aws-cdk-lib 2.184.1__py3-none-any.whl → 2.186.0__py3-none-any.whl

aws_cdk/aws_ecr/__init__.py

@@ -771,9 +771,11 @@ class CfnPullThroughCacheRule(
         
         cfn_pull_through_cache_rule = ecr.CfnPullThroughCacheRule(self, "MyCfnPullThroughCacheRule",
             credential_arn="credentialArn",
+            custom_role_arn="customRoleArn",
             ecr_repository_prefix="ecrRepositoryPrefix",
             upstream_registry="upstreamRegistry",
-            upstream_registry_url="upstreamRegistryUrl"
+            upstream_registry_url="upstreamRegistryUrl",
+            upstream_repository_prefix="upstreamRepositoryPrefix"
         )
     '''
 
@@ -783,17 +785,21 @@ class CfnPullThroughCacheRule(
         id: builtins.str,
         *,
         credential_arn: typing.Optional[builtins.str] = None,
+        custom_role_arn: typing.Optional[builtins.str] = None,
         ecr_repository_prefix: typing.Optional[builtins.str] = None,
         upstream_registry: typing.Optional[builtins.str] = None,
         upstream_registry_url: typing.Optional[builtins.str] = None,
+        upstream_repository_prefix: typing.Optional[builtins.str] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param credential_arn: The ARN of the Secrets Manager secret associated with the pull through cache rule.
+        :param custom_role_arn: The ARN of the IAM role associated with the pull through cache rule.
         :param ecr_repository_prefix: The Amazon ECR repository prefix associated with the pull through cache rule.
         :param upstream_registry: The name of the upstream source registry associated with the pull through cache rule.
         :param upstream_registry_url: The upstream registry URL associated with the pull through cache rule.
+        :param upstream_repository_prefix: The upstream repository prefix associated with the pull through cache rule.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__d43871e7810dc89346a08c3c9c24a04a2b82bf02da0d8fa05ef0df564aea4986)
@@ -801,9 +807,11 @@ class CfnPullThroughCacheRule(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnPullThroughCacheRuleProps(
             credential_arn=credential_arn,
+            custom_role_arn=custom_role_arn,
             ecr_repository_prefix=ecr_repository_prefix,
             upstream_registry=upstream_registry,
             upstream_registry_url=upstream_registry_url,
+            upstream_repository_prefix=upstream_repository_prefix,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -856,6 +864,19 @@ class CfnPullThroughCacheRule(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "credentialArn", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="customRoleArn")
+    def custom_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the IAM role associated with the pull through cache rule.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "customRoleArn"))
+
+    @custom_role_arn.setter
+    def custom_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__bfdbe9596057e097bfe1b7f8a0aa5e6c64ae2382eeabb10b892cc46dd20f8291)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "customRoleArn", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="ecrRepositoryPrefix")
     def ecr_repository_prefix(self) -> typing.Optional[builtins.str]:
@@ -895,15 +916,30 @@ class CfnPullThroughCacheRule(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "upstreamRegistryUrl", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="upstreamRepositoryPrefix")
+    def upstream_repository_prefix(self) -> typing.Optional[builtins.str]:
+        '''The upstream repository prefix associated with the pull through cache rule.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "upstreamRepositoryPrefix"))
+
+    @upstream_repository_prefix.setter
+    def upstream_repository_prefix(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5acaf55fdc7a202ee1e0b91a061ceea344f717ca76a78fbb62ae05bdbc30add0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "upstreamRepositoryPrefix", value) # pyright: ignore[reportArgumentType]
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ecr.CfnPullThroughCacheRuleProps",
     jsii_struct_bases=[],
     name_mapping={
         "credential_arn": "credentialArn",
+        "custom_role_arn": "customRoleArn",
         "ecr_repository_prefix": "ecrRepositoryPrefix",
         "upstream_registry": "upstreamRegistry",
         "upstream_registry_url": "upstreamRegistryUrl",
+        "upstream_repository_prefix": "upstreamRepositoryPrefix",
     },
 )
 class CfnPullThroughCacheRuleProps:
@@ -911,16 +947,20 @@ class CfnPullThroughCacheRuleProps:
         self,
         *,
         credential_arn: typing.Optional[builtins.str] = None,
+        custom_role_arn: typing.Optional[builtins.str] = None,
         ecr_repository_prefix: typing.Optional[builtins.str] = None,
         upstream_registry: typing.Optional[builtins.str] = None,
         upstream_registry_url: typing.Optional[builtins.str] = None,
+        upstream_repository_prefix: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for defining a ``CfnPullThroughCacheRule``.
 
         :param credential_arn: The ARN of the Secrets Manager secret associated with the pull through cache rule.
+        :param custom_role_arn: The ARN of the IAM role associated with the pull through cache rule.
         :param ecr_repository_prefix: The Amazon ECR repository prefix associated with the pull through cache rule.
         :param upstream_registry: The name of the upstream source registry associated with the pull through cache rule.
         :param upstream_registry_url: The upstream registry URL associated with the pull through cache rule.
+        :param upstream_repository_prefix: The upstream repository prefix associated with the pull through cache rule.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html
         :exampleMetadata: fixture=_generated
@@ -933,26 +973,34 @@ class CfnPullThroughCacheRuleProps:
             
             cfn_pull_through_cache_rule_props = ecr.CfnPullThroughCacheRuleProps(
                 credential_arn="credentialArn",
+                custom_role_arn="customRoleArn",
                 ecr_repository_prefix="ecrRepositoryPrefix",
                 upstream_registry="upstreamRegistry",
-                upstream_registry_url="upstreamRegistryUrl"
+                upstream_registry_url="upstreamRegistryUrl",
+                upstream_repository_prefix="upstreamRepositoryPrefix"
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e53d5495feeae3bec08dd309eceed79d390d73c31e234c306abd812ec670db16)
             check_type(argname="argument credential_arn", value=credential_arn, expected_type=type_hints["credential_arn"])
+            check_type(argname="argument custom_role_arn", value=custom_role_arn, expected_type=type_hints["custom_role_arn"])
             check_type(argname="argument ecr_repository_prefix", value=ecr_repository_prefix, expected_type=type_hints["ecr_repository_prefix"])
             check_type(argname="argument upstream_registry", value=upstream_registry, expected_type=type_hints["upstream_registry"])
             check_type(argname="argument upstream_registry_url", value=upstream_registry_url, expected_type=type_hints["upstream_registry_url"])
+            check_type(argname="argument upstream_repository_prefix", value=upstream_repository_prefix, expected_type=type_hints["upstream_repository_prefix"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if credential_arn is not None:
             self._values["credential_arn"] = credential_arn
+        if custom_role_arn is not None:
+            self._values["custom_role_arn"] = custom_role_arn
         if ecr_repository_prefix is not None:
             self._values["ecr_repository_prefix"] = ecr_repository_prefix
         if upstream_registry is not None:
             self._values["upstream_registry"] = upstream_registry
         if upstream_registry_url is not None:
             self._values["upstream_registry_url"] = upstream_registry_url
+        if upstream_repository_prefix is not None:
+            self._values["upstream_repository_prefix"] = upstream_repository_prefix
 
     @builtins.property
     def credential_arn(self) -> typing.Optional[builtins.str]:
@@ -963,6 +1011,15 @@ class CfnPullThroughCacheRuleProps:
         result = self._values.get("credential_arn")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def custom_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the IAM role associated with the pull through cache rule.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html#cfn-ecr-pullthroughcacherule-customrolearn
+        '''
+        result = self._values.get("custom_role_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def ecr_repository_prefix(self) -> typing.Optional[builtins.str]:
         '''The Amazon ECR repository prefix associated with the pull through cache rule.
@@ -990,6 +1047,15 @@ class CfnPullThroughCacheRuleProps:
         result = self._values.get("upstream_registry_url")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def upstream_repository_prefix(self) -> typing.Optional[builtins.str]:
+        '''The upstream repository prefix associated with the pull through cache rule.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html#cfn-ecr-pullthroughcacherule-upstreamrepositoryprefix
+        '''
+        result = self._values.get("upstream_repository_prefix")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -5108,9 +5174,11 @@ def _typecheckingstub__d43871e7810dc89346a08c3c9c24a04a2b82bf02da0d8fa05ef0df564
     id: builtins.str,
     *,
     credential_arn: typing.Optional[builtins.str] = None,
+    custom_role_arn: typing.Optional[builtins.str] = None,
     ecr_repository_prefix: typing.Optional[builtins.str] = None,
     upstream_registry: typing.Optional[builtins.str] = None,
     upstream_registry_url: typing.Optional[builtins.str] = None,
+    upstream_repository_prefix: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5133,6 +5201,12 @@ def _typecheckingstub__a379fdfcc316f1fba45c0243614513599bd6a9e9b599a9e279a8cc606
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__bfdbe9596057e097bfe1b7f8a0aa5e6c64ae2382eeabb10b892cc46dd20f8291(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__97e7364a9d8ce3c9c0a95d7d650a21956fb29a984bd55c4450ace32814a23728(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -5151,12 +5225,20 @@ def _typecheckingstub__7eb1d214154bb7e817af1779f0f5bf9f4b1c880ec0a8357fa98987f10
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__5acaf55fdc7a202ee1e0b91a061ceea344f717ca76a78fbb62ae05bdbc30add0(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__e53d5495feeae3bec08dd309eceed79d390d73c31e234c306abd812ec670db16(
     *,
     credential_arn: typing.Optional[builtins.str] = None,
+    custom_role_arn: typing.Optional[builtins.str] = None,
     ecr_repository_prefix: typing.Optional[builtins.str] = None,
     upstream_registry: typing.Optional[builtins.str] = None,
     upstream_registry_url: typing.Optional[builtins.str] = None,
+    upstream_repository_prefix: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass

aws_cdk/aws_ecs/__init__.py

@@ -543,7 +543,7 @@ To grant a principal permission to run your `TaskDefinition`, you can use the `T
 # role: iam.IGrantable
 
 task_def = ecs.TaskDefinition(self, "TaskDef",
-    cpu="512",
+    cpu="256",
     memory_mi_b="512",
     compatibility=ecs.Compatibility.EC2_AND_FARGATE
 )
@@ -9181,7 +9181,7 @@ class CfnService(
 
             For example ``awsVpcConfiguration={subnets=["subnet-12344321"],securityGroups=["sg-12344321"]}`` .
 
-            :param assign_public_ip: Whether the task's elastic network interface receives a public IP address. Consider the following when you set this value: - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` . - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` . - When you use ``create-service`` or ``update-service`` , the default is ``ENABLED`` .
+            :param assign_public_ip: Whether the task's elastic network interface receives a public IP address. Consider the following when you set this value: - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` . - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` .
             :param security_groups: The IDs of the security groups associated with the task or service. If you don't specify a security group, the default security group for the VPC is used. There's a limit of 5 security groups that can be specified. .. epigraph:: All specified security groups must be from the same VPC.
             :param subnets: The IDs of the subnets associated with the task or service. There's a limit of 16 subnets that can be specified. .. epigraph:: All specified subnets must be from the same VPC.
 
@@ -9221,7 +9221,6 @@ class CfnService(
 
             - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` .
             - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` .
-            - When you use ``create-service`` or ``update-service`` , the default is ``ENABLED`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-awsvpcconfiguration.html#cfn-ecs-service-awsvpcconfiguration-assignpublicip
             '''
@@ -18582,7 +18581,7 @@ class CfnTaskSet(
             For example ``awsVpcConfiguration={subnets=["subnet-12344321"],securityGroups=["sg-12344321"]}`` .
 
             :param subnets: The IDs of the subnets associated with the task or service. There's a limit of 16 subnets that can be specified. .. epigraph:: All specified subnets must be from the same VPC.
-            :param assign_public_ip: Whether the task's elastic network interface receives a public IP address. Consider the following when you set this value: - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` . - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` . - When you use ``create-service`` or ``update-service`` , the default is ``ENABLED`` .
+            :param assign_public_ip: Whether the task's elastic network interface receives a public IP address. Consider the following when you set this value: - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` . - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` .
             :param security_groups: The IDs of the security groups associated with the task or service. If you don't specify a security group, the default security group for the VPC is used. There's a limit of 5 security groups that can be specified. .. epigraph:: All specified security groups must be from the same VPC.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskset-awsvpcconfiguration.html
@@ -18638,7 +18637,6 @@ class CfnTaskSet(
 
             - When you use ``create-service`` or ``update-service`` , the default is ``DISABLED`` .
             - When the service ``deploymentController`` is ``ECS`` , the value must be ``DISABLED`` .
-            - When you use ``create-service`` or ``update-service`` , the default is ``ENABLED`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskset-awsvpcconfiguration.html#cfn-ecs-taskset-awsvpcconfiguration-assignpublicip
             '''
@@ -27937,6 +27935,8 @@ class FileSystemType(enum.Enum):
     '''ext4 type.'''
     XFS = "XFS"
     '''xfs type.'''
+    NTFS = "NTFS"
+    '''ntfs type.'''
 
 
 @jsii.data_type(
@@ -37170,33 +37170,28 @@ class TaskDefinition(
 
     Example::
 
-        # task_definition: ecs.TaskDefinition
+        import aws_cdk.aws_cloudwatch as cw
+        
         # cluster: ecs.Cluster
+        # task_definition: ecs.TaskDefinition
         
         
-        # Add a container to the task definition
-        specific_container = task_definition.add_container("Container",
-            image=ecs.ContainerImage.from_registry("/aws/aws-example-app"),
-            memory_limit_mi_b=2048
+        service = ecs.FargateService(self, "Service",
+            cluster=cluster,
+            task_definition=task_definition
         )
         
-        # Add a port mapping
-        specific_container.add_port_mappings(
-            container_port=7600,
-            protocol=ecs.Protocol.TCP
+        cpu_alarm_name = "MyCpuMetricAlarm"
+        my_alarm = cw.Alarm(self, "CPUAlarm",
+            alarm_name=cpu_alarm_name,
+            metric=service.metric_cpu_utilization(),
+            evaluation_periods=2,
+            threshold=80
         )
         
-        ecs.Ec2Service(self, "Service",
-            cluster=cluster,
-            task_definition=task_definition,
-            min_healthy_percent=100,
-            cloud_map_options=ecs.CloudMapOptions(
-                # Create SRV records - useful for bridge networking
-                dns_record_type=cloudmap.DnsRecordType.SRV,
-                # Targets port TCP port 7600 `specificContainer`
-                container=specific_container,
-                container_port=7600
-            )
+        # Using `myAlarm.alarmName` here will cause a circular dependency
+        service.enable_deployment_alarms([cpu_alarm_name],
+            behavior=ecs.AlarmBehavior.FAIL_ON_ALARM
         )
     '''
 

aws_cdk/aws_eks/__init__.py

@@ -4743,6 +4743,8 @@ class CapacityType(enum.Enum):
     '''spot instances.'''
     ON_DEMAND = "ON_DEMAND"
     '''on-demand instances.'''
+    CAPACITY_BLOCK = "CAPACITY_BLOCK"
+    '''capacity block instances.'''
 
 
 @jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)

aws_cdk/aws_elasticloadbalancingv2/__init__.py

@@ -5020,9 +5020,9 @@ class CfnListener(
         ) -> None:
             '''The mutual authentication configuration information.
 
-            :param advertise_trust_store_ca_names: Indicates whether trust store CA certificate names are advertised. The default value is ``off`` .
+            :param advertise_trust_store_ca_names: Indicates whether trust store CA certificate names are advertised.
             :param ignore_client_certificate_expiry: Indicates whether expired client certificates are ignored.
-            :param mode: The client certificate handling method. The possible values are ``off`` , ``passthrough`` , and ``verify`` . The default value is ``off`` .
+            :param mode: The client certificate handling method. Options are ``off`` , ``passthrough`` or ``verify`` . The default value is ``off`` .
             :param trust_store_arn: The Amazon Resource Name (ARN) of the trust store.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-mutualauthentication.html
@@ -5061,8 +5061,6 @@ class CfnListener(
         def advertise_trust_store_ca_names(self) -> typing.Optional[builtins.str]:
             '''Indicates whether trust store CA certificate names are advertised.
 
-            The default value is ``off`` .
-
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-mutualauthentication.html#cfn-elasticloadbalancingv2-listener-mutualauthentication-advertisetruststorecanames
             '''
             result = self._values.get("advertise_trust_store_ca_names")
@@ -5083,7 +5081,7 @@ class CfnListener(
         def mode(self) -> typing.Optional[builtins.str]:
             '''The client certificate handling method.
 
-            The possible values are ``off`` , ``passthrough`` , and ``verify`` . The default value is ``off`` .
+            Options are ``off`` , ``passthrough`` or ``verify`` . The default value is ``off`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-mutualauthentication.html#cfn-elasticloadbalancingv2-listener-mutualauthentication-mode
             '''
@@ -8350,6 +8348,7 @@ class CfnLoadBalancer(
             enable_prefix_for_ipv6_source_nat="enablePrefixForIpv6SourceNat",
             enforce_security_group_inbound_rules_on_private_link_traffic="enforceSecurityGroupInboundRulesOnPrivateLinkTraffic",
             ip_address_type="ipAddressType",
+            ipv4_ipam_pool_id="ipv4IpamPoolId",
             load_balancer_attributes=[elbv2.CfnLoadBalancer.LoadBalancerAttributeProperty(
                 key="key",
                 value="value"
@@ -8386,6 +8385,7 @@ class CfnLoadBalancer(
         enable_prefix_for_ipv6_source_nat: typing.Optional[builtins.str] = None,
         enforce_security_group_inbound_rules_on_private_link_traffic: typing.Optional[builtins.str] = None,
         ip_address_type: typing.Optional[builtins.str] = None,
+        ipv4_ipam_pool_id: typing.Optional[builtins.str] = None,
         load_balancer_attributes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLoadBalancer.LoadBalancerAttributeProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         minimum_load_balancer_capacity: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLoadBalancer.MinimumLoadBalancerCapacityProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
@@ -8402,6 +8402,7 @@ class CfnLoadBalancer(
         :param enable_prefix_for_ipv6_source_nat: [Network Load Balancers with UDP listeners] Indicates whether to use an IPv6 prefix from each subnet for source NAT. The IP address type must be ``dualstack`` . The default value is ``off`` .
         :param enforce_security_group_inbound_rules_on_private_link_traffic: Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through AWS PrivateLink . The default is ``on`` .
         :param ip_address_type: The IP address type. Internal load balancers must use ``ipv4`` . [Application Load Balancers] The possible values are ``ipv4`` (IPv4 addresses), ``dualstack`` (IPv4 and IPv6 addresses), and ``dualstack-without-public-ipv4`` (public IPv6 addresses and private IPv4 and IPv6 addresses). Application Load Balancer authentication supports IPv4 addresses only when connecting to an Identity Provider (IdP) or Amazon Cognito endpoint. Without a public IPv4 address the load balancer can't complete the authentication process, resulting in HTTP 500 errors. [Network Load Balancers and Gateway Load Balancers] The possible values are ``ipv4`` (IPv4 addresses) and ``dualstack`` (IPv4 and IPv6 addresses).
+        :param ipv4_ipam_pool_id: 
         :param load_balancer_attributes: The load balancer attributes.
         :param minimum_load_balancer_capacity: The minimum capacity for a load balancer.
         :param name: The name of the load balancer. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, must not begin or end with a hyphen, and must not begin with "internal-". If you don't specify a name, AWS CloudFormation generates a unique physical ID for the load balancer. If you specify a name, you cannot perform updates that require replacement of this resource, but you can perform other updates. To replace the resource, specify a new name.
@@ -8420,6 +8421,7 @@ class CfnLoadBalancer(
             enable_prefix_for_ipv6_source_nat=enable_prefix_for_ipv6_source_nat,
             enforce_security_group_inbound_rules_on_private_link_traffic=enforce_security_group_inbound_rules_on_private_link_traffic,
             ip_address_type=ip_address_type,
+            ipv4_ipam_pool_id=ipv4_ipam_pool_id,
             load_balancer_attributes=load_balancer_attributes,
             minimum_load_balancer_capacity=minimum_load_balancer_capacity,
             name=name,
@@ -8586,6 +8588,18 @@ class CfnLoadBalancer(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "ipAddressType", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="ipv4IpamPoolId")
+    def ipv4_ipam_pool_id(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "ipv4IpamPoolId"))
+
+    @ipv4_ipam_pool_id.setter
+    def ipv4_ipam_pool_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__771a4ecd225b5b92f56a4b9a0a84ed7c75fd81e16cb556169a6648b7d21e82bf)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "ipv4IpamPoolId", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="loadBalancerAttributes")
     def load_balancer_attributes(
@@ -9013,6 +9027,7 @@ class CfnLoadBalancer(
         "enable_prefix_for_ipv6_source_nat": "enablePrefixForIpv6SourceNat",
         "enforce_security_group_inbound_rules_on_private_link_traffic": "enforceSecurityGroupInboundRulesOnPrivateLinkTraffic",
         "ip_address_type": "ipAddressType",
+        "ipv4_ipam_pool_id": "ipv4IpamPoolId",
         "load_balancer_attributes": "loadBalancerAttributes",
         "minimum_load_balancer_capacity": "minimumLoadBalancerCapacity",
         "name": "name",
@@ -9031,6 +9046,7 @@ class CfnLoadBalancerProps:
         enable_prefix_for_ipv6_source_nat: typing.Optional[builtins.str] = None,
         enforce_security_group_inbound_rules_on_private_link_traffic: typing.Optional[builtins.str] = None,
         ip_address_type: typing.Optional[builtins.str] = None,
+        ipv4_ipam_pool_id: typing.Optional[builtins.str] = None,
         load_balancer_attributes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.LoadBalancerAttributeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         minimum_load_balancer_capacity: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.MinimumLoadBalancerCapacityProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
@@ -9046,6 +9062,7 @@ class CfnLoadBalancerProps:
         :param enable_prefix_for_ipv6_source_nat: [Network Load Balancers with UDP listeners] Indicates whether to use an IPv6 prefix from each subnet for source NAT. The IP address type must be ``dualstack`` . The default value is ``off`` .
         :param enforce_security_group_inbound_rules_on_private_link_traffic: Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through AWS PrivateLink . The default is ``on`` .
         :param ip_address_type: The IP address type. Internal load balancers must use ``ipv4`` . [Application Load Balancers] The possible values are ``ipv4`` (IPv4 addresses), ``dualstack`` (IPv4 and IPv6 addresses), and ``dualstack-without-public-ipv4`` (public IPv6 addresses and private IPv4 and IPv6 addresses). Application Load Balancer authentication supports IPv4 addresses only when connecting to an Identity Provider (IdP) or Amazon Cognito endpoint. Without a public IPv4 address the load balancer can't complete the authentication process, resulting in HTTP 500 errors. [Network Load Balancers and Gateway Load Balancers] The possible values are ``ipv4`` (IPv4 addresses) and ``dualstack`` (IPv4 and IPv6 addresses).
+        :param ipv4_ipam_pool_id: 
         :param load_balancer_attributes: The load balancer attributes.
         :param minimum_load_balancer_capacity: The minimum capacity for a load balancer.
         :param name: The name of the load balancer. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, must not begin or end with a hyphen, and must not begin with "internal-". If you don't specify a name, AWS CloudFormation generates a unique physical ID for the load balancer. If you specify a name, you cannot perform updates that require replacement of this resource, but you can perform other updates. To replace the resource, specify a new name.
@@ -9069,6 +9086,7 @@ class CfnLoadBalancerProps:
                 enable_prefix_for_ipv6_source_nat="enablePrefixForIpv6SourceNat",
                 enforce_security_group_inbound_rules_on_private_link_traffic="enforceSecurityGroupInboundRulesOnPrivateLinkTraffic",
                 ip_address_type="ipAddressType",
+                ipv4_ipam_pool_id="ipv4IpamPoolId",
                 load_balancer_attributes=[elbv2.CfnLoadBalancer.LoadBalancerAttributeProperty(
                     key="key",
                     value="value"
@@ -9101,6 +9119,7 @@ class CfnLoadBalancerProps:
             check_type(argname="argument enable_prefix_for_ipv6_source_nat", value=enable_prefix_for_ipv6_source_nat, expected_type=type_hints["enable_prefix_for_ipv6_source_nat"])
             check_type(argname="argument enforce_security_group_inbound_rules_on_private_link_traffic", value=enforce_security_group_inbound_rules_on_private_link_traffic, expected_type=type_hints["enforce_security_group_inbound_rules_on_private_link_traffic"])
             check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
+            check_type(argname="argument ipv4_ipam_pool_id", value=ipv4_ipam_pool_id, expected_type=type_hints["ipv4_ipam_pool_id"])
             check_type(argname="argument load_balancer_attributes", value=load_balancer_attributes, expected_type=type_hints["load_balancer_attributes"])
             check_type(argname="argument minimum_load_balancer_capacity", value=minimum_load_balancer_capacity, expected_type=type_hints["minimum_load_balancer_capacity"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
@@ -9117,6 +9136,8 @@ class CfnLoadBalancerProps:
             self._values["enforce_security_group_inbound_rules_on_private_link_traffic"] = enforce_security_group_inbound_rules_on_private_link_traffic
         if ip_address_type is not None:
             self._values["ip_address_type"] = ip_address_type
+        if ipv4_ipam_pool_id is not None:
+            self._values["ipv4_ipam_pool_id"] = ipv4_ipam_pool_id
         if load_balancer_attributes is not None:
             self._values["load_balancer_attributes"] = load_balancer_attributes
         if minimum_load_balancer_capacity is not None:
@@ -9175,6 +9196,14 @@ class CfnLoadBalancerProps:
         result = self._values.get("ip_address_type")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def ipv4_ipam_pool_id(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-loadbalancer.html#cfn-elasticloadbalancingv2-loadbalancer-ipv4ipampoolid
+        '''
+        result = self._values.get("ipv4_ipam_pool_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def load_balancer_attributes(
         self,
@@ -26757,6 +26786,7 @@ def _typecheckingstub__907e1e3e88136a6a7bdcdac293563447ed893c77b9f7b1e7154fb1749
     enable_prefix_for_ipv6_source_nat: typing.Optional[builtins.str] = None,
     enforce_security_group_inbound_rules_on_private_link_traffic: typing.Optional[builtins.str] = None,
     ip_address_type: typing.Optional[builtins.str] = None,
+    ipv4_ipam_pool_id: typing.Optional[builtins.str] = None,
     load_balancer_attributes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.LoadBalancerAttributeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     minimum_load_balancer_capacity: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.MinimumLoadBalancerCapacityProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
@@ -26800,6 +26830,12 @@ def _typecheckingstub__aa89d4763e09b4dd77b6896bc1e3ca0aec2c737fc1c1fe61ce1510756
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__771a4ecd225b5b92f56a4b9a0a84ed7c75fd81e16cb556169a6648b7d21e82bf(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__8b18943454864026c64dd9c2bc7fdaf60ac5114bf771f7304a82e9bdfd652972(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnLoadBalancer.LoadBalancerAttributeProperty]]]],
 ) -> None:
@@ -26885,6 +26921,7 @@ def _typecheckingstub__6b1eb30cea756dc45f625ec82ab8cba6ea31d24595a925a4aabceb7e6
     enable_prefix_for_ipv6_source_nat: typing.Optional[builtins.str] = None,
     enforce_security_group_inbound_rules_on_private_link_traffic: typing.Optional[builtins.str] = None,
     ip_address_type: typing.Optional[builtins.str] = None,
+    ipv4_ipam_pool_id: typing.Optional[builtins.str] = None,
     load_balancer_attributes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.LoadBalancerAttributeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     minimum_load_balancer_capacity: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLoadBalancer.MinimumLoadBalancerCapacityProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,

aws_cdk/aws_elasticsearch/__init__.py

@@ -236,7 +236,7 @@ domain = es.Domain(self, "Domain",
 ```
 
 For more complex use-cases, for example, to set the domain up to receive data from a
-[cross-account Kinesis Firehose](https://aws.amazon.com/premiumsupport/knowledge-center/kinesis-firehose-cross-account-streaming/) the `addAccessPolicies` helper method
+[cross-account Amazon Data Firehose](https://aws.amazon.com/premiumsupport/knowledge-center/kinesis-firehose-cross-account-streaming/) the `addAccessPolicies` helper method
 allows for policies that include the explicit domain ARN.
 
 ```python

aws_cdk/aws_events/__init__.py

@@ -374,6 +374,7 @@ from ..aws_iam import (
     AddToResourcePolicyResult as _AddToResourcePolicyResult_1d0a53ad,
     Grant as _Grant_a7ae64f8,
     IGrantable as _IGrantable_71c4f5de,
+    IResourceWithPolicy as _IResourceWithPolicy_720d64fc,
     IRole as _IRole_235f5d8e,
     PolicyStatement as _PolicyStatement_0fe33853,
 )
@@ -9505,10 +9506,15 @@ class IEventBus(_IResource_c80c4260, typing_extensions.Protocol):
         ...
 
     @jsii.member(jsii_name="grantPutEventsTo")
-    def grant_put_events_to(self, grantee: _IGrantable_71c4f5de) -> _Grant_a7ae64f8:
+    def grant_put_events_to(
+        self,
+        grantee: _IGrantable_71c4f5de,
+        sid: typing.Optional[builtins.str] = None,
+    ) -> _Grant_a7ae64f8:
         '''Grants an IAM Principal to send custom events to the eventBus so that they can be matched to rules.
 
         :param grantee: The principal (no-op if undefined).
+        :param sid: The Statement ID used if we need to add a trust policy on the event bus.
         '''
         ...
 
@@ -9593,15 +9599,21 @@ class _IEventBusProxy(
         return typing.cast(Archive, jsii.invoke(self, "archive", [id, props]))
 
     @jsii.member(jsii_name="grantPutEventsTo")
-    def grant_put_events_to(self, grantee: _IGrantable_71c4f5de) -> _Grant_a7ae64f8:
+    def grant_put_events_to(
+        self,
+        grantee: _IGrantable_71c4f5de,
+        sid: typing.Optional[builtins.str] = None,
+    ) -> _Grant_a7ae64f8:
         '''Grants an IAM Principal to send custom events to the eventBus so that they can be matched to rules.
 
         :param grantee: The principal (no-op if undefined).
+        :param sid: The Statement ID used if we need to add a trust policy on the event bus.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__d2c68164c7bcf711cce4fa768eb0c26c773cd00ae54af79587f28c0ff626481f)
             check_type(argname="argument grantee", value=grantee, expected_type=type_hints["grantee"])
-        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantPutEventsTo", [grantee]))
+            check_type(argname="argument sid", value=sid, expected_type=type_hints["sid"])
+        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantPutEventsTo", [grantee, sid]))
 
 # Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
 typing.cast(typing.Any, IEventBus).__jsii_proxy_class__ = lambda : _IEventBusProxy
@@ -11913,7 +11925,7 @@ class Connection(
         return typing.cast(builtins.str, jsii.get(self, "connectionSecretArn"))
 
 
-@jsii.implements(IEventBus)
+@jsii.implements(IEventBus, _IResourceWithPolicy_720d64fc)
 class EventBus(
     _Resource_45bc6135,
     metaclass=jsii.JSIIMeta,
@@ -11926,15 +11938,18 @@ class EventBus(
 
     Example::
 
-        import aws_cdk.aws_events as events
-        
-        # my_configuration_set: ses.ConfigurationSet
-        
-        
-        bus = events.EventBus.from_event_bus_name(self, "EventBus", "default")
+        bus = events.EventBus(self, "bus",
+            event_bus_name="MyCustomEventBus",
+            description="MyCustomEventBus"
+        )
         
-        my_configuration_set.add_event_destination("ToEventBus",
-            destination=ses.EventDestination.event_bus(bus)
+        bus.archive("MyArchive",
+            archive_name="MyCustomEventBusArchive",
+            description="MyCustomerEventBus Archive",
+            event_pattern=events.EventPattern(
+                account=[Stack.of(self).account]
+            ),
+            retention=Duration.days(365)
         )
     '''
 
@@ -12108,15 +12123,21 @@ class EventBus(
         return typing.cast(Archive, jsii.invoke(self, "archive", [id, props]))
 
     @jsii.member(jsii_name="grantPutEventsTo")
-    def grant_put_events_to(self, grantee: _IGrantable_71c4f5de) -> _Grant_a7ae64f8:
+    def grant_put_events_to(
+        self,
+        grantee: _IGrantable_71c4f5de,
+        sid: typing.Optional[builtins.str] = None,
+    ) -> _Grant_a7ae64f8:
         '''Grants an IAM Principal to send custom events to the eventBus so that they can be matched to rules.
 
         :param grantee: -
+        :param sid: -
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f55b55b311ab4cc3f0aabb9339086b97d1f1340dcc28209fe5e78777c8287a4f)
             check_type(argname="argument grantee", value=grantee, expected_type=type_hints["grantee"])
-        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantPutEventsTo", [grantee]))
+            check_type(argname="argument sid", value=sid, expected_type=type_hints["sid"])
+        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantPutEventsTo", [grantee, sid]))
 
     @builtins.property
     @jsii.member(jsii_name="eventBusArn")
@@ -13272,6 +13293,7 @@ def _typecheckingstub__1ed58495b96f0f8ed0dfb0c65e8400413d45c5c1f372215e535272012
 
 def _typecheckingstub__d2c68164c7bcf711cce4fa768eb0c26c773cd00ae54af79587f28c0ff626481f(
     grantee: _IGrantable_71c4f5de,
+    sid: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -13697,6 +13719,7 @@ def _typecheckingstub__7330918630167c372966fe4a86452f34a261c80460ae944bcce168d6b
 
 def _typecheckingstub__f55b55b311ab4cc3f0aabb9339086b97d1f1340dcc28209fe5e78777c8287a4f(
     grantee: _IGrantable_71c4f5de,
+    sid: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass