aws-cdk-lib 2.176.0__py3-none-any.whl → 2.178.0__py3-none-any.whl

aws_cdk/aws_fms/__init__.py

@@ -364,6 +364,7 @@ class CfnPolicy(
             policy_description="policyDescription",
             resources_clean_up=False,
             resource_set_ids=["resourceSetIds"],
+            resource_tag_logical_operator="resourceTagLogicalOperator",
             resource_tags=[fms.CfnPolicy.ResourceTagProperty(
                 key="key",
         
@@ -394,6 +395,7 @@ class CfnPolicy(
         policy_description: typing.Optional[builtins.str] = None,
         resources_clean_up: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         resource_set_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
+        resource_tag_logical_operator: typing.Optional[builtins.str] = None,
         resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPolicy.ResourceTagProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         resource_type: typing.Optional[builtins.str] = None,
         resource_type_list: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -412,6 +414,7 @@ class CfnPolicy(
         :param policy_description: Your description of the AWS Firewall Manager policy.
         :param resources_clean_up: Indicates whether AWS Firewall Manager should automatically remove protections from resources that leave the policy scope and clean up resources that Firewall Manager is managing for accounts when those accounts leave policy scope. For example, Firewall Manager will disassociate a Firewall Manager managed web ACL from a protected customer resource when the customer resource leaves policy scope. By default, Firewall Manager doesn't remove protections or delete Firewall Manager managed resources. This option is not available for Shield Advanced or AWS WAF Classic policies.
         :param resource_set_ids: The unique identifiers of the resource sets used by the policy.
+        :param resource_tag_logical_operator: Specifies whether to combine multiple resource tags with AND, so that a resource must have all tags to be included or excluded, or OR, so that a resource must have at least one tag. Default: ``AND``
         :param resource_tags: An array of ``ResourceTag`` objects, used to explicitly include resources in the policy scope or explicitly exclude them. If this isn't set, then tags aren't used to modify policy scope. See also ``ExcludeResourceTags`` .
         :param resource_type: The type of resource protected by or in scope of the policy. This is in the format shown in the `AWS Resource Types Reference <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html>`_ . To apply this policy to multiple resource types, specify a resource type of ``ResourceTypeList`` and then specify the resource types in a ``ResourceTypeList`` . The following are valid resource types for each Firewall Manager policy type: - AWS WAF Classic - ``AWS::ApiGateway::Stage`` , ``AWS::CloudFront::Distribution`` , and ``AWS::ElasticLoadBalancingV2::LoadBalancer`` . - AWS WAF - ``AWS::ApiGateway::Stage`` , ``AWS::ElasticLoadBalancingV2::LoadBalancer`` , and ``AWS::CloudFront::Distribution`` . - Shield Advanced - ``AWS::ElasticLoadBalancingV2::LoadBalancer`` , ``AWS::ElasticLoadBalancing::LoadBalancer`` , ``AWS::EC2::EIP`` , and ``AWS::CloudFront::Distribution`` . - Network ACL - ``AWS::EC2::Subnet`` . - Security group usage audit - ``AWS::EC2::SecurityGroup`` . - Security group content audit - ``AWS::EC2::SecurityGroup`` , ``AWS::EC2::NetworkInterface`` , and ``AWS::EC2::Instance`` . - DNS Firewall, AWS Network Firewall , and third-party firewall - ``AWS::EC2::VPC`` .
         :param resource_type_list: An array of ``ResourceType`` objects. Use this only to specify multiple resource types. To specify a single resource type, use ``ResourceType`` .
@@ -432,6 +435,7 @@ class CfnPolicy(
             policy_description=policy_description,
             resources_clean_up=resources_clean_up,
             resource_set_ids=resource_set_ids,
+            resource_tag_logical_operator=resource_tag_logical_operator,
             resource_tags=resource_tags,
             resource_type=resource_type,
             resource_type_list=resource_type_list,
@@ -668,6 +672,22 @@ class CfnPolicy(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "resourceSetIds", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="resourceTagLogicalOperator")
+    def resource_tag_logical_operator(self) -> typing.Optional[builtins.str]:
+        '''Specifies whether to combine multiple resource tags with AND, so that a resource must have all tags to be included or excluded, or OR, so that a resource must have at least one tag.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "resourceTagLogicalOperator"))
+
+    @resource_tag_logical_operator.setter
+    def resource_tag_logical_operator(
+        self,
+        value: typing.Optional[builtins.str],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4c785568d3275bbfb3df2dd3b2ac1d97319f9c06330a57289261dce85d69868f)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "resourceTagLogicalOperator", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="resourceTags")
     def resource_tags(
@@ -2037,6 +2057,7 @@ class CfnPolicy(
         "policy_description": "policyDescription",
         "resources_clean_up": "resourcesCleanUp",
         "resource_set_ids": "resourceSetIds",
+        "resource_tag_logical_operator": "resourceTagLogicalOperator",
         "resource_tags": "resourceTags",
         "resource_type": "resourceType",
         "resource_type_list": "resourceTypeList",
@@ -2057,6 +2078,7 @@ class CfnPolicyProps:
         policy_description: typing.Optional[builtins.str] = None,
         resources_clean_up: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         resource_set_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
+        resource_tag_logical_operator: typing.Optional[builtins.str] = None,
         resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPolicy.ResourceTagProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         resource_type: typing.Optional[builtins.str] = None,
         resource_type_list: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -2074,6 +2096,7 @@ class CfnPolicyProps:
         :param policy_description: Your description of the AWS Firewall Manager policy.
         :param resources_clean_up: Indicates whether AWS Firewall Manager should automatically remove protections from resources that leave the policy scope and clean up resources that Firewall Manager is managing for accounts when those accounts leave policy scope. For example, Firewall Manager will disassociate a Firewall Manager managed web ACL from a protected customer resource when the customer resource leaves policy scope. By default, Firewall Manager doesn't remove protections or delete Firewall Manager managed resources. This option is not available for Shield Advanced or AWS WAF Classic policies.
         :param resource_set_ids: The unique identifiers of the resource sets used by the policy.
+        :param resource_tag_logical_operator: Specifies whether to combine multiple resource tags with AND, so that a resource must have all tags to be included or excluded, or OR, so that a resource must have at least one tag. Default: ``AND``
         :param resource_tags: An array of ``ResourceTag`` objects, used to explicitly include resources in the policy scope or explicitly exclude them. If this isn't set, then tags aren't used to modify policy scope. See also ``ExcludeResourceTags`` .
         :param resource_type: The type of resource protected by or in scope of the policy. This is in the format shown in the `AWS Resource Types Reference <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html>`_ . To apply this policy to multiple resource types, specify a resource type of ``ResourceTypeList`` and then specify the resource types in a ``ResourceTypeList`` . The following are valid resource types for each Firewall Manager policy type: - AWS WAF Classic - ``AWS::ApiGateway::Stage`` , ``AWS::CloudFront::Distribution`` , and ``AWS::ElasticLoadBalancingV2::LoadBalancer`` . - AWS WAF - ``AWS::ApiGateway::Stage`` , ``AWS::ElasticLoadBalancingV2::LoadBalancer`` , and ``AWS::CloudFront::Distribution`` . - Shield Advanced - ``AWS::ElasticLoadBalancingV2::LoadBalancer`` , ``AWS::ElasticLoadBalancing::LoadBalancer`` , ``AWS::EC2::EIP`` , and ``AWS::CloudFront::Distribution`` . - Network ACL - ``AWS::EC2::Subnet`` . - Security group usage audit - ``AWS::EC2::SecurityGroup`` . - Security group content audit - ``AWS::EC2::SecurityGroup`` , ``AWS::EC2::NetworkInterface`` , and ``AWS::EC2::Instance`` . - DNS Firewall, AWS Network Firewall , and third-party firewall - ``AWS::EC2::VPC`` .
         :param resource_type_list: An array of ``ResourceType`` objects. Use this only to specify multiple resource types. To specify a single resource type, use ``ResourceType`` .
@@ -2162,6 +2185,7 @@ class CfnPolicyProps:
                 policy_description="policyDescription",
                 resources_clean_up=False,
                 resource_set_ids=["resourceSetIds"],
+                resource_tag_logical_operator="resourceTagLogicalOperator",
                 resource_tags=[fms.CfnPolicy.ResourceTagProperty(
                     key="key",
             
@@ -2188,6 +2212,7 @@ class CfnPolicyProps:
             check_type(argname="argument policy_description", value=policy_description, expected_type=type_hints["policy_description"])
             check_type(argname="argument resources_clean_up", value=resources_clean_up, expected_type=type_hints["resources_clean_up"])
             check_type(argname="argument resource_set_ids", value=resource_set_ids, expected_type=type_hints["resource_set_ids"])
+            check_type(argname="argument resource_tag_logical_operator", value=resource_tag_logical_operator, expected_type=type_hints["resource_tag_logical_operator"])
             check_type(argname="argument resource_tags", value=resource_tags, expected_type=type_hints["resource_tags"])
             check_type(argname="argument resource_type", value=resource_type, expected_type=type_hints["resource_type"])
             check_type(argname="argument resource_type_list", value=resource_type_list, expected_type=type_hints["resource_type_list"])
@@ -2210,6 +2235,8 @@ class CfnPolicyProps:
             self._values["resources_clean_up"] = resources_clean_up
         if resource_set_ids is not None:
             self._values["resource_set_ids"] = resource_set_ids
+        if resource_tag_logical_operator is not None:
+            self._values["resource_tag_logical_operator"] = resource_tag_logical_operator
         if resource_tags is not None:
             self._values["resource_tags"] = resource_tags
         if resource_type is not None:
@@ -2468,6 +2495,17 @@ class CfnPolicyProps:
         result = self._values.get("resource_set_ids")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def resource_tag_logical_operator(self) -> typing.Optional[builtins.str]:
+        '''Specifies whether to combine multiple resource tags with AND, so that a resource must have all tags to be included or excluded, or OR, so that a resource must have at least one tag.
+
+        Default: ``AND``
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html#cfn-fms-policy-resourcetaglogicaloperator
+        '''
+        result = self._values.get("resource_tag_logical_operator")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def resource_tags(
         self,
@@ -2915,6 +2953,7 @@ def _typecheckingstub__a29b3b13041b0ccbd18a0c29ff5cff0adbc0e2aedc87591f1c54ec7a1
     policy_description: typing.Optional[builtins.str] = None,
     resources_clean_up: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     resource_set_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
+    resource_tag_logical_operator: typing.Optional[builtins.str] = None,
     resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPolicy.ResourceTagProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     resource_type: typing.Optional[builtins.str] = None,
     resource_type_list: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -2995,6 +3034,12 @@ def _typecheckingstub__048e93c726f9c5fe6e9b627c041b37e3458add761a76189dddf42b880
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__4c785568d3275bbfb3df2dd3b2ac1d97319f9c06330a57289261dce85d69868f(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__9c77d40603d6f4c051dd3f9b5d662e1b2f8b3690fcfa612876de86b1cfb05ac0(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnPolicy.ResourceTagProperty]]]],
 ) -> None:
@@ -3133,6 +3178,7 @@ def _typecheckingstub__8455eef74a6daf8d86ebd4c14f18184bf9c938d95a07a9902bf05c79f
     policy_description: typing.Optional[builtins.str] = None,
     resources_clean_up: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     resource_set_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
+    resource_tag_logical_operator: typing.Optional[builtins.str] = None,
     resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPolicy.ResourceTagProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     resource_type: typing.Optional[builtins.str] = None,
     resource_type_list: typing.Optional[typing.Sequence[builtins.str]] = None,

aws_cdk/aws_gamelift/__init__.py

@@ -8389,8 +8389,8 @@ class CfnGameSessionQueue(
 
             Changing the priority order will affect how game sessions are placed.
 
-            :param location_order: The prioritization order to use for fleet locations, when the ``PriorityOrder`` property includes ``LOCATION`` . Locations are identified by AWS Region codes such as ``us-west-2`` . Each location can only be listed once.
-            :param priority_order: The recommended sequence to use when prioritizing where to place new game sessions. Each type can only be listed once. - ``LATENCY`` -- FleetIQ prioritizes locations where the average player latency (provided in each game session request) is lowest. - ``COST`` -- FleetIQ prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) for each destination in the queue. - ``DESTINATION`` -- FleetIQ prioritizes based on the order that destinations are listed in the queue configuration. - ``LOCATION`` -- FleetIQ prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
+            :param location_order: The prioritization order to use for fleet locations, when the ``PriorityOrder`` property includes ``LOCATION`` . Locations can include AWS Region codes (such as ``us-west-2`` ), local zones, and custom locations (for Anywhere fleets). Each location must be listed only once. For details, see `Amazon GameLift service locations. <https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html>`_
+            :param priority_order: A custom sequence to use when prioritizing where to place new game sessions. Each priority type is listed once. - ``LATENCY`` -- Amazon GameLift prioritizes locations where the average player latency is lowest. Player latency data is provided in each game session placement request. - ``COST`` -- Amazon GameLift prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) of each destination in the queue. - ``DESTINATION`` -- Amazon GameLift prioritizes based on the list order of destinations in the queue configuration. - ``LOCATION`` -- Amazon GameLift prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-gamelift-gamesessionqueue-priorityconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -8420,7 +8420,7 @@ class CfnGameSessionQueue(
         def location_order(self) -> typing.Optional[typing.List[builtins.str]]:
             '''The prioritization order to use for fleet locations, when the ``PriorityOrder`` property includes ``LOCATION`` .
 
-            Locations are identified by AWS Region codes such as ``us-west-2`` . Each location can only be listed once.
+            Locations can include AWS Region codes (such as ``us-west-2`` ), local zones, and custom locations (for Anywhere fleets). Each location must be listed only once. For details, see `Amazon GameLift service locations. <https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html>`_
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-gamelift-gamesessionqueue-priorityconfiguration.html#cfn-gamelift-gamesessionqueue-priorityconfiguration-locationorder
             '''
@@ -8429,14 +8429,12 @@ class CfnGameSessionQueue(
 
         @builtins.property
         def priority_order(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''The recommended sequence to use when prioritizing where to place new game sessions.
+            '''A custom sequence to use when prioritizing where to place new game sessions. Each priority type is listed once.
 
-            Each type can only be listed once.
-
-            - ``LATENCY`` -- FleetIQ prioritizes locations where the average player latency (provided in each game session request) is lowest.
-            - ``COST`` -- FleetIQ prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) for each destination in the queue.
-            - ``DESTINATION`` -- FleetIQ prioritizes based on the order that destinations are listed in the queue configuration.
-            - ``LOCATION`` -- FleetIQ prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
+            - ``LATENCY`` -- Amazon GameLift prioritizes locations where the average player latency is lowest. Player latency data is provided in each game session placement request.
+            - ``COST`` -- Amazon GameLift prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) of each destination in the queue.
+            - ``DESTINATION`` -- Amazon GameLift prioritizes based on the list order of destinations in the queue configuration.
+            - ``LOCATION`` -- Amazon GameLift prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-gamelift-gamesessionqueue-priorityconfiguration.html#cfn-gamelift-gamesessionqueue-priorityconfiguration-priorityorder
             '''