aws-cdk-lib 2.175.1__py3-none-any.whl → 2.177.0__py3-none-any.whl

aws_cdk/aws_healthlake/__init__.py

@@ -137,11 +137,11 @@ class CfnFHIRDatastore(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param datastore_type_version: The FHIR version of the data store. The only supported version is R4.
-        :param datastore_name: The user generated name for the data store.
-        :param identity_provider_configuration: The identity provider configuration that you gave when the data store was created.
-        :param preload_data_config: The preloaded data configuration for the data store. Only data preloaded from Synthea is supported.
-        :param sse_configuration: The server-side encryption key configuration for a customer provided encryption key specified for creating a data store.
+        :param datastore_type_version: The FHIR release version supported by the data store. Current support is for version ``R4`` .
+        :param datastore_name: The data store name (user-generated).
+        :param identity_provider_configuration: The identity provider configuration selected when the data store was created.
+        :param preload_data_config: The preloaded Synthea data configuration for the data store.
+        :param sse_configuration: The server-side encryption key configuration for a customer-provided encryption key specified for creating a data store.
         :param tags: An array of key-value pairs to apply to this resource. For more information, see `Tag <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html>`_ .
         '''
         if __debug__:
@@ -268,7 +268,7 @@ class CfnFHIRDatastore(
     @builtins.property
     @jsii.member(jsii_name="datastoreTypeVersion")
     def datastore_type_version(self) -> builtins.str:
-        '''The FHIR version of the data store.'''
+        '''The FHIR release version supported by the data store.'''
         return typing.cast(builtins.str, jsii.get(self, "datastoreTypeVersion"))
 
     @datastore_type_version.setter
@@ -281,7 +281,7 @@ class CfnFHIRDatastore(
     @builtins.property
     @jsii.member(jsii_name="datastoreName")
     def datastore_name(self) -> typing.Optional[builtins.str]:
-        '''The user generated name for the data store.'''
+        '''The data store name (user-generated).'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "datastoreName"))
 
     @datastore_name.setter
@@ -296,7 +296,7 @@ class CfnFHIRDatastore(
     def identity_provider_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFHIRDatastore.IdentityProviderConfigurationProperty"]]:
-        '''The identity provider configuration that you gave when the data store was created.'''
+        '''The identity provider configuration selected when the data store was created.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFHIRDatastore.IdentityProviderConfigurationProperty"]], jsii.get(self, "identityProviderConfiguration"))
 
     @identity_provider_configuration.setter
@@ -314,7 +314,7 @@ class CfnFHIRDatastore(
     def preload_data_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFHIRDatastore.PreloadDataConfigProperty"]]:
-        '''The preloaded data configuration for the data store.'''
+        '''The preloaded Synthea data configuration for the data store.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFHIRDatastore.PreloadDataConfigProperty"]], jsii.get(self, "preloadDataConfig"))
 
     @preload_data_config.setter
@@ -332,7 +332,7 @@ class CfnFHIRDatastore(
     def sse_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFHIRDatastore.SseConfigurationProperty"]]:
-        '''The server-side encryption key configuration for a customer provided encryption key specified for creating a data store.'''
+        '''The server-side encryption key configuration for a customer-provided encryption key specified for creating a data store.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFHIRDatastore.SseConfigurationProperty"]], jsii.get(self, "sseConfiguration"))
 
     @sse_configuration.setter
@@ -443,12 +443,12 @@ class CfnFHIRDatastore(
             idp_lambda_arn: typing.Optional[builtins.str] = None,
             metadata: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''The identity provider configuration that you gave when the data store was created.
+            '''The identity provider configuration selected when the data store was created.
 
-            :param authorization_strategy: The authorization strategy that you selected when you created the data store.
-            :param fine_grained_authorization_enabled: If you enabled fine-grained authorization when you created the data store.
-            :param idp_lambda_arn: The Amazon Resource Name (ARN) of the Lambda function that you want to use to decode the access token created by the authorization server.
-            :param metadata: The JSON metadata elements that you want to use in your identity provider configuration. Required elements are listed based on the launch specification of the SMART application. For more information on all possible elements, see `Metadata <https://docs.aws.amazon.com/https://build.fhir.org/ig/HL7/smart-app-launch/conformance.html#metadata>`_ in SMART's App Launch specification. ``authorization_endpoint`` : The URL to the OAuth2 authorization endpoint. ``grant_types_supported`` : An array of grant types that are supported at the token endpoint. You must provide at least one grant type option. Valid options are ``authorization_code`` and ``client_credentials`` . ``token_endpoint`` : The URL to the OAuth2 token endpoint. ``capabilities`` : An array of strings of the SMART capabilities that the authorization server supports. ``code_challenge_methods_supported`` : An array of strings of supported PKCE code challenge methods. You must include the ``S256`` method in the array of PKCE code challenge methods.
+            :param authorization_strategy: The authorization strategy selected when the data store was created.
+            :param fine_grained_authorization_enabled: The parameter to enable SMART on FHIR fine-grained authorization for the data store.
+            :param idp_lambda_arn: The Amazon Resource Name (ARN) of the Lambda function to use to decode the access token created by the authorization server.
+            :param metadata: The JSON metadata elements to use in your identity provider configuration. Required elements are listed based on the launch specification of the SMART application. For more information on all possible elements, see `Metadata <https://docs.aws.amazon.com/https://build.fhir.org/ig/HL7/smart-app-launch/conformance.html#metadata>`_ in SMART's App Launch specification. ``authorization_endpoint`` : The URL to the OAuth2 authorization endpoint. ``grant_types_supported`` : An array of grant types that are supported at the token endpoint. You must provide at least one grant type option. Valid options are ``authorization_code`` and ``client_credentials`` . ``token_endpoint`` : The URL to the OAuth2 token endpoint. ``capabilities`` : An array of strings of the SMART capabilities that the authorization server supports. ``code_challenge_methods_supported`` : An array of strings of supported PKCE code challenge methods. You must include the ``S256`` method in the array of PKCE code challenge methods.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-healthlake-fhirdatastore-identityproviderconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -486,7 +486,7 @@ class CfnFHIRDatastore(
 
         @builtins.property
         def authorization_strategy(self) -> builtins.str:
-            '''The authorization strategy that you selected when you created the data store.
+            '''The authorization strategy selected when the data store was created.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-healthlake-fhirdatastore-identityproviderconfiguration.html#cfn-healthlake-fhirdatastore-identityproviderconfiguration-authorizationstrategy
             '''
@@ -498,7 +498,7 @@ class CfnFHIRDatastore(
         def fine_grained_authorization_enabled(
             self,
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''If you enabled fine-grained authorization when you created the data store.
+            '''The parameter to enable SMART on FHIR fine-grained authorization for the data store.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-healthlake-fhirdatastore-identityproviderconfiguration.html#cfn-healthlake-fhirdatastore-identityproviderconfiguration-finegrainedauthorizationenabled
             '''
@@ -507,7 +507,7 @@ class CfnFHIRDatastore(
 
         @builtins.property
         def idp_lambda_arn(self) -> typing.Optional[builtins.str]:
-            '''The Amazon Resource Name (ARN) of the Lambda function that you want to use to decode the access token created by the authorization server.
+            '''The Amazon Resource Name (ARN) of the Lambda function to use to decode the access token created by the authorization server.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-healthlake-fhirdatastore-identityproviderconfiguration.html#cfn-healthlake-fhirdatastore-identityproviderconfiguration-idplambdaarn
             '''
@@ -516,7 +516,7 @@ class CfnFHIRDatastore(
 
         @builtins.property
         def metadata(self) -> typing.Optional[builtins.str]:
-            '''The JSON metadata elements that you want to use in your identity provider configuration.
+            '''The JSON metadata elements to use in your identity provider configuration.
 
             Required elements are listed based on the launch specification of the SMART application. For more information on all possible elements, see `Metadata <https://docs.aws.amazon.com/https://build.fhir.org/ig/HL7/smart-app-launch/conformance.html#metadata>`_ in SMART's App Launch specification.
 
@@ -563,7 +563,7 @@ class CfnFHIRDatastore(
             If a customer owned key is not specified, an Amazon owned key will be used for encryption.
 
             :param cmk_type: The type of customer-managed-key(CMK) used for encryption. The two types of supported CMKs are customer owned CMKs and Amazon owned CMKs. For more information on CMK types, see `KmsEncryptionConfig <https://docs.aws.amazon.com/healthlake/latest/APIReference/API_KmsEncryptionConfig.html#HealthLake-Type-KmsEncryptionConfig-CmkType>`_ .
-            :param kms_key_id: The KMS encryption key id/alias used to encrypt the data store contents at rest.
+            :param kms_key_id: The Key Management Service (KMS) encryption key id/alias used to encrypt the data store contents at rest.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-healthlake-fhirdatastore-kmsencryptionconfig.html
             :exampleMetadata: fixture=_generated
@@ -605,7 +605,7 @@ class CfnFHIRDatastore(
 
         @builtins.property
         def kms_key_id(self) -> typing.Optional[builtins.str]:
-            '''The KMS encryption key id/alias used to encrypt the data store contents at rest.
+            '''The Key Management Service (KMS) encryption key id/alias used to encrypt the data store contents at rest.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-healthlake-fhirdatastore-kmsencryptionconfig.html#cfn-healthlake-fhirdatastore-kmsencryptionconfig-kmskeyid
             '''
@@ -630,9 +630,7 @@ class CfnFHIRDatastore(
     )
     class PreloadDataConfigProperty:
         def __init__(self, *, preload_data_type: builtins.str) -> None:
-            '''Optional parameter to preload data upon creation of the data store.
-
-            Currently, the only supported preloaded data is synthetic data generated from Synthea.
+            '''An optional parameter to preload (import) open source Synthea FHIR data upon creation of the data store.
 
             :param preload_data_type: The type of preloaded data. Only Synthea preloaded data is supported.
 
@@ -690,9 +688,9 @@ class CfnFHIRDatastore(
             *,
             kms_encryption_config: typing.Union[_IResolvable_da3f097b, typing.Union["CfnFHIRDatastore.KmsEncryptionConfigProperty", typing.Dict[builtins.str, typing.Any]]],
         ) -> None:
-            '''The server-side encryption key configuration for a customer provided encryption key.
+            '''The server-side encryption key configuration for a customer-provided encryption key.
 
-            :param kms_encryption_config: The server-side encryption key configuration for a customer provided encryption key (CMK).
+            :param kms_encryption_config: The server-side encryption key configuration for a customer provided encryption key.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-healthlake-fhirdatastore-sseconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -723,7 +721,7 @@ class CfnFHIRDatastore(
         def kms_encryption_config(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, "CfnFHIRDatastore.KmsEncryptionConfigProperty"]:
-            '''The server-side encryption key configuration for a customer provided encryption key (CMK).
+            '''The server-side encryption key configuration for a customer provided encryption key.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-healthlake-fhirdatastore-sseconfiguration.html#cfn-healthlake-fhirdatastore-sseconfiguration-kmsencryptionconfig
             '''
@@ -768,11 +766,11 @@ class CfnFHIRDatastoreProps:
     ) -> None:
         '''Properties for defining a ``CfnFHIRDatastore``.
 
-        :param datastore_type_version: The FHIR version of the data store. The only supported version is R4.
-        :param datastore_name: The user generated name for the data store.
-        :param identity_provider_configuration: The identity provider configuration that you gave when the data store was created.
-        :param preload_data_config: The preloaded data configuration for the data store. Only data preloaded from Synthea is supported.
-        :param sse_configuration: The server-side encryption key configuration for a customer provided encryption key specified for creating a data store.
+        :param datastore_type_version: The FHIR release version supported by the data store. Current support is for version ``R4`` .
+        :param datastore_name: The data store name (user-generated).
+        :param identity_provider_configuration: The identity provider configuration selected when the data store was created.
+        :param preload_data_config: The preloaded Synthea data configuration for the data store.
+        :param sse_configuration: The server-side encryption key configuration for a customer-provided encryption key specified for creating a data store.
         :param tags: An array of key-value pairs to apply to this resource. For more information, see `Tag <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-healthlake-fhirdatastore.html
@@ -838,9 +836,9 @@ class CfnFHIRDatastoreProps:
 
     @builtins.property
     def datastore_type_version(self) -> builtins.str:
-        '''The FHIR version of the data store.
+        '''The FHIR release version supported by the data store.
 
-        The only supported version is R4.
+        Current support is for version ``R4`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-healthlake-fhirdatastore.html#cfn-healthlake-fhirdatastore-datastoretypeversion
         '''
@@ -850,7 +848,7 @@ class CfnFHIRDatastoreProps:
 
     @builtins.property
     def datastore_name(self) -> typing.Optional[builtins.str]:
-        '''The user generated name for the data store.
+        '''The data store name (user-generated).
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-healthlake-fhirdatastore.html#cfn-healthlake-fhirdatastore-datastorename
         '''
@@ -861,7 +859,7 @@ class CfnFHIRDatastoreProps:
     def identity_provider_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFHIRDatastore.IdentityProviderConfigurationProperty]]:
-        '''The identity provider configuration that you gave when the data store was created.
+        '''The identity provider configuration selected when the data store was created.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-healthlake-fhirdatastore.html#cfn-healthlake-fhirdatastore-identityproviderconfiguration
         '''
@@ -872,9 +870,7 @@ class CfnFHIRDatastoreProps:
     def preload_data_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFHIRDatastore.PreloadDataConfigProperty]]:
-        '''The preloaded data configuration for the data store.
-
-        Only data preloaded from Synthea is supported.
+        '''The preloaded Synthea data configuration for the data store.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-healthlake-fhirdatastore.html#cfn-healthlake-fhirdatastore-preloaddataconfig
         '''
@@ -885,7 +881,7 @@ class CfnFHIRDatastoreProps:
     def sse_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFHIRDatastore.SseConfigurationProperty]]:
-        '''The server-side encryption key configuration for a customer provided encryption key specified for creating a data store.
+        '''The server-side encryption key configuration for a customer-provided encryption key specified for creating a data store.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-healthlake-fhirdatastore.html#cfn-healthlake-fhirdatastore-sseconfiguration
         '''

aws_cdk/aws_iam/__init__.py

@@ -724,6 +724,14 @@ thumbprint of the root certificate authority (CA) will automatically be obtained
 from the host as described
 [here](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc_verify-thumbprint.html).
 
+Byy default, the custom resource enforces strict security practices by rejecting
+any unauthorized connections when downloading CA thumbprints from the issuer URL.
+If you need to connect to an unauthorized OIDC identity provider and understand the
+implications, you can disable this behavior by setting the feature flag
+`IAM_OIDC_REJECT_UNAUTHORIZED_CONNECTIONS` to `false` in your `cdk.context.json`
+or `cdk.json`. Visit [CDK Feature Flag](https://docs.aws.amazon.com/cdk/v2/guide/featureflags.html)
+for more information on how to configure feature flags.
+
 Once you define an OpenID connect provider, you can use it with AWS services
 that expect an IAM OIDC provider. For example, when you define an [Amazon
 Cognito identity

aws_cdk/aws_imagebuilder/__init__.py

@@ -3789,7 +3789,7 @@ class CfnImage(
             You must have at least one build component to create a recipe, but test components are not required. If you have added tests, they run after the image is created, to ensure that the target image is functional and can be used reliably for launching Amazon EC2 instances.
 
             :param image_tests_enabled: Determines if tests should run after building the image. Image Builder defaults to enable tests to run following the image build, before image distribution.
-            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout attribute is not currently active. This value is ignored.
+            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-image-imagetestsconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -3834,7 +3834,7 @@ class CfnImage(
 
             .. epigraph::
 
-               The timeout attribute is not currently active. This value is ignored.
+               The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-image-imagetestsconfiguration.html#cfn-imagebuilder-image-imagetestsconfiguration-timeoutminutes
             '''
@@ -4609,7 +4609,7 @@ class CfnImagePipeline(
             You must have at least one build component to create a recipe, but test components are not required. Your pipeline runs tests after it builds the image, to ensure that the target image is functional and can be used reliably for launching Amazon EC2 instances.
 
             :param image_tests_enabled: Defines if tests should be executed when building this image. For example, ``true`` or ``false`` .
-            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout attribute is not currently active. This value is ignored.
+            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagepipeline-imagetestsconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -4654,7 +4654,7 @@ class CfnImagePipeline(
 
             .. epigraph::
 
-               The timeout attribute is not currently active. This value is ignored.
+               The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagepipeline-imagetestsconfiguration.html#cfn-imagebuilder-imagepipeline-imagetestsconfiguration-timeoutminutes
             '''
@@ -6597,9 +6597,9 @@ class CfnInfrastructureConfiguration(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_imagebuilder.CfnInfrastructureConfiguration",
 ):
-    '''The infrastructure configuration allows you to specify the infrastructure within which to build and test your image.
+    '''Creates a new infrastructure configuration.
 
-    In the infrastructure configuration, you can specify instance types, subnets, and security groups to associate with your instance. You can also associate an Amazon EC2 key pair with the instance used to build your image. This allows you to log on to your instance to troubleshoot if your build fails and you set terminateInstanceOnFailure to false.
+    An infrastructure configuration defines the environment in which your image will be built and tested.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html
     :cloudformationResource: AWS::ImageBuilder::InfrastructureConfiguration
@@ -6671,20 +6671,20 @@ class CfnInfrastructureConfiguration(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param instance_profile_name: The instance profile of the infrastructure configuration.
+        :param instance_profile_name: The instance profile to associate with the instance used to customize your Amazon EC2 AMI.
         :param name: The name of the infrastructure configuration.
         :param description: The description of the infrastructure configuration.
-        :param instance_metadata_options: The instance metadata option settings for the infrastructure configuration.
-        :param instance_types: The instance types of the infrastructure configuration.
-        :param key_pair: The Amazon EC2 key pair of the infrastructure configuration.
-        :param logging: The logging configuration defines where Image Builder uploads your logs.
+        :param instance_metadata_options: The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.
+        :param instance_types: The instance types of the infrastructure configuration. You can specify one or more instance types to use for this build. The service will pick one of these instance types based on availability.
+        :param key_pair: The key pair of the infrastructure configuration. You can use this to log on to and debug the instance used to create your image.
+        :param logging: The logging configuration of the infrastructure configuration.
         :param placement: The instance placement settings that define where the instances that are launched from your image will run.
-        :param resource_tags: The tags attached to the resource created by Image Builder.
-        :param security_group_ids: The security group IDs of the infrastructure configuration.
-        :param sns_topic_arn: The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.
-        :param subnet_id: The subnet ID of the infrastructure configuration.
-        :param tags: The tags of the infrastructure configuration.
-        :param terminate_instance_on_failure: The terminate instance on failure configuration of the infrastructure configuration.
+        :param resource_tags: The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process. Tags are formatted as key value pairs.
+        :param security_group_ids: The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.
+        :param sns_topic_arn: The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications. .. epigraph:: EC2 Image Builder is unable to send notifications to SNS topics that are encrypted using keys from other accounts. The key that is used to encrypt the SNS topic must reside in the account that the Image Builder service runs under.
+        :param subnet_id: The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.
+        :param tags: The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output. Tags are formatted as key value pairs.
+        :param terminate_instance_on_failure: The terminate instance on failure setting of the infrastructure configuration. Set to false if you want Image Builder to retain the instance used to configure your AMI if the build or test phase of your workflow fails.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__8df8a03094d1fe92963a315a657a78657df102ba9fbe66eda2c26bb8eac04479)
@@ -6773,7 +6773,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="instanceProfileName")
     def instance_profile_name(self) -> builtins.str:
-        '''The instance profile of the infrastructure configuration.'''
+        '''The instance profile to associate with the instance used to customize your Amazon EC2 AMI.'''
         return typing.cast(builtins.str, jsii.get(self, "instanceProfileName"))
 
     @instance_profile_name.setter
@@ -6814,7 +6814,7 @@ class CfnInfrastructureConfiguration(
     def instance_metadata_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.InstanceMetadataOptionsProperty"]]:
-        '''The instance metadata option settings for the infrastructure configuration.'''
+        '''The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.InstanceMetadataOptionsProperty"]], jsii.get(self, "instanceMetadataOptions"))
 
     @instance_metadata_options.setter
@@ -6843,7 +6843,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="keyPair")
     def key_pair(self) -> typing.Optional[builtins.str]:
-        '''The Amazon EC2 key pair of the infrastructure configuration.'''
+        '''The key pair of the infrastructure configuration.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "keyPair"))
 
     @key_pair.setter
@@ -6858,7 +6858,7 @@ class CfnInfrastructureConfiguration(
     def logging(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.LoggingProperty"]]:
-        '''The logging configuration defines where Image Builder uploads your logs.'''
+        '''The logging configuration of the infrastructure configuration.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.LoggingProperty"]], jsii.get(self, "logging"))
 
     @logging.setter
@@ -6894,7 +6894,7 @@ class CfnInfrastructureConfiguration(
     def resource_tags(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
-        '''The tags attached to the resource created by Image Builder.'''
+        '''The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], jsii.get(self, "resourceTags"))
 
     @resource_tags.setter
@@ -6910,7 +6910,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="securityGroupIds")
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''The security group IDs of the infrastructure configuration.'''
+        '''The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.'''
         return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "securityGroupIds"))
 
     @security_group_ids.setter
@@ -6926,7 +6926,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="snsTopicArn")
     def sns_topic_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.'''
+        '''The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "snsTopicArn"))
 
     @sns_topic_arn.setter
@@ -6939,7 +6939,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="subnetId")
     def subnet_id(self) -> typing.Optional[builtins.str]:
-        '''The subnet ID of the infrastructure configuration.'''
+        '''The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "subnetId"))
 
     @subnet_id.setter
@@ -6952,7 +6952,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
-        '''The tags of the infrastructure configuration.'''
+        '''The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output.'''
         return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], jsii.get(self, "tagsRaw"))
 
     @tags_raw.setter
@@ -6970,7 +6970,7 @@ class CfnInfrastructureConfiguration(
     def terminate_instance_on_failure(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''The terminate instance on failure configuration of the infrastructure configuration.'''
+        '''The terminate instance on failure setting of the infrastructure configuration.'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "terminateInstanceOnFailure"))
 
     @terminate_instance_on_failure.setter
@@ -7357,20 +7357,20 @@ class CfnInfrastructureConfigurationProps:
     ) -> None:
         '''Properties for defining a ``CfnInfrastructureConfiguration``.
 
-        :param instance_profile_name: The instance profile of the infrastructure configuration.
+        :param instance_profile_name: The instance profile to associate with the instance used to customize your Amazon EC2 AMI.
         :param name: The name of the infrastructure configuration.
         :param description: The description of the infrastructure configuration.
-        :param instance_metadata_options: The instance metadata option settings for the infrastructure configuration.
-        :param instance_types: The instance types of the infrastructure configuration.
-        :param key_pair: The Amazon EC2 key pair of the infrastructure configuration.
-        :param logging: The logging configuration defines where Image Builder uploads your logs.
+        :param instance_metadata_options: The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.
+        :param instance_types: The instance types of the infrastructure configuration. You can specify one or more instance types to use for this build. The service will pick one of these instance types based on availability.
+        :param key_pair: The key pair of the infrastructure configuration. You can use this to log on to and debug the instance used to create your image.
+        :param logging: The logging configuration of the infrastructure configuration.
         :param placement: The instance placement settings that define where the instances that are launched from your image will run.
-        :param resource_tags: The tags attached to the resource created by Image Builder.
-        :param security_group_ids: The security group IDs of the infrastructure configuration.
-        :param sns_topic_arn: The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.
-        :param subnet_id: The subnet ID of the infrastructure configuration.
-        :param tags: The tags of the infrastructure configuration.
-        :param terminate_instance_on_failure: The terminate instance on failure configuration of the infrastructure configuration.
+        :param resource_tags: The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process. Tags are formatted as key value pairs.
+        :param security_group_ids: The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.
+        :param sns_topic_arn: The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications. .. epigraph:: EC2 Image Builder is unable to send notifications to SNS topics that are encrypted using keys from other accounts. The key that is used to encrypt the SNS topic must reside in the account that the Image Builder service runs under.
+        :param subnet_id: The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.
+        :param tags: The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output. Tags are formatted as key value pairs.
+        :param terminate_instance_on_failure: The terminate instance on failure setting of the infrastructure configuration. Set to false if you want Image Builder to retain the instance used to configure your AMI if the build or test phase of your workflow fails.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html
         :exampleMetadata: fixture=_generated
@@ -7464,7 +7464,7 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def instance_profile_name(self) -> builtins.str:
-        '''The instance profile of the infrastructure configuration.
+        '''The instance profile to associate with the instance used to customize your Amazon EC2 AMI.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-instanceprofilename
         '''
@@ -7495,7 +7495,7 @@ class CfnInfrastructureConfigurationProps:
     def instance_metadata_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnInfrastructureConfiguration.InstanceMetadataOptionsProperty]]:
-        '''The instance metadata option settings for the infrastructure configuration.
+        '''The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-instancemetadataoptions
         '''
@@ -7506,6 +7506,8 @@ class CfnInfrastructureConfigurationProps:
     def instance_types(self) -> typing.Optional[typing.List[builtins.str]]:
         '''The instance types of the infrastructure configuration.
 
+        You can specify one or more instance types to use for this build. The service will pick one of these instance types based on availability.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-instancetypes
         '''
         result = self._values.get("instance_types")
@@ -7513,7 +7515,9 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def key_pair(self) -> typing.Optional[builtins.str]:
-        '''The Amazon EC2 key pair of the infrastructure configuration.
+        '''The key pair of the infrastructure configuration.
+
+        You can use this to log on to and debug the instance used to create your image.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-keypair
         '''
@@ -7524,7 +7528,7 @@ class CfnInfrastructureConfigurationProps:
     def logging(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnInfrastructureConfiguration.LoggingProperty]]:
-        '''The logging configuration defines where Image Builder uploads your logs.
+        '''The logging configuration of the infrastructure configuration.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-logging
         '''
@@ -7546,7 +7550,9 @@ class CfnInfrastructureConfigurationProps:
     def resource_tags(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
-        '''The tags attached to the resource created by Image Builder.
+        '''The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process.
+
+        Tags are formatted as key value pairs.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-resourcetags
         '''
@@ -7555,7 +7561,7 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''The security group IDs of the infrastructure configuration.
+        '''The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-securitygroupids
         '''
@@ -7564,7 +7570,11 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def sns_topic_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.
+        '''The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications.
+
+        .. epigraph::
+
+           EC2 Image Builder is unable to send notifications to SNS topics that are encrypted using keys from other accounts. The key that is used to encrypt the SNS topic must reside in the account that the Image Builder service runs under.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-snstopicarn
         '''
@@ -7573,7 +7583,7 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def subnet_id(self) -> typing.Optional[builtins.str]:
-        '''The subnet ID of the infrastructure configuration.
+        '''The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-subnetid
         '''
@@ -7582,7 +7592,9 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
-        '''The tags of the infrastructure configuration.
+        '''The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output.
+
+        Tags are formatted as key value pairs.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-tags
         '''
@@ -7593,7 +7605,9 @@ class CfnInfrastructureConfigurationProps:
     def terminate_instance_on_failure(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''The terminate instance on failure configuration of the infrastructure configuration.
+        '''The terminate instance on failure setting of the infrastructure configuration.
+
+        Set to false if you want Image Builder to retain the instance used to configure your AMI if the build or test phase of your workflow fails.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-terminateinstanceonfailure
         '''