aws-cdk-lib 2.177.0__py3-none-any.whl → 2.178.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of aws-cdk-lib might be problematic. Click here for more details.
- aws_cdk/__init__.py +95 -61
- aws_cdk/_jsii/__init__.py +1 -1
- aws_cdk/_jsii/{aws-cdk-lib@2.177.0.jsii.tgz → aws-cdk-lib@2.178.0.jsii.tgz} +0 -0
- aws_cdk/aws_amplifyuibuilder/__init__.py +8 -8
- aws_cdk/aws_apigateway/__init__.py +97 -97
- aws_cdk/aws_apigatewayv2/__init__.py +35 -10
- aws_cdk/aws_appconfig/__init__.py +10 -10
- aws_cdk/aws_appflow/__init__.py +20 -20
- aws_cdk/aws_applicationsignals/__init__.py +8 -8
- aws_cdk/aws_appmesh/__init__.py +8 -8
- aws_cdk/aws_appsync/__init__.py +10383 -7035
- aws_cdk/aws_apptest/__init__.py +4 -4
- aws_cdk/aws_aps/__init__.py +135 -0
- aws_cdk/aws_athena/__init__.py +10 -10
- aws_cdk/aws_backup/__init__.py +14 -14
- aws_cdk/aws_batch/__init__.py +185 -22
- aws_cdk/aws_bcmdataexports/__init__.py +4 -4
- aws_cdk/aws_bedrock/__init__.py +266 -177
- aws_cdk/aws_certificatemanager/__init__.py +15 -14
- aws_cdk/aws_chatbot/__init__.py +4 -4
- aws_cdk/aws_cloudformation/__init__.py +22 -18
- aws_cdk/aws_cloudfront/__init__.py +674 -7
- aws_cdk/aws_cloudfront_origins/__init__.py +40 -0
- aws_cdk/aws_cloudtrail/__init__.py +4 -4
- aws_cdk/aws_cloudwatch/__init__.py +53 -53
- aws_cdk/aws_codedeploy/__init__.py +2 -2
- aws_cdk/aws_codepipeline/__init__.py +24 -6
- aws_cdk/aws_codepipeline_actions/__init__.py +2 -2
- aws_cdk/aws_cognito/__init__.py +42 -20
- aws_cdk/aws_connect/__init__.py +4 -4
- aws_cdk/aws_customerprofiles/__init__.py +3 -1
- aws_cdk/aws_databrew/__init__.py +16 -16
- aws_cdk/aws_datasync/__init__.py +14 -11
- aws_cdk/aws_datazone/__init__.py +5 -5
- aws_cdk/aws_dms/__init__.py +4 -4
- aws_cdk/aws_dynamodb/__init__.py +267 -25
- aws_cdk/aws_ec2/__init__.py +1137 -181
- aws_cdk/aws_ecs/__init__.py +740 -116
- aws_cdk/aws_ecs_patterns/__init__.py +49 -0
- aws_cdk/aws_efs/__init__.py +3 -3
- aws_cdk/aws_eks/__init__.py +31 -32
- aws_cdk/aws_elasticache/__init__.py +10 -10
- aws_cdk/aws_elasticloadbalancingv2/__init__.py +47 -18
- aws_cdk/aws_elasticsearch/__init__.py +10 -10
- aws_cdk/aws_emr/__init__.py +16 -16
- aws_cdk/aws_emrserverless/__init__.py +12 -9
- aws_cdk/aws_entityresolution/__init__.py +31 -17
- aws_cdk/aws_events/__init__.py +12 -12
- aws_cdk/aws_fis/__init__.py +16 -16
- aws_cdk/aws_fms/__init__.py +7 -3
- aws_cdk/aws_glue/__init__.py +1326 -7
- aws_cdk/aws_greengrassv2/__init__.py +8 -8
- aws_cdk/aws_guardduty/__init__.py +521 -0
- aws_cdk/aws_healthlake/__init__.py +10 -2
- aws_cdk/aws_imagebuilder/__init__.py +26 -26
- aws_cdk/aws_iot/__init__.py +40 -40
- aws_cdk/aws_iotanalytics/__init__.py +4 -4
- aws_cdk/aws_iotfleetwise/__init__.py +424 -10
- aws_cdk/aws_iotsitewise/__init__.py +84 -13
- aws_cdk/aws_iottwinmaker/__init__.py +18 -18
- aws_cdk/aws_iotwireless/__init__.py +4 -4
- aws_cdk/aws_kafkaconnect/__init__.py +10 -10
- aws_cdk/aws_kendra/__init__.py +0 -10
- aws_cdk/aws_kinesisanalytics/__init__.py +4 -4
- aws_cdk/aws_kinesisanalyticsv2/__init__.py +4 -4
- aws_cdk/aws_kinesisfirehose/__init__.py +4544 -183
- aws_cdk/aws_kms/__init__.py +11 -10
- aws_cdk/aws_lambda/__init__.py +34 -4
- aws_cdk/aws_lambda_nodejs/__init__.py +24 -5
- aws_cdk/aws_launchwizard/__init__.py +10 -10
- aws_cdk/aws_logs/__init__.py +19 -15
- aws_cdk/aws_mediaconnect/__init__.py +509 -12
- aws_cdk/aws_medialive/__init__.py +16 -16
- aws_cdk/aws_mediatailor/__init__.py +10 -10
- aws_cdk/aws_networkfirewall/__init__.py +12 -12
- aws_cdk/aws_notifications/__init__.py +602 -65
- aws_cdk/aws_omics/__init__.py +4 -4
- aws_cdk/aws_opensearchservice/__init__.py +10 -10
- aws_cdk/aws_opsworks/__init__.py +58 -58
- aws_cdk/aws_personalize/__init__.py +8 -8
- aws_cdk/aws_pipes/__init__.py +20 -20
- aws_cdk/aws_qbusiness/__init__.py +119 -0
- aws_cdk/aws_quicksight/__init__.py +247 -92
- aws_cdk/aws_rds/__init__.py +21 -15
- aws_cdk/aws_redshift/__init__.py +10 -10
- aws_cdk/aws_resiliencehub/__init__.py +0 -41
- aws_cdk/aws_route53/__init__.py +6 -0
- aws_cdk/aws_rum/__init__.py +4 -4
- aws_cdk/aws_s3/__init__.py +12 -2
- aws_cdk/aws_sagemaker/__init__.py +84 -60
- aws_cdk/aws_sam/__init__.py +48 -48
- aws_cdk/aws_secretsmanager/__init__.py +30 -14
- aws_cdk/aws_securityhub/__init__.py +12 -12
- aws_cdk/aws_sns/__init__.py +101 -15
- aws_cdk/aws_ssmquicksetup/__init__.py +10 -10
- aws_cdk/aws_stepfunctions/__init__.py +13207 -4740
- aws_cdk/aws_stepfunctions_tasks/__init__.py +77615 -22817
- aws_cdk/aws_synthetics/__init__.py +4 -4
- aws_cdk/aws_timestream/__init__.py +41 -0
- aws_cdk/aws_transfer/__init__.py +9 -10
- aws_cdk/aws_wafv2/__init__.py +24 -22
- aws_cdk/aws_wisdom/__init__.py +8 -8
- aws_cdk/aws_workspacesweb/__init__.py +60 -60
- aws_cdk/aws_xray/__init__.py +8 -8
- aws_cdk/cx_api/__init__.py +18 -0
- {aws_cdk_lib-2.177.0.dist-info → aws_cdk_lib-2.178.0.dist-info}/METADATA +1 -1
- {aws_cdk_lib-2.177.0.dist-info → aws_cdk_lib-2.178.0.dist-info}/RECORD +111 -111
- {aws_cdk_lib-2.177.0.dist-info → aws_cdk_lib-2.178.0.dist-info}/LICENSE +0 -0
- {aws_cdk_lib-2.177.0.dist-info → aws_cdk_lib-2.178.0.dist-info}/NOTICE +0 -0
- {aws_cdk_lib-2.177.0.dist-info → aws_cdk_lib-2.178.0.dist-info}/WHEEL +0 -0
- {aws_cdk_lib-2.177.0.dist-info → aws_cdk_lib-2.178.0.dist-info}/top_level.txt +0 -0
aws_cdk/aws_sns/__init__.py
CHANGED
|
@@ -351,6 +351,26 @@ topic = sns.Topic(self, "MyTopic",
|
|
|
351
351
|
tracing_config=sns.TracingConfig.ACTIVE
|
|
352
352
|
)
|
|
353
353
|
```
|
|
354
|
+
|
|
355
|
+
## High-throughput mode for Amazon SNS FIFO Topics
|
|
356
|
+
|
|
357
|
+
High throughput FIFO topics in Amazon SNS efficiently manage high message throughput while maintaining strict message order, ensuring reliability and scalability for applications processing numerous messages.
|
|
358
|
+
This solution is ideal for scenarios demanding both high throughput and ordered message delivery.
|
|
359
|
+
|
|
360
|
+
To improve message throughput using high throughput FIFO topics, increasing the number of message groups is recommended.
|
|
361
|
+
|
|
362
|
+
For more information, see [High throughput FIFO topics in Amazon SNS](https://docs.aws.amazon.com/sns/latest/dg/fifo-high-throughput.html).
|
|
363
|
+
|
|
364
|
+
You can configure high-throughput mode for your FIFO topics by setting the `fifoThroughputScope` property:
|
|
365
|
+
|
|
366
|
+
```python
|
|
367
|
+
topic = sns.Topic(self, "MyTopic",
|
|
368
|
+
fifo=True,
|
|
369
|
+
fifo_throughput_scope=sns.FifoThroughputScope.TOPIC
|
|
370
|
+
)
|
|
371
|
+
```
|
|
372
|
+
|
|
373
|
+
**Note**: The `fifoThroughputScope` property is only available for FIFO topics.
|
|
354
374
|
'''
|
|
355
375
|
from pkgutil import extend_path
|
|
356
376
|
__path__ = extend_path(__path__, __name__)
|
|
@@ -1170,7 +1190,7 @@ class CfnTopic(
|
|
|
1170
1190
|
:param data_protection_policy: The body of the policy document you want to use for this topic. You can only add one policy per topic. The policy must be in JSON string format. Length Constraints: Maximum length of 30,720.
|
|
1171
1191
|
:param delivery_status_logging: The ``DeliveryStatusLogging`` configuration enables you to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:. - HTTP - Amazon Kinesis Data Firehose - AWS Lambda - Platform application endpoint - Amazon Simple Queue Service Once configured, log entries are sent to Amazon CloudWatch Logs.
|
|
1172
1192
|
:param display_name: The display name to use for an Amazon SNS topic with SMS subscriptions. The display name must be maximum 100 characters long, including hyphens (-), underscores (_), spaces, and tabs.
|
|
1173
|
-
:param fifo_throughput_scope:
|
|
1193
|
+
:param fifo_throughput_scope: Specifies the throughput quota and deduplication behavior to apply for the FIFO topic. Valid values are ``Topic`` or ``MessageGroup`` .
|
|
1174
1194
|
:param fifo_topic: Set to true to create a FIFO topic.
|
|
1175
1195
|
:param kms_master_key_id: The ID of an AWS managed customer master key (CMK) for Amazon SNS or a custom CMK. For more information, see `Key terms <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html#sse-key-terms>`_ . For more examples, see ``[KeyId](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters)`` in the *AWS Key Management Service API Reference* . This property applies only to `server-side-encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html>`_ .
|
|
1176
1196
|
:param signature_version: The signature version corresponds to the hashing algorithm used while creating the signature of the notifications, subscription confirmations, or unsubscribe confirmation messages sent by Amazon SNS. By default, ``SignatureVersion`` is set to ``1`` .
|
|
@@ -1338,6 +1358,7 @@ class CfnTopic(
|
|
|
1338
1358
|
@builtins.property
|
|
1339
1359
|
@jsii.member(jsii_name="fifoThroughputScope")
|
|
1340
1360
|
def fifo_throughput_scope(self) -> typing.Optional[builtins.str]:
|
|
1361
|
+
'''Specifies the throughput quota and deduplication behavior to apply for the FIFO topic.'''
|
|
1341
1362
|
return typing.cast(typing.Optional[builtins.str], jsii.get(self, "fifoThroughputScope"))
|
|
1342
1363
|
|
|
1343
1364
|
@fifo_throughput_scope.setter
|
|
@@ -2059,7 +2080,7 @@ class CfnTopicProps:
|
|
|
2059
2080
|
:param data_protection_policy: The body of the policy document you want to use for this topic. You can only add one policy per topic. The policy must be in JSON string format. Length Constraints: Maximum length of 30,720.
|
|
2060
2081
|
:param delivery_status_logging: The ``DeliveryStatusLogging`` configuration enables you to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:. - HTTP - Amazon Kinesis Data Firehose - AWS Lambda - Platform application endpoint - Amazon Simple Queue Service Once configured, log entries are sent to Amazon CloudWatch Logs.
|
|
2061
2082
|
:param display_name: The display name to use for an Amazon SNS topic with SMS subscriptions. The display name must be maximum 100 characters long, including hyphens (-), underscores (_), spaces, and tabs.
|
|
2062
|
-
:param fifo_throughput_scope:
|
|
2083
|
+
:param fifo_throughput_scope: Specifies the throughput quota and deduplication behavior to apply for the FIFO topic. Valid values are ``Topic`` or ``MessageGroup`` .
|
|
2063
2084
|
:param fifo_topic: Set to true to create a FIFO topic.
|
|
2064
2085
|
:param kms_master_key_id: The ID of an AWS managed customer master key (CMK) for Amazon SNS or a custom CMK. For more information, see `Key terms <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html#sse-key-terms>`_ . For more examples, see ``[KeyId](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters)`` in the *AWS Key Management Service API Reference* . This property applies only to `server-side-encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html>`_ .
|
|
2065
2086
|
:param signature_version: The signature version corresponds to the hashing algorithm used while creating the signature of the notifications, subscription confirmations, or unsubscribe confirmation messages sent by Amazon SNS. By default, ``SignatureVersion`` is set to ``1`` .
|
|
@@ -2223,7 +2244,10 @@ class CfnTopicProps:
|
|
|
2223
2244
|
|
|
2224
2245
|
@builtins.property
|
|
2225
2246
|
def fifo_throughput_scope(self) -> typing.Optional[builtins.str]:
|
|
2226
|
-
'''
|
|
2247
|
+
'''Specifies the throughput quota and deduplication behavior to apply for the FIFO topic.
|
|
2248
|
+
|
|
2249
|
+
Valid values are ``Topic`` or ``MessageGroup`` .
|
|
2250
|
+
|
|
2227
2251
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topic.html#cfn-sns-topic-fifothroughputscope
|
|
2228
2252
|
'''
|
|
2229
2253
|
result = self._values.get("fifo_throughput_scope")
|
|
@@ -2436,6 +2460,32 @@ class DeliveryPolicy:
|
|
|
2436
2460
|
)
|
|
2437
2461
|
|
|
2438
2462
|
|
|
2463
|
+
@jsii.enum(jsii_type="aws-cdk-lib.aws_sns.FifoThroughputScope")
|
|
2464
|
+
class FifoThroughputScope(enum.Enum):
|
|
2465
|
+
'''The throughput quota and deduplication behavior to apply for the FIFO topic.
|
|
2466
|
+
|
|
2467
|
+
:exampleMetadata: infused
|
|
2468
|
+
|
|
2469
|
+
Example::
|
|
2470
|
+
|
|
2471
|
+
topic = sns.Topic(self, "MyTopic",
|
|
2472
|
+
fifo=True,
|
|
2473
|
+
fifo_throughput_scope=sns.FifoThroughputScope.TOPIC
|
|
2474
|
+
)
|
|
2475
|
+
'''
|
|
2476
|
+
|
|
2477
|
+
TOPIC = "TOPIC"
|
|
2478
|
+
'''Topic scope - Throughput: 3000 messages per second and a bandwidth of 20MB per second.
|
|
2479
|
+
|
|
2480
|
+
- Deduplication: Message deduplication is verified on the entire FIFO topic.
|
|
2481
|
+
'''
|
|
2482
|
+
MESSAGE_GROUP = "MESSAGE_GROUP"
|
|
2483
|
+
'''Message group scope - Throughput: Maximum regional limits.
|
|
2484
|
+
|
|
2485
|
+
- Deduplication: Message deduplication is only verified within a message group.
|
|
2486
|
+
'''
|
|
2487
|
+
|
|
2488
|
+
|
|
2439
2489
|
class FilterOrPolicy(
|
|
2440
2490
|
metaclass=jsii.JSIIAbstractClass,
|
|
2441
2491
|
jsii_type="aws-cdk-lib.aws_sns.FilterOrPolicy",
|
|
@@ -5116,6 +5166,11 @@ class TopicBase(
|
|
|
5116
5166
|
|
|
5117
5167
|
jsii.create(self.__class__, self, [scope, id, props])
|
|
5118
5168
|
|
|
5169
|
+
@jsii.member(jsii_name="addSSLPolicy")
|
|
5170
|
+
def _add_ssl_policy(self) -> None:
|
|
5171
|
+
'''Adds a SSL policy to the topic resource policy.'''
|
|
5172
|
+
return typing.cast(None, jsii.invoke(self, "addSSLPolicy", []))
|
|
5173
|
+
|
|
5119
5174
|
@jsii.member(jsii_name="addSubscription")
|
|
5120
5175
|
def add_subscription(self, topic_subscription: ITopicSubscription) -> Subscription:
|
|
5121
5176
|
'''Subscribe some endpoint to this topic.
|
|
@@ -5135,8 +5190,11 @@ class TopicBase(
|
|
|
5135
5190
|
'''Adds a statement to the IAM resource policy associated with this topic.
|
|
5136
5191
|
|
|
5137
5192
|
If this topic was created in this stack (``new Topic``), a topic policy
|
|
5138
|
-
will be automatically created upon the first call to ``addToResourcePolicy``.
|
|
5139
|
-
|
|
5193
|
+
will be automatically created upon the first call to ``addToResourcePolicy``.
|
|
5194
|
+
However, if ``enforceSSL`` is set to ``true``, the policy has already been created
|
|
5195
|
+
before the first call to this method.
|
|
5196
|
+
|
|
5197
|
+
If the topic is imported (``Topic.import``), then this is a no-op.
|
|
5140
5198
|
|
|
5141
5199
|
:param statement: -
|
|
5142
5200
|
'''
|
|
@@ -5167,6 +5225,11 @@ class TopicBase(
|
|
|
5167
5225
|
'''
|
|
5168
5226
|
return typing.cast(_PolicyStatement_0fe33853, jsii.invoke(self, "createSSLPolicyDocument", []))
|
|
5169
5227
|
|
|
5228
|
+
@jsii.member(jsii_name="createTopicPolicy")
|
|
5229
|
+
def _create_topic_policy(self) -> None:
|
|
5230
|
+
'''Creates a topic policy for this topic.'''
|
|
5231
|
+
return typing.cast(None, jsii.invoke(self, "createTopicPolicy", []))
|
|
5232
|
+
|
|
5170
5233
|
@jsii.member(jsii_name="grantPublish")
|
|
5171
5234
|
def grant_publish(self, grantee: _IGrantable_71c4f5de) -> _Grant_a7ae64f8:
|
|
5172
5235
|
'''Grant topic publishing permissions to the given identity.
|
|
@@ -5934,6 +5997,7 @@ class TopicPolicyProps:
|
|
|
5934
5997
|
"display_name": "displayName",
|
|
5935
5998
|
"enforce_ssl": "enforceSSL",
|
|
5936
5999
|
"fifo": "fifo",
|
|
6000
|
+
"fifo_throughput_scope": "fifoThroughputScope",
|
|
5937
6001
|
"logging_configs": "loggingConfigs",
|
|
5938
6002
|
"master_key": "masterKey",
|
|
5939
6003
|
"message_retention_period_in_days": "messageRetentionPeriodInDays",
|
|
@@ -5950,6 +6014,7 @@ class TopicProps:
|
|
|
5950
6014
|
display_name: typing.Optional[builtins.str] = None,
|
|
5951
6015
|
enforce_ssl: typing.Optional[builtins.bool] = None,
|
|
5952
6016
|
fifo: typing.Optional[builtins.bool] = None,
|
|
6017
|
+
fifo_throughput_scope: typing.Optional[FifoThroughputScope] = None,
|
|
5953
6018
|
logging_configs: typing.Optional[typing.Sequence[typing.Union[LoggingConfig, typing.Dict[builtins.str, typing.Any]]]] = None,
|
|
5954
6019
|
master_key: typing.Optional[_IKey_5f11635f] = None,
|
|
5955
6020
|
message_retention_period_in_days: typing.Optional[jsii.Number] = None,
|
|
@@ -5963,6 +6028,7 @@ class TopicProps:
|
|
|
5963
6028
|
:param display_name: A developer-defined string that can be used to identify this SNS topic. The display name must be maximum 100 characters long, including hyphens (-), underscores (_), spaces, and tabs. Default: None
|
|
5964
6029
|
:param enforce_ssl: Adds a statement to enforce encryption of data in transit when publishing to the topic. Default: false
|
|
5965
6030
|
:param fifo: Set to true to create a FIFO topic. Default: None
|
|
6031
|
+
:param fifo_throughput_scope: Specifies the throughput quota and deduplication behavior to apply for the FIFO topic. You can only set this property when ``fifo`` is ``true``. Default: undefined - SNS default setting is FifoThroughputScope.TOPIC
|
|
5966
6032
|
:param logging_configs: The list of delivery status logging configurations for the topic. Default: None
|
|
5967
6033
|
:param master_key: A KMS Key, either managed by this CDK app, or imported. Default: None
|
|
5968
6034
|
:param message_retention_period_in_days: The number of days Amazon SNS retains messages. It can only be set for FIFO topics. Default: - do not archive messages
|
|
@@ -5975,7 +6041,8 @@ class TopicProps:
|
|
|
5975
6041
|
Example::
|
|
5976
6042
|
|
|
5977
6043
|
topic = sns.Topic(self, "MyTopic",
|
|
5978
|
-
|
|
6044
|
+
fifo=True,
|
|
6045
|
+
fifo_throughput_scope=sns.FifoThroughputScope.TOPIC
|
|
5979
6046
|
)
|
|
5980
6047
|
'''
|
|
5981
6048
|
if __debug__:
|
|
@@ -5984,6 +6051,7 @@ class TopicProps:
|
|
|
5984
6051
|
check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
|
|
5985
6052
|
check_type(argname="argument enforce_ssl", value=enforce_ssl, expected_type=type_hints["enforce_ssl"])
|
|
5986
6053
|
check_type(argname="argument fifo", value=fifo, expected_type=type_hints["fifo"])
|
|
6054
|
+
check_type(argname="argument fifo_throughput_scope", value=fifo_throughput_scope, expected_type=type_hints["fifo_throughput_scope"])
|
|
5987
6055
|
check_type(argname="argument logging_configs", value=logging_configs, expected_type=type_hints["logging_configs"])
|
|
5988
6056
|
check_type(argname="argument master_key", value=master_key, expected_type=type_hints["master_key"])
|
|
5989
6057
|
check_type(argname="argument message_retention_period_in_days", value=message_retention_period_in_days, expected_type=type_hints["message_retention_period_in_days"])
|
|
@@ -5999,6 +6067,8 @@ class TopicProps:
|
|
|
5999
6067
|
self._values["enforce_ssl"] = enforce_ssl
|
|
6000
6068
|
if fifo is not None:
|
|
6001
6069
|
self._values["fifo"] = fifo
|
|
6070
|
+
if fifo_throughput_scope is not None:
|
|
6071
|
+
self._values["fifo_throughput_scope"] = fifo_throughput_scope
|
|
6002
6072
|
if logging_configs is not None:
|
|
6003
6073
|
self._values["logging_configs"] = logging_configs
|
|
6004
6074
|
if master_key is not None:
|
|
@@ -6053,6 +6123,17 @@ class TopicProps:
|
|
|
6053
6123
|
result = self._values.get("fifo")
|
|
6054
6124
|
return typing.cast(typing.Optional[builtins.bool], result)
|
|
6055
6125
|
|
|
6126
|
+
@builtins.property
|
|
6127
|
+
def fifo_throughput_scope(self) -> typing.Optional[FifoThroughputScope]:
|
|
6128
|
+
'''Specifies the throughput quota and deduplication behavior to apply for the FIFO topic.
|
|
6129
|
+
|
|
6130
|
+
You can only set this property when ``fifo`` is ``true``.
|
|
6131
|
+
|
|
6132
|
+
:default: undefined - SNS default setting is FifoThroughputScope.TOPIC
|
|
6133
|
+
'''
|
|
6134
|
+
result = self._values.get("fifo_throughput_scope")
|
|
6135
|
+
return typing.cast(typing.Optional[FifoThroughputScope], result)
|
|
6136
|
+
|
|
6056
6137
|
@builtins.property
|
|
6057
6138
|
def logging_configs(self) -> typing.Optional[typing.List[LoggingConfig]]:
|
|
6058
6139
|
'''The list of delivery status logging configurations for the topic.
|
|
@@ -6496,18 +6577,17 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
|
|
|
6496
6577
|
|
|
6497
6578
|
Example::
|
|
6498
6579
|
|
|
6499
|
-
|
|
6580
|
+
from aws_cdk.aws_kinesisfirehose_alpha import DeliveryStream
|
|
6581
|
+
# stream: DeliveryStream
|
|
6500
6582
|
|
|
6501
6583
|
|
|
6502
|
-
topic = sns.Topic(self, "
|
|
6584
|
+
topic = sns.Topic(self, "Topic")
|
|
6503
6585
|
|
|
6504
|
-
|
|
6505
|
-
|
|
6506
|
-
|
|
6507
|
-
|
|
6508
|
-
|
|
6509
|
-
)
|
|
6510
|
-
]
|
|
6586
|
+
sns.Subscription(self, "Subscription",
|
|
6587
|
+
topic=topic,
|
|
6588
|
+
endpoint=stream.delivery_stream_arn,
|
|
6589
|
+
protocol=sns.SubscriptionProtocol.FIREHOSE,
|
|
6590
|
+
subscription_role_arn="SAMPLE_ARN"
|
|
6511
6591
|
)
|
|
6512
6592
|
'''
|
|
6513
6593
|
|
|
@@ -6520,6 +6600,7 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
|
|
|
6520
6600
|
display_name: typing.Optional[builtins.str] = None,
|
|
6521
6601
|
enforce_ssl: typing.Optional[builtins.bool] = None,
|
|
6522
6602
|
fifo: typing.Optional[builtins.bool] = None,
|
|
6603
|
+
fifo_throughput_scope: typing.Optional[FifoThroughputScope] = None,
|
|
6523
6604
|
logging_configs: typing.Optional[typing.Sequence[typing.Union[LoggingConfig, typing.Dict[builtins.str, typing.Any]]]] = None,
|
|
6524
6605
|
master_key: typing.Optional[_IKey_5f11635f] = None,
|
|
6525
6606
|
message_retention_period_in_days: typing.Optional[jsii.Number] = None,
|
|
@@ -6534,6 +6615,7 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
|
|
|
6534
6615
|
:param display_name: A developer-defined string that can be used to identify this SNS topic. The display name must be maximum 100 characters long, including hyphens (-), underscores (_), spaces, and tabs. Default: None
|
|
6535
6616
|
:param enforce_ssl: Adds a statement to enforce encryption of data in transit when publishing to the topic. Default: false
|
|
6536
6617
|
:param fifo: Set to true to create a FIFO topic. Default: None
|
|
6618
|
+
:param fifo_throughput_scope: Specifies the throughput quota and deduplication behavior to apply for the FIFO topic. You can only set this property when ``fifo`` is ``true``. Default: undefined - SNS default setting is FifoThroughputScope.TOPIC
|
|
6537
6619
|
:param logging_configs: The list of delivery status logging configurations for the topic. Default: None
|
|
6538
6620
|
:param master_key: A KMS Key, either managed by this CDK app, or imported. Default: None
|
|
6539
6621
|
:param message_retention_period_in_days: The number of days Amazon SNS retains messages. It can only be set for FIFO topics. Default: - do not archive messages
|
|
@@ -6550,6 +6632,7 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
|
|
|
6550
6632
|
display_name=display_name,
|
|
6551
6633
|
enforce_ssl=enforce_ssl,
|
|
6552
6634
|
fifo=fifo,
|
|
6635
|
+
fifo_throughput_scope=fifo_throughput_scope,
|
|
6553
6636
|
logging_configs=logging_configs,
|
|
6554
6637
|
master_key=master_key,
|
|
6555
6638
|
message_retention_period_in_days=message_retention_period_in_days,
|
|
@@ -6683,6 +6766,7 @@ __all__ = [
|
|
|
6683
6766
|
"CfnTopicPolicyProps",
|
|
6684
6767
|
"CfnTopicProps",
|
|
6685
6768
|
"DeliveryPolicy",
|
|
6769
|
+
"FifoThroughputScope",
|
|
6686
6770
|
"Filter",
|
|
6687
6771
|
"FilterOrPolicy",
|
|
6688
6772
|
"FilterOrPolicyType",
|
|
@@ -7361,6 +7445,7 @@ def _typecheckingstub__093960c1ab5457cc6797eb4a06c9e8fc74e41d4eaa9d0a17f00fa896d
|
|
|
7361
7445
|
display_name: typing.Optional[builtins.str] = None,
|
|
7362
7446
|
enforce_ssl: typing.Optional[builtins.bool] = None,
|
|
7363
7447
|
fifo: typing.Optional[builtins.bool] = None,
|
|
7448
|
+
fifo_throughput_scope: typing.Optional[FifoThroughputScope] = None,
|
|
7364
7449
|
logging_configs: typing.Optional[typing.Sequence[typing.Union[LoggingConfig, typing.Dict[builtins.str, typing.Any]]]] = None,
|
|
7365
7450
|
master_key: typing.Optional[_IKey_5f11635f] = None,
|
|
7366
7451
|
message_retention_period_in_days: typing.Optional[jsii.Number] = None,
|
|
@@ -7403,6 +7488,7 @@ def _typecheckingstub__5bf7b7a1001dc600e81a7f1c5015e367dc471dcd727360f62a7eaf6eb
|
|
|
7403
7488
|
display_name: typing.Optional[builtins.str] = None,
|
|
7404
7489
|
enforce_ssl: typing.Optional[builtins.bool] = None,
|
|
7405
7490
|
fifo: typing.Optional[builtins.bool] = None,
|
|
7491
|
+
fifo_throughput_scope: typing.Optional[FifoThroughputScope] = None,
|
|
7406
7492
|
logging_configs: typing.Optional[typing.Sequence[typing.Union[LoggingConfig, typing.Dict[builtins.str, typing.Any]]]] = None,
|
|
7407
7493
|
master_key: typing.Optional[_IKey_5f11635f] = None,
|
|
7408
7494
|
message_retention_period_in_days: typing.Optional[jsii.Number] = None,
|
|
@@ -307,7 +307,7 @@ class CfnConfigurationManager(
|
|
|
307
307
|
def __init__(
|
|
308
308
|
self,
|
|
309
309
|
*,
|
|
310
|
-
parameters: typing.Union[
|
|
310
|
+
parameters: typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b],
|
|
311
311
|
type: builtins.str,
|
|
312
312
|
id: typing.Optional[builtins.str] = None,
|
|
313
313
|
local_deployment_administration_role_arn: typing.Optional[builtins.str] = None,
|
|
@@ -316,7 +316,7 @@ class CfnConfigurationManager(
|
|
|
316
316
|
) -> None:
|
|
317
317
|
'''The definition of a Quick Setup configuration.
|
|
318
318
|
|
|
319
|
-
:param parameters: The parameters for the configuration definition type. Parameters for configuration definitions vary based the configuration type. The following lists outline the parameters for each configuration type. - **AWS Config Recording (Type: AWS QuickSetupType-CFGRecording)** - - ``RecordAllResources`` - Description: (Optional) A boolean value that determines whether all supported resources are recorded. The default value is " ``true`` ". - ``ResourceTypesToRecord`` - Description: (Optional) A comma separated list of resource types you want to record. - ``RecordGlobalResourceTypes`` - Description: (Optional) A boolean value that determines whether global resources are recorded with all resource configurations. The default value is " ``false`` ". - ``GlobalResourceTypesRegion`` - Description: (Optional) Determines the AWS Region where global resources are recorded. - ``UseCustomBucket`` - Description: (Optional) A boolean value that determines whether a custom Amazon S3 bucket is used for delivery. The default value is " ``false`` ". - ``DeliveryBucketName`` - Description: (Optional) The name of the Amazon S3 bucket you want AWS Config to deliver configuration snapshots and configuration history files to. - ``DeliveryBucketPrefix`` - Description: (Optional) The key prefix you want to use in the custom Amazon S3 bucket. - ``NotificationOptions`` - Description: (Optional) Determines the notification configuration for the recorder. The valid values are ``NoStreaming`` , ``UseExistingTopic`` , and ``CreateTopic`` . The default value is ``NoStreaming`` . - ``CustomDeliveryTopicAccountId`` - Description: (Optional) The ID of the AWS account where the Amazon SNS topic you want to use for notifications resides. You must specify a value for this parameter if you use the ``UseExistingTopic`` notification option. - ``CustomDeliveryTopicName`` - Description: (Optional) The name of the Amazon SNS topic you want to use for notifications. You must specify a value for this parameter if you use the ``UseExistingTopic`` notification option. - ``RemediationSchedule`` - Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are ``rate(30 days)`` , ``rate(7 days)`` , ``rate(1 days)`` , and ``none`` . The default value is " ``none`` ". - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) The ID of the root of your Organization. This configuration type doesn't currently support choosing specific OUs. The configuration will be deployed to all the OUs in the Organization. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Change Manager (Type: AWS QuickSetupType-SSMChangeMgr)** - - ``DelegatedAccountId`` - Description: (Required) The ID of the delegated administrator account. - ``JobFunction`` - Description: (Required) The name for the Change Manager job function. - ``PermissionType`` - Description: (Optional) Specifies whether you want to use default administrator permissions for the job function role, or provide a custom IAM policy. The valid values are ``CustomPermissions`` and ``AdminPermissions`` . The default value for the parameter is ``CustomerPermissions`` . - ``CustomPermissions`` - Description: (Optional) A JSON string containing the IAM policy you want your job function to use. You must provide a value for this parameter if you specify ``CustomPermissions`` for the ``PermissionType`` parameter. - ``TargetOrganizationalUnits`` - Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Conformance Packs (Type: AWS QuickSetupType-CFGCPacks)** - - ``DelegatedAccountId`` - Description: (Optional) The ID of the delegated administrator account. This parameter is required for Organization deployments. - ``RemediationSchedule`` - Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are ``rate(30 days)`` , ``rate(14 days)`` , ``rate(2 days)`` , and ``none`` . The default value is " ``none`` ". - ``CPackNames`` - Description: (Required) A comma separated list of AWS Config conformance packs. - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) The ID of the root of your Organization. This configuration type doesn't currently support choosing specific OUs. The configuration will be deployed to all the OUs in the Organization. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Default Host Management Configuration (Type: AWS QuickSetupType-DHMC)** - - ``UpdateSSMAgent`` - Description: (Optional) A boolean value that determines whether the SSM Agent is updated on the target instances every 2 weeks. The default value is " ``true`` ". - ``TargetOrganizationalUnits`` - Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **DevOps Guru (Type: AWS QuickSetupType-DevOpsGuru)** - - ``AnalyseAllResources`` - Description: (Optional) A boolean value that determines whether DevOps Guru analyzes all AWS CloudFormation stacks in the account. The default value is " ``false`` ". - ``EnableSnsNotifications`` - Description: (Optional) A boolean value that determines whether DevOps Guru sends notifications when an insight is created. The default value is " ``true`` ". - ``EnableSsmOpsItems`` - Description: (Optional) A boolean value that determines whether DevOps Guru creates an OpsCenter OpsItem when an insight is created. The default value is " ``true`` ". - ``EnableDriftRemediation`` - Description: (Optional) A boolean value that determines whether a drift remediation schedule is used. The default value is " ``false`` ". - ``RemediationSchedule`` - Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are ``rate(30 days)`` , ``rate(14 days)`` , ``rate(1 days)`` , and ``none`` . The default value is " ``none`` ". - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Distributor (Type: AWS QuickSetupType-Distributor)** - - ``PackagesToInstall`` - Description: (Required) A comma separated list of packages you want to install on the target instances. The valid values are ``AWSEFSTools`` , ``AWSCWAgent`` , and ``AWSEC2LaunchAgent`` . - ``RemediationSchedule`` - Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are ``rate(30 days)`` , ``rate(14 days)`` , ``rate(2 days)`` , and ``none`` . The default value is " ``rate(30 days)`` ". - ``IsPolicyAttachAllowed`` - Description: (Optional) A boolean value that determines whether Quick Setup attaches policies to instances profiles already associated with the target instances. The default value is " ``false`` ". - ``TargetType`` - Description: (Optional) Determines how instances are targeted for local account deployments. Don't specify a value for this parameter if you're deploying to OUs. The valid values are ``*`` , ``InstanceIds`` , ``ResourceGroups`` , and ``Tags`` . Use ``*`` to target all instances in the account. - ``TargetInstances`` - Description: (Optional) A comma separated list of instance IDs. You must provide a value for this parameter if you specify ``InstanceIds`` for the ``TargetType`` parameter. - ``TargetTagKey`` - Description: (Required) The tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``TargetTagValue`` - Description: (Required) The value of the tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``ResourceGroupName`` - Description: (Required) The name of the resource group associated with the instances you want to target. You must provide a value for this parameter if you specify ``ResourceGroups`` for the ``TargetType`` parameter. - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Host Management (Type: AWS QuickSetupType-SSMHostMgmt)** - - ``UpdateSSMAgent`` - Description: (Optional) A boolean value that determines whether the SSM Agent is updated on the target instances every 2 weeks. The default value is " ``true`` ". - ``UpdateEc2LaunchAgent`` - Description: (Optional) A boolean value that determines whether the EC2 Launch agent is updated on the target instances every month. The default value is " ``false`` ". - ``CollectInventory`` - Description: (Optional) A boolean value that determines whether the EC2 Launch agent is updated on the target instances every month. The default value is " ``true`` ". - ``ScanInstances`` - Description: (Optional) A boolean value that determines whether the target instances are scanned daily for available patches. The default value is " ``true`` ". - ``InstallCloudWatchAgent`` - Description: (Optional) A boolean value that determines whether the Amazon CloudWatch agent is installed on the target instances. The default value is " ``false`` ". - ``UpdateCloudWatchAgent`` - Description: (Optional) A boolean value that determines whether the Amazon CloudWatch agent is updated on the target instances every month. The default value is " ``false`` ". - ``IsPolicyAttachAllowed`` - Description: (Optional) A boolean value that determines whether Quick Setup attaches policies to instances profiles already associated with the target instances. The default value is " ``false`` ". - ``TargetType`` - Description: (Optional) Determines how instances are targeted for local account deployments. Don't specify a value for this parameter if you're deploying to OUs. The valid values are ``*`` , ``InstanceIds`` , ``ResourceGroups`` , and ``Tags`` . Use ``*`` to target all instances in the account. - ``TargetInstances`` - Description: (Optional) A comma separated list of instance IDs. You must provide a value for this parameter if you specify ``InstanceIds`` for the ``TargetType`` parameter. - ``TargetTagKey`` - Description: (Optional) The tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``TargetTagValue`` - Description: (Optional) The value of the tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``ResourceGroupName`` - Description: (Optional) The name of the resource group associated with the instances you want to target. You must provide a value for this parameter if you specify ``ResourceGroups`` for the ``TargetType`` parameter. - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **OpsCenter (Type: AWS QuickSetupType-SSMOpsCenter)** - - ``DelegatedAccountId`` - Description: (Required) The ID of the delegated administrator account. - ``TargetOrganizationalUnits`` - Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Patch Policy (Type: AWS QuickSetupType-PatchPolicy)** - - ``PatchPolicyName`` - Description: (Required) A name for the patch policy. The value you provide is applied to target Amazon EC2 instances as a tag. - ``SelectedPatchBaselines`` - Description: (Required) An array of JSON objects containing the information for the patch baselines to include in your patch policy. - ``PatchBaselineUseDefault`` - Description: (Optional) A boolean value that determines whether the selected patch baselines are all AWS provided. - ``ConfigurationOptionsPatchOperation`` - Description: (Optional) Determines whether target instances scan for available patches, or scan and install available patches. The valid values are ``Scan`` and ``ScanAndInstall`` . The default value for the parameter is ``Scan`` . - ``ConfigurationOptionsScanValue`` - Description: (Optional) A cron expression that is used as the schedule for when instances scan for available patches. - ``ConfigurationOptionsInstallValue`` - Description: (Optional) A cron expression that is used as the schedule for when instances install available patches. - ``ConfigurationOptionsScanNextInterval`` - Description: (Optional) A boolean value that determines whether instances should scan for available patches at the next cron interval. The default value is " ``false`` ". - ``ConfigurationOptionsInstallNextInterval`` - Description: (Optional) A boolean value that determines whether instances should scan for available patches at the next cron interval. The default value is " ``false`` ". - ``RebootOption`` - Description: (Optional) Determines whether instances are rebooted after patches are installed. Valid values are ``RebootIfNeeded`` and ``NoReboot`` . - ``IsPolicyAttachAllowed`` - Description: (Optional) A boolean value that determines whether Quick Setup attaches policies to instances profiles already associated with the target instances. The default value is " ``false`` ". - ``OutputLogEnableS3`` - Description: (Optional) A boolean value that determines whether command output logs are sent to Amazon S3. - ``OutputS3Location`` - Description: (Optional) A JSON string containing information about the Amazon S3 bucket where you want to store the output details of the request. - ``OutputS3BucketRegion`` - Description: (Optional) The AWS Region where the Amazon S3 bucket you want to deliver command output to is located. - ``OutputS3BucketName`` - Description: (Optional) The name of the Amazon S3 bucket you want to deliver command output to. - ``OutputS3KeyPrefix`` - Description: (Optional) The key prefix you want to use in the custom Amazon S3 bucket. - ``TargetType`` - Description: (Optional) Determines how instances are targeted for local account deployments. Don't specify a value for this parameter if you're deploying to OUs. The valid values are ``*`` , ``InstanceIds`` , ``ResourceGroups`` , and ``Tags`` . Use ``*`` to target all instances in the account. - ``TargetInstances`` - Description: (Optional) A comma separated list of instance IDs. You must provide a value for this parameter if you specify ``InstanceIds`` for the ``TargetType`` parameter. - ``TargetTagKey`` - Description: (Required) The tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``TargetTagValue`` - Description: (Required) The value of the tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``ResourceGroupName`` - Description: (Required) The name of the resource group associated with the instances you want to target. You must provide a value for this parameter if you specify ``ResourceGroups`` for the ``TargetType`` parameter. - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Resource Explorer (Type: AWS QuickSetupType-ResourceExplorer)** - - ``SelectedAggregatorRegion`` - Description: (Required) The AWS Region where you want to create the aggregator index. - ``ReplaceExistingAggregator`` - Description: (Required) A boolean value that determines whether to demote an existing aggregator if it is in a Region that differs from the value you specify for the ``SelectedAggregatorRegion`` . - ``TargetOrganizationalUnits`` - Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Resource Scheduler (Type: AWS QuickSetupType-Scheduler)** - - ``TargetTagKey`` - Description: (Required) The tag key assigned to the instances you want to target. - ``TargetTagValue`` - Description: (Required) The value of the tag key assigned to the instances you want to target. - ``ICalendarString`` - Description: (Required) An iCalendar formatted string containing the schedule you want Change Manager to use. - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.
|
|
319
|
+
:param parameters: The parameters for the configuration definition type. Parameters for configuration definitions vary based the configuration type. The following lists outline the parameters for each configuration type. - **AWS Config Recording (Type: AWS QuickSetupType-CFGRecording)** - - ``RecordAllResources`` - Description: (Optional) A boolean value that determines whether all supported resources are recorded. The default value is " ``true`` ". - ``ResourceTypesToRecord`` - Description: (Optional) A comma separated list of resource types you want to record. - ``RecordGlobalResourceTypes`` - Description: (Optional) A boolean value that determines whether global resources are recorded with all resource configurations. The default value is " ``false`` ". - ``GlobalResourceTypesRegion`` - Description: (Optional) Determines the AWS Region where global resources are recorded. - ``UseCustomBucket`` - Description: (Optional) A boolean value that determines whether a custom Amazon S3 bucket is used for delivery. The default value is " ``false`` ". - ``DeliveryBucketName`` - Description: (Optional) The name of the Amazon S3 bucket you want AWS Config to deliver configuration snapshots and configuration history files to. - ``DeliveryBucketPrefix`` - Description: (Optional) The key prefix you want to use in the custom Amazon S3 bucket. - ``NotificationOptions`` - Description: (Optional) Determines the notification configuration for the recorder. The valid values are ``NoStreaming`` , ``UseExistingTopic`` , and ``CreateTopic`` . The default value is ``NoStreaming`` . - ``CustomDeliveryTopicAccountId`` - Description: (Optional) The ID of the AWS account where the Amazon SNS topic you want to use for notifications resides. You must specify a value for this parameter if you use the ``UseExistingTopic`` notification option. - ``CustomDeliveryTopicName`` - Description: (Optional) The name of the Amazon SNS topic you want to use for notifications. You must specify a value for this parameter if you use the ``UseExistingTopic`` notification option. - ``RemediationSchedule`` - Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are ``rate(30 days)`` , ``rate(7 days)`` , ``rate(1 days)`` , and ``none`` . The default value is " ``none`` ". - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) The ID of the root of your Organization. This configuration type doesn't currently support choosing specific OUs. The configuration will be deployed to all the OUs in the Organization. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Change Manager (Type: AWS QuickSetupType-SSMChangeMgr)** - - ``DelegatedAccountId`` - Description: (Required) The ID of the delegated administrator account. - ``JobFunction`` - Description: (Required) The name for the Change Manager job function. - ``PermissionType`` - Description: (Optional) Specifies whether you want to use default administrator permissions for the job function role, or provide a custom IAM policy. The valid values are ``CustomPermissions`` and ``AdminPermissions`` . The default value for the parameter is ``CustomerPermissions`` . - ``CustomPermissions`` - Description: (Optional) A JSON string containing the IAM policy you want your job function to use. You must provide a value for this parameter if you specify ``CustomPermissions`` for the ``PermissionType`` parameter. - ``TargetOrganizationalUnits`` - Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Conformance Packs (Type: AWS QuickSetupType-CFGCPacks)** - - ``DelegatedAccountId`` - Description: (Optional) The ID of the delegated administrator account. This parameter is required for Organization deployments. - ``RemediationSchedule`` - Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are ``rate(30 days)`` , ``rate(14 days)`` , ``rate(2 days)`` , and ``none`` . The default value is " ``none`` ". - ``CPackNames`` - Description: (Required) A comma separated list of AWS Config conformance packs. - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) The ID of the root of your Organization. This configuration type doesn't currently support choosing specific OUs. The configuration will be deployed to all the OUs in the Organization. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Default Host Management Configuration (Type: AWS QuickSetupType-DHMC)** - - ``UpdateSSMAgent`` - Description: (Optional) A boolean value that determines whether the SSM Agent is updated on the target instances every 2 weeks. The default value is " ``true`` ". - ``TargetOrganizationalUnits`` - Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **DevOps Guru (Type: AWS QuickSetupType-DevOpsGuru)** - - ``AnalyseAllResources`` - Description: (Optional) A boolean value that determines whether DevOps Guru analyzes all AWS CloudFormation stacks in the account. The default value is " ``false`` ". - ``EnableSnsNotifications`` - Description: (Optional) A boolean value that determines whether DevOps Guru sends notifications when an insight is created. The default value is " ``true`` ". - ``EnableSsmOpsItems`` - Description: (Optional) A boolean value that determines whether DevOps Guru creates an OpsCenter OpsItem when an insight is created. The default value is " ``true`` ". - ``EnableDriftRemediation`` - Description: (Optional) A boolean value that determines whether a drift remediation schedule is used. The default value is " ``false`` ". - ``RemediationSchedule`` - Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are ``rate(30 days)`` , ``rate(14 days)`` , ``rate(1 days)`` , and ``none`` . The default value is " ``none`` ". - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Distributor (Type: AWS QuickSetupType-Distributor)** - - ``PackagesToInstall`` - Description: (Required) A comma separated list of packages you want to install on the target instances. The valid values are ``AWSEFSTools`` , ``AWSCWAgent`` , and ``AWSEC2LaunchAgent`` . - ``RemediationSchedule`` - Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are ``rate(30 days)`` , ``rate(14 days)`` , ``rate(2 days)`` , and ``none`` . The default value is " ``rate(30 days)`` ". - ``IsPolicyAttachAllowed`` - Description: (Optional) A boolean value that determines whether Quick Setup attaches policies to instances profiles already associated with the target instances. The default value is " ``false`` ". - ``TargetType`` - Description: (Optional) Determines how instances are targeted for local account deployments. Don't specify a value for this parameter if you're deploying to OUs. The valid values are ``*`` , ``InstanceIds`` , ``ResourceGroups`` , and ``Tags`` . Use ``*`` to target all instances in the account. - ``TargetInstances`` - Description: (Optional) A comma separated list of instance IDs. You must provide a value for this parameter if you specify ``InstanceIds`` for the ``TargetType`` parameter. - ``TargetTagKey`` - Description: (Required) The tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``TargetTagValue`` - Description: (Required) The value of the tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``ResourceGroupName`` - Description: (Required) The name of the resource group associated with the instances you want to target. You must provide a value for this parameter if you specify ``ResourceGroups`` for the ``TargetType`` parameter. - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Host Management (Type: AWS QuickSetupType-SSMHostMgmt)** - - ``UpdateSSMAgent`` - Description: (Optional) A boolean value that determines whether the SSM Agent is updated on the target instances every 2 weeks. The default value is " ``true`` ". - ``UpdateEc2LaunchAgent`` - Description: (Optional) A boolean value that determines whether the EC2 Launch agent is updated on the target instances every month. The default value is " ``false`` ". - ``CollectInventory`` - Description: (Optional) A boolean value that determines whether instance metadata is collected on the target instances every 30 minutes. The default value is " ``true`` ". - ``ScanInstances`` - Description: (Optional) A boolean value that determines whether the target instances are scanned daily for available patches. The default value is " ``true`` ". - ``InstallCloudWatchAgent`` - Description: (Optional) A boolean value that determines whether the Amazon CloudWatch agent is installed on the target instances. The default value is " ``false`` ". - ``UpdateCloudWatchAgent`` - Description: (Optional) A boolean value that determines whether the Amazon CloudWatch agent is updated on the target instances every month. The default value is " ``false`` ". - ``IsPolicyAttachAllowed`` - Description: (Optional) A boolean value that determines whether Quick Setup attaches policies to instances profiles already associated with the target instances. The default value is " ``false`` ". - ``TargetType`` - Description: (Optional) Determines how instances are targeted for local account deployments. Don't specify a value for this parameter if you're deploying to OUs. The valid values are ``*`` , ``InstanceIds`` , ``ResourceGroups`` , and ``Tags`` . Use ``*`` to target all instances in the account. - ``TargetInstances`` - Description: (Optional) A comma separated list of instance IDs. You must provide a value for this parameter if you specify ``InstanceIds`` for the ``TargetType`` parameter. - ``TargetTagKey`` - Description: (Optional) The tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``TargetTagValue`` - Description: (Optional) The value of the tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``ResourceGroupName`` - Description: (Optional) The name of the resource group associated with the instances you want to target. You must provide a value for this parameter if you specify ``ResourceGroups`` for the ``TargetType`` parameter. - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **OpsCenter (Type: AWS QuickSetupType-SSMOpsCenter)** - - ``DelegatedAccountId`` - Description: (Required) The ID of the delegated administrator account. - ``TargetOrganizationalUnits`` - Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Patch Policy (Type: AWS QuickSetupType-PatchPolicy)** - - ``PatchPolicyName`` - Description: (Required) A name for the patch policy. The value you provide is applied to target Amazon EC2 instances as a tag. - ``SelectedPatchBaselines`` - Description: (Required) An array of JSON objects containing the information for the patch baselines to include in your patch policy. - ``PatchBaselineUseDefault`` - Description: (Optional) A boolean value that determines whether the selected patch baselines are all AWS provided. - ``ConfigurationOptionsPatchOperation`` - Description: (Optional) Determines whether target instances scan for available patches, or scan and install available patches. The valid values are ``Scan`` and ``ScanAndInstall`` . The default value for the parameter is ``Scan`` . - ``ConfigurationOptionsScanValue`` - Description: (Optional) A cron expression that is used as the schedule for when instances scan for available patches. - ``ConfigurationOptionsInstallValue`` - Description: (Optional) A cron expression that is used as the schedule for when instances install available patches. - ``ConfigurationOptionsScanNextInterval`` - Description: (Optional) A boolean value that determines whether instances should scan for available patches at the next cron interval. The default value is " ``false`` ". - ``ConfigurationOptionsInstallNextInterval`` - Description: (Optional) A boolean value that determines whether instances should scan for available patches at the next cron interval. The default value is " ``false`` ". - ``RebootOption`` - Description: (Optional) Determines whether instances are rebooted after patches are installed. Valid values are ``RebootIfNeeded`` and ``NoReboot`` . - ``IsPolicyAttachAllowed`` - Description: (Optional) A boolean value that determines whether Quick Setup attaches policies to instances profiles already associated with the target instances. The default value is " ``false`` ". - ``OutputLogEnableS3`` - Description: (Optional) A boolean value that determines whether command output logs are sent to Amazon S3. - ``OutputS3Location`` - Description: (Optional) A JSON string containing information about the Amazon S3 bucket where you want to store the output details of the request. - ``OutputS3BucketRegion`` - Description: (Optional) The AWS Region where the Amazon S3 bucket you want to deliver command output to is located. - ``OutputS3BucketName`` - Description: (Optional) The name of the Amazon S3 bucket you want to deliver command output to. - ``OutputS3KeyPrefix`` - Description: (Optional) The key prefix you want to use in the custom Amazon S3 bucket. - ``TargetType`` - Description: (Optional) Determines how instances are targeted for local account deployments. Don't specify a value for this parameter if you're deploying to OUs. The valid values are ``*`` , ``InstanceIds`` , ``ResourceGroups`` , and ``Tags`` . Use ``*`` to target all instances in the account. - ``TargetInstances`` - Description: (Optional) A comma separated list of instance IDs. You must provide a value for this parameter if you specify ``InstanceIds`` for the ``TargetType`` parameter. - ``TargetTagKey`` - Description: (Required) The tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``TargetTagValue`` - Description: (Required) The value of the tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify ``Tags`` for the ``TargetType`` parameter. - ``ResourceGroupName`` - Description: (Required) The name of the resource group associated with the instances you want to target. You must provide a value for this parameter if you specify ``ResourceGroups`` for the ``TargetType`` parameter. - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Resource Explorer (Type: AWS QuickSetupType-ResourceExplorer)** - - ``SelectedAggregatorRegion`` - Description: (Required) The AWS Region where you want to create the aggregator index. - ``ReplaceExistingAggregator`` - Description: (Required) A boolean value that determines whether to demote an existing aggregator if it is in a Region that differs from the value you specify for the ``SelectedAggregatorRegion`` . - ``TargetOrganizationalUnits`` - Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to. - **Resource Scheduler (Type: AWS QuickSetupType-Scheduler)** - - ``TargetTagKey`` - Description: (Required) The tag key assigned to the instances you want to target. - ``TargetTagValue`` - Description: (Required) The value of the tag key assigned to the instances you want to target. - ``ICalendarString`` - Description: (Required) An iCalendar formatted string containing the schedule you want Change Manager to use. - ``TargetAccounts`` - Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either ``TargetAccounts`` or ``TargetOrganizationalUnits`` . - ``TargetOrganizationalUnits`` - Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to. - ``TargetRegions`` - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.
|
|
320
320
|
:param type: The type of the Quick Setup configuration.
|
|
321
321
|
:param id: The ID of the configuration definition.
|
|
322
322
|
:param local_deployment_administration_role_arn: The ARN of the IAM role used to administrate local configuration deployments.
|
|
@@ -369,7 +369,7 @@ class CfnConfigurationManager(
|
|
|
369
369
|
@builtins.property
|
|
370
370
|
def parameters(
|
|
371
371
|
self,
|
|
372
|
-
) -> typing.Union[
|
|
372
|
+
) -> typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]:
|
|
373
373
|
'''The parameters for the configuration definition type.
|
|
374
374
|
|
|
375
375
|
Parameters for configuration definitions vary based the configuration type. The following lists outline the parameters for each configuration type.
|
|
@@ -475,7 +475,7 @@ class CfnConfigurationManager(
|
|
|
475
475
|
- ``UpdateEc2LaunchAgent``
|
|
476
476
|
- Description: (Optional) A boolean value that determines whether the EC2 Launch agent is updated on the target instances every month. The default value is " ``false`` ".
|
|
477
477
|
- ``CollectInventory``
|
|
478
|
-
- Description: (Optional) A boolean value that determines whether
|
|
478
|
+
- Description: (Optional) A boolean value that determines whether instance metadata is collected on the target instances every 30 minutes. The default value is " ``true`` ".
|
|
479
479
|
- ``ScanInstances``
|
|
480
480
|
- Description: (Optional) A boolean value that determines whether the target instances are scanned daily for available patches. The default value is " ``true`` ".
|
|
481
481
|
- ``InstallCloudWatchAgent``
|
|
@@ -577,7 +577,7 @@ class CfnConfigurationManager(
|
|
|
577
577
|
'''
|
|
578
578
|
result = self._values.get("parameters")
|
|
579
579
|
assert result is not None, "Required property 'parameters' is missing"
|
|
580
|
-
return typing.cast(typing.Union[
|
|
580
|
+
return typing.cast(typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b], result)
|
|
581
581
|
|
|
582
582
|
@builtins.property
|
|
583
583
|
def type(self) -> builtins.str:
|
|
@@ -656,7 +656,7 @@ class CfnConfigurationManager(
|
|
|
656
656
|
last_updated_at: builtins.str,
|
|
657
657
|
status_type: builtins.str,
|
|
658
658
|
status: typing.Optional[builtins.str] = None,
|
|
659
|
-
status_details: typing.Optional[typing.Union[
|
|
659
|
+
status_details: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
|
|
660
660
|
status_message: typing.Optional[builtins.str] = None,
|
|
661
661
|
) -> None:
|
|
662
662
|
'''A summarized description of the status.
|
|
@@ -738,13 +738,13 @@ class CfnConfigurationManager(
|
|
|
738
738
|
@builtins.property
|
|
739
739
|
def status_details(
|
|
740
740
|
self,
|
|
741
|
-
) -> typing.Optional[typing.Union[
|
|
741
|
+
) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
|
|
742
742
|
'''Details about the status.
|
|
743
743
|
|
|
744
744
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssmquicksetup-configurationmanager-statussummary.html#cfn-ssmquicksetup-configurationmanager-statussummary-statusdetails
|
|
745
745
|
'''
|
|
746
746
|
result = self._values.get("status_details")
|
|
747
|
-
return typing.cast(typing.Optional[typing.Union[
|
|
747
|
+
return typing.cast(typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]], result)
|
|
748
748
|
|
|
749
749
|
@builtins.property
|
|
750
750
|
def status_message(self) -> typing.Optional[builtins.str]:
|
|
@@ -950,7 +950,7 @@ def _typecheckingstub__e616ab12615353ce8adb7959fdd264518ca60136764500b5507fb35dd
|
|
|
950
950
|
|
|
951
951
|
def _typecheckingstub__5de88cdf2c4ba7069e306fade91e021ab2a61a9f9d1bdde1ced8a9f3f54e2741(
|
|
952
952
|
*,
|
|
953
|
-
parameters: typing.Union[
|
|
953
|
+
parameters: typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b],
|
|
954
954
|
type: builtins.str,
|
|
955
955
|
id: typing.Optional[builtins.str] = None,
|
|
956
956
|
local_deployment_administration_role_arn: typing.Optional[builtins.str] = None,
|
|
@@ -965,7 +965,7 @@ def _typecheckingstub__0a15d3717729affa2b751047a4b5b72469d29c10060f85ac60b65e8bc
|
|
|
965
965
|
last_updated_at: builtins.str,
|
|
966
966
|
status_type: builtins.str,
|
|
967
967
|
status: typing.Optional[builtins.str] = None,
|
|
968
|
-
status_details: typing.Optional[typing.Union[
|
|
968
|
+
status_details: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
|
|
969
969
|
status_message: typing.Optional[builtins.str] = None,
|
|
970
970
|
) -> None:
|
|
971
971
|
"""Type checking stubs"""
|