aws-cdk-lib 2.176.0__py3-none-any.whl → 2.178.0__py3-none-any.whl

aws_cdk/aws_imagebuilder/__init__.py

@@ -2161,7 +2161,7 @@ class CfnDistributionConfiguration(
         def __init__(
             self,
             *,
-            ami_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+            ami_tags: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
             description: typing.Optional[builtins.str] = None,
             kms_key_id: typing.Optional[builtins.str] = None,
             launch_permission_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDistributionConfiguration.LaunchPermissionConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -2227,13 +2227,13 @@ class CfnDistributionConfiguration(
         @builtins.property
         def ami_tags(
             self,
-        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
+        ) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
             '''The tags to apply to AMIs distributed to this Region.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-distributionconfiguration-amidistributionconfiguration.html#cfn-imagebuilder-distributionconfiguration-amidistributionconfiguration-amitags
             '''
             result = self._values.get("ami_tags")
-            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], result)
+            return typing.cast(typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]], result)
 
         @builtins.property
         def description(self) -> typing.Optional[builtins.str]:
@@ -3789,7 +3789,7 @@ class CfnImage(
             You must have at least one build component to create a recipe, but test components are not required. If you have added tests, they run after the image is created, to ensure that the target image is functional and can be used reliably for launching Amazon EC2 instances.
 
             :param image_tests_enabled: Determines if tests should run after building the image. Image Builder defaults to enable tests to run following the image build, before image distribution.
-            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout attribute is not currently active. This value is ignored.
+            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-image-imagetestsconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -3834,7 +3834,7 @@ class CfnImage(
 
             .. epigraph::
 
-               The timeout attribute is not currently active. This value is ignored.
+               The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-image-imagetestsconfiguration.html#cfn-imagebuilder-image-imagetestsconfiguration-timeoutminutes
             '''
@@ -4609,7 +4609,7 @@ class CfnImagePipeline(
             You must have at least one build component to create a recipe, but test components are not required. Your pipeline runs tests after it builds the image, to ensure that the target image is functional and can be used reliably for launching Amazon EC2 instances.
 
             :param image_tests_enabled: Defines if tests should be executed when building this image. For example, ``true`` or ``false`` .
-            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout attribute is not currently active. This value is ignored.
+            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagepipeline-imagetestsconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -4654,7 +4654,7 @@ class CfnImagePipeline(
 
             .. epigraph::
 
-               The timeout attribute is not currently active. This value is ignored.
+               The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagepipeline-imagetestsconfiguration.html#cfn-imagebuilder-imagepipeline-imagetestsconfiguration-timeoutminutes
             '''
@@ -6597,9 +6597,9 @@ class CfnInfrastructureConfiguration(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_imagebuilder.CfnInfrastructureConfiguration",
 ):
-    '''The infrastructure configuration allows you to specify the infrastructure within which to build and test your image.
+    '''Creates a new infrastructure configuration.
 
-    In the infrastructure configuration, you can specify instance types, subnets, and security groups to associate with your instance. You can also associate an Amazon EC2 key pair with the instance used to build your image. This allows you to log on to your instance to troubleshoot if your build fails and you set terminateInstanceOnFailure to false.
+    An infrastructure configuration defines the environment in which your image will be built and tested.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html
     :cloudformationResource: AWS::ImageBuilder::InfrastructureConfiguration
@@ -6661,7 +6661,7 @@ class CfnInfrastructureConfiguration(
         key_pair: typing.Optional[builtins.str] = None,
         logging: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnInfrastructureConfiguration.LoggingProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         placement: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnInfrastructureConfiguration.PlacementProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
-        resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+        resource_tags: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         sns_topic_arn: typing.Optional[builtins.str] = None,
         subnet_id: typing.Optional[builtins.str] = None,
@@ -6671,20 +6671,20 @@ class CfnInfrastructureConfiguration(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param instance_profile_name: The instance profile of the infrastructure configuration.
+        :param instance_profile_name: The instance profile to associate with the instance used to customize your Amazon EC2 AMI.
         :param name: The name of the infrastructure configuration.
         :param description: The description of the infrastructure configuration.
-        :param instance_metadata_options: The instance metadata option settings for the infrastructure configuration.
-        :param instance_types: The instance types of the infrastructure configuration.
-        :param key_pair: The Amazon EC2 key pair of the infrastructure configuration.
-        :param logging: The logging configuration defines where Image Builder uploads your logs.
+        :param instance_metadata_options: The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.
+        :param instance_types: The instance types of the infrastructure configuration. You can specify one or more instance types to use for this build. The service will pick one of these instance types based on availability.
+        :param key_pair: The key pair of the infrastructure configuration. You can use this to log on to and debug the instance used to create your image.
+        :param logging: The logging configuration of the infrastructure configuration.
         :param placement: The instance placement settings that define where the instances that are launched from your image will run.
-        :param resource_tags: The tags attached to the resource created by Image Builder.
-        :param security_group_ids: The security group IDs of the infrastructure configuration.
-        :param sns_topic_arn: The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.
-        :param subnet_id: The subnet ID of the infrastructure configuration.
-        :param tags: The tags of the infrastructure configuration.
-        :param terminate_instance_on_failure: The terminate instance on failure configuration of the infrastructure configuration.
+        :param resource_tags: The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process. Tags are formatted as key value pairs.
+        :param security_group_ids: The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.
+        :param sns_topic_arn: The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications. .. epigraph:: EC2 Image Builder is unable to send notifications to SNS topics that are encrypted using keys from other accounts. The key that is used to encrypt the SNS topic must reside in the account that the Image Builder service runs under.
+        :param subnet_id: The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.
+        :param tags: The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output. Tags are formatted as key value pairs.
+        :param terminate_instance_on_failure: The terminate instance on failure setting of the infrastructure configuration. Set to false if you want Image Builder to retain the instance used to configure your AMI if the build or test phase of your workflow fails.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__8df8a03094d1fe92963a315a657a78657df102ba9fbe66eda2c26bb8eac04479)
@@ -6773,7 +6773,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="instanceProfileName")
     def instance_profile_name(self) -> builtins.str:
-        '''The instance profile of the infrastructure configuration.'''
+        '''The instance profile to associate with the instance used to customize your Amazon EC2 AMI.'''
         return typing.cast(builtins.str, jsii.get(self, "instanceProfileName"))
 
     @instance_profile_name.setter
@@ -6814,7 +6814,7 @@ class CfnInfrastructureConfiguration(
     def instance_metadata_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.InstanceMetadataOptionsProperty"]]:
-        '''The instance metadata option settings for the infrastructure configuration.'''
+        '''The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.InstanceMetadataOptionsProperty"]], jsii.get(self, "instanceMetadataOptions"))
 
     @instance_metadata_options.setter
@@ -6843,7 +6843,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="keyPair")
     def key_pair(self) -> typing.Optional[builtins.str]:
-        '''The Amazon EC2 key pair of the infrastructure configuration.'''
+        '''The key pair of the infrastructure configuration.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "keyPair"))
 
     @key_pair.setter
@@ -6858,7 +6858,7 @@ class CfnInfrastructureConfiguration(
     def logging(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.LoggingProperty"]]:
-        '''The logging configuration defines where Image Builder uploads your logs.'''
+        '''The logging configuration of the infrastructure configuration.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.LoggingProperty"]], jsii.get(self, "logging"))
 
     @logging.setter
@@ -6893,14 +6893,14 @@ class CfnInfrastructureConfiguration(
     @jsii.member(jsii_name="resourceTags")
     def resource_tags(
         self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
-        '''The tags attached to the resource created by Image Builder.'''
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], jsii.get(self, "resourceTags"))
+    ) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
+        '''The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process.'''
+        return typing.cast(typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]], jsii.get(self, "resourceTags"))
 
     @resource_tags.setter
     def resource_tags(
         self,
-        value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]],
+        value: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]],
     ) -> None:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b4e6c2bbdd440425ebe7067a9a03bf4079bbfef4001b7877cb6ce3dcd44c4cb0)
@@ -6910,7 +6910,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="securityGroupIds")
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''The security group IDs of the infrastructure configuration.'''
+        '''The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.'''
         return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "securityGroupIds"))
 
     @security_group_ids.setter
@@ -6926,7 +6926,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="snsTopicArn")
     def sns_topic_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.'''
+        '''The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "snsTopicArn"))
 
     @sns_topic_arn.setter
@@ -6939,7 +6939,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="subnetId")
     def subnet_id(self) -> typing.Optional[builtins.str]:
-        '''The subnet ID of the infrastructure configuration.'''
+        '''The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "subnetId"))
 
     @subnet_id.setter
@@ -6952,7 +6952,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
-        '''The tags of the infrastructure configuration.'''
+        '''The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output.'''
         return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], jsii.get(self, "tagsRaw"))
 
     @tags_raw.setter
@@ -6970,7 +6970,7 @@ class CfnInfrastructureConfiguration(
     def terminate_instance_on_failure(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''The terminate instance on failure configuration of the infrastructure configuration.'''
+        '''The terminate instance on failure setting of the infrastructure configuration.'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "terminateInstanceOnFailure"))
 
     @terminate_instance_on_failure.setter
@@ -7348,7 +7348,7 @@ class CfnInfrastructureConfigurationProps:
         key_pair: typing.Optional[builtins.str] = None,
         logging: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnInfrastructureConfiguration.LoggingProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         placement: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnInfrastructureConfiguration.PlacementProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
-        resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+        resource_tags: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         sns_topic_arn: typing.Optional[builtins.str] = None,
         subnet_id: typing.Optional[builtins.str] = None,
@@ -7357,20 +7357,20 @@ class CfnInfrastructureConfigurationProps:
     ) -> None:
         '''Properties for defining a ``CfnInfrastructureConfiguration``.
 
-        :param instance_profile_name: The instance profile of the infrastructure configuration.
+        :param instance_profile_name: The instance profile to associate with the instance used to customize your Amazon EC2 AMI.
         :param name: The name of the infrastructure configuration.
         :param description: The description of the infrastructure configuration.
-        :param instance_metadata_options: The instance metadata option settings for the infrastructure configuration.
-        :param instance_types: The instance types of the infrastructure configuration.
-        :param key_pair: The Amazon EC2 key pair of the infrastructure configuration.
-        :param logging: The logging configuration defines where Image Builder uploads your logs.
+        :param instance_metadata_options: The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.
+        :param instance_types: The instance types of the infrastructure configuration. You can specify one or more instance types to use for this build. The service will pick one of these instance types based on availability.
+        :param key_pair: The key pair of the infrastructure configuration. You can use this to log on to and debug the instance used to create your image.
+        :param logging: The logging configuration of the infrastructure configuration.
         :param placement: The instance placement settings that define where the instances that are launched from your image will run.
-        :param resource_tags: The tags attached to the resource created by Image Builder.
-        :param security_group_ids: The security group IDs of the infrastructure configuration.
-        :param sns_topic_arn: The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.
-        :param subnet_id: The subnet ID of the infrastructure configuration.
-        :param tags: The tags of the infrastructure configuration.
-        :param terminate_instance_on_failure: The terminate instance on failure configuration of the infrastructure configuration.
+        :param resource_tags: The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process. Tags are formatted as key value pairs.
+        :param security_group_ids: The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.
+        :param sns_topic_arn: The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications. .. epigraph:: EC2 Image Builder is unable to send notifications to SNS topics that are encrypted using keys from other accounts. The key that is used to encrypt the SNS topic must reside in the account that the Image Builder service runs under.
+        :param subnet_id: The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.
+        :param tags: The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output. Tags are formatted as key value pairs.
+        :param terminate_instance_on_failure: The terminate instance on failure setting of the infrastructure configuration. Set to false if you want Image Builder to retain the instance used to configure your AMI if the build or test phase of your workflow fails.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html
         :exampleMetadata: fixture=_generated
@@ -7464,7 +7464,7 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def instance_profile_name(self) -> builtins.str:
-        '''The instance profile of the infrastructure configuration.
+        '''The instance profile to associate with the instance used to customize your Amazon EC2 AMI.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-instanceprofilename
         '''
@@ -7495,7 +7495,7 @@ class CfnInfrastructureConfigurationProps:
     def instance_metadata_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnInfrastructureConfiguration.InstanceMetadataOptionsProperty]]:
-        '''The instance metadata option settings for the infrastructure configuration.
+        '''The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-instancemetadataoptions
         '''
@@ -7506,6 +7506,8 @@ class CfnInfrastructureConfigurationProps:
     def instance_types(self) -> typing.Optional[typing.List[builtins.str]]:
         '''The instance types of the infrastructure configuration.
 
+        You can specify one or more instance types to use for this build. The service will pick one of these instance types based on availability.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-instancetypes
         '''
         result = self._values.get("instance_types")
@@ -7513,7 +7515,9 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def key_pair(self) -> typing.Optional[builtins.str]:
-        '''The Amazon EC2 key pair of the infrastructure configuration.
+        '''The key pair of the infrastructure configuration.
+
+        You can use this to log on to and debug the instance used to create your image.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-keypair
         '''
@@ -7524,7 +7528,7 @@ class CfnInfrastructureConfigurationProps:
     def logging(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnInfrastructureConfiguration.LoggingProperty]]:
-        '''The logging configuration defines where Image Builder uploads your logs.
+        '''The logging configuration of the infrastructure configuration.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-logging
         '''
@@ -7545,17 +7549,19 @@ class CfnInfrastructureConfigurationProps:
     @builtins.property
     def resource_tags(
         self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
-        '''The tags attached to the resource created by Image Builder.
+    ) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
+        '''The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process.
+
+        Tags are formatted as key value pairs.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-resourcetags
         '''
         result = self._values.get("resource_tags")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], result)
+        return typing.cast(typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]], result)
 
     @builtins.property
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''The security group IDs of the infrastructure configuration.
+        '''The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-securitygroupids
         '''
@@ -7564,7 +7570,11 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def sns_topic_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.
+        '''The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications.
+
+        .. epigraph::
+
+           EC2 Image Builder is unable to send notifications to SNS topics that are encrypted using keys from other accounts. The key that is used to encrypt the SNS topic must reside in the account that the Image Builder service runs under.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-snstopicarn
         '''
@@ -7573,7 +7583,7 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def subnet_id(self) -> typing.Optional[builtins.str]:
-        '''The subnet ID of the infrastructure configuration.
+        '''The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-subnetid
         '''
@@ -7582,7 +7592,9 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
-        '''The tags of the infrastructure configuration.
+        '''The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output.
+
+        Tags are formatted as key value pairs.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-tags
         '''
@@ -7593,7 +7605,9 @@ class CfnInfrastructureConfigurationProps:
     def terminate_instance_on_failure(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''The terminate instance on failure configuration of the infrastructure configuration.
+        '''The terminate instance on failure setting of the infrastructure configuration.
+
+        Set to false if you want Image Builder to retain the instance used to configure your AMI if the build or test phase of your workflow fails.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-terminateinstanceonfailure
         '''
@@ -7994,7 +8008,7 @@ class CfnLifecyclePolicy(
             last_launched: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLifecyclePolicy.LastLaunchedProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             regions: typing.Optional[typing.Sequence[builtins.str]] = None,
             shared_accounts: typing.Optional[typing.Sequence[builtins.str]] = None,
-            tag_map: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+            tag_map: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
         ) -> None:
             '''Defines criteria for AMIs that are excluded from lifecycle actions.
 
@@ -8088,13 +8102,13 @@ class CfnLifecyclePolicy(
         @builtins.property
         def tag_map(
             self,
-        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
+        ) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
             '''Lists tags that should be excluded from lifecycle actions for the AMIs that have them.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-lifecyclepolicy-amiexclusionrules.html#cfn-imagebuilder-lifecyclepolicy-amiexclusionrules-tagmap
             '''
             result = self._values.get("tag_map")
-            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], result)
+            return typing.cast(typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]], result)
 
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -8117,7 +8131,7 @@ class CfnLifecyclePolicy(
             self,
             *,
             amis: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLifecyclePolicy.AmiExclusionRulesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
-            tag_map: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+            tag_map: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
         ) -> None:
             '''Specifies resources that lifecycle policy actions should not apply to.
 
@@ -8175,13 +8189,13 @@ class CfnLifecyclePolicy(
         @builtins.property
         def tag_map(
             self,
-        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
+        ) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
             '''Contains a list of tags that Image Builder uses to skip lifecycle actions for Image Builder image resources that have them.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-lifecyclepolicy-exclusionrules.html#cfn-imagebuilder-lifecyclepolicy-exclusionrules-tagmap
             '''
             result = self._values.get("tag_map")
-            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], result)
+            return typing.cast(typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]], result)
 
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -8687,7 +8701,7 @@ class CfnLifecyclePolicy(
             self,
             *,
             recipes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLifecyclePolicy.RecipeSelectionProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
-            tag_map: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+            tag_map: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
         ) -> None:
             '''Resource selection criteria for the lifecycle policy.
 
@@ -8737,13 +8751,13 @@ class CfnLifecyclePolicy(
         @builtins.property
         def tag_map(
             self,
-        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
+        ) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
             '''A list of tags that are used as selection criteria for the Image Builder image resources that the lifecycle policy applies to.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-lifecyclepolicy-resourceselection.html#cfn-imagebuilder-lifecyclepolicy-resourceselection-tagmap
             '''
             result = self._values.get("tag_map")
-            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], result)
+            return typing.cast(typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]], result)
 
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -9817,7 +9831,7 @@ def _typecheckingstub__3e9679e68354d4ed7fd182e9633596a907a1b8af3224253b40b59ab4a
 
 def _typecheckingstub__78b16e4a7c76877b5dc3dc5bc7508b79d60aed5becf1610e01c5aba5acf7f818(
     *,
-    ami_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    ami_tags: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
     description: typing.Optional[builtins.str] = None,
     kms_key_id: typing.Optional[builtins.str] = None,
     launch_permission_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDistributionConfiguration.LaunchPermissionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -10413,7 +10427,7 @@ def _typecheckingstub__8df8a03094d1fe92963a315a657a78657df102ba9fbe66eda2c26bb8e
     key_pair: typing.Optional[builtins.str] = None,
     logging: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnInfrastructureConfiguration.LoggingProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     placement: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnInfrastructureConfiguration.PlacementProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
-    resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    resource_tags: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     sns_topic_arn: typing.Optional[builtins.str] = None,
     subnet_id: typing.Optional[builtins.str] = None,
@@ -10484,7 +10498,7 @@ def _typecheckingstub__ee5273f955052040314d788896b8d38dbd2dcdb1d6dce31f51de7b153
     pass
 
 def _typecheckingstub__b4e6c2bbdd440425ebe7067a9a03bf4079bbfef4001b7877cb6ce3dcd44c4cb0(
-    value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]],
+    value: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]],
 ) -> None:
     """Type checking stubs"""
     pass
@@ -10562,7 +10576,7 @@ def _typecheckingstub__cf8c493013f64742391c2bf93c7050f371ffeff0d9a35a3791f0b9fbb
     key_pair: typing.Optional[builtins.str] = None,
     logging: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnInfrastructureConfiguration.LoggingProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     placement: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnInfrastructureConfiguration.PlacementProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
-    resource_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    resource_tags: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     sns_topic_arn: typing.Optional[builtins.str] = None,
     subnet_id: typing.Optional[builtins.str] = None,
@@ -10662,7 +10676,7 @@ def _typecheckingstub__05134c25c9cdb0bbc6009541532ec2b9cbb483cc3413a7a624d12232b
     last_launched: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLifecyclePolicy.LastLaunchedProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     regions: typing.Optional[typing.Sequence[builtins.str]] = None,
     shared_accounts: typing.Optional[typing.Sequence[builtins.str]] = None,
-    tag_map: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    tag_map: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -10670,7 +10684,7 @@ def _typecheckingstub__05134c25c9cdb0bbc6009541532ec2b9cbb483cc3413a7a624d12232b
 def _typecheckingstub__284c02a995f46d8f38f0f1c9b8aa842e2acafc4d2a0cd2a09a7ccfd618f97a70(
     *,
     amis: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLifecyclePolicy.AmiExclusionRulesProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
-    tag_map: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    tag_map: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -10722,7 +10736,7 @@ def _typecheckingstub__16450d1b17b0ea545ae61c434c161a1873c39c7215299585bcf233621
 def _typecheckingstub__a50d1f1937c770dfb0439cdf4e09d340344cb42f76c244b1320fe680a4c4e82c(
     *,
     recipes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLifecyclePolicy.RecipeSelectionProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
-    tag_map: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]] = None,
+    tag_map: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
 ) -> None:
     """Type checking stubs"""
     pass