aws-cdk-lib 2.179.0__py3-none-any.whl → 2.181.0__py3-none-any.whl

aws_cdk/aws_transfer/__init__.py

@@ -64,6 +64,7 @@ from .. import (
     IInspectable as _IInspectable_c2943556,
     IResolvable as _IResolvable_da3f097b,
     ITaggable as _ITaggable_36806126,
+    ITaggableV2 as _ITaggableV2_4e6798f8,
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
@@ -103,6 +104,8 @@ class CfnAgreement(
         
             # the properties below are optional
             description="description",
+            enforce_message_signing="enforceMessageSigning",
+            preserve_filename="preserveFilename",
             status="status",
             tags=[CfnTag(
                 key="key",
@@ -122,6 +125,8 @@ class CfnAgreement(
         partner_profile_id: builtins.str,
         server_id: builtins.str,
         description: typing.Optional[builtins.str] = None,
+        enforce_message_signing: typing.Optional[builtins.str] = None,
+        preserve_filename: typing.Optional[builtins.str] = None,
         status: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
@@ -134,6 +139,8 @@ class CfnAgreement(
         :param partner_profile_id: A unique identifier for the partner profile used in the agreement.
         :param server_id: A system-assigned unique identifier for a server instance. This identifier indicates the specific server that the agreement uses.
         :param description: The name or short description that's used to identify the agreement.
+        :param enforce_message_signing: Determines whether or not unsigned messages from your trading partners will be accepted. - ``ENABLED`` : Transfer Family rejects unsigned messages from your trading partner. - ``DISABLED`` (default value): Transfer Family accepts unsigned messages from your trading partner.
+        :param preserve_filename: Determines whether or not Transfer Family appends a unique string of characters to the end of the AS2 message payload filename when saving it. - ``ENABLED`` : the filename provided by your trading parter is preserved when the file is saved. - ``DISABLED`` (default value): when Transfer Family saves the file, the filename is adjusted, as described in `File names and locations <https://docs.aws.amazon.com/transfer/latest/userguide/send-as2-messages.html#file-names-as2>`_ .
         :param status: The current status of the agreement, either ``ACTIVE`` or ``INACTIVE`` .
         :param tags: Key-value pairs that can be used to group and search for agreements.
         '''
@@ -148,6 +155,8 @@ class CfnAgreement(
             partner_profile_id=partner_profile_id,
             server_id=server_id,
             description=description,
+            enforce_message_signing=enforce_message_signing,
+            preserve_filename=preserve_filename,
             status=status,
             tags=tags,
         )
@@ -291,6 +300,32 @@ class CfnAgreement(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="enforceMessageSigning")
+    def enforce_message_signing(self) -> typing.Optional[builtins.str]:
+        '''Determines whether or not unsigned messages from your trading partners will be accepted.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "enforceMessageSigning"))
+
+    @enforce_message_signing.setter
+    def enforce_message_signing(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__21309644320e7387ed8b8bad8e7f1cae3841efd58a7ee09e263313c3ed573fe0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "enforceMessageSigning", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="preserveFilename")
+    def preserve_filename(self) -> typing.Optional[builtins.str]:
+        '''Determines whether or not Transfer Family appends a unique string of characters to the end of the AS2 message payload filename when saving it.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "preserveFilename"))
+
+    @preserve_filename.setter
+    def preserve_filename(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a8e3dcc245fac0e15a9dfed2729f9d36d2a9bf94ddf00d1e9da1c45cfafec37b)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "preserveFilename", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="status")
     def status(self) -> typing.Optional[builtins.str]:
@@ -328,6 +363,8 @@ class CfnAgreement(
         "partner_profile_id": "partnerProfileId",
         "server_id": "serverId",
         "description": "description",
+        "enforce_message_signing": "enforceMessageSigning",
+        "preserve_filename": "preserveFilename",
         "status": "status",
         "tags": "tags",
     },
@@ -342,6 +379,8 @@ class CfnAgreementProps:
         partner_profile_id: builtins.str,
         server_id: builtins.str,
         description: typing.Optional[builtins.str] = None,
+        enforce_message_signing: typing.Optional[builtins.str] = None,
+        preserve_filename: typing.Optional[builtins.str] = None,
         status: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
@@ -353,6 +392,8 @@ class CfnAgreementProps:
         :param partner_profile_id: A unique identifier for the partner profile used in the agreement.
         :param server_id: A system-assigned unique identifier for a server instance. This identifier indicates the specific server that the agreement uses.
         :param description: The name or short description that's used to identify the agreement.
+        :param enforce_message_signing: Determines whether or not unsigned messages from your trading partners will be accepted. - ``ENABLED`` : Transfer Family rejects unsigned messages from your trading partner. - ``DISABLED`` (default value): Transfer Family accepts unsigned messages from your trading partner.
+        :param preserve_filename: Determines whether or not Transfer Family appends a unique string of characters to the end of the AS2 message payload filename when saving it. - ``ENABLED`` : the filename provided by your trading parter is preserved when the file is saved. - ``DISABLED`` (default value): when Transfer Family saves the file, the filename is adjusted, as described in `File names and locations <https://docs.aws.amazon.com/transfer/latest/userguide/send-as2-messages.html#file-names-as2>`_ .
         :param status: The current status of the agreement, either ``ACTIVE`` or ``INACTIVE`` .
         :param tags: Key-value pairs that can be used to group and search for agreements.
 
@@ -374,6 +415,8 @@ class CfnAgreementProps:
             
                 # the properties below are optional
                 description="description",
+                enforce_message_signing="enforceMessageSigning",
+                preserve_filename="preserveFilename",
                 status="status",
                 tags=[CfnTag(
                     key="key",
@@ -389,6 +432,8 @@ class CfnAgreementProps:
             check_type(argname="argument partner_profile_id", value=partner_profile_id, expected_type=type_hints["partner_profile_id"])
             check_type(argname="argument server_id", value=server_id, expected_type=type_hints["server_id"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument enforce_message_signing", value=enforce_message_signing, expected_type=type_hints["enforce_message_signing"])
+            check_type(argname="argument preserve_filename", value=preserve_filename, expected_type=type_hints["preserve_filename"])
             check_type(argname="argument status", value=status, expected_type=type_hints["status"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -400,6 +445,10 @@ class CfnAgreementProps:
         }
         if description is not None:
             self._values["description"] = description
+        if enforce_message_signing is not None:
+            self._values["enforce_message_signing"] = enforce_message_signing
+        if preserve_filename is not None:
+            self._values["preserve_filename"] = preserve_filename
         if status is not None:
             self._values["status"] = status
         if tags is not None:
@@ -478,6 +527,30 @@ class CfnAgreementProps:
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def enforce_message_signing(self) -> typing.Optional[builtins.str]:
+        '''Determines whether or not unsigned messages from your trading partners will be accepted.
+
+        - ``ENABLED`` : Transfer Family rejects unsigned messages from your trading partner.
+        - ``DISABLED`` (default value): Transfer Family accepts unsigned messages from your trading partner.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-agreement.html#cfn-transfer-agreement-enforcemessagesigning
+        '''
+        result = self._values.get("enforce_message_signing")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def preserve_filename(self) -> typing.Optional[builtins.str]:
+        '''Determines whether or not Transfer Family appends a unique string of characters to the end of the AS2 message payload filename when saving it.
+
+        - ``ENABLED`` : the filename provided by your trading parter is preserved when the file is saved.
+        - ``DISABLED`` (default value): when Transfer Family saves the file, the filename is adjusted, as described in `File names and locations <https://docs.aws.amazon.com/transfer/latest/userguide/send-as2-messages.html#file-names-as2>`_ .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-agreement.html#cfn-transfer-agreement-preservefilename
+        '''
+        result = self._values.get("preserve_filename")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def status(self) -> typing.Optional[builtins.str]:
         '''The current status of the agreement, either ``ACTIVE`` or ``INACTIVE`` .
@@ -1246,6 +1319,7 @@ class CfnConnector(
             "mdn_signing_algorithm": "mdnSigningAlgorithm",
             "message_subject": "messageSubject",
             "partner_profile_id": "partnerProfileId",
+            "preserve_content_type": "preserveContentType",
             "signing_algorithm": "signingAlgorithm",
         },
     )
@@ -1261,6 +1335,7 @@ class CfnConnector(
             mdn_signing_algorithm: typing.Optional[builtins.str] = None,
             message_subject: typing.Optional[builtins.str] = None,
             partner_profile_id: typing.Optional[builtins.str] = None,
+            preserve_content_type: typing.Optional[builtins.str] = None,
             signing_algorithm: typing.Optional[builtins.str] = None,
         ) -> None:
             '''A structure that contains the parameters for an AS2 connector object.
@@ -1273,6 +1348,7 @@ class CfnConnector(
             :param mdn_signing_algorithm: The signing algorithm for the MDN response. .. epigraph:: If set to DEFAULT (or not set at all), the value for ``SigningAlgorithm`` is used.
             :param message_subject: Used as the ``Subject`` HTTP header attribute in AS2 messages that are being sent with the connector.
             :param partner_profile_id: A unique identifier for the partner profile for the connector.
+            :param preserve_content_type: Specifies whether to use the AWS S3 object content-type as the content-type for the AS2 message.
             :param signing_algorithm: The algorithm that is used to sign the AS2 messages sent with the connector.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-connector-as2config.html
@@ -1293,6 +1369,7 @@ class CfnConnector(
                     mdn_signing_algorithm="mdnSigningAlgorithm",
                     message_subject="messageSubject",
                     partner_profile_id="partnerProfileId",
+                    preserve_content_type="preserveContentType",
                     signing_algorithm="signingAlgorithm"
                 )
             '''
@@ -1306,6 +1383,7 @@ class CfnConnector(
                 check_type(argname="argument mdn_signing_algorithm", value=mdn_signing_algorithm, expected_type=type_hints["mdn_signing_algorithm"])
                 check_type(argname="argument message_subject", value=message_subject, expected_type=type_hints["message_subject"])
                 check_type(argname="argument partner_profile_id", value=partner_profile_id, expected_type=type_hints["partner_profile_id"])
+                check_type(argname="argument preserve_content_type", value=preserve_content_type, expected_type=type_hints["preserve_content_type"])
                 check_type(argname="argument signing_algorithm", value=signing_algorithm, expected_type=type_hints["signing_algorithm"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
             if basic_auth_secret_id is not None:
@@ -1324,6 +1402,8 @@ class CfnConnector(
                 self._values["message_subject"] = message_subject
             if partner_profile_id is not None:
                 self._values["partner_profile_id"] = partner_profile_id
+            if preserve_content_type is not None:
+                self._values["preserve_content_type"] = preserve_content_type
             if signing_algorithm is not None:
                 self._values["signing_algorithm"] = signing_algorithm
 
@@ -1432,6 +1512,15 @@ class CfnConnector(
             result = self._values.get("partner_profile_id")
             return typing.cast(typing.Optional[builtins.str], result)
 
+        @builtins.property
+        def preserve_content_type(self) -> typing.Optional[builtins.str]:
+            '''Specifies whether to use the AWS S3 object content-type as the content-type for the AS2 message.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-connector-as2config.html#cfn-transfer-connector-as2config-preservecontenttype
+            '''
+            result = self._values.get("preserve_content_type")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         @builtins.property
         def signing_algorithm(self) -> typing.Optional[builtins.str]:
             '''The algorithm that is used to sign the AS2 messages sent with the connector.
@@ -2203,7 +2292,9 @@ class CfnServer(
     def attr_as2_service_managed_egress_ip_addresses(self) -> typing.List[builtins.str]:
         '''The list of egress IP addresses of this server.
 
-        These IP addresses are only relevant for servers that use the AS2 protocol. They are used for sending asynchronous MDNs. These IP addresses are assigned automatically when you create an AS2 server. Additionally, if you update an existing server and add the AS2 protocol, static IP addresses are assigned as well.
+        These IP addresses are only relevant for servers that use the AS2 protocol. They are used for sending asynchronous MDNs.
+
+        These IP addresses are assigned automatically when you create an AS2 server. Additionally, if you update an existing server and add the AS2 protocol, static IP addresses are assigned as well.
 
         :cloudformationAttribute: As2ServiceManagedEgressIpAddresses
         '''
@@ -2221,7 +2312,12 @@ class CfnServer(
     @builtins.property
     @jsii.member(jsii_name="attrState")
     def attr_state(self) -> builtins.str:
-        '''
+        '''The condition of the server that was described.
+
+        A value of ``ONLINE`` indicates that the server can accept jobs and transfer files. A ``State`` value of ``OFFLINE`` means that the server cannot perform file transfer operations.
+
+        The states of ``STARTING`` and ``STOPPING`` indicate that the server is in an intermediate state, either not fully able to respond, or not fully offline. The values of ``START_FAILED`` or ``STOP_FAILED`` can indicate an error condition.
+
         :cloudformationAttribute: State
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrState"))
@@ -3651,7 +3747,7 @@ class CfnUser(
         :param home_directory_type: The type of landing directory (folder) that you want your users' home directory to be when they log in to the server. If you set it to ``PATH`` , the user will see the absolute Amazon S3 bucket or Amazon EFS path as is in their file transfer protocol clients. If you set it to ``LOGICAL`` , you need to provide mappings in the ``HomeDirectoryMappings`` for how you want to make Amazon S3 or Amazon EFS paths visible to your users. .. epigraph:: If ``HomeDirectoryType`` is ``LOGICAL`` , you must provide mappings, using the ``HomeDirectoryMappings`` parameter. If, on the other hand, ``HomeDirectoryType`` is ``PATH`` , you provide an absolute path using the ``HomeDirectory`` parameter. You cannot have both ``HomeDirectory`` and ``HomeDirectoryMappings`` in your template.
         :param policy: A session policy for your user so you can use the same IAM role across multiple users. This policy restricts user access to portions of their Amazon S3 bucket. Variables that you can use inside this policy include ``${Transfer:UserName}`` , ``${Transfer:HomeDirectory}`` , and ``${Transfer:HomeBucket}`` . .. epigraph:: For session policies, AWS Transfer Family stores the policy as a JSON blob, instead of the Amazon Resource Name (ARN) of the policy. You save the policy as a JSON blob and pass it in the ``Policy`` argument. For an example of a session policy, see `Example session policy <https://docs.aws.amazon.com/transfer/latest/userguide/session-policy.html>`_ . For more information, see `AssumeRole <https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html>`_ in the *AWS Security Token Service API Reference* .
         :param posix_profile: Specifies the full POSIX identity, including user ID ( ``Uid`` ), group ID ( ``Gid`` ), and any secondary groups IDs ( ``SecondaryGids`` ), that controls your users' access to your Amazon Elastic File System (Amazon EFS) file systems. The POSIX permissions that are set on files and directories in your file system determine the level of access your users get when transferring files into and out of your Amazon EFS file systems.
-        :param ssh_public_keys: Specifies the public key portion of the Secure Shell (SSH) keys stored for the described user.
+        :param ssh_public_keys: Specifies the public key portion of the Secure Shell (SSH) keys stored for the described user. .. epigraph:: To delete the public key body, set its value to zero keys, as shown here: ``SshPublicKeys: []``
         :param tags: Key-value pairs that can be used to group and search for users. Tags are metadata attached to users for any purpose.
         '''
         if __debug__:
@@ -4117,7 +4213,7 @@ class CfnUserProps:
         :param home_directory_type: The type of landing directory (folder) that you want your users' home directory to be when they log in to the server. If you set it to ``PATH`` , the user will see the absolute Amazon S3 bucket or Amazon EFS path as is in their file transfer protocol clients. If you set it to ``LOGICAL`` , you need to provide mappings in the ``HomeDirectoryMappings`` for how you want to make Amazon S3 or Amazon EFS paths visible to your users. .. epigraph:: If ``HomeDirectoryType`` is ``LOGICAL`` , you must provide mappings, using the ``HomeDirectoryMappings`` parameter. If, on the other hand, ``HomeDirectoryType`` is ``PATH`` , you provide an absolute path using the ``HomeDirectory`` parameter. You cannot have both ``HomeDirectory`` and ``HomeDirectoryMappings`` in your template.
         :param policy: A session policy for your user so you can use the same IAM role across multiple users. This policy restricts user access to portions of their Amazon S3 bucket. Variables that you can use inside this policy include ``${Transfer:UserName}`` , ``${Transfer:HomeDirectory}`` , and ``${Transfer:HomeBucket}`` . .. epigraph:: For session policies, AWS Transfer Family stores the policy as a JSON blob, instead of the Amazon Resource Name (ARN) of the policy. You save the policy as a JSON blob and pass it in the ``Policy`` argument. For an example of a session policy, see `Example session policy <https://docs.aws.amazon.com/transfer/latest/userguide/session-policy.html>`_ . For more information, see `AssumeRole <https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html>`_ in the *AWS Security Token Service API Reference* .
         :param posix_profile: Specifies the full POSIX identity, including user ID ( ``Uid`` ), group ID ( ``Gid`` ), and any secondary groups IDs ( ``SecondaryGids`` ), that controls your users' access to your Amazon Elastic File System (Amazon EFS) file systems. The POSIX permissions that are set on files and directories in your file system determine the level of access your users get when transferring files into and out of your Amazon EFS file systems.
-        :param ssh_public_keys: Specifies the public key portion of the Secure Shell (SSH) keys stored for the described user.
+        :param ssh_public_keys: Specifies the public key portion of the Secure Shell (SSH) keys stored for the described user. .. epigraph:: To delete the public key body, set its value to zero keys, as shown here: ``SshPublicKeys: []``
         :param tags: Key-value pairs that can be used to group and search for users. Tags are metadata attached to users for any purpose.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-user.html
@@ -4313,6 +4409,12 @@ class CfnUserProps:
     def ssh_public_keys(self) -> typing.Optional[typing.List[builtins.str]]:
         '''Specifies the public key portion of the Secure Shell (SSH) keys stored for the described user.
 
+        .. epigraph::
+
+           To delete the public key body, set its value to zero keys, as shown here:
+
+           ``SshPublicKeys: []``
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-user.html#cfn-transfer-user-sshpublickeys
         '''
         result = self._values.get("ssh_public_keys")
@@ -4341,6 +4443,619 @@ class CfnUserProps:
         )
 
 
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnWebApp(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_transfer.CfnWebApp",
+):
+    '''Creates a web app based on specified parameters, and returns the ID for the new web app.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html
+    :cloudformationResource: AWS::Transfer::WebApp
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_transfer as transfer
+        
+        cfn_web_app = transfer.CfnWebApp(self, "MyCfnWebApp",
+            identity_provider_details=transfer.CfnWebApp.IdentityProviderDetailsProperty(
+                application_arn="applicationArn",
+                instance_arn="instanceArn",
+                role="role"
+            ),
+        
+            # the properties below are optional
+            access_endpoint="accessEndpoint",
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )],
+            web_app_customization=transfer.CfnWebApp.WebAppCustomizationProperty(
+                favicon_file="faviconFile",
+                logo_file="logoFile",
+                title="title"
+            ),
+            web_app_units=transfer.CfnWebApp.WebAppUnitsProperty(
+                provisioned=123
+            )
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        identity_provider_details: typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebApp.IdentityProviderDetailsProperty", typing.Dict[builtins.str, typing.Any]]],
+        access_endpoint: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+        web_app_customization: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebApp.WebAppCustomizationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        web_app_units: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWebApp.WebAppUnitsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param identity_provider_details: You can provide a structure that contains the details for the identity provider to use with your web app. For more details about this parameter, see `Configure your identity provider for Transfer Family web apps <https://docs.aws.amazon.com//transfer/latest/userguide/webapp-identity-center.html>`_ .
+        :param access_endpoint: The ``AccessEndpoint`` is the URL that you provide to your users for them to interact with the Transfer Family web app. You can specify a custom URL or use the default value. Before you enter a custom URL for this parameter, follow the steps described in `Update your access endpoint with a custom URL <https://docs.aws.amazon.com//transfer/latest/userguide/webapp-customize.html>`_ .
+        :param tags: Key-value pairs that can be used to group and search for web apps. Tags are metadata attached to web apps for any purpose.
+        :param web_app_customization: A structure that contains the customization fields for the web app. You can provide a title, logo, and icon to customize the appearance of your web app.
+        :param web_app_units: A union that contains the value for number of concurrent connections or the user sessions on your web app.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7e725b505349ad94c74b92c89fcff0a41d3c479d533cc008fb193cc8b30c0f70)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnWebAppProps(
+            identity_provider_details=identity_provider_details,
+            access_endpoint=access_endpoint,
+            tags=tags,
+            web_app_customization=web_app_customization,
+            web_app_units=web_app_units,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__08aaa0faf06441ae9c1523d4ebf9fdfeccaf68e85c8fdc160642ec400dfa1faa)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__35cc75162657b9202a49840d4e0aa4c3d918e09af68ff376e538710cee1cb6cb)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrArn")
+    def attr_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the web app.
+
+        :cloudformationAttribute: Arn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrIdentityProviderDetailsApplicationArn")
+    def attr_identity_provider_details_application_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) for the IAM Identity Center application: this value is set automatically when you create your web app.
+
+        :cloudformationAttribute: IdentityProviderDetails.ApplicationArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrIdentityProviderDetailsApplicationArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrWebAppId")
+    def attr_web_app_id(self) -> builtins.str:
+        '''The unique identifier for the web app.
+
+        :cloudformationAttribute: WebAppId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrWebAppId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="identityProviderDetails")
+    def identity_provider_details(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnWebApp.IdentityProviderDetailsProperty"]:
+        '''You can provide a structure that contains the details for the identity provider to use with your web app.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnWebApp.IdentityProviderDetailsProperty"], jsii.get(self, "identityProviderDetails"))
+
+    @identity_provider_details.setter
+    def identity_provider_details(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnWebApp.IdentityProviderDetailsProperty"],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a143104dc72055a6346499a1c42dc1e9a55e0a2fac758a5fdb73cc172530fe8b)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "identityProviderDetails", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="accessEndpoint")
+    def access_endpoint(self) -> typing.Optional[builtins.str]:
+        '''The ``AccessEndpoint`` is the URL that you provide to your users for them to interact with the Transfer Family web app.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "accessEndpoint"))
+
+    @access_endpoint.setter
+    def access_endpoint(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b49260e5a1b945671ba6797a35aa7d7bf93a577eac3292e024438feec4dc1976)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "accessEndpoint", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''Key-value pairs that can be used to group and search for web apps.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__30b2b42c451b5cf18bc021ed1ab027f439a56a366c31b4bec2874a1319670127)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="webAppCustomization")
+    def web_app_customization(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebApp.WebAppCustomizationProperty"]]:
+        '''A structure that contains the customization fields for the web app.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebApp.WebAppCustomizationProperty"]], jsii.get(self, "webAppCustomization"))
+
+    @web_app_customization.setter
+    def web_app_customization(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebApp.WebAppCustomizationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__06cf7fb4d03ba1e31e57310f7a4e5b9ee65fd97449295a5fcca203aa59c8b3df)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "webAppCustomization", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="webAppUnits")
+    def web_app_units(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebApp.WebAppUnitsProperty"]]:
+        '''A union that contains the value for number of concurrent connections or the user sessions on your web app.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebApp.WebAppUnitsProperty"]], jsii.get(self, "webAppUnits"))
+
+    @web_app_units.setter
+    def web_app_units(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWebApp.WebAppUnitsProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__05c81ce4f64dae1408aa42ef29823b95b141813512df0fe6ef85a451fc930f0a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "webAppUnits", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_transfer.CfnWebApp.IdentityProviderDetailsProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "application_arn": "applicationArn",
+            "instance_arn": "instanceArn",
+            "role": "role",
+        },
+    )
+    class IdentityProviderDetailsProperty:
+        def __init__(
+            self,
+            *,
+            application_arn: typing.Optional[builtins.str] = None,
+            instance_arn: typing.Optional[builtins.str] = None,
+            role: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''A structure that describes the values to use for the IAM Identity Center settings when you create or update a web app.
+
+            :param application_arn: The Amazon Resource Name (ARN) for the IAM Identity Center application: this value is set automatically when you create your web app.
+            :param instance_arn: The Amazon Resource Name (ARN) for the IAM Identity Center used for the web app.
+            :param role: The IAM role in IAM Identity Center used for the web app.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-identityproviderdetails.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_transfer as transfer
+                
+                identity_provider_details_property = transfer.CfnWebApp.IdentityProviderDetailsProperty(
+                    application_arn="applicationArn",
+                    instance_arn="instanceArn",
+                    role="role"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__b302a4e89f0273c2f4ecb9d1e9d455f99c8de91db6c0a9f929e41a9c0140a4a4)
+                check_type(argname="argument application_arn", value=application_arn, expected_type=type_hints["application_arn"])
+                check_type(argname="argument instance_arn", value=instance_arn, expected_type=type_hints["instance_arn"])
+                check_type(argname="argument role", value=role, expected_type=type_hints["role"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if application_arn is not None:
+                self._values["application_arn"] = application_arn
+            if instance_arn is not None:
+                self._values["instance_arn"] = instance_arn
+            if role is not None:
+                self._values["role"] = role
+
+        @builtins.property
+        def application_arn(self) -> typing.Optional[builtins.str]:
+            '''The Amazon Resource Name (ARN) for the IAM Identity Center application: this value is set automatically when you create your web app.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-identityproviderdetails.html#cfn-transfer-webapp-identityproviderdetails-applicationarn
+            '''
+            result = self._values.get("application_arn")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def instance_arn(self) -> typing.Optional[builtins.str]:
+            '''The Amazon Resource Name (ARN) for the IAM Identity Center used for the web app.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-identityproviderdetails.html#cfn-transfer-webapp-identityproviderdetails-instancearn
+            '''
+            result = self._values.get("instance_arn")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def role(self) -> typing.Optional[builtins.str]:
+            '''The IAM role in IAM Identity Center used for the web app.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-identityproviderdetails.html#cfn-transfer-webapp-identityproviderdetails-role
+            '''
+            result = self._values.get("role")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "IdentityProviderDetailsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_transfer.CfnWebApp.WebAppCustomizationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "favicon_file": "faviconFile",
+            "logo_file": "logoFile",
+            "title": "title",
+        },
+    )
+    class WebAppCustomizationProperty:
+        def __init__(
+            self,
+            *,
+            favicon_file: typing.Optional[builtins.str] = None,
+            logo_file: typing.Optional[builtins.str] = None,
+            title: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''A structure that contains the customization fields for the web app.
+
+            You can provide a title, logo, and icon to customize the appearance of your web app.
+
+            :param favicon_file: Returns an icon file data string (in base64 encoding).
+            :param logo_file: Returns a logo file data string (in base64 encoding).
+            :param title: Returns the page title that you defined for your web app.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappcustomization.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_transfer as transfer
+                
+                web_app_customization_property = transfer.CfnWebApp.WebAppCustomizationProperty(
+                    favicon_file="faviconFile",
+                    logo_file="logoFile",
+                    title="title"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__e7ad602329ec3c900c7027cebb12a5f6509c389ad77660ed02d37f445d17a053)
+                check_type(argname="argument favicon_file", value=favicon_file, expected_type=type_hints["favicon_file"])
+                check_type(argname="argument logo_file", value=logo_file, expected_type=type_hints["logo_file"])
+                check_type(argname="argument title", value=title, expected_type=type_hints["title"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if favicon_file is not None:
+                self._values["favicon_file"] = favicon_file
+            if logo_file is not None:
+                self._values["logo_file"] = logo_file
+            if title is not None:
+                self._values["title"] = title
+
+        @builtins.property
+        def favicon_file(self) -> typing.Optional[builtins.str]:
+            '''Returns an icon file data string (in base64 encoding).
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappcustomization.html#cfn-transfer-webapp-webappcustomization-faviconfile
+            '''
+            result = self._values.get("favicon_file")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def logo_file(self) -> typing.Optional[builtins.str]:
+            '''Returns a logo file data string (in base64 encoding).
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappcustomization.html#cfn-transfer-webapp-webappcustomization-logofile
+            '''
+            result = self._values.get("logo_file")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def title(self) -> typing.Optional[builtins.str]:
+            '''Returns the page title that you defined for your web app.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappcustomization.html#cfn-transfer-webapp-webappcustomization-title
+            '''
+            result = self._values.get("title")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "WebAppCustomizationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_transfer.CfnWebApp.WebAppUnitsProperty",
+        jsii_struct_bases=[],
+        name_mapping={"provisioned": "provisioned"},
+    )
+    class WebAppUnitsProperty:
+        def __init__(self, *, provisioned: jsii.Number) -> None:
+            '''Contains an integer value that represents the value for number of concurrent connections or the user sessions on your web app.
+
+            :param provisioned: An integer that represents the number of units for your desired number of concurrent connections, or the number of user sessions on your web app at the same time. Each increment allows an additional 250 concurrent sessions: a value of ``1`` sets the number of concurrent sessions to 250; ``2`` sets a value of 500, and so on.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappunits.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_transfer as transfer
+                
+                web_app_units_property = transfer.CfnWebApp.WebAppUnitsProperty(
+                    provisioned=123
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__f60d6cda63c7834db5b6c31f65165e63d01404bdd2c426d37d6fba8f40916107)
+                check_type(argname="argument provisioned", value=provisioned, expected_type=type_hints["provisioned"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "provisioned": provisioned,
+            }
+
+        @builtins.property
+        def provisioned(self) -> jsii.Number:
+            '''An integer that represents the number of units for your desired number of concurrent connections, or the number of user sessions on your web app at the same time.
+
+            Each increment allows an additional 250 concurrent sessions: a value of ``1`` sets the number of concurrent sessions to 250; ``2`` sets a value of 500, and so on.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappunits.html#cfn-transfer-webapp-webappunits-provisioned
+            '''
+            result = self._values.get("provisioned")
+            assert result is not None, "Required property 'provisioned' is missing"
+            return typing.cast(jsii.Number, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "WebAppUnitsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_transfer.CfnWebAppProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "identity_provider_details": "identityProviderDetails",
+        "access_endpoint": "accessEndpoint",
+        "tags": "tags",
+        "web_app_customization": "webAppCustomization",
+        "web_app_units": "webAppUnits",
+    },
+)
+class CfnWebAppProps:
+    def __init__(
+        self,
+        *,
+        identity_provider_details: typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebApp.IdentityProviderDetailsProperty, typing.Dict[builtins.str, typing.Any]]],
+        access_endpoint: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+        web_app_customization: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebApp.WebAppCustomizationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        web_app_units: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebApp.WebAppUnitsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnWebApp``.
+
+        :param identity_provider_details: You can provide a structure that contains the details for the identity provider to use with your web app. For more details about this parameter, see `Configure your identity provider for Transfer Family web apps <https://docs.aws.amazon.com//transfer/latest/userguide/webapp-identity-center.html>`_ .
+        :param access_endpoint: The ``AccessEndpoint`` is the URL that you provide to your users for them to interact with the Transfer Family web app. You can specify a custom URL or use the default value. Before you enter a custom URL for this parameter, follow the steps described in `Update your access endpoint with a custom URL <https://docs.aws.amazon.com//transfer/latest/userguide/webapp-customize.html>`_ .
+        :param tags: Key-value pairs that can be used to group and search for web apps. Tags are metadata attached to web apps for any purpose.
+        :param web_app_customization: A structure that contains the customization fields for the web app. You can provide a title, logo, and icon to customize the appearance of your web app.
+        :param web_app_units: A union that contains the value for number of concurrent connections or the user sessions on your web app.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_transfer as transfer
+            
+            cfn_web_app_props = transfer.CfnWebAppProps(
+                identity_provider_details=transfer.CfnWebApp.IdentityProviderDetailsProperty(
+                    application_arn="applicationArn",
+                    instance_arn="instanceArn",
+                    role="role"
+                ),
+            
+                # the properties below are optional
+                access_endpoint="accessEndpoint",
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )],
+                web_app_customization=transfer.CfnWebApp.WebAppCustomizationProperty(
+                    favicon_file="faviconFile",
+                    logo_file="logoFile",
+                    title="title"
+                ),
+                web_app_units=transfer.CfnWebApp.WebAppUnitsProperty(
+                    provisioned=123
+                )
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__fbc7bdd479da7eca2bd2264125d2580878fa82f5b9dcf4a35fe4aca05da20d4d)
+            check_type(argname="argument identity_provider_details", value=identity_provider_details, expected_type=type_hints["identity_provider_details"])
+            check_type(argname="argument access_endpoint", value=access_endpoint, expected_type=type_hints["access_endpoint"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+            check_type(argname="argument web_app_customization", value=web_app_customization, expected_type=type_hints["web_app_customization"])
+            check_type(argname="argument web_app_units", value=web_app_units, expected_type=type_hints["web_app_units"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "identity_provider_details": identity_provider_details,
+        }
+        if access_endpoint is not None:
+            self._values["access_endpoint"] = access_endpoint
+        if tags is not None:
+            self._values["tags"] = tags
+        if web_app_customization is not None:
+            self._values["web_app_customization"] = web_app_customization
+        if web_app_units is not None:
+            self._values["web_app_units"] = web_app_units
+
+    @builtins.property
+    def identity_provider_details(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnWebApp.IdentityProviderDetailsProperty]:
+        '''You can provide a structure that contains the details for the identity provider to use with your web app.
+
+        For more details about this parameter, see `Configure your identity provider for Transfer Family web apps <https://docs.aws.amazon.com//transfer/latest/userguide/webapp-identity-center.html>`_ .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-identityproviderdetails
+        '''
+        result = self._values.get("identity_provider_details")
+        assert result is not None, "Required property 'identity_provider_details' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnWebApp.IdentityProviderDetailsProperty], result)
+
+    @builtins.property
+    def access_endpoint(self) -> typing.Optional[builtins.str]:
+        '''The ``AccessEndpoint`` is the URL that you provide to your users for them to interact with the Transfer Family web app.
+
+        You can specify a custom URL or use the default value.
+
+        Before you enter a custom URL for this parameter, follow the steps described in `Update your access endpoint with a custom URL <https://docs.aws.amazon.com//transfer/latest/userguide/webapp-customize.html>`_ .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-accessendpoint
+        '''
+        result = self._values.get("access_endpoint")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''Key-value pairs that can be used to group and search for web apps.
+
+        Tags are metadata attached to web apps for any purpose.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    @builtins.property
+    def web_app_customization(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebApp.WebAppCustomizationProperty]]:
+        '''A structure that contains the customization fields for the web app.
+
+        You can provide a title, logo, and icon to customize the appearance of your web app.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-webappcustomization
+        '''
+        result = self._values.get("web_app_customization")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebApp.WebAppCustomizationProperty]], result)
+
+    @builtins.property
+    def web_app_units(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebApp.WebAppUnitsProperty]]:
+        '''A union that contains the value for number of concurrent connections or the user sessions on your web app.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-webappunits
+        '''
+        result = self._values.get("web_app_units")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebApp.WebAppUnitsProperty]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnWebAppProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
 class CfnWorkflow(
     _CfnResource_9df397a6,
@@ -5879,6 +6594,8 @@ __all__ = [
     "CfnServerProps",
     "CfnUser",
     "CfnUserProps",
+    "CfnWebApp",
+    "CfnWebAppProps",
     "CfnWorkflow",
     "CfnWorkflowProps",
 ]
@@ -5895,6 +6612,8 @@ def _typecheckingstub__f95ec07e6c4ee624e4f9374f7db0e66b46af64fa8c86e2e41aa290c72
     partner_profile_id: builtins.str,
     server_id: builtins.str,
     description: typing.Optional[builtins.str] = None,
+    enforce_message_signing: typing.Optional[builtins.str] = None,
+    preserve_filename: typing.Optional[builtins.str] = None,
     status: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
@@ -5949,6 +6668,18 @@ def _typecheckingstub__53c57c4c1fcab40ff6fbf72d1b3a40161b6904921f0e56930629bce8d
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__21309644320e7387ed8b8bad8e7f1cae3841efd58a7ee09e263313c3ed573fe0(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a8e3dcc245fac0e15a9dfed2729f9d36d2a9bf94ddf00d1e9da1c45cfafec37b(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__78211aad1a50ad3834dcb7a48092349fa0f45f77997fe33f6e8cab4593032c48(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -5969,6 +6700,8 @@ def _typecheckingstub__c92e8cdff7d6f57ae5fd00ef4190544d79a76c01e88d32b21b88588ee
     partner_profile_id: builtins.str,
     server_id: builtins.str,
     description: typing.Optional[builtins.str] = None,
+    enforce_message_signing: typing.Optional[builtins.str] = None,
+    preserve_filename: typing.Optional[builtins.str] = None,
     status: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
@@ -6144,6 +6877,7 @@ def _typecheckingstub__328497a7bbb181a996e0747268f6105731221ad3f578e8a5ca68e405d
     mdn_signing_algorithm: typing.Optional[builtins.str] = None,
     message_subject: typing.Optional[builtins.str] = None,
     partner_profile_id: typing.Optional[builtins.str] = None,
+    preserve_content_type: typing.Optional[builtins.str] = None,
     signing_algorithm: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -6561,6 +7295,97 @@ def _typecheckingstub__ad0aa64ea17d55d9634df57b389b841e68b583b0c7f4818453a5cb087
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__7e725b505349ad94c74b92c89fcff0a41d3c479d533cc008fb193cc8b30c0f70(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    identity_provider_details: typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebApp.IdentityProviderDetailsProperty, typing.Dict[builtins.str, typing.Any]]],
+    access_endpoint: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    web_app_customization: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebApp.WebAppCustomizationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    web_app_units: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebApp.WebAppUnitsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__08aaa0faf06441ae9c1523d4ebf9fdfeccaf68e85c8fdc160642ec400dfa1faa(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__35cc75162657b9202a49840d4e0aa4c3d918e09af68ff376e538710cee1cb6cb(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a143104dc72055a6346499a1c42dc1e9a55e0a2fac758a5fdb73cc172530fe8b(
+    value: typing.Union[_IResolvable_da3f097b, CfnWebApp.IdentityProviderDetailsProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b49260e5a1b945671ba6797a35aa7d7bf93a577eac3292e024438feec4dc1976(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__30b2b42c451b5cf18bc021ed1ab027f439a56a366c31b4bec2874a1319670127(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__06cf7fb4d03ba1e31e57310f7a4e5b9ee65fd97449295a5fcca203aa59c8b3df(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebApp.WebAppCustomizationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__05c81ce4f64dae1408aa42ef29823b95b141813512df0fe6ef85a451fc930f0a(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnWebApp.WebAppUnitsProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b302a4e89f0273c2f4ecb9d1e9d455f99c8de91db6c0a9f929e41a9c0140a4a4(
+    *,
+    application_arn: typing.Optional[builtins.str] = None,
+    instance_arn: typing.Optional[builtins.str] = None,
+    role: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__e7ad602329ec3c900c7027cebb12a5f6509c389ad77660ed02d37f445d17a053(
+    *,
+    favicon_file: typing.Optional[builtins.str] = None,
+    logo_file: typing.Optional[builtins.str] = None,
+    title: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f60d6cda63c7834db5b6c31f65165e63d01404bdd2c426d37d6fba8f40916107(
+    *,
+    provisioned: jsii.Number,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__fbc7bdd479da7eca2bd2264125d2580878fa82f5b9dcf4a35fe4aca05da20d4d(
+    *,
+    identity_provider_details: typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebApp.IdentityProviderDetailsProperty, typing.Dict[builtins.str, typing.Any]]],
+    access_endpoint: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    web_app_customization: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebApp.WebAppCustomizationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    web_app_units: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWebApp.WebAppUnitsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__9a86ecf6f123d228f6edf61149bc2542f6ce02d9365ac8986ec7c6468379f655(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,