aws-cdk-lib 2.183.0__py3-none-any.whl → 2.184.1__py3-none-any.whl

aws_cdk/_jsii/__init__.py

@@ -34,7 +34,7 @@ import aws_cdk.cloud_assembly_schema._jsii
 import constructs._jsii
 
 __jsii_assembly__ = jsii.JSIIAssembly.load(
-    "aws-cdk-lib", "2.183.0", __name__[0:-6], "aws-cdk-lib@2.183.0.jsii.tgz"
+    "aws-cdk-lib", "2.184.1", __name__[0:-6], "aws-cdk-lib@2.184.1.jsii.tgz"
 )
 
 __all__ = [

aws_cdk/aws_cloudfront/experimental/__init__.py

@@ -418,7 +418,7 @@ class EdgeFunction(
         :param max_concurrency: The maximum concurrency setting limits the number of concurrent instances of the function that an Amazon SQS event source can invoke. Default: - No specific limit.
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days Default: - infinite or until the record expires.
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param provisioned_poller_config: Configuration for provisioned pollers that read from the event source. When specified, allows control over the minimum and maximum number of pollers that can be provisioned to process events from the source. Default: - no provisioned pollers
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
@@ -426,7 +426,7 @@ class EdgeFunction(
         :param source_access_configurations: Specific settings like the authentication protocol or the VPC components to secure access to your event source. Default: - none
         :param starting_position: The position in the DynamoDB, Kinesis or MSK stream where AWS Lambda should start reading. Default: - no starting position
         :param starting_position_timestamp: The time from which to start reading, in Unix time seconds. Default: - no timestamp
-        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(ODF). Currently only MSK and self managed kafka event support S3 ODF Default: false
+        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(OFD). Kinesis, DynamoDB, MSK and self managed kafka event support S3 OFD Default: false
         :param tumbling_window: The size of the tumbling windows to group records sent to DynamoDB or Kinesis. Default: - None
         '''
         if __debug__:

aws_cdk/aws_events/__init__.py

@@ -8890,7 +8890,7 @@ class EventField(
         
         
         rule.add_target(targets.CloudWatchLogGroup(log_group,
-            log_event=targets.LogGroupTargetInput.from_object(
+            log_event=targets.LogGroupTargetInput.from_object_v2(
                 timestamp=events.EventField.from_path("$.time"),
                 message=events.EventField.from_path("$.detail-type")
             )
@@ -11230,6 +11230,8 @@ class RuleTargetInput(
         matched event.
 
         :param obj: -
+
+        :return: RuleTargetInput
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__8091475ef36fdd615b50f3492db20e93a218f280b559ea557d766f61df68f0d0)

aws_cdk/aws_events_targets/__init__.py

@@ -103,7 +103,7 @@ import aws_cdk.aws_logs as logs
 
 
 rule.add_target(targets.CloudWatchLogGroup(log_group,
-    log_event=targets.LogGroupTargetInput.from_object(
+    log_event=targets.LogGroupTargetInput.from_object_v2(
         timestamp=events.EventField.from_path("$.time"),
         message=events.EventField.from_path("$.detail-type")
     )
@@ -120,7 +120,7 @@ import aws_cdk.aws_logs as logs
 
 
 rule.add_target(targets.CloudWatchLogGroup(log_group,
-    log_event=targets.LogGroupTargetInput.from_object(
+    log_event=targets.LogGroupTargetInput.from_object_v2(
         message=JSON.stringify({
             "CustomField": "CustomValue"
         })
@@ -1493,7 +1493,7 @@ class CloudWatchLogGroup(
         
         
         rule.add_target(targets.CloudWatchLogGroup(log_group,
-            log_event=targets.LogGroupTargetInput.from_object(
+            log_event=targets.LogGroupTargetInput.from_object_v2(
                 message=JSON.stringify({
                     "CustomField": "CustomValue"
                 })
@@ -2632,7 +2632,7 @@ class LogGroupTargetInput(
         
         
         rule.add_target(targets.CloudWatchLogGroup(log_group,
-            log_event=targets.LogGroupTargetInput.from_object(
+            log_event=targets.LogGroupTargetInput.from_object_v2(
                 timestamp=events.EventField.from_path("$.time"),
                 message=events.EventField.from_path("$.detail-type")
             )
@@ -2650,18 +2650,42 @@ class LogGroupTargetInput(
         message: typing.Any = None,
         timestamp: typing.Any = None,
     ) -> _RuleTargetInput_6beca786:
-        '''Pass a JSON object to the the log group event target.
+        '''(deprecated) Pass a JSON object to the the log group event target.
 
         May contain strings returned by ``EventField.from()`` to substitute in parts of the
         matched event.
 
         :param message: The value provided here will be used in the Log "message" field. This field must be a string. If an object is passed (e.g. JSON data) it will not throw an error, but the message that makes it to CloudWatch logs will be incorrect. This is a likely scenario if doing something like: EventField.fromPath('$.detail') since in most cases the ``detail`` field contains JSON data. Default: EventField.detailType
         :param timestamp: The timestamp that will appear in the CloudWatch Logs record. Default: EventField.time
+
+        :deprecated: use fromObjectV2
+
+        :stability: deprecated
         '''
         options = LogGroupTargetInputOptions(message=message, timestamp=timestamp)
 
         return typing.cast(_RuleTargetInput_6beca786, jsii.sinvoke(cls, "fromObject", [options]))
 
+    @jsii.member(jsii_name="fromObjectV2")
+    @builtins.classmethod
+    def from_object_v2(
+        cls,
+        *,
+        message: typing.Any = None,
+        timestamp: typing.Any = None,
+    ) -> "LogGroupTargetInput":
+        '''Pass a JSON object to the the log group event target.
+
+        May contain strings returned by ``EventField.from()`` to substitute in parts of the
+        matched event.
+
+        :param message: The value provided here will be used in the Log "message" field. This field must be a string. If an object is passed (e.g. JSON data) it will not throw an error, but the message that makes it to CloudWatch logs will be incorrect. This is a likely scenario if doing something like: EventField.fromPath('$.detail') since in most cases the ``detail`` field contains JSON data. Default: EventField.detailType
+        :param timestamp: The timestamp that will appear in the CloudWatch Logs record. Default: EventField.time
+        '''
+        options = LogGroupTargetInputOptions(message=message, timestamp=timestamp)
+
+        return typing.cast("LogGroupTargetInput", jsii.sinvoke(cls, "fromObjectV2", [options]))
+
     @jsii.member(jsii_name="bind")
     @abc.abstractmethod
     def bind(self, rule: _IRule_af9e3d28) -> _RuleTargetInputProperties_38e7b0db:
@@ -2715,7 +2739,7 @@ class LogGroupTargetInputOptions:
             
             
             rule.add_target(targets.CloudWatchLogGroup(log_group,
-                log_event=targets.LogGroupTargetInput.from_object(
+                log_event=targets.LogGroupTargetInput.from_object_v2(
                     timestamp=events.EventField.from_path("$.time"),
                     message=events.EventField.from_path("$.detail-type")
                 )
@@ -5326,7 +5350,7 @@ class LogGroupProps(TargetBaseProps):
             
             
             rule.add_target(targets.CloudWatchLogGroup(log_group,
-                log_event=targets.LogGroupTargetInput.from_object(
+                log_event=targets.LogGroupTargetInput.from_object_v2(
                     message=JSON.stringify({
                         "CustomField": "CustomValue"
                     })

aws_cdk/aws_iam/__init__.py

@@ -8371,7 +8371,7 @@ class IPrincipal(IGrantable, typing_extensions.Protocol):
     Notifications Service).
 
     A single logical Principal may also map to a set of physical principals.
-    For example, ``new OrganizationPrincipal('o-12345abcde')`` represents all
+    For example, ``new OrganizationPrincipal('o-1234')`` represents all
     identities that are part of the given AWS Organization.
     '''
 
@@ -8427,7 +8427,7 @@ class _IPrincipalProxy(
     Notifications Service).
 
     A single logical Principal may also map to a set of physical principals.
-    For example, ``new OrganizationPrincipal('o-12345abcde')`` represents all
+    For example, ``new OrganizationPrincipal('o-1234')`` represents all
     identities that are part of the given AWS Organization.
     '''
 
@@ -14477,9 +14477,6 @@ class OrganizationPrincipal(
 ):
     '''A principal that represents an AWS Organization.
 
-    Property organizationId must match regex pattern ^o-[a-z0-9]{10,32}$
-
-    :see: https://docs.aws.amazon.com/organizations/latest/APIReference/API_Organization.html
     :exampleMetadata: infused
 
     Example::

aws_cdk/aws_kinesisfirehose/__init__.py

@@ -10180,24 +10180,22 @@ class DeliveryStreamProps:
 
         Example::
 
-            # bucket: s3.Bucket
-            # Provide a Lambda function that will transform records before delivery, with custom
-            # buffering and retry configuration
-            lambda_function = lambda_.Function(self, "Processor",
-                runtime=lambda_.Runtime.NODEJS_LATEST,
-                handler="index.handler",
-                code=lambda_.Code.from_asset(path.join(__dirname, "process-records"))
-            )
-            lambda_processor = firehose.LambdaFunctionProcessor(lambda_function,
-                buffer_interval=Duration.minutes(5),
-                buffer_size=Size.mebibytes(5),
-                retries=5
-            )
-            s3_destination = firehose.S3Bucket(bucket,
-                processor=lambda_processor
+            import aws_cdk.aws_kinesisfirehose as firehose
+            
+            
+            bucket = s3.Bucket(self, "MyBucket")
+            stream = firehose.DeliveryStream(self, "MyStream",
+                destination=firehose.S3Bucket(bucket)
             )
-            firehose.DeliveryStream(self, "Delivery Stream",
-                destination=s3_destination
+            
+            topic_rule = iot.TopicRule(self, "TopicRule",
+                sql=iot.IotSql.from_string_as_ver20160323("SELECT * FROM 'device/+/data'"),
+                actions=[
+                    actions.FirehosePutRecordAction(stream,
+                        batch_mode=True,
+                        record_separator=actions.FirehoseRecordSeparator.NEWLINE
+                    )
+                ]
             )
         '''
         if __debug__:
@@ -11653,24 +11651,22 @@ class S3Bucket(
 
     Example::
 
-        # bucket: s3.Bucket
-        # Provide a Lambda function that will transform records before delivery, with custom
-        # buffering and retry configuration
-        lambda_function = lambda_.Function(self, "Processor",
-            runtime=lambda_.Runtime.NODEJS_LATEST,
-            handler="index.handler",
-            code=lambda_.Code.from_asset(path.join(__dirname, "process-records"))
-        )
-        lambda_processor = firehose.LambdaFunctionProcessor(lambda_function,
-            buffer_interval=Duration.minutes(5),
-            buffer_size=Size.mebibytes(5),
-            retries=5
-        )
-        s3_destination = firehose.S3Bucket(bucket,
-            processor=lambda_processor
+        import aws_cdk.aws_kinesisfirehose as firehose
+        
+        
+        bucket = s3.Bucket(self, "MyBucket")
+        stream = firehose.DeliveryStream(self, "MyStream",
+            destination=firehose.S3Bucket(bucket)
         )
-        firehose.DeliveryStream(self, "Delivery Stream",
-            destination=s3_destination
+        
+        topic_rule = iot.TopicRule(self, "TopicRule",
+            sql=iot.IotSql.from_string_as_ver20160323("SELECT * FROM 'device/+/data'"),
+            actions=[
+                actions.FirehosePutRecordAction(stream,
+                    batch_mode=True,
+                    record_separator=actions.FirehoseRecordSeparator.NEWLINE
+                )
+            ]
         )
     '''
 
@@ -12065,24 +12061,22 @@ class DeliveryStream(
 
     Example::
 
-        # bucket: s3.Bucket
-        # Provide a Lambda function that will transform records before delivery, with custom
-        # buffering and retry configuration
-        lambda_function = lambda_.Function(self, "Processor",
-            runtime=lambda_.Runtime.NODEJS_LATEST,
-            handler="index.handler",
-            code=lambda_.Code.from_asset(path.join(__dirname, "process-records"))
-        )
-        lambda_processor = firehose.LambdaFunctionProcessor(lambda_function,
-            buffer_interval=Duration.minutes(5),
-            buffer_size=Size.mebibytes(5),
-            retries=5
-        )
-        s3_destination = firehose.S3Bucket(bucket,
-            processor=lambda_processor
+        import aws_cdk.aws_kinesisfirehose as firehose
+        
+        
+        bucket = s3.Bucket(self, "MyBucket")
+        stream = firehose.DeliveryStream(self, "MyStream",
+            destination=firehose.S3Bucket(bucket)
         )
-        firehose.DeliveryStream(self, "Delivery Stream",
-            destination=s3_destination
+        
+        topic_rule = iot.TopicRule(self, "TopicRule",
+            sql=iot.IotSql.from_string_as_ver20160323("SELECT * FROM 'device/+/data'"),
+            actions=[
+                actions.FirehosePutRecordAction(stream,
+                    batch_mode=True,
+                    record_separator=actions.FirehoseRecordSeparator.NEWLINE
+                )
+            ]
         )
     '''
 

aws_cdk/aws_lambda/__init__.py

@@ -13464,7 +13464,7 @@ class EventSourceMappingOptions:
         :param max_concurrency: The maximum concurrency setting limits the number of concurrent instances of the function that an Amazon SQS event source can invoke. Default: - No specific limit.
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days Default: - infinite or until the record expires.
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param provisioned_poller_config: Configuration for provisioned pollers that read from the event source. When specified, allows control over the minimum and maximum number of pollers that can be provisioned to process events from the source. Default: - no provisioned pollers
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
@@ -13472,7 +13472,7 @@ class EventSourceMappingOptions:
         :param source_access_configurations: Specific settings like the authentication protocol or the VPC components to secure access to your event source. Default: - none
         :param starting_position: The position in the DynamoDB, Kinesis or MSK stream where AWS Lambda should start reading. Default: - no starting position
         :param starting_position_timestamp: The time from which to start reading, in Unix time seconds. Default: - no timestamp
-        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(ODF). Currently only MSK and self managed kafka event support S3 ODF Default: false
+        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(OFD). Kinesis, DynamoDB, MSK and self managed kafka event support S3 OFD Default: false
         :param tumbling_window: The size of the tumbling windows to group records sent to DynamoDB or Kinesis. Default: - None
 
         :exampleMetadata: fixture=_generated
@@ -13758,7 +13758,7 @@ class EventSourceMappingOptions:
 
     @builtins.property
     def on_failure(self) -> typing.Optional["IEventSourceDlq"]:
-        '''An Amazon SQS queue or Amazon SNS topic destination for discarded records.
+        '''An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records.
 
         :default: discarded records are ignored
         '''
@@ -13854,9 +13854,9 @@ class EventSourceMappingOptions:
 
     @builtins.property
     def support_s3_on_failure_destination(self) -> typing.Optional[builtins.bool]:
-        '''Check if support S3 onfailure destination(ODF).
+        '''Check if support S3 onfailure destination(OFD).
 
-        Currently only MSK and self managed kafka event support S3 ODF
+        Kinesis, DynamoDB, MSK and self managed kafka event support S3 OFD
 
         :default: false
         '''
@@ -13964,7 +13964,7 @@ class EventSourceMappingProps(EventSourceMappingOptions):
         :param max_concurrency: The maximum concurrency setting limits the number of concurrent instances of the function that an Amazon SQS event source can invoke. Default: - No specific limit.
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days Default: - infinite or until the record expires.
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param provisioned_poller_config: Configuration for provisioned pollers that read from the event source. When specified, allows control over the minimum and maximum number of pollers that can be provisioned to process events from the source. Default: - no provisioned pollers
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
@@ -13972,7 +13972,7 @@ class EventSourceMappingProps(EventSourceMappingOptions):
         :param source_access_configurations: Specific settings like the authentication protocol or the VPC components to secure access to your event source. Default: - none
         :param starting_position: The position in the DynamoDB, Kinesis or MSK stream where AWS Lambda should start reading. Default: - no starting position
         :param starting_position_timestamp: The time from which to start reading, in Unix time seconds. Default: - no timestamp
-        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(ODF). Currently only MSK and self managed kafka event support S3 ODF Default: false
+        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(OFD). Kinesis, DynamoDB, MSK and self managed kafka event support S3 OFD Default: false
         :param tumbling_window: The size of the tumbling windows to group records sent to DynamoDB or Kinesis. Default: - None
         :param target: The target AWS Lambda function.
 
@@ -14266,7 +14266,7 @@ class EventSourceMappingProps(EventSourceMappingOptions):
 
     @builtins.property
     def on_failure(self) -> typing.Optional["IEventSourceDlq"]:
-        '''An Amazon SQS queue or Amazon SNS topic destination for discarded records.
+        '''An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records.
 
         :default: discarded records are ignored
         '''
@@ -14362,9 +14362,9 @@ class EventSourceMappingProps(EventSourceMappingOptions):
 
     @builtins.property
     def support_s3_on_failure_destination(self) -> typing.Optional[builtins.bool]:
-        '''Check if support S3 onfailure destination(ODF).
+        '''Check if support S3 onfailure destination(OFD).
 
-        Currently only MSK and self managed kafka event support S3 ODF
+        Kinesis, DynamoDB, MSK and self managed kafka event support S3 OFD
 
         :default: false
         '''
@@ -17838,7 +17838,7 @@ class IFunction(
         :param max_concurrency: The maximum concurrency setting limits the number of concurrent instances of the function that an Amazon SQS event source can invoke. Default: - No specific limit.
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days Default: - infinite or until the record expires.
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param provisioned_poller_config: Configuration for provisioned pollers that read from the event source. When specified, allows control over the minimum and maximum number of pollers that can be provisioned to process events from the source. Default: - no provisioned pollers
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
@@ -17846,7 +17846,7 @@ class IFunction(
         :param source_access_configurations: Specific settings like the authentication protocol or the VPC components to secure access to your event source. Default: - none
         :param starting_position: The position in the DynamoDB, Kinesis or MSK stream where AWS Lambda should start reading. Default: - no starting position
         :param starting_position_timestamp: The time from which to start reading, in Unix time seconds. Default: - no timestamp
-        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(ODF). Currently only MSK and self managed kafka event support S3 ODF Default: false
+        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(OFD). Kinesis, DynamoDB, MSK and self managed kafka event support S3 OFD Default: false
         :param tumbling_window: The size of the tumbling windows to group records sent to DynamoDB or Kinesis. Default: - None
         '''
         ...
@@ -18280,7 +18280,7 @@ class _IFunctionProxy(
         :param max_concurrency: The maximum concurrency setting limits the number of concurrent instances of the function that an Amazon SQS event source can invoke. Default: - No specific limit.
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days Default: - infinite or until the record expires.
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param provisioned_poller_config: Configuration for provisioned pollers that read from the event source. When specified, allows control over the minimum and maximum number of pollers that can be provisioned to process events from the source. Default: - no provisioned pollers
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
@@ -18288,7 +18288,7 @@ class _IFunctionProxy(
         :param source_access_configurations: Specific settings like the authentication protocol or the VPC components to secure access to your event source. Default: - none
         :param starting_position: The position in the DynamoDB, Kinesis or MSK stream where AWS Lambda should start reading. Default: - no starting position
         :param starting_position_timestamp: The time from which to start reading, in Unix time seconds. Default: - no timestamp
-        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(ODF). Currently only MSK and self managed kafka event support S3 ODF Default: false
+        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(OFD). Kinesis, DynamoDB, MSK and self managed kafka event support S3 OFD Default: false
         :param tumbling_window: The size of the tumbling windows to group records sent to DynamoDB or Kinesis. Default: - None
         '''
         if __debug__:
@@ -25867,7 +25867,7 @@ class EventSourceMapping(
         :param max_concurrency: The maximum concurrency setting limits the number of concurrent instances of the function that an Amazon SQS event source can invoke. Default: - No specific limit.
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days Default: - infinite or until the record expires.
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param provisioned_poller_config: Configuration for provisioned pollers that read from the event source. When specified, allows control over the minimum and maximum number of pollers that can be provisioned to process events from the source. Default: - no provisioned pollers
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
@@ -25875,7 +25875,7 @@ class EventSourceMapping(
         :param source_access_configurations: Specific settings like the authentication protocol or the VPC components to secure access to your event source. Default: - none
         :param starting_position: The position in the DynamoDB, Kinesis or MSK stream where AWS Lambda should start reading. Default: - no starting position
         :param starting_position_timestamp: The time from which to start reading, in Unix time seconds. Default: - no timestamp
-        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(ODF). Currently only MSK and self managed kafka event support S3 ODF Default: false
+        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(OFD). Kinesis, DynamoDB, MSK and self managed kafka event support S3 OFD Default: false
         :param tumbling_window: The size of the tumbling windows to group records sent to DynamoDB or Kinesis. Default: - None
         '''
         if __debug__:
@@ -26045,7 +26045,7 @@ class FunctionBase(
         :param max_concurrency: The maximum concurrency setting limits the number of concurrent instances of the function that an Amazon SQS event source can invoke. Default: - No specific limit.
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days Default: - infinite or until the record expires.
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param provisioned_poller_config: Configuration for provisioned pollers that read from the event source. When specified, allows control over the minimum and maximum number of pollers that can be provisioned to process events from the source. Default: - no provisioned pollers
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
@@ -26053,7 +26053,7 @@ class FunctionBase(
         :param source_access_configurations: Specific settings like the authentication protocol or the VPC components to secure access to your event source. Default: - none
         :param starting_position: The position in the DynamoDB, Kinesis or MSK stream where AWS Lambda should start reading. Default: - no starting position
         :param starting_position_timestamp: The time from which to start reading, in Unix time seconds. Default: - no timestamp
-        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(ODF). Currently only MSK and self managed kafka event support S3 ODF Default: false
+        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(OFD). Kinesis, DynamoDB, MSK and self managed kafka event support S3 OFD Default: false
         :param tumbling_window: The size of the tumbling windows to group records sent to DynamoDB or Kinesis. Default: - None
         '''
         if __debug__:

aws_cdk/aws_lambda_event_sources/__init__.py

@@ -169,7 +169,7 @@ and add it to your Lambda function. The following parameters will impact Amazon
 * **reportBatchItemFailures**: Allow functions to return partially successful responses for a batch of records.
 * **maxBatchingWindow**: The maximum amount of time to gather records before invoking the lambda. This increases the likelihood of a full batch at the cost of delayed processing.
 * **maxRecordAge**: The maximum age of a record that will be sent to the function for processing. Records that exceed the max age will be treated as failures.
-* **onFailure**: In the event a record fails after all retries or if the record age has exceeded the configured value, the record will be sent to SQS queue or SNS topic that is specified here
+* **onFailure**: In the event a record fails after all retries or if the record age has exceeded the configured value, the record will be sent to S3 bucket, SQS queue or SNS topic that is specified here
 * **parallelizationFactor**: The number of batches to concurrently process on each shard.
 * **retryAttempts**: The maximum number of times a record should be retried in the event of failure.
 * **startingPosition**: Will determine where to being consumption, either at the most recent ('LATEST') record or the oldest record ('TRIM_HORIZON'). 'TRIM_HORIZON' will ensure you process all available data, while 'LATEST' will ignore all records that arrived prior to attaching the event source.
@@ -238,7 +238,7 @@ behavior:
 * **reportBatchItemFailures**: Allow functions to return partially successful responses for a batch of records.
 * **maxBatchingWindow**: The maximum amount of time to gather records before invoking the lambda. This increases the likelihood of a full batch at the cost of possibly delaying processing.
 * **maxRecordAge**: The maximum age of a record that will be sent to the function for processing. Records that exceed the max age will be treated as failures.
-* **onFailure**: In the event a record fails and consumes all retries, the record will be sent to SQS queue or SNS topic that is specified here
+* **onFailure**: In the event a record fails and consumes all retries, the record will be sent to S3 bucket, SQS queue or SNS topic that is specified here
 * **parallelizationFactor**: The number of batches to concurrently process on each shard.
 * **retryAttempts**: The maximum number of times a record should be retried in the event of failure.
 * **startingPosition**: Will determine where to begin consumption. 'LATEST' will start at the most recent record and ignore all records that arrived prior to attaching the event source, 'TRIM_HORIZON' will start at the oldest record and ensure you process all available data, while 'AT_TIMESTAMP' will start reading records from a specified time stamp. Note that 'AT_TIMESTAMP' is only supported for Amazon Kinesis streams.
@@ -2592,7 +2592,7 @@ class StreamEventSource(
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -2674,7 +2674,7 @@ class StreamEventSource(
         :param max_concurrency: The maximum concurrency setting limits the number of concurrent instances of the function that an Amazon SQS event source can invoke. Default: - No specific limit.
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days Default: - infinite or until the record expires.
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param provisioned_poller_config: Configuration for provisioned pollers that read from the event source. When specified, allows control over the minimum and maximum number of pollers that can be provisioned to process events from the source. Default: - no provisioned pollers
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
@@ -2682,7 +2682,7 @@ class StreamEventSource(
         :param source_access_configurations: Specific settings like the authentication protocol or the VPC components to secure access to your event source. Default: - none
         :param starting_position: The position in the DynamoDB, Kinesis or MSK stream where AWS Lambda should start reading. Default: - no starting position
         :param starting_position_timestamp: The time from which to start reading, in Unix time seconds. Default: - no timestamp
-        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(ODF). Currently only MSK and self managed kafka event support S3 ODF Default: false
+        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(OFD). Kinesis, DynamoDB, MSK and self managed kafka event support S3 OFD Default: false
         :param tumbling_window: The size of the tumbling windows to group records sent to DynamoDB or Kinesis. Default: - None
         '''
         options = _EventSourceMappingOptions_b3f2bb85(
@@ -2788,7 +2788,7 @@ class StreamEventSourceProps(BaseStreamEventSourceProps):
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -3010,7 +3010,7 @@ class StreamEventSourceProps(BaseStreamEventSourceProps):
 
     @builtins.property
     def on_failure(self) -> typing.Optional[_IEventSourceDlq_5e2c6ad9]:
-        '''An Amazon SQS queue or Amazon SNS topic destination for discarded records.
+        '''An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records.
 
         :default: - discarded records are ignored
         '''
@@ -3135,7 +3135,7 @@ class DynamoEventSource(
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -3245,7 +3245,7 @@ class DynamoEventSourceProps(StreamEventSourceProps):
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -3449,7 +3449,7 @@ class DynamoEventSourceProps(StreamEventSourceProps):
 
     @builtins.property
     def on_failure(self) -> typing.Optional[_IEventSourceDlq_5e2c6ad9]:
-        '''An Amazon SQS queue or Amazon SNS topic destination for discarded records.
+        '''An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records.
 
         :default: - discarded records are ignored
         '''
@@ -3572,7 +3572,7 @@ class KinesisConsumerEventSource(
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -3689,7 +3689,7 @@ class KinesisEventSource(
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -3807,7 +3807,7 @@ class KinesisEventSourceProps(StreamEventSourceProps):
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -4007,7 +4007,7 @@ class KinesisEventSourceProps(StreamEventSourceProps):
 
     @builtins.property
     def on_failure(self) -> typing.Optional[_IEventSourceDlq_5e2c6ad9]:
-        '''An Amazon SQS queue or Amazon SNS topic destination for discarded records.
+        '''An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records.
 
         :default: - discarded records are ignored
         '''

aws_cdk/aws_rds/__init__.py

@@ -68,6 +68,22 @@ By default, the master password will be generated and stored in AWS Secrets Mana
 Your cluster will be empty by default. To add a default database upon construction, specify the
 `defaultDatabaseName` attribute.
 
+When you create a DB instance in your cluster, Aurora automatically chooses an appropriate AZ for that instance if you don't specify an AZ.
+You can place each instance in fixed availability zone by specifying `availabilityZone` property.
+For details, see [Regions and Availability Zones](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.RegionsAndAvailabilityZones.html).
+
+```python
+# vpc: ec2.Vpc
+
+cluster = rds.DatabaseCluster(self, "Database",
+    engine=rds.DatabaseClusterEngine.aurora_mysql(version=rds.AuroraMysqlEngineVersion.VER_3_02_1),
+    writer=rds.ClusterInstance.provisioned("writer",
+        availability_zone="us-east-1a"
+    ),
+    vpc=vpc
+)
+```
+
 To use dual-stack mode, specify `NetworkType.DUAL` on the `networkType` property:
 
 ```python
@@ -532,6 +548,19 @@ instance = rds.DatabaseInstance(self, "Instance",
 )
 ```
 
+When you create a DB instance, you can choose an Availability Zone or have Amazon RDS choose one for you randomly.
+For details, see [Regions, Availability Zones, and Local Zones](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html).
+
+```python
+# vpc: ec2.Vpc
+
+instance = rds.DatabaseInstance(self, "Instance",
+    engine=rds.DatabaseInstanceEngine.postgres(version=rds.PostgresEngineVersion.VER_16_3),
+    vpc=vpc,
+    availability_zone="us-east-1a"
+)
+```
+
 To use dual-stack mode, specify `NetworkType.DUAL` on the `networkType` property:
 
 ```python
@@ -2259,11 +2288,14 @@ class AuroraMysqlClusterEngineProps:
             
             cluster = rds.DatabaseCluster(self, "Database",
                 engine=rds.DatabaseClusterEngine.aurora_mysql(version=rds.AuroraMysqlEngineVersion.VER_3_01_0),
-                writer=rds.ClusterInstance.provisioned("Instance",
-                    instance_type=ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE3, ec2.InstanceSize.SMALL)
+                writer=rds.ClusterInstance.provisioned("writer",
+                    ca_certificate=rds.CaCertificate.RDS_CA_RSA2048_G1
                 ),
-                readers=[rds.ClusterInstance.provisioned("reader")],
-                instance_update_behaviour=rds.InstanceUpdateBehaviour.ROLLING,  # Optional - defaults to rds.InstanceUpdateBehaviour.BULK
+                readers=[
+                    rds.ClusterInstance.serverless_v2("reader",
+                        ca_certificate=rds.CaCertificate.of("custom-ca")
+                    )
+                ],
                 vpc=vpc
             )
         '''
@@ -18992,6 +19024,7 @@ class ClusterInstanceBindOptions:
         "allow_major_version_upgrade": "allowMajorVersionUpgrade",
         "apply_immediately": "applyImmediately",
         "auto_minor_version_upgrade": "autoMinorVersionUpgrade",
+        "availability_zone": "availabilityZone",
         "ca_certificate": "caCertificate",
         "enable_performance_insights": "enablePerformanceInsights",
         "instance_identifier": "instanceIdentifier",
@@ -19011,6 +19044,7 @@ class ClusterInstanceOptions:
         allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
         apply_immediately: typing.Optional[builtins.bool] = None,
         auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+        availability_zone: typing.Optional[builtins.str] = None,
         ca_certificate: typing.Optional[CaCertificate] = None,
         enable_performance_insights: typing.Optional[builtins.bool] = None,
         instance_identifier: typing.Optional[builtins.str] = None,
@@ -19027,6 +19061,7 @@ class ClusterInstanceOptions:
         :param allow_major_version_upgrade: Whether to allow upgrade of major version for the DB instance. Default: - false
         :param apply_immediately: Specifies whether changes to the DB instance and any pending modifications are applied immediately, regardless of the ``preferredMaintenanceWindow`` setting. If set to ``false``, changes are applied during the next maintenance window. Until RDS applies the changes, the DB instance remains in a drift state. As a result, the configuration doesn't fully reflect the requested modifications and temporarily diverges from the intended state. This property also determines whether the DB instance reboots when a static parameter is modified in the associated DB parameter group. Default: - Changes will be applied immediately
         :param auto_minor_version_upgrade: Whether to enable automatic upgrade of minor version for the DB instance. Default: - true
+        :param availability_zone: The Availability Zone (AZ) where the database will be created. For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one. Default: - A random, system-chosen Availability Zone in the endpointʼs AWS Region.
         :param ca_certificate: The identifier of the CA certificate for this DB cluster's instances. Specifying or updating this property triggers a reboot. For RDS DB engines: Default: - RDS will choose a certificate authority
         :param enable_performance_insights: Whether to enable Performance Insights for the DB instance. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
         :param instance_identifier: The identifier for the database instance. Default: - CloudFormation generated identifier
@@ -19055,6 +19090,7 @@ class ClusterInstanceOptions:
                 allow_major_version_upgrade=False,
                 apply_immediately=False,
                 auto_minor_version_upgrade=False,
+                availability_zone="availabilityZone",
                 ca_certificate=ca_certificate,
                 enable_performance_insights=False,
                 instance_identifier="instanceIdentifier",
@@ -19074,6 +19110,7 @@ class ClusterInstanceOptions:
             check_type(argname="argument allow_major_version_upgrade", value=allow_major_version_upgrade, expected_type=type_hints["allow_major_version_upgrade"])
             check_type(argname="argument apply_immediately", value=apply_immediately, expected_type=type_hints["apply_immediately"])
             check_type(argname="argument auto_minor_version_upgrade", value=auto_minor_version_upgrade, expected_type=type_hints["auto_minor_version_upgrade"])
+            check_type(argname="argument availability_zone", value=availability_zone, expected_type=type_hints["availability_zone"])
             check_type(argname="argument ca_certificate", value=ca_certificate, expected_type=type_hints["ca_certificate"])
             check_type(argname="argument enable_performance_insights", value=enable_performance_insights, expected_type=type_hints["enable_performance_insights"])
             check_type(argname="argument instance_identifier", value=instance_identifier, expected_type=type_hints["instance_identifier"])
@@ -19091,6 +19128,8 @@ class ClusterInstanceOptions:
             self._values["apply_immediately"] = apply_immediately
         if auto_minor_version_upgrade is not None:
             self._values["auto_minor_version_upgrade"] = auto_minor_version_upgrade
+        if availability_zone is not None:
+            self._values["availability_zone"] = availability_zone
         if ca_certificate is not None:
             self._values["ca_certificate"] = ca_certificate
         if enable_performance_insights is not None:
@@ -19148,6 +19187,20 @@ class ClusterInstanceOptions:
         result = self._values.get("auto_minor_version_upgrade")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def availability_zone(self) -> typing.Optional[builtins.str]:
+        '''The Availability Zone (AZ) where the database will be created.
+
+        For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones.
+        Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one.
+
+        :default: - A random, system-chosen Availability Zone in the endpointʼs AWS Region.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.RegionsAndAvailabilityZones.html
+        '''
+        result = self._values.get("availability_zone")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def ca_certificate(self) -> typing.Optional[CaCertificate]:
         '''The identifier of the CA certificate for this DB cluster's instances.
@@ -19325,6 +19378,7 @@ class ClusterInstanceOptions:
         "allow_major_version_upgrade": "allowMajorVersionUpgrade",
         "apply_immediately": "applyImmediately",
         "auto_minor_version_upgrade": "autoMinorVersionUpgrade",
+        "availability_zone": "availabilityZone",
         "ca_certificate": "caCertificate",
         "enable_performance_insights": "enablePerformanceInsights",
         "instance_identifier": "instanceIdentifier",
@@ -19346,6 +19400,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
         allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
         apply_immediately: typing.Optional[builtins.bool] = None,
         auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+        availability_zone: typing.Optional[builtins.str] = None,
         ca_certificate: typing.Optional[CaCertificate] = None,
         enable_performance_insights: typing.Optional[builtins.bool] = None,
         instance_identifier: typing.Optional[builtins.str] = None,
@@ -19364,6 +19419,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
         :param allow_major_version_upgrade: Whether to allow upgrade of major version for the DB instance. Default: - false
         :param apply_immediately: Specifies whether changes to the DB instance and any pending modifications are applied immediately, regardless of the ``preferredMaintenanceWindow`` setting. If set to ``false``, changes are applied during the next maintenance window. Until RDS applies the changes, the DB instance remains in a drift state. As a result, the configuration doesn't fully reflect the requested modifications and temporarily diverges from the intended state. This property also determines whether the DB instance reboots when a static parameter is modified in the associated DB parameter group. Default: - Changes will be applied immediately
         :param auto_minor_version_upgrade: Whether to enable automatic upgrade of minor version for the DB instance. Default: - true
+        :param availability_zone: The Availability Zone (AZ) where the database will be created. For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one. Default: - A random, system-chosen Availability Zone in the endpointʼs AWS Region.
         :param ca_certificate: The identifier of the CA certificate for this DB cluster's instances. Specifying or updating this property triggers a reboot. For RDS DB engines: Default: - RDS will choose a certificate authority
         :param enable_performance_insights: Whether to enable Performance Insights for the DB instance. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
         :param instance_identifier: The identifier for the database instance. Default: - CloudFormation generated identifier
@@ -19398,6 +19454,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
                 allow_major_version_upgrade=False,
                 apply_immediately=False,
                 auto_minor_version_upgrade=False,
+                availability_zone="availabilityZone",
                 ca_certificate=ca_certificate,
                 enable_performance_insights=False,
                 instance_identifier="instanceIdentifier",
@@ -19418,6 +19475,7 @@ class ClusterInstanceProps(ClusterInstanceOptions):
             check_type(argname="argument allow_major_version_upgrade", value=allow_major_version_upgrade, expected_type=type_hints["allow_major_version_upgrade"])
             check_type(argname="argument apply_immediately", value=apply_immediately, expected_type=type_hints["apply_immediately"])
             check_type(argname="argument auto_minor_version_upgrade", value=auto_minor_version_upgrade, expected_type=type_hints["auto_minor_version_upgrade"])
+            check_type(argname="argument availability_zone", value=availability_zone, expected_type=type_hints["availability_zone"])
             check_type(argname="argument ca_certificate", value=ca_certificate, expected_type=type_hints["ca_certificate"])
             check_type(argname="argument enable_performance_insights", value=enable_performance_insights, expected_type=type_hints["enable_performance_insights"])
             check_type(argname="argument instance_identifier", value=instance_identifier, expected_type=type_hints["instance_identifier"])
@@ -19439,6 +19497,8 @@ class ClusterInstanceProps(ClusterInstanceOptions):
             self._values["apply_immediately"] = apply_immediately
         if auto_minor_version_upgrade is not None:
             self._values["auto_minor_version_upgrade"] = auto_minor_version_upgrade
+        if availability_zone is not None:
+            self._values["availability_zone"] = availability_zone
         if ca_certificate is not None:
             self._values["ca_certificate"] = ca_certificate
         if enable_performance_insights is not None:
@@ -19498,6 +19558,20 @@ class ClusterInstanceProps(ClusterInstanceOptions):
         result = self._values.get("auto_minor_version_upgrade")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def availability_zone(self) -> typing.Optional[builtins.str]:
+        '''The Availability Zone (AZ) where the database will be created.
+
+        For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones.
+        Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one.
+
+        :default: - A random, system-chosen Availability Zone in the endpointʼs AWS Region.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.RegionsAndAvailabilityZones.html
+        '''
+        result = self._values.get("availability_zone")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def ca_certificate(self) -> typing.Optional[CaCertificate]:
         '''The identifier of the CA certificate for this DB cluster's instances.
@@ -20849,20 +20923,19 @@ class DatabaseClusterEngine(
         # vpc: ec2.Vpc
         
         cluster = rds.DatabaseCluster(self, "Database",
-            engine=rds.DatabaseClusterEngine.aurora_mysql(version=rds.AuroraMysqlEngineVersion.VER_3_01_0),
-            credentials=rds.Credentials.from_generated_secret("clusteradmin"),  # Optional - will default to 'admin' username and generated password
-            writer=rds.ClusterInstance.provisioned("writer",
-                publicly_accessible=False
-            ),
-            readers=[
-                rds.ClusterInstance.provisioned("reader1", promotion_tier=1),
-                rds.ClusterInstance.serverless_v2("reader2")
-            ],
-            vpc_subnets=ec2.SubnetSelection(
-                subnet_type=ec2.SubnetType.PRIVATE_WITH_EGRESS
+            engine=rds.DatabaseClusterEngine.aurora_mysql(
+                version=rds.AuroraMysqlEngineVersion.VER_3_03_0
             ),
+            writer=rds.ClusterInstance.provisioned("writer"),
             vpc=vpc
         )
+        
+        proxy = rds.DatabaseProxy(self, "Proxy",
+            proxy_target=rds.ProxyTarget.from_cluster(cluster),
+            secrets=[cluster.secret],
+            vpc=vpc,
+            client_password_auth_type=rds.ClientPasswordAuthType.MYSQL_NATIVE_PASSWORD
+        )
     '''
 
     def __init__(self) -> None:
@@ -36403,6 +36476,7 @@ class ProcessorFeatures:
         "allow_major_version_upgrade": "allowMajorVersionUpgrade",
         "apply_immediately": "applyImmediately",
         "auto_minor_version_upgrade": "autoMinorVersionUpgrade",
+        "availability_zone": "availabilityZone",
         "ca_certificate": "caCertificate",
         "enable_performance_insights": "enablePerformanceInsights",
         "instance_identifier": "instanceIdentifier",
@@ -36424,6 +36498,7 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
         allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
         apply_immediately: typing.Optional[builtins.bool] = None,
         auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+        availability_zone: typing.Optional[builtins.str] = None,
         ca_certificate: typing.Optional[CaCertificate] = None,
         enable_performance_insights: typing.Optional[builtins.bool] = None,
         instance_identifier: typing.Optional[builtins.str] = None,
@@ -36442,6 +36517,7 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
         :param allow_major_version_upgrade: Whether to allow upgrade of major version for the DB instance. Default: - false
         :param apply_immediately: Specifies whether changes to the DB instance and any pending modifications are applied immediately, regardless of the ``preferredMaintenanceWindow`` setting. If set to ``false``, changes are applied during the next maintenance window. Until RDS applies the changes, the DB instance remains in a drift state. As a result, the configuration doesn't fully reflect the requested modifications and temporarily diverges from the intended state. This property also determines whether the DB instance reboots when a static parameter is modified in the associated DB parameter group. Default: - Changes will be applied immediately
         :param auto_minor_version_upgrade: Whether to enable automatic upgrade of minor version for the DB instance. Default: - true
+        :param availability_zone: The Availability Zone (AZ) where the database will be created. For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one. Default: - A random, system-chosen Availability Zone in the endpointʼs AWS Region.
         :param ca_certificate: The identifier of the CA certificate for this DB cluster's instances. Specifying or updating this property triggers a reboot. For RDS DB engines: Default: - RDS will choose a certificate authority
         :param enable_performance_insights: Whether to enable Performance Insights for the DB instance. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
         :param instance_identifier: The identifier for the database instance. Default: - CloudFormation generated identifier
@@ -36476,6 +36552,7 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
             check_type(argname="argument allow_major_version_upgrade", value=allow_major_version_upgrade, expected_type=type_hints["allow_major_version_upgrade"])
             check_type(argname="argument apply_immediately", value=apply_immediately, expected_type=type_hints["apply_immediately"])
             check_type(argname="argument auto_minor_version_upgrade", value=auto_minor_version_upgrade, expected_type=type_hints["auto_minor_version_upgrade"])
+            check_type(argname="argument availability_zone", value=availability_zone, expected_type=type_hints["availability_zone"])
             check_type(argname="argument ca_certificate", value=ca_certificate, expected_type=type_hints["ca_certificate"])
             check_type(argname="argument enable_performance_insights", value=enable_performance_insights, expected_type=type_hints["enable_performance_insights"])
             check_type(argname="argument instance_identifier", value=instance_identifier, expected_type=type_hints["instance_identifier"])
@@ -36495,6 +36572,8 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
             self._values["apply_immediately"] = apply_immediately
         if auto_minor_version_upgrade is not None:
             self._values["auto_minor_version_upgrade"] = auto_minor_version_upgrade
+        if availability_zone is not None:
+            self._values["availability_zone"] = availability_zone
         if ca_certificate is not None:
             self._values["ca_certificate"] = ca_certificate
         if enable_performance_insights is not None:
@@ -36556,6 +36635,20 @@ class ProvisionedClusterInstanceProps(ClusterInstanceOptions):
         result = self._values.get("auto_minor_version_upgrade")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def availability_zone(self) -> typing.Optional[builtins.str]:
+        '''The Availability Zone (AZ) where the database will be created.
+
+        For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones.
+        Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one.
+
+        :default: - A random, system-chosen Availability Zone in the endpointʼs AWS Region.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.RegionsAndAvailabilityZones.html
+        '''
+        result = self._values.get("availability_zone")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def ca_certificate(self) -> typing.Optional[CaCertificate]:
         '''The identifier of the CA certificate for this DB cluster's instances.
@@ -38650,6 +38743,7 @@ class ServerlessScalingOptions:
         "allow_major_version_upgrade": "allowMajorVersionUpgrade",
         "apply_immediately": "applyImmediately",
         "auto_minor_version_upgrade": "autoMinorVersionUpgrade",
+        "availability_zone": "availabilityZone",
         "ca_certificate": "caCertificate",
         "enable_performance_insights": "enablePerformanceInsights",
         "instance_identifier": "instanceIdentifier",
@@ -38670,6 +38764,7 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
         allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
         apply_immediately: typing.Optional[builtins.bool] = None,
         auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+        availability_zone: typing.Optional[builtins.str] = None,
         ca_certificate: typing.Optional[CaCertificate] = None,
         enable_performance_insights: typing.Optional[builtins.bool] = None,
         instance_identifier: typing.Optional[builtins.str] = None,
@@ -38687,6 +38782,7 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
         :param allow_major_version_upgrade: Whether to allow upgrade of major version for the DB instance. Default: - false
         :param apply_immediately: Specifies whether changes to the DB instance and any pending modifications are applied immediately, regardless of the ``preferredMaintenanceWindow`` setting. If set to ``false``, changes are applied during the next maintenance window. Until RDS applies the changes, the DB instance remains in a drift state. As a result, the configuration doesn't fully reflect the requested modifications and temporarily diverges from the intended state. This property also determines whether the DB instance reboots when a static parameter is modified in the associated DB parameter group. Default: - Changes will be applied immediately
         :param auto_minor_version_upgrade: Whether to enable automatic upgrade of minor version for the DB instance. Default: - true
+        :param availability_zone: The Availability Zone (AZ) where the database will be created. For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one. Default: - A random, system-chosen Availability Zone in the endpointʼs AWS Region.
         :param ca_certificate: The identifier of the CA certificate for this DB cluster's instances. Specifying or updating this property triggers a reboot. For RDS DB engines: Default: - RDS will choose a certificate authority
         :param enable_performance_insights: Whether to enable Performance Insights for the DB instance. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
         :param instance_identifier: The identifier for the database instance. Default: - CloudFormation generated identifier
@@ -38723,6 +38819,7 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
             check_type(argname="argument allow_major_version_upgrade", value=allow_major_version_upgrade, expected_type=type_hints["allow_major_version_upgrade"])
             check_type(argname="argument apply_immediately", value=apply_immediately, expected_type=type_hints["apply_immediately"])
             check_type(argname="argument auto_minor_version_upgrade", value=auto_minor_version_upgrade, expected_type=type_hints["auto_minor_version_upgrade"])
+            check_type(argname="argument availability_zone", value=availability_zone, expected_type=type_hints["availability_zone"])
             check_type(argname="argument ca_certificate", value=ca_certificate, expected_type=type_hints["ca_certificate"])
             check_type(argname="argument enable_performance_insights", value=enable_performance_insights, expected_type=type_hints["enable_performance_insights"])
             check_type(argname="argument instance_identifier", value=instance_identifier, expected_type=type_hints["instance_identifier"])
@@ -38741,6 +38838,8 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
             self._values["apply_immediately"] = apply_immediately
         if auto_minor_version_upgrade is not None:
             self._values["auto_minor_version_upgrade"] = auto_minor_version_upgrade
+        if availability_zone is not None:
+            self._values["availability_zone"] = availability_zone
         if ca_certificate is not None:
             self._values["ca_certificate"] = ca_certificate
         if enable_performance_insights is not None:
@@ -38800,6 +38899,20 @@ class ServerlessV2ClusterInstanceProps(ClusterInstanceOptions):
         result = self._values.get("auto_minor_version_upgrade")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def availability_zone(self) -> typing.Optional[builtins.str]:
+        '''The Availability Zone (AZ) where the database will be created.
+
+        For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones.
+        Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one.
+
+        :default: - A random, system-chosen Availability Zone in the endpointʼs AWS Region.
+
+        :see: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.RegionsAndAvailabilityZones.html
+        '''
+        result = self._values.get("availability_zone")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def ca_certificate(self) -> typing.Optional[CaCertificate]:
         '''The identifier of the CA certificate for this DB cluster's instances.
@@ -40815,6 +40928,7 @@ class ClusterInstance(
         allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
         apply_immediately: typing.Optional[builtins.bool] = None,
         auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+        availability_zone: typing.Optional[builtins.str] = None,
         ca_certificate: typing.Optional[CaCertificate] = None,
         enable_performance_insights: typing.Optional[builtins.bool] = None,
         instance_identifier: typing.Optional[builtins.str] = None,
@@ -40834,6 +40948,7 @@ class ClusterInstance(
         :param allow_major_version_upgrade: Whether to allow upgrade of major version for the DB instance. Default: - false
         :param apply_immediately: Specifies whether changes to the DB instance and any pending modifications are applied immediately, regardless of the ``preferredMaintenanceWindow`` setting. If set to ``false``, changes are applied during the next maintenance window. Until RDS applies the changes, the DB instance remains in a drift state. As a result, the configuration doesn't fully reflect the requested modifications and temporarily diverges from the intended state. This property also determines whether the DB instance reboots when a static parameter is modified in the associated DB parameter group. Default: - Changes will be applied immediately
         :param auto_minor_version_upgrade: Whether to enable automatic upgrade of minor version for the DB instance. Default: - true
+        :param availability_zone: The Availability Zone (AZ) where the database will be created. For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one. Default: - A random, system-chosen Availability Zone in the endpointʼs AWS Region.
         :param ca_certificate: The identifier of the CA certificate for this DB cluster's instances. Specifying or updating this property triggers a reboot. For RDS DB engines: Default: - RDS will choose a certificate authority
         :param enable_performance_insights: Whether to enable Performance Insights for the DB instance. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
         :param instance_identifier: The identifier for the database instance. Default: - CloudFormation generated identifier
@@ -40860,6 +40975,7 @@ class ClusterInstance(
             allow_major_version_upgrade=allow_major_version_upgrade,
             apply_immediately=apply_immediately,
             auto_minor_version_upgrade=auto_minor_version_upgrade,
+            availability_zone=availability_zone,
             ca_certificate=ca_certificate,
             enable_performance_insights=enable_performance_insights,
             instance_identifier=instance_identifier,
@@ -40884,6 +41000,7 @@ class ClusterInstance(
         allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
         apply_immediately: typing.Optional[builtins.bool] = None,
         auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+        availability_zone: typing.Optional[builtins.str] = None,
         ca_certificate: typing.Optional[CaCertificate] = None,
         enable_performance_insights: typing.Optional[builtins.bool] = None,
         instance_identifier: typing.Optional[builtins.str] = None,
@@ -40902,6 +41019,7 @@ class ClusterInstance(
         :param allow_major_version_upgrade: Whether to allow upgrade of major version for the DB instance. Default: - false
         :param apply_immediately: Specifies whether changes to the DB instance and any pending modifications are applied immediately, regardless of the ``preferredMaintenanceWindow`` setting. If set to ``false``, changes are applied during the next maintenance window. Until RDS applies the changes, the DB instance remains in a drift state. As a result, the configuration doesn't fully reflect the requested modifications and temporarily diverges from the intended state. This property also determines whether the DB instance reboots when a static parameter is modified in the associated DB parameter group. Default: - Changes will be applied immediately
         :param auto_minor_version_upgrade: Whether to enable automatic upgrade of minor version for the DB instance. Default: - true
+        :param availability_zone: The Availability Zone (AZ) where the database will be created. For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one. Default: - A random, system-chosen Availability Zone in the endpointʼs AWS Region.
         :param ca_certificate: The identifier of the CA certificate for this DB cluster's instances. Specifying or updating this property triggers a reboot. For RDS DB engines: Default: - RDS will choose a certificate authority
         :param enable_performance_insights: Whether to enable Performance Insights for the DB instance. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
         :param instance_identifier: The identifier for the database instance. Default: - CloudFormation generated identifier
@@ -40927,6 +41045,7 @@ class ClusterInstance(
             allow_major_version_upgrade=allow_major_version_upgrade,
             apply_immediately=apply_immediately,
             auto_minor_version_upgrade=auto_minor_version_upgrade,
+            availability_zone=availability_zone,
             ca_certificate=ca_certificate,
             enable_performance_insights=enable_performance_insights,
             instance_identifier=instance_identifier,
@@ -49813,6 +49932,7 @@ def _typecheckingstub__8cdde1ea7f85160803079277e8fcc0af34768579c1b17b771033b3c63
     allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
     apply_immediately: typing.Optional[builtins.bool] = None,
     auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+    availability_zone: typing.Optional[builtins.str] = None,
     ca_certificate: typing.Optional[CaCertificate] = None,
     enable_performance_insights: typing.Optional[builtins.bool] = None,
     instance_identifier: typing.Optional[builtins.str] = None,
@@ -49832,6 +49952,7 @@ def _typecheckingstub__431d59239caf38b9912bfae3130d40eeb8bdb18e013240bac43c98015
     allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
     apply_immediately: typing.Optional[builtins.bool] = None,
     auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+    availability_zone: typing.Optional[builtins.str] = None,
     ca_certificate: typing.Optional[CaCertificate] = None,
     enable_performance_insights: typing.Optional[builtins.bool] = None,
     instance_identifier: typing.Optional[builtins.str] = None,
@@ -50732,6 +50853,7 @@ def _typecheckingstub__0d5c78a39da629a585066921d3ee78da795285acdbebe6935198fc929
     allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
     apply_immediately: typing.Optional[builtins.bool] = None,
     auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+    availability_zone: typing.Optional[builtins.str] = None,
     ca_certificate: typing.Optional[CaCertificate] = None,
     enable_performance_insights: typing.Optional[builtins.bool] = None,
     instance_identifier: typing.Optional[builtins.str] = None,
@@ -50972,6 +51094,7 @@ def _typecheckingstub__c8fd71a155386e8ce12e74b8c5684dfdd43d26e347ef8bbb979e8a2c3
     allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
     apply_immediately: typing.Optional[builtins.bool] = None,
     auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+    availability_zone: typing.Optional[builtins.str] = None,
     ca_certificate: typing.Optional[CaCertificate] = None,
     enable_performance_insights: typing.Optional[builtins.bool] = None,
     instance_identifier: typing.Optional[builtins.str] = None,
@@ -51109,6 +51232,7 @@ def _typecheckingstub__d0d2cd14a2c7ed00bfb6fd9860c31cd0b1af1bff8343258b1b4a8d847
     allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
     apply_immediately: typing.Optional[builtins.bool] = None,
     auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+    availability_zone: typing.Optional[builtins.str] = None,
     ca_certificate: typing.Optional[CaCertificate] = None,
     enable_performance_insights: typing.Optional[builtins.bool] = None,
     instance_identifier: typing.Optional[builtins.str] = None,
@@ -51130,6 +51254,7 @@ def _typecheckingstub__95714f22d2724c29931e2710712a92b10932588d2061fa1ceed93097e
     allow_major_version_upgrade: typing.Optional[builtins.bool] = None,
     apply_immediately: typing.Optional[builtins.bool] = None,
     auto_minor_version_upgrade: typing.Optional[builtins.bool] = None,
+    availability_zone: typing.Optional[builtins.str] = None,
     ca_certificate: typing.Optional[CaCertificate] = None,
     enable_performance_insights: typing.Optional[builtins.bool] = None,
     instance_identifier: typing.Optional[builtins.str] = None,

aws_cdk/cloud_assembly_schema/__init__.py

@@ -2912,7 +2912,7 @@ class DeployOptions(DefaultCdkOptions):
         :param notification_arns: ARNs of SNS topics that CloudFormation will notify with stack related events. Default: - no notifications
         :param outputs_file: Path to file where stack outputs will be written after a successful deploy as JSON. Default: - Outputs are not written to any file
         :param parameters: Additional parameters for CloudFormation at deploy time. Default: {}
-        :param require_approval: What kind of security changes require approval. Default: RequireApproval.Never
+        :param require_approval: What kind of security changes require approval. Default: RequireApproval.NEVER
         :param reuse_assets: Reuse the assets with the given asset IDs. Default: - do not reuse assets
         :param rollback: Rollback failed deployments. Default: true
         :param toolkit_stack_name: Name of the toolkit stack to use/deploy. Default: CDKToolkit
@@ -3391,7 +3391,7 @@ class DeployOptions(DefaultCdkOptions):
     def require_approval(self) -> typing.Optional["RequireApproval"]:
         '''What kind of security changes require approval.
 
-        :default: RequireApproval.Never
+        :default: RequireApproval.NEVER
         '''
         result = self._values.get("require_approval")
         return typing.cast(typing.Optional["RequireApproval"], result)

{aws_cdk_lib-2.183.0.dist-info → aws_cdk_lib-2.184.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: aws-cdk-lib
-Version: 2.183.0
+Version: 2.184.1
 Summary: Version 2 of the AWS Cloud Development Kit library
 Home-page: https://github.com/aws/aws-cdk
 Author: Amazon Web Services
@@ -10,22 +10,21 @@ Classifier: Intended Audience :: Developers
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: JavaScript
 Classifier: Programming Language :: Python :: 3 :: Only
-Classifier: Programming Language :: Python :: 3.8
 Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Typing :: Typed
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: License :: OSI Approved
-Requires-Python: ~=3.8
+Requires-Python: ~=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE
 License-File: NOTICE
-Requires-Dist: aws-cdk.asset-awscli-v1<3.0.0,>=2.2.208
+Requires-Dist: aws-cdk.asset-awscli-v1<3.0.0,>=2.2.227
 Requires-Dist: aws-cdk.asset-node-proxy-agent-v6<3.0.0,>=2.1.0
-Requires-Dist: aws-cdk.cloud-assembly-schema<41.0.0,>=40.6.0
+Requires-Dist: aws-cdk.cloud-assembly-schema<41.0.0,>=40.7.0
 Requires-Dist: constructs<11.0.0,>=10.0.0
-Requires-Dist: jsii<2.0.0,>=1.106.0
+Requires-Dist: jsii<2.0.0,>=1.109.0
 Requires-Dist: publication>=0.0.3
 Requires-Dist: typeguard<4.3.0,>=2.13.3
 

{aws_cdk_lib-2.183.0.dist-info → aws_cdk_lib-2.184.1.dist-info}/RECORD

@@ -1,7 +1,7 @@
 aws_cdk/__init__.py,sha256=CT2hAjEz6eznk0nBuMMMKiAoNy1NfwGxf5uzqjCTpY4,1988974
 aws_cdk/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
-aws_cdk/_jsii/__init__.py,sha256=pLHC3HsMfNrXlLzgdVyUjBh-RJUZKnhjGlBVXowB0Hc,1543
-aws_cdk/_jsii/aws-cdk-lib@2.183.0.jsii.tgz,sha256=pMFojqNmU9tRtC6YbOL3WF8gc-b4G2VpQvd0nk0SlPQ,24608489
+aws_cdk/_jsii/__init__.py,sha256=uqvFRTAPKbpNWWbGKk3_hYN4BN7V289MWvkTKC1AgVA,1543
+aws_cdk/_jsii/aws-cdk-lib@2.184.1.jsii.tgz,sha256=6xKGzcMDElUcNlHBkUf4Ww3C6H0ufGlheZOEktx1Jmc,24613012
 aws_cdk/alexa_ask/__init__.py,sha256=yF4ftch7XArzAniw_xoUmGi3wLGeBqIUlOjBTHSxDb4,36370
 aws_cdk/assertions/__init__.py,sha256=Fe7BZZpx5cUrxKtNdGbU4eXue79txDh_GqjfLV5wgCM,94355
 aws_cdk/aws_accessanalyzer/__init__.py,sha256=XiNBttjwK1s2CYyccwKCXH5Nzb74L1i6rVnZ9Zwh49I,57464
@@ -49,7 +49,7 @@ aws_cdk/aws_cleanroomsml/__init__.py,sha256=OZ769Xji5yR16YuvCcaCuH-5emjHREnhIUqj
 aws_cdk/aws_cloud9/__init__.py,sha256=WbYJhSBPFY4ix6PJiND_KHPIVWxim7VAsbDJ6ePpGec,43094
 aws_cdk/aws_cloudformation/__init__.py,sha256=7u_vH1KkZPhdXHeQF7lowC3OOTazNy6VVhfSzuvpkJg,523009
 aws_cdk/aws_cloudfront/__init__.py,sha256=lrA1dgv7ksOyVXtrEkLhKLBMIwcN6sfo8bn2FASf2d8,1636176
-aws_cdk/aws_cloudfront/experimental/__init__.py,sha256=Svd8hUJhY0KNHirVPPGjF1vmiBBiGoxlcCI93XvdeYQ,142419
+aws_cdk/aws_cloudfront/experimental/__init__.py,sha256=6tyuWzp_aAXavJNY0Biw4oQOGViZEolRSLRkyeaVKM0,142434
 aws_cdk/aws_cloudfront_origins/__init__.py,sha256=D8kwMlk2NKWrXsB7J9EDcGJYL9BSxN1uXWdw7olR1eg,320367
 aws_cdk/aws_cloudtrail/__init__.py,sha256=OHfsyI4ErR7X1fSOjcezQcN0OVu68TcYnQ1Jw1TS11I,365818
 aws_cdk/aws_cloudwatch/__init__.py,sha256=VHqNGmsxGh8Pay-7dLewu0z--nXt0xIiaTbmQgMJJDA,815681
@@ -108,8 +108,8 @@ aws_cdk/aws_emr/__init__.py,sha256=qP-9c3PI1TltlasLxEKJGXK5YXa1qIquA_U06GWNLvw,7
 aws_cdk/aws_emrcontainers/__init__.py,sha256=oxnV_uTszH48R3bV661tMkLbbyAphYKzYCg7C8LSOBk,31965
 aws_cdk/aws_emrserverless/__init__.py,sha256=UhwWby2jP2uaBGV5JNhRS1Y-SB914vhJknIleLyitKU,156837
 aws_cdk/aws_entityresolution/__init__.py,sha256=OKdLQprExmxYTJp3Awbtm_rRjTBzh0a8h2xa4m8Sa6Q,268322
-aws_cdk/aws_events/__init__.py,sha256=_LVqVv5zQS7CLreF8OIfimwin3qdAtXZObzGOpZzWR4,690890
-aws_cdk/aws_events_targets/__init__.py,sha256=-7Iu_YnxudK_goEYA2rhRc6-Lf_quUXtmXZC3kmpd1Q,294495
+aws_cdk/aws_events/__init__.py,sha256=qYkAVTpVRhkr74bB4yAiEwZTPEYIRbiooRFoBWdltqs,690927
+aws_cdk/aws_events_targets/__init__.py,sha256=VjTp0TggOFCaSt09TkbWg4dCEIdh22BodZ7I7LaGe4Q,295737
 aws_cdk/aws_eventschemas/__init__.py,sha256=UUe4lA7r4R1145JUgfbMmvgyLVscusnYYPmuDgUhqU4,72936
 aws_cdk/aws_evidently/__init__.py,sha256=adPCcp-p4hfgkrjB3Hxlmum-NU4gMq9TrWcMEDNhziE,248694
 aws_cdk/aws_finspace/__init__.py,sha256=WoB0n3g8JuoSnzQXAjy3rxKka_vTJBvassXdV8ux5BI,51444
@@ -130,7 +130,7 @@ aws_cdk/aws_groundstation/__init__.py,sha256=hPZkcNCJiPbU8-OI4iCYpC27uzednN1Vt6F
 aws_cdk/aws_guardduty/__init__.py,sha256=XMUcOWwWMo073sJ_gbrB6FRtN190FVTgLg4oVcdHP1g,261720
 aws_cdk/aws_healthimaging/__init__.py,sha256=bNpcbOhCYjvvgCJwb6pbmA8BH_8RjtjKJZG8f40I8qQ,17410
 aws_cdk/aws_healthlake/__init__.py,sha256=dMFbQBLwb5u5qcae0VijYlqI8dU47O7F4Cr7uSPqFsE,55398
-aws_cdk/aws_iam/__init__.py,sha256=RudpoLK7DZ17d7sAHzlCUy5MxVRTdgLHnf4S23BwOeY,862810
+aws_cdk/aws_iam/__init__.py,sha256=cJIThtNamlAD5fupUatmdJpHyPtmlE-1I9AKREde3Lw,862630
 aws_cdk/aws_identitystore/__init__.py,sha256=yXjJuier75gXXW5QBSRTsGvDx5BdNdu9VRcnLhbEMlQ,32106
 aws_cdk/aws_imagebuilder/__init__.py,sha256=xnhEuR7Ad_174z7mrTVY9k6e31IKVwOVpXfFUmZHUWI,592140
 aws_cdk/aws_inspector/__init__.py,sha256=cjCiSxDMYusGsxpd2a3d2wOIW7UK32LdpPT5FvLDSHU,52446
@@ -155,13 +155,13 @@ aws_cdk/aws_kendraranking/__init__.py,sha256=3HBuK2dbNWAYDUbjyCmc7D9M9pDo1jg-DNC
 aws_cdk/aws_kinesis/__init__.py,sha256=Zy8yybVxFdNNNFkamLRdGFivYe7J90nrGAT_HiGONVM,353435
 aws_cdk/aws_kinesisanalytics/__init__.py,sha256=0ZPCWgzPFOS99sfyhzdTfr7-eQQMoUlR_eDmf5PCmc0,587440
 aws_cdk/aws_kinesisanalyticsv2/__init__.py,sha256=zAK6orw0mZs0V98cWWb94KcE76_nieuxXVFgKQCD9XM,387963
-aws_cdk/aws_kinesisfirehose/__init__.py,sha256=BUVKNQkI8thv66zNmX7ZCCknKP1akRFsHZD7eV5_9Vo,843520
+aws_cdk/aws_kinesisfirehose/__init__.py,sha256=iqmnmluI82kvnqebGGMq71O2crmq7BukMZ8fV0zn1Tc,842936
 aws_cdk/aws_kinesisvideo/__init__.py,sha256=KR-ZCTMZFNR9EJ32dIjEfeiZQMJZha33v-2lg0-mhYY,38745
 aws_cdk/aws_kms/__init__.py,sha256=zVprnq7sot7-s8S3-EUMDO4YB7Y1DTDIycenuMo3edw,251590
 aws_cdk/aws_lakeformation/__init__.py,sha256=MmGVkaQ4_kMg9y78pdpq-YO4OEJXC5vMi3Z5UliTZ3M,335979
-aws_cdk/aws_lambda/__init__.py,sha256=j-4rw40EIVbJetn34JK52bqaKtZJsshlDaYeUCukcNM,1744584
+aws_cdk/aws_lambda/__init__.py,sha256=eqma_MLwzFMOHk6IvtWPCkfdf14gqPOHSFYpuUmt7qE,1744704
 aws_cdk/aws_lambda_destinations/__init__.py,sha256=WHB7Vk6jk0pwFVUEAPGfFuSUUOJirZ7h3K5Z92yoE8E,24123
-aws_cdk/aws_lambda_event_sources/__init__.py,sha256=zL9hyaZTZbcJNwWfLQkryhBzWBi-5MgxjFBivhzzH0A,247801
+aws_cdk/aws_lambda_event_sources/__init__.py,sha256=RrZEPOjJO_mJd-bR1wmP5Su8sFbGcjaZ9gf-KyJ_U-4,247948
 aws_cdk/aws_lambda_nodejs/__init__.py,sha256=5ZHsuf92bN0tyUQDKHmsVuF0s6nW28juTIgcMUyPen4,179430
 aws_cdk/aws_launchwizard/__init__.py,sha256=rPNzud_j-MSKV7aH_fJcJhTHdXtzItJA8hVk37HJHuY,24028
 aws_cdk/aws_lex/__init__.py,sha256=wYvO4joPahEBoAF9dg_wj6u1nymh32ukEYkG4UfWAew,707100
@@ -216,7 +216,7 @@ aws_cdk/aws_qldb/__init__.py,sha256=Y77mQlE_bPnvp2-xi6Zx7Nqq88MVjB0bGsFskfkTpj8,
 aws_cdk/aws_quicksight/__init__.py,sha256=GmBXrz4cuiOiHZBU24eKDQWKek5uI9z_KDoJpP3xxTA,14366277
 aws_cdk/aws_ram/__init__.py,sha256=hTueUpQ-pdpE9TIHA7Ekd4-IMhT006gRbqhaUtTDDy0,51838
 aws_cdk/aws_rbin/__init__.py,sha256=CzabGGl5JnclFXLGuB8hu8bf_z0rWog3FqYK7o84QYo,50396
-aws_cdk/aws_rds/__init__.py,sha256=mQObK7IFtNzqiu21YUfnZ1IZrtwVferdfOBt3AznHbg,2920587
+aws_cdk/aws_rds/__init__.py,sha256=zpJhdg10EBWDOXz3ffCnH3YKld4q4s26VRRRgkPQCvw,2929219
 aws_cdk/aws_redshift/__init__.py,sha256=_bz821c0euCtdo8lBVuh1EQ7r3Rg3kvzgCfEJz1bmLw,405044
 aws_cdk/aws_redshiftserverless/__init__.py,sha256=_sToFikuIuA0NKu0ug8TqhCnDsCu-5SLosIeCvtxkH0,170949
 aws_cdk/aws_refactorspaces/__init__.py,sha256=HlrRPKH0kwPz6Ka6zooBl3hqU5s6lpjiLrMjJXHDIro,123625
@@ -283,7 +283,7 @@ aws_cdk/aws_workspaces/__init__.py,sha256=agC72J8zP_G2NI4nzzYjmlSNUygoa7f-ebFcfx
 aws_cdk/aws_workspacesthinclient/__init__.py,sha256=nFSsouXqpjSDrsEBOH0CGV6CCwHxCjNACgcigDEMN8g,49517
 aws_cdk/aws_workspacesweb/__init__.py,sha256=CppQEMxEhUPkEPh6MmFFfhsm1c2TybopdiZGuuiAEfA,280980
 aws_cdk/aws_xray/__init__.py,sha256=xEfRY-cPsnAqrrYueXFUxXskU4CxwejB1wrTMGrNKCc,106868
-aws_cdk/cloud_assembly_schema/__init__.py,sha256=o5Jxc9ApXbvUYeNbljV-HFrVWOeWsBPxuAoQFUsV8p0,440021
+aws_cdk/cloud_assembly_schema/__init__.py,sha256=7FnuQlp_Lxoe9Qqqysx7AIR7oUEeMLsxjoM_FdCgkBE,440021
 aws_cdk/cloudformation_include/__init__.py,sha256=nWU59UskSwMHLVfmA2qrsTOqUk65NWElIPTvp-KLA_8,50358
 aws_cdk/custom_resources/__init__.py,sha256=lZy80GjA5K94Dr5vkA4C_77fc4Ow0vrSBQ-4P6K2M18,173059
 aws_cdk/cx_api/__init__.py,sha256=soCQVBkw6fPzkwGqmqxizGVpq9Mq6asAuhqICFAm0wo,176191
@@ -292,9 +292,9 @@ aws_cdk/lambda_layer_node_proxy_agent/__init__.py,sha256=Q0PMbPsP4A7YO-YZe9esn-i
 aws_cdk/pipelines/__init__.py,sha256=HOXBjF1CPi8wQm8zl8Si7G8DpfKl_DyY7-Bgm8WpjEU,397495
 aws_cdk/region_info/__init__.py,sha256=29jwDjGrb4gSGedV1W1e5SuAYF9ZZKYsz0gsSFjdBO4,39658
 aws_cdk/triggers/__init__.py,sha256=fPVnj7ot9BFSzO-cTWQz9bMuGPG1hqZFJ7ROMkq0vnk,123578
-aws_cdk_lib-2.183.0.dist-info/LICENSE,sha256=y47tc38H0C4DpGljYUZDl8XxidQjNxxGLq-K4jwv6Xc,11391
-aws_cdk_lib-2.183.0.dist-info/METADATA,sha256=ZWAoX8incNXZhQtyxm-sXx4qA-HgVVho6BOXySIu5_g,59972
-aws_cdk_lib-2.183.0.dist-info/NOTICE,sha256=lrDSwMl9zn-5xv2z3qp2Rw6Nm8pARejpIJ5eXzJtuQk,41177
-aws_cdk_lib-2.183.0.dist-info/WHEEL,sha256=tZoeGjtWxWRfdplE7E3d45VPlLNQnvbKiYnx7gwAy8A,92
-aws_cdk_lib-2.183.0.dist-info/top_level.txt,sha256=1TALAKbuUGsMSrfKWEf268lySCmcqSEO6cDYe_XlLHM,8
-aws_cdk_lib-2.183.0.dist-info/RECORD,,
+aws_cdk_lib-2.184.1.dist-info/LICENSE,sha256=y47tc38H0C4DpGljYUZDl8XxidQjNxxGLq-K4jwv6Xc,11391
+aws_cdk_lib-2.184.1.dist-info/METADATA,sha256=nGc-P3ImT6U18PyDNaD6InjkYd1VupLSmWbcsmGBU2c,59922
+aws_cdk_lib-2.184.1.dist-info/NOTICE,sha256=lrDSwMl9zn-5xv2z3qp2Rw6Nm8pARejpIJ5eXzJtuQk,41177
+aws_cdk_lib-2.184.1.dist-info/WHEEL,sha256=tZoeGjtWxWRfdplE7E3d45VPlLNQnvbKiYnx7gwAy8A,92
+aws_cdk_lib-2.184.1.dist-info/top_level.txt,sha256=1TALAKbuUGsMSrfKWEf268lySCmcqSEO6cDYe_XlLHM,8
+aws_cdk_lib-2.184.1.dist-info/RECORD,,