aws-cdk-lib 2.175.1__py3-none-any.whl → 2.177.0__py3-none-any.whl

aws_cdk/aws_s3_notifications/__init__.py

@@ -126,7 +126,7 @@ class LambdaDestination(
     @jsii.member(jsii_name="bind")
     def bind(
         self,
-        _scope: _constructs_77d1e7e8.Construct,
+        scope: _constructs_77d1e7e8.Construct,
         bucket: _IBucket_42e086fd,
     ) -> _BucketNotificationDestinationConfig_a4c4f83d:
         '''Registers this resource to receive notifications for the specified bucket.
@@ -135,14 +135,14 @@ class LambdaDestination(
         pair and the result will be cached, so there is no need to implement
         idempotency in each destination.
 
-        :param _scope: -
+        :param scope: -
         :param bucket: -
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__72fb0e43c5d0bdebbc9b643b327c5cd42f851dbe4c4a6ac53bb2849787b3adec)
-            check_type(argname="argument _scope", value=_scope, expected_type=type_hints["_scope"])
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
-        return typing.cast(_BucketNotificationDestinationConfig_a4c4f83d, jsii.invoke(self, "bind", [_scope, bucket]))
+        return typing.cast(_BucketNotificationDestinationConfig_a4c4f83d, jsii.invoke(self, "bind", [scope, bucket]))
 
 
 @jsii.implements(_IBucketNotificationDestination_ae5ca51a)
@@ -255,7 +255,7 @@ def _typecheckingstub__aa31f009d508c5e9716ef8081ccf63abb6866ffbf349417ea81abf6f6
     pass
 
 def _typecheckingstub__72fb0e43c5d0bdebbc9b643b327c5cd42f851dbe4c4a6ac53bb2849787b3adec(
-    _scope: _constructs_77d1e7e8.Construct,
+    scope: _constructs_77d1e7e8.Construct,
     bucket: _IBucket_42e086fd,
 ) -> None:
     """Type checking stubs"""

aws_cdk/aws_s3tables/__init__.py

@@ -86,7 +86,7 @@ class CfnTableBucket(
 
     For more information, see `Creating a table bucket <https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-buckets-create.html>`_ in the *Amazon Simple Storage Service User Guide* .
 
-    - **Permissions** - You must have the ``s3:CreateTableBucket`` permission to use this operation.
+    - **Permissions** - You must have the ``s3tables:CreateTableBucket`` permission to use this operation.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3tables-tablebucket.html
     :cloudformationResource: AWS::S3Tables::TableBucket
@@ -312,7 +312,7 @@ class CfnTableBucketPolicy(
 
     For more information, see `Adding a table bucket policy <https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-bucket-policy.html#table-bucket-policy-add>`_ in the *Amazon Simple Storage Service User Guide* .
 
-    - **Permissions** - You must have the ``s3:PutTableBucketPolicy`` permission to use this operation.
+    - **Permissions** - You must have the ``s3tables:PutTableBucketPolicy`` permission to use this operation.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3tables-tablebucketpolicy.html
     :cloudformationResource: AWS::S3Tables::TableBucketPolicy

aws_cdk/aws_ses/__init__.py

@@ -772,7 +772,8 @@ class CfnConfigurationSet(
                 suppressed_reasons=["suppressedReasons"]
             ),
             tracking_options=ses.CfnConfigurationSet.TrackingOptionsProperty(
-                custom_redirect_domain="customRedirectDomain"
+                custom_redirect_domain="customRedirectDomain",
+                https_policy="httpsPolicy"
             ),
             vdm_options=ses.CfnConfigurationSet.VdmOptionsProperty(
                 dashboard_options=ses.CfnConfigurationSet.DashboardOptionsProperty(
@@ -1370,13 +1371,17 @@ class CfnConfigurationSet(
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_ses.CfnConfigurationSet.TrackingOptionsProperty",
         jsii_struct_bases=[],
-        name_mapping={"custom_redirect_domain": "customRedirectDomain"},
+        name_mapping={
+            "custom_redirect_domain": "customRedirectDomain",
+            "https_policy": "httpsPolicy",
+        },
     )
     class TrackingOptionsProperty:
         def __init__(
             self,
             *,
             custom_redirect_domain: typing.Optional[builtins.str] = None,
+            https_policy: typing.Optional[builtins.str] = None,
         ) -> None:
             '''An object that defines the tracking options for a configuration set.
 
@@ -1387,6 +1392,7 @@ class CfnConfigurationSet(
             For more information, see `Configuring Custom Domains to Handle Open and Click Tracking <https://docs.aws.amazon.com/ses/latest/dg/configure-custom-open-click-domains.html>`_ in the *Amazon SES Developer Guide* .
 
             :param custom_redirect_domain: The custom subdomain that is used to redirect email recipients to the Amazon SES event tracking domain.
+            :param https_policy: The https policy to use for tracking open and click events.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ses-configurationset-trackingoptions.html
             :exampleMetadata: fixture=_generated
@@ -1398,15 +1404,19 @@ class CfnConfigurationSet(
                 from aws_cdk import aws_ses as ses
                 
                 tracking_options_property = ses.CfnConfigurationSet.TrackingOptionsProperty(
-                    custom_redirect_domain="customRedirectDomain"
+                    custom_redirect_domain="customRedirectDomain",
+                    https_policy="httpsPolicy"
                 )
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__9cb3a7d8357d451a88f3bdd86fea15ef7d167ba61579a61a8e1fe9eb6bfa73f2)
                 check_type(argname="argument custom_redirect_domain", value=custom_redirect_domain, expected_type=type_hints["custom_redirect_domain"])
+                check_type(argname="argument https_policy", value=https_policy, expected_type=type_hints["https_policy"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
             if custom_redirect_domain is not None:
                 self._values["custom_redirect_domain"] = custom_redirect_domain
+            if https_policy is not None:
+                self._values["https_policy"] = https_policy
 
         @builtins.property
         def custom_redirect_domain(self) -> typing.Optional[builtins.str]:
@@ -1417,6 +1427,15 @@ class CfnConfigurationSet(
             result = self._values.get("custom_redirect_domain")
             return typing.cast(typing.Optional[builtins.str], result)
 
+        @builtins.property
+        def https_policy(self) -> typing.Optional[builtins.str]:
+            '''The https policy to use for tracking open and click events.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ses-configurationset-trackingoptions.html#cfn-ses-configurationset-trackingoptions-httpspolicy
+            '''
+            result = self._values.get("https_policy")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -2380,7 +2399,8 @@ class CfnConfigurationSetProps:
                     suppressed_reasons=["suppressedReasons"]
                 ),
                 tracking_options=ses.CfnConfigurationSet.TrackingOptionsProperty(
-                    custom_redirect_domain="customRedirectDomain"
+                    custom_redirect_domain="customRedirectDomain",
+                    https_policy="httpsPolicy"
                 ),
                 vdm_options=ses.CfnConfigurationSet.VdmOptionsProperty(
                     dashboard_options=ses.CfnConfigurationSet.DashboardOptionsProperty(
@@ -16937,6 +16957,7 @@ def _typecheckingstub__8d9a9f4a0b048a750b42ffb05bbf2f29193ab82552fe268e651a27bc5
 def _typecheckingstub__9cb3a7d8357d451a88f3bdd86fea15ef7d167ba61579a61a8e1fe9eb6bfa73f2(
     *,
     custom_redirect_domain: typing.Optional[builtins.str] = None,
+    https_policy: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass

aws_cdk/aws_sns/__init__.py

@@ -1126,6 +1126,7 @@ class CfnTopic(
                 success_feedback_sample_rate="successFeedbackSampleRate"
             )],
             display_name="displayName",
+            fifo_throughput_scope="fifoThroughputScope",
             fifo_topic=False,
             kms_master_key_id="kmsMasterKeyId",
             signature_version="signatureVersion",
@@ -1152,6 +1153,7 @@ class CfnTopic(
         data_protection_policy: typing.Any = None,
         delivery_status_logging: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnTopic.LoggingConfigProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         display_name: typing.Optional[builtins.str] = None,
+        fifo_throughput_scope: typing.Optional[builtins.str] = None,
         fifo_topic: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         kms_master_key_id: typing.Optional[builtins.str] = None,
         signature_version: typing.Optional[builtins.str] = None,
@@ -1168,6 +1170,7 @@ class CfnTopic(
         :param data_protection_policy: The body of the policy document you want to use for this topic. You can only add one policy per topic. The policy must be in JSON string format. Length Constraints: Maximum length of 30,720.
         :param delivery_status_logging: The ``DeliveryStatusLogging`` configuration enables you to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:. - HTTP - Amazon Kinesis Data Firehose - AWS Lambda - Platform application endpoint - Amazon Simple Queue Service Once configured, log entries are sent to Amazon CloudWatch Logs.
         :param display_name: The display name to use for an Amazon SNS topic with SMS subscriptions. The display name must be maximum 100 characters long, including hyphens (-), underscores (_), spaces, and tabs.
+        :param fifo_throughput_scope: 
         :param fifo_topic: Set to true to create a FIFO topic.
         :param kms_master_key_id: The ID of an AWS managed customer master key (CMK) for Amazon SNS or a custom CMK. For more information, see `Key terms <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html#sse-key-terms>`_ . For more examples, see ``[KeyId](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters)`` in the *AWS Key Management Service API Reference* . This property applies only to `server-side-encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html>`_ .
         :param signature_version: The signature version corresponds to the hashing algorithm used while creating the signature of the notifications, subscription confirmations, or unsubscribe confirmation messages sent by Amazon SNS. By default, ``SignatureVersion`` is set to ``1`` .
@@ -1186,6 +1189,7 @@ class CfnTopic(
             data_protection_policy=data_protection_policy,
             delivery_status_logging=delivery_status_logging,
             display_name=display_name,
+            fifo_throughput_scope=fifo_throughput_scope,
             fifo_topic=fifo_topic,
             kms_master_key_id=kms_master_key_id,
             signature_version=signature_version,
@@ -1331,6 +1335,18 @@ class CfnTopic(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "displayName", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="fifoThroughputScope")
+    def fifo_throughput_scope(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "fifoThroughputScope"))
+
+    @fifo_throughput_scope.setter
+    def fifo_throughput_scope(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f138e6ceb99033a1d226873b4907fde5a0fa94382f4183d377b2de329c67e644)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "fifoThroughputScope", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="fifoTopic")
     def fifo_topic(
@@ -2008,6 +2024,7 @@ class CfnTopicPolicyProps:
         "data_protection_policy": "dataProtectionPolicy",
         "delivery_status_logging": "deliveryStatusLogging",
         "display_name": "displayName",
+        "fifo_throughput_scope": "fifoThroughputScope",
         "fifo_topic": "fifoTopic",
         "kms_master_key_id": "kmsMasterKeyId",
         "signature_version": "signatureVersion",
@@ -2026,6 +2043,7 @@ class CfnTopicProps:
         data_protection_policy: typing.Any = None,
         delivery_status_logging: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnTopic.LoggingConfigProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         display_name: typing.Optional[builtins.str] = None,
+        fifo_throughput_scope: typing.Optional[builtins.str] = None,
         fifo_topic: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         kms_master_key_id: typing.Optional[builtins.str] = None,
         signature_version: typing.Optional[builtins.str] = None,
@@ -2041,6 +2059,7 @@ class CfnTopicProps:
         :param data_protection_policy: The body of the policy document you want to use for this topic. You can only add one policy per topic. The policy must be in JSON string format. Length Constraints: Maximum length of 30,720.
         :param delivery_status_logging: The ``DeliveryStatusLogging`` configuration enables you to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:. - HTTP - Amazon Kinesis Data Firehose - AWS Lambda - Platform application endpoint - Amazon Simple Queue Service Once configured, log entries are sent to Amazon CloudWatch Logs.
         :param display_name: The display name to use for an Amazon SNS topic with SMS subscriptions. The display name must be maximum 100 characters long, including hyphens (-), underscores (_), spaces, and tabs.
+        :param fifo_throughput_scope: 
         :param fifo_topic: Set to true to create a FIFO topic.
         :param kms_master_key_id: The ID of an AWS managed customer master key (CMK) for Amazon SNS or a custom CMK. For more information, see `Key terms <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html#sse-key-terms>`_ . For more examples, see ``[KeyId](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters)`` in the *AWS Key Management Service API Reference* . This property applies only to `server-side-encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html>`_ .
         :param signature_version: The signature version corresponds to the hashing algorithm used while creating the signature of the notifications, subscription confirmations, or unsubscribe confirmation messages sent by Amazon SNS. By default, ``SignatureVersion`` is set to ``1`` .
@@ -2074,6 +2093,7 @@ class CfnTopicProps:
                     success_feedback_sample_rate="successFeedbackSampleRate"
                 )],
                 display_name="displayName",
+                fifo_throughput_scope="fifoThroughputScope",
                 fifo_topic=False,
                 kms_master_key_id="kmsMasterKeyId",
                 signature_version="signatureVersion",
@@ -2096,6 +2116,7 @@ class CfnTopicProps:
             check_type(argname="argument data_protection_policy", value=data_protection_policy, expected_type=type_hints["data_protection_policy"])
             check_type(argname="argument delivery_status_logging", value=delivery_status_logging, expected_type=type_hints["delivery_status_logging"])
             check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
+            check_type(argname="argument fifo_throughput_scope", value=fifo_throughput_scope, expected_type=type_hints["fifo_throughput_scope"])
             check_type(argname="argument fifo_topic", value=fifo_topic, expected_type=type_hints["fifo_topic"])
             check_type(argname="argument kms_master_key_id", value=kms_master_key_id, expected_type=type_hints["kms_master_key_id"])
             check_type(argname="argument signature_version", value=signature_version, expected_type=type_hints["signature_version"])
@@ -2114,6 +2135,8 @@ class CfnTopicProps:
             self._values["delivery_status_logging"] = delivery_status_logging
         if display_name is not None:
             self._values["display_name"] = display_name
+        if fifo_throughput_scope is not None:
+            self._values["fifo_throughput_scope"] = fifo_throughput_scope
         if fifo_topic is not None:
             self._values["fifo_topic"] = fifo_topic
         if kms_master_key_id is not None:
@@ -2198,6 +2221,14 @@ class CfnTopicProps:
         result = self._values.get("display_name")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def fifo_throughput_scope(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topic.html#cfn-sns-topic-fifothroughputscope
+        '''
+        result = self._values.get("fifo_throughput_scope")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def fifo_topic(
         self,
@@ -6813,6 +6844,7 @@ def _typecheckingstub__3c3e689eaa6b740299fa6db2e53acc51021bc5deb0a8dd6d7bc29e8a3
     data_protection_policy: typing.Any = None,
     delivery_status_logging: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnTopic.LoggingConfigProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     display_name: typing.Optional[builtins.str] = None,
+    fifo_throughput_scope: typing.Optional[builtins.str] = None,
     fifo_topic: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     kms_master_key_id: typing.Optional[builtins.str] = None,
     signature_version: typing.Optional[builtins.str] = None,
@@ -6866,6 +6898,12 @@ def _typecheckingstub__7e672f7b6cfea2a409a715963f8ef1b01848153bb4867f8ad868e0bcb
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f138e6ceb99033a1d226873b4907fde5a0fa94382f4183d377b2de329c67e644(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__2a91ed56c1865e9ea5cd3d8d5ffef0aab07b45ce41c2580607fd141166a194ea(
     value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
 ) -> None:
@@ -7017,6 +7055,7 @@ def _typecheckingstub__39eaeffb1fed865d99c7cf51cdf720d8471aec20b2163161ef50035fb
     data_protection_policy: typing.Any = None,
     delivery_status_logging: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnTopic.LoggingConfigProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     display_name: typing.Optional[builtins.str] = None,
+    fifo_throughput_scope: typing.Optional[builtins.str] = None,
     fifo_topic: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     kms_master_key_id: typing.Optional[builtins.str] = None,
     signature_version: typing.Optional[builtins.str] = None,

aws_cdk/aws_ssm/__init__.py

@@ -332,7 +332,7 @@ class CfnAssociation(
         :param name: The name of the SSM document that contains the configuration information for the instance. You can specify ``Command`` or ``Automation`` documents. The documents can be AWS -predefined documents, documents you created, or a document that is shared with you from another account. For SSM documents that are shared with you from other AWS accounts , you must specify the complete SSM document ARN, in the following format: ``arn:partition:ssm:region:account-id:document/document-name`` For example: ``arn:aws:ssm:us-east-2:12345678912:document/My-Shared-Document`` For AWS -predefined documents and SSM documents you created in your account, you only need to specify the document name. For example, ``AWS -ApplyPatchBaseline`` or ``My-Document`` .
         :param apply_only_at_cron_interval: By default, when you create a new association, the system runs it immediately after it is created and then according to the schedule you specified. Specify this option if you don't want an association to run immediately after you create it. This parameter is not supported for rate expressions.
         :param association_name: Specify a descriptive name for the association.
-        :param automation_target_parameter_name: Choose the parameter that will define how your automation will branch out. This target is required for associations that use an Automation runbook and target resources by using rate controls. Automation is a capability of AWS Systems Manager .
+        :param automation_target_parameter_name: Choose the parameter that will define how your automation will branch out. This target is required for associations that use an Automation runbook and target resources by using rate controls. Automation is a tool in AWS Systems Manager .
         :param calendar_names: The names or Amazon Resource Names (ARNs) of the Change Calendar type documents your associations are gated under. The associations only run when that Change Calendar is open. For more information, see `AWS Systems Manager Change Calendar <https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar>`_ .
         :param compliance_severity: The severity level that is assigned to the association.
         :param document_version: The version of the SSM document to associate with the target. .. epigraph:: Note the following important information. - State Manager doesn't support running associations that use a new version of a document if that document is shared from another account. State Manager always runs the ``default`` version of a document if shared from another account, even though the Systems Manager console shows that a new version was processed. If you want to run an association using a new version of a document shared form another account, you must set the document version to ``default`` . - ``DocumentVersion`` is not valid for documents owned by AWS , such as ``AWS-RunPatchBaseline`` or ``AWS-UpdateSSMAgent`` . If you specify ``DocumentVersion`` for an AWS document, the system returns the following error: "Error occurred during operation 'CreateAssociation'." (RequestToken: , HandlerErrorCode: GeneralServiceException).
@@ -937,7 +937,7 @@ class CfnAssociationProps:
         :param name: The name of the SSM document that contains the configuration information for the instance. You can specify ``Command`` or ``Automation`` documents. The documents can be AWS -predefined documents, documents you created, or a document that is shared with you from another account. For SSM documents that are shared with you from other AWS accounts , you must specify the complete SSM document ARN, in the following format: ``arn:partition:ssm:region:account-id:document/document-name`` For example: ``arn:aws:ssm:us-east-2:12345678912:document/My-Shared-Document`` For AWS -predefined documents and SSM documents you created in your account, you only need to specify the document name. For example, ``AWS -ApplyPatchBaseline`` or ``My-Document`` .
         :param apply_only_at_cron_interval: By default, when you create a new association, the system runs it immediately after it is created and then according to the schedule you specified. Specify this option if you don't want an association to run immediately after you create it. This parameter is not supported for rate expressions.
         :param association_name: Specify a descriptive name for the association.
-        :param automation_target_parameter_name: Choose the parameter that will define how your automation will branch out. This target is required for associations that use an Automation runbook and target resources by using rate controls. Automation is a capability of AWS Systems Manager .
+        :param automation_target_parameter_name: Choose the parameter that will define how your automation will branch out. This target is required for associations that use an Automation runbook and target resources by using rate controls. Automation is a tool in AWS Systems Manager .
         :param calendar_names: The names or Amazon Resource Names (ARNs) of the Change Calendar type documents your associations are gated under. The associations only run when that Change Calendar is open. For more information, see `AWS Systems Manager Change Calendar <https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar>`_ .
         :param compliance_severity: The severity level that is assigned to the association.
         :param document_version: The version of the SSM document to associate with the target. .. epigraph:: Note the following important information. - State Manager doesn't support running associations that use a new version of a document if that document is shared from another account. State Manager always runs the ``default`` version of a document if shared from another account, even though the Systems Manager console shows that a new version was processed. If you want to run an association using a new version of a document shared form another account, you must set the document version to ``default`` . - ``DocumentVersion`` is not valid for documents owned by AWS , such as ``AWS-RunPatchBaseline`` or ``AWS-UpdateSSMAgent`` . If you specify ``DocumentVersion`` for an AWS document, the system returns the following error: "Error occurred during operation 'CreateAssociation'." (RequestToken: , HandlerErrorCode: GeneralServiceException).
@@ -1093,7 +1093,7 @@ class CfnAssociationProps:
     def automation_target_parameter_name(self) -> typing.Optional[builtins.str]:
         '''Choose the parameter that will define how your automation will branch out.
 
-        This target is required for associations that use an Automation runbook and target resources by using rate controls. Automation is a capability of AWS Systems Manager .
+        This target is required for associations that use an Automation runbook and target resources by using rate controls. Automation is a tool in AWS Systems Manager .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-association.html#cfn-ssm-association-automationtargetparametername
         '''
@@ -1285,7 +1285,7 @@ class CfnDocument(
 ):
     '''The ``AWS::SSM::Document`` resource creates a Systems Manager (SSM) document in AWS Systems Manager .
 
-    This document d efines the actions that Systems Manager performs on your AWS resources.
+    This document defines the actions that Systems Manager performs on your AWS resources.
     .. epigraph::
 
        This resource does not support AWS CloudFormation drift detection.
@@ -4700,6 +4700,9 @@ class CfnParameter(
        To add, update, or remove tags during stack update, you must have IAM permissions for both ``ssm:AddTagsToResource`` and ``ssm:RemoveTagsFromResource`` . For more information, see `Managing Access Using Policies <https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam.html#security_iam_access-manage>`_ in the *AWS Systems Manager User Guide* .
 
     For information about valid values for parameters, see `About requirements and constraints for parameter names <https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-su-create.html#sysman-parameter-name-constraints>`_ in the *AWS Systems Manager User Guide* and `PutParameter <https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html>`_ in the *AWS Systems Manager API Reference* .
+    .. epigraph::
+
+       Parameters of type ``SecureString`` are not supported by AWS CloudFormation .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-parameter.html
     :cloudformationResource: AWS::SSM::Parameter
@@ -4746,7 +4749,7 @@ class CfnParameter(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param type: The type of parameter.
+        :param type: The type of parameter. .. epigraph:: Parameters of type ``SecureString`` are not supported by AWS CloudFormation .
         :param value: The parameter value. .. epigraph:: If type is ``StringList`` , the system returns a comma-separated string with no spaces between commas in the ``Value`` field.
         :param allowed_pattern: A regular expression used to validate the parameter value. For example, for ``String`` types with values restricted to numbers, you can specify the following: ``AllowedPattern=^\\d+$``
         :param data_type: The data type of the parameter, such as ``text`` or ``aws:ec2:image`` . The default is ``text`` .
@@ -4987,7 +4990,7 @@ class CfnParameterProps:
     ) -> None:
         '''Properties for defining a ``CfnParameter``.
 
-        :param type: The type of parameter.
+        :param type: The type of parameter. .. epigraph:: Parameters of type ``SecureString`` are not supported by AWS CloudFormation .
         :param value: The parameter value. .. epigraph:: If type is ``StringList`` , the system returns a comma-separated string with no spaces between commas in the ``Value`` field.
         :param allowed_pattern: A regular expression used to validate the parameter value. For example, for ``String`` types with values restricted to numbers, you can specify the following: ``AllowedPattern=^\\d+$``
         :param data_type: The data type of the parameter, such as ``text`` or ``aws:ec2:image`` . The default is ``text`` .
@@ -5056,6 +5059,10 @@ class CfnParameterProps:
     def type(self) -> builtins.str:
         '''The type of parameter.
 
+        .. epigraph::
+
+           Parameters of type ``SecureString`` are not supported by AWS CloudFormation .
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-parameter.html#cfn-ssm-parameter-type
         '''
         result = self._values.get("type")
@@ -7210,7 +7217,7 @@ class CfnResourcePolicy(
 ):
     '''Creates or updates a Systems Manager resource policy.
 
-    A resource policy helps you to define the IAM entity (for example, an AWS account ) that can manage your Systems Manager resources. Currently, ``OpsItemGroup`` is the only resource that supports Systems Manager resource policies. The resource policy for ``OpsItemGroup`` enables AWS accounts to view and interact with OpsCenter operational work items (OpsItems). OpsCenter is a capability of Systems Manager .
+    A resource policy helps you to define the IAM entity (for example, an AWS account ) that can manage your Systems Manager resources. Currently, ``OpsItemGroup`` is the only resource that supports Systems Manager resource policies. The resource policy for ``OpsItemGroup`` enables AWS accounts to view and interact with OpsCenter operational work items (OpsItems). OpsCenter is a tool in Systems Manager .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-resourcepolicy.html
     :cloudformationResource: AWS::SSM::ResourcePolicy