aws-cdk-lib 2.175.1__py3-none-any.whl → 2.177.0__py3-none-any.whl

aws_cdk/aws_elasticloadbalancingv2/__init__.py

@@ -49,6 +49,13 @@ listener.add_targets("ApplicationFleet",
 The security groups of the load balancer and the target are automatically
 updated to allow the network traffic.
 
+> NOTE: If the `@aws-cdk/aws-elasticloadbalancingV2:albDualstackWithoutPublicIpv4SecurityGroupRulesDefault` feature flag is set (the default for new projects), and `addListener()` is called with `open: true`,
+> the load balancer's security group will automatically include both IPv4 and IPv6 ingress rules when using `IpAddressType.DUAL_STACK_WITHOUT_PUBLIC_IPV4`.
+>
+> For existing projects that only have IPv4 rules, you can opt-in to IPv6 ingress rules
+> by enabling the feature flag in your cdk.json file. Note that enabling this feature flag
+> will modify existing security group rules.
+
 One (or more) security groups can be associated with the load balancer;
 if a security group isn't provided, one will be automatically created.
 
@@ -260,7 +267,7 @@ For more information, see [Load balancer attributes](https://docs.aws.amazon.com
 ### Setting up Access Log Bucket on Application Load Balancer
 
 The only server-side encryption option that's supported is Amazon S3-managed keys (SSE-S3). For more information
-Documentation: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/enable-access-logging.html
+Documentation: [https://docs.aws.amazon.com/elasticloadbalancing/latest/application/enable-access-logging.html](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/enable-access-logging.html)
 
 ```python
 # vpc: ec2.Vpc
@@ -277,7 +284,7 @@ lb.log_access_logs(bucket)
 ### Setting up Connection Log Bucket on Application Load Balancer
 
 Like access log bucket, the only server-side encryption option that's supported is Amazon S3-managed keys (SSE-S3). For more information
-Documentation: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/enable-connection-logging.html
+Documentation: [https://docs.aws.amazon.com/elasticloadbalancing/latest/application/enable-connection-logging.html](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/enable-connection-logging.html)
 
 ```python
 # vpc: ec2.Vpc
@@ -305,7 +312,7 @@ lb = elbv2.ApplicationLoadBalancer(self, "LB",
 )
 ```
 
-By setting `DUAL_STACK_WITHOUT_PUBLIC_IPV4`, you can provision load balancers without public IPv4s
+By setting `DUAL_STACK_WITHOUT_PUBLIC_IPV4`, you can provision load balancers without public IPv4s:
 
 ```python
 # vpc: ec2.Vpc
@@ -313,6 +320,7 @@ By setting `DUAL_STACK_WITHOUT_PUBLIC_IPV4`, you can provision load balancers wi
 
 lb = elbv2.ApplicationLoadBalancer(self, "LB",
     vpc=vpc,
+    internet_facing=True,
     ip_address_type=elbv2.IpAddressType.DUAL_STACK_WITHOUT_PUBLIC_IPV4
 )
 ```
@@ -549,7 +557,7 @@ tg = elbv2.ApplicationTargetGroup(self, "TG",
 )
 ```
 
-For more information see: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/sticky-sessions.html#application-based-stickiness
+For more information see: [https://docs.aws.amazon.com/elasticloadbalancing/latest/application/sticky-sessions.html#application-based-stickiness](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/sticky-sessions.html#application-based-stickiness)
 
 ### Setting the target group protocol version
 
@@ -22373,6 +22381,15 @@ class IApplicationLoadBalancer(
     def ip_address_type(self) -> typing.Optional[IpAddressType]:
         '''The IP Address Type for this load balancer.
 
+        If the ``@aws-cdk/aws-elasticloadbalancingV2:albDualstackWithoutPublicIpv4SecurityGroupRulesDefault``
+        feature flag is set (the default for new projects), and ``addListener()`` is called with ``open: true``,
+        the load balancer's security group will automatically include both IPv4 and IPv6 ingress rules
+        when using ``IpAddressType.DUAL_STACK_WITHOUT_PUBLIC_IPV4``.
+
+        For existing projects that only have IPv4 rules, you can opt-in to IPv6 ingress rules
+        by enabling the feature flag in your cdk.json file. Note that enabling this feature flag
+        will modify existing security group rules.
+
         :default: IpAddressType.IPV4
         '''
         ...
@@ -22450,6 +22467,15 @@ class _IApplicationLoadBalancerProxy(
     def ip_address_type(self) -> typing.Optional[IpAddressType]:
         '''The IP Address Type for this load balancer.
 
+        If the ``@aws-cdk/aws-elasticloadbalancingV2:albDualstackWithoutPublicIpv4SecurityGroupRulesDefault``
+        feature flag is set (the default for new projects), and ``addListener()`` is called with ``open: true``,
+        the load balancer's security group will automatically include both IPv4 and IPv6 ingress rules
+        when using ``IpAddressType.DUAL_STACK_WITHOUT_PUBLIC_IPV4``.
+
+        For existing projects that only have IPv4 rules, you can opt-in to IPv6 ingress rules
+        by enabling the feature flag in your cdk.json file. Note that enabling this feature flag
+        will modify existing security group rules.
+
         :default: IpAddressType.IPV4
         '''
         return typing.cast(typing.Optional[IpAddressType], jsii.get(self, "ipAddressType"))
@@ -25063,7 +25089,17 @@ class ApplicationLoadBalancer(
     @builtins.property
     @jsii.member(jsii_name="ipAddressType")
     def ip_address_type(self) -> typing.Optional[IpAddressType]:
-        '''The IP Address Type for this load balancer.'''
+        '''The IP Address Type for this load balancer.
+
+        If the ``@aws-cdk/aws-elasticloadbalancingV2:albDualstackWithoutPublicIpv4SecurityGroupRulesDefault``
+        feature flag is set (the default for new projects), and ``addListener()`` is called with ``open: true``,
+        the load balancer's security group will automatically include both IPv4 and IPv6 ingress rules
+        when using ``IpAddressType.DUAL_STACK_WITHOUT_PUBLIC_IPV4``.
+
+        For existing projects that only have IPv4 rules, you can opt-in to IPv6 ingress rules
+        by enabling the feature flag in your cdk.json file. Note that enabling this feature flag
+        will modify existing security group rules.
+        '''
         return typing.cast(typing.Optional[IpAddressType], jsii.get(self, "ipAddressType"))
 
 

aws_cdk/aws_emrserverless/__init__.py

@@ -147,6 +147,9 @@ class CfnApplication(
                     enabled=False,
                     encryption_key_arn="encryptionKeyArn"
                 ),
+                prometheus_monitoring_configuration=emrserverless.CfnApplication.PrometheusMonitoringConfigurationProperty(
+                    remote_write_url="remoteWriteUrl"
+                ),
                 s3_monitoring_configuration=emrserverless.CfnApplication.S3MonitoringConfigurationProperty(
                     encryption_key_arn="encryptionKeyArn",
                     log_uri="logUri"
@@ -1486,6 +1489,7 @@ class CfnApplication(
         name_mapping={
             "cloud_watch_logging_configuration": "cloudWatchLoggingConfiguration",
             "managed_persistence_monitoring_configuration": "managedPersistenceMonitoringConfiguration",
+            "prometheus_monitoring_configuration": "prometheusMonitoringConfiguration",
             "s3_monitoring_configuration": "s3MonitoringConfiguration",
         },
     )
@@ -1495,12 +1499,14 @@ class CfnApplication(
             *,
             cloud_watch_logging_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApplication.CloudWatchLoggingConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             managed_persistence_monitoring_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApplication.ManagedPersistenceMonitoringConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            prometheus_monitoring_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApplication.PrometheusMonitoringConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             s3_monitoring_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApplication.S3MonitoringConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
             '''The configuration setting for monitoring logs.
 
             :param cloud_watch_logging_configuration: The Amazon CloudWatch configuration for monitoring logs. You can configure your jobs to send log information to CloudWatch.
             :param managed_persistence_monitoring_configuration: The managed log persistence configuration for a job run.
+            :param prometheus_monitoring_configuration: 
             :param s3_monitoring_configuration: The Amazon S3 configuration for monitoring log publishing.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-emrserverless-application-monitoringconfiguration.html
@@ -1527,6 +1533,9 @@ class CfnApplication(
                         enabled=False,
                         encryption_key_arn="encryptionKeyArn"
                     ),
+                    prometheus_monitoring_configuration=emrserverless.CfnApplication.PrometheusMonitoringConfigurationProperty(
+                        remote_write_url="remoteWriteUrl"
+                    ),
                     s3_monitoring_configuration=emrserverless.CfnApplication.S3MonitoringConfigurationProperty(
                         encryption_key_arn="encryptionKeyArn",
                         log_uri="logUri"
@@ -1537,12 +1546,15 @@ class CfnApplication(
                 type_hints = typing.get_type_hints(_typecheckingstub__ac64b7b17b97bdc5b470cb32b1b0c00b3bdd7d97ea83ace7e59e5eb7f78d59e6)
                 check_type(argname="argument cloud_watch_logging_configuration", value=cloud_watch_logging_configuration, expected_type=type_hints["cloud_watch_logging_configuration"])
                 check_type(argname="argument managed_persistence_monitoring_configuration", value=managed_persistence_monitoring_configuration, expected_type=type_hints["managed_persistence_monitoring_configuration"])
+                check_type(argname="argument prometheus_monitoring_configuration", value=prometheus_monitoring_configuration, expected_type=type_hints["prometheus_monitoring_configuration"])
                 check_type(argname="argument s3_monitoring_configuration", value=s3_monitoring_configuration, expected_type=type_hints["s3_monitoring_configuration"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
             if cloud_watch_logging_configuration is not None:
                 self._values["cloud_watch_logging_configuration"] = cloud_watch_logging_configuration
             if managed_persistence_monitoring_configuration is not None:
                 self._values["managed_persistence_monitoring_configuration"] = managed_persistence_monitoring_configuration
+            if prometheus_monitoring_configuration is not None:
+                self._values["prometheus_monitoring_configuration"] = prometheus_monitoring_configuration
             if s3_monitoring_configuration is not None:
                 self._values["s3_monitoring_configuration"] = s3_monitoring_configuration
 
@@ -1570,6 +1582,16 @@ class CfnApplication(
             result = self._values.get("managed_persistence_monitoring_configuration")
             return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.ManagedPersistenceMonitoringConfigurationProperty"]], result)
 
+        @builtins.property
+        def prometheus_monitoring_configuration(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.PrometheusMonitoringConfigurationProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-emrserverless-application-monitoringconfiguration.html#cfn-emrserverless-application-monitoringconfiguration-prometheusmonitoringconfiguration
+            '''
+            result = self._values.get("prometheus_monitoring_configuration")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.PrometheusMonitoringConfigurationProperty"]], result)
+
         @builtins.property
         def s3_monitoring_configuration(
             self,
@@ -1665,6 +1687,59 @@ class CfnApplication(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_emrserverless.CfnApplication.PrometheusMonitoringConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"remote_write_url": "remoteWriteUrl"},
+    )
+    class PrometheusMonitoringConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            remote_write_url: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''
+            :param remote_write_url: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-emrserverless-application-prometheusmonitoringconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_emrserverless as emrserverless
+                
+                prometheus_monitoring_configuration_property = emrserverless.CfnApplication.PrometheusMonitoringConfigurationProperty(
+                    remote_write_url="remoteWriteUrl"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__eed5e2a661371ca6ceab2d92afa8904162bc5dd4f2c62c9c20500ec776ae4f27)
+                check_type(argname="argument remote_write_url", value=remote_write_url, expected_type=type_hints["remote_write_url"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if remote_write_url is not None:
+                self._values["remote_write_url"] = remote_write_url
+
+        @builtins.property
+        def remote_write_url(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-emrserverless-application-prometheusmonitoringconfiguration.html#cfn-emrserverless-application-prometheusmonitoringconfiguration-remotewriteurl
+            '''
+            result = self._values.get("remote_write_url")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "PrometheusMonitoringConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_emrserverless.CfnApplication.S3MonitoringConfigurationProperty",
         jsii_struct_bases=[],
@@ -2119,6 +2194,9 @@ class CfnApplicationProps:
                         enabled=False,
                         encryption_key_arn="encryptionKeyArn"
                     ),
+                    prometheus_monitoring_configuration=emrserverless.CfnApplication.PrometheusMonitoringConfigurationProperty(
+                        remote_write_url="remoteWriteUrl"
+                    ),
                     s3_monitoring_configuration=emrserverless.CfnApplication.S3MonitoringConfigurationProperty(
                         encryption_key_arn="encryptionKeyArn",
                         log_uri="logUri"
@@ -2626,6 +2704,7 @@ def _typecheckingstub__ac64b7b17b97bdc5b470cb32b1b0c00b3bdd7d97ea83ace7e59e5eb7f
     *,
     cloud_watch_logging_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.CloudWatchLoggingConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     managed_persistence_monitoring_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.ManagedPersistenceMonitoringConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    prometheus_monitoring_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.PrometheusMonitoringConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     s3_monitoring_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.S3MonitoringConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -2639,6 +2718,13 @@ def _typecheckingstub__ea91d44b7b04faaf86e4a55badd0f26aa73aa5b6fa131753a02f85719
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__eed5e2a661371ca6ceab2d92afa8904162bc5dd4f2c62c9c20500ec776ae4f27(
+    *,
+    remote_write_url: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__8c2bbffaec906451dfb8b186ca2e714bc8b38325018a5241dbe3a66e4202ffed(
     *,
     encryption_key_arn: typing.Optional[builtins.str] = None,

aws_cdk/aws_fms/__init__.py

@@ -364,6 +364,7 @@ class CfnPolicy(
             policy_description="policyDescription",
             resources_clean_up=False,
             resource_set_ids=["resourceSetIds"],
+            resource_tag_logical_operator="resourceTagLogicalOperator",
             resource_tags=[fms.CfnPolicy.ResourceTagProperty(
                 key="key",
         
@@ -394,6 +395,7 @@ class CfnPolicy(
         policy_description: typing.Optional[builtins.str] = None,
         resources_clean_up: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         resource_set_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
+        resource_tag_logical_operator: typing.Optional[builtins.str] = None,
         resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPolicy.ResourceTagProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         resource_type: typing.Optional[builtins.str] = None,
         resource_type_list: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -412,6 +414,7 @@ class CfnPolicy(
         :param policy_description: Your description of the AWS Firewall Manager policy.
         :param resources_clean_up: Indicates whether AWS Firewall Manager should automatically remove protections from resources that leave the policy scope and clean up resources that Firewall Manager is managing for accounts when those accounts leave policy scope. For example, Firewall Manager will disassociate a Firewall Manager managed web ACL from a protected customer resource when the customer resource leaves policy scope. By default, Firewall Manager doesn't remove protections or delete Firewall Manager managed resources. This option is not available for Shield Advanced or AWS WAF Classic policies.
         :param resource_set_ids: The unique identifiers of the resource sets used by the policy.
+        :param resource_tag_logical_operator: 
         :param resource_tags: An array of ``ResourceTag`` objects, used to explicitly include resources in the policy scope or explicitly exclude them. If this isn't set, then tags aren't used to modify policy scope. See also ``ExcludeResourceTags`` .
         :param resource_type: The type of resource protected by or in scope of the policy. This is in the format shown in the `AWS Resource Types Reference <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html>`_ . To apply this policy to multiple resource types, specify a resource type of ``ResourceTypeList`` and then specify the resource types in a ``ResourceTypeList`` . The following are valid resource types for each Firewall Manager policy type: - AWS WAF Classic - ``AWS::ApiGateway::Stage`` , ``AWS::CloudFront::Distribution`` , and ``AWS::ElasticLoadBalancingV2::LoadBalancer`` . - AWS WAF - ``AWS::ApiGateway::Stage`` , ``AWS::ElasticLoadBalancingV2::LoadBalancer`` , and ``AWS::CloudFront::Distribution`` . - Shield Advanced - ``AWS::ElasticLoadBalancingV2::LoadBalancer`` , ``AWS::ElasticLoadBalancing::LoadBalancer`` , ``AWS::EC2::EIP`` , and ``AWS::CloudFront::Distribution`` . - Network ACL - ``AWS::EC2::Subnet`` . - Security group usage audit - ``AWS::EC2::SecurityGroup`` . - Security group content audit - ``AWS::EC2::SecurityGroup`` , ``AWS::EC2::NetworkInterface`` , and ``AWS::EC2::Instance`` . - DNS Firewall, AWS Network Firewall , and third-party firewall - ``AWS::EC2::VPC`` .
         :param resource_type_list: An array of ``ResourceType`` objects. Use this only to specify multiple resource types. To specify a single resource type, use ``ResourceType`` .
@@ -432,6 +435,7 @@ class CfnPolicy(
             policy_description=policy_description,
             resources_clean_up=resources_clean_up,
             resource_set_ids=resource_set_ids,
+            resource_tag_logical_operator=resource_tag_logical_operator,
             resource_tags=resource_tags,
             resource_type=resource_type,
             resource_type_list=resource_type_list,
@@ -668,6 +672,21 @@ class CfnPolicy(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "resourceSetIds", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="resourceTagLogicalOperator")
+    def resource_tag_logical_operator(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "resourceTagLogicalOperator"))
+
+    @resource_tag_logical_operator.setter
+    def resource_tag_logical_operator(
+        self,
+        value: typing.Optional[builtins.str],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4c785568d3275bbfb3df2dd3b2ac1d97319f9c06330a57289261dce85d69868f)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "resourceTagLogicalOperator", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="resourceTags")
     def resource_tags(
@@ -2037,6 +2056,7 @@ class CfnPolicy(
         "policy_description": "policyDescription",
         "resources_clean_up": "resourcesCleanUp",
         "resource_set_ids": "resourceSetIds",
+        "resource_tag_logical_operator": "resourceTagLogicalOperator",
         "resource_tags": "resourceTags",
         "resource_type": "resourceType",
         "resource_type_list": "resourceTypeList",
@@ -2057,6 +2077,7 @@ class CfnPolicyProps:
         policy_description: typing.Optional[builtins.str] = None,
         resources_clean_up: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         resource_set_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
+        resource_tag_logical_operator: typing.Optional[builtins.str] = None,
         resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPolicy.ResourceTagProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         resource_type: typing.Optional[builtins.str] = None,
         resource_type_list: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -2074,6 +2095,7 @@ class CfnPolicyProps:
         :param policy_description: Your description of the AWS Firewall Manager policy.
         :param resources_clean_up: Indicates whether AWS Firewall Manager should automatically remove protections from resources that leave the policy scope and clean up resources that Firewall Manager is managing for accounts when those accounts leave policy scope. For example, Firewall Manager will disassociate a Firewall Manager managed web ACL from a protected customer resource when the customer resource leaves policy scope. By default, Firewall Manager doesn't remove protections or delete Firewall Manager managed resources. This option is not available for Shield Advanced or AWS WAF Classic policies.
         :param resource_set_ids: The unique identifiers of the resource sets used by the policy.
+        :param resource_tag_logical_operator: 
         :param resource_tags: An array of ``ResourceTag`` objects, used to explicitly include resources in the policy scope or explicitly exclude them. If this isn't set, then tags aren't used to modify policy scope. See also ``ExcludeResourceTags`` .
         :param resource_type: The type of resource protected by or in scope of the policy. This is in the format shown in the `AWS Resource Types Reference <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html>`_ . To apply this policy to multiple resource types, specify a resource type of ``ResourceTypeList`` and then specify the resource types in a ``ResourceTypeList`` . The following are valid resource types for each Firewall Manager policy type: - AWS WAF Classic - ``AWS::ApiGateway::Stage`` , ``AWS::CloudFront::Distribution`` , and ``AWS::ElasticLoadBalancingV2::LoadBalancer`` . - AWS WAF - ``AWS::ApiGateway::Stage`` , ``AWS::ElasticLoadBalancingV2::LoadBalancer`` , and ``AWS::CloudFront::Distribution`` . - Shield Advanced - ``AWS::ElasticLoadBalancingV2::LoadBalancer`` , ``AWS::ElasticLoadBalancing::LoadBalancer`` , ``AWS::EC2::EIP`` , and ``AWS::CloudFront::Distribution`` . - Network ACL - ``AWS::EC2::Subnet`` . - Security group usage audit - ``AWS::EC2::SecurityGroup`` . - Security group content audit - ``AWS::EC2::SecurityGroup`` , ``AWS::EC2::NetworkInterface`` , and ``AWS::EC2::Instance`` . - DNS Firewall, AWS Network Firewall , and third-party firewall - ``AWS::EC2::VPC`` .
         :param resource_type_list: An array of ``ResourceType`` objects. Use this only to specify multiple resource types. To specify a single resource type, use ``ResourceType`` .
@@ -2162,6 +2184,7 @@ class CfnPolicyProps:
                 policy_description="policyDescription",
                 resources_clean_up=False,
                 resource_set_ids=["resourceSetIds"],
+                resource_tag_logical_operator="resourceTagLogicalOperator",
                 resource_tags=[fms.CfnPolicy.ResourceTagProperty(
                     key="key",
             
@@ -2188,6 +2211,7 @@ class CfnPolicyProps:
             check_type(argname="argument policy_description", value=policy_description, expected_type=type_hints["policy_description"])
             check_type(argname="argument resources_clean_up", value=resources_clean_up, expected_type=type_hints["resources_clean_up"])
             check_type(argname="argument resource_set_ids", value=resource_set_ids, expected_type=type_hints["resource_set_ids"])
+            check_type(argname="argument resource_tag_logical_operator", value=resource_tag_logical_operator, expected_type=type_hints["resource_tag_logical_operator"])
             check_type(argname="argument resource_tags", value=resource_tags, expected_type=type_hints["resource_tags"])
             check_type(argname="argument resource_type", value=resource_type, expected_type=type_hints["resource_type"])
             check_type(argname="argument resource_type_list", value=resource_type_list, expected_type=type_hints["resource_type_list"])
@@ -2210,6 +2234,8 @@ class CfnPolicyProps:
             self._values["resources_clean_up"] = resources_clean_up
         if resource_set_ids is not None:
             self._values["resource_set_ids"] = resource_set_ids
+        if resource_tag_logical_operator is not None:
+            self._values["resource_tag_logical_operator"] = resource_tag_logical_operator
         if resource_tags is not None:
             self._values["resource_tags"] = resource_tags
         if resource_type is not None:
@@ -2468,6 +2494,14 @@ class CfnPolicyProps:
         result = self._values.get("resource_set_ids")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def resource_tag_logical_operator(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html#cfn-fms-policy-resourcetaglogicaloperator
+        '''
+        result = self._values.get("resource_tag_logical_operator")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def resource_tags(
         self,
@@ -2915,6 +2949,7 @@ def _typecheckingstub__a29b3b13041b0ccbd18a0c29ff5cff0adbc0e2aedc87591f1c54ec7a1
     policy_description: typing.Optional[builtins.str] = None,
     resources_clean_up: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     resource_set_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
+    resource_tag_logical_operator: typing.Optional[builtins.str] = None,
     resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPolicy.ResourceTagProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     resource_type: typing.Optional[builtins.str] = None,
     resource_type_list: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -2995,6 +3030,12 @@ def _typecheckingstub__048e93c726f9c5fe6e9b627c041b37e3458add761a76189dddf42b880
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__4c785568d3275bbfb3df2dd3b2ac1d97319f9c06330a57289261dce85d69868f(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__9c77d40603d6f4c051dd3f9b5d662e1b2f8b3690fcfa612876de86b1cfb05ac0(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnPolicy.ResourceTagProperty]]]],
 ) -> None:
@@ -3133,6 +3174,7 @@ def _typecheckingstub__8455eef74a6daf8d86ebd4c14f18184bf9c938d95a07a9902bf05c79f
     policy_description: typing.Optional[builtins.str] = None,
     resources_clean_up: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     resource_set_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
+    resource_tag_logical_operator: typing.Optional[builtins.str] = None,
     resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPolicy.ResourceTagProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     resource_type: typing.Optional[builtins.str] = None,
     resource_type_list: typing.Optional[typing.Sequence[builtins.str]] = None,

aws_cdk/aws_gamelift/__init__.py

@@ -8389,8 +8389,8 @@ class CfnGameSessionQueue(
 
             Changing the priority order will affect how game sessions are placed.
 
-            :param location_order: The prioritization order to use for fleet locations, when the ``PriorityOrder`` property includes ``LOCATION`` . Locations are identified by AWS Region codes such as ``us-west-2`` . Each location can only be listed once.
-            :param priority_order: The recommended sequence to use when prioritizing where to place new game sessions. Each type can only be listed once. - ``LATENCY`` -- FleetIQ prioritizes locations where the average player latency (provided in each game session request) is lowest. - ``COST`` -- FleetIQ prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) for each destination in the queue. - ``DESTINATION`` -- FleetIQ prioritizes based on the order that destinations are listed in the queue configuration. - ``LOCATION`` -- FleetIQ prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
+            :param location_order: The prioritization order to use for fleet locations, when the ``PriorityOrder`` property includes ``LOCATION`` . Locations can include AWS Region codes (such as ``us-west-2`` ), local zones, and custom locations (for Anywhere fleets). Each location must be listed only once. For details, see `Amazon GameLift service locations. <https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html>`_
+            :param priority_order: A custom sequence to use when prioritizing where to place new game sessions. Each priority type is listed once. - ``LATENCY`` -- Amazon GameLift prioritizes locations where the average player latency is lowest. Player latency data is provided in each game session placement request. - ``COST`` -- Amazon GameLift prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) of each destination in the queue. - ``DESTINATION`` -- Amazon GameLift prioritizes based on the list order of destinations in the queue configuration. - ``LOCATION`` -- Amazon GameLift prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-gamelift-gamesessionqueue-priorityconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -8420,7 +8420,7 @@ class CfnGameSessionQueue(
         def location_order(self) -> typing.Optional[typing.List[builtins.str]]:
             '''The prioritization order to use for fleet locations, when the ``PriorityOrder`` property includes ``LOCATION`` .
 
-            Locations are identified by AWS Region codes such as ``us-west-2`` . Each location can only be listed once.
+            Locations can include AWS Region codes (such as ``us-west-2`` ), local zones, and custom locations (for Anywhere fleets). Each location must be listed only once. For details, see `Amazon GameLift service locations. <https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html>`_
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-gamelift-gamesessionqueue-priorityconfiguration.html#cfn-gamelift-gamesessionqueue-priorityconfiguration-locationorder
             '''
@@ -8429,14 +8429,12 @@ class CfnGameSessionQueue(
 
         @builtins.property
         def priority_order(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''The recommended sequence to use when prioritizing where to place new game sessions.
+            '''A custom sequence to use when prioritizing where to place new game sessions. Each priority type is listed once.
 
-            Each type can only be listed once.
-
-            - ``LATENCY`` -- FleetIQ prioritizes locations where the average player latency (provided in each game session request) is lowest.
-            - ``COST`` -- FleetIQ prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) for each destination in the queue.
-            - ``DESTINATION`` -- FleetIQ prioritizes based on the order that destinations are listed in the queue configuration.
-            - ``LOCATION`` -- FleetIQ prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
+            - ``LATENCY`` -- Amazon GameLift prioritizes locations where the average player latency is lowest. Player latency data is provided in each game session placement request.
+            - ``COST`` -- Amazon GameLift prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) of each destination in the queue.
+            - ``DESTINATION`` -- Amazon GameLift prioritizes based on the list order of destinations in the queue configuration.
+            - ``LOCATION`` -- Amazon GameLift prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-gamelift-gamesessionqueue-priorityconfiguration.html#cfn-gamelift-gamesessionqueue-priorityconfiguration-priorityorder
             '''