aws-cdk-lib 2.184.1__py3-none-any.whl → 2.185.0__py3-none-any.whl

aws_cdk/aws_ecr/__init__.py

@@ -771,9 +771,11 @@ class CfnPullThroughCacheRule(
         
         cfn_pull_through_cache_rule = ecr.CfnPullThroughCacheRule(self, "MyCfnPullThroughCacheRule",
             credential_arn="credentialArn",
+            custom_role_arn="customRoleArn",
             ecr_repository_prefix="ecrRepositoryPrefix",
             upstream_registry="upstreamRegistry",
-            upstream_registry_url="upstreamRegistryUrl"
+            upstream_registry_url="upstreamRegistryUrl",
+            upstream_repository_prefix="upstreamRepositoryPrefix"
         )
     '''
 
@@ -783,17 +785,21 @@ class CfnPullThroughCacheRule(
         id: builtins.str,
         *,
         credential_arn: typing.Optional[builtins.str] = None,
+        custom_role_arn: typing.Optional[builtins.str] = None,
         ecr_repository_prefix: typing.Optional[builtins.str] = None,
         upstream_registry: typing.Optional[builtins.str] = None,
         upstream_registry_url: typing.Optional[builtins.str] = None,
+        upstream_repository_prefix: typing.Optional[builtins.str] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param credential_arn: The ARN of the Secrets Manager secret associated with the pull through cache rule.
+        :param custom_role_arn: The ARN of the IAM role associated with the pull through cache rule.
         :param ecr_repository_prefix: The Amazon ECR repository prefix associated with the pull through cache rule.
         :param upstream_registry: The name of the upstream source registry associated with the pull through cache rule.
         :param upstream_registry_url: The upstream registry URL associated with the pull through cache rule.
+        :param upstream_repository_prefix: The upstream repository prefix associated with the pull through cache rule.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__d43871e7810dc89346a08c3c9c24a04a2b82bf02da0d8fa05ef0df564aea4986)
@@ -801,9 +807,11 @@ class CfnPullThroughCacheRule(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnPullThroughCacheRuleProps(
             credential_arn=credential_arn,
+            custom_role_arn=custom_role_arn,
             ecr_repository_prefix=ecr_repository_prefix,
             upstream_registry=upstream_registry,
             upstream_registry_url=upstream_registry_url,
+            upstream_repository_prefix=upstream_repository_prefix,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -856,6 +864,19 @@ class CfnPullThroughCacheRule(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "credentialArn", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="customRoleArn")
+    def custom_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the IAM role associated with the pull through cache rule.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "customRoleArn"))
+
+    @custom_role_arn.setter
+    def custom_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__bfdbe9596057e097bfe1b7f8a0aa5e6c64ae2382eeabb10b892cc46dd20f8291)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "customRoleArn", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="ecrRepositoryPrefix")
     def ecr_repository_prefix(self) -> typing.Optional[builtins.str]:
@@ -895,15 +916,30 @@ class CfnPullThroughCacheRule(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "upstreamRegistryUrl", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="upstreamRepositoryPrefix")
+    def upstream_repository_prefix(self) -> typing.Optional[builtins.str]:
+        '''The upstream repository prefix associated with the pull through cache rule.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "upstreamRepositoryPrefix"))
+
+    @upstream_repository_prefix.setter
+    def upstream_repository_prefix(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5acaf55fdc7a202ee1e0b91a061ceea344f717ca76a78fbb62ae05bdbc30add0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "upstreamRepositoryPrefix", value) # pyright: ignore[reportArgumentType]
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ecr.CfnPullThroughCacheRuleProps",
     jsii_struct_bases=[],
     name_mapping={
         "credential_arn": "credentialArn",
+        "custom_role_arn": "customRoleArn",
         "ecr_repository_prefix": "ecrRepositoryPrefix",
         "upstream_registry": "upstreamRegistry",
         "upstream_registry_url": "upstreamRegistryUrl",
+        "upstream_repository_prefix": "upstreamRepositoryPrefix",
     },
 )
 class CfnPullThroughCacheRuleProps:
@@ -911,16 +947,20 @@ class CfnPullThroughCacheRuleProps:
         self,
         *,
         credential_arn: typing.Optional[builtins.str] = None,
+        custom_role_arn: typing.Optional[builtins.str] = None,
         ecr_repository_prefix: typing.Optional[builtins.str] = None,
         upstream_registry: typing.Optional[builtins.str] = None,
         upstream_registry_url: typing.Optional[builtins.str] = None,
+        upstream_repository_prefix: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for defining a ``CfnPullThroughCacheRule``.
 
         :param credential_arn: The ARN of the Secrets Manager secret associated with the pull through cache rule.
+        :param custom_role_arn: The ARN of the IAM role associated with the pull through cache rule.
         :param ecr_repository_prefix: The Amazon ECR repository prefix associated with the pull through cache rule.
         :param upstream_registry: The name of the upstream source registry associated with the pull through cache rule.
         :param upstream_registry_url: The upstream registry URL associated with the pull through cache rule.
+        :param upstream_repository_prefix: The upstream repository prefix associated with the pull through cache rule.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html
         :exampleMetadata: fixture=_generated
@@ -933,26 +973,34 @@ class CfnPullThroughCacheRuleProps:
             
             cfn_pull_through_cache_rule_props = ecr.CfnPullThroughCacheRuleProps(
                 credential_arn="credentialArn",
+                custom_role_arn="customRoleArn",
                 ecr_repository_prefix="ecrRepositoryPrefix",
                 upstream_registry="upstreamRegistry",
-                upstream_registry_url="upstreamRegistryUrl"
+                upstream_registry_url="upstreamRegistryUrl",
+                upstream_repository_prefix="upstreamRepositoryPrefix"
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e53d5495feeae3bec08dd309eceed79d390d73c31e234c306abd812ec670db16)
             check_type(argname="argument credential_arn", value=credential_arn, expected_type=type_hints["credential_arn"])
+            check_type(argname="argument custom_role_arn", value=custom_role_arn, expected_type=type_hints["custom_role_arn"])
             check_type(argname="argument ecr_repository_prefix", value=ecr_repository_prefix, expected_type=type_hints["ecr_repository_prefix"])
             check_type(argname="argument upstream_registry", value=upstream_registry, expected_type=type_hints["upstream_registry"])
             check_type(argname="argument upstream_registry_url", value=upstream_registry_url, expected_type=type_hints["upstream_registry_url"])
+            check_type(argname="argument upstream_repository_prefix", value=upstream_repository_prefix, expected_type=type_hints["upstream_repository_prefix"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if credential_arn is not None:
             self._values["credential_arn"] = credential_arn
+        if custom_role_arn is not None:
+            self._values["custom_role_arn"] = custom_role_arn
         if ecr_repository_prefix is not None:
             self._values["ecr_repository_prefix"] = ecr_repository_prefix
         if upstream_registry is not None:
             self._values["upstream_registry"] = upstream_registry
         if upstream_registry_url is not None:
             self._values["upstream_registry_url"] = upstream_registry_url
+        if upstream_repository_prefix is not None:
+            self._values["upstream_repository_prefix"] = upstream_repository_prefix
 
     @builtins.property
     def credential_arn(self) -> typing.Optional[builtins.str]:
@@ -963,6 +1011,15 @@ class CfnPullThroughCacheRuleProps:
         result = self._values.get("credential_arn")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def custom_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the IAM role associated with the pull through cache rule.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html#cfn-ecr-pullthroughcacherule-customrolearn
+        '''
+        result = self._values.get("custom_role_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def ecr_repository_prefix(self) -> typing.Optional[builtins.str]:
         '''The Amazon ECR repository prefix associated with the pull through cache rule.
@@ -990,6 +1047,15 @@ class CfnPullThroughCacheRuleProps:
         result = self._values.get("upstream_registry_url")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def upstream_repository_prefix(self) -> typing.Optional[builtins.str]:
+        '''The upstream repository prefix associated with the pull through cache rule.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html#cfn-ecr-pullthroughcacherule-upstreamrepositoryprefix
+        '''
+        result = self._values.get("upstream_repository_prefix")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -5108,9 +5174,11 @@ def _typecheckingstub__d43871e7810dc89346a08c3c9c24a04a2b82bf02da0d8fa05ef0df564
     id: builtins.str,
     *,
     credential_arn: typing.Optional[builtins.str] = None,
+    custom_role_arn: typing.Optional[builtins.str] = None,
     ecr_repository_prefix: typing.Optional[builtins.str] = None,
     upstream_registry: typing.Optional[builtins.str] = None,
     upstream_registry_url: typing.Optional[builtins.str] = None,
+    upstream_repository_prefix: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5133,6 +5201,12 @@ def _typecheckingstub__a379fdfcc316f1fba45c0243614513599bd6a9e9b599a9e279a8cc606
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__bfdbe9596057e097bfe1b7f8a0aa5e6c64ae2382eeabb10b892cc46dd20f8291(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__97e7364a9d8ce3c9c0a95d7d650a21956fb29a984bd55c4450ace32814a23728(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -5151,12 +5225,20 @@ def _typecheckingstub__7eb1d214154bb7e817af1779f0f5bf9f4b1c880ec0a8357fa98987f10
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__5acaf55fdc7a202ee1e0b91a061ceea344f717ca76a78fbb62ae05bdbc30add0(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__e53d5495feeae3bec08dd309eceed79d390d73c31e234c306abd812ec670db16(
     *,
     credential_arn: typing.Optional[builtins.str] = None,
+    custom_role_arn: typing.Optional[builtins.str] = None,
     ecr_repository_prefix: typing.Optional[builtins.str] = None,
     upstream_registry: typing.Optional[builtins.str] = None,
     upstream_registry_url: typing.Optional[builtins.str] = None,
+    upstream_repository_prefix: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass

aws_cdk/aws_ecs/__init__.py

@@ -543,7 +543,7 @@ To grant a principal permission to run your `TaskDefinition`, you can use the `T
 # role: iam.IGrantable
 
 task_def = ecs.TaskDefinition(self, "TaskDef",
-    cpu="512",
+    cpu="256",
     memory_mi_b="512",
     compatibility=ecs.Compatibility.EC2_AND_FARGATE
 )
@@ -9181,7 +9181,7 @@ class CfnService(
 
             For example ``awsVpcConfiguration={subnets=["subnet-12344321"],securityGroups=["sg-12344321"]}`` .
 
-            :param assign_public_ip: Whether the task's elastic network interface receives a public IP address. Consider the following when you set this value: - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` . - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` . - When you use ``create-service`` or ``update-service`` , the default is ``ENABLED`` .
+            :param assign_public_ip: Whether the task's elastic network interface receives a public IP address. Consider the following when you set this value: - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` . - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` .
             :param security_groups: The IDs of the security groups associated with the task or service. If you don't specify a security group, the default security group for the VPC is used. There's a limit of 5 security groups that can be specified. .. epigraph:: All specified security groups must be from the same VPC.
             :param subnets: The IDs of the subnets associated with the task or service. There's a limit of 16 subnets that can be specified. .. epigraph:: All specified subnets must be from the same VPC.
 
@@ -9221,7 +9221,6 @@ class CfnService(
 
             - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` .
             - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` .
-            - When you use ``create-service`` or ``update-service`` , the default is ``ENABLED`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-awsvpcconfiguration.html#cfn-ecs-service-awsvpcconfiguration-assignpublicip
             '''
@@ -18582,7 +18581,7 @@ class CfnTaskSet(
             For example ``awsVpcConfiguration={subnets=["subnet-12344321"],securityGroups=["sg-12344321"]}`` .
 
             :param subnets: The IDs of the subnets associated with the task or service. There's a limit of 16 subnets that can be specified. .. epigraph:: All specified subnets must be from the same VPC.
-            :param assign_public_ip: Whether the task's elastic network interface receives a public IP address. Consider the following when you set this value: - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` . - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` . - When you use ``create-service`` or ``update-service`` , the default is ``ENABLED`` .
+            :param assign_public_ip: Whether the task's elastic network interface receives a public IP address. Consider the following when you set this value: - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` . - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` .
             :param security_groups: The IDs of the security groups associated with the task or service. If you don't specify a security group, the default security group for the VPC is used. There's a limit of 5 security groups that can be specified. .. epigraph:: All specified security groups must be from the same VPC.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskset-awsvpcconfiguration.html
@@ -18638,7 +18637,6 @@ class CfnTaskSet(
 
             - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` .
             - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` .
-            - When you use ``create-service`` or ``update-service`` , the default is ``ENABLED`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskset-awsvpcconfiguration.html#cfn-ecs-taskset-awsvpcconfiguration-assignpublicip
             '''
@@ -27937,6 +27935,8 @@ class FileSystemType(enum.Enum):
     '''ext4 type.'''
     XFS = "XFS"
     '''xfs type.'''
+    NTFS = "NTFS"
+    '''ntfs type.'''
 
 
 @jsii.data_type(

aws_cdk/aws_eks/__init__.py

@@ -4743,6 +4743,8 @@ class CapacityType(enum.Enum):
     '''spot instances.'''
     ON_DEMAND = "ON_DEMAND"
     '''on-demand instances.'''
+    CAPACITY_BLOCK = "CAPACITY_BLOCK"
+    '''capacity block instances.'''
 
 
 @jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)

aws_cdk/aws_elasticloadbalancingv2/__init__.py

@@ -5020,9 +5020,9 @@ class CfnListener(
         ) -> None:
             '''The mutual authentication configuration information.
 
-            :param advertise_trust_store_ca_names: Indicates whether trust store CA certificate names are advertised. The default value is ``off`` .
+            :param advertise_trust_store_ca_names: Indicates whether trust store CA certificate names are advertised.
             :param ignore_client_certificate_expiry: Indicates whether expired client certificates are ignored.
-            :param mode: The client certificate handling method. The possible values are ``off`` , ``passthrough`` , and ``verify`` . The default value is ``off`` .
+            :param mode: The client certificate handling method. Options are ``off`` , ``passthrough`` or ``verify`` . The default value is ``off`` .
             :param trust_store_arn: The Amazon Resource Name (ARN) of the trust store.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-mutualauthentication.html
@@ -5061,8 +5061,6 @@ class CfnListener(
         def advertise_trust_store_ca_names(self) -> typing.Optional[builtins.str]:
             '''Indicates whether trust store CA certificate names are advertised.
 
-            The default value is ``off`` .
-
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-mutualauthentication.html#cfn-elasticloadbalancingv2-listener-mutualauthentication-advertisetruststorecanames
             '''
             result = self._values.get("advertise_trust_store_ca_names")
@@ -5083,7 +5081,7 @@ class CfnListener(
         def mode(self) -> typing.Optional[builtins.str]:
             '''The client certificate handling method.
 
-            The possible values are ``off`` , ``passthrough`` , and ``verify`` . The default value is ``off`` .
+            Options are ``off`` , ``passthrough`` or ``verify`` . The default value is ``off`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-mutualauthentication.html#cfn-elasticloadbalancingv2-listener-mutualauthentication-mode
             '''
@@ -8350,6 +8348,7 @@ class CfnLoadBalancer(
             enable_prefix_for_ipv6_source_nat="enablePrefixForIpv6SourceNat",
             enforce_security_group_inbound_rules_on_private_link_traffic="enforceSecurityGroupInboundRulesOnPrivateLinkTraffic",
             ip_address_type="ipAddressType",
+            ipv4_ipam_pool_id="ipv4IpamPoolId",
             load_balancer_attributes=[elbv2.CfnLoadBalancer.LoadBalancerAttributeProperty(
                 key="key",
                 value="value"
@@ -8386,6 +8385,7 @@ class CfnLoadBalancer(
         enable_prefix_for_ipv6_source_nat: typing.Optional[builtins.str] = None,
         enforce_security_group_inbound_rules_on_private_link_traffic: typing.Optional[builtins.str] = None,
         ip_address_type: typing.Optional[builtins.str] = None,
+        ipv4_ipam_pool_id: typing.Optional[builtins.str] = None,
         load_balancer_attributes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLoadBalancer.LoadBalancerAttributeProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         minimum_load_balancer_capacity: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLoadBalancer.MinimumLoadBalancerCapacityProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
@@ -8402,6 +8402,7 @@ class CfnLoadBalancer(
         :param enable_prefix_for_ipv6_source_nat: [Network Load Balancers with UDP listeners] Indicates whether to use an IPv6 prefix from each subnet for source NAT. The IP address type must be ``dualstack`` . The default value is ``off`` .
         :param enforce_security_group_inbound_rules_on_private_link_traffic: Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through AWS PrivateLink . The default is ``on`` .
         :param ip_address_type: The IP address type. Internal load balancers must use ``ipv4`` . [Application Load Balancers] The possible values are ``ipv4`` (IPv4 addresses), ``dualstack`` (IPv4 and IPv6 addresses), and ``dualstack-without-public-ipv4`` (public IPv6 addresses and private IPv4 and IPv6 addresses). Application Load Balancer authentication supports IPv4 addresses only when connecting to an Identity Provider (IdP) or Amazon Cognito endpoint. Without a public IPv4 address the load balancer can't complete the authentication process, resulting in HTTP 500 errors. [Network Load Balancers and Gateway Load Balancers] The possible values are ``ipv4`` (IPv4 addresses) and ``dualstack`` (IPv4 and IPv6 addresses).
+        :param ipv4_ipam_pool_id: 
         :param load_balancer_attributes: The load balancer attributes.
         :param minimum_load_balancer_capacity: The minimum capacity for a load balancer.
         :param name: The name of the load balancer. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, must not begin or end with a hyphen, and must not begin with "internal-". If you don't specify a name, AWS CloudFormation generates a unique physical ID for the load balancer. If you specify a name, you cannot perform updates that require replacement of this resource, but you can perform other updates. To replace the resource, specify a new name.
@@ -8420,6 +8421,7 @@ class CfnLoadBalancer(
             enable_prefix_for_ipv6_source_nat=enable_prefix_for_ipv6_source_nat,
             enforce_security_group_inbound_rules_on_private_link_traffic=enforce_security_group_inbound_rules_on_private_link_traffic,
             ip_address_type=ip_address_type,
+            ipv4_ipam_pool_id=ipv4_ipam_pool_id,
             load_balancer_attributes=load_balancer_attributes,
             minimum_load_balancer_capacity=minimum_load_balancer_capacity,
             name=name,
@@ -8586,6 +8588,18 @@ class CfnLoadBalancer(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "ipAddressType", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="ipv4IpamPoolId")
+    def ipv4_ipam_pool_id(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "ipv4IpamPoolId"))
+
+    @ipv4_ipam_pool_id.setter
+    def ipv4_ipam_pool_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__771a4ecd225b5b92f56a4b9a0a84ed7c75fd81e16cb556169a6648b7d21e82bf)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "ipv4IpamPoolId", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="loadBalancerAttributes")
     def load_balancer_attributes(
@@ -9013,6 +9027,7 @@ class CfnLoadBalancer(
         "enable_prefix_for_ipv6_source_nat": "enablePrefixForIpv6SourceNat",
         "enforce_security_group_inbound_rules_on_private_link_traffic": "enforceSecurityGroupInboundRulesOnPrivateLinkTraffic",
         "ip_address_type": "ipAddressType",
+        "ipv4_ipam_pool_id": "ipv4IpamPoolId",
         "load_balancer_attributes": "loadBalancerAttributes",
         "minimum_load_balancer_capacity": "minimumLoadBalancerCapacity",
         "name": "name",
@@ -9031,6 +9046,7 @@ class CfnLoadBalancerProps:
         enable_prefix_for_ipv6_source_nat: typing.Optional[builtins.str] = None,
         enforce_security_group_inbound_rules_on_private_link_traffic: typing.Optional[builtins.str] = None,
         ip_address_type: typing.Optional[builtins.str] = None,
+        ipv4_ipam_pool_id: typing.Optional[builtins.str] = None,
         load_balancer_attributes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.LoadBalancerAttributeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         minimum_load_balancer_capacity: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.MinimumLoadBalancerCapacityProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
@@ -9046,6 +9062,7 @@ class CfnLoadBalancerProps:
         :param enable_prefix_for_ipv6_source_nat: [Network Load Balancers with UDP listeners] Indicates whether to use an IPv6 prefix from each subnet for source NAT. The IP address type must be ``dualstack`` . The default value is ``off`` .
         :param enforce_security_group_inbound_rules_on_private_link_traffic: Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through AWS PrivateLink . The default is ``on`` .
         :param ip_address_type: The IP address type. Internal load balancers must use ``ipv4`` . [Application Load Balancers] The possible values are ``ipv4`` (IPv4 addresses), ``dualstack`` (IPv4 and IPv6 addresses), and ``dualstack-without-public-ipv4`` (public IPv6 addresses and private IPv4 and IPv6 addresses). Application Load Balancer authentication supports IPv4 addresses only when connecting to an Identity Provider (IdP) or Amazon Cognito endpoint. Without a public IPv4 address the load balancer can't complete the authentication process, resulting in HTTP 500 errors. [Network Load Balancers and Gateway Load Balancers] The possible values are ``ipv4`` (IPv4 addresses) and ``dualstack`` (IPv4 and IPv6 addresses).
+        :param ipv4_ipam_pool_id: 
         :param load_balancer_attributes: The load balancer attributes.
         :param minimum_load_balancer_capacity: The minimum capacity for a load balancer.
         :param name: The name of the load balancer. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, must not begin or end with a hyphen, and must not begin with "internal-". If you don't specify a name, AWS CloudFormation generates a unique physical ID for the load balancer. If you specify a name, you cannot perform updates that require replacement of this resource, but you can perform other updates. To replace the resource, specify a new name.
@@ -9069,6 +9086,7 @@ class CfnLoadBalancerProps:
                 enable_prefix_for_ipv6_source_nat="enablePrefixForIpv6SourceNat",
                 enforce_security_group_inbound_rules_on_private_link_traffic="enforceSecurityGroupInboundRulesOnPrivateLinkTraffic",
                 ip_address_type="ipAddressType",
+                ipv4_ipam_pool_id="ipv4IpamPoolId",
                 load_balancer_attributes=[elbv2.CfnLoadBalancer.LoadBalancerAttributeProperty(
                     key="key",
                     value="value"
@@ -9101,6 +9119,7 @@ class CfnLoadBalancerProps:
             check_type(argname="argument enable_prefix_for_ipv6_source_nat", value=enable_prefix_for_ipv6_source_nat, expected_type=type_hints["enable_prefix_for_ipv6_source_nat"])
             check_type(argname="argument enforce_security_group_inbound_rules_on_private_link_traffic", value=enforce_security_group_inbound_rules_on_private_link_traffic, expected_type=type_hints["enforce_security_group_inbound_rules_on_private_link_traffic"])
             check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
+            check_type(argname="argument ipv4_ipam_pool_id", value=ipv4_ipam_pool_id, expected_type=type_hints["ipv4_ipam_pool_id"])
             check_type(argname="argument load_balancer_attributes", value=load_balancer_attributes, expected_type=type_hints["load_balancer_attributes"])
             check_type(argname="argument minimum_load_balancer_capacity", value=minimum_load_balancer_capacity, expected_type=type_hints["minimum_load_balancer_capacity"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
@@ -9117,6 +9136,8 @@ class CfnLoadBalancerProps:
             self._values["enforce_security_group_inbound_rules_on_private_link_traffic"] = enforce_security_group_inbound_rules_on_private_link_traffic
         if ip_address_type is not None:
             self._values["ip_address_type"] = ip_address_type
+        if ipv4_ipam_pool_id is not None:
+            self._values["ipv4_ipam_pool_id"] = ipv4_ipam_pool_id
         if load_balancer_attributes is not None:
             self._values["load_balancer_attributes"] = load_balancer_attributes
         if minimum_load_balancer_capacity is not None:
@@ -9175,6 +9196,14 @@ class CfnLoadBalancerProps:
         result = self._values.get("ip_address_type")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def ipv4_ipam_pool_id(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-loadbalancer.html#cfn-elasticloadbalancingv2-loadbalancer-ipv4ipampoolid
+        '''
+        result = self._values.get("ipv4_ipam_pool_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def load_balancer_attributes(
         self,
@@ -26757,6 +26786,7 @@ def _typecheckingstub__907e1e3e88136a6a7bdcdac293563447ed893c77b9f7b1e7154fb1749
     enable_prefix_for_ipv6_source_nat: typing.Optional[builtins.str] = None,
     enforce_security_group_inbound_rules_on_private_link_traffic: typing.Optional[builtins.str] = None,
     ip_address_type: typing.Optional[builtins.str] = None,
+    ipv4_ipam_pool_id: typing.Optional[builtins.str] = None,
     load_balancer_attributes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.LoadBalancerAttributeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     minimum_load_balancer_capacity: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.MinimumLoadBalancerCapacityProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
@@ -26800,6 +26830,12 @@ def _typecheckingstub__aa89d4763e09b4dd77b6896bc1e3ca0aec2c737fc1c1fe61ce1510756
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__771a4ecd225b5b92f56a4b9a0a84ed7c75fd81e16cb556169a6648b7d21e82bf(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__8b18943454864026c64dd9c2bc7fdaf60ac5114bf771f7304a82e9bdfd652972(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnLoadBalancer.LoadBalancerAttributeProperty]]]],
 ) -> None:
@@ -26885,6 +26921,7 @@ def _typecheckingstub__6b1eb30cea756dc45f625ec82ab8cba6ea31d24595a925a4aabceb7e6
     enable_prefix_for_ipv6_source_nat: typing.Optional[builtins.str] = None,
     enforce_security_group_inbound_rules_on_private_link_traffic: typing.Optional[builtins.str] = None,
     ip_address_type: typing.Optional[builtins.str] = None,
+    ipv4_ipam_pool_id: typing.Optional[builtins.str] = None,
     load_balancer_attributes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.LoadBalancerAttributeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     minimum_load_balancer_capacity: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.MinimumLoadBalancerCapacityProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,

aws_cdk/aws_elasticsearch/__init__.py

@@ -236,7 +236,7 @@ domain = es.Domain(self, "Domain",
 ```
 
 For more complex use-cases, for example, to set the domain up to receive data from a
-[cross-account Kinesis Firehose](https://aws.amazon.com/premiumsupport/knowledge-center/kinesis-firehose-cross-account-streaming/) the `addAccessPolicies` helper method
+[cross-account Amazon Data Firehose](https://aws.amazon.com/premiumsupport/knowledge-center/kinesis-firehose-cross-account-streaming/) the `addAccessPolicies` helper method
 allows for policies that include the explicit domain ARN.
 
 ```python

aws_cdk/aws_events_targets/__init__.py

@@ -2173,7 +2173,7 @@ class EventBusProps:
 
 @jsii.interface(jsii_type="aws-cdk-lib.aws_events_targets.IDeliveryStream")
 class IDeliveryStream(_IResource_c80c4260, typing_extensions.Protocol):
-    '''Represents a Kinesis Data Firehose delivery stream.'''
+    '''Represents an Amazon Data Firehose delivery stream.'''
 
     @builtins.property
     @jsii.member(jsii_name="deliveryStreamArn")
@@ -2197,7 +2197,7 @@ class IDeliveryStream(_IResource_c80c4260, typing_extensions.Protocol):
 class _IDeliveryStreamProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
 ):
-    '''Represents a Kinesis Data Firehose delivery stream.'''
+    '''Represents an Amazon Data Firehose delivery stream.'''
 
     __jsii_type__: typing.ClassVar[str] = "aws-cdk-lib.aws_events_targets.IDeliveryStream"
 
@@ -2291,7 +2291,7 @@ class KinesisFirehoseStream(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_events_targets.KinesisFirehoseStream",
 ):
-    '''(deprecated) Customize the Firehose Stream Event Target.
+    '''(deprecated) Customize the Amazon Data Firehose Stream Event Target.
 
     :deprecated: Use KinesisFirehoseStreamV2
 
@@ -2364,7 +2364,7 @@ class KinesisFirehoseStreamProps:
         *,
         message: typing.Optional[_RuleTargetInput_6beca786] = None,
     ) -> None:
-        '''Customize the Firehose Stream Event Target.
+        '''Customize the Amazon Data Firehose Stream Event Target.
 
         :param message: The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire Event Bridge event
 
@@ -2418,7 +2418,7 @@ class KinesisFirehoseStreamV2(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_events_targets.KinesisFirehoseStreamV2",
 ):
-    '''Customize the Firehose Stream Event Target V2 to support L2 Kinesis Delivery Stream instead of L1 Cfn Kinesis Delivery Stream.
+    '''Customize the Amazon Data Firehose Stream Event Target V2 to support L2 Amazon Data Firehose Delivery Stream instead of L1 Cfn Firehose Delivery Stream.
 
     :exampleMetadata: fixture=_generated