aws-cdk-lib 2.181.1__py3-none-any.whl → 2.183.0__py3-none-any.whl

aws_cdk/aws_sagemaker/__init__.py

@@ -1590,7 +1590,7 @@ class CfnCluster(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param instance_groups: The instance groups of the SageMaker HyperPod cluster.
+        :param instance_groups: The instance groups of the SageMaker HyperPod cluster. To delete an instance group, remove it from the array.
         :param cluster_name: The name of the SageMaker HyperPod cluster.
         :param node_recovery: Specifies whether to enable or disable the automatic node recovery feature of SageMaker HyperPod. Available values are ``Automatic`` for enabling and ``None`` for disabling.
         :param orchestrator: The orchestrator type for the SageMaker HyperPod cluster. Currently, ``'eks'`` is the only available option.
@@ -1882,7 +1882,7 @@ class CfnCluster(
             :param current_count: The number of instances that are currently in the instance group of a SageMaker HyperPod cluster.
             :param instance_storage_configs: The configurations of additional storage specified to the instance group where the instance (node) is launched.
             :param on_start_deep_health_checks: A flag indicating whether deep health checks should be performed when the HyperPod cluster instance group is created or updated. Deep health checks are comprehensive, invasive tests that validate the health of the underlying hardware and infrastructure components.
-            :param override_vpc_config: When specified, overrides the subnet and security group configuration for a specific instance group.
+            :param override_vpc_config: Specifies an Amazon Virtual Private Cloud (VPC) that your SageMaker jobs, hosted models, and compute resources have access to. You can control access to and from your resources by configuring a VPC.
             :param threads_per_core: The number of threads per CPU core you specified under ``CreateCluster`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clusterinstancegroup.html
@@ -2038,7 +2038,9 @@ class CfnCluster(
         def override_vpc_config(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCluster.VpcConfigProperty"]]:
-            '''When specified, overrides the subnet and security group configuration for a specific instance group.
+            '''Specifies an Amazon Virtual Private Cloud (VPC) that your SageMaker jobs, hosted models, and compute resources have access to.
+
+            You can control access to and from your resources by configuring a VPC.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clusterinstancegroup.html#cfn-sagemaker-cluster-clusterinstancegroup-overridevpcconfig
             '''
@@ -2422,7 +2424,7 @@ class CfnClusterProps:
     ) -> None:
         '''Properties for defining a ``CfnCluster``.
 
-        :param instance_groups: The instance groups of the SageMaker HyperPod cluster.
+        :param instance_groups: The instance groups of the SageMaker HyperPod cluster. To delete an instance group, remove it from the array.
         :param cluster_name: The name of the SageMaker HyperPod cluster.
         :param node_recovery: Specifies whether to enable or disable the automatic node recovery feature of SageMaker HyperPod. Available values are ``Automatic`` for enabling and ``None`` for disabling.
         :param orchestrator: The orchestrator type for the SageMaker HyperPod cluster. Currently, ``'eks'`` is the only available option.
@@ -2510,6 +2512,8 @@ class CfnClusterProps:
     ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnCluster.ClusterInstanceGroupProperty]]]:
         '''The instance groups of the SageMaker HyperPod cluster.
 
+        To delete an instance group, remove it from the array.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-cluster.html#cfn-sagemaker-cluster-instancegroups
         '''
         result = self._values.get("instance_groups")
@@ -8286,7 +8290,7 @@ class CfnDomain(
         ) -> None:
             '''The KernelGateway app settings.
 
-            :param custom_images: A list of custom SageMaker AI images that are configured to run as a KernelGateway app.
+            :param custom_images: A list of custom SageMaker AI images that are configured to run as a KernelGateway app. The maximum number of custom images are as follows. - On a domain level: 200 - On a space level: 5 - On a user profile level: 5
             :param default_resource_spec: The default instance type and the Amazon Resource Name (ARN) of the default SageMaker AI image used by the KernelGateway app. .. epigraph:: The Amazon SageMaker AI Studio UI does not use the default instance type value set here. The default instance type set here is used when Apps are created using the AWS CLI or AWS CloudFormation and the instance type parameter value is not passed.
             :param lifecycle_config_arns: The Amazon Resource Name (ARN) of the Lifecycle Configurations attached to the the user profile or domain. .. epigraph:: To remove a Lifecycle Config, you must set ``LifecycleConfigArns`` to an empty list.
 
@@ -8335,6 +8339,12 @@ class CfnDomain(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnDomain.CustomImageProperty"]]]]:
             '''A list of custom SageMaker AI images that are configured to run as a KernelGateway app.
 
+            The maximum number of custom images are as follows.
+
+            - On a domain level: 200
+            - On a space level: 5
+            - On a user profile level: 5
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-domain-kernelgatewayappsettings.html#cfn-sagemaker-domain-kernelgatewayappsettings-customimages
             '''
             result = self._values.get("custom_images")
@@ -10984,6 +10994,7 @@ class CfnEndpointConfig(
                 accelerator_type="acceleratorType",
                 container_startup_health_check_timeout_in_seconds=123,
                 enable_ssm_access=False,
+                inference_ami_version="inferenceAmiVersion",
                 initial_instance_count=123,
                 initial_variant_weight=123,
                 instance_type="instanceType",
@@ -11087,6 +11098,7 @@ class CfnEndpointConfig(
                 accelerator_type="acceleratorType",
                 container_startup_health_check_timeout_in_seconds=123,
                 enable_ssm_access=False,
+                inference_ami_version="inferenceAmiVersion",
                 initial_instance_count=123,
                 initial_variant_weight=123,
                 instance_type="instanceType",
@@ -12924,6 +12936,7 @@ class CfnEndpointConfig(
             "accelerator_type": "acceleratorType",
             "container_startup_health_check_timeout_in_seconds": "containerStartupHealthCheckTimeoutInSeconds",
             "enable_ssm_access": "enableSsmAccess",
+            "inference_ami_version": "inferenceAmiVersion",
             "initial_instance_count": "initialInstanceCount",
             "initial_variant_weight": "initialVariantWeight",
             "instance_type": "instanceType",
@@ -12943,6 +12956,7 @@ class CfnEndpointConfig(
             accelerator_type: typing.Optional[builtins.str] = None,
             container_startup_health_check_timeout_in_seconds: typing.Optional[jsii.Number] = None,
             enable_ssm_access: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+            inference_ami_version: typing.Optional[builtins.str] = None,
             initial_instance_count: typing.Optional[jsii.Number] = None,
             initial_variant_weight: typing.Optional[jsii.Number] = None,
             instance_type: typing.Optional[builtins.str] = None,
@@ -12961,6 +12975,7 @@ class CfnEndpointConfig(
             :param accelerator_type: The size of the Elastic Inference (EI) instance to use for the production variant. EI instances provide on-demand GPU computing for inference. For more information, see `Using Elastic Inference in Amazon SageMaker <https://docs.aws.amazon.com/sagemaker/latest/dg/ei.html>`_ . For more information, see `Using Elastic Inference in Amazon SageMaker <https://docs.aws.amazon.com/sagemaker/latest/dg/ei.html>`_ .
             :param container_startup_health_check_timeout_in_seconds: The timeout value, in seconds, for your inference container to pass health check by SageMaker Hosting. For more information about health check, see `How Your Container Should Respond to Health Check (Ping) Requests <https://docs.aws.amazon.com/sagemaker/latest/dg/your-algorithms-inference-code.html#your-algorithms-inference-algo-ping-requests>`_ .
             :param enable_ssm_access: You can use this parameter to turn on native AWS Systems Manager (SSM) access for a production variant behind an endpoint. By default, SSM access is disabled for all production variants behind an endpoint. You can turn on or turn off SSM access for a production variant behind an existing endpoint by creating a new endpoint configuration and calling ``UpdateEndpoint`` .
+            :param inference_ami_version: 
             :param initial_instance_count: Number of instances to launch initially.
             :param initial_variant_weight: Determines initial traffic distribution among all of the models that you specify in the endpoint configuration. The traffic to a production variant is determined by the ratio of the ``VariantWeight`` to the sum of all ``VariantWeight`` values across all ProductionVariants. If unspecified, it defaults to 1.0.
             :param instance_type: The ML compute instance type.
@@ -12987,6 +13002,7 @@ class CfnEndpointConfig(
                     accelerator_type="acceleratorType",
                     container_startup_health_check_timeout_in_seconds=123,
                     enable_ssm_access=False,
+                    inference_ami_version="inferenceAmiVersion",
                     initial_instance_count=123,
                     initial_variant_weight=123,
                     instance_type="instanceType",
@@ -13016,6 +13032,7 @@ class CfnEndpointConfig(
                 check_type(argname="argument accelerator_type", value=accelerator_type, expected_type=type_hints["accelerator_type"])
                 check_type(argname="argument container_startup_health_check_timeout_in_seconds", value=container_startup_health_check_timeout_in_seconds, expected_type=type_hints["container_startup_health_check_timeout_in_seconds"])
                 check_type(argname="argument enable_ssm_access", value=enable_ssm_access, expected_type=type_hints["enable_ssm_access"])
+                check_type(argname="argument inference_ami_version", value=inference_ami_version, expected_type=type_hints["inference_ami_version"])
                 check_type(argname="argument initial_instance_count", value=initial_instance_count, expected_type=type_hints["initial_instance_count"])
                 check_type(argname="argument initial_variant_weight", value=initial_variant_weight, expected_type=type_hints["initial_variant_weight"])
                 check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
@@ -13034,6 +13051,8 @@ class CfnEndpointConfig(
                 self._values["container_startup_health_check_timeout_in_seconds"] = container_startup_health_check_timeout_in_seconds
             if enable_ssm_access is not None:
                 self._values["enable_ssm_access"] = enable_ssm_access
+            if inference_ami_version is not None:
+                self._values["inference_ami_version"] = inference_ami_version
             if initial_instance_count is not None:
                 self._values["initial_instance_count"] = initial_instance_count
             if initial_variant_weight is not None:
@@ -13100,6 +13119,14 @@ class CfnEndpointConfig(
             result = self._values.get("enable_ssm_access")
             return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
+        @builtins.property
+        def inference_ami_version(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-endpointconfig-productionvariant.html#cfn-sagemaker-endpointconfig-productionvariant-inferenceamiversion
+            '''
+            result = self._values.get("inference_ami_version")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         @builtins.property
         def initial_instance_count(self) -> typing.Optional[jsii.Number]:
             '''Number of instances to launch initially.
@@ -13491,6 +13518,7 @@ class CfnEndpointConfigProps:
                     accelerator_type="acceleratorType",
                     container_startup_health_check_timeout_in_seconds=123,
                     enable_ssm_access=False,
+                    inference_ami_version="inferenceAmiVersion",
                     initial_instance_count=123,
                     initial_variant_weight=123,
                     instance_type="instanceType",
@@ -13594,6 +13622,7 @@ class CfnEndpointConfigProps:
                     accelerator_type="acceleratorType",
                     container_startup_health_check_timeout_in_seconds=123,
                     enable_ssm_access=False,
+                    inference_ami_version="inferenceAmiVersion",
                     initial_instance_count=123,
                     initial_variant_weight=123,
                     instance_type="instanceType",
@@ -19884,8 +19913,11 @@ class CfnModel(
     )
     class HubAccessConfigProperty:
         def __init__(self, *, hub_content_arn: builtins.str) -> None:
-            '''
-            :param hub_content_arn: 
+            '''The configuration for a private hub model reference that points to a public SageMaker JumpStart model.
+
+            For more information about private hubs, see `Private curated hubs for foundation model access control in JumpStart <https://docs.aws.amazon.com/sagemaker/latest/dg/jumpstart-curated-hubs.html>`_ .
+
+            :param hub_content_arn: The ARN of your private model hub content. This should be a ``ModelReference`` resource type that points to a SageMaker JumpStart public hub model.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-model-hubaccessconfig.html
             :exampleMetadata: fixture=_generated
@@ -19909,7 +19941,10 @@ class CfnModel(
 
         @builtins.property
         def hub_content_arn(self) -> builtins.str:
-            '''
+            '''The ARN of your private model hub content.
+
+            This should be a ``ModelReference`` resource type that points to a SageMaker JumpStart public hub model.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-model-hubaccessconfig.html#cfn-sagemaker-model-hubaccessconfig-hubcontentarn
             '''
             result = self._values.get("hub_content_arn")
@@ -20349,7 +20384,7 @@ class CfnModel(
             :param compression_type: 
             :param s3_data_type: If you choose ``S3Prefix`` , ``S3Uri`` identifies a key name prefix. SageMaker uses all objects that match the specified key name prefix for model training. If you choose ``ManifestFile`` , ``S3Uri`` identifies an object that is a manifest file containing a list of object keys that you want SageMaker to use for model training. If you choose ``AugmentedManifestFile`` , ``S3Uri`` identifies an object that is an augmented manifest file in JSON lines format. This file contains the data you want to use for model training. ``AugmentedManifestFile`` can only be used if the Channel's input mode is ``Pipe`` .
             :param s3_uri: Depending on the value specified for the ``S3DataType`` , identifies either a key name prefix or a manifest. For example: - A key name prefix might look like this: ``s3://bucketname/exampleprefix/`` - A manifest might look like this: ``s3://bucketname/example.manifest`` A manifest is an S3 object which is a JSON file consisting of an array of elements. The first element is a prefix which is followed by one or more suffixes. SageMaker appends the suffix elements to the prefix to get a full set of ``S3Uri`` . Note that the prefix must be a valid non-empty ``S3Uri`` that precludes users from specifying a manifest whose individual ``S3Uri`` is sourced from different S3 buckets. The following code example shows a valid manifest format: ``[ {"prefix": "s3://customer_bucket/some/prefix/"},`` ``"relative/path/to/custdata-1",`` ``"relative/path/custdata-2",`` ``...`` ``"relative/path/custdata-N"`` ``]`` This JSON is equivalent to the following ``S3Uri`` list: ``s3://customer_bucket/some/prefix/relative/path/to/custdata-1`` ``s3://customer_bucket/some/prefix/relative/path/custdata-2`` ``...`` ``s3://customer_bucket/some/prefix/relative/path/custdata-N`` The complete set of ``S3Uri`` in this manifest is the input data for the channel for this data source. The object that each ``S3Uri`` points to must be readable by the IAM role that SageMaker uses to perform tasks on your behalf. Your input bucket must be located in same AWS region as your training job.
-            :param hub_access_config: 
+            :param hub_access_config: The configuration for a private hub model reference that points to a SageMaker JumpStart public hub model.
             :param model_access_config: 
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-model-s3datasource.html
@@ -20466,7 +20501,8 @@ class CfnModel(
         def hub_access_config(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnModel.HubAccessConfigProperty"]]:
-            '''
+            '''The configuration for a private hub model reference that points to a SageMaker JumpStart public hub model.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-model-s3datasource.html#cfn-sagemaker-model-s3datasource-hubaccessconfig
             '''
             result = self._values.get("hub_access_config")
@@ -28793,7 +28829,14 @@ class CfnModelPackage(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_sagemaker.CfnModelPackage",
 ):
-    '''A versioned model that can be deployed for SageMaker inference.
+    '''A container for your trained model that can be deployed for SageMaker inference.
+
+    This can include inference code, artifacts, and metadata. The model package type can be one of the following.
+
+    - Versioned model: A part of a model package group in Model Registry.
+    - Unversioned model: Not part of a model package group and used in AWS Marketplace.
+
+    For more information, see ```CreateModelPackage`` <https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelPackage.html>`_ .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-modelpackage.html
     :cloudformationResource: AWS::SageMaker::ModelPackage
@@ -29206,7 +29249,7 @@ class CfnModelPackage(
         :param model_metrics: Metrics for the model.
         :param model_package_description: The description of the model package.
         :param model_package_group_name: The model group to which the model belongs.
-        :param model_package_name: The name of the model.
+        :param model_package_name: The name of the model package. The name can be as follows:. - For a versioned model, the name is automatically generated by SageMaker Model Registry and follows the format ' ``ModelPackageGroupName/ModelPackageVersion`` '. - For an unversioned model, you must provide the name.
         :param model_package_status_details: Specifies the validation and image scan statuses of the model package.
         :param model_package_version: The version number of a versioned model.
         :param sample_payload_url: The Amazon Simple Storage Service path where the sample payload are stored. This path must point to a single gzip compressed tar archive (.tar.gz suffix).
@@ -29587,7 +29630,10 @@ class CfnModelPackage(
     @builtins.property
     @jsii.member(jsii_name="modelPackageName")
     def model_package_name(self) -> typing.Optional[builtins.str]:
-        '''The name of the model.'''
+        '''The name of the model package.
+
+        The name can be as follows:.
+        '''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "modelPackageName"))
 
     @model_package_name.setter
@@ -33432,7 +33478,7 @@ class CfnModelPackageGroup(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_sagemaker.CfnModelPackageGroup",
 ):
-    '''A group of versioned models in the model registry.
+    '''A group of versioned models in the Model Registry.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-modelpackagegroup.html
     :cloudformationResource: AWS::SageMaker::ModelPackageGroup
@@ -33815,7 +33861,7 @@ class CfnModelPackageProps:
         :param model_metrics: Metrics for the model.
         :param model_package_description: The description of the model package.
         :param model_package_group_name: The model group to which the model belongs.
-        :param model_package_name: The name of the model.
+        :param model_package_name: The name of the model package. The name can be as follows:. - For a versioned model, the name is automatically generated by SageMaker Model Registry and follows the format ' ``ModelPackageGroupName/ModelPackageVersion`` '. - For an unversioned model, you must provide the name.
         :param model_package_status_details: Specifies the validation and image scan statuses of the model package.
         :param model_package_version: The version number of a versioned model.
         :param sample_payload_url: The Amazon Simple Storage Service path where the sample payload are stored. This path must point to a single gzip compressed tar archive (.tar.gz suffix).
@@ -34443,7 +34489,10 @@ class CfnModelPackageProps:
 
     @builtins.property
     def model_package_name(self) -> typing.Optional[builtins.str]:
-        '''The name of the model.
+        '''The name of the model package. The name can be as follows:.
+
+        - For a versioned model, the name is automatically generated by SageMaker Model Registry and follows the format ' ``ModelPackageGroupName/ModelPackageVersion`` '.
+        - For an unversioned model, you must provide the name.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-modelpackage.html#cfn-sagemaker-modelpackage-modelpackagename
         '''
@@ -44224,7 +44273,7 @@ class CfnSpace(
         ) -> None:
             '''The KernelGateway app settings.
 
-            :param custom_images: A list of custom SageMaker AI images that are configured to run as a KernelGateway app.
+            :param custom_images: A list of custom SageMaker AI images that are configured to run as a KernelGateway app. The maximum number of custom images are as follows. - On a domain level: 200 - On a space level: 5 - On a user profile level: 5
             :param default_resource_spec: The default instance type and the Amazon Resource Name (ARN) of the default SageMaker AI image used by the KernelGateway app. .. epigraph:: The Amazon SageMaker AI Studio UI does not use the default instance type value set here. The default instance type set here is used when Apps are created using the AWS CLI or AWS CloudFormation and the instance type parameter value is not passed.
             :param lifecycle_config_arns: The Amazon Resource Name (ARN) of the Lifecycle Configurations attached to the the user profile or domain. .. epigraph:: To remove a Lifecycle Config, you must set ``LifecycleConfigArns`` to an empty list.
 
@@ -44273,6 +44322,12 @@ class CfnSpace(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnSpace.CustomImageProperty"]]]]:
             '''A list of custom SageMaker AI images that are configured to run as a KernelGateway app.
 
+            The maximum number of custom images are as follows.
+
+            - On a domain level: 200
+            - On a space level: 5
+            - On a user profile level: 5
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-space-kernelgatewayappsettings.html#cfn-sagemaker-space-kernelgatewayappsettings-customimages
             '''
             result = self._values.get("custom_images")
@@ -47131,7 +47186,7 @@ class CfnUserProfile(
         ) -> None:
             '''The KernelGateway app settings.
 
-            :param custom_images: A list of custom SageMaker AI images that are configured to run as a KernelGateway app.
+            :param custom_images: A list of custom SageMaker AI images that are configured to run as a KernelGateway app. The maximum number of custom images are as follows. - On a domain level: 200 - On a space level: 5 - On a user profile level: 5
             :param default_resource_spec: The default instance type and the Amazon Resource Name (ARN) of the default SageMaker AI image used by the KernelGateway app. .. epigraph:: The Amazon SageMaker AI Studio UI does not use the default instance type value set here. The default instance type set here is used when Apps are created using the AWS CLI or AWS CloudFormation and the instance type parameter value is not passed.
             :param lifecycle_config_arns: The Amazon Resource Name (ARN) of the Lifecycle Configurations attached to the the user profile or domain. .. epigraph:: To remove a Lifecycle Config, you must set ``LifecycleConfigArns`` to an empty list.
 
@@ -47180,6 +47235,12 @@ class CfnUserProfile(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnUserProfile.CustomImageProperty"]]]]:
             '''A list of custom SageMaker AI images that are configured to run as a KernelGateway app.
 
+            The maximum number of custom images are as follows.
+
+            - On a domain level: 200
+            - On a space level: 5
+            - On a user profile level: 5
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-userprofile-kernelgatewayappsettings.html#cfn-sagemaker-userprofile-kernelgatewayappsettings-customimages
             '''
             result = self._values.get("custom_images")
@@ -50686,6 +50747,7 @@ def _typecheckingstub__685c22aefe4bd12e237f4e6f239c6de7809e228c81d2604127d6824fa
     accelerator_type: typing.Optional[builtins.str] = None,
     container_startup_health_check_timeout_in_seconds: typing.Optional[jsii.Number] = None,
     enable_ssm_access: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    inference_ami_version: typing.Optional[builtins.str] = None,
     initial_instance_count: typing.Optional[jsii.Number] = None,
     initial_variant_weight: typing.Optional[jsii.Number] = None,
     instance_type: typing.Optional[builtins.str] = None,

aws_cdk/aws_securitylake/__init__.py

@@ -355,6 +355,9 @@ class CfnDataLake(
     You can enable Security Lake in AWS Regions with customized settings before enabling log collection in Regions. To specify particular Regions, configure these Regions using the ``configurations`` parameter. If you have already enabled Security Lake in a Region when you call this command, the command will update the Region if you provide new configuration parameters. If you have not already enabled Security Lake in the Region when you call this API, it will set up the data lake in the Region with the specified configurations.
 
     When you enable Security Lake , it starts ingesting security data after the ``CreateAwsLogSource`` call. This includes ingesting security data from sources, storing data, and making data accessible to subscribers. Security Lake also enables all the existing settings and resources that it stores or maintains for your AWS account in the current Region, including security log and event data. For more information, see the `Amazon Security Lake User Guide <https://docs.aws.amazon.com//security-lake/latest/userguide/what-is-security-lake.html>`_ .
+    .. epigraph::
+
+       If you use this template to create multiple data lakes in different AWS Regions , and more than one of your data lakes include an `AWS::SecurityLake::AwsLogSource <https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-awslogsource.html>`_ resource, then you must deploy these data lakes sequentially. This is required because data lakes operate globally, and ``AwsLogSource`` resources must be deployed one at a time.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-datalake.html
     :cloudformationResource: AWS::SecurityLake::DataLake

aws_cdk/aws_sns/__init__.py

@@ -2798,6 +2798,19 @@ class ITopic(
         '''
         ...
 
+    @builtins.property
+    @jsii.member(jsii_name="masterKey")
+    def master_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''A KMS Key, either managed by this CDK app, or imported.
+
+        This property applies only to server-side encryption.
+
+        :default: None
+
+        :see: https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html
+        '''
+        ...
+
     @jsii.member(jsii_name="addSubscription")
     def add_subscription(self, subscription: "ITopicSubscription") -> "Subscription":
         '''Subscribe some endpoint to this topic.
@@ -3204,6 +3217,19 @@ class _ITopicProxy(
         '''
         return typing.cast(builtins.str, jsii.get(self, "topicName"))
 
+    @builtins.property
+    @jsii.member(jsii_name="masterKey")
+    def master_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''A KMS Key, either managed by this CDK app, or imported.
+
+        This property applies only to server-side encryption.
+
+        :default: None
+
+        :see: https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html
+        '''
+        return typing.cast(typing.Optional[_IKey_5f11635f], jsii.get(self, "masterKey"))
+
     @jsii.member(jsii_name="addSubscription")
     def add_subscription(self, subscription: "ITopicSubscription") -> "Subscription":
         '''Subscribe some endpoint to this topic.
@@ -5058,6 +5084,7 @@ class ThrottlePolicy:
     name_mapping={
         "topic_arn": "topicArn",
         "content_based_deduplication": "contentBasedDeduplication",
+        "key_arn": "keyArn",
     },
 )
 class TopicAttributes:
@@ -5066,11 +5093,13 @@ class TopicAttributes:
         *,
         topic_arn: builtins.str,
         content_based_deduplication: typing.Optional[builtins.bool] = None,
+        key_arn: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Represents an SNS topic defined outside of this stack.
 
         :param topic_arn: The ARN of the SNS topic.
         :param content_based_deduplication: Whether content-based deduplication is enabled. Only applicable for FIFO topics. Default: false
+        :param key_arn: KMS encryption key, if this topic is server-side encrypted by a KMS key. Default: - None
 
         :exampleMetadata: fixture=_generated
 
@@ -5084,18 +5113,22 @@ class TopicAttributes:
                 topic_arn="topicArn",
             
                 # the properties below are optional
-                content_based_deduplication=False
+                content_based_deduplication=False,
+                key_arn="keyArn"
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b8362e16cf38fb93899cf1443c05ea87f926cf385d45c4f25eb95067bff9642a)
             check_type(argname="argument topic_arn", value=topic_arn, expected_type=type_hints["topic_arn"])
             check_type(argname="argument content_based_deduplication", value=content_based_deduplication, expected_type=type_hints["content_based_deduplication"])
+            check_type(argname="argument key_arn", value=key_arn, expected_type=type_hints["key_arn"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "topic_arn": topic_arn,
         }
         if content_based_deduplication is not None:
             self._values["content_based_deduplication"] = content_based_deduplication
+        if key_arn is not None:
+            self._values["key_arn"] = key_arn
 
     @builtins.property
     def topic_arn(self) -> builtins.str:
@@ -5115,6 +5148,15 @@ class TopicAttributes:
         result = self._values.get("content_based_deduplication")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def key_arn(self) -> typing.Optional[builtins.str]:
+        '''KMS encryption key, if this topic is server-side encrypted by a KMS key.
+
+        :default: - None
+        '''
+        result = self._values.get("key_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -5746,6 +5788,16 @@ class TopicBase(
         '''The name of the topic.'''
         ...
 
+    @builtins.property
+    @jsii.member(jsii_name="masterKey")
+    @abc.abstractmethod
+    def master_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''A KMS Key, either managed by this CDK app, or imported.
+
+        This property applies only to server-side encryption.
+        '''
+        ...
+
     @builtins.property
     @jsii.member(jsii_name="enforceSSL")
     def _enforce_ssl(self) -> typing.Optional[builtins.bool]:
@@ -5800,6 +5852,15 @@ class _TopicBaseProxy(
         '''The name of the topic.'''
         return typing.cast(builtins.str, jsii.get(self, "topicName"))
 
+    @builtins.property
+    @jsii.member(jsii_name="masterKey")
+    def master_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''A KMS Key, either managed by this CDK app, or imported.
+
+        This property applies only to server-side encryption.
+        '''
+        return typing.cast(typing.Optional[_IKey_5f11635f], jsii.get(self, "masterKey"))
+
 # Adding a "__jsii_proxy_class__(): typing.Type" function to the abstract class
 typing.cast(typing.Any, TopicBase).__jsii_proxy_class__ = lambda : _TopicBaseProxy
 
@@ -6673,6 +6734,7 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
         *,
         topic_arn: builtins.str,
         content_based_deduplication: typing.Optional[builtins.bool] = None,
+        key_arn: typing.Optional[builtins.str] = None,
     ) -> ITopic:
         '''Import an existing SNS topic provided a topic attributes.
 
@@ -6680,6 +6742,7 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
         :param id: The construct's name.
         :param topic_arn: The ARN of the SNS topic.
         :param content_based_deduplication: Whether content-based deduplication is enabled. Only applicable for FIFO topics. Default: false
+        :param key_arn: KMS encryption key, if this topic is server-side encrypted by a KMS key. Default: - None
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3116994a7284b362cb667f2b74c1b4035605be5e3339d6c2782787473f6131f6)
@@ -6688,6 +6751,7 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
         attrs = TopicAttributes(
             topic_arn=topic_arn,
             content_based_deduplication=content_based_deduplication,
+            key_arn=key_arn,
         )
 
         return typing.cast(ITopic, jsii.sinvoke(cls, "fromTopicAttributes", [scope, id, attrs]))
@@ -6753,6 +6817,15 @@ class Topic(TopicBase, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_sns.T
         '''The name of the topic.'''
         return typing.cast(builtins.str, jsii.get(self, "topicName"))
 
+    @builtins.property
+    @jsii.member(jsii_name="masterKey")
+    def master_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''A KMS Key, either managed by this CDK app, or imported.
+
+        This property applies only to server-side encryption.
+        '''
+        return typing.cast(typing.Optional[_IKey_5f11635f], jsii.get(self, "masterKey"))
+
 
 __all__ = [
     "BackoffFunction",
@@ -7344,6 +7417,7 @@ def _typecheckingstub__b8362e16cf38fb93899cf1443c05ea87f926cf385d45c4f25eb95067b
     *,
     topic_arn: builtins.str,
     content_based_deduplication: typing.Optional[builtins.bool] = None,
+    key_arn: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -7513,6 +7587,7 @@ def _typecheckingstub__3116994a7284b362cb667f2b74c1b4035605be5e3339d6c2782787473
     *,
     topic_arn: builtins.str,
     content_based_deduplication: typing.Optional[builtins.bool] = None,
+    key_arn: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass

aws_cdk/aws_synthetics/__init__.py

@@ -1296,6 +1296,8 @@ class CfnCanary(
 
     Canaries are scripts that monitor your endpoints and APIs from the outside-in. Canaries help you check the availability and latency of your web services and troubleshoot anomalies by investigating load time data, screenshots of the UI, logs, and metrics. You can set up a canary to run continuously or just once.
 
+    Canaries are automated scripts that run at specified intervals against an endpoint. They include Python or Node.js code to create a Lambda function. This code needs to be packaged in a certain way, depending on the language. For more information, see `Writing a canary script <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries_WritingCanary.html>`_ .
+
     To create canaries, you must have the ``CloudWatchSyntheticsFullAccess`` policy. If you are creating a new IAM role for the canary, you also need the the ``iam:CreateRole`` , ``iam:CreatePolicy`` and ``iam:AttachRolePolicy`` permissions. For more information, see `Necessary Roles and Permissions <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries_Roles>`_ .
 
     Do not include secrets or proprietary information in your canary names. The canary name makes up part of the Amazon Resource Name (ARN) for the canary, and the ARN is included in outbound calls over the internet. For more information, see `Security Considerations for Synthetics Canaries <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/servicelens_canaries_security.html>`_ .