aws-cdk-lib 2.175.1__py3-none-any.whl → 2.176.0__py3-none-any.whl

aws_cdk/aws_rds/__init__.py

@@ -1664,7 +1664,7 @@ rds.DatabaseCluster(self, "LimitlessDatabaseCluster",
         version=rds.AuroraPostgresEngineVersion.VER_16_4_LIMITLESS
     ),
     vpc=vpc,
-    cluster_scailability_type=rds.ClusterScailabilityType.LIMITLESS,
+    cluster_scalability_type=rds.ClusterScalabilityType.LIMITLESS,
     # Requires enabling Performance Insights
     enable_performance_insights=True,
     performance_insight_retention=rds.PerformanceInsightRetention.MONTHS_1,
@@ -19600,6 +19600,28 @@ class ClusterInstanceType(
 
 @jsii.enum(jsii_type="aws-cdk-lib.aws_rds.ClusterScailabilityType")
 class ClusterScailabilityType(enum.Enum):
+    '''(deprecated) The scalability mode of the Aurora DB cluster.
+
+    :deprecated: Use ClusterScalabilityType instead. This will be removed in the next major version.
+
+    :stability: deprecated
+    '''
+
+    STANDARD = "STANDARD"
+    '''(deprecated) The cluster uses normal DB instance creation.
+
+    :stability: deprecated
+    '''
+    LIMITLESS = "LIMITLESS"
+    '''(deprecated) The cluster operates as an Aurora Limitless Database, allowing you to create a DB shard group for horizontal scaling (sharding) capabilities.
+
+    :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/limitless.html
+    :stability: deprecated
+    '''
+
+
+@jsii.enum(jsii_type="aws-cdk-lib.aws_rds.ClusterScalabilityType")
+class ClusterScalabilityType(enum.Enum):
     '''The scalability mode of the Aurora DB cluster.
 
     :exampleMetadata: infused
@@ -19614,7 +19636,7 @@ class ClusterScailabilityType(enum.Enum):
                 version=rds.AuroraPostgresEngineVersion.VER_16_4_LIMITLESS
             ),
             vpc=vpc,
-            cluster_scailability_type=rds.ClusterScailabilityType.LIMITLESS,
+            cluster_scalability_type=rds.ClusterScalabilityType.LIMITLESS,
             # Requires enabling Performance Insights
             enable_performance_insights=True,
             performance_insight_retention=rds.PerformanceInsightRetention.MONTHS_1,
@@ -20777,6 +20799,7 @@ class DatabaseClusterEngine(
         "cloudwatch_logs_retention_role": "cloudwatchLogsRetentionRole",
         "cluster_identifier": "clusterIdentifier",
         "cluster_scailability_type": "clusterScailabilityType",
+        "cluster_scalability_type": "clusterScalabilityType",
         "copy_tags_to_snapshot": "copyTagsToSnapshot",
         "credentials": "credentials",
         "default_database_name": "defaultDatabaseName",
@@ -20834,6 +20857,7 @@ class DatabaseClusterFromSnapshotProps:
         cloudwatch_logs_retention_role: typing.Optional[_IRole_235f5d8e] = None,
         cluster_identifier: typing.Optional[builtins.str] = None,
         cluster_scailability_type: typing.Optional[ClusterScailabilityType] = None,
+        cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
         copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
         credentials: typing.Optional[Credentials] = None,
         default_database_name: typing.Optional[builtins.str] = None,
@@ -20887,7 +20911,8 @@ class DatabaseClusterFromSnapshotProps:
         :param cloudwatch_logs_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``Infinity``. Default: - logs never expire
         :param cloudwatch_logs_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. Default: - a new role is created.
         :param cluster_identifier: An optional identifier for the cluster. Default: - A name is automatically generated.
-        :param cluster_scailability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScailabilityType.STANDARD
+        :param cluster_scailability_type: (deprecated) [Misspelled] Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScailabilityType.STANDARD
+        :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScalabilityType.STANDARD
         :param copy_tags_to_snapshot: Whether to copy tags to the snapshot when a snapshot is created. Default: - true
         :param credentials: (deprecated) Credentials for the administrative user. Note - using this prop only works with ``Credentials.fromPassword()`` with the username of the snapshot, ``Credentials.fromUsername()`` with the username and password of the snapshot or ``Credentials.fromSecret()`` with a secret containing the username and password of the snapshot. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password that **will not be applied** to the cluster, use ``snapshotCredentials`` for the correct behavior.
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
@@ -20961,6 +20986,7 @@ class DatabaseClusterFromSnapshotProps:
             check_type(argname="argument cloudwatch_logs_retention_role", value=cloudwatch_logs_retention_role, expected_type=type_hints["cloudwatch_logs_retention_role"])
             check_type(argname="argument cluster_identifier", value=cluster_identifier, expected_type=type_hints["cluster_identifier"])
             check_type(argname="argument cluster_scailability_type", value=cluster_scailability_type, expected_type=type_hints["cluster_scailability_type"])
+            check_type(argname="argument cluster_scalability_type", value=cluster_scalability_type, expected_type=type_hints["cluster_scalability_type"])
             check_type(argname="argument copy_tags_to_snapshot", value=copy_tags_to_snapshot, expected_type=type_hints["copy_tags_to_snapshot"])
             check_type(argname="argument credentials", value=credentials, expected_type=type_hints["credentials"])
             check_type(argname="argument default_database_name", value=default_database_name, expected_type=type_hints["default_database_name"])
@@ -21022,6 +21048,8 @@ class DatabaseClusterFromSnapshotProps:
             self._values["cluster_identifier"] = cluster_identifier
         if cluster_scailability_type is not None:
             self._values["cluster_scailability_type"] = cluster_scailability_type
+        if cluster_scalability_type is not None:
+            self._values["cluster_scalability_type"] = cluster_scalability_type
         if copy_tags_to_snapshot is not None:
             self._values["copy_tags_to_snapshot"] = copy_tags_to_snapshot
         if credentials is not None:
@@ -21203,15 +21231,30 @@ class DatabaseClusterFromSnapshotProps:
 
     @builtins.property
     def cluster_scailability_type(self) -> typing.Optional[ClusterScailabilityType]:
-        '''Specifies the scalability mode of the Aurora DB cluster.
+        '''(deprecated) [Misspelled] Specifies the scalability mode of the Aurora DB cluster.
 
         Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD.
 
         :default: ClusterScailabilityType.STANDARD
+
+        :deprecated: Use clusterScalabilityType instead. This will be removed in the next major version.
+
+        :stability: deprecated
         '''
         result = self._values.get("cluster_scailability_type")
         return typing.cast(typing.Optional[ClusterScailabilityType], result)
 
+    @builtins.property
+    def cluster_scalability_type(self) -> typing.Optional[ClusterScalabilityType]:
+        '''Specifies the scalability mode of the Aurora DB cluster.
+
+        Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD.
+
+        :default: ClusterScalabilityType.STANDARD
+        '''
+        result = self._values.get("cluster_scalability_type")
+        return typing.cast(typing.Optional[ClusterScalabilityType], result)
+
     @builtins.property
     def copy_tags_to_snapshot(self) -> typing.Optional[builtins.bool]:
         '''Whether to copy tags to the snapshot when a snapshot is created.
@@ -21716,6 +21759,7 @@ class DatabaseClusterFromSnapshotProps:
         "cloudwatch_logs_retention_role": "cloudwatchLogsRetentionRole",
         "cluster_identifier": "clusterIdentifier",
         "cluster_scailability_type": "clusterScailabilityType",
+        "cluster_scalability_type": "clusterScalabilityType",
         "copy_tags_to_snapshot": "copyTagsToSnapshot",
         "credentials": "credentials",
         "default_database_name": "defaultDatabaseName",
@@ -21771,6 +21815,7 @@ class DatabaseClusterProps:
         cloudwatch_logs_retention_role: typing.Optional[_IRole_235f5d8e] = None,
         cluster_identifier: typing.Optional[builtins.str] = None,
         cluster_scailability_type: typing.Optional[ClusterScailabilityType] = None,
+        cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
         copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
         credentials: typing.Optional[Credentials] = None,
         default_database_name: typing.Optional[builtins.str] = None,
@@ -21822,7 +21867,8 @@ class DatabaseClusterProps:
         :param cloudwatch_logs_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``Infinity``. Default: - logs never expire
         :param cloudwatch_logs_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. Default: - a new role is created.
         :param cluster_identifier: An optional identifier for the cluster. Default: - A name is automatically generated.
-        :param cluster_scailability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScailabilityType.STANDARD
+        :param cluster_scailability_type: (deprecated) [Misspelled] Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScailabilityType.STANDARD
+        :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScalabilityType.STANDARD
         :param copy_tags_to_snapshot: Whether to copy tags to the snapshot when a snapshot is created. Default: - true
         :param credentials: Credentials for the administrative user. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
@@ -21903,6 +21949,7 @@ class DatabaseClusterProps:
             check_type(argname="argument cloudwatch_logs_retention_role", value=cloudwatch_logs_retention_role, expected_type=type_hints["cloudwatch_logs_retention_role"])
             check_type(argname="argument cluster_identifier", value=cluster_identifier, expected_type=type_hints["cluster_identifier"])
             check_type(argname="argument cluster_scailability_type", value=cluster_scailability_type, expected_type=type_hints["cluster_scailability_type"])
+            check_type(argname="argument cluster_scalability_type", value=cluster_scalability_type, expected_type=type_hints["cluster_scalability_type"])
             check_type(argname="argument copy_tags_to_snapshot", value=copy_tags_to_snapshot, expected_type=type_hints["copy_tags_to_snapshot"])
             check_type(argname="argument credentials", value=credentials, expected_type=type_hints["credentials"])
             check_type(argname="argument default_database_name", value=default_database_name, expected_type=type_hints["default_database_name"])
@@ -21962,6 +22009,8 @@ class DatabaseClusterProps:
             self._values["cluster_identifier"] = cluster_identifier
         if cluster_scailability_type is not None:
             self._values["cluster_scailability_type"] = cluster_scailability_type
+        if cluster_scalability_type is not None:
+            self._values["cluster_scalability_type"] = cluster_scalability_type
         if copy_tags_to_snapshot is not None:
             self._values["copy_tags_to_snapshot"] = copy_tags_to_snapshot
         if credentials is not None:
@@ -22130,15 +22179,30 @@ class DatabaseClusterProps:
 
     @builtins.property
     def cluster_scailability_type(self) -> typing.Optional[ClusterScailabilityType]:
-        '''Specifies the scalability mode of the Aurora DB cluster.
+        '''(deprecated) [Misspelled] Specifies the scalability mode of the Aurora DB cluster.
 
         Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD.
 
         :default: ClusterScailabilityType.STANDARD
+
+        :deprecated: Use clusterScalabilityType instead. This will be removed in the next major version.
+
+        :stability: deprecated
         '''
         result = self._values.get("cluster_scailability_type")
         return typing.cast(typing.Optional[ClusterScailabilityType], result)
 
+    @builtins.property
+    def cluster_scalability_type(self) -> typing.Optional[ClusterScalabilityType]:
+        '''Specifies the scalability mode of the Aurora DB cluster.
+
+        Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD.
+
+        :default: ClusterScalabilityType.STANDARD
+        '''
+        result = self._values.get("cluster_scalability_type")
+        return typing.cast(typing.Optional[ClusterScalabilityType], result)
+
     @builtins.property
     def copy_tags_to_snapshot(self) -> typing.Optional[builtins.bool]:
         '''Whether to copy tags to the snapshot when a snapshot is created.
@@ -41389,6 +41453,7 @@ class DatabaseClusterFromSnapshot(
         cloudwatch_logs_retention_role: typing.Optional[_IRole_235f5d8e] = None,
         cluster_identifier: typing.Optional[builtins.str] = None,
         cluster_scailability_type: typing.Optional[ClusterScailabilityType] = None,
+        cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
         copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
         credentials: typing.Optional[Credentials] = None,
         default_database_name: typing.Optional[builtins.str] = None,
@@ -41443,7 +41508,8 @@ class DatabaseClusterFromSnapshot(
         :param cloudwatch_logs_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``Infinity``. Default: - logs never expire
         :param cloudwatch_logs_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. Default: - a new role is created.
         :param cluster_identifier: An optional identifier for the cluster. Default: - A name is automatically generated.
-        :param cluster_scailability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScailabilityType.STANDARD
+        :param cluster_scailability_type: (deprecated) [Misspelled] Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScailabilityType.STANDARD
+        :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScalabilityType.STANDARD
         :param copy_tags_to_snapshot: Whether to copy tags to the snapshot when a snapshot is created. Default: - true
         :param credentials: (deprecated) Credentials for the administrative user. Note - using this prop only works with ``Credentials.fromPassword()`` with the username of the snapshot, ``Credentials.fromUsername()`` with the username and password of the snapshot or ``Credentials.fromSecret()`` with a secret containing the username and password of the snapshot. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password that **will not be applied** to the cluster, use ``snapshotCredentials`` for the correct behavior.
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
@@ -41501,6 +41567,7 @@ class DatabaseClusterFromSnapshot(
             cloudwatch_logs_retention_role=cloudwatch_logs_retention_role,
             cluster_identifier=cluster_identifier,
             cluster_scailability_type=cluster_scailability_type,
+            cluster_scalability_type=cluster_scalability_type,
             copy_tags_to_snapshot=copy_tags_to_snapshot,
             credentials=credentials,
             default_database_name=default_database_name,
@@ -45480,6 +45547,7 @@ class DatabaseCluster(
         cloudwatch_logs_retention_role: typing.Optional[_IRole_235f5d8e] = None,
         cluster_identifier: typing.Optional[builtins.str] = None,
         cluster_scailability_type: typing.Optional[ClusterScailabilityType] = None,
+        cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
         copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
         credentials: typing.Optional[Credentials] = None,
         default_database_name: typing.Optional[builtins.str] = None,
@@ -45532,7 +45600,8 @@ class DatabaseCluster(
         :param cloudwatch_logs_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``Infinity``. Default: - logs never expire
         :param cloudwatch_logs_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. Default: - a new role is created.
         :param cluster_identifier: An optional identifier for the cluster. Default: - A name is automatically generated.
-        :param cluster_scailability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScailabilityType.STANDARD
+        :param cluster_scailability_type: (deprecated) [Misspelled] Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScailabilityType.STANDARD
+        :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScalabilityType.STANDARD
         :param copy_tags_to_snapshot: Whether to copy tags to the snapshot when a snapshot is created. Default: - true
         :param credentials: Credentials for the administrative user. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
@@ -45588,6 +45657,7 @@ class DatabaseCluster(
             cloudwatch_logs_retention_role=cloudwatch_logs_retention_role,
             cluster_identifier=cluster_identifier,
             cluster_scailability_type=cluster_scailability_type,
+            cluster_scalability_type=cluster_scalability_type,
             copy_tags_to_snapshot=copy_tags_to_snapshot,
             credentials=credentials,
             default_database_name=default_database_name,
@@ -46483,6 +46553,7 @@ __all__ = [
     "ClusterInstanceProps",
     "ClusterInstanceType",
     "ClusterScailabilityType",
+    "ClusterScalabilityType",
     "CommonRotationUserOptions",
     "Credentials",
     "CredentialsBaseOptions",
@@ -49263,6 +49334,7 @@ def _typecheckingstub__1e44b5aef872ca17869a17181382f06cd0166bdbe07e2c33701d3bf1e
     cloudwatch_logs_retention_role: typing.Optional[_IRole_235f5d8e] = None,
     cluster_identifier: typing.Optional[builtins.str] = None,
     cluster_scailability_type: typing.Optional[ClusterScailabilityType] = None,
+    cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
     copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
     credentials: typing.Optional[Credentials] = None,
     default_database_name: typing.Optional[builtins.str] = None,
@@ -49319,6 +49391,7 @@ def _typecheckingstub__a32e21c90ab65d3cfdb3b7ef2a0d741ba1528ec8824cd1817d1e485b4
     cloudwatch_logs_retention_role: typing.Optional[_IRole_235f5d8e] = None,
     cluster_identifier: typing.Optional[builtins.str] = None,
     cluster_scailability_type: typing.Optional[ClusterScailabilityType] = None,
+    cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
     copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
     credentials: typing.Optional[Credentials] = None,
     default_database_name: typing.Optional[builtins.str] = None,
@@ -50533,6 +50606,7 @@ def _typecheckingstub__d1a2e259091e12a41b0f5818df495769518e049ebcc89ed340ffc7ba4
     cloudwatch_logs_retention_role: typing.Optional[_IRole_235f5d8e] = None,
     cluster_identifier: typing.Optional[builtins.str] = None,
     cluster_scailability_type: typing.Optional[ClusterScailabilityType] = None,
+    cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
     copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
     credentials: typing.Optional[Credentials] = None,
     default_database_name: typing.Optional[builtins.str] = None,
@@ -51024,6 +51098,7 @@ def _typecheckingstub__c6184cbbefaa372690b9776dafecbf5857cf9bfbab91d1666aad22c56
     cloudwatch_logs_retention_role: typing.Optional[_IRole_235f5d8e] = None,
     cluster_identifier: typing.Optional[builtins.str] = None,
     cluster_scailability_type: typing.Optional[ClusterScailabilityType] = None,
+    cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
     copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
     credentials: typing.Optional[Credentials] = None,
     default_database_name: typing.Optional[builtins.str] = None,

aws_cdk/aws_resiliencehub/__init__.py

@@ -128,6 +128,7 @@ class CfnApp(
                 cross_account_role_arns=["crossAccountRoleArns"],
                 invoker_role_name="invokerRoleName"
             ),
+            regulatory_policy_arn="regulatoryPolicyArn",
             resiliency_policy_arn="resiliencyPolicyArn",
             tags={
                 "tags_key": "tags"
@@ -147,6 +148,7 @@ class CfnApp(
         description: typing.Optional[builtins.str] = None,
         event_subscriptions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApp.EventSubscriptionProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         permission_model: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApp.PermissionModelProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        regulatory_policy_arn: typing.Optional[builtins.str] = None,
         resiliency_policy_arn: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     ) -> None:
@@ -160,6 +162,7 @@ class CfnApp(
         :param description: Optional description for an application.
         :param event_subscriptions: The list of events you would like to subscribe and get notification for. Currently, AWS Resilience Hub supports notifications only for *Drift detected* and *Scheduled assessment failure* events.
         :param permission_model: Defines the roles and credentials that AWS Resilience Hub would use while creating the application, importing its resources, and running an assessment.
+        :param regulatory_policy_arn: Amazon Resource Name (ARN) of the Regulatory Policy.
         :param resiliency_policy_arn: The Amazon Resource Name (ARN) of the resiliency policy.
         :param tags: Tags assigned to the resource. A tag is a label that you assign to an AWS resource. Each tag consists of a key/value pair.
         '''
@@ -175,6 +178,7 @@ class CfnApp(
             description=description,
             event_subscriptions=event_subscriptions,
             permission_model=permission_model,
+            regulatory_policy_arn=regulatory_policy_arn,
             resiliency_policy_arn=resiliency_policy_arn,
             tags=tags,
         )
@@ -346,6 +350,19 @@ class CfnApp(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "permissionModel", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="regulatoryPolicyArn")
+    def regulatory_policy_arn(self) -> typing.Optional[builtins.str]:
+        '''Amazon Resource Name (ARN) of the Regulatory Policy.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "regulatoryPolicyArn"))
+
+    @regulatory_policy_arn.setter
+    def regulatory_policy_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__cdb1fca52784c0725f4b57948dc7b1b7e1dffb05effe36f5ee6c00ae93c44230)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "regulatoryPolicyArn", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="resiliencyPolicyArn")
     def resiliency_policy_arn(self) -> typing.Optional[builtins.str]:
@@ -879,6 +896,7 @@ class CfnApp(
         "description": "description",
         "event_subscriptions": "eventSubscriptions",
         "permission_model": "permissionModel",
+        "regulatory_policy_arn": "regulatoryPolicyArn",
         "resiliency_policy_arn": "resiliencyPolicyArn",
         "tags": "tags",
     },
@@ -894,6 +912,7 @@ class CfnAppProps:
         description: typing.Optional[builtins.str] = None,
         event_subscriptions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.EventSubscriptionProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         permission_model: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.PermissionModelProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        regulatory_policy_arn: typing.Optional[builtins.str] = None,
         resiliency_policy_arn: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     ) -> None:
@@ -906,6 +925,7 @@ class CfnAppProps:
         :param description: Optional description for an application.
         :param event_subscriptions: The list of events you would like to subscribe and get notification for. Currently, AWS Resilience Hub supports notifications only for *Drift detected* and *Scheduled assessment failure* events.
         :param permission_model: Defines the roles and credentials that AWS Resilience Hub would use while creating the application, importing its resources, and running an assessment.
+        :param regulatory_policy_arn: Amazon Resource Name (ARN) of the Regulatory Policy.
         :param resiliency_policy_arn: The Amazon Resource Name (ARN) of the resiliency policy.
         :param tags: Tags assigned to the resource. A tag is a label that you assign to an AWS resource. Each tag consists of a key/value pair.
 
@@ -956,6 +976,7 @@ class CfnAppProps:
                     cross_account_role_arns=["crossAccountRoleArns"],
                     invoker_role_name="invokerRoleName"
                 ),
+                regulatory_policy_arn="regulatoryPolicyArn",
                 resiliency_policy_arn="resiliencyPolicyArn",
                 tags={
                     "tags_key": "tags"
@@ -971,6 +992,7 @@ class CfnAppProps:
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
             check_type(argname="argument event_subscriptions", value=event_subscriptions, expected_type=type_hints["event_subscriptions"])
             check_type(argname="argument permission_model", value=permission_model, expected_type=type_hints["permission_model"])
+            check_type(argname="argument regulatory_policy_arn", value=regulatory_policy_arn, expected_type=type_hints["regulatory_policy_arn"])
             check_type(argname="argument resiliency_policy_arn", value=resiliency_policy_arn, expected_type=type_hints["resiliency_policy_arn"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -986,6 +1008,8 @@ class CfnAppProps:
             self._values["event_subscriptions"] = event_subscriptions
         if permission_model is not None:
             self._values["permission_model"] = permission_model
+        if regulatory_policy_arn is not None:
+            self._values["regulatory_policy_arn"] = regulatory_policy_arn
         if resiliency_policy_arn is not None:
             self._values["resiliency_policy_arn"] = resiliency_policy_arn
         if tags is not None:
@@ -1256,6 +1280,15 @@ class CfnAppProps:
         result = self._values.get("permission_model")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApp.PermissionModelProperty]], result)
 
+    @builtins.property
+    def regulatory_policy_arn(self) -> typing.Optional[builtins.str]:
+        '''Amazon Resource Name (ARN) of the Regulatory Policy.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resiliencehub-app.html#cfn-resiliencehub-app-regulatorypolicyarn
+        '''
+        result = self._values.get("regulatory_policy_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def resiliency_policy_arn(self) -> typing.Optional[builtins.str]:
         '''The Amazon Resource Name (ARN) of the resiliency policy.
@@ -1746,6 +1779,7 @@ def _typecheckingstub__303e76fc3650422653be00dea7484c071f68688b86b0b136d647cee73
     description: typing.Optional[builtins.str] = None,
     event_subscriptions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.EventSubscriptionProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     permission_model: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.PermissionModelProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    regulatory_policy_arn: typing.Optional[builtins.str] = None,
     resiliency_policy_arn: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
 ) -> None:
@@ -1806,6 +1840,12 @@ def _typecheckingstub__2e15df41e400e8a9cff1ec67cfe4cdb6224b7e0faa1f84a7164a3aff0
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__cdb1fca52784c0725f4b57948dc7b1b7e1dffb05effe36f5ee6c00ae93c44230(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__ce4ee431bd44e41d23a7b0df5a1d235166dfde2dcb98cb013d61da840d20b025(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -1867,6 +1907,7 @@ def _typecheckingstub__d4cbfaccc19fec8c2bd3f0ad17cdc9d5c9a66dbdcc7077312163442e7
     description: typing.Optional[builtins.str] = None,
     event_subscriptions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.EventSubscriptionProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     permission_model: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.PermissionModelProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    regulatory_policy_arn: typing.Optional[builtins.str] = None,
     resiliency_policy_arn: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
 ) -> None:

aws_cdk/aws_s3/__init__.py

@@ -1986,7 +1986,7 @@ class BucketProps:
         :param encryption_key: External KMS key to use for bucket encryption. The ``encryption`` property must be either not specified or set to ``KMS`` or ``DSSE``. An error will be emitted if ``encryption`` is set to ``UNENCRYPTED`` or ``S3_MANAGED``. Default: - If ``encryption`` is set to ``KMS`` and this property is undefined, a new KMS key will be created and associated with this bucket.
         :param enforce_ssl: Enforces SSL for requests. S3.5 of the AWS Foundational Security Best Practices Regarding S3. Default: false
         :param event_bridge_enabled: Whether this bucket should send notifications to Amazon EventBridge or not. Default: false
-        :param intelligent_tiering_configurations: Inteligent Tiering Configurations. Default: No Intelligent Tiiering Configurations.
+        :param intelligent_tiering_configurations: Intelligent Tiering Configurations. Default: No Intelligent Tiiering Configurations.
         :param inventories: The inventory configuration of the bucket. Default: - No inventory configuration
         :param lifecycle_rules: Rules that define how Amazon S3 manages objects during their lifetime. Default: - No lifecycle rules.
         :param metrics: The metrics configuration of this bucket. Default: - No metrics configuration.
@@ -2265,7 +2265,7 @@ class BucketProps:
     def intelligent_tiering_configurations(
         self,
     ) -> typing.Optional[typing.List["IntelligentTieringConfiguration"]]:
-        '''Inteligent Tiering Configurations.
+        '''Intelligent Tiering Configurations.
 
         :default: No Intelligent Tiiering Configurations.
 
@@ -10231,7 +10231,7 @@ class CfnBucket(
 
             :param storage_class: The storage class to which you want the object to transition.
             :param transition_date: Indicates when objects are transitioned to the specified storage class. The date value must be in ISO 8601 format. The time is always midnight UTC.
-            :param transition_in_days: Indicates the number of days after creation when objects are transitioned to the specified storage class. The value must be a positive integer.
+            :param transition_in_days: Indicates the number of days after creation when objects are transitioned to the specified storage class. If the specified storage class is ``INTELLIGENT_TIERING`` , ``GLACIER_IR`` , ``GLACIER`` , or ``DEEP_ARCHIVE`` , valid values are ``0`` or positive integers. If the specified storage class is ``STANDARD_IA`` or ``ONEZONE_IA`` , valid values are positive integers greater than ``30`` . Be aware that some storage classes have a minimum storage duration and that you're charged for transitioning objects before their minimum storage duration. For more information, see `Constraints and considerations for transitions <https://docs.aws.amazon.com/AmazonS3/latest/userguide/lifecycle-transition-general-considerations.html#lifecycle-configuration-constraints>`_ in the *Amazon S3 User Guide* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-transition.html
             :exampleMetadata: fixture=_generated
@@ -10290,7 +10290,7 @@ class CfnBucket(
         def transition_in_days(self) -> typing.Optional[jsii.Number]:
             '''Indicates the number of days after creation when objects are transitioned to the specified storage class.
 
-            The value must be a positive integer.
+            If the specified storage class is ``INTELLIGENT_TIERING`` , ``GLACIER_IR`` , ``GLACIER`` , or ``DEEP_ARCHIVE`` , valid values are ``0`` or positive integers. If the specified storage class is ``STANDARD_IA`` or ``ONEZONE_IA`` , valid values are positive integers greater than ``30`` . Be aware that some storage classes have a minimum storage duration and that you're charged for transitioning objects before their minimum storage duration. For more information, see `Constraints and considerations for transitions <https://docs.aws.amazon.com/AmazonS3/latest/userguide/lifecycle-transition-general-considerations.html#lifecycle-configuration-constraints>`_ in the *Amazon S3 User Guide* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-transition.html#cfn-s3-bucket-transition-transitionindays
             '''
@@ -19696,7 +19696,7 @@ class Bucket(
         :param encryption_key: External KMS key to use for bucket encryption. The ``encryption`` property must be either not specified or set to ``KMS`` or ``DSSE``. An error will be emitted if ``encryption`` is set to ``UNENCRYPTED`` or ``S3_MANAGED``. Default: - If ``encryption`` is set to ``KMS`` and this property is undefined, a new KMS key will be created and associated with this bucket.
         :param enforce_ssl: Enforces SSL for requests. S3.5 of the AWS Foundational Security Best Practices Regarding S3. Default: false
         :param event_bridge_enabled: Whether this bucket should send notifications to Amazon EventBridge or not. Default: false
-        :param intelligent_tiering_configurations: Inteligent Tiering Configurations. Default: No Intelligent Tiiering Configurations.
+        :param intelligent_tiering_configurations: Intelligent Tiering Configurations. Default: No Intelligent Tiiering Configurations.
         :param inventories: The inventory configuration of the bucket. Default: - No inventory configuration
         :param lifecycle_rules: Rules that define how Amazon S3 manages objects during their lifetime. Default: - No lifecycle rules.
         :param metrics: The metrics configuration of this bucket. Default: - No metrics configuration.

aws_cdk/aws_ses/__init__.py

@@ -772,7 +772,8 @@ class CfnConfigurationSet(
                 suppressed_reasons=["suppressedReasons"]
             ),
             tracking_options=ses.CfnConfigurationSet.TrackingOptionsProperty(
-                custom_redirect_domain="customRedirectDomain"
+                custom_redirect_domain="customRedirectDomain",
+                https_policy="httpsPolicy"
             ),
             vdm_options=ses.CfnConfigurationSet.VdmOptionsProperty(
                 dashboard_options=ses.CfnConfigurationSet.DashboardOptionsProperty(
@@ -1370,13 +1371,17 @@ class CfnConfigurationSet(
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_ses.CfnConfigurationSet.TrackingOptionsProperty",
         jsii_struct_bases=[],
-        name_mapping={"custom_redirect_domain": "customRedirectDomain"},
+        name_mapping={
+            "custom_redirect_domain": "customRedirectDomain",
+            "https_policy": "httpsPolicy",
+        },
     )
     class TrackingOptionsProperty:
         def __init__(
             self,
             *,
             custom_redirect_domain: typing.Optional[builtins.str] = None,
+            https_policy: typing.Optional[builtins.str] = None,
         ) -> None:
             '''An object that defines the tracking options for a configuration set.
 
@@ -1387,6 +1392,7 @@ class CfnConfigurationSet(
             For more information, see `Configuring Custom Domains to Handle Open and Click Tracking <https://docs.aws.amazon.com/ses/latest/dg/configure-custom-open-click-domains.html>`_ in the *Amazon SES Developer Guide* .
 
             :param custom_redirect_domain: The custom subdomain that is used to redirect email recipients to the Amazon SES event tracking domain.
+            :param https_policy: The https policy to use for tracking open and click events.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ses-configurationset-trackingoptions.html
             :exampleMetadata: fixture=_generated
@@ -1398,15 +1404,19 @@ class CfnConfigurationSet(
                 from aws_cdk import aws_ses as ses
                 
                 tracking_options_property = ses.CfnConfigurationSet.TrackingOptionsProperty(
-                    custom_redirect_domain="customRedirectDomain"
+                    custom_redirect_domain="customRedirectDomain",
+                    https_policy="httpsPolicy"
                 )
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__9cb3a7d8357d451a88f3bdd86fea15ef7d167ba61579a61a8e1fe9eb6bfa73f2)
                 check_type(argname="argument custom_redirect_domain", value=custom_redirect_domain, expected_type=type_hints["custom_redirect_domain"])
+                check_type(argname="argument https_policy", value=https_policy, expected_type=type_hints["https_policy"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
             if custom_redirect_domain is not None:
                 self._values["custom_redirect_domain"] = custom_redirect_domain
+            if https_policy is not None:
+                self._values["https_policy"] = https_policy
 
         @builtins.property
         def custom_redirect_domain(self) -> typing.Optional[builtins.str]:
@@ -1417,6 +1427,15 @@ class CfnConfigurationSet(
             result = self._values.get("custom_redirect_domain")
             return typing.cast(typing.Optional[builtins.str], result)
 
+        @builtins.property
+        def https_policy(self) -> typing.Optional[builtins.str]:
+            '''The https policy to use for tracking open and click events.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ses-configurationset-trackingoptions.html#cfn-ses-configurationset-trackingoptions-httpspolicy
+            '''
+            result = self._values.get("https_policy")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -2380,7 +2399,8 @@ class CfnConfigurationSetProps:
                     suppressed_reasons=["suppressedReasons"]
                 ),
                 tracking_options=ses.CfnConfigurationSet.TrackingOptionsProperty(
-                    custom_redirect_domain="customRedirectDomain"
+                    custom_redirect_domain="customRedirectDomain",
+                    https_policy="httpsPolicy"
                 ),
                 vdm_options=ses.CfnConfigurationSet.VdmOptionsProperty(
                     dashboard_options=ses.CfnConfigurationSet.DashboardOptionsProperty(
@@ -16937,6 +16957,7 @@ def _typecheckingstub__8d9a9f4a0b048a750b42ffb05bbf2f29193ab82552fe268e651a27bc5
 def _typecheckingstub__9cb3a7d8357d451a88f3bdd86fea15ef7d167ba61579a61a8e1fe9eb6bfa73f2(
     *,
     custom_redirect_domain: typing.Optional[builtins.str] = None,
+    https_policy: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass

aws_cdk/aws_ssm/__init__.py

@@ -4700,6 +4700,9 @@ class CfnParameter(
        To add, update, or remove tags during stack update, you must have IAM permissions for both ``ssm:AddTagsToResource`` and ``ssm:RemoveTagsFromResource`` . For more information, see `Managing Access Using Policies <https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam.html#security_iam_access-manage>`_ in the *AWS Systems Manager User Guide* .
 
     For information about valid values for parameters, see `About requirements and constraints for parameter names <https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-su-create.html#sysman-parameter-name-constraints>`_ in the *AWS Systems Manager User Guide* and `PutParameter <https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html>`_ in the *AWS Systems Manager API Reference* .
+    .. epigraph::
+
+       Parameters of type ``SecureString`` are not supported by AWS CloudFormation .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-parameter.html
     :cloudformationResource: AWS::SSM::Parameter
@@ -4746,7 +4749,7 @@ class CfnParameter(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param type: The type of parameter.
+        :param type: The type of parameter. .. epigraph:: Parameters of type ``SecureString`` are not supported by AWS CloudFormation .
         :param value: The parameter value. .. epigraph:: If type is ``StringList`` , the system returns a comma-separated string with no spaces between commas in the ``Value`` field.
         :param allowed_pattern: A regular expression used to validate the parameter value. For example, for ``String`` types with values restricted to numbers, you can specify the following: ``AllowedPattern=^\\d+$``
         :param data_type: The data type of the parameter, such as ``text`` or ``aws:ec2:image`` . The default is ``text`` .
@@ -4987,7 +4990,7 @@ class CfnParameterProps:
     ) -> None:
         '''Properties for defining a ``CfnParameter``.
 
-        :param type: The type of parameter.
+        :param type: The type of parameter. .. epigraph:: Parameters of type ``SecureString`` are not supported by AWS CloudFormation .
         :param value: The parameter value. .. epigraph:: If type is ``StringList`` , the system returns a comma-separated string with no spaces between commas in the ``Value`` field.
         :param allowed_pattern: A regular expression used to validate the parameter value. For example, for ``String`` types with values restricted to numbers, you can specify the following: ``AllowedPattern=^\\d+$``
         :param data_type: The data type of the parameter, such as ``text`` or ``aws:ec2:image`` . The default is ``text`` .
@@ -5056,6 +5059,10 @@ class CfnParameterProps:
     def type(self) -> builtins.str:
         '''The type of parameter.
 
+        .. epigraph::
+
+           Parameters of type ``SecureString`` are not supported by AWS CloudFormation .
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-parameter.html#cfn-ssm-parameter-type
         '''
         result = self._values.get("type")