aws-cdk-lib 2.180.0__py3-none-any.whl → 2.181.0__py3-none-any.whl

aws_cdk/aws_iot/__init__.py

@@ -7544,8 +7544,8 @@ class CfnLogging(
 
        If you already set the log function of AWS IoT Core , you can't deploy the AWS Cloud Development Kit (AWS CDK) to change the logging settings. You can change the logging settings by either:
 
-       - Importing a role into your AWS CloudFormation stack, such as with the `infrastructure as code generator (IaC generator) <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC.html>`_ .
-       - `Deleting the existing role <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_manage_delete.html#roles-managingrole-deleting-console>`_ .
+       - Importing the existing logging resource into your AWS CloudFormation stack, such as with the `infrastructure as code generator (IaC generator) <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC.html>`_ .
+       - Calling ``aws iot set-v2-logging-options --disable-all-logs`` before creating a new CloudFormation stack. This command disables all AWS IoT logging. As a result, no AWS IoT logs will be delivered to Amazon CloudWatch until you re-enable logging.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-logging.html
     :cloudformationResource: AWS::IoT::Logging

aws_cdk/aws_mediapackagev2/__init__.py

@@ -105,7 +105,13 @@ class CfnChannel(
         
             # the properties below are optional
             description="description",
+            input_switch_configuration=mediapackagev2.CfnChannel.InputSwitchConfigurationProperty(
+                mqcs_input_switching=False
+            ),
             input_type="inputType",
+            output_header_configuration=mediapackagev2.CfnChannel.OutputHeaderConfigurationProperty(
+                publish_mqcs=False
+            ),
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -121,7 +127,9 @@ class CfnChannel(
         channel_group_name: builtins.str,
         channel_name: builtins.str,
         description: typing.Optional[builtins.str] = None,
+        input_switch_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnChannel.InputSwitchConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         input_type: typing.Optional[builtins.str] = None,
+        output_header_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnChannel.OutputHeaderConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
@@ -130,7 +138,9 @@ class CfnChannel(
         :param channel_group_name: The name of the channel group associated with the channel configuration.
         :param channel_name: The name of the channel.
         :param description: The description of the channel.
+        :param input_switch_configuration: 
         :param input_type: The input type will be an immutable field which will be used to define whether the channel will allow CMAF ingest or HLS ingest. If unprovided, it will default to HLS to preserve current behavior. The allowed values are: - ``HLS`` - The HLS streaming specification (which defines M3U8 manifests and TS segments). - ``CMAF`` - The DASH-IF CMAF Ingest specification (which defines CMAF segments with optional DASH manifests).
+        :param output_header_configuration: 
         :param tags: The tags associated with the channel.
         '''
         if __debug__:
@@ -141,7 +151,9 @@ class CfnChannel(
             channel_group_name=channel_group_name,
             channel_name=channel_name,
             description=description,
+            input_switch_configuration=input_switch_configuration,
             input_type=input_type,
+            output_header_configuration=output_header_configuration,
             tags=tags,
         )
 
@@ -271,6 +283,23 @@ class CfnChannel(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="inputSwitchConfiguration")
+    def input_switch_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnChannel.InputSwitchConfigurationProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnChannel.InputSwitchConfigurationProperty"]], jsii.get(self, "inputSwitchConfiguration"))
+
+    @input_switch_configuration.setter
+    def input_switch_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnChannel.InputSwitchConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3390ae8163479dfdbac5df53086ecff4210fbf97553d12d70faac0b628fe5c00)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "inputSwitchConfiguration", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="inputType")
     def input_type(self) -> typing.Optional[builtins.str]:
@@ -284,6 +313,23 @@ class CfnChannel(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "inputType", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="outputHeaderConfiguration")
+    def output_header_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnChannel.OutputHeaderConfigurationProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnChannel.OutputHeaderConfigurationProperty"]], jsii.get(self, "outputHeaderConfiguration"))
+
+    @output_header_configuration.setter
+    def output_header_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnChannel.OutputHeaderConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6cd874b506cfe4b7e50b6cfa6b36888413d69d5ce0a7f4649d690587ed70c417)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "outputHeaderConfiguration", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -367,6 +413,120 @@ class CfnChannel(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_mediapackagev2.CfnChannel.InputSwitchConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"mqcs_input_switching": "mqcsInputSwitching"},
+    )
+    class InputSwitchConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            mqcs_input_switching: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        ) -> None:
+            '''
+            :param mqcs_input_switching:  Default is true. This setting is valid only when InputType is CMAF.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackagev2-channel-inputswitchconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_mediapackagev2 as mediapackagev2
+                
+                input_switch_configuration_property = mediapackagev2.CfnChannel.InputSwitchConfigurationProperty(
+                    mqcs_input_switching=False
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__116c8177c767f1c1239016dd387671ce140ac29b5e59b8e19832080acf68bef5)
+                check_type(argname="argument mqcs_input_switching", value=mqcs_input_switching, expected_type=type_hints["mqcs_input_switching"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if mqcs_input_switching is not None:
+                self._values["mqcs_input_switching"] = mqcs_input_switching
+
+        @builtins.property
+        def mqcs_input_switching(
+            self,
+        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+            '''
+            Default is true. This setting is valid only when InputType is CMAF.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackagev2-channel-inputswitchconfiguration.html#cfn-mediapackagev2-channel-inputswitchconfiguration-mqcsinputswitching
+            '''
+            result = self._values.get("mqcs_input_switching")
+            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "InputSwitchConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_mediapackagev2.CfnChannel.OutputHeaderConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"publish_mqcs": "publishMqcs"},
+    )
+    class OutputHeaderConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            publish_mqcs: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        ) -> None:
+            '''
+            :param publish_mqcs:  This setting is valid only when InputType is CMAF.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackagev2-channel-outputheaderconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_mediapackagev2 as mediapackagev2
+                
+                output_header_configuration_property = mediapackagev2.CfnChannel.OutputHeaderConfigurationProperty(
+                    publish_mqcs=False
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__173b31e2a58ec560b57e45f11a2ad4c62727971f6e225559d90b8cf278b9f4f8)
+                check_type(argname="argument publish_mqcs", value=publish_mqcs, expected_type=type_hints["publish_mqcs"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if publish_mqcs is not None:
+                self._values["publish_mqcs"] = publish_mqcs
+
+        @builtins.property
+        def publish_mqcs(
+            self,
+        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+            '''
+            This setting is valid only when InputType is CMAF.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackagev2-channel-outputheaderconfiguration.html#cfn-mediapackagev2-channel-outputheaderconfiguration-publishmqcs
+            '''
+            result = self._values.get("publish_mqcs")
+            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "OutputHeaderConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
 
 @jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
 class CfnChannelGroup(
@@ -867,7 +1027,9 @@ class CfnChannelPolicyProps:
         "channel_group_name": "channelGroupName",
         "channel_name": "channelName",
         "description": "description",
+        "input_switch_configuration": "inputSwitchConfiguration",
         "input_type": "inputType",
+        "output_header_configuration": "outputHeaderConfiguration",
         "tags": "tags",
     },
 )
@@ -878,7 +1040,9 @@ class CfnChannelProps:
         channel_group_name: builtins.str,
         channel_name: builtins.str,
         description: typing.Optional[builtins.str] = None,
+        input_switch_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannel.InputSwitchConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         input_type: typing.Optional[builtins.str] = None,
+        output_header_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannel.OutputHeaderConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnChannel``.
@@ -886,7 +1050,9 @@ class CfnChannelProps:
         :param channel_group_name: The name of the channel group associated with the channel configuration.
         :param channel_name: The name of the channel.
         :param description: The description of the channel.
+        :param input_switch_configuration: 
         :param input_type: The input type will be an immutable field which will be used to define whether the channel will allow CMAF ingest or HLS ingest. If unprovided, it will default to HLS to preserve current behavior. The allowed values are: - ``HLS`` - The HLS streaming specification (which defines M3U8 manifests and TS segments). - ``CMAF`` - The DASH-IF CMAF Ingest specification (which defines CMAF segments with optional DASH manifests).
+        :param output_header_configuration: 
         :param tags: The tags associated with the channel.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-channel.html
@@ -904,7 +1070,13 @@ class CfnChannelProps:
             
                 # the properties below are optional
                 description="description",
+                input_switch_configuration=mediapackagev2.CfnChannel.InputSwitchConfigurationProperty(
+                    mqcs_input_switching=False
+                ),
                 input_type="inputType",
+                output_header_configuration=mediapackagev2.CfnChannel.OutputHeaderConfigurationProperty(
+                    publish_mqcs=False
+                ),
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -916,7 +1088,9 @@ class CfnChannelProps:
             check_type(argname="argument channel_group_name", value=channel_group_name, expected_type=type_hints["channel_group_name"])
             check_type(argname="argument channel_name", value=channel_name, expected_type=type_hints["channel_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument input_switch_configuration", value=input_switch_configuration, expected_type=type_hints["input_switch_configuration"])
             check_type(argname="argument input_type", value=input_type, expected_type=type_hints["input_type"])
+            check_type(argname="argument output_header_configuration", value=output_header_configuration, expected_type=type_hints["output_header_configuration"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "channel_group_name": channel_group_name,
@@ -924,8 +1098,12 @@ class CfnChannelProps:
         }
         if description is not None:
             self._values["description"] = description
+        if input_switch_configuration is not None:
+            self._values["input_switch_configuration"] = input_switch_configuration
         if input_type is not None:
             self._values["input_type"] = input_type
+        if output_header_configuration is not None:
+            self._values["output_header_configuration"] = output_header_configuration
         if tags is not None:
             self._values["tags"] = tags
 
@@ -958,6 +1136,16 @@ class CfnChannelProps:
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def input_switch_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnChannel.InputSwitchConfigurationProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-channel.html#cfn-mediapackagev2-channel-inputswitchconfiguration
+        '''
+        result = self._values.get("input_switch_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnChannel.InputSwitchConfigurationProperty]], result)
+
     @builtins.property
     def input_type(self) -> typing.Optional[builtins.str]:
         '''The input type will be an immutable field which will be used to define whether the channel will allow CMAF ingest or HLS ingest.
@@ -974,6 +1162,16 @@ class CfnChannelProps:
         result = self._values.get("input_type")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def output_header_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnChannel.OutputHeaderConfigurationProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-channel.html#cfn-mediapackagev2-channel-outputheaderconfiguration
+        '''
+        result = self._values.get("output_header_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnChannel.OutputHeaderConfigurationProperty]], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''The tags associated with the channel.
@@ -3853,7 +4051,9 @@ def _typecheckingstub__f5f12d43fb05232f03795c27e5dde1f408f5762e93edacb27e01efb9e
     channel_group_name: builtins.str,
     channel_name: builtins.str,
     description: typing.Optional[builtins.str] = None,
+    input_switch_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannel.InputSwitchConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     input_type: typing.Optional[builtins.str] = None,
+    output_header_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannel.OutputHeaderConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -3889,12 +4089,24 @@ def _typecheckingstub__ee07183524d44b124938ad354f47b29384e1ea3a14ba4e7fa739d6847
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__3390ae8163479dfdbac5df53086ecff4210fbf97553d12d70faac0b628fe5c00(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnChannel.InputSwitchConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__1fd45bf182a4bcd922fc7964817a4166c9d667e78eb548b915896743cf024664(
     value: typing.Optional[builtins.str],
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__6cd874b506cfe4b7e50b6cfa6b36888413d69d5ce0a7f4649d690587ed70c417(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnChannel.OutputHeaderConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__61a8d14ccc4954881d5a995d8d9c088f4870a4a3a28d0b44314514a2fbb02a01(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
@@ -3909,6 +4121,20 @@ def _typecheckingstub__52a72049adc4af63f65ccfb6f3c098cecb2b442bbe00bad4a877f2099
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__116c8177c767f1c1239016dd387671ce140ac29b5e59b8e19832080acf68bef5(
+    *,
+    mqcs_input_switching: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__173b31e2a58ec560b57e45f11a2ad4c62727971f6e225559d90b8cf278b9f4f8(
+    *,
+    publish_mqcs: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__0d830ced0539d40633bba571496a990f327b96c8fb475a589dba800d21ebab93(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -4014,7 +4240,9 @@ def _typecheckingstub__cb84231dfbf08cdefe6ca207d49155a084aa492947c635c5e9ba404f1
     channel_group_name: builtins.str,
     channel_name: builtins.str,
     description: typing.Optional[builtins.str] = None,
+    input_switch_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannel.InputSwitchConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     input_type: typing.Optional[builtins.str] = None,
+    output_header_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannel.OutputHeaderConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""

aws_cdk/aws_networkfirewall/__init__.py

@@ -4464,7 +4464,7 @@ class CfnRuleGroup(
 
             :param rules_source_list: Stateful inspection criteria for a domain list rule group.
             :param rules_string: Stateful inspection criteria, provided in Suricata compatible rules. Suricata is an open-source threat detection framework that includes a standard rule-based language for network traffic inspection. These rules contain the inspection criteria and the action to take for traffic that matches the criteria, so this type of rule group doesn't have a separate action setting. .. epigraph:: You can't use the ``priority`` keyword if the ``RuleOrder`` option in ``StatefulRuleOptions`` is set to ``STRICT_ORDER`` .
-            :param stateful_rules: An array of individual stateful rules inspection criteria to be used together in a stateful rule group. Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options. For information about the Suricata ``Rules`` format, see `Rules Format <https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html>`_ .
+            :param stateful_rules: An array of individual stateful rules inspection criteria to be used together in a stateful rule group. Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options. For information about the Suricata ``Rules`` format, see `Rules Format <https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-7.0.3/rules/intro.html>`_ .
             :param stateless_rules_and_custom_actions: Stateless inspection criteria to be used in a stateless rule group.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-rulessource.html
@@ -4594,7 +4594,7 @@ class CfnRuleGroup(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.StatefulRuleProperty"]]]]:
             '''An array of individual stateful rules inspection criteria to be used together in a stateful rule group.
 
-            Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options. For information about the Suricata ``Rules`` format, see `Rules Format <https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html>`_ .
+            Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options. For information about the Suricata ``Rules`` format, see `Rules Format <https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-7.0.3/rules/intro.html>`_ .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-rulessource.html#cfn-networkfirewall-rulegroup-rulessource-statefulrules
             '''
@@ -4697,7 +4697,7 @@ class CfnRuleGroup(
         ) -> None:
             '''A single Suricata rules specification, for use in a stateful rule group.
 
-            Use this option to specify a simple Suricata rule with protocol, source and destination, ports, direction, and rule options. For information about the Suricata ``Rules`` format, see `Rules Format <https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html>`_ .
+            Use this option to specify a simple Suricata rule with protocol, source and destination, ports, direction, and rule options. For information about the Suricata ``Rules`` format, see `Rules Format <https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-7.0.3/rules/intro.html>`_ .
 
             :param action: Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow. The actions for a stateful rule are defined as follows: - *PASS* - Permits the packets to go to the intended destination. - *DROP* - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the ``Firewall`` ``LoggingConfiguration`` . - *REJECT* - Drops traffic that matches the conditions of the stateful rule and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a ``RST`` bit contained in the TCP header flags. ``REJECT`` is available only for TCP traffic. - *ALERT* - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the ``Firewall`` ``LoggingConfiguration`` . You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with ``ALERT`` action, verify in the logs that the rule is filtering as you want, then change the action to ``DROP`` . - *REJECT* - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a ``RST`` bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the ``Firewall`` ``LoggingConfiguration`` . ``REJECT`` isn't currently available for use with IMAP and FTP protocols.
             :param header: The stateful inspection criteria for this rule, used to inspect traffic flows.

aws_cdk/aws_opensearchserverless/__init__.py

@@ -1005,7 +1005,7 @@ class CfnSecurityConfig(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param description: The description of the security configuration.
-        :param iam_identity_center_options: Describes IAM Identity Center options for an OpenSearch Serverless security configuration in the form of a key-value map.
+        :param iam_identity_center_options: Describes IAM Identity Center options in the form of a key-value map.
         :param name: The name of the security configuration.
         :param saml_options: SAML options for the security configuration in the form of a key-value map.
         :param type: The type of security configuration. Currently the only option is ``saml`` .
@@ -1115,7 +1115,7 @@ class CfnSecurityConfig(
     def iam_identity_center_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty"]]:
-        '''Describes IAM Identity Center options for an OpenSearch Serverless security configuration in the form of a key-value map.'''
+        '''Describes IAM Identity Center options in the form of a key-value map.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty"]], jsii.get(self, "iamIdentityCenterOptions"))
 
     @iam_identity_center_options.setter
@@ -1201,8 +1201,8 @@ class CfnSecurityConfig(
             :param application_arn: The ARN of the IAM Identity Center application used to integrate with OpenSearch Serverless.
             :param application_description: The description of the IAM Identity Center application used to integrate with OpenSearch Serverless.
             :param application_name: The name of the IAM Identity Center application used to integrate with OpenSearch Serverless.
-            :param group_attribute: Group attribute for this IAM Identity Center integration.
-            :param user_attribute: User attribute for this IAM Identity Center integration.
+            :param group_attribute: The group attribute for this IAM Identity Center integration. Defaults to ``GroupId`` .
+            :param user_attribute: The user attribute for this IAM Identity Center integration. Defaults to ``UserId``
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-securityconfig-iamidentitycenterconfigoptions.html
             :exampleMetadata: fixture=_generated
@@ -1285,7 +1285,9 @@ class CfnSecurityConfig(
 
         @builtins.property
         def group_attribute(self) -> typing.Optional[builtins.str]:
-            '''Group attribute for this IAM Identity Center integration.
+            '''The group attribute for this IAM Identity Center integration.
+
+            Defaults to ``GroupId`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-securityconfig-iamidentitycenterconfigoptions.html#cfn-opensearchserverless-securityconfig-iamidentitycenterconfigoptions-groupattribute
             '''
@@ -1294,7 +1296,9 @@ class CfnSecurityConfig(
 
         @builtins.property
         def user_attribute(self) -> typing.Optional[builtins.str]:
-            '''User attribute for this IAM Identity Center integration.
+            '''The user attribute for this IAM Identity Center integration.
+
+            Defaults to ``UserId``
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-securityconfig-iamidentitycenterconfigoptions.html#cfn-opensearchserverless-securityconfig-iamidentitycenterconfigoptions-userattribute
             '''
@@ -1463,7 +1467,7 @@ class CfnSecurityConfigProps:
         '''Properties for defining a ``CfnSecurityConfig``.
 
         :param description: The description of the security configuration.
-        :param iam_identity_center_options: Describes IAM Identity Center options for an OpenSearch Serverless security configuration in the form of a key-value map.
+        :param iam_identity_center_options: Describes IAM Identity Center options in the form of a key-value map.
         :param name: The name of the security configuration.
         :param saml_options: SAML options for the security configuration in the form of a key-value map.
         :param type: The type of security configuration. Currently the only option is ``saml`` .
@@ -1534,7 +1538,7 @@ class CfnSecurityConfigProps:
     def iam_identity_center_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty]]:
-        '''Describes IAM Identity Center options for an OpenSearch Serverless security configuration in the form of a key-value map.
+        '''Describes IAM Identity Center options in the form of a key-value map.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-securityconfig.html#cfn-opensearchserverless-securityconfig-iamidentitycenteroptions
         '''

aws_cdk/aws_organizations/__init__.py

@@ -1044,7 +1044,7 @@ class CfnPolicy(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param content: The policy text content. You can specify the policy content as a JSON object or a JSON string. .. epigraph:: When you specify the policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the policy content as a JSON object instead. The text that you supply must adhere to the rules of the policy type you specify in the ``Type`` parameter. The following AWS Organizations quotas are enforced for the maximum size of a policy document: - Service control policies: 5,120 characters - Resource control policies: 5,120 characters - Declarative policies: 10,000 characters - Backup policies: 10,000 characters - Tag policies: 10,000 characters - Chatbot policies: 10,000 characters - AI services opt-out policies: 2,500 characters For more information about Organizations service quotas, see `Quotas for AWS Organizations <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html>`_ in the *AWS Organizations User Guide* .
+        :param content: The policy text content. You can specify the policy content as a JSON object or a JSON string. .. epigraph:: When you specify the policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the policy content as a JSON object instead. The text that you supply must adhere to the rules of the policy type you specify in the ``Type`` parameter. The following AWS Organizations quotas are enforced for the maximum size of a policy document: - Service control policies: 5,120 characters - Resource control policies: 5,120 characters - Declarative policies: 10,000 characters - Backup policies: 10,000 characters - Tag policies: 10,000 characters - Chat applications policies: 10,000 characters - AI services opt-out policies: 2,500 characters For more information about Organizations service quotas, see `Quotas for AWS Organizations <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html>`_ in the *AWS Organizations User Guide* .
         :param name: Name of the policy. The `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ that is used to validate this parameter is a string of any of the characters in the ASCII character range.
         :param type: The type of policy to create.
         :param description: Human readable description of the policy.
@@ -1247,7 +1247,7 @@ class CfnPolicyProps:
     ) -> None:
         '''Properties for defining a ``CfnPolicy``.
 
-        :param content: The policy text content. You can specify the policy content as a JSON object or a JSON string. .. epigraph:: When you specify the policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the policy content as a JSON object instead. The text that you supply must adhere to the rules of the policy type you specify in the ``Type`` parameter. The following AWS Organizations quotas are enforced for the maximum size of a policy document: - Service control policies: 5,120 characters - Resource control policies: 5,120 characters - Declarative policies: 10,000 characters - Backup policies: 10,000 characters - Tag policies: 10,000 characters - Chatbot policies: 10,000 characters - AI services opt-out policies: 2,500 characters For more information about Organizations service quotas, see `Quotas for AWS Organizations <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html>`_ in the *AWS Organizations User Guide* .
+        :param content: The policy text content. You can specify the policy content as a JSON object or a JSON string. .. epigraph:: When you specify the policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the policy content as a JSON object instead. The text that you supply must adhere to the rules of the policy type you specify in the ``Type`` parameter. The following AWS Organizations quotas are enforced for the maximum size of a policy document: - Service control policies: 5,120 characters - Resource control policies: 5,120 characters - Declarative policies: 10,000 characters - Backup policies: 10,000 characters - Tag policies: 10,000 characters - Chat applications policies: 10,000 characters - AI services opt-out policies: 2,500 characters For more information about Organizations service quotas, see `Quotas for AWS Organizations <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html>`_ in the *AWS Organizations User Guide* .
         :param name: Name of the policy. The `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ that is used to validate this parameter is a string of any of the characters in the ASCII character range.
         :param type: The type of policy to create.
         :param description: Human readable description of the policy.
@@ -1314,7 +1314,7 @@ class CfnPolicyProps:
         - Declarative policies: 10,000 characters
         - Backup policies: 10,000 characters
         - Tag policies: 10,000 characters
-        - Chatbot policies: 10,000 characters
+        - Chat applications policies: 10,000 characters
         - AI services opt-out policies: 2,500 characters
 
         For more information about Organizations service quotas, see `Quotas for AWS Organizations <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html>`_ in the *AWS Organizations User Guide* .

aws_cdk/aws_pcaconnectorscep/__init__.py

@@ -86,7 +86,7 @@ class CfnChallenge(
 ):
     '''For general-purpose connectors.
 
-    Creates a *challenge password* for the specified connector. The SCEP protocol uses a challenge password to authenticate a request before issuing a certificate from a certificate authority (CA). Your SCEP clients include the challenge password as part of their certificate request to Connector for SCEP. To retrieve the connector Amazon Resource Names (ARNs) for the connectors in your account, call `ListConnectors <https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_ListConnectors.html>`_ .
+    Creates a *challenge password* for the specified connector. The SCEP protocol uses a challenge password to authenticate a request before issuing a certificate from a certificate authority (CA). Your SCEP clients include the challenge password as part of their certificate request to Connector for SCEP. To retrieve the connector Amazon Resource Names (ARNs) for the connectors in your account, call `ListConnectors <https://docs.aws.amazon.com/pca-connector-scep/latest/APIReference/API_ListConnectors.html>`_ .
 
     To create additional challenge passwords for the connector, call ``CreateChallenge`` again. We recommend frequently rotating your challenge passwords.