboard(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_cloudtrail.CfnDashboard",
 ):
-    '''The Amazon CloudTrail dashboard resource allows customers to manage managed dashboards and create custom dashboards.
+    '''Creates a custom dashboard or the Highlights dashboard.
 
-    You can manually refresh custom and managed dashboards. For custom dashboards, you can also set up an automatic refresh schedule and modify dashboard widgets.
+    - *Custom dashboards* - Custom dashboards allow you to query events in any event data store type. You can add up to 10 widgets to a custom dashboard. You can manually refresh a custom dashboard, or you can set a refresh schedule.
+    - *Highlights dashboard* - You can create the Highlights dashboard to see a summary of key user activities and API usage across all your event data stores. CloudTrail Lake manages the Highlights dashboard and refreshes the dashboard every 6 hours. To create the Highlights dashboard, you must set and enable a refresh schedule.
+
+    CloudTrail runs queries to populate the dashboard's widgets during a manual or scheduled refresh. CloudTrail must be granted permissions to run the ``StartQuery`` operation on your behalf. To provide permissions, run the ``PutResourcePolicy`` operation to attach a resource-based policy to each event data store. For more information, see `Example: Allow CloudTrail to run queries to populate a dashboard <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/security_iam_resource-based-policy-examples.html#security_iam_resource-based-policy-examples-eds-dashboard>`_ in the *AWS CloudTrail User Guide* .
+
+    To set a refresh schedule, CloudTrail must be granted permissions to run the ``StartDashboardRefresh`` operation to refresh the dashboard on your behalf. To provide permissions, run the ``PutResourcePolicy`` operation to attach a resource-based policy to the dashboard. For more information, see `Resource-based policy example for a dashboard <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/security_iam_resource-based-policy-examples.html#security_iam_resource-based-policy-examples-dashboards>`_ in the *AWS CloudTrail User Guide* .
+
+    For more information about dashboards, see `CloudTrail Lake dashboards <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/lake-dashboard.html>`_ in the *AWS CloudTrail User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-dashboard.html
     :cloudformationResource: AWS::CloudTrail::Dashboard
@@ -780,11 +787,11 @@ class CfnDashboard(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param name: The name of the dashboard.
-        :param refresh_schedule: Configures the automatic refresh schedule for the dashboard. Includes the frequency unit (DAYS or HOURS) and value, as well as the status (ENABLED or DISABLED) of the refresh schedule.
-        :param tags: 
-        :param termination_protection_enabled: Indicates whether the dashboard is protected from termination.
-        :param widgets: List of widgets on the dashboard.
+        :param name: The name of the dashboard. The name must be unique to your account. To create the Highlights dashboard, the name must be ``AWSCloudTrail-Highlights`` .
+        :param refresh_schedule: The schedule for a dashboard refresh.
+        :param tags: A list of tags.
+        :param termination_protection_enabled: Specifies whether termination protection is enabled for the dashboard. If termination protection is enabled, you cannot delete the dashboard until termination protection is disabled.
+        :param widgets: An array of widgets for a custom dashboard. A custom dashboard can have a maximum of ten widgets. You do not need to specify widgets for the Highlights dashboard.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__65875e3ceabcc57155f97b1541ff9d435e4456c9c7f0c980c1dea0ac9bffc3ce)
@@ -833,7 +840,8 @@ class CfnDashboard(
     @builtins.property
     @jsii.member(jsii_name="attrCreatedTimestamp")
     def attr_created_timestamp(self) -> builtins.str:
-        '''
+        '''The timestamp that shows when the dashboard was created.
+
         :cloudformationAttribute: CreatedTimestamp
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrCreatedTimestamp"))
@@ -841,7 +849,7 @@ class CfnDashboard(
     @builtins.property
     @jsii.member(jsii_name="attrDashboardArn")
     def attr_dashboard_arn(self) -> builtins.str:
-        '''The ARN of the dashboard.
+        '''The ARN for the dashboard.
 
         :cloudformationAttribute: DashboardArn
         '''
@@ -852,8 +860,6 @@ class CfnDashboard(
     def attr_status(self) -> builtins.str:
         '''The status of the dashboard.
 
-        Values are CREATING, CREATED, UPDATING, UPDATED and DELETING.
-
         :cloudformationAttribute: Status
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrStatus"))
@@ -861,9 +867,7 @@ class CfnDashboard(
     @builtins.property
     @jsii.member(jsii_name="attrType")
     def attr_type(self) -> builtins.str:
-        '''The type of the dashboard.
-
-        Values are CUSTOM and MANAGED.
+        '''The type of dashboard.
 
         :cloudformationAttribute: Type
         '''
@@ -872,7 +876,8 @@ class CfnDashboard(
     @builtins.property
     @jsii.member(jsii_name="attrUpdatedTimestamp")
     def attr_updated_timestamp(self) -> builtins.str:
-        '''
+        '''The timestamp that shows when the dashboard was updated.
+
         :cloudformationAttribute: UpdatedTimestamp
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrUpdatedTimestamp"))
@@ -891,7 +896,10 @@ class CfnDashboard(
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> typing.Optional[builtins.str]:
-        '''The name of the dashboard.'''
+        '''The name of the dashboard.
+
+        The name must be unique to your account.
+        '''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "name"))
 
     @name.setter
@@ -906,7 +914,7 @@ class CfnDashboard(
     def refresh_schedule(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDashboard.RefreshScheduleProperty"]]:
-        '''Configures the automatic refresh schedule for the dashboard.'''
+        '''The schedule for a dashboard refresh.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDashboard.RefreshScheduleProperty"]], jsii.get(self, "refreshSchedule"))
 
     @refresh_schedule.setter
@@ -922,6 +930,7 @@ class CfnDashboard(
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''A list of tags.'''
         return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
 
     @tags.setter
@@ -936,7 +945,7 @@ class CfnDashboard(
     def termination_protection_enabled(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Indicates whether the dashboard is protected from termination.'''
+        '''Specifies whether termination protection is enabled for the dashboard.'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "terminationProtectionEnabled"))
 
     @termination_protection_enabled.setter
@@ -954,7 +963,10 @@ class CfnDashboard(
     def widgets(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnDashboard.WidgetProperty"]]]]:
-        '''List of widgets on the dashboard.'''
+        '''An array of widgets for a custom dashboard.
+
+        A custom dashboard can have a maximum of ten widgets.
+        '''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnDashboard.WidgetProperty"]]]], jsii.get(self, "widgets"))
 
     @widgets.setter
@@ -974,9 +986,12 @@ class CfnDashboard(
     )
     class FrequencyProperty:
         def __init__(self, *, unit: builtins.str, value: jsii.Number) -> None:
-            '''
-            :param unit: The frequency unit. Supported values are HOURS and DAYS.
-            :param value: The frequency value.
+            '''Specifies the frequency for a dashboard refresh schedule.
+
+            For a custom dashboard, you can schedule a refresh for every 1, 6, 12, or 24 hours, or every day.
+
+            :param unit: The unit to use for the refresh. For custom dashboards, the unit can be ``HOURS`` or ``DAYS`` . For the Highlights dashboard, the ``Unit`` must be ``HOURS`` .
+            :param value: The value for the refresh schedule. For custom dashboards, the following values are valid when the unit is ``HOURS`` : ``1`` , ``6`` , ``12`` , ``24`` For custom dashboards, the only valid value when the unit is ``DAYS`` is ``1`` . For the Highlights dashboard, the ``Value`` must be ``6`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-dashboard-frequency.html
             :exampleMetadata: fixture=_generated
@@ -1003,9 +1018,11 @@ class CfnDashboard(
 
         @builtins.property
         def unit(self) -> builtins.str:
-            '''The frequency unit.
+            '''The unit to use for the refresh.
+
+            For custom dashboards, the unit can be ``HOURS`` or ``DAYS`` .
 
-            Supported values are HOURS and DAYS.
+            For the Highlights dashboard, the ``Unit`` must be ``HOURS`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-dashboard-frequency.html#cfn-cloudtrail-dashboard-frequency-unit
             '''
@@ -1015,7 +1032,13 @@ class CfnDashboard(
 
         @builtins.property
         def value(self) -> jsii.Number:
-            '''The frequency value.
+            '''The value for the refresh schedule.
+
+            For custom dashboards, the following values are valid when the unit is ``HOURS`` : ``1`` , ``6`` , ``12`` , ``24``
+
+            For custom dashboards, the only valid value when the unit is ``DAYS`` is ``1`` .
+
+            For the Highlights dashboard, the ``Value`` must be ``6`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-dashboard-frequency.html#cfn-cloudtrail-dashboard-frequency-value
             '''
@@ -1051,13 +1074,11 @@ class CfnDashboard(
             status: typing.Optional[builtins.str] = None,
             time_of_day: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Configures the automatic refresh schedule for the dashboard.
-
-            Includes the frequency unit (DAYS or HOURS) and value, as well as the status (ENABLED or DISABLED) of the refresh schedule.
+            '''The schedule for a dashboard refresh.
 
-            :param frequency: 
-            :param status: The status of the schedule. Supported values are ENABLED and DISABLED.
-            :param time_of_day: StartTime of the automatic schedule refresh.
+            :param frequency: The frequency at which you want the dashboard refreshed.
+            :param status: Specifies whether the refresh schedule is enabled. Set the value to ``ENABLED`` to enable the refresh schedule, or to ``DISABLED`` to turn off the refresh schedule.
+            :param time_of_day: The time of day in UTC to run the schedule; for hourly only refer to minutes; default is 00:00.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-dashboard-refreshschedule.html
             :exampleMetadata: fixture=_generated
@@ -1094,7 +1115,8 @@ class CfnDashboard(
         def frequency(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDashboard.FrequencyProperty"]]:
-            '''
+            '''The frequency at which you want the dashboard refreshed.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-dashboard-refreshschedule.html#cfn-cloudtrail-dashboard-refreshschedule-frequency
             '''
             result = self._values.get("frequency")
@@ -1102,9 +1124,9 @@ class CfnDashboard(
 
         @builtins.property
         def status(self) -> typing.Optional[builtins.str]:
-            '''The status of the schedule.
+            '''Specifies whether the refresh schedule is enabled.
 
-            Supported values are ENABLED and DISABLED.
+            Set the value to ``ENABLED`` to enable the refresh schedule, or to ``DISABLED`` to turn off the refresh schedule.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-dashboard-refreshschedule.html#cfn-cloudtrail-dashboard-refreshschedule-status
             '''
@@ -1113,7 +1135,9 @@ class CfnDashboard(
 
         @builtins.property
         def time_of_day(self) -> typing.Optional[builtins.str]:
-            '''StartTime of the automatic schedule refresh.
+            '''The time of day in UTC to run the schedule;
+
+            for hourly only refer to minutes; default is 00:00.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-dashboard-refreshschedule.html#cfn-cloudtrail-dashboard-refreshschedule-timeofday
             '''
@@ -1148,11 +1172,11 @@ class CfnDashboard(
             query_parameters: typing.Optional[typing.Sequence[builtins.str]] = None,
             view_properties: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
         ) -> None:
-            '''The dashboard widget.
+            '''Contains information about a widget on a CloudTrail Lake dashboard.
 
-            :param query_statement: The SQL query statement on one or more event data stores.
-            :param query_parameters: The placeholder keys in the QueryStatement. For example: $StartTime$, $EndTime$, $Period$.
-            :param view_properties: The view properties of the widget.
+            :param query_statement: The query statement for the widget. For custom dashboard widgets, you can query across multiple event data stores as long as all event data stores exist in your account. .. epigraph:: When a query uses ``?`` with ``eventTime`` , ``?`` must be surrounded by single quotes as follows: ``'?'`` .
+            :param query_parameters: The optional query parameters. The following query parameters are valid: ``$StartTime$`` , ``$EndTime$`` , and ``$Period$`` .
+            :param view_properties: The view properties for the widget. For more information about view properties, see `View properties for widgets <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/lake-widget-properties.html>`_ in the *AWS CloudTrail User Guide* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-dashboard-widget.html
             :exampleMetadata: fixture=_generated
@@ -1188,7 +1212,12 @@ class CfnDashboard(
 
         @builtins.property
         def query_statement(self) -> builtins.str:
-            '''The SQL query statement on one or more event data stores.
+            '''The query statement for the widget.
+
+            For custom dashboard widgets, you can query across multiple event data stores as long as all event data stores exist in your account.
+            .. epigraph::
+
+               When a query uses ``?`` with ``eventTime`` , ``?`` must be surrounded by single quotes as follows: ``'?'`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-dashboard-widget.html#cfn-cloudtrail-dashboard-widget-querystatement
             '''
@@ -1198,9 +1227,9 @@ class CfnDashboard(
 
         @builtins.property
         def query_parameters(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''The placeholder keys in the QueryStatement.
+            '''The optional query parameters.
 
-            For example: $StartTime$, $EndTime$, $Period$.
+            The following query parameters are valid: ``$StartTime$`` , ``$EndTime$`` , and ``$Period$`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-dashboard-widget.html#cfn-cloudtrail-dashboard-widget-queryparameters
             '''
@@ -1211,7 +1240,9 @@ class CfnDashboard(
         def view_properties(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
-            '''The view properties of the widget.
+            '''The view properties for the widget.
+
+            For more information about view properties, see `View properties for widgets <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/lake-widget-properties.html>`_ in the *AWS CloudTrail User Guide* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-dashboard-widget.html#cfn-cloudtrail-dashboard-widget-viewproperties
             '''
@@ -1253,11 +1284,11 @@ class CfnDashboardProps:
     ) -> None:
         '''Properties for defining a ``CfnDashboard``.
 
-        :param name: The name of the dashboard.
-        :param refresh_schedule: Configures the automatic refresh schedule for the dashboard. Includes the frequency unit (DAYS or HOURS) and value, as well as the status (ENABLED or DISABLED) of the refresh schedule.
-        :param tags: 
-        :param termination_protection_enabled: Indicates whether the dashboard is protected from termination.
-        :param widgets: List of widgets on the dashboard.
+        :param name: The name of the dashboard. The name must be unique to your account. To create the Highlights dashboard, the name must be ``AWSCloudTrail-Highlights`` .
+        :param refresh_schedule: The schedule for a dashboard refresh.
+        :param tags: A list of tags.
+        :param termination_protection_enabled: Specifies whether termination protection is enabled for the dashboard. If termination protection is enabled, you cannot delete the dashboard until termination protection is disabled.
+        :param widgets: An array of widgets for a custom dashboard. A custom dashboard can have a maximum of ten widgets. You do not need to specify widgets for the Highlights dashboard.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-dashboard.html
         :exampleMetadata: fixture=_generated
@@ -1315,7 +1346,9 @@ class CfnDashboardProps:
 
     @builtins.property
     def name(self) -> typing.Optional[builtins.str]:
-        '''The name of the dashboard.
+        '''The name of the dashboard. The name must be unique to your account.
+
+        To create the Highlights dashboard, the name must be ``AWSCloudTrail-Highlights`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-dashboard.html#cfn-cloudtrail-dashboard-name
         '''
@@ -1326,9 +1359,7 @@ class CfnDashboardProps:
     def refresh_schedule(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDashboard.RefreshScheduleProperty]]:
-        '''Configures the automatic refresh schedule for the dashboard.
-
-        Includes the frequency unit (DAYS or HOURS) and value, as well as the status (ENABLED or DISABLED) of the refresh schedule.
+        '''The schedule for a dashboard refresh.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-dashboard.html#cfn-cloudtrail-dashboard-refreshschedule
         '''
@@ -1337,7 +1368,8 @@ class CfnDashboardProps:
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''
+        '''A list of tags.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-dashboard.html#cfn-cloudtrail-dashboard-tags
         '''
         result = self._values.get("tags")
@@ -1347,7 +1379,9 @@ class CfnDashboardProps:
     def termination_protection_enabled(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Indicates whether the dashboard is protected from termination.
+        '''Specifies whether termination protection is enabled for the dashboard.
+
+        If termination protection is enabled, you cannot delete the dashboard until termination protection is disabled.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-dashboard.html#cfn-cloudtrail-dashboard-terminationprotectionenabled
         '''
@@ -1358,7 +1392,9 @@ class CfnDashboardProps:
     def widgets(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnDashboard.WidgetProperty]]]]:
-        '''List of widgets on the dashboard.
+        '''An array of widgets for a custom dashboard. A custom dashboard can have a maximum of ten widgets.
+
+        You do not need to specify widgets for the Highlights dashboard.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-dashboard.html#cfn-cloudtrail-dashboard-widgets
         '''
@@ -2552,7 +2588,7 @@ class CfnResourcePolicy(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_cloudtrail.CfnResourcePolicy",
 ):
-    '''Attaches a resource-based permission policy to a CloudTrail channel that is used for an integration with an event source outside of AWS .
+    '''Attaches a resource-based permission policy to a CloudTrail event data store, dashboard, or channel.
 
     For more information about resource-based policies, see `CloudTrail resource-based policy examples <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/security_iam_resource-based-policy-examples.html>`_ in the *CloudTrail User Guide* .
 
@@ -2585,8 +2621,8 @@ class CfnResourcePolicy(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param resource_arn: The Amazon Resource Name (ARN) of the CloudTrail channel attached to the resource-based policy. The following is the format of a resource ARN: ``arn:aws:cloudtrail:us-east-2:123456789012:channel/MyChannel`` .
-        :param resource_policy: A JSON-formatted string for an AWS resource-based policy. The following are requirements for the resource policy: - Contains only one action: cloudtrail-data:PutAuditEvents - Contains at least one statement. The policy can have a maximum of 20 statements. - Each statement contains at least one principal. A statement can have a maximum of 50 principals.
+        :param resource_arn: The Amazon Resource Name (ARN) of the CloudTrail event data store, dashboard, or channel attached to the resource-based policy. Example event data store ARN format: ``arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE`` Example dashboard ARN format: ``arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash`` Example channel ARN format: ``arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890``
+        :param resource_policy: A JSON-formatted string for an AWS resource-based policy. For example resource-based policies, see `CloudTrail resource-based policy examples <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/security_iam_resource-based-policy-examples.html>`_ in the *CloudTrail User Guide* .
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e63ea1d0937535109b462c5587b69e94988e2caeb02b49177c8a53040c569033)
@@ -2636,7 +2672,7 @@ class CfnResourcePolicy(
     @builtins.property
     @jsii.member(jsii_name="resourceArn")
     def resource_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) of the CloudTrail channel attached to the resource-based policy.'''
+        '''The Amazon Resource Name (ARN) of the CloudTrail event data store, dashboard, or channel attached to the resource-based policy.'''
         return typing.cast(builtins.str, jsii.get(self, "resourceArn"))
 
     @resource_arn.setter
@@ -2674,8 +2710,8 @@ class CfnResourcePolicyProps:
     ) -> None:
         '''Properties for defining a ``CfnResourcePolicy``.
 
-        :param resource_arn: The Amazon Resource Name (ARN) of the CloudTrail channel attached to the resource-based policy. The following is the format of a resource ARN: ``arn:aws:cloudtrail:us-east-2:123456789012:channel/MyChannel`` .
-        :param resource_policy: A JSON-formatted string for an AWS resource-based policy. The following are requirements for the resource policy: - Contains only one action: cloudtrail-data:PutAuditEvents - Contains at least one statement. The policy can have a maximum of 20 statements. - Each statement contains at least one principal. A statement can have a maximum of 50 principals.
+        :param resource_arn: The Amazon Resource Name (ARN) of the CloudTrail event data store, dashboard, or channel attached to the resource-based policy. Example event data store ARN format: ``arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE`` Example dashboard ARN format: ``arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash`` Example channel ARN format: ``arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890``
+        :param resource_policy: A JSON-formatted string for an AWS resource-based policy. For example resource-based policies, see `CloudTrail resource-based policy examples <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/security_iam_resource-based-policy-examples.html>`_ in the *CloudTrail User Guide* .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-resourcepolicy.html
         :exampleMetadata: fixture=_generated
@@ -2704,9 +2740,13 @@ class CfnResourcePolicyProps:
 
     @builtins.property
     def resource_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) of the CloudTrail channel attached to the resource-based policy.
+        '''The Amazon Resource Name (ARN) of the CloudTrail event data store, dashboard, or channel attached to the resource-based policy.
+
+        Example event data store ARN format: ``arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE``
 
-        The following is the format of a resource ARN: ``arn:aws:cloudtrail:us-east-2:123456789012:channel/MyChannel`` .
+        Example dashboard ARN format: ``arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash``
+
+        Example channel ARN format: ``arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890``
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-resourcepolicy.html#cfn-cloudtrail-resourcepolicy-resourcearn
         '''
@@ -2718,11 +2758,7 @@ class CfnResourcePolicyProps:
     def resource_policy(self) -> typing.Any:
         '''A JSON-formatted string for an AWS resource-based policy.
 
-        The following are requirements for the resource policy:
-
-        - Contains only one action: cloudtrail-data:PutAuditEvents
-        - Contains at least one statement. The policy can have a maximum of 20 statements.
-        - Each statement contains at least one principal. A statement can have a maximum of 50 principals.
+        For example resource-based policies, see `CloudTrail resource-based policy examples <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/security_iam_resource-based-policy-examples.html>`_ in the *CloudTrail User Guide* .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-resourcepolicy.html#cfn-cloudtrail-resourcepolicy-resourcepolicy
         '''

aws_cdk/aws_cloudwatch/__init__.py

@@ -8308,16 +8308,21 @@ class MathExpression(
 
     Example::
 
-        # fn: lambda.Function
-        
+        # matchmaking_rule_set: gamelift.MatchmakingRuleSet
         
-        all_problems = cloudwatch.MathExpression(
-            expression="errors + throttles",
+        # Alarm that triggers when the per-second average of not placed matches exceed 10%
+        rule_evaluation_ratio = cloudwatch.MathExpression(
+            expression="1 - (ruleEvaluationsPassed / ruleEvaluationsFailed)",
             using_metrics={
-                "errors": fn.metric_errors(),
-                "throttles": fn.metric_throttles()
+                "rule_evaluations_passed": matchmaking_rule_set.metric_rule_evaluations_passed(statistic=cloudwatch.Statistic.SUM),
+                "rule_evaluations_failed": matchmaking_rule_set.metric("ruleEvaluationsFailed")
             }
         )
+        cloudwatch.Alarm(self, "Alarm",
+            metric=rule_evaluation_ratio,
+            threshold=0.1,
+            evaluation_periods=3
+        )
     '''
 
     def __init__(
@@ -8333,7 +8338,7 @@ class MathExpression(
     ) -> None:
         '''
         :param expression: The expression defining the metric. When an expression contains a SEARCH function, it cannot be used within an Alarm.
-        :param using_metrics: The metrics used in the expression, in a map. The key is the identifier that represents the given metric in the expression, and the value is the actual Metric object. Default: - Empty map.
+        :param using_metrics: The metrics used in the expression, in a map. The key is the identifier that represents the given metric in the expression, and the value is the actual Metric object. The ``period`` of each metric in ``usingMetrics`` is ignored and instead overridden by the ``period`` specified for the ``MathExpression`` construct. Even if no ``period`` is specified for the ``MathExpression``, it will be overridden by the default value (``Duration.minutes(5)``). Example:: declare const metrics: elbv2.IApplicationLoadBalancerMetrics; new cloudwatch.MathExpression({ expression: 'm1+m2', label: 'AlbErrors', usingMetrics: { m1: metrics.custom('HTTPCode_ELB_500_Count', { period: Duration.minutes(1), // <- This period will be ignored statistic: 'Sum', label: 'HTTPCode_ELB_500_Count', }), m2: metrics.custom('HTTPCode_ELB_502_Count', { period: Duration.minutes(1), // <- This period will be ignored statistic: 'Sum', label: 'HTTPCode_ELB_502_Count', }), }, period: Duration.minutes(3), // <- This overrides the period of each metric in `usingMetrics` // (Even if not specified, it is overridden by the default value) }); Default: - Empty map.
         :param color: Color for this metric when added to a Graph in a Dashboard. Default: - Automatic color
         :param label: Label for this expression when added to a Graph in a Dashboard. If this expression evaluates to more than one time series (for example, through the use of ``METRICS()`` or ``SEARCH()`` expressions), each time series will appear in the graph using a combination of the expression label and the individual metric label. Specify the empty string (``''``) to suppress the expression label and only keep the metric label. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. If the math expression produces more than one time series, the maximum will be shown for each individual time series produce by this math expression. Default: - Expression value is used as label
         :param period: The period over which the expression's statistics are applied. This period overrides all periods in the metrics used in this math expression. Default: Duration.minutes(5)
@@ -8688,22 +8693,27 @@ class MathExpressionProps(MathExpressionOptions):
         :param search_account: Account to evaluate search expressions within. Specifying a searchAccount has no effect to the account used for metrics within the expression (passed via usingMetrics). Default: - Deployment account.
         :param search_region: Region to evaluate search expressions within. Specifying a searchRegion has no effect to the region used for metrics within the expression (passed via usingMetrics). Default: - Deployment region.
         :param expression: The expression defining the metric. When an expression contains a SEARCH function, it cannot be used within an Alarm.
-        :param using_metrics: The metrics used in the expression, in a map. The key is the identifier that represents the given metric in the expression, and the value is the actual Metric object. Default: - Empty map.
+        :param using_metrics: The metrics used in the expression, in a map. The key is the identifier that represents the given metric in the expression, and the value is the actual Metric object. The ``period`` of each metric in ``usingMetrics`` is ignored and instead overridden by the ``period`` specified for the ``MathExpression`` construct. Even if no ``period`` is specified for the ``MathExpression``, it will be overridden by the default value (``Duration.minutes(5)``). Example:: declare const metrics: elbv2.IApplicationLoadBalancerMetrics; new cloudwatch.MathExpression({ expression: 'm1+m2', label: 'AlbErrors', usingMetrics: { m1: metrics.custom('HTTPCode_ELB_500_Count', { period: Duration.minutes(1), // <- This period will be ignored statistic: 'Sum', label: 'HTTPCode_ELB_500_Count', }), m2: metrics.custom('HTTPCode_ELB_502_Count', { period: Duration.minutes(1), // <- This period will be ignored statistic: 'Sum', label: 'HTTPCode_ELB_502_Count', }), }, period: Duration.minutes(3), // <- This overrides the period of each metric in `usingMetrics` // (Even if not specified, it is overridden by the default value) }); Default: - Empty map.
 
         :exampleMetadata: infused
 
         Example::
 
-            # fn: lambda.Function
-            
+            # matchmaking_rule_set: gamelift.MatchmakingRuleSet
             
-            all_problems = cloudwatch.MathExpression(
-                expression="errors + throttles",
+            # Alarm that triggers when the per-second average of not placed matches exceed 10%
+            rule_evaluation_ratio = cloudwatch.MathExpression(
+                expression="1 - (ruleEvaluationsPassed / ruleEvaluationsFailed)",
                 using_metrics={
-                    "errors": fn.metric_errors(),
-                    "throttles": fn.metric_throttles()
+                    "rule_evaluations_passed": matchmaking_rule_set.metric_rule_evaluations_passed(statistic=cloudwatch.Statistic.SUM),
+                    "rule_evaluations_failed": matchmaking_rule_set.metric("ruleEvaluationsFailed")
                 }
             )
+            cloudwatch.Alarm(self, "Alarm",
+                metric=rule_evaluation_ratio,
+                threshold=0.1,
+                evaluation_periods=3
+            )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7cfb588e44acd0977aa0e09f00c3e2435bad84385ab7b6d163b332963d844e0a)
@@ -8821,6 +8831,33 @@ class MathExpressionProps(MathExpressionOptions):
         The key is the identifier that represents the given metric in the
         expression, and the value is the actual Metric object.
 
+        The ``period`` of each metric in ``usingMetrics`` is ignored and instead overridden
+        by the ``period`` specified for the ``MathExpression`` construct. Even if no ``period``
+        is specified for the ``MathExpression``, it will be overridden by the default
+        value (``Duration.minutes(5)``).
+
+        Example::
+
+           # metrics: elbv2.IApplicationLoadBalancerMetrics
+
+           cloudwatch.MathExpression(
+               expression="m1+m2",
+               label="AlbErrors",
+               using_metrics={
+                   "m1": metrics.custom("HTTPCode_ELB_500_Count",
+                       period=Duration.minutes(1),  # <- This period will be ignored
+                       statistic="Sum",
+                       label="HTTPCode_ELB_500_Count"
+                   ),
+                   "m2": metrics.custom("HTTPCode_ELB_502_Count",
+                       period=Duration.minutes(1),  # <- This period will be ignored
+                       statistic="Sum",
+                       label="HTTPCode_ELB_502_Count"
+                   )
+               },
+               period=Duration.minutes(3)
+           )
+
         :default: - Empty map.
         '''
         result = self._values.get("using_metrics")