aws-cdk-lib 2.181.1__py3-none-any.whl → 2.183.0__py3-none-any.whl

aws_cdk/aws_rds/__init__.py

@@ -464,6 +464,27 @@ cluster = rds.DatabaseCluster(self, "Database",
 )
 ```
 
+### Creating a read replica cluster
+
+Use `replicationSourceIdentifier` to create a read replica cluster:
+
+```python
+# vpc: ec2.Vpc
+# primary_cluster: rds.DatabaseCluster
+
+
+rds.DatabaseCluster(self, "DatabaseCluster",
+    engine=rds.DatabaseClusterEngine.aurora_mysql(
+        version=rds.AuroraMysqlEngineVersion.VER_3_03_0
+    ),
+    writer=rds.ClusterInstance.serverless_v2("Writer"),
+    vpc=vpc,
+    replication_source_identifier=primary_cluster.cluster_arn
+)
+```
+
+**Note**: Cannot create a read replica cluster with `credentials` as the value is inherited from the source DB cluster.
+
 ## Starting an instance database
 
 To set up an instance database, define a `DatabaseInstance`. You must
@@ -2238,17 +2259,11 @@ class AuroraMysqlClusterEngineProps:
             
             cluster = rds.DatabaseCluster(self, "Database",
                 engine=rds.DatabaseClusterEngine.aurora_mysql(version=rds.AuroraMysqlEngineVersion.VER_3_01_0),
-                credentials=rds.Credentials.from_generated_secret("clusteradmin"),  # Optional - will default to 'admin' username and generated password
-                writer=rds.ClusterInstance.provisioned("writer",
-                    publicly_accessible=False
-                ),
-                readers=[
-                    rds.ClusterInstance.provisioned("reader1", promotion_tier=1),
-                    rds.ClusterInstance.serverless_v2("reader2")
-                ],
-                vpc_subnets=ec2.SubnetSelection(
-                    subnet_type=ec2.SubnetType.PRIVATE_WITH_EGRESS
+                writer=rds.ClusterInstance.provisioned("Instance",
+                    instance_type=ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE3, ec2.InstanceSize.SMALL)
                 ),
+                readers=[rds.ClusterInstance.provisioned("reader")],
+                instance_update_behaviour=rds.InstanceUpdateBehaviour.ROLLING,  # Optional - defaults to rds.InstanceUpdateBehaviour.BULK
                 vpc=vpc
             )
         '''
@@ -5131,7 +5146,7 @@ class CfnDBCluster(
         :param backup_retention_period: The number of days for which automated backups are retained. Default: 1 Constraints: - Must be a value from 1 to 35 Valid for: Aurora DB clusters and Multi-AZ DB clusters Default: - 1
         :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. When set to ``limitless`` , the cluster operates as an Aurora Limitless Database, allowing you to create a DB shard group for horizontal scaling (sharding) capabilities. When set to ``standard`` (the default), the cluster uses normal DB instance creation.
         :param copy_tags_to_snapshot: A value that indicates whether to copy all tags from the DB cluster to snapshots of the DB cluster. The default is not to copy them. Valid for: Aurora DB clusters and Multi-AZ DB clusters
-        :param database_insights_mode: The mode of Database Insights to enable for the DB cluster. If you set this value to ``advanced`` , you must also set the ``PerformanceInsightsEnabled`` parameter to ``true`` and the ``PerformanceInsightsRetentionPeriod`` parameter to 465. Valid for Cluster Type: Aurora DB clusters only
+        :param database_insights_mode: The mode of Database Insights to enable for the DB cluster. If you set this value to ``advanced`` , you must also set the ``PerformanceInsightsEnabled`` parameter to ``true`` and the ``PerformanceInsightsRetentionPeriod`` parameter to 465. Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
         :param database_name: The name of your database. If you don't provide a name, then Amazon RDS won't create a database in this DB cluster. For naming constraints, see `Naming Constraints <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_Limits.html#RDS_Limits.Constraints>`_ in the *Amazon Aurora User Guide* . Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param db_cluster_identifier: The DB cluster identifier. This parameter is stored as a lowercase string. Constraints: - Must contain from 1 to 63 letters, numbers, or hyphens. - First character must be a letter. - Can't end with a hyphen or contain two consecutive hyphens. Example: ``my-cluster1`` Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param db_cluster_instance_class: The compute and memory capacity of each DB instance in the Multi-AZ DB cluster, for example ``db.m6gd.xlarge`` . Not all DB instance classes are available in all AWS Regions , or for all database engines. For the full list of DB instance classes and availability for your engine, see `DB instance class <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html>`_ in the *Amazon RDS User Guide* . This setting is required to create a Multi-AZ DB cluster. Valid for Cluster Type: Multi-AZ DB clusters only
@@ -7325,7 +7340,7 @@ class CfnDBClusterProps:
         :param backup_retention_period: The number of days for which automated backups are retained. Default: 1 Constraints: - Must be a value from 1 to 35 Valid for: Aurora DB clusters and Multi-AZ DB clusters Default: - 1
         :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. When set to ``limitless`` , the cluster operates as an Aurora Limitless Database, allowing you to create a DB shard group for horizontal scaling (sharding) capabilities. When set to ``standard`` (the default), the cluster uses normal DB instance creation.
         :param copy_tags_to_snapshot: A value that indicates whether to copy all tags from the DB cluster to snapshots of the DB cluster. The default is not to copy them. Valid for: Aurora DB clusters and Multi-AZ DB clusters
-        :param database_insights_mode: The mode of Database Insights to enable for the DB cluster. If you set this value to ``advanced`` , you must also set the ``PerformanceInsightsEnabled`` parameter to ``true`` and the ``PerformanceInsightsRetentionPeriod`` parameter to 465. Valid for Cluster Type: Aurora DB clusters only
+        :param database_insights_mode: The mode of Database Insights to enable for the DB cluster. If you set this value to ``advanced`` , you must also set the ``PerformanceInsightsEnabled`` parameter to ``true`` and the ``PerformanceInsightsRetentionPeriod`` parameter to 465. Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
         :param database_name: The name of your database. If you don't provide a name, then Amazon RDS won't create a database in this DB cluster. For naming constraints, see `Naming Constraints <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_Limits.html#RDS_Limits.Constraints>`_ in the *Amazon Aurora User Guide* . Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param db_cluster_identifier: The DB cluster identifier. This parameter is stored as a lowercase string. Constraints: - Must contain from 1 to 63 letters, numbers, or hyphens. - First character must be a letter. - Can't end with a hyphen or contain two consecutive hyphens. Example: ``my-cluster1`` Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param db_cluster_instance_class: The compute and memory capacity of each DB instance in the Multi-AZ DB cluster, for example ``db.m6gd.xlarge`` . Not all DB instance classes are available in all AWS Regions , or for all database engines. For the full list of DB instance classes and availability for your engine, see `DB instance class <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html>`_ in the *Amazon RDS User Guide* . This setting is required to create a Multi-AZ DB cluster. Valid for Cluster Type: Multi-AZ DB clusters only
@@ -7770,7 +7785,7 @@ class CfnDBClusterProps:
 
         If you set this value to ``advanced`` , you must also set the ``PerformanceInsightsEnabled`` parameter to ``true`` and the ``PerformanceInsightsRetentionPeriod`` parameter to 465.
 
-        Valid for Cluster Type: Aurora DB clusters only
+        Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#cfn-rds-dbcluster-databaseinsightsmode
         '''
@@ -8955,7 +8970,7 @@ class CfnDBInstance(
         :param db_parameter_group_name: The name of an existing DB parameter group or a reference to an `AWS::RDS::DBParameterGroup <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbparametergroup.html>`_ resource created in the template. To list all of the available DB parameter group names, use the following command: ``aws rds describe-db-parameter-groups --query "DBParameterGroups[].DBParameterGroupName" --output text`` .. epigraph:: If any of the data members of the referenced parameter group are changed during an update, the DB instance might need to be restarted, which causes some interruption. If the parameter group contains static parameters, whether they were changed or not, an update triggers a reboot. If you don't specify a value for ``DBParameterGroupName`` property, the default DB parameter group for the specified engine and engine version is used.
         :param db_security_groups: A list of the DB security groups to assign to the DB instance. The list can include both the name of existing DB security groups or references to AWS::RDS::DBSecurityGroup resources created in the template. If you set DBSecurityGroups, you must not set VPCSecurityGroups, and vice versa. Also, note that the DBSecurityGroups property exists only for backwards compatibility with older regions and is no longer recommended for providing security information to an RDS DB instance. Instead, use VPCSecurityGroups. .. epigraph:: If you specify this property, AWS CloudFormation sends only the following properties (if specified) to Amazon RDS during create operations: - ``AllocatedStorage`` - ``AutoMinorVersionUpgrade`` - ``AvailabilityZone`` - ``BackupRetentionPeriod`` - ``CharacterSetName`` - ``DBInstanceClass`` - ``DBName`` - ``DBParameterGroupName`` - ``DBSecurityGroups`` - ``DBSubnetGroupName`` - ``Engine`` - ``EngineVersion`` - ``Iops`` - ``LicenseModel`` - ``MasterUsername`` - ``MasterUserPassword`` - ``MultiAZ`` - ``OptionGroupName`` - ``PreferredBackupWindow`` - ``PreferredMaintenanceWindow`` All other properties are ignored. Specify a virtual private cloud (VPC) security group if you want to submit other properties, such as ``StorageType`` , ``StorageEncrypted`` , or ``KmsKeyId`` . If you're already using the ``DBSecurityGroups`` property, you can't use these other properties by updating your DB instance to use a VPC security group. You must recreate the DB instance.
         :param db_snapshot_identifier: The name or Amazon Resource Name (ARN) of the DB snapshot that's used to restore the DB instance. If you're restoring from a shared manual DB snapshot, you must specify the ARN of the snapshot. By specifying this property, you can create a DB instance from the specified DB snapshot. If the ``DBSnapshotIdentifier`` property is an empty string or the ``AWS::RDS::DBInstance`` declaration has no ``DBSnapshotIdentifier`` property, AWS CloudFormation creates a new database. If the property contains a value (other than an empty string), AWS CloudFormation creates a database from the specified snapshot. If a snapshot with the specified name doesn't exist, AWS CloudFormation can't create the database and it rolls back the stack. Some DB instance properties aren't valid when you restore from a snapshot, such as the ``MasterUsername`` and ``MasterUserPassword`` properties, and the point-in-time recovery properties ``RestoreTime`` and ``UseLatestRestorableTime`` . For information about the properties that you can specify, see the ```RestoreDBInstanceFromDBSnapshot`` <https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RestoreDBInstanceFromDBSnapshot.html>`_ action in the *Amazon RDS API Reference* . After you restore a DB instance with a ``DBSnapshotIdentifier`` property, you must specify the same ``DBSnapshotIdentifier`` property for any future updates to the DB instance. When you specify this property for an update, the DB instance is not restored from the DB snapshot again, and the data in the database is not changed. However, if you don't specify the ``DBSnapshotIdentifier`` property, an empty DB instance is created, and the original DB instance is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB instance is restored from the specified ``DBSnapshotIdentifier`` property, and the original DB instance is deleted. If you specify the ``DBSnapshotIdentifier`` property to restore a DB instance (as opposed to specifying it for DB instance updates), then don't specify the following properties: - ``CharacterSetName`` - ``DBClusterIdentifier`` - ``DBName`` - ``KmsKeyId`` - ``MasterUsername`` - ``MasterUserPassword`` - ``PromotionTier`` - ``SourceDBInstanceIdentifier`` - ``SourceRegion`` - ``StorageEncrypted`` (for an unencrypted snapshot) - ``Timezone`` *Amazon Aurora* Not applicable. Snapshot restore is managed by the DB cluster.
-        :param db_subnet_group_name: A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. If there's no DB subnet group, then the DB instance isn't a VPC DB instance. For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting.
+        :param db_subnet_group_name: A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. If you don't specify a DB subnet group, RDS uses the default DB subnet group if one exists. If a default DB subnet group does not exist, and you don't specify a ``DBSubnetGroupName`` , the DB instance fails to launch. For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting.
         :param db_system_id: The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files. In this context, the term "Oracle database instance" refers exclusively to the system global area (SGA) and Oracle background processes. If you don't specify a SID, the value defaults to ``RDSCDB`` . The Oracle SID is also the name of your CDB.
         :param dedicated_log_volume: Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
         :param delete_automated_backups: A value that indicates whether to remove automated backups immediately after the DB instance is deleted. This parameter isn't case-sensitive. The default is to remove automated backups immediately after the DB instance is deleted. *Amazon Aurora* Not applicable. When you delete a DB cluster, all automated backups for that DB cluster are deleted and can't be recovered. Manual DB cluster snapshots of the DB cluster are not deleted.
@@ -11027,7 +11042,7 @@ class CfnDBInstanceProps:
         :param db_parameter_group_name: The name of an existing DB parameter group or a reference to an `AWS::RDS::DBParameterGroup <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbparametergroup.html>`_ resource created in the template. To list all of the available DB parameter group names, use the following command: ``aws rds describe-db-parameter-groups --query "DBParameterGroups[].DBParameterGroupName" --output text`` .. epigraph:: If any of the data members of the referenced parameter group are changed during an update, the DB instance might need to be restarted, which causes some interruption. If the parameter group contains static parameters, whether they were changed or not, an update triggers a reboot. If you don't specify a value for ``DBParameterGroupName`` property, the default DB parameter group for the specified engine and engine version is used.
         :param db_security_groups: A list of the DB security groups to assign to the DB instance. The list can include both the name of existing DB security groups or references to AWS::RDS::DBSecurityGroup resources created in the template. If you set DBSecurityGroups, you must not set VPCSecurityGroups, and vice versa. Also, note that the DBSecurityGroups property exists only for backwards compatibility with older regions and is no longer recommended for providing security information to an RDS DB instance. Instead, use VPCSecurityGroups. .. epigraph:: If you specify this property, AWS CloudFormation sends only the following properties (if specified) to Amazon RDS during create operations: - ``AllocatedStorage`` - ``AutoMinorVersionUpgrade`` - ``AvailabilityZone`` - ``BackupRetentionPeriod`` - ``CharacterSetName`` - ``DBInstanceClass`` - ``DBName`` - ``DBParameterGroupName`` - ``DBSecurityGroups`` - ``DBSubnetGroupName`` - ``Engine`` - ``EngineVersion`` - ``Iops`` - ``LicenseModel`` - ``MasterUsername`` - ``MasterUserPassword`` - ``MultiAZ`` - ``OptionGroupName`` - ``PreferredBackupWindow`` - ``PreferredMaintenanceWindow`` All other properties are ignored. Specify a virtual private cloud (VPC) security group if you want to submit other properties, such as ``StorageType`` , ``StorageEncrypted`` , or ``KmsKeyId`` . If you're already using the ``DBSecurityGroups`` property, you can't use these other properties by updating your DB instance to use a VPC security group. You must recreate the DB instance.
         :param db_snapshot_identifier: The name or Amazon Resource Name (ARN) of the DB snapshot that's used to restore the DB instance. If you're restoring from a shared manual DB snapshot, you must specify the ARN of the snapshot. By specifying this property, you can create a DB instance from the specified DB snapshot. If the ``DBSnapshotIdentifier`` property is an empty string or the ``AWS::RDS::DBInstance`` declaration has no ``DBSnapshotIdentifier`` property, AWS CloudFormation creates a new database. If the property contains a value (other than an empty string), AWS CloudFormation creates a database from the specified snapshot. If a snapshot with the specified name doesn't exist, AWS CloudFormation can't create the database and it rolls back the stack. Some DB instance properties aren't valid when you restore from a snapshot, such as the ``MasterUsername`` and ``MasterUserPassword`` properties, and the point-in-time recovery properties ``RestoreTime`` and ``UseLatestRestorableTime`` . For information about the properties that you can specify, see the ```RestoreDBInstanceFromDBSnapshot`` <https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RestoreDBInstanceFromDBSnapshot.html>`_ action in the *Amazon RDS API Reference* . After you restore a DB instance with a ``DBSnapshotIdentifier`` property, you must specify the same ``DBSnapshotIdentifier`` property for any future updates to the DB instance. When you specify this property for an update, the DB instance is not restored from the DB snapshot again, and the data in the database is not changed. However, if you don't specify the ``DBSnapshotIdentifier`` property, an empty DB instance is created, and the original DB instance is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB instance is restored from the specified ``DBSnapshotIdentifier`` property, and the original DB instance is deleted. If you specify the ``DBSnapshotIdentifier`` property to restore a DB instance (as opposed to specifying it for DB instance updates), then don't specify the following properties: - ``CharacterSetName`` - ``DBClusterIdentifier`` - ``DBName`` - ``KmsKeyId`` - ``MasterUsername`` - ``MasterUserPassword`` - ``PromotionTier`` - ``SourceDBInstanceIdentifier`` - ``SourceRegion`` - ``StorageEncrypted`` (for an unencrypted snapshot) - ``Timezone`` *Amazon Aurora* Not applicable. Snapshot restore is managed by the DB cluster.
-        :param db_subnet_group_name: A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. If there's no DB subnet group, then the DB instance isn't a VPC DB instance. For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting.
+        :param db_subnet_group_name: A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. If you don't specify a DB subnet group, RDS uses the default DB subnet group if one exists. If a default DB subnet group does not exist, and you don't specify a ``DBSubnetGroupName`` , the DB instance fails to launch. For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting.
         :param db_system_id: The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files. In this context, the term "Oracle database instance" refers exclusively to the system global area (SGA) and Oracle background processes. If you don't specify a SID, the value defaults to ``RDSCDB`` . The Oracle SID is also the name of your CDB.
         :param dedicated_log_volume: Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
         :param delete_automated_backups: A value that indicates whether to remove automated backups immediately after the DB instance is deleted. This parameter isn't case-sensitive. The default is to remove automated backups immediately after the DB instance is deleted. *Amazon Aurora* Not applicable. When you delete a DB cluster, all automated backups for that DB cluster are deleted and can't be recovered. Manual DB cluster snapshots of the DB cluster are not deleted.
@@ -11948,7 +11963,7 @@ class CfnDBInstanceProps:
 
         If you update this value, the new subnet group must be a subnet group in a new VPC.
 
-        If there's no DB subnet group, then the DB instance isn't a VPC DB instance.
+        If you don't specify a DB subnet group, RDS uses the default DB subnet group if one exists. If a default DB subnet group does not exist, and you don't specify a ``DBSubnetGroupName`` , the DB instance fails to launch.
 
         For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* .
 
@@ -14846,7 +14861,7 @@ class CfnDBProxyTargetGroup(
             '''Specifies the settings that control the size and behavior of the connection pool associated with a ``DBProxyTargetGroup`` .
 
             :param connection_borrow_timeout: The number of seconds for a proxy to wait for a connection to become available in the connection pool. This setting only applies when the proxy has opened its maximum number of connections and all connections are busy with client sessions. Default: ``120`` Constraints: - Must be between 0 and 3600.
-            :param init_query: One or more SQL statements for the proxy to run when opening each new database connection. Typically used with ``SET`` statements to make sure that each connection has identical settings such as time zone and character set. For multiple statements, use semicolons as the separator. You can also include multiple variables in a single ``SET`` statement, such as ``SET x=1, y=2`` . Default: no initialization query
+            :param init_query: Add an initialization query, or modify the current one. You can specify one or more SQL statements for the proxy to run when opening each new database connection. The setting is typically used with ``SET`` statements to make sure that each connection has identical settings. Make sure that the query you add is valid. To include multiple variables in a single ``SET`` statement, use comma separators. For example: ``SET variable1=value1, variable2=value2`` For multiple statements, use semicolons as the separator. Default: no initialization query
             :param max_connections_percent: The maximum size of the connection pool for each target in a target group. The value is expressed as a percentage of the ``max_connections`` setting for the RDS DB instance or Aurora DB cluster used by the target group. If you specify ``MaxIdleConnectionsPercent`` , then you must also include a value for this parameter. Default: ``10`` for RDS for Microsoft SQL Server, and ``100`` for all other engines Constraints: - Must be between 1 and 100.
             :param max_idle_connections_percent: A value that controls how actively the proxy closes idle database connections in the connection pool. The value is expressed as a percentage of the ``max_connections`` setting for the RDS DB instance or Aurora DB cluster used by the target group. With a high value, the proxy leaves a high percentage of idle database connections open. A low value causes the proxy to close more idle connections and return them to the database. If you specify this parameter, then you must also include a value for ``MaxConnectionsPercent`` . Default: The default value is half of the value of ``MaxConnectionsPercent`` . For example, if ``MaxConnectionsPercent`` is 80, then the default value of ``MaxIdleConnectionsPercent`` is 40. If the value of ``MaxConnectionsPercent`` isn't specified, then for SQL Server, ``MaxIdleConnectionsPercent`` is ``5`` , and for all other engines, the default is ``50`` . Constraints: - Must be between 0 and the value of ``MaxConnectionsPercent`` .
             :param session_pinning_filters: Each item in the list represents a class of SQL operations that normally cause all later statements in a session using a proxy to be pinned to the same underlying database connection. Including an item in the list exempts that class of SQL operations from the pinning behavior. Default: no session pinning filters
@@ -14906,9 +14921,13 @@ class CfnDBProxyTargetGroup(
 
         @builtins.property
         def init_query(self) -> typing.Optional[builtins.str]:
-            '''One or more SQL statements for the proxy to run when opening each new database connection.
+            '''Add an initialization query, or modify the current one.
 
-            Typically used with ``SET`` statements to make sure that each connection has identical settings such as time zone and character set. For multiple statements, use semicolons as the separator. You can also include multiple variables in a single ``SET`` statement, such as ``SET x=1, y=2`` .
+            You can specify one or more SQL statements for the proxy to run when opening each new database connection. The setting is typically used with ``SET`` statements to make sure that each connection has identical settings. Make sure that the query you add is valid. To include multiple variables in a single ``SET`` statement, use comma separators.
+
+            For example: ``SET variable1=value1, variable2=value2``
+
+            For multiple statements, use semicolons as the separator.
 
             Default: no initialization query
 
@@ -21950,6 +21969,7 @@ class DatabaseClusterFromSnapshotProps:
         "preferred_maintenance_window": "preferredMaintenanceWindow",
         "readers": "readers",
         "removal_policy": "removalPolicy",
+        "replication_source_identifier": "replicationSourceIdentifier",
         "s3_export_buckets": "s3ExportBuckets",
         "s3_export_role": "s3ExportRole",
         "s3_import_buckets": "s3ImportBuckets",
@@ -22007,6 +22027,7 @@ class DatabaseClusterProps:
         preferred_maintenance_window: typing.Optional[builtins.str] = None,
         readers: typing.Optional[typing.Sequence["IClusterInstance"]] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+        replication_source_identifier: typing.Optional[builtins.str] = None,
         s3_export_buckets: typing.Optional[typing.Sequence[_IBucket_42e086fd]] = None,
         s3_export_role: typing.Optional[_IRole_235f5d8e] = None,
         s3_import_buckets: typing.Optional[typing.Sequence[_IBucket_42e086fd]] = None,
@@ -22061,6 +22082,7 @@ class DatabaseClusterProps:
         :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param readers: A list of instances to create as cluster reader instances. Default: - no readers are created. The cluster will have a single writer/reader
         :param removal_policy: The removal policy to apply when the cluster and its instances are removed from the stack or replaced during an update. Default: - RemovalPolicy.SNAPSHOT (remove the cluster and instances, but retain a snapshot of the data)
+        :param replication_source_identifier: The Amazon Resource Name (ARN) of the source DB instance or DB cluster if this DB cluster is created as a read replica. Cannot be used with credentials. Default: - This DB Cluster is not a read replica
         :param s3_export_buckets: S3 buckets that you want to load data into. This feature is only supported by the Aurora database engine. This property must not be used if ``s3ExportRole`` is used. For MySQL: Default: - None
         :param s3_export_role: Role that will be associated with this DB cluster to enable S3 export. This feature is only supported by the Aurora database engine. This property must not be used if ``s3ExportBuckets`` is used. To use this property with Aurora PostgreSQL, it must be configured with the S3 export feature enabled when creating the DatabaseClusterEngine For MySQL: Default: - New role is created if ``s3ExportBuckets`` is set, no role is defined otherwise
         :param s3_import_buckets: S3 buckets that you want to load data from. This feature is only supported by the Aurora database engine. This property must not be used if ``s3ImportRole`` is used. For MySQL: Default: - None
@@ -22143,6 +22165,7 @@ class DatabaseClusterProps:
             check_type(argname="argument preferred_maintenance_window", value=preferred_maintenance_window, expected_type=type_hints["preferred_maintenance_window"])
             check_type(argname="argument readers", value=readers, expected_type=type_hints["readers"])
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
+            check_type(argname="argument replication_source_identifier", value=replication_source_identifier, expected_type=type_hints["replication_source_identifier"])
             check_type(argname="argument s3_export_buckets", value=s3_export_buckets, expected_type=type_hints["s3_export_buckets"])
             check_type(argname="argument s3_export_role", value=s3_export_role, expected_type=type_hints["s3_export_role"])
             check_type(argname="argument s3_import_buckets", value=s3_import_buckets, expected_type=type_hints["s3_import_buckets"])
@@ -22232,6 +22255,8 @@ class DatabaseClusterProps:
             self._values["readers"] = readers
         if removal_policy is not None:
             self._values["removal_policy"] = removal_policy
+        if replication_source_identifier is not None:
+            self._values["replication_source_identifier"] = replication_source_identifier
         if s3_export_buckets is not None:
             self._values["s3_export_buckets"] = s3_export_buckets
         if s3_export_role is not None:
@@ -22670,6 +22695,17 @@ class DatabaseClusterProps:
         result = self._values.get("removal_policy")
         return typing.cast(typing.Optional[_RemovalPolicy_9f93c814], result)
 
+    @builtins.property
+    def replication_source_identifier(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the source DB instance or DB cluster if this DB cluster is created as a read replica.
+
+        Cannot be used with credentials.
+
+        :default: - This DB Cluster is not a read replica
+        '''
+        result = self._values.get("replication_source_identifier")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def s3_export_buckets(self) -> typing.Optional[typing.List[_IBucket_42e086fd]]:
         '''S3 buckets that you want to load data into. This feature is only supported by the Aurora database engine.
@@ -31172,6 +31208,12 @@ class MariaDbEngineVersion(
         '''Version "10.11.10".'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_11_10"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_10_11_11")
+    def VER_10_11_11(cls) -> "MariaDbEngineVersion":
+        '''Version "10.11.11".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_11_11"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_10_11_4")
     def VER_10_11_4(cls) -> "MariaDbEngineVersion":
@@ -31777,6 +31819,12 @@ class MariaDbEngineVersion(
         '''Version "10.5.27".'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_5_27"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_10_5_28")
+    def VER_10_5_28(cls) -> "MariaDbEngineVersion":
+        '''Version "10.5.28".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_5_28"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_10_5_8")
     def VER_10_5_8(cls) -> "MariaDbEngineVersion":
@@ -31886,6 +31934,12 @@ class MariaDbEngineVersion(
         '''Version "10.6.20".'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_6_20"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_10_6_21")
+    def VER_10_6_21(cls) -> "MariaDbEngineVersion":
+        '''Version "10.6.21".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_6_21"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_10_6_5")
     def VER_10_6_5(cls) -> "MariaDbEngineVersion":
@@ -31931,6 +31985,12 @@ class MariaDbEngineVersion(
         '''Version "11.4.4".'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_11_4_4"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_11_4_5")
+    def VER_11_4_5(cls) -> "MariaDbEngineVersion":
+        '''Version "11.4.5".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_11_4_5"))
+
     @builtins.property
     @jsii.member(jsii_name="mariaDbFullVersion")
     def maria_db_full_version(self) -> builtins.str:
@@ -32387,6 +32447,18 @@ class MysqlEngineVersion(
         '''Version "5.7.44-rds.20240808".'''
         return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_5_7_44_RDS_20240808"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_5_7_44_RDS_20250103")
+    def VER_5_7_44_RDS_20250103(cls) -> "MysqlEngineVersion":
+        '''Version "5.7.44-rds.20250103".'''
+        return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_5_7_44_RDS_20250103"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_5_7_44_RDS_20250213")
+    def VER_5_7_44_RDS_20250213(cls) -> "MysqlEngineVersion":
+        '''Version "5.7.44-rds.20250213".'''
+        return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_5_7_44_RDS_20250213"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_8_0")
     def VER_8_0(cls) -> "MysqlEngineVersion":
@@ -32617,12 +32689,24 @@ class MysqlEngineVersion(
         '''Version "8.0.40".'''
         return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_0_40"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_8_0_41")
+    def VER_8_0_41(cls) -> "MysqlEngineVersion":
+        '''Version "8.0.41".'''
+        return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_0_41"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_8_4_3")
     def VER_8_4_3(cls) -> "MysqlEngineVersion":
         '''Version "8.4.3".'''
         return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_4_3"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_8_4_4")
+    def VER_8_4_4(cls) -> "MysqlEngineVersion":
+        '''Version "8.4.4".'''
+        return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_4_4"))
+
     @builtins.property
     @jsii.member(jsii_name="mysqlFullVersion")
     def mysql_full_version(self) -> builtins.str:
@@ -35645,19 +35729,34 @@ class PostgresEngineVersion(
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_13_11")
     def VER_13_11(cls) -> "PostgresEngineVersion":
-        '''Version "13.11".'''
+        '''(deprecated) Version "13.11".
+
+        :deprecated: PostgreSQL 13.11 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_13_11"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_13_12")
     def VER_13_12(cls) -> "PostgresEngineVersion":
-        '''Version "13.12".'''
+        '''(deprecated) Version "13.12".
+
+        :deprecated: PostgreSQL 13.12 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_13_12"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_13_13")
     def VER_13_13(cls) -> "PostgresEngineVersion":
-        '''Version "13.13".'''
+        '''(deprecated) Version "13.13".
+
+        :deprecated: PostgreSQL 13.13 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_13_13"))
 
     @jsii.python.classproperty
@@ -35810,13 +35909,23 @@ class PostgresEngineVersion(
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_14_10")
     def VER_14_10(cls) -> "PostgresEngineVersion":
-        '''Version "14.10".'''
+        '''(deprecated) Version "14.10".
+
+        :deprecated: PostgreSQL 14.10 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_14_10"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_14_11")
     def VER_14_11(cls) -> "PostgresEngineVersion":
-        '''Version "14.11".'''
+        '''(deprecated) Version "14.11".
+
+        :deprecated: PostgreSQL 14.11 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_14_11"))
 
     @jsii.python.classproperty
@@ -35935,7 +36044,12 @@ class PostgresEngineVersion(
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_14_9")
     def VER_14_9(cls) -> "PostgresEngineVersion":
-        '''Version "14.9".'''
+        '''(deprecated) Version "14.9".
+
+        :deprecated: PostgreSQL 14.9 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_14_9"))
 
     @jsii.python.classproperty
@@ -35987,19 +36101,34 @@ class PostgresEngineVersion(
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_15_4")
     def VER_15_4(cls) -> "PostgresEngineVersion":
-        '''Version "15.4".'''
+        '''(deprecated) Version "15.4".
+
+        :deprecated: PostgreSQL 15.4 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_15_4"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_15_5")
     def VER_15_5(cls) -> "PostgresEngineVersion":
-        '''Version "15.5".'''
+        '''(deprecated) Version "15.5".
+
+        :deprecated: PostgreSQL 15.5 is no longer supported by Amazon RDS
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_15_5"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_15_6")
     def VER_15_6(cls) -> "PostgresEngineVersion":
-        '''Version "15.6".'''
+        '''(deprecated) Version "15.6".
+
+        :deprecated: PostgreSQL 15.6 is no longer supported by Amazon RDS
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_15_6"))
 
     @jsii.python.classproperty
@@ -36029,13 +36158,23 @@ class PostgresEngineVersion(
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_16_1")
     def VER_16_1(cls) -> "PostgresEngineVersion":
-        '''Version "16.1".'''
+        '''(deprecated) Version "16.1".
+
+        :deprecated: PostgreSQL 16.1 is no longer supported by Amazon RDS
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_16_1"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_16_2")
     def VER_16_2(cls) -> "PostgresEngineVersion":
-        '''Version "16.2".'''
+        '''(deprecated) Version "16.2".
+
+        :deprecated: PostgreSQL 16.2 is no longer supported by Amazon RDS
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_16_2"))
 
     @jsii.python.classproperty
@@ -46044,6 +46183,7 @@ class DatabaseCluster(
         preferred_maintenance_window: typing.Optional[builtins.str] = None,
         readers: typing.Optional[typing.Sequence[IClusterInstance]] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+        replication_source_identifier: typing.Optional[builtins.str] = None,
         s3_export_buckets: typing.Optional[typing.Sequence[_IBucket_42e086fd]] = None,
         s3_export_role: typing.Optional[_IRole_235f5d8e] = None,
         s3_import_buckets: typing.Optional[typing.Sequence[_IBucket_42e086fd]] = None,
@@ -46099,6 +46239,7 @@ class DatabaseCluster(
         :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param readers: A list of instances to create as cluster reader instances. Default: - no readers are created. The cluster will have a single writer/reader
         :param removal_policy: The removal policy to apply when the cluster and its instances are removed from the stack or replaced during an update. Default: - RemovalPolicy.SNAPSHOT (remove the cluster and instances, but retain a snapshot of the data)
+        :param replication_source_identifier: The Amazon Resource Name (ARN) of the source DB instance or DB cluster if this DB cluster is created as a read replica. Cannot be used with credentials. Default: - This DB Cluster is not a read replica
         :param s3_export_buckets: S3 buckets that you want to load data into. This feature is only supported by the Aurora database engine. This property must not be used if ``s3ExportRole`` is used. For MySQL: Default: - None
         :param s3_export_role: Role that will be associated with this DB cluster to enable S3 export. This feature is only supported by the Aurora database engine. This property must not be used if ``s3ExportBuckets`` is used. To use this property with Aurora PostgreSQL, it must be configured with the S3 export feature enabled when creating the DatabaseClusterEngine For MySQL: Default: - New role is created if ``s3ExportBuckets`` is set, no role is defined otherwise
         :param s3_import_buckets: S3 buckets that you want to load data from. This feature is only supported by the Aurora database engine. This property must not be used if ``s3ImportRole`` is used. For MySQL: Default: - None
@@ -46156,6 +46297,7 @@ class DatabaseCluster(
             preferred_maintenance_window=preferred_maintenance_window,
             readers=readers,
             removal_policy=removal_policy,
+            replication_source_identifier=replication_source_identifier,
             s3_export_buckets=s3_export_buckets,
             s3_export_role=s3_export_role,
             s3_import_buckets=s3_import_buckets,
@@ -49904,6 +50046,7 @@ def _typecheckingstub__a32e21c90ab65d3cfdb3b7ef2a0d741ba1528ec8824cd1817d1e485b4
     preferred_maintenance_window: typing.Optional[builtins.str] = None,
     readers: typing.Optional[typing.Sequence[IClusterInstance]] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+    replication_source_identifier: typing.Optional[builtins.str] = None,
     s3_export_buckets: typing.Optional[typing.Sequence[_IBucket_42e086fd]] = None,
     s3_export_role: typing.Optional[_IRole_235f5d8e] = None,
     s3_import_buckets: typing.Optional[typing.Sequence[_IBucket_42e086fd]] = None,
@@ -51624,6 +51767,7 @@ def _typecheckingstub__c6184cbbefaa372690b9776dafecbf5857cf9bfbab91d1666aad22c56
     preferred_maintenance_window: typing.Optional[builtins.str] = None,
     readers: typing.Optional[typing.Sequence[IClusterInstance]] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+    replication_source_identifier: typing.Optional[builtins.str] = None,
     s3_export_buckets: typing.Optional[typing.Sequence[_IBucket_42e086fd]] = None,
     s3_export_role: typing.Optional[_IRole_235f5d8e] = None,
     s3_import_buckets: typing.Optional[typing.Sequence[_IBucket_42e086fd]] = None,

aws_cdk/aws_redshift/__init__.py

@@ -5122,7 +5122,7 @@ class CfnIntegration(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_redshift.CfnIntegration",
 ):
-    '''Describes a zero-ETL integration.
+    '''Describes a zero-ETL or S3 integration.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-integration.html
     :cloudformationResource: AWS::Redshift::Integration
@@ -5168,9 +5168,9 @@ class CfnIntegration(
         :param id: Construct identifier for this resource (unique in its scope).
         :param source_arn: The Amazon Resource Name (ARN) of the database used as the source for replication.
         :param target_arn: The Amazon Resource Name (ARN) of the Amazon Redshift data warehouse to use as the target for replication.
-        :param additional_encryption_context: The encryption context for the integration. For more information, see `Encryption context <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context>`_ in the *AWS Key Management Service Developer Guide* .
+        :param additional_encryption_context: The encryption context for the integration. For more information, see `Encryption context <https://docs.aws.amazon.com/>`_ in the *AWS Key Management Service Developer Guide* .
         :param integration_name: The name of the integration.
-        :param kms_key_id: The AWS Key Management Service ( AWS KMS ) key identifier for the key used to encrypt the integration.
+        :param kms_key_id: The AWS Key Management Service ( AWS KMS) key identifier for the key used to encrypt the integration.
         :param tags: The list of tags associated with the integration.
         '''
         if __debug__:
@@ -5307,7 +5307,7 @@ class CfnIntegration(
     @builtins.property
     @jsii.member(jsii_name="kmsKeyId")
     def kms_key_id(self) -> typing.Optional[builtins.str]:
-        '''The AWS Key Management Service ( AWS KMS ) key identifier for the key used to encrypt the integration.'''
+        '''The AWS Key Management Service ( AWS KMS) key identifier for the key used to encrypt the integration.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsKeyId"))
 
     @kms_key_id.setter
@@ -5358,9 +5358,9 @@ class CfnIntegrationProps:
 
         :param source_arn: The Amazon Resource Name (ARN) of the database used as the source for replication.
         :param target_arn: The Amazon Resource Name (ARN) of the Amazon Redshift data warehouse to use as the target for replication.
-        :param additional_encryption_context: The encryption context for the integration. For more information, see `Encryption context <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context>`_ in the *AWS Key Management Service Developer Guide* .
+        :param additional_encryption_context: The encryption context for the integration. For more information, see `Encryption context <https://docs.aws.amazon.com/>`_ in the *AWS Key Management Service Developer Guide* .
         :param integration_name: The name of the integration.
-        :param kms_key_id: The AWS Key Management Service ( AWS KMS ) key identifier for the key used to encrypt the integration.
+        :param kms_key_id: The AWS Key Management Service ( AWS KMS) key identifier for the key used to encrypt the integration.
         :param tags: The list of tags associated with the integration.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-integration.html
@@ -5435,7 +5435,7 @@ class CfnIntegrationProps:
     ) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
         '''The encryption context for the integration.
 
-        For more information, see `Encryption context <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context>`_ in the *AWS Key Management Service Developer Guide* .
+        For more information, see `Encryption context <https://docs.aws.amazon.com/>`_ in the *AWS Key Management Service Developer Guide* .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-integration.html#cfn-redshift-integration-additionalencryptioncontext
         '''
@@ -5453,7 +5453,7 @@ class CfnIntegrationProps:
 
     @builtins.property
     def kms_key_id(self) -> typing.Optional[builtins.str]:
-        '''The AWS Key Management Service ( AWS KMS ) key identifier for the key used to encrypt the integration.
+        '''The AWS Key Management Service ( AWS KMS) key identifier for the key used to encrypt the integration.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-integration.html#cfn-redshift-integration-kmskeyid
         '''

aws_cdk/aws_s3/__init__.py

@@ -15740,6 +15740,14 @@ class EventType(enum.Enum):
     An event is not generated when a request results in no change to an
     object’s ACL.
     '''
+    OBJECT_RESTORE = "OBJECT_RESTORE"
+    '''Using restore object event types you can receive notifications for initiation and completion when restoring objects from the S3 Glacier storage class.
+
+    You use s3:ObjectRestore:* to request notification of
+    any restoration event.
+    '''
+    REPLICATION = "REPLICATION"
+    '''You receive this notification event for any object replication event.'''
 
 
 @jsii.data_type(