aws-cdk-lib 2.181.1__py3-none-any.whl → 2.182.0__py3-none-any.whl

aws_cdk/aws_eks/__init__.py

@@ -2107,6 +2107,7 @@ from ..aws_autoscaling import (
     CommonAutoScalingGroupProps as _CommonAutoScalingGroupProps_808bbf2d,
     GroupMetrics as _GroupMetrics_7cdf729b,
     HealthCheck as _HealthCheck_03a4bd5a,
+    HealthChecks as _HealthChecks_b8757873,
     Monitoring as _Monitoring_50020f91,
     NotificationConfiguration as _NotificationConfiguration_d5911670,
     Signals as _Signals_69fbeb6e,
@@ -3509,6 +3510,7 @@ class AuthenticationMode(enum.Enum):
         "desired_capacity": "desiredCapacity",
         "group_metrics": "groupMetrics",
         "health_check": "healthCheck",
+        "health_checks": "healthChecks",
         "ignore_unmodified_size_properties": "ignoreUnmodifiedSizeProperties",
         "instance_monitoring": "instanceMonitoring",
         "key_name": "keyName",
@@ -3548,6 +3550,7 @@ class AutoScalingGroupCapacityOptions(_CommonAutoScalingGroupProps_808bbf2d):
         desired_capacity: typing.Optional[jsii.Number] = None,
         group_metrics: typing.Optional[typing.Sequence[_GroupMetrics_7cdf729b]] = None,
         health_check: typing.Optional[_HealthCheck_03a4bd5a] = None,
+        health_checks: typing.Optional[_HealthChecks_b8757873] = None,
         ignore_unmodified_size_properties: typing.Optional[builtins.bool] = None,
         instance_monitoring: typing.Optional[_Monitoring_50020f91] = None,
         key_name: typing.Optional[builtins.str] = None,
@@ -3583,7 +3586,8 @@ class AutoScalingGroupCapacityOptions(_CommonAutoScalingGroupProps_808bbf2d):
         :param default_instance_warmup: The amount of time, in seconds, until a newly launched instance can contribute to the Amazon CloudWatch metrics. This delay lets an instance finish initializing before Amazon EC2 Auto Scaling aggregates instance metrics, resulting in more reliable usage data. Set this value equal to the amount of time that it takes for resource consumption to become stable after an instance reaches the InService state. To optimize the performance of scaling policies that scale continuously, such as target tracking and step scaling policies, we strongly recommend that you enable the default instance warmup, even if its value is set to 0 seconds Default instance warmup will not be added if no value is specified Default: None
         :param desired_capacity: Initial amount of instances in the fleet. If this is set to a number, every deployment will reset the amount of instances to this number. It is recommended to leave this value blank. Default: minCapacity, and leave unchanged during deployment
         :param group_metrics: Enable monitoring for group metrics, these metrics describe the group rather than any of its instances. To report all group metrics use ``GroupMetrics.all()`` Group metrics are reported in a granularity of 1 minute at no additional charge. Default: - no group metrics will be reported
-        :param health_check: Configuration for health checks. Default: - HealthCheck.ec2 with no grace period
+        :param health_check: (deprecated) Configuration for health checks. Default: - HealthCheck.ec2 with no grace period
+        :param health_checks: Configuration for EC2 or additional health checks. Even when using ``HealthChecks.withAdditionalChecks()``, the EC2 type is implicitly included. Default: - EC2 type with no grace period
         :param ignore_unmodified_size_properties: If the ASG has scheduled actions, don't reset unchanged group sizes. Only used if the ASG has scheduled actions (which may scale your ASG up or down regardless of cdk deployments). If true, the size of the group will only be reset if it has been changed in the CDK app. If false, the sizes will always be changed back to what they were in the CDK app on deployment. Default: true
         :param instance_monitoring: Controls whether instances in this group are launched with detailed or basic monitoring. When detailed monitoring is enabled, Amazon CloudWatch generates metrics every minute and your account is charged a fee. When you disable detailed monitoring, CloudWatch generates metrics every 5 minutes. ``launchTemplate`` and ``mixedInstancesPolicy`` must not be specified when this property is specified Default: - Monitoring.DETAILED
         :param key_name: (deprecated) Name of SSH keypair to grant access to instances. ``launchTemplate`` and ``mixedInstancesPolicy`` must not be specified when this property is specified You can either specify ``keyPair`` or ``keyName``, not both. Default: - No SSH access will be possible.
@@ -3636,6 +3640,7 @@ class AutoScalingGroupCapacityOptions(_CommonAutoScalingGroupProps_808bbf2d):
             check_type(argname="argument desired_capacity", value=desired_capacity, expected_type=type_hints["desired_capacity"])
             check_type(argname="argument group_metrics", value=group_metrics, expected_type=type_hints["group_metrics"])
             check_type(argname="argument health_check", value=health_check, expected_type=type_hints["health_check"])
+            check_type(argname="argument health_checks", value=health_checks, expected_type=type_hints["health_checks"])
             check_type(argname="argument ignore_unmodified_size_properties", value=ignore_unmodified_size_properties, expected_type=type_hints["ignore_unmodified_size_properties"])
             check_type(argname="argument instance_monitoring", value=instance_monitoring, expected_type=type_hints["instance_monitoring"])
             check_type(argname="argument key_name", value=key_name, expected_type=type_hints["key_name"])
@@ -3683,6 +3688,8 @@ class AutoScalingGroupCapacityOptions(_CommonAutoScalingGroupProps_808bbf2d):
             self._values["group_metrics"] = group_metrics
         if health_check is not None:
             self._values["health_check"] = health_check
+        if health_checks is not None:
+            self._values["health_checks"] = health_checks
         if ignore_unmodified_size_properties is not None:
             self._values["ignore_unmodified_size_properties"] = ignore_unmodified_size_properties
         if instance_monitoring is not None:
@@ -3858,13 +3865,30 @@ class AutoScalingGroupCapacityOptions(_CommonAutoScalingGroupProps_808bbf2d):
 
     @builtins.property
     def health_check(self) -> typing.Optional[_HealthCheck_03a4bd5a]:
-        '''Configuration for health checks.
+        '''(deprecated) Configuration for health checks.
 
         :default: - HealthCheck.ec2 with no grace period
+
+        :deprecated: Use ``healthChecks`` instead
+
+        :stability: deprecated
         '''
         result = self._values.get("health_check")
         return typing.cast(typing.Optional[_HealthCheck_03a4bd5a], result)
 
+    @builtins.property
+    def health_checks(self) -> typing.Optional[_HealthChecks_b8757873]:
+        '''Configuration for EC2 or additional health checks.
+
+        Even when using ``HealthChecks.withAdditionalChecks()``, the EC2 type is implicitly included.
+
+        :default: - EC2 type with no grace period
+
+        :see: https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-health-checks.html
+        '''
+        result = self._values.get("health_checks")
+        return typing.cast(typing.Optional[_HealthChecks_b8757873], result)
+
     @builtins.property
     def ignore_unmodified_size_properties(self) -> typing.Optional[builtins.bool]:
         '''If the ASG has scheduled actions, don't reset unchanged group sizes.
@@ -18478,6 +18502,7 @@ class Cluster(
         desired_capacity: typing.Optional[jsii.Number] = None,
         group_metrics: typing.Optional[typing.Sequence[_GroupMetrics_7cdf729b]] = None,
         health_check: typing.Optional[_HealthCheck_03a4bd5a] = None,
+        health_checks: typing.Optional[_HealthChecks_b8757873] = None,
         ignore_unmodified_size_properties: typing.Optional[builtins.bool] = None,
         instance_monitoring: typing.Optional[_Monitoring_50020f91] = None,
         key_name: typing.Optional[builtins.str] = None,
@@ -18526,7 +18551,8 @@ class Cluster(
         :param default_instance_warmup: The amount of time, in seconds, until a newly launched instance can contribute to the Amazon CloudWatch metrics. This delay lets an instance finish initializing before Amazon EC2 Auto Scaling aggregates instance metrics, resulting in more reliable usage data. Set this value equal to the amount of time that it takes for resource consumption to become stable after an instance reaches the InService state. To optimize the performance of scaling policies that scale continuously, such as target tracking and step scaling policies, we strongly recommend that you enable the default instance warmup, even if its value is set to 0 seconds Default instance warmup will not be added if no value is specified Default: None
         :param desired_capacity: Initial amount of instances in the fleet. If this is set to a number, every deployment will reset the amount of instances to this number. It is recommended to leave this value blank. Default: minCapacity, and leave unchanged during deployment
         :param group_metrics: Enable monitoring for group metrics, these metrics describe the group rather than any of its instances. To report all group metrics use ``GroupMetrics.all()`` Group metrics are reported in a granularity of 1 minute at no additional charge. Default: - no group metrics will be reported
-        :param health_check: Configuration for health checks. Default: - HealthCheck.ec2 with no grace period
+        :param health_check: (deprecated) Configuration for health checks. Default: - HealthCheck.ec2 with no grace period
+        :param health_checks: Configuration for EC2 or additional health checks. Even when using ``HealthChecks.withAdditionalChecks()``, the EC2 type is implicitly included. Default: - EC2 type with no grace period
         :param ignore_unmodified_size_properties: If the ASG has scheduled actions, don't reset unchanged group sizes. Only used if the ASG has scheduled actions (which may scale your ASG up or down regardless of cdk deployments). If true, the size of the group will only be reset if it has been changed in the CDK app. If false, the sizes will always be changed back to what they were in the CDK app on deployment. Default: true
         :param instance_monitoring: Controls whether instances in this group are launched with detailed or basic monitoring. When detailed monitoring is enabled, Amazon CloudWatch generates metrics every minute and your account is charged a fee. When you disable detailed monitoring, CloudWatch generates metrics every 5 minutes. ``launchTemplate`` and ``mixedInstancesPolicy`` must not be specified when this property is specified Default: - Monitoring.DETAILED
         :param key_name: (deprecated) Name of SSH keypair to grant access to instances. ``launchTemplate`` and ``mixedInstancesPolicy`` must not be specified when this property is specified You can either specify ``keyPair`` or ``keyName``, not both. Default: - No SSH access will be possible.
@@ -18565,6 +18591,7 @@ class Cluster(
             desired_capacity=desired_capacity,
             group_metrics=group_metrics,
             health_check=health_check,
+            health_checks=health_checks,
             ignore_unmodified_size_properties=ignore_unmodified_size_properties,
             instance_monitoring=instance_monitoring,
             key_name=key_name,
@@ -21542,6 +21569,7 @@ def _typecheckingstub__9ac94eb5cd9569dcf4122cf20026c6f104b737f68ecd3395b237320bd
     desired_capacity: typing.Optional[jsii.Number] = None,
     group_metrics: typing.Optional[typing.Sequence[_GroupMetrics_7cdf729b]] = None,
     health_check: typing.Optional[_HealthCheck_03a4bd5a] = None,
+    health_checks: typing.Optional[_HealthChecks_b8757873] = None,
     ignore_unmodified_size_properties: typing.Optional[builtins.bool] = None,
     instance_monitoring: typing.Optional[_Monitoring_50020f91] = None,
     key_name: typing.Optional[builtins.str] = None,
@@ -23343,6 +23371,7 @@ def _typecheckingstub__e9e81d821b1c1d14225d1c9cc695af8e71b96a7489dcd36bd237c9363
     desired_capacity: typing.Optional[jsii.Number] = None,
     group_metrics: typing.Optional[typing.Sequence[_GroupMetrics_7cdf729b]] = None,
     health_check: typing.Optional[_HealthCheck_03a4bd5a] = None,
+    health_checks: typing.Optional[_HealthChecks_b8757873] = None,
     ignore_unmodified_size_properties: typing.Optional[builtins.bool] = None,
     instance_monitoring: typing.Optional[_Monitoring_50020f91] = None,
     key_name: typing.Optional[builtins.str] = None,

aws_cdk/aws_fsx/__init__.py

@@ -8258,6 +8258,8 @@ class StorageType(enum.Enum):
     '''Solid State Drive storage.'''
     HDD = "HDD"
     '''Hard Disk Drive storage.'''
+    INTELLIGENT_TIERING = "INTELLIGENT_TIERING"
+    '''Intelligent Tiering storage.'''
 
 
 @jsii.enum(jsii_type="aws-cdk-lib.aws_fsx.Weekday")

aws_cdk/aws_guardduty/__init__.py

@@ -2664,7 +2664,7 @@ class CfnMalwareProtectionPlan(
             '''Information about the status code and status details associated with the status of the Malware Protection plan.
 
             :param code: The status code of the Malware Protection plan. For more information, see `Malware Protection plan resource status <https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection-s3-bucket-status-gdu.html>`_ in the *GuardDuty User Guide* .
-            :param message: Issue message that specifies the reason. For information about potential troubleshooting steps, see `Troubleshooting Malware Protection for S3 status issues <https://docs.aws.amazon.com/guardduty/latest/ug/troubleshoot-s3-malware-protection-status-errors.html>`_ in the *GuardDuty User Guide* .
+            :param message: Issue message that specifies the reason. For information about potential troubleshooting steps, see `Troubleshooting Malware Protection for S3 status issues <https://docs.aws.amazon.com/guardduty/latest/ug/troubleshoot-s3-malware-protection-status-errors.html>`_ in the *Amazon GuardDuty User Guide* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfnstatusreasons.html
             :exampleMetadata: fixture=_generated
@@ -2705,7 +2705,7 @@ class CfnMalwareProtectionPlan(
         def message(self) -> typing.Optional[builtins.str]:
             '''Issue message that specifies the reason.
 
-            For information about potential troubleshooting steps, see `Troubleshooting Malware Protection for S3 status issues <https://docs.aws.amazon.com/guardduty/latest/ug/troubleshoot-s3-malware-protection-status-errors.html>`_ in the *GuardDuty User Guide* .
+            For information about potential troubleshooting steps, see `Troubleshooting Malware Protection for S3 status issues <https://docs.aws.amazon.com/guardduty/latest/ug/troubleshoot-s3-malware-protection-status-errors.html>`_ in the *Amazon GuardDuty User Guide* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfnstatusreasons.html#cfn-guardduty-malwareprotectionplan-cfnstatusreasons-message
             '''
@@ -3618,7 +3618,11 @@ class CfnPublishingDestination(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_guardduty.CfnPublishingDestination",
 ):
-    '''Resource Type definition for AWS::GuardDuty::PublishingDestination.
+    '''Creates a publishing destination where you can export your GuardDuty findings.
+
+    Before you start exporting the findings, the destination resource must exist.
+
+    For more information about considerations and permissions, see `Exporting GuardDuty findings to Amazon S3 buckets <https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_exportfindings.html>`_ in the *Amazon GuardDuty User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-publishingdestination.html
     :cloudformationResource: AWS::GuardDuty::PublishingDestination
@@ -3659,10 +3663,10 @@ class CfnPublishingDestination(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param destination_properties: 
-        :param destination_type: The type of resource for the publishing destination. Currently only Amazon S3 buckets are supported.
-        :param detector_id: The ID of the GuardDuty detector associated with the publishing destination.
-        :param tags: 
+        :param destination_properties: Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings.
+        :param destination_type: The type of publishing destination. GuardDuty supports Amazon S3 buckets as a publishing destination.
+        :param detector_id: The ID of the GuardDuty detector where the publishing destination exists.
+        :param tags: Describes a tag.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7582a0d304acc160bc9a98d9a732b80f3278afa4bf6e6727d1f126985b25ef2e)
@@ -3750,6 +3754,7 @@ class CfnPublishingDestination(
     def destination_properties(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, "CfnPublishingDestination.CFNDestinationPropertiesProperty"]:
+        '''Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings.'''
         return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnPublishingDestination.CFNDestinationPropertiesProperty"], jsii.get(self, "destinationProperties"))
 
     @destination_properties.setter
@@ -3765,7 +3770,7 @@ class CfnPublishingDestination(
     @builtins.property
     @jsii.member(jsii_name="destinationType")
     def destination_type(self) -> builtins.str:
-        '''The type of resource for the publishing destination.'''
+        '''The type of publishing destination.'''
         return typing.cast(builtins.str, jsii.get(self, "destinationType"))
 
     @destination_type.setter
@@ -3778,7 +3783,7 @@ class CfnPublishingDestination(
     @builtins.property
     @jsii.member(jsii_name="detectorId")
     def detector_id(self) -> builtins.str:
-        '''The ID of the GuardDuty detector associated with the publishing destination.'''
+        '''The ID of the GuardDuty detector where the publishing destination exists.'''
         return typing.cast(builtins.str, jsii.get(self, "detectorId"))
 
     @detector_id.setter
@@ -3793,6 +3798,7 @@ class CfnPublishingDestination(
     def tags(
         self,
     ) -> typing.Optional[typing.List["CfnPublishingDestination.TagItemProperty"]]:
+        '''Describes a tag.'''
         return typing.cast(typing.Optional[typing.List["CfnPublishingDestination.TagItemProperty"]], jsii.get(self, "tags"))
 
     @tags.setter
@@ -3817,8 +3823,9 @@ class CfnPublishingDestination(
             destination_arn: typing.Optional[builtins.str] = None,
             kms_key_arn: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''
-            :param destination_arn: The ARN of the resource to publish to.
+            '''Contains the Amazon Resource Name (ARN) of the resource that receives the published findings, such as an S3 bucket, and the ARN of the KMS key that is used to encrypt these published findings.
+
+            :param destination_arn: The ARN of the resource where the findings are published.
             :param kms_key_arn: The ARN of the KMS key to use for encryption.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-publishingdestination-cfndestinationproperties.html
@@ -3847,7 +3854,7 @@ class CfnPublishingDestination(
 
         @builtins.property
         def destination_arn(self) -> typing.Optional[builtins.str]:
-            '''The ARN of the resource to publish to.
+            '''The ARN of the resource where the findings are published.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-publishingdestination-cfndestinationproperties.html#cfn-guardduty-publishingdestination-cfndestinationproperties-destinationarn
             '''
@@ -3881,9 +3888,10 @@ class CfnPublishingDestination(
     )
     class TagItemProperty:
         def __init__(self, *, key: builtins.str, value: builtins.str) -> None:
-            '''
-            :param key: 
-            :param value: 
+            '''Describes a tag.
+
+            :param key: The tag key.
+            :param value: The tag value.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-publishingdestination-tagitem.html
             :exampleMetadata: fixture=_generated
@@ -3910,7 +3918,8 @@ class CfnPublishingDestination(
 
         @builtins.property
         def key(self) -> builtins.str:
-            '''
+            '''The tag key.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-publishingdestination-tagitem.html#cfn-guardduty-publishingdestination-tagitem-key
             '''
             result = self._values.get("key")
@@ -3919,7 +3928,8 @@ class CfnPublishingDestination(
 
         @builtins.property
         def value(self) -> builtins.str:
-            '''
+            '''The tag value.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-publishingdestination-tagitem.html#cfn-guardduty-publishingdestination-tagitem-value
             '''
             result = self._values.get("value")
@@ -3959,10 +3969,10 @@ class CfnPublishingDestinationProps:
     ) -> None:
         '''Properties for defining a ``CfnPublishingDestination``.
 
-        :param destination_properties: 
-        :param destination_type: The type of resource for the publishing destination. Currently only Amazon S3 buckets are supported.
-        :param detector_id: The ID of the GuardDuty detector associated with the publishing destination.
-        :param tags: 
+        :param destination_properties: Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings.
+        :param destination_type: The type of publishing destination. GuardDuty supports Amazon S3 buckets as a publishing destination.
+        :param detector_id: The ID of the GuardDuty detector where the publishing destination exists.
+        :param tags: Describes a tag.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-publishingdestination.html
         :exampleMetadata: fixture=_generated
@@ -4006,7 +4016,8 @@ class CfnPublishingDestinationProps:
     def destination_properties(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, CfnPublishingDestination.CFNDestinationPropertiesProperty]:
-        '''
+        '''Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-publishingdestination.html#cfn-guardduty-publishingdestination-destinationproperties
         '''
         result = self._values.get("destination_properties")
@@ -4015,9 +4026,9 @@ class CfnPublishingDestinationProps:
 
     @builtins.property
     def destination_type(self) -> builtins.str:
-        '''The type of resource for the publishing destination.
+        '''The type of publishing destination.
 
-        Currently only Amazon S3 buckets are supported.
+        GuardDuty supports Amazon S3 buckets as a publishing destination.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-publishingdestination.html#cfn-guardduty-publishingdestination-destinationtype
         '''
@@ -4027,7 +4038,7 @@ class CfnPublishingDestinationProps:
 
     @builtins.property
     def detector_id(self) -> builtins.str:
-        '''The ID of the GuardDuty detector associated with the publishing destination.
+        '''The ID of the GuardDuty detector where the publishing destination exists.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-publishingdestination.html#cfn-guardduty-publishingdestination-detectorid
         '''
@@ -4039,7 +4050,8 @@ class CfnPublishingDestinationProps:
     def tags(
         self,
     ) -> typing.Optional[typing.List[CfnPublishingDestination.TagItemProperty]]:
-        '''
+        '''Describes a tag.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-publishingdestination.html#cfn-guardduty-publishingdestination-tags
         '''
         result = self._values.get("tags")

aws_cdk/aws_iam/__init__.py

@@ -8156,7 +8156,7 @@ class IPrincipal(IGrantable, typing_extensions.Protocol):
     Notifications Service).
 
     A single logical Principal may also map to a set of physical principals.
-    For example, ``new OrganizationPrincipal('o-1234')`` represents all
+    For example, ``new OrganizationPrincipal('o-12345abcde')`` represents all
     identities that are part of the given AWS Organization.
     '''
 
@@ -8212,7 +8212,7 @@ class _IPrincipalProxy(
     Notifications Service).
 
     A single logical Principal may also map to a set of physical principals.
-    For example, ``new OrganizationPrincipal('o-1234')`` represents all
+    For example, ``new OrganizationPrincipal('o-12345abcde')`` represents all
     identities that are part of the given AWS Organization.
     '''
 
@@ -14262,6 +14262,9 @@ class OrganizationPrincipal(
 ):
     '''A principal that represents an AWS Organization.
 
+    Property organizationId must match regex pattern ^o-[a-z0-9]{10,32}$
+
+    :see: https://docs.aws.amazon.com/organizations/latest/APIReference/API_Organization.html
     :exampleMetadata: infused
 
     Example::

aws_cdk/aws_inspector/__init__.py

@@ -63,10 +63,129 @@ from .. import (
     CfnTag as _CfnTag_f6864754,
     IInspectable as _IInspectable_c2943556,
     IResolvable as _IResolvable_da3f097b,
+    IResource as _IResource_c80c4260,
+    Resource as _Resource_45bc6135,
+    ResourceProps as _ResourceProps_15a65b4e,
     TreeInspector as _TreeInspector_488e0dd5,
 )
 
 
+class AssessmentTemplate(
+    _Resource_45bc6135,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_inspector.AssessmentTemplate",
+):
+    '''An Amazon Inspector assessment template.
+
+    TODO: This class should implement IAssessmentTemplate and "construct-ctor-props-type:aws-cdk-lib.aws_inspector.AssessmentTemplate" should be
+    removed from ``awslint.json`` when implementing the L2 construct
+
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_inspector as inspector
+        
+        assessment_template = inspector.AssessmentTemplate(self, "MyAssessmentTemplate",
+            account="account",
+            environment_from_arn="environmentFromArn",
+            physical_name="physicalName",
+            region="region"
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        account: typing.Optional[builtins.str] = None,
+        environment_from_arn: typing.Optional[builtins.str] = None,
+        physical_name: typing.Optional[builtins.str] = None,
+        region: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param scope: -
+        :param id: -
+        :param account: The AWS account ID this resource belongs to. Default: - the resource is in the same account as the stack it belongs to
+        :param environment_from_arn: ARN to deduce region and account from. The ARN is parsed and the account and region are taken from the ARN. This should be used for imported resources. Cannot be supplied together with either ``account`` or ``region``. Default: - take environment from ``account``, ``region`` parameters, or use Stack environment.
+        :param physical_name: The value passed in by users to the physical name prop of the resource. - ``undefined`` implies that a physical name will be allocated by CloudFormation during deployment. - a concrete value implies a specific physical name - ``PhysicalName.GENERATE_IF_NEEDED`` is a marker that indicates that a physical will only be generated by the CDK if it is needed for cross-environment references. Otherwise, it will be allocated by CloudFormation. Default: - The physical name will be allocated by CloudFormation at deployment time
+        :param region: The AWS region this resource belongs to. Default: - the resource is in the same region as the stack it belongs to
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b2c7d643c93bd242956ccec86b5deef314ea7b86e8724a41b41cfac2a91fb4ee)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = _ResourceProps_15a65b4e(
+            account=account,
+            environment_from_arn=environment_from_arn,
+            physical_name=physical_name,
+            region=region,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="fromCfnAssessmentTemplate")
+    @builtins.classmethod
+    def from_cfn_assessment_template(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        template: "CfnAssessmentTemplate",
+    ) -> "IAssessmentTemplate":
+        '''Creates an AssessmentTemplate from an existing CfnAssessmentTemplate.
+
+        This method is provided to bridge the gap with L2 constructs since no L2 constructs
+        exist for Inspector resources yet. It allows working with CfnAssessmentTemplate (L1)
+        resources through the IAssessmentTemplate interface.
+
+        :param scope: -
+        :param id: -
+        :param template: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__27ed524e48f7eb2cf7a80fc6e726970f98769ba4eca8bc25f7d5ae4fb03b0875)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument template", value=template, expected_type=type_hints["template"])
+        return typing.cast("IAssessmentTemplate", jsii.sinvoke(cls, "fromCfnAssessmentTemplate", [scope, id, template]))
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_inspector.AssessmentTemplateProps",
+    jsii_struct_bases=[],
+    name_mapping={},
+)
+class AssessmentTemplateProps:
+    def __init__(self) -> None:
+        '''Properties for creating an Inspector Assessment Template TODO: Add properties and remove "props-physical-name:aws-cdk-lib.aws_inspector.AssessmentTemplateProps" from ``awslint.json`` when implementing the L2 construct.
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_inspector as inspector
+            
+            assessment_template_props = inspector.AssessmentTemplateProps()
+        '''
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "AssessmentTemplateProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556)
 class CfnAssessmentTarget(
     _CfnResource_9df397a6,
@@ -748,17 +867,74 @@ class CfnResourceGroupProps:
         )
 
 
+@jsii.interface(jsii_type="aws-cdk-lib.aws_inspector.IAssessmentTemplate")
+class IAssessmentTemplate(_IResource_c80c4260, typing_extensions.Protocol):
+    '''Interface for an Inspector Assessment Template.'''
+
+    @builtins.property
+    @jsii.member(jsii_name="assessmentTemplateArn")
+    def assessment_template_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the assessment template.
+
+        :attribute: true
+        '''
+        ...
+
+
+class _IAssessmentTemplateProxy(
+    jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
+):
+    '''Interface for an Inspector Assessment Template.'''
+
+    __jsii_type__: typing.ClassVar[str] = "aws-cdk-lib.aws_inspector.IAssessmentTemplate"
+
+    @builtins.property
+    @jsii.member(jsii_name="assessmentTemplateArn")
+    def assessment_template_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the assessment template.
+
+        :attribute: true
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "assessmentTemplateArn"))
+
+# Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
+typing.cast(typing.Any, IAssessmentTemplate).__jsii_proxy_class__ = lambda : _IAssessmentTemplateProxy
+
+
 __all__ = [
+    "AssessmentTemplate",
+    "AssessmentTemplateProps",
     "CfnAssessmentTarget",
     "CfnAssessmentTargetProps",
     "CfnAssessmentTemplate",
     "CfnAssessmentTemplateProps",
     "CfnResourceGroup",
     "CfnResourceGroupProps",
+    "IAssessmentTemplate",
 ]
 
 publication.publish()
 
+def _typecheckingstub__b2c7d643c93bd242956ccec86b5deef314ea7b86e8724a41b41cfac2a91fb4ee(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    account: typing.Optional[builtins.str] = None,
+    environment_from_arn: typing.Optional[builtins.str] = None,
+    physical_name: typing.Optional[builtins.str] = None,
+    region: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__27ed524e48f7eb2cf7a80fc6e726970f98769ba4eca8bc25f7d5ae4fb03b0875(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    template: CfnAssessmentTemplate,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__8b68f769512afe2cc2200d1eaed82952c7d1dda03213723b68dd167dd4a283c7(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,

aws_cdk/aws_iotsitewise/__init__.py

@@ -4467,7 +4467,7 @@ class CfnGateway(
         ) -> None:
             '''Contains a gateway's platform information.
 
-            :param greengrass: A gateway that runs on AWS IoT Greengrass .
+            :param greengrass: 
             :param greengrass_v2: A gateway that runs on AWS IoT Greengrass V2 .
             :param siemens_ie: A AWS IoT SiteWise Edge gateway that runs on a Siemens Industrial Edge Device.
 
@@ -4512,8 +4512,7 @@ class CfnGateway(
         def greengrass(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGateway.GreengrassProperty"]]:
-            '''A gateway that runs on AWS IoT Greengrass .
-
+            '''
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-gateway-gatewayplatform.html#cfn-iotsitewise-gateway-gatewayplatform-greengrass
             '''
             result = self._values.get("greengrass")

aws_cdk/aws_kinesisfirehose/__init__.py

@@ -9723,6 +9723,12 @@ class Compression(
         '''Snappy.'''
         return typing.cast("Compression", jsii.sget(cls, "SNAPPY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="UNCOMPRESSED")
+    def UNCOMPRESSED(cls) -> "Compression":
+        '''Uncompressed.'''
+        return typing.cast("Compression", jsii.sget(cls, "UNCOMPRESSED"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="ZIP")
     def ZIP(cls) -> "Compression":

aws_cdk/aws_lambda/__init__.py

@@ -24,6 +24,8 @@ related to a missing environment variable. To work around this, you can invoke
 your function against a version or alias by default, rather than the `$LATEST`
 version.
 
+To further mitigate these issues, you can ensure consistency between your function code and infrastructure configuration by defining environment variables as a single source of truth in your CDK stack. You can define them in a separate `env.ts` file and reference them in both your handler and CDK configuration. This approach allows you to catch errors at compile time, benefit from improved IDE support, minimize the risk of mismatched configurations, and enhance maintainability.
+
 ## Handler Code
 
 The `lambda.Code` class includes static convenience methods for various types of
@@ -21214,6 +21216,12 @@ class Runtime(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_lambda.Runtime
         '''The .NET 8 runtime (dotnet8).'''
         return typing.cast("Runtime", jsii.sget(cls, "DOTNET_8"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DOTNET_9")
+    def DOTNET_9(cls) -> "Runtime":
+        '''The .NET 9 runtime (dotnet9).'''
+        return typing.cast("Runtime", jsii.sget(cls, "DOTNET_9"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="DOTNET_CORE_1")
     def DOTNET_CORE_1(cls) -> "Runtime":

aws_cdk/aws_logs/__init__.py

@@ -12879,6 +12879,8 @@ class RetentionDays(enum.Enum):
                 retention=logs.RetentionDays.ONE_WEEK
             )
         )
+        
+        api.add_channel_namespace("default")
     '''
 
     ONE_DAY = "ONE_DAY"