aws-cdk-lib 2.184.1__py3-none-any.whl → 2.186.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (75) hide show
  1. aws_cdk/__init__.py +102 -29
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.184.1.jsii.tgz → aws-cdk-lib@2.186.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_amazonmq/__init__.py +3 -2
  5. aws_cdk/aws_apigateway/__init__.py +1 -1
  6. aws_cdk/aws_apigatewayv2/__init__.py +9 -0
  7. aws_cdk/aws_appconfig/__init__.py +3 -3
  8. aws_cdk/aws_applicationsignals/__init__.py +495 -1
  9. aws_cdk/aws_appsync/__init__.py +65 -11
  10. aws_cdk/aws_athena/__init__.py +143 -0
  11. aws_cdk/aws_backup/__init__.py +4 -2
  12. aws_cdk/aws_batch/__init__.py +9 -0
  13. aws_cdk/aws_bedrock/__init__.py +645 -199
  14. aws_cdk/aws_cassandra/__init__.py +3 -5
  15. aws_cdk/aws_chatbot/__init__.py +41 -0
  16. aws_cdk/aws_cleanrooms/__init__.py +21 -9
  17. aws_cdk/aws_cloudformation/__init__.py +1 -5
  18. aws_cdk/aws_cloudfront/__init__.py +4 -1
  19. aws_cdk/aws_cloudfront_origins/__init__.py +4 -2
  20. aws_cdk/aws_codeartifact/__init__.py +20 -33
  21. aws_cdk/aws_codebuild/__init__.py +10 -3
  22. aws_cdk/aws_codepipeline/__init__.py +1328 -120
  23. aws_cdk/aws_cognito/__init__.py +1 -1
  24. aws_cdk/aws_cognito_identitypool/__init__.py +2303 -0
  25. aws_cdk/aws_config/__init__.py +1 -1
  26. aws_cdk/aws_connect/__init__.py +3 -7
  27. aws_cdk/aws_controltower/__init__.py +18 -26
  28. aws_cdk/aws_datasync/__init__.py +12 -14
  29. aws_cdk/aws_datazone/__init__.py +3471 -2
  30. aws_cdk/aws_ec2/__init__.py +701 -37
  31. aws_cdk/aws_ecr/__init__.py +84 -2
  32. aws_cdk/aws_ecs/__init__.py +20 -25
  33. aws_cdk/aws_eks/__init__.py +2 -0
  34. aws_cdk/aws_elasticloadbalancingv2/__init__.py +42 -5
  35. aws_cdk/aws_elasticsearch/__init__.py +1 -1
  36. aws_cdk/aws_events/__init__.py +37 -14
  37. aws_cdk/aws_events_targets/__init__.py +5 -5
  38. aws_cdk/aws_gamelift/__init__.py +165 -165
  39. aws_cdk/aws_gameliftstreams/__init__.py +199 -59
  40. aws_cdk/aws_iam/__init__.py +320 -25
  41. aws_cdk/aws_imagebuilder/__init__.py +15 -2
  42. aws_cdk/aws_iotfleetwise/__init__.py +15 -6
  43. aws_cdk/aws_kinesisfirehose/__init__.py +115 -113
  44. aws_cdk/aws_lambda/__init__.py +7 -1
  45. aws_cdk/aws_location/__init__.py +24 -7
  46. aws_cdk/aws_logs/__init__.py +21 -27
  47. aws_cdk/aws_msk/__init__.py +17 -50
  48. aws_cdk/aws_networkfirewall/__init__.py +16 -12
  49. aws_cdk/aws_oam/__init__.py +8 -37
  50. aws_cdk/aws_opensearchservice/__init__.py +1 -1
  51. aws_cdk/aws_pcs/__init__.py +33 -22
  52. aws_cdk/aws_quicksight/__init__.py +6 -69
  53. aws_cdk/aws_rds/__init__.py +8 -4
  54. aws_cdk/aws_redshiftserverless/__init__.py +192 -15
  55. aws_cdk/aws_rum/__init__.py +454 -43
  56. aws_cdk/aws_s3/__init__.py +4 -6
  57. aws_cdk/aws_s3_deployment/__init__.py +2 -0
  58. aws_cdk/aws_sagemaker/__init__.py +524 -0
  59. aws_cdk/aws_scheduler/__init__.py +3944 -121
  60. aws_cdk/aws_scheduler_targets/__init__.py +4472 -0
  61. aws_cdk/aws_ses/__init__.py +9 -9
  62. aws_cdk/aws_sns/__init__.py +12 -12
  63. aws_cdk/aws_ssmquicksetup/__init__.py +5 -3
  64. aws_cdk/aws_stepfunctions/__init__.py +17 -15
  65. aws_cdk/aws_timestream/__init__.py +4 -4
  66. aws_cdk/aws_wafv2/__init__.py +345 -0
  67. aws_cdk/aws_workspacesthinclient/__init__.py +4 -4
  68. aws_cdk/cx_api/__init__.py +53 -0
  69. aws_cdk/region_info/__init__.py +2 -2
  70. {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/METADATA +1 -1
  71. {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/RECORD +75 -73
  72. {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/LICENSE +0 -0
  73. {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/NOTICE +0 -0
  74. {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/WHEEL +0 -0
  75. {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/top_level.txt +0 -0
@@ -906,7 +906,7 @@ fn.add_event_source(eventsources.DynamoEventSource(table,
906
906
 
907
907
  ### Observability
908
908
 
909
- Customers can now opt-in to get enhanced metrics for their event source mapping that capture each stage of processing using the `MetrcisConfig` property.
909
+ Customers can now opt-in to get enhanced metrics for their event source mapping that capture each stage of processing using the `MetricsConfig` property.
910
910
 
911
911
  The following code shows how to opt in for the enhanced metrics.
912
912
 
@@ -21563,6 +21563,12 @@ class Runtime(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_lambda.Runtime
21563
21563
  '''The Ruby 3.3 runtime (ruby3.3).'''
21564
21564
  return typing.cast("Runtime", jsii.sget(cls, "RUBY_3_3"))
21565
21565
 
21566
+ @jsii.python.classproperty
21567
+ @jsii.member(jsii_name="RUBY_3_4")
21568
+ def RUBY_3_4(cls) -> "Runtime":
21569
+ '''The Ruby 3.4 runtime (ruby3.4).'''
21570
+ return typing.cast("Runtime", jsii.sget(cls, "RUBY_3_4"))
21571
+
21566
21572
  @builtins.property
21567
21573
  @jsii.member(jsii_name="bundlingImage")
21568
21574
  def bundling_image(self) -> _DockerImage_f97a0c12:
@@ -382,7 +382,7 @@ class CfnAPIKey(
382
382
  ) -> None:
383
383
  '''API Restrictions on the allowed actions, resources, and referers for an API key resource.
384
384
 
385
- :param allow_actions: A list of allowed actions that an API key resource grants permissions to perform. You must have at least one action for each type of resource. For example, if you have a place resource, you must include at least one place action. The following are valid values for the actions. - *Map actions* - ``geo:GetMap*`` - Allows all actions needed for map rendering. - *Place actions* - ``geo:SearchPlaceIndexForText`` - Allows geocoding. - ``geo:SearchPlaceIndexForPosition`` - Allows reverse geocoding. - ``geo:SearchPlaceIndexForSuggestions`` - Allows generating suggestions from text. - ``geo:GetPlace`` - Allows finding a place by place ID. - *Route actions* - ``geo:CalculateRoute`` - Allows point to point routing. - ``geo:CalculateRouteMatrix`` - Allows calculating a matrix of routes. .. epigraph:: You must use these strings exactly. For example, to provide access to map rendering, the only valid action is ``geo:GetMap*`` as an input to the list. ``["geo:GetMap*"]`` is valid but ``["geo:GetMapTile"]`` is not. Similarly, you cannot use ``["geo:SearchPlaceIndexFor*"]`` - you must list each of the Place actions separately.
385
+ :param allow_actions: A list of allowed actions that an API key resource grants permissions to perform. You must have at least one action for each type of resource. For example, if you have a place resource, you must include at least one place action. The following are valid values for the actions. - *Map actions* - ``geo:GetMap*`` - Allows all actions needed for map rendering. - *Enhanced Maps actions* - ``geo-maps:GetTile`` - Allows getting map tiles for rendering. - ``geo-maps:GetStaticMap`` - Allows getting static map images. - *Place actions* - ``geo:SearchPlaceIndexForText`` - Allows finding geo coordinates of a known place. - ``geo:SearchPlaceIndexForPosition`` - Allows getting nearest address to geo coordinates. - ``geo:SearchPlaceIndexForSuggestions`` - Allows suggestions based on an incomplete or misspelled query. - ``geo:GetPlace`` - Allows getting details of a place. - *Enhanced Places actions* - ``geo-places:Autcomplete`` - Allows auto-completion of search text. - ``geo-places:Geocode`` - Allows finding geo coordinates of a known place. - ``geo-places:GetPlace`` - Allows getting details of a place. - ``geo-places:ReverseGeocode`` - Allows getting nearest address to geo coordinates. - ``geo-places:SearchNearby`` - Allows category based places search around geo coordinates. - ``geo-places:SearchText`` - Allows place or address search based on free-form text. - ``geo-places:Suggest`` - Allows suggestions based on an incomplete or misspelled query. - *Route actions* - ``geo:CalculateRoute`` - Allows point to point routing. - ``geo:CalculateRouteMatrix`` - Allows matrix routing. - *Enhanced Routes actions* - ``geo-routes:CalculateIsolines`` - Allows isoline calculation. - ``geo-routes:CalculateRoutes`` - Allows point to point routing. - ``geo-routes:CalculateRouteMatrix`` - Allows matrix routing. - ``geo-routes:OptimizeWaypoints`` - Allows computing the best sequence of waypoints. - ``geo-routes:SnapToRoads`` - Allows snapping GPS points to a likely route. .. epigraph:: You must use these strings exactly. For example, to provide access to map rendering, the only valid action is ``geo:GetMap*`` as an input to the list. ``["geo:GetMap*"]`` is valid but ``["geo:GetTile"]`` is not. Similarly, you cannot use ``["geo:SearchPlaceIndexFor*"]`` - you must list each of the Place actions separately.
386
386
  :param allow_resources: A list of allowed resource ARNs that a API key bearer can perform actions on. - The ARN must be the correct ARN for a map, place, or route ARN. You may include wildcards in the resource-id to match multiple resources of the same type. - The resources must be in the same ``partition`` , ``region`` , and ``account-id`` as the key that is being created. - Other than wildcards, you must include the full ARN, including the ``arn`` , ``partition`` , ``service`` , ``region`` , ``account-id`` and ``resource-id`` delimited by colons (:). - No spaces allowed, even with wildcards. For example, ``arn:aws:geo:region: *account-id* :map/ExampleMap*`` . For more information about ARN format, see `Amazon Resource Names (ARNs) <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html>`_ .
387
387
  :param allow_referers: An optional list of allowed HTTP referers for which requests must originate from. Requests using this API key from other domains will not be allowed. Requirements: - Contain only alphanumeric characters (A–Z, a–z, 0–9) or any symbols in this list ``$\\-._+!*``(),;/?:@=&` - May contain a percent (%) if followed by 2 hexadecimal digits (A-F, a-f, 0-9); this is used for URL encoding purposes. - May contain wildcard characters question mark (?) and asterisk (*). Question mark (?) will replace any single character (including hexadecimal digits). Asterisk (*) will replace any multiple characters (including multiple hexadecimal digits). - No spaces allowed. For example, ``https://example.com`` .
388
388
 
@@ -425,18 +425,35 @@ class CfnAPIKey(
425
425
 
426
426
  - *Map actions*
427
427
  - ``geo:GetMap*`` - Allows all actions needed for map rendering.
428
+ - *Enhanced Maps actions*
429
+ - ``geo-maps:GetTile`` - Allows getting map tiles for rendering.
430
+ - ``geo-maps:GetStaticMap`` - Allows getting static map images.
428
431
  - *Place actions*
429
- - ``geo:SearchPlaceIndexForText`` - Allows geocoding.
430
- - ``geo:SearchPlaceIndexForPosition`` - Allows reverse geocoding.
431
- - ``geo:SearchPlaceIndexForSuggestions`` - Allows generating suggestions from text.
432
- - ``geo:GetPlace`` - Allows finding a place by place ID.
432
+ - ``geo:SearchPlaceIndexForText`` - Allows finding geo coordinates of a known place.
433
+ - ``geo:SearchPlaceIndexForPosition`` - Allows getting nearest address to geo coordinates.
434
+ - ``geo:SearchPlaceIndexForSuggestions`` - Allows suggestions based on an incomplete or misspelled query.
435
+ - ``geo:GetPlace`` - Allows getting details of a place.
436
+ - *Enhanced Places actions*
437
+ - ``geo-places:Autcomplete`` - Allows auto-completion of search text.
438
+ - ``geo-places:Geocode`` - Allows finding geo coordinates of a known place.
439
+ - ``geo-places:GetPlace`` - Allows getting details of a place.
440
+ - ``geo-places:ReverseGeocode`` - Allows getting nearest address to geo coordinates.
441
+ - ``geo-places:SearchNearby`` - Allows category based places search around geo coordinates.
442
+ - ``geo-places:SearchText`` - Allows place or address search based on free-form text.
443
+ - ``geo-places:Suggest`` - Allows suggestions based on an incomplete or misspelled query.
433
444
  - *Route actions*
434
445
  - ``geo:CalculateRoute`` - Allows point to point routing.
435
- - ``geo:CalculateRouteMatrix`` - Allows calculating a matrix of routes.
446
+ - ``geo:CalculateRouteMatrix`` - Allows matrix routing.
447
+ - *Enhanced Routes actions*
448
+ - ``geo-routes:CalculateIsolines`` - Allows isoline calculation.
449
+ - ``geo-routes:CalculateRoutes`` - Allows point to point routing.
450
+ - ``geo-routes:CalculateRouteMatrix`` - Allows matrix routing.
451
+ - ``geo-routes:OptimizeWaypoints`` - Allows computing the best sequence of waypoints.
452
+ - ``geo-routes:SnapToRoads`` - Allows snapping GPS points to a likely route.
436
453
 
437
454
  .. epigraph::
438
455
 
439
- You must use these strings exactly. For example, to provide access to map rendering, the only valid action is ``geo:GetMap*`` as an input to the list. ``["geo:GetMap*"]`` is valid but ``["geo:GetMapTile"]`` is not. Similarly, you cannot use ``["geo:SearchPlaceIndexFor*"]`` - you must list each of the Place actions separately.
456
+ You must use these strings exactly. For example, to provide access to map rendering, the only valid action is ``geo:GetMap*`` as an input to the list. ``["geo:GetMap*"]`` is valid but ``["geo:GetTile"]`` is not. Similarly, you cannot use ``["geo:SearchPlaceIndexFor*"]`` - you must list each of the Place actions separately.
440
457
 
441
458
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-location-apikey-apikeyrestrictions.html#cfn-location-apikey-apikeyrestrictions-allowactions
442
459
  '''
@@ -423,8 +423,7 @@ Each policy may consist of a log group, S3 bucket, and/or Firehose delivery stre
423
423
  Example:
424
424
 
425
425
  ```python
426
- import aws_cdk.aws_kinesisfirehose_alpha as kinesisfirehose
427
- import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
426
+ import aws_cdk.aws_kinesisfirehose as firehose
428
427
 
429
428
 
430
429
  log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
@@ -432,9 +431,9 @@ log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
432
431
  )
433
432
 
434
433
  bucket = s3.Bucket(self, "audit-bucket")
435
- s3_destination = destinations.S3Bucket(bucket)
434
+ s3_destination = firehose.S3Bucket(bucket)
436
435
 
437
- delivery_stream = kinesisfirehose.DeliveryStream(self, "Delivery Stream",
436
+ delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
438
437
  destination=s3_destination
439
438
  )
440
439
 
@@ -8767,8 +8766,7 @@ class DataIdentifier(
8767
8766
 
8768
8767
  Example::
8769
8768
 
8770
- import aws_cdk.aws_kinesisfirehose_alpha as kinesisfirehose
8771
- import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
8769
+ import aws_cdk.aws_kinesisfirehose as firehose
8772
8770
 
8773
8771
 
8774
8772
  log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
@@ -8776,9 +8774,9 @@ class DataIdentifier(
8776
8774
  )
8777
8775
 
8778
8776
  bucket = s3.Bucket(self, "audit-bucket")
8779
- s3_destination = destinations.S3Bucket(bucket)
8777
+ s3_destination = firehose.S3Bucket(bucket)
8780
8778
 
8781
- delivery_stream = kinesisfirehose.DeliveryStream(self, "Delivery Stream",
8779
+ delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
8782
8780
  destination=s3_destination
8783
8781
  )
8784
8782
 
@@ -9323,8 +9321,7 @@ class DataProtectionPolicy(
9323
9321
 
9324
9322
  Example::
9325
9323
 
9326
- import aws_cdk.aws_kinesisfirehose_alpha as kinesisfirehose
9327
- import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
9324
+ import aws_cdk.aws_kinesisfirehose as firehose
9328
9325
 
9329
9326
 
9330
9327
  log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
@@ -9332,9 +9329,9 @@ class DataProtectionPolicy(
9332
9329
  )
9333
9330
 
9334
9331
  bucket = s3.Bucket(self, "audit-bucket")
9335
- s3_destination = destinations.S3Bucket(bucket)
9332
+ s3_destination = firehose.S3Bucket(bucket)
9336
9333
 
9337
- delivery_stream = kinesisfirehose.DeliveryStream(self, "Delivery Stream",
9334
+ delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
9338
9335
  destination=s3_destination
9339
9336
  )
9340
9337
 
@@ -9368,7 +9365,7 @@ class DataProtectionPolicy(
9368
9365
  ) -> None:
9369
9366
  '''
9370
9367
  :param identifiers: List of data protection identifiers. Managed data identifiers must be in the following list: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL-managed-data-identifiers.html Custom data identifiers must have a valid regex defined: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL-custom-data-identifiers.html#custom-data-identifiers-constraints
9371
- :param delivery_stream_name_audit_destination: Amazon Kinesis Data Firehose delivery stream to send audit findings to. The delivery stream must already exist. Default: - no firehose delivery stream audit destination
9368
+ :param delivery_stream_name_audit_destination: Amazon Data Firehose delivery stream to send audit findings to. The delivery stream must already exist. Default: - no firehose delivery stream audit destination
9372
9369
  :param description: Description of the data protection policy. Default: - 'cdk generated data protection policy'
9373
9370
  :param log_group_audit_destination: CloudWatch Logs log group to send audit findings to. The log group must already exist prior to creating the data protection policy. Default: - no CloudWatch Logs audit destination
9374
9371
  :param name: Name of the data protection policy. Default: - 'data-protection-policy-cdk'
@@ -9412,7 +9409,7 @@ class DataProtectionPolicyProps:
9412
9409
  '''Properties for creating a data protection policy.
9413
9410
 
9414
9411
  :param identifiers: List of data protection identifiers. Managed data identifiers must be in the following list: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL-managed-data-identifiers.html Custom data identifiers must have a valid regex defined: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL-custom-data-identifiers.html#custom-data-identifiers-constraints
9415
- :param delivery_stream_name_audit_destination: Amazon Kinesis Data Firehose delivery stream to send audit findings to. The delivery stream must already exist. Default: - no firehose delivery stream audit destination
9412
+ :param delivery_stream_name_audit_destination: Amazon Data Firehose delivery stream to send audit findings to. The delivery stream must already exist. Default: - no firehose delivery stream audit destination
9416
9413
  :param description: Description of the data protection policy. Default: - 'cdk generated data protection policy'
9417
9414
  :param log_group_audit_destination: CloudWatch Logs log group to send audit findings to. The log group must already exist prior to creating the data protection policy. Default: - no CloudWatch Logs audit destination
9418
9415
  :param name: Name of the data protection policy. Default: - 'data-protection-policy-cdk'
@@ -9422,8 +9419,7 @@ class DataProtectionPolicyProps:
9422
9419
 
9423
9420
  Example::
9424
9421
 
9425
- import aws_cdk.aws_kinesisfirehose_alpha as kinesisfirehose
9426
- import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
9422
+ import aws_cdk.aws_kinesisfirehose as firehose
9427
9423
 
9428
9424
 
9429
9425
  log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
@@ -9431,9 +9427,9 @@ class DataProtectionPolicyProps:
9431
9427
  )
9432
9428
 
9433
9429
  bucket = s3.Bucket(self, "audit-bucket")
9434
- s3_destination = destinations.S3Bucket(bucket)
9430
+ s3_destination = firehose.S3Bucket(bucket)
9435
9431
 
9436
- delivery_stream = kinesisfirehose.DeliveryStream(self, "Delivery Stream",
9432
+ delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
9437
9433
  destination=s3_destination
9438
9434
  )
9439
9435
 
@@ -9489,7 +9485,7 @@ class DataProtectionPolicyProps:
9489
9485
 
9490
9486
  @builtins.property
9491
9487
  def delivery_stream_name_audit_destination(self) -> typing.Optional[builtins.str]:
9492
- '''Amazon Kinesis Data Firehose delivery stream to send audit findings to.
9488
+ '''Amazon Data Firehose delivery stream to send audit findings to.
9493
9489
 
9494
9490
  The delivery stream must already exist.
9495
9491
 
@@ -11221,8 +11217,7 @@ class LogGroupProps:
11221
11217
 
11222
11218
  Example::
11223
11219
 
11224
- import aws_cdk.aws_kinesisfirehose_alpha as kinesisfirehose
11225
- import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
11220
+ import aws_cdk.aws_kinesisfirehose as firehose
11226
11221
 
11227
11222
 
11228
11223
  log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
@@ -11230,9 +11225,9 @@ class LogGroupProps:
11230
11225
  )
11231
11226
 
11232
11227
  bucket = s3.Bucket(self, "audit-bucket")
11233
- s3_destination = destinations.S3Bucket(bucket)
11228
+ s3_destination = firehose.S3Bucket(bucket)
11234
11229
 
11235
- delivery_stream = kinesisfirehose.DeliveryStream(self, "Delivery Stream",
11230
+ delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
11236
11231
  destination=s3_destination
11237
11232
  )
11238
11233
 
@@ -13632,8 +13627,7 @@ class CustomDataIdentifier(
13632
13627
 
13633
13628
  Example::
13634
13629
 
13635
- import aws_cdk.aws_kinesisfirehose_alpha as kinesisfirehose
13636
- import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
13630
+ import aws_cdk.aws_kinesisfirehose as firehose
13637
13631
 
13638
13632
 
13639
13633
  log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
@@ -13641,9 +13635,9 @@ class CustomDataIdentifier(
13641
13635
  )
13642
13636
 
13643
13637
  bucket = s3.Bucket(self, "audit-bucket")
13644
- s3_destination = destinations.S3Bucket(bucket)
13638
+ s3_destination = firehose.S3Bucket(bucket)
13645
13639
 
13646
- delivery_stream = kinesisfirehose.DeliveryStream(self, "Delivery Stream",
13640
+ delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
13647
13641
  destination=s3_destination
13648
13642
  )
13649
13643
 
@@ -272,13 +272,6 @@ class CfnCluster(
272
272
  ):
273
273
  '''Creates a new MSK cluster.
274
274
 
275
- The following Python 3.6 example shows how you can create a cluster that's distributed across two `Availability Zones <https://docs.aws.amazon.com/global-infrastructure/latest/regions/aws-availability-zones.html>`_ . Before you run this Python script, replace the example subnet and security-group IDs with the IDs of your subnets and security group.
276
-
277
- When you create an MSK cluster, its brokers get evenly distributed across a number of Availability Zones that's equal to the number of subnets that you specify in the ``BrokerNodeGroupInfo`` parameter. In the following example, you can add a third subnet to get a cluster that's distributed across three Availability Zones::
278
-
279
- import boto3 client = boto3.client('kafka') response = client.create_cluster( BrokerNodeGroupInfo={ 'BrokerAZDistribution': 'DEFAULT', 'ClientSubnets': [ 'subnet-012345678901fedcba', 'subnet-9876543210abcdef01' ], 'InstanceType': 'kafka.m5.large', 'SecurityGroups': [ 'sg-012345abcdef789789' ] }, ClusterName='SalesCluster', EncryptionInfo={ 'EncryptionInTransit': { 'ClientBroker': 'TLS_PLAINTEXT', 'InCluster': True } }, EnhancedMonitoring='PER_TOPIC_PER_BROKER', KafkaVersion='2.2.1', NumberOfBrokerNodes=2
280
- ) print(response)
281
-
282
275
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-cluster.html
283
276
  :cloudformationResource: AWS::MSK::Cluster
284
277
  :exampleMetadata: fixture=_generated
@@ -3582,7 +3575,7 @@ class CfnConfiguration(
3582
3575
  :param name: The name of the configuration. Configuration names are strings that match the regex "^[0-9A-Za-z][0-9A-Za-z-]{0,}$".
3583
3576
  :param server_properties: Contents of the ``server.properties`` file. When using this property, you must ensure that the contents of the file are base64 encoded. When using the console, the SDK, or the AWS CLI , the contents of ``server.properties`` can be in plaintext.
3584
3577
  :param description: The description of the configuration.
3585
- :param kafka_versions_list: The `versions of Apache Kafka <https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html>`_ with which you can use this MSK configuration.
3578
+ :param kafka_versions_list: The `versions of Apache Kafka <https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html>`_ with which you can use this MSK configuration. When you update the ``KafkaVersionsList`` property, AWS CloudFormation recreates a new configuration with the updated property before deleting the old configuration. Such an update requires a `resource replacement <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement>`_ . To successfully update ``KafkaVersionsList`` , you must also update the ``Name`` property in the same operation. If your configuration is attached with any clusters created using the AWS Management Console or AWS CLI , you'll need to manually delete the old configuration from the console after the update completes. For more information, see `Can’t update KafkaVersionsList in MSK configuration <https://docs.aws.amazon.com/msk/latest/developerguide/troubleshooting.html#troubleshoot-kafkaversionslist-cfn-update-failure>`_ in the *Amazon MSK Developer Guide* .
3586
3579
  :param latest_revision: Latest revision of the MSK configuration.
3587
3580
  '''
3588
3581
  if __debug__:
@@ -3859,7 +3852,7 @@ class CfnConfigurationProps:
3859
3852
  :param name: The name of the configuration. Configuration names are strings that match the regex "^[0-9A-Za-z][0-9A-Za-z-]{0,}$".
3860
3853
  :param server_properties: Contents of the ``server.properties`` file. When using this property, you must ensure that the contents of the file are base64 encoded. When using the console, the SDK, or the AWS CLI , the contents of ``server.properties`` can be in plaintext.
3861
3854
  :param description: The description of the configuration.
3862
- :param kafka_versions_list: The `versions of Apache Kafka <https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html>`_ with which you can use this MSK configuration.
3855
+ :param kafka_versions_list: The `versions of Apache Kafka <https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html>`_ with which you can use this MSK configuration. When you update the ``KafkaVersionsList`` property, AWS CloudFormation recreates a new configuration with the updated property before deleting the old configuration. Such an update requires a `resource replacement <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement>`_ . To successfully update ``KafkaVersionsList`` , you must also update the ``Name`` property in the same operation. If your configuration is attached with any clusters created using the AWS Management Console or AWS CLI , you'll need to manually delete the old configuration from the console after the update completes. For more information, see `Can’t update KafkaVersionsList in MSK configuration <https://docs.aws.amazon.com/msk/latest/developerguide/troubleshooting.html#troubleshoot-kafkaversionslist-cfn-update-failure>`_ in the *Amazon MSK Developer Guide* .
3863
3856
  :param latest_revision: Latest revision of the MSK configuration.
3864
3857
 
3865
3858
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-configuration.html
@@ -3938,6 +3931,12 @@ class CfnConfigurationProps:
3938
3931
  def kafka_versions_list(self) -> typing.Optional[typing.List[builtins.str]]:
3939
3932
  '''The `versions of Apache Kafka <https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html>`_ with which you can use this MSK configuration.
3940
3933
 
3934
+ When you update the ``KafkaVersionsList`` property, AWS CloudFormation recreates a new configuration with the updated property before deleting the old configuration. Such an update requires a `resource replacement <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement>`_ . To successfully update ``KafkaVersionsList`` , you must also update the ``Name`` property in the same operation.
3935
+
3936
+ If your configuration is attached with any clusters created using the AWS Management Console or AWS CLI , you'll need to manually delete the old configuration from the console after the update completes.
3937
+
3938
+ For more information, see `Can’t update KafkaVersionsList in MSK configuration <https://docs.aws.amazon.com/msk/latest/developerguide/troubleshooting.html#troubleshoot-kafkaversionslist-cfn-update-failure>`_ in the *Amazon MSK Developer Guide* .
3939
+
3941
3940
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-configuration.html#cfn-msk-configuration-kafkaversionslist
3942
3941
  '''
3943
3942
  result = self._values.get("kafka_versions_list")
@@ -4028,7 +4027,6 @@ class CfnReplicator(
4028
4027
  service_execution_role_arn="serviceExecutionRoleArn",
4029
4028
 
4030
4029
  # the properties below are optional
4031
- current_version="currentVersion",
4032
4030
  description="description",
4033
4031
  tags=[CfnTag(
4034
4032
  key="key",
@@ -4046,7 +4044,6 @@ class CfnReplicator(
4046
4044
  replication_info_list: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnReplicator.ReplicationInfoProperty", typing.Dict[builtins.str, typing.Any]]]]],
4047
4045
  replicator_name: builtins.str,
4048
4046
  service_execution_role_arn: builtins.str,
4049
- current_version: typing.Optional[builtins.str] = None,
4050
4047
  description: typing.Optional[builtins.str] = None,
4051
4048
  tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
4052
4049
  ) -> None:
@@ -4057,7 +4054,6 @@ class CfnReplicator(
4057
4054
  :param replication_info_list: A list of replication configurations, where each configuration targets a given source cluster to target cluster replication flow.
4058
4055
  :param replicator_name: The name of the replicator. Alpha-numeric characters with '-' are allowed.
4059
4056
  :param service_execution_role_arn: The ARN of the IAM role used by the replicator to access resources in the customer's account (e.g source and target clusters).
4060
- :param current_version: The current version number of the replicator.
4061
4057
  :param description: A summary description of the replicator.
4062
4058
  :param tags: List of tags to attach to created Replicator.
4063
4059
  '''
@@ -4070,7 +4066,6 @@ class CfnReplicator(
4070
4066
  replication_info_list=replication_info_list,
4071
4067
  replicator_name=replicator_name,
4072
4068
  service_execution_role_arn=service_execution_role_arn,
4073
- current_version=current_version,
4074
4069
  description=description,
4075
4070
  tags=tags,
4076
4071
  )
@@ -4107,6 +4102,15 @@ class CfnReplicator(
4107
4102
  '''The CloudFormation resource type name for this resource class.'''
4108
4103
  return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
4109
4104
 
4105
+ @builtins.property
4106
+ @jsii.member(jsii_name="attrCurrentVersion")
4107
+ def attr_current_version(self) -> builtins.str:
4108
+ '''The current version number of the replicator.
4109
+
4110
+ :cloudformationAttribute: CurrentVersion
4111
+ '''
4112
+ return typing.cast(builtins.str, jsii.get(self, "attrCurrentVersion"))
4113
+
4110
4114
  @builtins.property
4111
4115
  @jsii.member(jsii_name="attrReplicatorArn")
4112
4116
  def attr_replicator_arn(self) -> builtins.str:
@@ -4189,19 +4193,6 @@ class CfnReplicator(
4189
4193
  check_type(argname="argument value", value=value, expected_type=type_hints["value"])
4190
4194
  jsii.set(self, "serviceExecutionRoleArn", value) # pyright: ignore[reportArgumentType]
4191
4195
 
4192
- @builtins.property
4193
- @jsii.member(jsii_name="currentVersion")
4194
- def current_version(self) -> typing.Optional[builtins.str]:
4195
- '''The current version number of the replicator.'''
4196
- return typing.cast(typing.Optional[builtins.str], jsii.get(self, "currentVersion"))
4197
-
4198
- @current_version.setter
4199
- def current_version(self, value: typing.Optional[builtins.str]) -> None:
4200
- if __debug__:
4201
- type_hints = typing.get_type_hints(_typecheckingstub__79b07be057d5f4bf56dda86a24cdbb4ced3cc7a8e053d156dd93bbcf785aeb6f)
4202
- check_type(argname="argument value", value=value, expected_type=type_hints["value"])
4203
- jsii.set(self, "currentVersion", value) # pyright: ignore[reportArgumentType]
4204
-
4205
4196
  @builtins.property
4206
4197
  @jsii.member(jsii_name="description")
4207
4198
  def description(self) -> typing.Optional[builtins.str]:
@@ -4985,7 +4976,6 @@ class CfnReplicator(
4985
4976
  "replication_info_list": "replicationInfoList",
4986
4977
  "replicator_name": "replicatorName",
4987
4978
  "service_execution_role_arn": "serviceExecutionRoleArn",
4988
- "current_version": "currentVersion",
4989
4979
  "description": "description",
4990
4980
  "tags": "tags",
4991
4981
  },
@@ -4998,7 +4988,6 @@ class CfnReplicatorProps:
4998
4988
  replication_info_list: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnReplicator.ReplicationInfoProperty, typing.Dict[builtins.str, typing.Any]]]]],
4999
4989
  replicator_name: builtins.str,
5000
4990
  service_execution_role_arn: builtins.str,
5001
- current_version: typing.Optional[builtins.str] = None,
5002
4991
  description: typing.Optional[builtins.str] = None,
5003
4992
  tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
5004
4993
  ) -> None:
@@ -5008,7 +4997,6 @@ class CfnReplicatorProps:
5008
4997
  :param replication_info_list: A list of replication configurations, where each configuration targets a given source cluster to target cluster replication flow.
5009
4998
  :param replicator_name: The name of the replicator. Alpha-numeric characters with '-' are allowed.
5010
4999
  :param service_execution_role_arn: The ARN of the IAM role used by the replicator to access resources in the customer's account (e.g source and target clusters).
5011
- :param current_version: The current version number of the replicator.
5012
5000
  :param description: A summary description of the replicator.
5013
5001
  :param tags: List of tags to attach to created Replicator.
5014
5002
 
@@ -5065,7 +5053,6 @@ class CfnReplicatorProps:
5065
5053
  service_execution_role_arn="serviceExecutionRoleArn",
5066
5054
 
5067
5055
  # the properties below are optional
5068
- current_version="currentVersion",
5069
5056
  description="description",
5070
5057
  tags=[CfnTag(
5071
5058
  key="key",
@@ -5079,7 +5066,6 @@ class CfnReplicatorProps:
5079
5066
  check_type(argname="argument replication_info_list", value=replication_info_list, expected_type=type_hints["replication_info_list"])
5080
5067
  check_type(argname="argument replicator_name", value=replicator_name, expected_type=type_hints["replicator_name"])
5081
5068
  check_type(argname="argument service_execution_role_arn", value=service_execution_role_arn, expected_type=type_hints["service_execution_role_arn"])
5082
- check_type(argname="argument current_version", value=current_version, expected_type=type_hints["current_version"])
5083
5069
  check_type(argname="argument description", value=description, expected_type=type_hints["description"])
5084
5070
  check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
5085
5071
  self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -5088,8 +5074,6 @@ class CfnReplicatorProps:
5088
5074
  "replicator_name": replicator_name,
5089
5075
  "service_execution_role_arn": service_execution_role_arn,
5090
5076
  }
5091
- if current_version is not None:
5092
- self._values["current_version"] = current_version
5093
5077
  if description is not None:
5094
5078
  self._values["description"] = description
5095
5079
  if tags is not None:
@@ -5141,15 +5125,6 @@ class CfnReplicatorProps:
5141
5125
  assert result is not None, "Required property 'service_execution_role_arn' is missing"
5142
5126
  return typing.cast(builtins.str, result)
5143
5127
 
5144
- @builtins.property
5145
- def current_version(self) -> typing.Optional[builtins.str]:
5146
- '''The current version number of the replicator.
5147
-
5148
- :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-replicator.html#cfn-msk-replicator-currentversion
5149
- '''
5150
- result = self._values.get("current_version")
5151
- return typing.cast(typing.Optional[builtins.str], result)
5152
-
5153
5128
  @builtins.property
5154
5129
  def description(self) -> typing.Optional[builtins.str]:
5155
5130
  '''A summary description of the replicator.
@@ -6637,7 +6612,6 @@ def _typecheckingstub__dfeb157957f65ee344afab32ca8fffe9eb07ec631c59935f85e890a85
6637
6612
  replication_info_list: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnReplicator.ReplicationInfoProperty, typing.Dict[builtins.str, typing.Any]]]]],
6638
6613
  replicator_name: builtins.str,
6639
6614
  service_execution_role_arn: builtins.str,
6640
- current_version: typing.Optional[builtins.str] = None,
6641
6615
  description: typing.Optional[builtins.str] = None,
6642
6616
  tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
6643
6617
  ) -> None:
@@ -6680,12 +6654,6 @@ def _typecheckingstub__407d0e51992bcbb91149b5316e9f5b3429ee3acebc8959194b791b791
6680
6654
  """Type checking stubs"""
6681
6655
  pass
6682
6656
 
6683
- def _typecheckingstub__79b07be057d5f4bf56dda86a24cdbb4ced3cc7a8e053d156dd93bbcf785aeb6f(
6684
- value: typing.Optional[builtins.str],
6685
- ) -> None:
6686
- """Type checking stubs"""
6687
- pass
6688
-
6689
6657
  def _typecheckingstub__0d4359699d0ff82e6e6d493eefa33cd643cafd7ea12f638de022a962a125c66d(
6690
6658
  value: typing.Optional[builtins.str],
6691
6659
  ) -> None:
@@ -6775,7 +6743,6 @@ def _typecheckingstub__8386726baf4842aa1a4af40915bf45a4cc4edffd70ea82fa6a181cca6
6775
6743
  replication_info_list: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnReplicator.ReplicationInfoProperty, typing.Dict[builtins.str, typing.Any]]]]],
6776
6744
  replicator_name: builtins.str,
6777
6745
  service_execution_role_arn: builtins.str,
6778
- current_version: typing.Optional[builtins.str] = None,
6779
6746
  description: typing.Optional[builtins.str] = None,
6780
6747
  tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
6781
6748
  ) -> None:
@@ -3451,10 +3451,10 @@ class CfnRuleGroup(
3451
3451
 
3452
3452
  Each match attributes set can include one or more items such as IP address, CIDR range, port number, protocol, and TCP flags.
3453
3453
 
3454
- :param destination_ports: The destination ports to inspect for. If not specified, this matches with any destination port. This setting is only used for protocols 6 (TCP) and 17 (UDP). You can specify individual ports, for example ``1994`` and you can specify port ranges, for example ``1990:1994`` .
3454
+ :param destination_ports: The destination port to inspect for. You can specify an individual port, for example ``1994`` and you can specify a port range, for example ``1990:1994`` . To match with any port, specify ``ANY`` . This setting is only used for protocols 6 (TCP) and 17 (UDP).
3455
3455
  :param destinations: The destination IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any destination address.
3456
- :param protocols: The protocols to inspect for, specified using each protocol's assigned internet protocol number (IANA). If not specified, this matches with any protocol.
3457
- :param source_ports: The source ports to inspect for. If not specified, this matches with any source port. This setting is only used for protocols 6 (TCP) and 17 (UDP). You can specify individual ports, for example ``1994`` and you can specify port ranges, for example ``1990:1994`` .
3456
+ :param protocols: The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol. If not specified, this matches with any protocol.
3457
+ :param source_ports: The source port to inspect for. You can specify an individual port, for example ``1994`` and you can specify a port range, for example ``1990:1994`` . To match with any port, specify ``ANY`` . If not specified, this matches with any source port. This setting is only used for protocols 6 (TCP) and 17 (UDP).
3458
3458
  :param sources: The source IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any source address.
3459
3459
  :param tcp_flags: The TCP flags and masks to inspect for. If not specified, this matches with any settings. This setting is only used for protocol 6 (TCP).
3460
3460
 
@@ -3517,11 +3517,11 @@ class CfnRuleGroup(
3517
3517
  def destination_ports(
3518
3518
  self,
3519
3519
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.PortRangeProperty"]]]]:
3520
- '''The destination ports to inspect for.
3520
+ '''The destination port to inspect for.
3521
3521
 
3522
- If not specified, this matches with any destination port. This setting is only used for protocols 6 (TCP) and 17 (UDP).
3522
+ You can specify an individual port, for example ``1994`` and you can specify a port range, for example ``1990:1994`` . To match with any port, specify ``ANY`` .
3523
3523
 
3524
- You can specify individual ports, for example ``1994`` and you can specify port ranges, for example ``1990:1994`` .
3524
+ This setting is only used for protocols 6 (TCP) and 17 (UDP).
3525
3525
 
3526
3526
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-matchattributes.html#cfn-networkfirewall-rulegroup-matchattributes-destinationports
3527
3527
  '''
@@ -3545,7 +3545,7 @@ class CfnRuleGroup(
3545
3545
  def protocols(
3546
3546
  self,
3547
3547
  ) -> typing.Optional[typing.Union[typing.List[jsii.Number], _IResolvable_da3f097b]]:
3548
- '''The protocols to inspect for, specified using each protocol's assigned internet protocol number (IANA).
3548
+ '''The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol.
3549
3549
 
3550
3550
  If not specified, this matches with any protocol.
3551
3551
 
@@ -3558,11 +3558,13 @@ class CfnRuleGroup(
3558
3558
  def source_ports(
3559
3559
  self,
3560
3560
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.PortRangeProperty"]]]]:
3561
- '''The source ports to inspect for.
3561
+ '''The source port to inspect for.
3562
+
3563
+ You can specify an individual port, for example ``1994`` and you can specify a port range, for example ``1990:1994`` . To match with any port, specify ``ANY`` .
3562
3564
 
3563
- If not specified, this matches with any source port. This setting is only used for protocols 6 (TCP) and 17 (UDP).
3565
+ If not specified, this matches with any source port.
3564
3566
 
3565
- You can specify individual ports, for example ``1994`` and you can specify port ranges, for example ``1990:1994`` .
3567
+ This setting is only used for protocols 6 (TCP) and 17 (UDP).
3566
3568
 
3567
3569
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-matchattributes.html#cfn-networkfirewall-rulegroup-matchattributes-sourceports
3568
3570
  '''
@@ -6022,7 +6024,7 @@ class CfnTLSInspectionConfiguration(
6022
6024
 
6023
6025
  :param destination_ports: The destination ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any destination port. You can specify individual ports, for example ``1994`` , and you can specify port ranges, such as ``1990:1994`` .
6024
6026
  :param destinations: The destination IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this matches with any destination address.
6025
- :param protocols: The protocols to decrypt for inspection, specified using each protocol's assigned internet protocol number (IANA). Network Firewall currently supports only TCP.
6027
+ :param protocols: The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol. If not specified, this matches with any protocol. Network Firewall currently supports only TCP.
6026
6028
  :param source_ports: The source ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any source port. You can specify individual ports, for example ``1994`` , and you can specify port ranges, such as ``1990:1994`` .
6027
6029
  :param sources: The source IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this matches with any source address.
6028
6030
 
@@ -6105,7 +6107,9 @@ class CfnTLSInspectionConfiguration(
6105
6107
  def protocols(
6106
6108
  self,
6107
6109
  ) -> typing.Optional[typing.Union[typing.List[jsii.Number], _IResolvable_da3f097b]]:
6108
- '''The protocols to decrypt for inspection, specified using each protocol's assigned internet protocol number (IANA).
6110
+ '''The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol.
6111
+
6112
+ If not specified, this matches with any protocol.
6109
6113
 
6110
6114
  Network Firewall currently supports only TCP.
6111
6115
 
@@ -128,7 +128,7 @@ class CfnLink(
128
128
  '''
129
129
  :param scope: Scope in which this resource is defined.
130
130
  :param id: Construct identifier for this resource (unique in its scope).
131
- :param resource_types: An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor`` .
131
+ :param resource_types: An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor | AWS::ApplicationSignals::Service | AWS::ApplicationSignals::ServiceLevelObjective`` .
132
132
  :param sink_identifier: The ARN of the sink in the monitoring account that you want to link to. You can use `ListSinks <https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListSinks.html>`_ to find the ARNs of sinks.
133
133
  :param label_template: Specify a friendly human-readable name to use to identify this source account when you are viewing data from it in the monitoring account. You can include the following variables in your template: - ``$AccountName`` is the name of the account - ``$AccountEmail`` is a globally-unique email address, which includes the email domain, such as ``mariagarcia@example.com`` - ``$AccountEmailNoDomain`` is an email address without the domain name, such as ``mariagarcia``
134
134
  :param link_configuration: Use this structure to optionally create filters that specify that only some metric namespaces or log groups are to be shared from the source account to the monitoring account.
@@ -301,7 +301,7 @@ class CfnLink(
301
301
  ) -> None:
302
302
  '''Use this structure to optionally create filters that specify that only some metric namespaces or log groups are to be shared from the source account to the monitoring account.
303
303
 
304
- :param log_group_configuration: Use this structure to filter which log groups are to share log events from this source account to the monitoring account.
304
+ :param log_group_configuration: Use this structure to filter which log groups are to send log events from the source account to the monitoring account.
305
305
  :param metric_configuration: Use this structure to filter which metric namespaces are to be shared from the source account to the monitoring account.
306
306
 
307
307
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkconfiguration.html
@@ -336,7 +336,7 @@ class CfnLink(
336
336
  def log_group_configuration(
337
337
  self,
338
338
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLink.LinkFilterProperty"]]:
339
- '''Use this structure to filter which log groups are to share log events from this source account to the monitoring account.
339
+ '''Use this structure to filter which log groups are to send log events from the source account to the monitoring account.
340
340
 
341
341
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkconfiguration.html#cfn-oam-link-linkconfiguration-loggroupconfiguration
342
342
  '''
@@ -372,11 +372,8 @@ class CfnLink(
372
372
  )
373
373
  class LinkFilterProperty:
374
374
  def __init__(self, *, filter: builtins.str) -> None:
375
- '''When used in ``MetricConfiguration`` this field specifies which metric namespaces are to be shared with the monitoring account.
376
-
377
- When used in ``LogGroupConfiguration`` this field specifies which log groups are to share their log events with the monitoring account. Use the term ``LogGroupName`` and one or more of the following operands.
378
-
379
- :param filter: When used in ``MetricConfiguration`` this field specifies which metric namespaces are to be shared with the monitoring account. When used in ``LogGroupConfiguration`` this field specifies which log groups are to share their log events with the monitoring account. Use the term ``LogGroupName`` and one or more of the following operands. Use single quotation marks (') around log group names and metric namespaces. The matching of log group names and metric namespaces is case sensitive. Each filter has a limit of five conditional operands. Conditional operands are ``AND`` and ``OR`` . - ``=`` and ``!=`` - ``AND`` - ``OR`` - ``LIKE`` and ``NOT LIKE`` . These can be used only as prefix searches. Include a ``%`` at the end of the string that you want to search for and include. - ``IN`` and ``NOT IN`` , using parentheses ``( )`` Examples: - ``Namespace NOT LIKE 'AWS/%'`` includes only namespaces that don't start with ``AWS/`` , such as custom namespaces. - ``Namespace IN ('AWS/EC2', 'AWS/ELB', 'AWS/S3')`` includes only the metrics in the EC2, Elastic Load Balancing , and Amazon S3 namespaces. - ``Namespace = 'AWS/EC2' OR Namespace NOT LIKE 'AWS/%'`` includes only the EC2 namespace and your custom namespaces. - ``LogGroupName IN ('This-Log-Group', 'Other-Log-Group')`` includes only the log groups with names ``This-Log-Group`` and ``Other-Log-Group`` . - ``LogGroupName NOT IN ('Private-Log-Group', 'Private-Log-Group-2')`` includes all log groups except the log groups with names ``Private-Log-Group`` and ``Private-Log-Group-2`` . - ``LogGroupName LIKE 'aws/lambda/%' OR LogGroupName LIKE 'AWSLogs%'`` includes all log groups that have names that start with ``aws/lambda/`` or ``AWSLogs`` . .. epigraph:: If you are updating a link that uses filters, you can specify ``*`` as the only value for the ``filter`` parameter to delete the filter and share all log groups with the monitoring account.
375
+ '''
376
+ :param filter:
380
377
 
381
378
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkfilter.html
382
379
  :exampleMetadata: fixture=_generated
@@ -400,33 +397,7 @@ class CfnLink(
400
397
 
401
398
  @builtins.property
402
399
  def filter(self) -> builtins.str:
403
- '''When used in ``MetricConfiguration`` this field specifies which metric namespaces are to be shared with the monitoring account.
404
-
405
- When used in ``LogGroupConfiguration`` this field specifies which log groups are to share their log events with the monitoring account. Use the term ``LogGroupName`` and one or more of the following operands.
406
-
407
- Use single quotation marks (') around log group names and metric namespaces.
408
-
409
- The matching of log group names and metric namespaces is case sensitive. Each filter has a limit of five conditional operands. Conditional operands are ``AND`` and ``OR`` .
410
-
411
- - ``=`` and ``!=``
412
- - ``AND``
413
- - ``OR``
414
- - ``LIKE`` and ``NOT LIKE`` . These can be used only as prefix searches. Include a ``%`` at the end of the string that you want to search for and include.
415
- - ``IN`` and ``NOT IN`` , using parentheses ``( )``
416
-
417
- Examples:
418
-
419
- - ``Namespace NOT LIKE 'AWS/%'`` includes only namespaces that don't start with ``AWS/`` , such as custom namespaces.
420
- - ``Namespace IN ('AWS/EC2', 'AWS/ELB', 'AWS/S3')`` includes only the metrics in the EC2, Elastic Load Balancing , and Amazon S3 namespaces.
421
- - ``Namespace = 'AWS/EC2' OR Namespace NOT LIKE 'AWS/%'`` includes only the EC2 namespace and your custom namespaces.
422
- - ``LogGroupName IN ('This-Log-Group', 'Other-Log-Group')`` includes only the log groups with names ``This-Log-Group`` and ``Other-Log-Group`` .
423
- - ``LogGroupName NOT IN ('Private-Log-Group', 'Private-Log-Group-2')`` includes all log groups except the log groups with names ``Private-Log-Group`` and ``Private-Log-Group-2`` .
424
- - ``LogGroupName LIKE 'aws/lambda/%' OR LogGroupName LIKE 'AWSLogs%'`` includes all log groups that have names that start with ``aws/lambda/`` or ``AWSLogs`` .
425
-
426
- .. epigraph::
427
-
428
- If you are updating a link that uses filters, you can specify ``*`` as the only value for the ``filter`` parameter to delete the filter and share all log groups with the monitoring account.
429
-
400
+ '''
430
401
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkfilter.html#cfn-oam-link-linkfilter-filter
431
402
  '''
432
403
  result = self._values.get("filter")
@@ -468,7 +439,7 @@ class CfnLinkProps:
468
439
  ) -> None:
469
440
  '''Properties for defining a ``CfnLink``.
470
441
 
471
- :param resource_types: An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor`` .
442
+ :param resource_types: An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor | AWS::ApplicationSignals::Service | AWS::ApplicationSignals::ServiceLevelObjective`` .
472
443
  :param sink_identifier: The ARN of the sink in the monitoring account that you want to link to. You can use `ListSinks <https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListSinks.html>`_ to find the ARNs of sinks.
473
444
  :param label_template: Specify a friendly human-readable name to use to identify this source account when you are viewing data from it in the monitoring account. You can include the following variables in your template: - ``$AccountName`` is the name of the account - ``$AccountEmail`` is a globally-unique email address, which includes the email domain, such as ``mariagarcia@example.com`` - ``$AccountEmailNoDomain`` is an email address without the domain name, such as ``mariagarcia``
474
445
  :param link_configuration: Use this structure to optionally create filters that specify that only some metric namespaces or log groups are to be shared from the source account to the monitoring account.
@@ -524,7 +495,7 @@ class CfnLinkProps:
524
495
  def resource_types(self) -> typing.List[builtins.str]:
525
496
  '''An array of strings that define which types of data that the source account shares with the monitoring account.
526
497
 
527
- Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor`` .
498
+ Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor | AWS::ApplicationSignals::Service | AWS::ApplicationSignals::ServiceLevelObjective`` .
528
499
 
529
500
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-oam-link.html#cfn-oam-link-resourcetypes
530
501
  '''