aws-cdk-lib 2.178.2__py3-none-any.whl → 2.180.0__py3-none-any.whl

aws_cdk/aws_groundstation/__init__.py

@@ -3030,6 +3030,7 @@ class CfnMissionProfile(
             contact_pre_pass_duration_seconds=123,
             streams_kms_key=groundstation.CfnMissionProfile.StreamsKmsKeyProperty(
                 kms_alias_arn="kmsAliasArn",
+                kms_alias_name="kmsAliasName",
                 kms_key_arn="kmsKeyArn"
             ),
             streams_kms_role="streamsKmsRole",
@@ -3364,18 +3365,24 @@ class CfnMissionProfile(
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_groundstation.CfnMissionProfile.StreamsKmsKeyProperty",
         jsii_struct_bases=[],
-        name_mapping={"kms_alias_arn": "kmsAliasArn", "kms_key_arn": "kmsKeyArn"},
+        name_mapping={
+            "kms_alias_arn": "kmsAliasArn",
+            "kms_alias_name": "kmsAliasName",
+            "kms_key_arn": "kmsKeyArn",
+        },
     )
     class StreamsKmsKeyProperty:
         def __init__(
             self,
             *,
             kms_alias_arn: typing.Optional[builtins.str] = None,
+            kms_alias_name: typing.Optional[builtins.str] = None,
             kms_key_arn: typing.Optional[builtins.str] = None,
         ) -> None:
             '''KMS key info.
 
             :param kms_alias_arn: KMS Alias Arn.
+            :param kms_alias_name: KMS Alias Name.
             :param kms_key_arn: KMS Key Arn.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-groundstation-missionprofile-streamskmskey.html
@@ -3389,16 +3396,20 @@ class CfnMissionProfile(
                 
                 streams_kms_key_property = groundstation.CfnMissionProfile.StreamsKmsKeyProperty(
                     kms_alias_arn="kmsAliasArn",
+                    kms_alias_name="kmsAliasName",
                     kms_key_arn="kmsKeyArn"
                 )
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__9b72d6af08de28c6ebdf730f46ed7f026b1f417a505f1cd3c52737731cc4f6d0)
                 check_type(argname="argument kms_alias_arn", value=kms_alias_arn, expected_type=type_hints["kms_alias_arn"])
+                check_type(argname="argument kms_alias_name", value=kms_alias_name, expected_type=type_hints["kms_alias_name"])
                 check_type(argname="argument kms_key_arn", value=kms_key_arn, expected_type=type_hints["kms_key_arn"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
             if kms_alias_arn is not None:
                 self._values["kms_alias_arn"] = kms_alias_arn
+            if kms_alias_name is not None:
+                self._values["kms_alias_name"] = kms_alias_name
             if kms_key_arn is not None:
                 self._values["kms_key_arn"] = kms_key_arn
 
@@ -3411,6 +3422,15 @@ class CfnMissionProfile(
             result = self._values.get("kms_alias_arn")
             return typing.cast(typing.Optional[builtins.str], result)
 
+        @builtins.property
+        def kms_alias_name(self) -> typing.Optional[builtins.str]:
+            '''KMS Alias Name.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-groundstation-missionprofile-streamskmskey.html#cfn-groundstation-missionprofile-streamskmskey-kmsaliasname
+            '''
+            result = self._values.get("kms_alias_name")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         @builtins.property
         def kms_key_arn(self) -> typing.Optional[builtins.str]:
             '''KMS Key Arn.
@@ -3496,6 +3516,7 @@ class CfnMissionProfileProps:
                 contact_pre_pass_duration_seconds=123,
                 streams_kms_key=groundstation.CfnMissionProfile.StreamsKmsKeyProperty(
                     kms_alias_arn="kmsAliasArn",
+                    kms_alias_name="kmsAliasName",
                     kms_key_arn="kmsKeyArn"
                 ),
                 streams_kms_role="streamsKmsRole",
@@ -4054,6 +4075,7 @@ def _typecheckingstub__b247611cb700acbb2d198be2f48ab39f22bafbf3844a6363be6523b5e
 def _typecheckingstub__9b72d6af08de28c6ebdf730f46ed7f026b1f417a505f1cd3c52737731cc4f6d0(
     *,
     kms_alias_arn: typing.Optional[builtins.str] = None,
+    kms_alias_name: typing.Optional[builtins.str] = None,
     kms_key_arn: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""

aws_cdk/aws_iam/__init__.py

@@ -10819,21 +10819,21 @@ class RoleProps:
 
         Example::
 
-            # Option 3: Create a new role that allows the account root principal to assume. Add this role in the `system:masters` and witch to this role from the AWS console.
-            # cluster: eks.Cluster
-            
+            lambda_role = iam.Role(self, "Role",
+                assumed_by=iam.ServicePrincipal("lambda.amazonaws.com"),
+                description="Example role..."
+            )
             
-            console_read_only_role = iam.Role(self, "ConsoleReadOnlyRole",
-                assumed_by=iam.ArnPrincipal("arn_for_trusted_principal")
+            stream = kinesis.Stream(self, "MyEncryptedStream",
+                encryption=kinesis.StreamEncryption.KMS
+            )
+            stream_consumer = kinesis.StreamConsumer(self, "MyStreamConsumer",
+                stream_consumer_name="MyStreamConsumer",
+                stream=stream
             )
-            console_read_only_role.add_to_policy(iam.PolicyStatement(
-                actions=["eks:AccessKubernetesApi", "eks:Describe*", "eks:List*"
-                ],
-                resources=[cluster.cluster_arn]
-            ))
             
-            # Add this role to system:masters RBAC group
-            cluster.aws_auth.add_masters_role(console_read_only_role)
+            # give lambda permissions to read stream via the stream consumer
+            stream_consumer.grant_read(lambda_role)
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9c9223cb9fa6dff45ee4fd7013629ab18542c2499a83f542c5405968fad2287c)
@@ -13890,7 +13890,7 @@ class ArnPrincipal(
     Example::
 
         # Option 2: create your custom mastersRole with scoped assumeBy arn as the Cluster prop. Switch to this role from the AWS console.
-        from aws_cdk.lambda_layer_kubectl_v31 import KubectlV31Layer
+        from aws_cdk.lambda_layer_kubectl_v32 import KubectlV32Layer
         # vpc: ec2.Vpc
         
         
@@ -13900,8 +13900,8 @@ class ArnPrincipal(
         
         cluster = eks.Cluster(self, "EksCluster",
             vpc=vpc,
-            version=eks.KubernetesVersion.V1_31,
-            kubectl_layer=KubectlV31Layer(self, "KubectlLayer"),
+            version=eks.KubernetesVersion.V1_32,
+            kubectl_layer=KubectlV32Layer(self, "KubectlLayer"),
             masters_role=masters_role
         )
         

aws_cdk/aws_iot/__init__.py

@@ -7540,6 +7540,13 @@ class CfnLogging(
 ):
     '''Configure logging.
 
+    .. epigraph::
+
+       If you already set the log function of AWS IoT Core , you can't deploy the AWS Cloud Development Kit (AWS CDK) to change the logging settings. You can change the logging settings by either:
+
+       - Importing a role into your AWS CloudFormation stack, such as with the `infrastructure as code generator (IaC generator) <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC.html>`_ .
+       - `Deleting the existing role <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_manage_delete.html#roles-managingrole-deleting-console>`_ .
+
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-logging.html
     :cloudformationResource: AWS::IoT::Logging
     :exampleMetadata: fixture=_generated