aws-cdk-lib 2.184.1__py3-none-any.whl → 2.186.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of aws-cdk-lib might be problematic. Click here for more details.
- aws_cdk/__init__.py +102 -29
- aws_cdk/_jsii/__init__.py +1 -1
- aws_cdk/_jsii/{aws-cdk-lib@2.184.1.jsii.tgz → aws-cdk-lib@2.186.0.jsii.tgz} +0 -0
- aws_cdk/aws_amazonmq/__init__.py +3 -2
- aws_cdk/aws_apigateway/__init__.py +1 -1
- aws_cdk/aws_apigatewayv2/__init__.py +9 -0
- aws_cdk/aws_appconfig/__init__.py +3 -3
- aws_cdk/aws_applicationsignals/__init__.py +495 -1
- aws_cdk/aws_appsync/__init__.py +65 -11
- aws_cdk/aws_athena/__init__.py +143 -0
- aws_cdk/aws_backup/__init__.py +4 -2
- aws_cdk/aws_batch/__init__.py +9 -0
- aws_cdk/aws_bedrock/__init__.py +645 -199
- aws_cdk/aws_cassandra/__init__.py +3 -5
- aws_cdk/aws_chatbot/__init__.py +41 -0
- aws_cdk/aws_cleanrooms/__init__.py +21 -9
- aws_cdk/aws_cloudformation/__init__.py +1 -5
- aws_cdk/aws_cloudfront/__init__.py +4 -1
- aws_cdk/aws_cloudfront_origins/__init__.py +4 -2
- aws_cdk/aws_codeartifact/__init__.py +20 -33
- aws_cdk/aws_codebuild/__init__.py +10 -3
- aws_cdk/aws_codepipeline/__init__.py +1328 -120
- aws_cdk/aws_cognito/__init__.py +1 -1
- aws_cdk/aws_cognito_identitypool/__init__.py +2303 -0
- aws_cdk/aws_config/__init__.py +1 -1
- aws_cdk/aws_connect/__init__.py +3 -7
- aws_cdk/aws_controltower/__init__.py +18 -26
- aws_cdk/aws_datasync/__init__.py +12 -14
- aws_cdk/aws_datazone/__init__.py +3471 -2
- aws_cdk/aws_ec2/__init__.py +701 -37
- aws_cdk/aws_ecr/__init__.py +84 -2
- aws_cdk/aws_ecs/__init__.py +20 -25
- aws_cdk/aws_eks/__init__.py +2 -0
- aws_cdk/aws_elasticloadbalancingv2/__init__.py +42 -5
- aws_cdk/aws_elasticsearch/__init__.py +1 -1
- aws_cdk/aws_events/__init__.py +37 -14
- aws_cdk/aws_events_targets/__init__.py +5 -5
- aws_cdk/aws_gamelift/__init__.py +165 -165
- aws_cdk/aws_gameliftstreams/__init__.py +199 -59
- aws_cdk/aws_iam/__init__.py +320 -25
- aws_cdk/aws_imagebuilder/__init__.py +15 -2
- aws_cdk/aws_iotfleetwise/__init__.py +15 -6
- aws_cdk/aws_kinesisfirehose/__init__.py +115 -113
- aws_cdk/aws_lambda/__init__.py +7 -1
- aws_cdk/aws_location/__init__.py +24 -7
- aws_cdk/aws_logs/__init__.py +21 -27
- aws_cdk/aws_msk/__init__.py +17 -50
- aws_cdk/aws_networkfirewall/__init__.py +16 -12
- aws_cdk/aws_oam/__init__.py +8 -37
- aws_cdk/aws_opensearchservice/__init__.py +1 -1
- aws_cdk/aws_pcs/__init__.py +33 -22
- aws_cdk/aws_quicksight/__init__.py +6 -69
- aws_cdk/aws_rds/__init__.py +8 -4
- aws_cdk/aws_redshiftserverless/__init__.py +192 -15
- aws_cdk/aws_rum/__init__.py +454 -43
- aws_cdk/aws_s3/__init__.py +4 -6
- aws_cdk/aws_s3_deployment/__init__.py +2 -0
- aws_cdk/aws_sagemaker/__init__.py +524 -0
- aws_cdk/aws_scheduler/__init__.py +3944 -121
- aws_cdk/aws_scheduler_targets/__init__.py +4472 -0
- aws_cdk/aws_ses/__init__.py +9 -9
- aws_cdk/aws_sns/__init__.py +12 -12
- aws_cdk/aws_ssmquicksetup/__init__.py +5 -3
- aws_cdk/aws_stepfunctions/__init__.py +17 -15
- aws_cdk/aws_timestream/__init__.py +4 -4
- aws_cdk/aws_wafv2/__init__.py +345 -0
- aws_cdk/aws_workspacesthinclient/__init__.py +4 -4
- aws_cdk/cx_api/__init__.py +53 -0
- aws_cdk/region_info/__init__.py +2 -2
- {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/METADATA +1 -1
- {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/RECORD +75 -73
- {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/LICENSE +0 -0
- {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/NOTICE +0 -0
- {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/WHEEL +0 -0
- {aws_cdk_lib-2.184.1.dist-info → aws_cdk_lib-2.186.0.dist-info}/top_level.txt +0 -0
aws_cdk/aws_lambda/__init__.py
CHANGED
|
@@ -906,7 +906,7 @@ fn.add_event_source(eventsources.DynamoEventSource(table,
|
|
|
906
906
|
|
|
907
907
|
### Observability
|
|
908
908
|
|
|
909
|
-
Customers can now opt-in to get enhanced metrics for their event source mapping that capture each stage of processing using the `
|
|
909
|
+
Customers can now opt-in to get enhanced metrics for their event source mapping that capture each stage of processing using the `MetricsConfig` property.
|
|
910
910
|
|
|
911
911
|
The following code shows how to opt in for the enhanced metrics.
|
|
912
912
|
|
|
@@ -21563,6 +21563,12 @@ class Runtime(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_lambda.Runtime
|
|
|
21563
21563
|
'''The Ruby 3.3 runtime (ruby3.3).'''
|
|
21564
21564
|
return typing.cast("Runtime", jsii.sget(cls, "RUBY_3_3"))
|
|
21565
21565
|
|
|
21566
|
+
@jsii.python.classproperty
|
|
21567
|
+
@jsii.member(jsii_name="RUBY_3_4")
|
|
21568
|
+
def RUBY_3_4(cls) -> "Runtime":
|
|
21569
|
+
'''The Ruby 3.4 runtime (ruby3.4).'''
|
|
21570
|
+
return typing.cast("Runtime", jsii.sget(cls, "RUBY_3_4"))
|
|
21571
|
+
|
|
21566
21572
|
@builtins.property
|
|
21567
21573
|
@jsii.member(jsii_name="bundlingImage")
|
|
21568
21574
|
def bundling_image(self) -> _DockerImage_f97a0c12:
|
aws_cdk/aws_location/__init__.py
CHANGED
|
@@ -382,7 +382,7 @@ class CfnAPIKey(
|
|
|
382
382
|
) -> None:
|
|
383
383
|
'''API Restrictions on the allowed actions, resources, and referers for an API key resource.
|
|
384
384
|
|
|
385
|
-
:param allow_actions: A list of allowed actions that an API key resource grants permissions to perform. You must have at least one action for each type of resource. For example, if you have a place resource, you must include at least one place action. The following are valid values for the actions. - *Map actions* - ``geo:GetMap*`` - Allows all actions needed for map rendering. - *Place actions* - ``geo:SearchPlaceIndexForText`` - Allows
|
|
385
|
+
:param allow_actions: A list of allowed actions that an API key resource grants permissions to perform. You must have at least one action for each type of resource. For example, if you have a place resource, you must include at least one place action. The following are valid values for the actions. - *Map actions* - ``geo:GetMap*`` - Allows all actions needed for map rendering. - *Enhanced Maps actions* - ``geo-maps:GetTile`` - Allows getting map tiles for rendering. - ``geo-maps:GetStaticMap`` - Allows getting static map images. - *Place actions* - ``geo:SearchPlaceIndexForText`` - Allows finding geo coordinates of a known place. - ``geo:SearchPlaceIndexForPosition`` - Allows getting nearest address to geo coordinates. - ``geo:SearchPlaceIndexForSuggestions`` - Allows suggestions based on an incomplete or misspelled query. - ``geo:GetPlace`` - Allows getting details of a place. - *Enhanced Places actions* - ``geo-places:Autcomplete`` - Allows auto-completion of search text. - ``geo-places:Geocode`` - Allows finding geo coordinates of a known place. - ``geo-places:GetPlace`` - Allows getting details of a place. - ``geo-places:ReverseGeocode`` - Allows getting nearest address to geo coordinates. - ``geo-places:SearchNearby`` - Allows category based places search around geo coordinates. - ``geo-places:SearchText`` - Allows place or address search based on free-form text. - ``geo-places:Suggest`` - Allows suggestions based on an incomplete or misspelled query. - *Route actions* - ``geo:CalculateRoute`` - Allows point to point routing. - ``geo:CalculateRouteMatrix`` - Allows matrix routing. - *Enhanced Routes actions* - ``geo-routes:CalculateIsolines`` - Allows isoline calculation. - ``geo-routes:CalculateRoutes`` - Allows point to point routing. - ``geo-routes:CalculateRouteMatrix`` - Allows matrix routing. - ``geo-routes:OptimizeWaypoints`` - Allows computing the best sequence of waypoints. - ``geo-routes:SnapToRoads`` - Allows snapping GPS points to a likely route. .. epigraph:: You must use these strings exactly. For example, to provide access to map rendering, the only valid action is ``geo:GetMap*`` as an input to the list. ``["geo:GetMap*"]`` is valid but ``["geo:GetTile"]`` is not. Similarly, you cannot use ``["geo:SearchPlaceIndexFor*"]`` - you must list each of the Place actions separately.
|
|
386
386
|
:param allow_resources: A list of allowed resource ARNs that a API key bearer can perform actions on. - The ARN must be the correct ARN for a map, place, or route ARN. You may include wildcards in the resource-id to match multiple resources of the same type. - The resources must be in the same ``partition`` , ``region`` , and ``account-id`` as the key that is being created. - Other than wildcards, you must include the full ARN, including the ``arn`` , ``partition`` , ``service`` , ``region`` , ``account-id`` and ``resource-id`` delimited by colons (:). - No spaces allowed, even with wildcards. For example, ``arn:aws:geo:region: *account-id* :map/ExampleMap*`` . For more information about ARN format, see `Amazon Resource Names (ARNs) <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html>`_ .
|
|
387
387
|
:param allow_referers: An optional list of allowed HTTP referers for which requests must originate from. Requests using this API key from other domains will not be allowed. Requirements: - Contain only alphanumeric characters (A–Z, a–z, 0–9) or any symbols in this list ``$\\-._+!*``(),;/?:@=&` - May contain a percent (%) if followed by 2 hexadecimal digits (A-F, a-f, 0-9); this is used for URL encoding purposes. - May contain wildcard characters question mark (?) and asterisk (*). Question mark (?) will replace any single character (including hexadecimal digits). Asterisk (*) will replace any multiple characters (including multiple hexadecimal digits). - No spaces allowed. For example, ``https://example.com`` .
|
|
388
388
|
|
|
@@ -425,18 +425,35 @@ class CfnAPIKey(
|
|
|
425
425
|
|
|
426
426
|
- *Map actions*
|
|
427
427
|
- ``geo:GetMap*`` - Allows all actions needed for map rendering.
|
|
428
|
+
- *Enhanced Maps actions*
|
|
429
|
+
- ``geo-maps:GetTile`` - Allows getting map tiles for rendering.
|
|
430
|
+
- ``geo-maps:GetStaticMap`` - Allows getting static map images.
|
|
428
431
|
- *Place actions*
|
|
429
|
-
- ``geo:SearchPlaceIndexForText`` - Allows
|
|
430
|
-
- ``geo:SearchPlaceIndexForPosition`` - Allows
|
|
431
|
-
- ``geo:SearchPlaceIndexForSuggestions`` - Allows
|
|
432
|
-
- ``geo:GetPlace`` - Allows
|
|
432
|
+
- ``geo:SearchPlaceIndexForText`` - Allows finding geo coordinates of a known place.
|
|
433
|
+
- ``geo:SearchPlaceIndexForPosition`` - Allows getting nearest address to geo coordinates.
|
|
434
|
+
- ``geo:SearchPlaceIndexForSuggestions`` - Allows suggestions based on an incomplete or misspelled query.
|
|
435
|
+
- ``geo:GetPlace`` - Allows getting details of a place.
|
|
436
|
+
- *Enhanced Places actions*
|
|
437
|
+
- ``geo-places:Autcomplete`` - Allows auto-completion of search text.
|
|
438
|
+
- ``geo-places:Geocode`` - Allows finding geo coordinates of a known place.
|
|
439
|
+
- ``geo-places:GetPlace`` - Allows getting details of a place.
|
|
440
|
+
- ``geo-places:ReverseGeocode`` - Allows getting nearest address to geo coordinates.
|
|
441
|
+
- ``geo-places:SearchNearby`` - Allows category based places search around geo coordinates.
|
|
442
|
+
- ``geo-places:SearchText`` - Allows place or address search based on free-form text.
|
|
443
|
+
- ``geo-places:Suggest`` - Allows suggestions based on an incomplete or misspelled query.
|
|
433
444
|
- *Route actions*
|
|
434
445
|
- ``geo:CalculateRoute`` - Allows point to point routing.
|
|
435
|
-
- ``geo:CalculateRouteMatrix`` - Allows
|
|
446
|
+
- ``geo:CalculateRouteMatrix`` - Allows matrix routing.
|
|
447
|
+
- *Enhanced Routes actions*
|
|
448
|
+
- ``geo-routes:CalculateIsolines`` - Allows isoline calculation.
|
|
449
|
+
- ``geo-routes:CalculateRoutes`` - Allows point to point routing.
|
|
450
|
+
- ``geo-routes:CalculateRouteMatrix`` - Allows matrix routing.
|
|
451
|
+
- ``geo-routes:OptimizeWaypoints`` - Allows computing the best sequence of waypoints.
|
|
452
|
+
- ``geo-routes:SnapToRoads`` - Allows snapping GPS points to a likely route.
|
|
436
453
|
|
|
437
454
|
.. epigraph::
|
|
438
455
|
|
|
439
|
-
You must use these strings exactly. For example, to provide access to map rendering, the only valid action is ``geo:GetMap*`` as an input to the list. ``["geo:GetMap*"]`` is valid but ``["geo:
|
|
456
|
+
You must use these strings exactly. For example, to provide access to map rendering, the only valid action is ``geo:GetMap*`` as an input to the list. ``["geo:GetMap*"]`` is valid but ``["geo:GetTile"]`` is not. Similarly, you cannot use ``["geo:SearchPlaceIndexFor*"]`` - you must list each of the Place actions separately.
|
|
440
457
|
|
|
441
458
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-location-apikey-apikeyrestrictions.html#cfn-location-apikey-apikeyrestrictions-allowactions
|
|
442
459
|
'''
|
aws_cdk/aws_logs/__init__.py
CHANGED
|
@@ -423,8 +423,7 @@ Each policy may consist of a log group, S3 bucket, and/or Firehose delivery stre
|
|
|
423
423
|
Example:
|
|
424
424
|
|
|
425
425
|
```python
|
|
426
|
-
import aws_cdk.
|
|
427
|
-
import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
|
|
426
|
+
import aws_cdk.aws_kinesisfirehose as firehose
|
|
428
427
|
|
|
429
428
|
|
|
430
429
|
log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
|
|
@@ -432,9 +431,9 @@ log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
|
|
|
432
431
|
)
|
|
433
432
|
|
|
434
433
|
bucket = s3.Bucket(self, "audit-bucket")
|
|
435
|
-
s3_destination =
|
|
434
|
+
s3_destination = firehose.S3Bucket(bucket)
|
|
436
435
|
|
|
437
|
-
delivery_stream =
|
|
436
|
+
delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
|
|
438
437
|
destination=s3_destination
|
|
439
438
|
)
|
|
440
439
|
|
|
@@ -8767,8 +8766,7 @@ class DataIdentifier(
|
|
|
8767
8766
|
|
|
8768
8767
|
Example::
|
|
8769
8768
|
|
|
8770
|
-
import aws_cdk.
|
|
8771
|
-
import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
|
|
8769
|
+
import aws_cdk.aws_kinesisfirehose as firehose
|
|
8772
8770
|
|
|
8773
8771
|
|
|
8774
8772
|
log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
|
|
@@ -8776,9 +8774,9 @@ class DataIdentifier(
|
|
|
8776
8774
|
)
|
|
8777
8775
|
|
|
8778
8776
|
bucket = s3.Bucket(self, "audit-bucket")
|
|
8779
|
-
s3_destination =
|
|
8777
|
+
s3_destination = firehose.S3Bucket(bucket)
|
|
8780
8778
|
|
|
8781
|
-
delivery_stream =
|
|
8779
|
+
delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
|
|
8782
8780
|
destination=s3_destination
|
|
8783
8781
|
)
|
|
8784
8782
|
|
|
@@ -9323,8 +9321,7 @@ class DataProtectionPolicy(
|
|
|
9323
9321
|
|
|
9324
9322
|
Example::
|
|
9325
9323
|
|
|
9326
|
-
import aws_cdk.
|
|
9327
|
-
import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
|
|
9324
|
+
import aws_cdk.aws_kinesisfirehose as firehose
|
|
9328
9325
|
|
|
9329
9326
|
|
|
9330
9327
|
log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
|
|
@@ -9332,9 +9329,9 @@ class DataProtectionPolicy(
|
|
|
9332
9329
|
)
|
|
9333
9330
|
|
|
9334
9331
|
bucket = s3.Bucket(self, "audit-bucket")
|
|
9335
|
-
s3_destination =
|
|
9332
|
+
s3_destination = firehose.S3Bucket(bucket)
|
|
9336
9333
|
|
|
9337
|
-
delivery_stream =
|
|
9334
|
+
delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
|
|
9338
9335
|
destination=s3_destination
|
|
9339
9336
|
)
|
|
9340
9337
|
|
|
@@ -9368,7 +9365,7 @@ class DataProtectionPolicy(
|
|
|
9368
9365
|
) -> None:
|
|
9369
9366
|
'''
|
|
9370
9367
|
:param identifiers: List of data protection identifiers. Managed data identifiers must be in the following list: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL-managed-data-identifiers.html Custom data identifiers must have a valid regex defined: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL-custom-data-identifiers.html#custom-data-identifiers-constraints
|
|
9371
|
-
:param delivery_stream_name_audit_destination: Amazon
|
|
9368
|
+
:param delivery_stream_name_audit_destination: Amazon Data Firehose delivery stream to send audit findings to. The delivery stream must already exist. Default: - no firehose delivery stream audit destination
|
|
9372
9369
|
:param description: Description of the data protection policy. Default: - 'cdk generated data protection policy'
|
|
9373
9370
|
:param log_group_audit_destination: CloudWatch Logs log group to send audit findings to. The log group must already exist prior to creating the data protection policy. Default: - no CloudWatch Logs audit destination
|
|
9374
9371
|
:param name: Name of the data protection policy. Default: - 'data-protection-policy-cdk'
|
|
@@ -9412,7 +9409,7 @@ class DataProtectionPolicyProps:
|
|
|
9412
9409
|
'''Properties for creating a data protection policy.
|
|
9413
9410
|
|
|
9414
9411
|
:param identifiers: List of data protection identifiers. Managed data identifiers must be in the following list: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL-managed-data-identifiers.html Custom data identifiers must have a valid regex defined: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL-custom-data-identifiers.html#custom-data-identifiers-constraints
|
|
9415
|
-
:param delivery_stream_name_audit_destination: Amazon
|
|
9412
|
+
:param delivery_stream_name_audit_destination: Amazon Data Firehose delivery stream to send audit findings to. The delivery stream must already exist. Default: - no firehose delivery stream audit destination
|
|
9416
9413
|
:param description: Description of the data protection policy. Default: - 'cdk generated data protection policy'
|
|
9417
9414
|
:param log_group_audit_destination: CloudWatch Logs log group to send audit findings to. The log group must already exist prior to creating the data protection policy. Default: - no CloudWatch Logs audit destination
|
|
9418
9415
|
:param name: Name of the data protection policy. Default: - 'data-protection-policy-cdk'
|
|
@@ -9422,8 +9419,7 @@ class DataProtectionPolicyProps:
|
|
|
9422
9419
|
|
|
9423
9420
|
Example::
|
|
9424
9421
|
|
|
9425
|
-
import aws_cdk.
|
|
9426
|
-
import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
|
|
9422
|
+
import aws_cdk.aws_kinesisfirehose as firehose
|
|
9427
9423
|
|
|
9428
9424
|
|
|
9429
9425
|
log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
|
|
@@ -9431,9 +9427,9 @@ class DataProtectionPolicyProps:
|
|
|
9431
9427
|
)
|
|
9432
9428
|
|
|
9433
9429
|
bucket = s3.Bucket(self, "audit-bucket")
|
|
9434
|
-
s3_destination =
|
|
9430
|
+
s3_destination = firehose.S3Bucket(bucket)
|
|
9435
9431
|
|
|
9436
|
-
delivery_stream =
|
|
9432
|
+
delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
|
|
9437
9433
|
destination=s3_destination
|
|
9438
9434
|
)
|
|
9439
9435
|
|
|
@@ -9489,7 +9485,7 @@ class DataProtectionPolicyProps:
|
|
|
9489
9485
|
|
|
9490
9486
|
@builtins.property
|
|
9491
9487
|
def delivery_stream_name_audit_destination(self) -> typing.Optional[builtins.str]:
|
|
9492
|
-
'''Amazon
|
|
9488
|
+
'''Amazon Data Firehose delivery stream to send audit findings to.
|
|
9493
9489
|
|
|
9494
9490
|
The delivery stream must already exist.
|
|
9495
9491
|
|
|
@@ -11221,8 +11217,7 @@ class LogGroupProps:
|
|
|
11221
11217
|
|
|
11222
11218
|
Example::
|
|
11223
11219
|
|
|
11224
|
-
import aws_cdk.
|
|
11225
|
-
import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
|
|
11220
|
+
import aws_cdk.aws_kinesisfirehose as firehose
|
|
11226
11221
|
|
|
11227
11222
|
|
|
11228
11223
|
log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
|
|
@@ -11230,9 +11225,9 @@ class LogGroupProps:
|
|
|
11230
11225
|
)
|
|
11231
11226
|
|
|
11232
11227
|
bucket = s3.Bucket(self, "audit-bucket")
|
|
11233
|
-
s3_destination =
|
|
11228
|
+
s3_destination = firehose.S3Bucket(bucket)
|
|
11234
11229
|
|
|
11235
|
-
delivery_stream =
|
|
11230
|
+
delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
|
|
11236
11231
|
destination=s3_destination
|
|
11237
11232
|
)
|
|
11238
11233
|
|
|
@@ -13632,8 +13627,7 @@ class CustomDataIdentifier(
|
|
|
13632
13627
|
|
|
13633
13628
|
Example::
|
|
13634
13629
|
|
|
13635
|
-
import aws_cdk.
|
|
13636
|
-
import aws_cdk.aws_kinesisfirehose_destinations_alpha as destinations
|
|
13630
|
+
import aws_cdk.aws_kinesisfirehose as firehose
|
|
13637
13631
|
|
|
13638
13632
|
|
|
13639
13633
|
log_group_destination = logs.LogGroup(self, "LogGroupLambdaAudit",
|
|
@@ -13641,9 +13635,9 @@ class CustomDataIdentifier(
|
|
|
13641
13635
|
)
|
|
13642
13636
|
|
|
13643
13637
|
bucket = s3.Bucket(self, "audit-bucket")
|
|
13644
|
-
s3_destination =
|
|
13638
|
+
s3_destination = firehose.S3Bucket(bucket)
|
|
13645
13639
|
|
|
13646
|
-
delivery_stream =
|
|
13640
|
+
delivery_stream = firehose.DeliveryStream(self, "Delivery Stream",
|
|
13647
13641
|
destination=s3_destination
|
|
13648
13642
|
)
|
|
13649
13643
|
|
aws_cdk/aws_msk/__init__.py
CHANGED
|
@@ -272,13 +272,6 @@ class CfnCluster(
|
|
|
272
272
|
):
|
|
273
273
|
'''Creates a new MSK cluster.
|
|
274
274
|
|
|
275
|
-
The following Python 3.6 example shows how you can create a cluster that's distributed across two `Availability Zones <https://docs.aws.amazon.com/global-infrastructure/latest/regions/aws-availability-zones.html>`_ . Before you run this Python script, replace the example subnet and security-group IDs with the IDs of your subnets and security group.
|
|
276
|
-
|
|
277
|
-
When you create an MSK cluster, its brokers get evenly distributed across a number of Availability Zones that's equal to the number of subnets that you specify in the ``BrokerNodeGroupInfo`` parameter. In the following example, you can add a third subnet to get a cluster that's distributed across three Availability Zones::
|
|
278
|
-
|
|
279
|
-
import boto3 client = boto3.client('kafka') response = client.create_cluster( BrokerNodeGroupInfo={ 'BrokerAZDistribution': 'DEFAULT', 'ClientSubnets': [ 'subnet-012345678901fedcba', 'subnet-9876543210abcdef01' ], 'InstanceType': 'kafka.m5.large', 'SecurityGroups': [ 'sg-012345abcdef789789' ] }, ClusterName='SalesCluster', EncryptionInfo={ 'EncryptionInTransit': { 'ClientBroker': 'TLS_PLAINTEXT', 'InCluster': True } }, EnhancedMonitoring='PER_TOPIC_PER_BROKER', KafkaVersion='2.2.1', NumberOfBrokerNodes=2
|
|
280
|
-
) print(response)
|
|
281
|
-
|
|
282
275
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-cluster.html
|
|
283
276
|
:cloudformationResource: AWS::MSK::Cluster
|
|
284
277
|
:exampleMetadata: fixture=_generated
|
|
@@ -3582,7 +3575,7 @@ class CfnConfiguration(
|
|
|
3582
3575
|
:param name: The name of the configuration. Configuration names are strings that match the regex "^[0-9A-Za-z][0-9A-Za-z-]{0,}$".
|
|
3583
3576
|
:param server_properties: Contents of the ``server.properties`` file. When using this property, you must ensure that the contents of the file are base64 encoded. When using the console, the SDK, or the AWS CLI , the contents of ``server.properties`` can be in plaintext.
|
|
3584
3577
|
:param description: The description of the configuration.
|
|
3585
|
-
:param kafka_versions_list: The `versions of Apache Kafka <https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html>`_ with which you can use this MSK configuration.
|
|
3578
|
+
:param kafka_versions_list: The `versions of Apache Kafka <https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html>`_ with which you can use this MSK configuration. When you update the ``KafkaVersionsList`` property, AWS CloudFormation recreates a new configuration with the updated property before deleting the old configuration. Such an update requires a `resource replacement <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement>`_ . To successfully update ``KafkaVersionsList`` , you must also update the ``Name`` property in the same operation. If your configuration is attached with any clusters created using the AWS Management Console or AWS CLI , you'll need to manually delete the old configuration from the console after the update completes. For more information, see `Can’t update KafkaVersionsList in MSK configuration <https://docs.aws.amazon.com/msk/latest/developerguide/troubleshooting.html#troubleshoot-kafkaversionslist-cfn-update-failure>`_ in the *Amazon MSK Developer Guide* .
|
|
3586
3579
|
:param latest_revision: Latest revision of the MSK configuration.
|
|
3587
3580
|
'''
|
|
3588
3581
|
if __debug__:
|
|
@@ -3859,7 +3852,7 @@ class CfnConfigurationProps:
|
|
|
3859
3852
|
:param name: The name of the configuration. Configuration names are strings that match the regex "^[0-9A-Za-z][0-9A-Za-z-]{0,}$".
|
|
3860
3853
|
:param server_properties: Contents of the ``server.properties`` file. When using this property, you must ensure that the contents of the file are base64 encoded. When using the console, the SDK, or the AWS CLI , the contents of ``server.properties`` can be in plaintext.
|
|
3861
3854
|
:param description: The description of the configuration.
|
|
3862
|
-
:param kafka_versions_list: The `versions of Apache Kafka <https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html>`_ with which you can use this MSK configuration.
|
|
3855
|
+
:param kafka_versions_list: The `versions of Apache Kafka <https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html>`_ with which you can use this MSK configuration. When you update the ``KafkaVersionsList`` property, AWS CloudFormation recreates a new configuration with the updated property before deleting the old configuration. Such an update requires a `resource replacement <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement>`_ . To successfully update ``KafkaVersionsList`` , you must also update the ``Name`` property in the same operation. If your configuration is attached with any clusters created using the AWS Management Console or AWS CLI , you'll need to manually delete the old configuration from the console after the update completes. For more information, see `Can’t update KafkaVersionsList in MSK configuration <https://docs.aws.amazon.com/msk/latest/developerguide/troubleshooting.html#troubleshoot-kafkaversionslist-cfn-update-failure>`_ in the *Amazon MSK Developer Guide* .
|
|
3863
3856
|
:param latest_revision: Latest revision of the MSK configuration.
|
|
3864
3857
|
|
|
3865
3858
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-configuration.html
|
|
@@ -3938,6 +3931,12 @@ class CfnConfigurationProps:
|
|
|
3938
3931
|
def kafka_versions_list(self) -> typing.Optional[typing.List[builtins.str]]:
|
|
3939
3932
|
'''The `versions of Apache Kafka <https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html>`_ with which you can use this MSK configuration.
|
|
3940
3933
|
|
|
3934
|
+
When you update the ``KafkaVersionsList`` property, AWS CloudFormation recreates a new configuration with the updated property before deleting the old configuration. Such an update requires a `resource replacement <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement>`_ . To successfully update ``KafkaVersionsList`` , you must also update the ``Name`` property in the same operation.
|
|
3935
|
+
|
|
3936
|
+
If your configuration is attached with any clusters created using the AWS Management Console or AWS CLI , you'll need to manually delete the old configuration from the console after the update completes.
|
|
3937
|
+
|
|
3938
|
+
For more information, see `Can’t update KafkaVersionsList in MSK configuration <https://docs.aws.amazon.com/msk/latest/developerguide/troubleshooting.html#troubleshoot-kafkaversionslist-cfn-update-failure>`_ in the *Amazon MSK Developer Guide* .
|
|
3939
|
+
|
|
3941
3940
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-configuration.html#cfn-msk-configuration-kafkaversionslist
|
|
3942
3941
|
'''
|
|
3943
3942
|
result = self._values.get("kafka_versions_list")
|
|
@@ -4028,7 +4027,6 @@ class CfnReplicator(
|
|
|
4028
4027
|
service_execution_role_arn="serviceExecutionRoleArn",
|
|
4029
4028
|
|
|
4030
4029
|
# the properties below are optional
|
|
4031
|
-
current_version="currentVersion",
|
|
4032
4030
|
description="description",
|
|
4033
4031
|
tags=[CfnTag(
|
|
4034
4032
|
key="key",
|
|
@@ -4046,7 +4044,6 @@ class CfnReplicator(
|
|
|
4046
4044
|
replication_info_list: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnReplicator.ReplicationInfoProperty", typing.Dict[builtins.str, typing.Any]]]]],
|
|
4047
4045
|
replicator_name: builtins.str,
|
|
4048
4046
|
service_execution_role_arn: builtins.str,
|
|
4049
|
-
current_version: typing.Optional[builtins.str] = None,
|
|
4050
4047
|
description: typing.Optional[builtins.str] = None,
|
|
4051
4048
|
tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
|
|
4052
4049
|
) -> None:
|
|
@@ -4057,7 +4054,6 @@ class CfnReplicator(
|
|
|
4057
4054
|
:param replication_info_list: A list of replication configurations, where each configuration targets a given source cluster to target cluster replication flow.
|
|
4058
4055
|
:param replicator_name: The name of the replicator. Alpha-numeric characters with '-' are allowed.
|
|
4059
4056
|
:param service_execution_role_arn: The ARN of the IAM role used by the replicator to access resources in the customer's account (e.g source and target clusters).
|
|
4060
|
-
:param current_version: The current version number of the replicator.
|
|
4061
4057
|
:param description: A summary description of the replicator.
|
|
4062
4058
|
:param tags: List of tags to attach to created Replicator.
|
|
4063
4059
|
'''
|
|
@@ -4070,7 +4066,6 @@ class CfnReplicator(
|
|
|
4070
4066
|
replication_info_list=replication_info_list,
|
|
4071
4067
|
replicator_name=replicator_name,
|
|
4072
4068
|
service_execution_role_arn=service_execution_role_arn,
|
|
4073
|
-
current_version=current_version,
|
|
4074
4069
|
description=description,
|
|
4075
4070
|
tags=tags,
|
|
4076
4071
|
)
|
|
@@ -4107,6 +4102,15 @@ class CfnReplicator(
|
|
|
4107
4102
|
'''The CloudFormation resource type name for this resource class.'''
|
|
4108
4103
|
return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
|
|
4109
4104
|
|
|
4105
|
+
@builtins.property
|
|
4106
|
+
@jsii.member(jsii_name="attrCurrentVersion")
|
|
4107
|
+
def attr_current_version(self) -> builtins.str:
|
|
4108
|
+
'''The current version number of the replicator.
|
|
4109
|
+
|
|
4110
|
+
:cloudformationAttribute: CurrentVersion
|
|
4111
|
+
'''
|
|
4112
|
+
return typing.cast(builtins.str, jsii.get(self, "attrCurrentVersion"))
|
|
4113
|
+
|
|
4110
4114
|
@builtins.property
|
|
4111
4115
|
@jsii.member(jsii_name="attrReplicatorArn")
|
|
4112
4116
|
def attr_replicator_arn(self) -> builtins.str:
|
|
@@ -4189,19 +4193,6 @@ class CfnReplicator(
|
|
|
4189
4193
|
check_type(argname="argument value", value=value, expected_type=type_hints["value"])
|
|
4190
4194
|
jsii.set(self, "serviceExecutionRoleArn", value) # pyright: ignore[reportArgumentType]
|
|
4191
4195
|
|
|
4192
|
-
@builtins.property
|
|
4193
|
-
@jsii.member(jsii_name="currentVersion")
|
|
4194
|
-
def current_version(self) -> typing.Optional[builtins.str]:
|
|
4195
|
-
'''The current version number of the replicator.'''
|
|
4196
|
-
return typing.cast(typing.Optional[builtins.str], jsii.get(self, "currentVersion"))
|
|
4197
|
-
|
|
4198
|
-
@current_version.setter
|
|
4199
|
-
def current_version(self, value: typing.Optional[builtins.str]) -> None:
|
|
4200
|
-
if __debug__:
|
|
4201
|
-
type_hints = typing.get_type_hints(_typecheckingstub__79b07be057d5f4bf56dda86a24cdbb4ced3cc7a8e053d156dd93bbcf785aeb6f)
|
|
4202
|
-
check_type(argname="argument value", value=value, expected_type=type_hints["value"])
|
|
4203
|
-
jsii.set(self, "currentVersion", value) # pyright: ignore[reportArgumentType]
|
|
4204
|
-
|
|
4205
4196
|
@builtins.property
|
|
4206
4197
|
@jsii.member(jsii_name="description")
|
|
4207
4198
|
def description(self) -> typing.Optional[builtins.str]:
|
|
@@ -4985,7 +4976,6 @@ class CfnReplicator(
|
|
|
4985
4976
|
"replication_info_list": "replicationInfoList",
|
|
4986
4977
|
"replicator_name": "replicatorName",
|
|
4987
4978
|
"service_execution_role_arn": "serviceExecutionRoleArn",
|
|
4988
|
-
"current_version": "currentVersion",
|
|
4989
4979
|
"description": "description",
|
|
4990
4980
|
"tags": "tags",
|
|
4991
4981
|
},
|
|
@@ -4998,7 +4988,6 @@ class CfnReplicatorProps:
|
|
|
4998
4988
|
replication_info_list: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnReplicator.ReplicationInfoProperty, typing.Dict[builtins.str, typing.Any]]]]],
|
|
4999
4989
|
replicator_name: builtins.str,
|
|
5000
4990
|
service_execution_role_arn: builtins.str,
|
|
5001
|
-
current_version: typing.Optional[builtins.str] = None,
|
|
5002
4991
|
description: typing.Optional[builtins.str] = None,
|
|
5003
4992
|
tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
|
|
5004
4993
|
) -> None:
|
|
@@ -5008,7 +4997,6 @@ class CfnReplicatorProps:
|
|
|
5008
4997
|
:param replication_info_list: A list of replication configurations, where each configuration targets a given source cluster to target cluster replication flow.
|
|
5009
4998
|
:param replicator_name: The name of the replicator. Alpha-numeric characters with '-' are allowed.
|
|
5010
4999
|
:param service_execution_role_arn: The ARN of the IAM role used by the replicator to access resources in the customer's account (e.g source and target clusters).
|
|
5011
|
-
:param current_version: The current version number of the replicator.
|
|
5012
5000
|
:param description: A summary description of the replicator.
|
|
5013
5001
|
:param tags: List of tags to attach to created Replicator.
|
|
5014
5002
|
|
|
@@ -5065,7 +5053,6 @@ class CfnReplicatorProps:
|
|
|
5065
5053
|
service_execution_role_arn="serviceExecutionRoleArn",
|
|
5066
5054
|
|
|
5067
5055
|
# the properties below are optional
|
|
5068
|
-
current_version="currentVersion",
|
|
5069
5056
|
description="description",
|
|
5070
5057
|
tags=[CfnTag(
|
|
5071
5058
|
key="key",
|
|
@@ -5079,7 +5066,6 @@ class CfnReplicatorProps:
|
|
|
5079
5066
|
check_type(argname="argument replication_info_list", value=replication_info_list, expected_type=type_hints["replication_info_list"])
|
|
5080
5067
|
check_type(argname="argument replicator_name", value=replicator_name, expected_type=type_hints["replicator_name"])
|
|
5081
5068
|
check_type(argname="argument service_execution_role_arn", value=service_execution_role_arn, expected_type=type_hints["service_execution_role_arn"])
|
|
5082
|
-
check_type(argname="argument current_version", value=current_version, expected_type=type_hints["current_version"])
|
|
5083
5069
|
check_type(argname="argument description", value=description, expected_type=type_hints["description"])
|
|
5084
5070
|
check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
|
|
5085
5071
|
self._values: typing.Dict[builtins.str, typing.Any] = {
|
|
@@ -5088,8 +5074,6 @@ class CfnReplicatorProps:
|
|
|
5088
5074
|
"replicator_name": replicator_name,
|
|
5089
5075
|
"service_execution_role_arn": service_execution_role_arn,
|
|
5090
5076
|
}
|
|
5091
|
-
if current_version is not None:
|
|
5092
|
-
self._values["current_version"] = current_version
|
|
5093
5077
|
if description is not None:
|
|
5094
5078
|
self._values["description"] = description
|
|
5095
5079
|
if tags is not None:
|
|
@@ -5141,15 +5125,6 @@ class CfnReplicatorProps:
|
|
|
5141
5125
|
assert result is not None, "Required property 'service_execution_role_arn' is missing"
|
|
5142
5126
|
return typing.cast(builtins.str, result)
|
|
5143
5127
|
|
|
5144
|
-
@builtins.property
|
|
5145
|
-
def current_version(self) -> typing.Optional[builtins.str]:
|
|
5146
|
-
'''The current version number of the replicator.
|
|
5147
|
-
|
|
5148
|
-
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-replicator.html#cfn-msk-replicator-currentversion
|
|
5149
|
-
'''
|
|
5150
|
-
result = self._values.get("current_version")
|
|
5151
|
-
return typing.cast(typing.Optional[builtins.str], result)
|
|
5152
|
-
|
|
5153
5128
|
@builtins.property
|
|
5154
5129
|
def description(self) -> typing.Optional[builtins.str]:
|
|
5155
5130
|
'''A summary description of the replicator.
|
|
@@ -6637,7 +6612,6 @@ def _typecheckingstub__dfeb157957f65ee344afab32ca8fffe9eb07ec631c59935f85e890a85
|
|
|
6637
6612
|
replication_info_list: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnReplicator.ReplicationInfoProperty, typing.Dict[builtins.str, typing.Any]]]]],
|
|
6638
6613
|
replicator_name: builtins.str,
|
|
6639
6614
|
service_execution_role_arn: builtins.str,
|
|
6640
|
-
current_version: typing.Optional[builtins.str] = None,
|
|
6641
6615
|
description: typing.Optional[builtins.str] = None,
|
|
6642
6616
|
tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
|
|
6643
6617
|
) -> None:
|
|
@@ -6680,12 +6654,6 @@ def _typecheckingstub__407d0e51992bcbb91149b5316e9f5b3429ee3acebc8959194b791b791
|
|
|
6680
6654
|
"""Type checking stubs"""
|
|
6681
6655
|
pass
|
|
6682
6656
|
|
|
6683
|
-
def _typecheckingstub__79b07be057d5f4bf56dda86a24cdbb4ced3cc7a8e053d156dd93bbcf785aeb6f(
|
|
6684
|
-
value: typing.Optional[builtins.str],
|
|
6685
|
-
) -> None:
|
|
6686
|
-
"""Type checking stubs"""
|
|
6687
|
-
pass
|
|
6688
|
-
|
|
6689
6657
|
def _typecheckingstub__0d4359699d0ff82e6e6d493eefa33cd643cafd7ea12f638de022a962a125c66d(
|
|
6690
6658
|
value: typing.Optional[builtins.str],
|
|
6691
6659
|
) -> None:
|
|
@@ -6775,7 +6743,6 @@ def _typecheckingstub__8386726baf4842aa1a4af40915bf45a4cc4edffd70ea82fa6a181cca6
|
|
|
6775
6743
|
replication_info_list: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnReplicator.ReplicationInfoProperty, typing.Dict[builtins.str, typing.Any]]]]],
|
|
6776
6744
|
replicator_name: builtins.str,
|
|
6777
6745
|
service_execution_role_arn: builtins.str,
|
|
6778
|
-
current_version: typing.Optional[builtins.str] = None,
|
|
6779
6746
|
description: typing.Optional[builtins.str] = None,
|
|
6780
6747
|
tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
|
|
6781
6748
|
) -> None:
|
|
@@ -3451,10 +3451,10 @@ class CfnRuleGroup(
|
|
|
3451
3451
|
|
|
3452
3452
|
Each match attributes set can include one or more items such as IP address, CIDR range, port number, protocol, and TCP flags.
|
|
3453
3453
|
|
|
3454
|
-
:param destination_ports: The destination
|
|
3454
|
+
:param destination_ports: The destination port to inspect for. You can specify an individual port, for example ``1994`` and you can specify a port range, for example ``1990:1994`` . To match with any port, specify ``ANY`` . This setting is only used for protocols 6 (TCP) and 17 (UDP).
|
|
3455
3455
|
:param destinations: The destination IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any destination address.
|
|
3456
|
-
:param protocols: The protocols to inspect for, specified using
|
|
3457
|
-
:param source_ports: The source
|
|
3456
|
+
:param protocols: The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol. If not specified, this matches with any protocol.
|
|
3457
|
+
:param source_ports: The source port to inspect for. You can specify an individual port, for example ``1994`` and you can specify a port range, for example ``1990:1994`` . To match with any port, specify ``ANY`` . If not specified, this matches with any source port. This setting is only used for protocols 6 (TCP) and 17 (UDP).
|
|
3458
3458
|
:param sources: The source IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any source address.
|
|
3459
3459
|
:param tcp_flags: The TCP flags and masks to inspect for. If not specified, this matches with any settings. This setting is only used for protocol 6 (TCP).
|
|
3460
3460
|
|
|
@@ -3517,11 +3517,11 @@ class CfnRuleGroup(
|
|
|
3517
3517
|
def destination_ports(
|
|
3518
3518
|
self,
|
|
3519
3519
|
) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.PortRangeProperty"]]]]:
|
|
3520
|
-
'''The destination
|
|
3520
|
+
'''The destination port to inspect for.
|
|
3521
3521
|
|
|
3522
|
-
|
|
3522
|
+
You can specify an individual port, for example ``1994`` and you can specify a port range, for example ``1990:1994`` . To match with any port, specify ``ANY`` .
|
|
3523
3523
|
|
|
3524
|
-
|
|
3524
|
+
This setting is only used for protocols 6 (TCP) and 17 (UDP).
|
|
3525
3525
|
|
|
3526
3526
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-matchattributes.html#cfn-networkfirewall-rulegroup-matchattributes-destinationports
|
|
3527
3527
|
'''
|
|
@@ -3545,7 +3545,7 @@ class CfnRuleGroup(
|
|
|
3545
3545
|
def protocols(
|
|
3546
3546
|
self,
|
|
3547
3547
|
) -> typing.Optional[typing.Union[typing.List[jsii.Number], _IResolvable_da3f097b]]:
|
|
3548
|
-
'''The protocols to inspect for, specified using
|
|
3548
|
+
'''The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol.
|
|
3549
3549
|
|
|
3550
3550
|
If not specified, this matches with any protocol.
|
|
3551
3551
|
|
|
@@ -3558,11 +3558,13 @@ class CfnRuleGroup(
|
|
|
3558
3558
|
def source_ports(
|
|
3559
3559
|
self,
|
|
3560
3560
|
) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRuleGroup.PortRangeProperty"]]]]:
|
|
3561
|
-
'''The source
|
|
3561
|
+
'''The source port to inspect for.
|
|
3562
|
+
|
|
3563
|
+
You can specify an individual port, for example ``1994`` and you can specify a port range, for example ``1990:1994`` . To match with any port, specify ``ANY`` .
|
|
3562
3564
|
|
|
3563
|
-
If not specified, this matches with any source port.
|
|
3565
|
+
If not specified, this matches with any source port.
|
|
3564
3566
|
|
|
3565
|
-
|
|
3567
|
+
This setting is only used for protocols 6 (TCP) and 17 (UDP).
|
|
3566
3568
|
|
|
3567
3569
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-matchattributes.html#cfn-networkfirewall-rulegroup-matchattributes-sourceports
|
|
3568
3570
|
'''
|
|
@@ -6022,7 +6024,7 @@ class CfnTLSInspectionConfiguration(
|
|
|
6022
6024
|
|
|
6023
6025
|
:param destination_ports: The destination ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any destination port. You can specify individual ports, for example ``1994`` , and you can specify port ranges, such as ``1990:1994`` .
|
|
6024
6026
|
:param destinations: The destination IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this matches with any destination address.
|
|
6025
|
-
:param protocols: The protocols to
|
|
6027
|
+
:param protocols: The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol. If not specified, this matches with any protocol. Network Firewall currently supports only TCP.
|
|
6026
6028
|
:param source_ports: The source ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any source port. You can specify individual ports, for example ``1994`` , and you can specify port ranges, such as ``1990:1994`` .
|
|
6027
6029
|
:param sources: The source IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this matches with any source address.
|
|
6028
6030
|
|
|
@@ -6105,7 +6107,9 @@ class CfnTLSInspectionConfiguration(
|
|
|
6105
6107
|
def protocols(
|
|
6106
6108
|
self,
|
|
6107
6109
|
) -> typing.Optional[typing.Union[typing.List[jsii.Number], _IResolvable_da3f097b]]:
|
|
6108
|
-
'''The protocols to
|
|
6110
|
+
'''The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol.
|
|
6111
|
+
|
|
6112
|
+
If not specified, this matches with any protocol.
|
|
6109
6113
|
|
|
6110
6114
|
Network Firewall currently supports only TCP.
|
|
6111
6115
|
|
aws_cdk/aws_oam/__init__.py
CHANGED
|
@@ -128,7 +128,7 @@ class CfnLink(
|
|
|
128
128
|
'''
|
|
129
129
|
:param scope: Scope in which this resource is defined.
|
|
130
130
|
:param id: Construct identifier for this resource (unique in its scope).
|
|
131
|
-
:param resource_types: An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor`` .
|
|
131
|
+
:param resource_types: An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor | AWS::ApplicationSignals::Service | AWS::ApplicationSignals::ServiceLevelObjective`` .
|
|
132
132
|
:param sink_identifier: The ARN of the sink in the monitoring account that you want to link to. You can use `ListSinks <https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListSinks.html>`_ to find the ARNs of sinks.
|
|
133
133
|
:param label_template: Specify a friendly human-readable name to use to identify this source account when you are viewing data from it in the monitoring account. You can include the following variables in your template: - ``$AccountName`` is the name of the account - ``$AccountEmail`` is a globally-unique email address, which includes the email domain, such as ``mariagarcia@example.com`` - ``$AccountEmailNoDomain`` is an email address without the domain name, such as ``mariagarcia``
|
|
134
134
|
:param link_configuration: Use this structure to optionally create filters that specify that only some metric namespaces or log groups are to be shared from the source account to the monitoring account.
|
|
@@ -301,7 +301,7 @@ class CfnLink(
|
|
|
301
301
|
) -> None:
|
|
302
302
|
'''Use this structure to optionally create filters that specify that only some metric namespaces or log groups are to be shared from the source account to the monitoring account.
|
|
303
303
|
|
|
304
|
-
:param log_group_configuration: Use this structure to filter which log groups are to
|
|
304
|
+
:param log_group_configuration: Use this structure to filter which log groups are to send log events from the source account to the monitoring account.
|
|
305
305
|
:param metric_configuration: Use this structure to filter which metric namespaces are to be shared from the source account to the monitoring account.
|
|
306
306
|
|
|
307
307
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkconfiguration.html
|
|
@@ -336,7 +336,7 @@ class CfnLink(
|
|
|
336
336
|
def log_group_configuration(
|
|
337
337
|
self,
|
|
338
338
|
) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLink.LinkFilterProperty"]]:
|
|
339
|
-
'''Use this structure to filter which log groups are to
|
|
339
|
+
'''Use this structure to filter which log groups are to send log events from the source account to the monitoring account.
|
|
340
340
|
|
|
341
341
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkconfiguration.html#cfn-oam-link-linkconfiguration-loggroupconfiguration
|
|
342
342
|
'''
|
|
@@ -372,11 +372,8 @@ class CfnLink(
|
|
|
372
372
|
)
|
|
373
373
|
class LinkFilterProperty:
|
|
374
374
|
def __init__(self, *, filter: builtins.str) -> None:
|
|
375
|
-
'''
|
|
376
|
-
|
|
377
|
-
When used in ``LogGroupConfiguration`` this field specifies which log groups are to share their log events with the monitoring account. Use the term ``LogGroupName`` and one or more of the following operands.
|
|
378
|
-
|
|
379
|
-
:param filter: When used in ``MetricConfiguration`` this field specifies which metric namespaces are to be shared with the monitoring account. When used in ``LogGroupConfiguration`` this field specifies which log groups are to share their log events with the monitoring account. Use the term ``LogGroupName`` and one or more of the following operands. Use single quotation marks (') around log group names and metric namespaces. The matching of log group names and metric namespaces is case sensitive. Each filter has a limit of five conditional operands. Conditional operands are ``AND`` and ``OR`` . - ``=`` and ``!=`` - ``AND`` - ``OR`` - ``LIKE`` and ``NOT LIKE`` . These can be used only as prefix searches. Include a ``%`` at the end of the string that you want to search for and include. - ``IN`` and ``NOT IN`` , using parentheses ``( )`` Examples: - ``Namespace NOT LIKE 'AWS/%'`` includes only namespaces that don't start with ``AWS/`` , such as custom namespaces. - ``Namespace IN ('AWS/EC2', 'AWS/ELB', 'AWS/S3')`` includes only the metrics in the EC2, Elastic Load Balancing , and Amazon S3 namespaces. - ``Namespace = 'AWS/EC2' OR Namespace NOT LIKE 'AWS/%'`` includes only the EC2 namespace and your custom namespaces. - ``LogGroupName IN ('This-Log-Group', 'Other-Log-Group')`` includes only the log groups with names ``This-Log-Group`` and ``Other-Log-Group`` . - ``LogGroupName NOT IN ('Private-Log-Group', 'Private-Log-Group-2')`` includes all log groups except the log groups with names ``Private-Log-Group`` and ``Private-Log-Group-2`` . - ``LogGroupName LIKE 'aws/lambda/%' OR LogGroupName LIKE 'AWSLogs%'`` includes all log groups that have names that start with ``aws/lambda/`` or ``AWSLogs`` . .. epigraph:: If you are updating a link that uses filters, you can specify ``*`` as the only value for the ``filter`` parameter to delete the filter and share all log groups with the monitoring account.
|
|
375
|
+
'''
|
|
376
|
+
:param filter:
|
|
380
377
|
|
|
381
378
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkfilter.html
|
|
382
379
|
:exampleMetadata: fixture=_generated
|
|
@@ -400,33 +397,7 @@ class CfnLink(
|
|
|
400
397
|
|
|
401
398
|
@builtins.property
|
|
402
399
|
def filter(self) -> builtins.str:
|
|
403
|
-
'''
|
|
404
|
-
|
|
405
|
-
When used in ``LogGroupConfiguration`` this field specifies which log groups are to share their log events with the monitoring account. Use the term ``LogGroupName`` and one or more of the following operands.
|
|
406
|
-
|
|
407
|
-
Use single quotation marks (') around log group names and metric namespaces.
|
|
408
|
-
|
|
409
|
-
The matching of log group names and metric namespaces is case sensitive. Each filter has a limit of five conditional operands. Conditional operands are ``AND`` and ``OR`` .
|
|
410
|
-
|
|
411
|
-
- ``=`` and ``!=``
|
|
412
|
-
- ``AND``
|
|
413
|
-
- ``OR``
|
|
414
|
-
- ``LIKE`` and ``NOT LIKE`` . These can be used only as prefix searches. Include a ``%`` at the end of the string that you want to search for and include.
|
|
415
|
-
- ``IN`` and ``NOT IN`` , using parentheses ``( )``
|
|
416
|
-
|
|
417
|
-
Examples:
|
|
418
|
-
|
|
419
|
-
- ``Namespace NOT LIKE 'AWS/%'`` includes only namespaces that don't start with ``AWS/`` , such as custom namespaces.
|
|
420
|
-
- ``Namespace IN ('AWS/EC2', 'AWS/ELB', 'AWS/S3')`` includes only the metrics in the EC2, Elastic Load Balancing , and Amazon S3 namespaces.
|
|
421
|
-
- ``Namespace = 'AWS/EC2' OR Namespace NOT LIKE 'AWS/%'`` includes only the EC2 namespace and your custom namespaces.
|
|
422
|
-
- ``LogGroupName IN ('This-Log-Group', 'Other-Log-Group')`` includes only the log groups with names ``This-Log-Group`` and ``Other-Log-Group`` .
|
|
423
|
-
- ``LogGroupName NOT IN ('Private-Log-Group', 'Private-Log-Group-2')`` includes all log groups except the log groups with names ``Private-Log-Group`` and ``Private-Log-Group-2`` .
|
|
424
|
-
- ``LogGroupName LIKE 'aws/lambda/%' OR LogGroupName LIKE 'AWSLogs%'`` includes all log groups that have names that start with ``aws/lambda/`` or ``AWSLogs`` .
|
|
425
|
-
|
|
426
|
-
.. epigraph::
|
|
427
|
-
|
|
428
|
-
If you are updating a link that uses filters, you can specify ``*`` as the only value for the ``filter`` parameter to delete the filter and share all log groups with the monitoring account.
|
|
429
|
-
|
|
400
|
+
'''
|
|
430
401
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkfilter.html#cfn-oam-link-linkfilter-filter
|
|
431
402
|
'''
|
|
432
403
|
result = self._values.get("filter")
|
|
@@ -468,7 +439,7 @@ class CfnLinkProps:
|
|
|
468
439
|
) -> None:
|
|
469
440
|
'''Properties for defining a ``CfnLink``.
|
|
470
441
|
|
|
471
|
-
:param resource_types: An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor`` .
|
|
442
|
+
:param resource_types: An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor | AWS::ApplicationSignals::Service | AWS::ApplicationSignals::ServiceLevelObjective`` .
|
|
472
443
|
:param sink_identifier: The ARN of the sink in the monitoring account that you want to link to. You can use `ListSinks <https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListSinks.html>`_ to find the ARNs of sinks.
|
|
473
444
|
:param label_template: Specify a friendly human-readable name to use to identify this source account when you are viewing data from it in the monitoring account. You can include the following variables in your template: - ``$AccountName`` is the name of the account - ``$AccountEmail`` is a globally-unique email address, which includes the email domain, such as ``mariagarcia@example.com`` - ``$AccountEmailNoDomain`` is an email address without the domain name, such as ``mariagarcia``
|
|
474
445
|
:param link_configuration: Use this structure to optionally create filters that specify that only some metric namespaces or log groups are to be shared from the source account to the monitoring account.
|
|
@@ -524,7 +495,7 @@ class CfnLinkProps:
|
|
|
524
495
|
def resource_types(self) -> typing.List[builtins.str]:
|
|
525
496
|
'''An array of strings that define which types of data that the source account shares with the monitoring account.
|
|
526
497
|
|
|
527
|
-
Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor`` .
|
|
498
|
+
Valid values are ``AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor | AWS::ApplicationSignals::Service | AWS::ApplicationSignals::ServiceLevelObjective`` .
|
|
528
499
|
|
|
529
500
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-oam-link.html#cfn-oam-link-resourcetypes
|
|
530
501
|
'''
|