aws-cdk-lib 2.182.0__py3-none-any.whl → 2.183.0__py3-none-any.whl

aws_cdk/aws_rds/__init__.py

@@ -8970,7 +8970,7 @@ class CfnDBInstance(
         :param db_parameter_group_name: The name of an existing DB parameter group or a reference to an `AWS::RDS::DBParameterGroup <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbparametergroup.html>`_ resource created in the template. To list all of the available DB parameter group names, use the following command: ``aws rds describe-db-parameter-groups --query "DBParameterGroups[].DBParameterGroupName" --output text`` .. epigraph:: If any of the data members of the referenced parameter group are changed during an update, the DB instance might need to be restarted, which causes some interruption. If the parameter group contains static parameters, whether they were changed or not, an update triggers a reboot. If you don't specify a value for ``DBParameterGroupName`` property, the default DB parameter group for the specified engine and engine version is used.
         :param db_security_groups: A list of the DB security groups to assign to the DB instance. The list can include both the name of existing DB security groups or references to AWS::RDS::DBSecurityGroup resources created in the template. If you set DBSecurityGroups, you must not set VPCSecurityGroups, and vice versa. Also, note that the DBSecurityGroups property exists only for backwards compatibility with older regions and is no longer recommended for providing security information to an RDS DB instance. Instead, use VPCSecurityGroups. .. epigraph:: If you specify this property, AWS CloudFormation sends only the following properties (if specified) to Amazon RDS during create operations: - ``AllocatedStorage`` - ``AutoMinorVersionUpgrade`` - ``AvailabilityZone`` - ``BackupRetentionPeriod`` - ``CharacterSetName`` - ``DBInstanceClass`` - ``DBName`` - ``DBParameterGroupName`` - ``DBSecurityGroups`` - ``DBSubnetGroupName`` - ``Engine`` - ``EngineVersion`` - ``Iops`` - ``LicenseModel`` - ``MasterUsername`` - ``MasterUserPassword`` - ``MultiAZ`` - ``OptionGroupName`` - ``PreferredBackupWindow`` - ``PreferredMaintenanceWindow`` All other properties are ignored. Specify a virtual private cloud (VPC) security group if you want to submit other properties, such as ``StorageType`` , ``StorageEncrypted`` , or ``KmsKeyId`` . If you're already using the ``DBSecurityGroups`` property, you can't use these other properties by updating your DB instance to use a VPC security group. You must recreate the DB instance.
         :param db_snapshot_identifier: The name or Amazon Resource Name (ARN) of the DB snapshot that's used to restore the DB instance. If you're restoring from a shared manual DB snapshot, you must specify the ARN of the snapshot. By specifying this property, you can create a DB instance from the specified DB snapshot. If the ``DBSnapshotIdentifier`` property is an empty string or the ``AWS::RDS::DBInstance`` declaration has no ``DBSnapshotIdentifier`` property, AWS CloudFormation creates a new database. If the property contains a value (other than an empty string), AWS CloudFormation creates a database from the specified snapshot. If a snapshot with the specified name doesn't exist, AWS CloudFormation can't create the database and it rolls back the stack. Some DB instance properties aren't valid when you restore from a snapshot, such as the ``MasterUsername`` and ``MasterUserPassword`` properties, and the point-in-time recovery properties ``RestoreTime`` and ``UseLatestRestorableTime`` . For information about the properties that you can specify, see the ```RestoreDBInstanceFromDBSnapshot`` <https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RestoreDBInstanceFromDBSnapshot.html>`_ action in the *Amazon RDS API Reference* . After you restore a DB instance with a ``DBSnapshotIdentifier`` property, you must specify the same ``DBSnapshotIdentifier`` property for any future updates to the DB instance. When you specify this property for an update, the DB instance is not restored from the DB snapshot again, and the data in the database is not changed. However, if you don't specify the ``DBSnapshotIdentifier`` property, an empty DB instance is created, and the original DB instance is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB instance is restored from the specified ``DBSnapshotIdentifier`` property, and the original DB instance is deleted. If you specify the ``DBSnapshotIdentifier`` property to restore a DB instance (as opposed to specifying it for DB instance updates), then don't specify the following properties: - ``CharacterSetName`` - ``DBClusterIdentifier`` - ``DBName`` - ``KmsKeyId`` - ``MasterUsername`` - ``MasterUserPassword`` - ``PromotionTier`` - ``SourceDBInstanceIdentifier`` - ``SourceRegion`` - ``StorageEncrypted`` (for an unencrypted snapshot) - ``Timezone`` *Amazon Aurora* Not applicable. Snapshot restore is managed by the DB cluster.
-        :param db_subnet_group_name: A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. If there's no DB subnet group, then the DB instance isn't a VPC DB instance. For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting.
+        :param db_subnet_group_name: A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. If you don't specify a DB subnet group, RDS uses the default DB subnet group if one exists. If a default DB subnet group does not exist, and you don't specify a ``DBSubnetGroupName`` , the DB instance fails to launch. For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting.
         :param db_system_id: The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files. In this context, the term "Oracle database instance" refers exclusively to the system global area (SGA) and Oracle background processes. If you don't specify a SID, the value defaults to ``RDSCDB`` . The Oracle SID is also the name of your CDB.
         :param dedicated_log_volume: Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
         :param delete_automated_backups: A value that indicates whether to remove automated backups immediately after the DB instance is deleted. This parameter isn't case-sensitive. The default is to remove automated backups immediately after the DB instance is deleted. *Amazon Aurora* Not applicable. When you delete a DB cluster, all automated backups for that DB cluster are deleted and can't be recovered. Manual DB cluster snapshots of the DB cluster are not deleted.
@@ -11042,7 +11042,7 @@ class CfnDBInstanceProps:
         :param db_parameter_group_name: The name of an existing DB parameter group or a reference to an `AWS::RDS::DBParameterGroup <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbparametergroup.html>`_ resource created in the template. To list all of the available DB parameter group names, use the following command: ``aws rds describe-db-parameter-groups --query "DBParameterGroups[].DBParameterGroupName" --output text`` .. epigraph:: If any of the data members of the referenced parameter group are changed during an update, the DB instance might need to be restarted, which causes some interruption. If the parameter group contains static parameters, whether they were changed or not, an update triggers a reboot. If you don't specify a value for ``DBParameterGroupName`` property, the default DB parameter group for the specified engine and engine version is used.
         :param db_security_groups: A list of the DB security groups to assign to the DB instance. The list can include both the name of existing DB security groups or references to AWS::RDS::DBSecurityGroup resources created in the template. If you set DBSecurityGroups, you must not set VPCSecurityGroups, and vice versa. Also, note that the DBSecurityGroups property exists only for backwards compatibility with older regions and is no longer recommended for providing security information to an RDS DB instance. Instead, use VPCSecurityGroups. .. epigraph:: If you specify this property, AWS CloudFormation sends only the following properties (if specified) to Amazon RDS during create operations: - ``AllocatedStorage`` - ``AutoMinorVersionUpgrade`` - ``AvailabilityZone`` - ``BackupRetentionPeriod`` - ``CharacterSetName`` - ``DBInstanceClass`` - ``DBName`` - ``DBParameterGroupName`` - ``DBSecurityGroups`` - ``DBSubnetGroupName`` - ``Engine`` - ``EngineVersion`` - ``Iops`` - ``LicenseModel`` - ``MasterUsername`` - ``MasterUserPassword`` - ``MultiAZ`` - ``OptionGroupName`` - ``PreferredBackupWindow`` - ``PreferredMaintenanceWindow`` All other properties are ignored. Specify a virtual private cloud (VPC) security group if you want to submit other properties, such as ``StorageType`` , ``StorageEncrypted`` , or ``KmsKeyId`` . If you're already using the ``DBSecurityGroups`` property, you can't use these other properties by updating your DB instance to use a VPC security group. You must recreate the DB instance.
         :param db_snapshot_identifier: The name or Amazon Resource Name (ARN) of the DB snapshot that's used to restore the DB instance. If you're restoring from a shared manual DB snapshot, you must specify the ARN of the snapshot. By specifying this property, you can create a DB instance from the specified DB snapshot. If the ``DBSnapshotIdentifier`` property is an empty string or the ``AWS::RDS::DBInstance`` declaration has no ``DBSnapshotIdentifier`` property, AWS CloudFormation creates a new database. If the property contains a value (other than an empty string), AWS CloudFormation creates a database from the specified snapshot. If a snapshot with the specified name doesn't exist, AWS CloudFormation can't create the database and it rolls back the stack. Some DB instance properties aren't valid when you restore from a snapshot, such as the ``MasterUsername`` and ``MasterUserPassword`` properties, and the point-in-time recovery properties ``RestoreTime`` and ``UseLatestRestorableTime`` . For information about the properties that you can specify, see the ```RestoreDBInstanceFromDBSnapshot`` <https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RestoreDBInstanceFromDBSnapshot.html>`_ action in the *Amazon RDS API Reference* . After you restore a DB instance with a ``DBSnapshotIdentifier`` property, you must specify the same ``DBSnapshotIdentifier`` property for any future updates to the DB instance. When you specify this property for an update, the DB instance is not restored from the DB snapshot again, and the data in the database is not changed. However, if you don't specify the ``DBSnapshotIdentifier`` property, an empty DB instance is created, and the original DB instance is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB instance is restored from the specified ``DBSnapshotIdentifier`` property, and the original DB instance is deleted. If you specify the ``DBSnapshotIdentifier`` property to restore a DB instance (as opposed to specifying it for DB instance updates), then don't specify the following properties: - ``CharacterSetName`` - ``DBClusterIdentifier`` - ``DBName`` - ``KmsKeyId`` - ``MasterUsername`` - ``MasterUserPassword`` - ``PromotionTier`` - ``SourceDBInstanceIdentifier`` - ``SourceRegion`` - ``StorageEncrypted`` (for an unencrypted snapshot) - ``Timezone`` *Amazon Aurora* Not applicable. Snapshot restore is managed by the DB cluster.
-        :param db_subnet_group_name: A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. If there's no DB subnet group, then the DB instance isn't a VPC DB instance. For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting.
+        :param db_subnet_group_name: A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. If you don't specify a DB subnet group, RDS uses the default DB subnet group if one exists. If a default DB subnet group does not exist, and you don't specify a ``DBSubnetGroupName`` , the DB instance fails to launch. For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting.
         :param db_system_id: The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files. In this context, the term "Oracle database instance" refers exclusively to the system global area (SGA) and Oracle background processes. If you don't specify a SID, the value defaults to ``RDSCDB`` . The Oracle SID is also the name of your CDB.
         :param dedicated_log_volume: Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
         :param delete_automated_backups: A value that indicates whether to remove automated backups immediately after the DB instance is deleted. This parameter isn't case-sensitive. The default is to remove automated backups immediately after the DB instance is deleted. *Amazon Aurora* Not applicable. When you delete a DB cluster, all automated backups for that DB cluster are deleted and can't be recovered. Manual DB cluster snapshots of the DB cluster are not deleted.
@@ -11963,7 +11963,7 @@ class CfnDBInstanceProps:
 
         If you update this value, the new subnet group must be a subnet group in a new VPC.
 
-        If there's no DB subnet group, then the DB instance isn't a VPC DB instance.
+        If you don't specify a DB subnet group, RDS uses the default DB subnet group if one exists. If a default DB subnet group does not exist, and you don't specify a ``DBSubnetGroupName`` , the DB instance fails to launch.
 
         For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* .
 
@@ -14861,7 +14861,7 @@ class CfnDBProxyTargetGroup(
             '''Specifies the settings that control the size and behavior of the connection pool associated with a ``DBProxyTargetGroup`` .
 
             :param connection_borrow_timeout: The number of seconds for a proxy to wait for a connection to become available in the connection pool. This setting only applies when the proxy has opened its maximum number of connections and all connections are busy with client sessions. Default: ``120`` Constraints: - Must be between 0 and 3600.
-            :param init_query: One or more SQL statements for the proxy to run when opening each new database connection. Typically used with ``SET`` statements to make sure that each connection has identical settings such as time zone and character set. For multiple statements, use semicolons as the separator. You can also include multiple variables in a single ``SET`` statement, such as ``SET x=1, y=2`` . Default: no initialization query
+            :param init_query: Add an initialization query, or modify the current one. You can specify one or more SQL statements for the proxy to run when opening each new database connection. The setting is typically used with ``SET`` statements to make sure that each connection has identical settings. Make sure that the query you add is valid. To include multiple variables in a single ``SET`` statement, use comma separators. For example: ``SET variable1=value1, variable2=value2`` For multiple statements, use semicolons as the separator. Default: no initialization query
             :param max_connections_percent: The maximum size of the connection pool for each target in a target group. The value is expressed as a percentage of the ``max_connections`` setting for the RDS DB instance or Aurora DB cluster used by the target group. If you specify ``MaxIdleConnectionsPercent`` , then you must also include a value for this parameter. Default: ``10`` for RDS for Microsoft SQL Server, and ``100`` for all other engines Constraints: - Must be between 1 and 100.
             :param max_idle_connections_percent: A value that controls how actively the proxy closes idle database connections in the connection pool. The value is expressed as a percentage of the ``max_connections`` setting for the RDS DB instance or Aurora DB cluster used by the target group. With a high value, the proxy leaves a high percentage of idle database connections open. A low value causes the proxy to close more idle connections and return them to the database. If you specify this parameter, then you must also include a value for ``MaxConnectionsPercent`` . Default: The default value is half of the value of ``MaxConnectionsPercent`` . For example, if ``MaxConnectionsPercent`` is 80, then the default value of ``MaxIdleConnectionsPercent`` is 40. If the value of ``MaxConnectionsPercent`` isn't specified, then for SQL Server, ``MaxIdleConnectionsPercent`` is ``5`` , and for all other engines, the default is ``50`` . Constraints: - Must be between 0 and the value of ``MaxConnectionsPercent`` .
             :param session_pinning_filters: Each item in the list represents a class of SQL operations that normally cause all later statements in a session using a proxy to be pinned to the same underlying database connection. Including an item in the list exempts that class of SQL operations from the pinning behavior. Default: no session pinning filters
@@ -14921,9 +14921,13 @@ class CfnDBProxyTargetGroup(
 
         @builtins.property
         def init_query(self) -> typing.Optional[builtins.str]:
-            '''One or more SQL statements for the proxy to run when opening each new database connection.
+            '''Add an initialization query, or modify the current one.
 
-            Typically used with ``SET`` statements to make sure that each connection has identical settings such as time zone and character set. For multiple statements, use semicolons as the separator. You can also include multiple variables in a single ``SET`` statement, such as ``SET x=1, y=2`` .
+            You can specify one or more SQL statements for the proxy to run when opening each new database connection. The setting is typically used with ``SET`` statements to make sure that each connection has identical settings. Make sure that the query you add is valid. To include multiple variables in a single ``SET`` statement, use comma separators.
+
+            For example: ``SET variable1=value1, variable2=value2``
+
+            For multiple statements, use semicolons as the separator.
 
             Default: no initialization query
 
@@ -31204,6 +31208,12 @@ class MariaDbEngineVersion(
         '''Version "10.11.10".'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_11_10"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_10_11_11")
+    def VER_10_11_11(cls) -> "MariaDbEngineVersion":
+        '''Version "10.11.11".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_11_11"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_10_11_4")
     def VER_10_11_4(cls) -> "MariaDbEngineVersion":
@@ -31809,6 +31819,12 @@ class MariaDbEngineVersion(
         '''Version "10.5.27".'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_5_27"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_10_5_28")
+    def VER_10_5_28(cls) -> "MariaDbEngineVersion":
+        '''Version "10.5.28".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_5_28"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_10_5_8")
     def VER_10_5_8(cls) -> "MariaDbEngineVersion":
@@ -31918,6 +31934,12 @@ class MariaDbEngineVersion(
         '''Version "10.6.20".'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_6_20"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_10_6_21")
+    def VER_10_6_21(cls) -> "MariaDbEngineVersion":
+        '''Version "10.6.21".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_6_21"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_10_6_5")
     def VER_10_6_5(cls) -> "MariaDbEngineVersion":
@@ -31963,6 +31985,12 @@ class MariaDbEngineVersion(
         '''Version "11.4.4".'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_11_4_4"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_11_4_5")
+    def VER_11_4_5(cls) -> "MariaDbEngineVersion":
+        '''Version "11.4.5".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_11_4_5"))
+
     @builtins.property
     @jsii.member(jsii_name="mariaDbFullVersion")
     def maria_db_full_version(self) -> builtins.str:
@@ -32419,6 +32447,18 @@ class MysqlEngineVersion(
         '''Version "5.7.44-rds.20240808".'''
         return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_5_7_44_RDS_20240808"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_5_7_44_RDS_20250103")
+    def VER_5_7_44_RDS_20250103(cls) -> "MysqlEngineVersion":
+        '''Version "5.7.44-rds.20250103".'''
+        return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_5_7_44_RDS_20250103"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_5_7_44_RDS_20250213")
+    def VER_5_7_44_RDS_20250213(cls) -> "MysqlEngineVersion":
+        '''Version "5.7.44-rds.20250213".'''
+        return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_5_7_44_RDS_20250213"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_8_0")
     def VER_8_0(cls) -> "MysqlEngineVersion":
@@ -32649,12 +32689,24 @@ class MysqlEngineVersion(
         '''Version "8.0.40".'''
         return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_0_40"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_8_0_41")
+    def VER_8_0_41(cls) -> "MysqlEngineVersion":
+        '''Version "8.0.41".'''
+        return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_0_41"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_8_4_3")
     def VER_8_4_3(cls) -> "MysqlEngineVersion":
         '''Version "8.4.3".'''
         return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_4_3"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_8_4_4")
+    def VER_8_4_4(cls) -> "MysqlEngineVersion":
+        '''Version "8.4.4".'''
+        return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_4_4"))
+
     @builtins.property
     @jsii.member(jsii_name="mysqlFullVersion")
     def mysql_full_version(self) -> builtins.str:
@@ -35677,19 +35729,34 @@ class PostgresEngineVersion(
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_13_11")
     def VER_13_11(cls) -> "PostgresEngineVersion":
-        '''Version "13.11".'''
+        '''(deprecated) Version "13.11".
+
+        :deprecated: PostgreSQL 13.11 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_13_11"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_13_12")
     def VER_13_12(cls) -> "PostgresEngineVersion":
-        '''Version "13.12".'''
+        '''(deprecated) Version "13.12".
+
+        :deprecated: PostgreSQL 13.12 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_13_12"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_13_13")
     def VER_13_13(cls) -> "PostgresEngineVersion":
-        '''Version "13.13".'''
+        '''(deprecated) Version "13.13".
+
+        :deprecated: PostgreSQL 13.13 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_13_13"))
 
     @jsii.python.classproperty
@@ -35842,13 +35909,23 @@ class PostgresEngineVersion(
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_14_10")
     def VER_14_10(cls) -> "PostgresEngineVersion":
-        '''Version "14.10".'''
+        '''(deprecated) Version "14.10".
+
+        :deprecated: PostgreSQL 14.10 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_14_10"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_14_11")
     def VER_14_11(cls) -> "PostgresEngineVersion":
-        '''Version "14.11".'''
+        '''(deprecated) Version "14.11".
+
+        :deprecated: PostgreSQL 14.11 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_14_11"))
 
     @jsii.python.classproperty
@@ -35967,7 +36044,12 @@ class PostgresEngineVersion(
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_14_9")
     def VER_14_9(cls) -> "PostgresEngineVersion":
-        '''Version "14.9".'''
+        '''(deprecated) Version "14.9".
+
+        :deprecated: PostgreSQL 14.9 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_14_9"))
 
     @jsii.python.classproperty
@@ -36019,19 +36101,34 @@ class PostgresEngineVersion(
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_15_4")
     def VER_15_4(cls) -> "PostgresEngineVersion":
-        '''Version "15.4".'''
+        '''(deprecated) Version "15.4".
+
+        :deprecated: PostgreSQL 15.4 is no longer supported by Amazon RDS.
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_15_4"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_15_5")
     def VER_15_5(cls) -> "PostgresEngineVersion":
-        '''Version "15.5".'''
+        '''(deprecated) Version "15.5".
+
+        :deprecated: PostgreSQL 15.5 is no longer supported by Amazon RDS
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_15_5"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_15_6")
     def VER_15_6(cls) -> "PostgresEngineVersion":
-        '''Version "15.6".'''
+        '''(deprecated) Version "15.6".
+
+        :deprecated: PostgreSQL 15.6 is no longer supported by Amazon RDS
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_15_6"))
 
     @jsii.python.classproperty
@@ -36061,13 +36158,23 @@ class PostgresEngineVersion(
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_16_1")
     def VER_16_1(cls) -> "PostgresEngineVersion":
-        '''Version "16.1".'''
+        '''(deprecated) Version "16.1".
+
+        :deprecated: PostgreSQL 16.1 is no longer supported by Amazon RDS
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_16_1"))
 
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_16_2")
     def VER_16_2(cls) -> "PostgresEngineVersion":
-        '''Version "16.2".'''
+        '''(deprecated) Version "16.2".
+
+        :deprecated: PostgreSQL 16.2 is no longer supported by Amazon RDS
+
+        :stability: deprecated
+        '''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_16_2"))
 
     @jsii.python.classproperty

aws_cdk/aws_redshift/__init__.py

@@ -5122,7 +5122,7 @@ class CfnIntegration(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_redshift.CfnIntegration",
 ):
-    '''Describes a zero-ETL integration.
+    '''Describes a zero-ETL or S3 integration.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-integration.html
     :cloudformationResource: AWS::Redshift::Integration
@@ -5168,9 +5168,9 @@ class CfnIntegration(
         :param id: Construct identifier for this resource (unique in its scope).
         :param source_arn: The Amazon Resource Name (ARN) of the database used as the source for replication.
         :param target_arn: The Amazon Resource Name (ARN) of the Amazon Redshift data warehouse to use as the target for replication.
-        :param additional_encryption_context: The encryption context for the integration. For more information, see `Encryption context <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context>`_ in the *AWS Key Management Service Developer Guide* .
+        :param additional_encryption_context: The encryption context for the integration. For more information, see `Encryption context <https://docs.aws.amazon.com/>`_ in the *AWS Key Management Service Developer Guide* .
         :param integration_name: The name of the integration.
-        :param kms_key_id: The AWS Key Management Service ( AWS KMS ) key identifier for the key used to encrypt the integration.
+        :param kms_key_id: The AWS Key Management Service ( AWS KMS) key identifier for the key used to encrypt the integration.
         :param tags: The list of tags associated with the integration.
         '''
         if __debug__:
@@ -5307,7 +5307,7 @@ class CfnIntegration(
     @builtins.property
     @jsii.member(jsii_name="kmsKeyId")
     def kms_key_id(self) -> typing.Optional[builtins.str]:
-        '''The AWS Key Management Service ( AWS KMS ) key identifier for the key used to encrypt the integration.'''
+        '''The AWS Key Management Service ( AWS KMS) key identifier for the key used to encrypt the integration.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsKeyId"))
 
     @kms_key_id.setter
@@ -5358,9 +5358,9 @@ class CfnIntegrationProps:
 
         :param source_arn: The Amazon Resource Name (ARN) of the database used as the source for replication.
         :param target_arn: The Amazon Resource Name (ARN) of the Amazon Redshift data warehouse to use as the target for replication.
-        :param additional_encryption_context: The encryption context for the integration. For more information, see `Encryption context <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context>`_ in the *AWS Key Management Service Developer Guide* .
+        :param additional_encryption_context: The encryption context for the integration. For more information, see `Encryption context <https://docs.aws.amazon.com/>`_ in the *AWS Key Management Service Developer Guide* .
         :param integration_name: The name of the integration.
-        :param kms_key_id: The AWS Key Management Service ( AWS KMS ) key identifier for the key used to encrypt the integration.
+        :param kms_key_id: The AWS Key Management Service ( AWS KMS) key identifier for the key used to encrypt the integration.
         :param tags: The list of tags associated with the integration.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-integration.html
@@ -5435,7 +5435,7 @@ class CfnIntegrationProps:
     ) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
         '''The encryption context for the integration.
 
-        For more information, see `Encryption context <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context>`_ in the *AWS Key Management Service Developer Guide* .
+        For more information, see `Encryption context <https://docs.aws.amazon.com/>`_ in the *AWS Key Management Service Developer Guide* .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-integration.html#cfn-redshift-integration-additionalencryptioncontext
         '''
@@ -5453,7 +5453,7 @@ class CfnIntegrationProps:
 
     @builtins.property
     def kms_key_id(self) -> typing.Optional[builtins.str]:
-        '''The AWS Key Management Service ( AWS KMS ) key identifier for the key used to encrypt the integration.
+        '''The AWS Key Management Service ( AWS KMS) key identifier for the key used to encrypt the integration.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-integration.html#cfn-redshift-integration-kmskeyid
         '''

aws_cdk/aws_sagemaker/__init__.py

@@ -19913,8 +19913,11 @@ class CfnModel(
     )
     class HubAccessConfigProperty:
         def __init__(self, *, hub_content_arn: builtins.str) -> None:
-            '''
-            :param hub_content_arn: 
+            '''The configuration for a private hub model reference that points to a public SageMaker JumpStart model.
+
+            For more information about private hubs, see `Private curated hubs for foundation model access control in JumpStart <https://docs.aws.amazon.com/sagemaker/latest/dg/jumpstart-curated-hubs.html>`_ .
+
+            :param hub_content_arn: The ARN of your private model hub content. This should be a ``ModelReference`` resource type that points to a SageMaker JumpStart public hub model.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-model-hubaccessconfig.html
             :exampleMetadata: fixture=_generated
@@ -19938,7 +19941,10 @@ class CfnModel(
 
         @builtins.property
         def hub_content_arn(self) -> builtins.str:
-            '''
+            '''The ARN of your private model hub content.
+
+            This should be a ``ModelReference`` resource type that points to a SageMaker JumpStart public hub model.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-model-hubaccessconfig.html#cfn-sagemaker-model-hubaccessconfig-hubcontentarn
             '''
             result = self._values.get("hub_content_arn")
@@ -20378,7 +20384,7 @@ class CfnModel(
             :param compression_type: 
             :param s3_data_type: If you choose ``S3Prefix`` , ``S3Uri`` identifies a key name prefix. SageMaker uses all objects that match the specified key name prefix for model training. If you choose ``ManifestFile`` , ``S3Uri`` identifies an object that is a manifest file containing a list of object keys that you want SageMaker to use for model training. If you choose ``AugmentedManifestFile`` , ``S3Uri`` identifies an object that is an augmented manifest file in JSON lines format. This file contains the data you want to use for model training. ``AugmentedManifestFile`` can only be used if the Channel's input mode is ``Pipe`` .
             :param s3_uri: Depending on the value specified for the ``S3DataType`` , identifies either a key name prefix or a manifest. For example: - A key name prefix might look like this: ``s3://bucketname/exampleprefix/`` - A manifest might look like this: ``s3://bucketname/example.manifest`` A manifest is an S3 object which is a JSON file consisting of an array of elements. The first element is a prefix which is followed by one or more suffixes. SageMaker appends the suffix elements to the prefix to get a full set of ``S3Uri`` . Note that the prefix must be a valid non-empty ``S3Uri`` that precludes users from specifying a manifest whose individual ``S3Uri`` is sourced from different S3 buckets. The following code example shows a valid manifest format: ``[ {"prefix": "s3://customer_bucket/some/prefix/"},`` ``"relative/path/to/custdata-1",`` ``"relative/path/custdata-2",`` ``...`` ``"relative/path/custdata-N"`` ``]`` This JSON is equivalent to the following ``S3Uri`` list: ``s3://customer_bucket/some/prefix/relative/path/to/custdata-1`` ``s3://customer_bucket/some/prefix/relative/path/custdata-2`` ``...`` ``s3://customer_bucket/some/prefix/relative/path/custdata-N`` The complete set of ``S3Uri`` in this manifest is the input data for the channel for this data source. The object that each ``S3Uri`` points to must be readable by the IAM role that SageMaker uses to perform tasks on your behalf. Your input bucket must be located in same AWS region as your training job.
-            :param hub_access_config: 
+            :param hub_access_config: The configuration for a private hub model reference that points to a SageMaker JumpStart public hub model.
             :param model_access_config: 
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-model-s3datasource.html
@@ -20495,7 +20501,8 @@ class CfnModel(
         def hub_access_config(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnModel.HubAccessConfigProperty"]]:
-            '''
+            '''The configuration for a private hub model reference that points to a SageMaker JumpStart public hub model.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-model-s3datasource.html#cfn-sagemaker-model-s3datasource-hubaccessconfig
             '''
             result = self._values.get("hub_access_config")

aws_cdk/aws_securitylake/__init__.py

@@ -355,6 +355,9 @@ class CfnDataLake(
     You can enable Security Lake in AWS Regions with customized settings before enabling log collection in Regions. To specify particular Regions, configure these Regions using the ``configurations`` parameter. If you have already enabled Security Lake in a Region when you call this command, the command will update the Region if you provide new configuration parameters. If you have not already enabled Security Lake in the Region when you call this API, it will set up the data lake in the Region with the specified configurations.
 
     When you enable Security Lake , it starts ingesting security data after the ``CreateAwsLogSource`` call. This includes ingesting security data from sources, storing data, and making data accessible to subscribers. Security Lake also enables all the existing settings and resources that it stores or maintains for your AWS account in the current Region, including security log and event data. For more information, see the `Amazon Security Lake User Guide <https://docs.aws.amazon.com//security-lake/latest/userguide/what-is-security-lake.html>`_ .
+    .. epigraph::
+
+       If you use this template to create multiple data lakes in different AWS Regions , and more than one of your data lakes include an `AWS::SecurityLake::AwsLogSource <https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-awslogsource.html>`_ resource, then you must deploy these data lakes sequentially. This is required because data lakes operate globally, and ``AwsLogSource`` resources must be deployed one at a time.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-datalake.html
     :cloudformationResource: AWS::SecurityLake::DataLake

aws_cdk/aws_synthetics/__init__.py

@@ -1296,6 +1296,8 @@ class CfnCanary(
 
     Canaries are scripts that monitor your endpoints and APIs from the outside-in. Canaries help you check the availability and latency of your web services and troubleshoot anomalies by investigating load time data, screenshots of the UI, logs, and metrics. You can set up a canary to run continuously or just once.
 
+    Canaries are automated scripts that run at specified intervals against an endpoint. They include Python or Node.js code to create a Lambda function. This code needs to be packaged in a certain way, depending on the language. For more information, see `Writing a canary script <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries_WritingCanary.html>`_ .
+
     To create canaries, you must have the ``CloudWatchSyntheticsFullAccess`` policy. If you are creating a new IAM role for the canary, you also need the the ``iam:CreateRole`` , ``iam:CreatePolicy`` and ``iam:AttachRolePolicy`` permissions. For more information, see `Necessary Roles and Permissions <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries_Roles>`_ .
 
     Do not include secrets or proprietary information in your canary names. The canary name makes up part of the Amazon Resource Name (ARN) for the canary, and the ARN is included in outbound calls over the internet. For more information, see `Security Considerations for Synthetics Canaries <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/servicelens_canaries_security.html>`_ .