aws-cdk-lib 2.184.1__py3-none-any.whl → 2.186.0__py3-none-any.whl

aws_cdk/aws_rum/__init__.py

@@ -92,7 +92,6 @@ class CfnAppMonitor(
         from aws_cdk import aws_rum as rum
         
         cfn_app_monitor = rum.CfnAppMonitor(self, "MyCfnAppMonitor",
-            domain="domain",
             name="name",
         
             # the properties below are optional
@@ -130,6 +129,22 @@ class CfnAppMonitor(
                 status="status"
             ),
             cw_log_enabled=False,
+            deobfuscation_configuration=rum.CfnAppMonitor.DeobfuscationConfigurationProperty(
+                java_script_source_maps=rum.CfnAppMonitor.JavaScriptSourceMapsProperty(
+                    status="status",
+        
+                    # the properties below are optional
+                    s3_uri="s3Uri"
+                )
+            ),
+            domain="domain",
+            domain_list=["domainList"],
+            resource_policy=rum.CfnAppMonitor.ResourcePolicyProperty(
+                policy_document="policyDocument",
+        
+                # the properties below are optional
+                policy_revision_id="policyRevisionId"
+            ),
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -142,21 +157,27 @@ class CfnAppMonitor(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        domain: builtins.str,
         name: builtins.str,
         app_monitor_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAppMonitor.AppMonitorConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         custom_events: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAppMonitor.CustomEventsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         cw_log_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        deobfuscation_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAppMonitor.DeobfuscationConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        domain: typing.Optional[builtins.str] = None,
+        domain_list: typing.Optional[typing.Sequence[builtins.str]] = None,
+        resource_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAppMonitor.ResourcePolicyProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param domain: The top-level internet domain name for which your application has administrative authority. This parameter is required.
         :param name: A name for the app monitor. This parameter is required.
         :param app_monitor_configuration: A structure that contains much of the configuration data for the app monitor. If you are using Amazon Cognito for authorization, you must include this structure in your request, and it must include the ID of the Amazon Cognito identity pool to use for authorization. If you don't include ``AppMonitorConfiguration`` , you must set up your own authorization method. For more information, see `Authorize your application to send data to AWS <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-get-started-authorization.html>`_ . If you omit this argument, the sample rate used for CloudWatch RUM is set to 10% of the user sessions.
         :param custom_events: Specifies whether this app monitor allows the web client to define and send custom events. If you omit this parameter, custom events are ``DISABLED`` .
         :param cw_log_enabled: Data collected by CloudWatch RUM is kept by RUM for 30 days and then deleted. This parameter specifies whether CloudWatch RUM sends a copy of this telemetry data to Amazon CloudWatch Logs in your account. This enables you to keep the telemetry data for more than 30 days, but it does incur Amazon CloudWatch Logs charges. If you omit this parameter, the default is ``false`` .
+        :param deobfuscation_configuration: A structure that contains the configuration for how an app monitor can deobfuscate stack traces.
+        :param domain: The top-level internet domain name for which your application has administrative authority. This parameter is required.
+        :param domain_list: The top-level internet domain names for which your application has administrative authority. The CreateAppMonitor requires either the domain or the domain list.
+        :param resource_policy: Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it. Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see `Using resource-based policies with CloudWatch RUM <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html>`_ .
         :param tags: Assigns one or more tags (key-value pairs) to the app monitor. Tags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values. Tags don't have any semantic meaning to AWS and are interpreted strictly as strings of characters. You can associate as many as 50 tags with an app monitor. For more information, see `Tagging AWS resources <https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html>`_ .
         '''
         if __debug__:
@@ -164,11 +185,14 @@ class CfnAppMonitor(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnAppMonitorProps(
-            domain=domain,
             name=name,
             app_monitor_configuration=app_monitor_configuration,
             custom_events=custom_events,
             cw_log_enabled=cw_log_enabled,
+            deobfuscation_configuration=deobfuscation_configuration,
+            domain=domain,
+            domain_list=domain_list,
+            resource_policy=resource_policy,
             tags=tags,
         )
 
@@ -224,19 +248,6 @@ class CfnAppMonitor(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
-    @builtins.property
-    @jsii.member(jsii_name="domain")
-    def domain(self) -> builtins.str:
-        '''The top-level internet domain name for which your application has administrative authority.'''
-        return typing.cast(builtins.str, jsii.get(self, "domain"))
-
-    @domain.setter
-    def domain(self, value: builtins.str) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__0456aa4886c478c5fc3157398096bfee936719f2df864f6df5d0d99dfb18c0a6)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "domain", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -304,6 +315,68 @@ class CfnAppMonitor(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "cwLogEnabled", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="deobfuscationConfiguration")
+    def deobfuscation_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAppMonitor.DeobfuscationConfigurationProperty"]]:
+        '''A structure that contains the configuration for how an app monitor can deobfuscate stack traces.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAppMonitor.DeobfuscationConfigurationProperty"]], jsii.get(self, "deobfuscationConfiguration"))
+
+    @deobfuscation_configuration.setter
+    def deobfuscation_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAppMonitor.DeobfuscationConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9f2d704d10058b4d7b134a686b042efc84971acf09b892129589706da314ce17)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "deobfuscationConfiguration", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="domain")
+    def domain(self) -> typing.Optional[builtins.str]:
+        '''The top-level internet domain name for which your application has administrative authority.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "domain"))
+
+    @domain.setter
+    def domain(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0456aa4886c478c5fc3157398096bfee936719f2df864f6df5d0d99dfb18c0a6)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "domain", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="domainList")
+    def domain_list(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''The top-level internet domain names for which your application has administrative authority.'''
+        return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "domainList"))
+
+    @domain_list.setter
+    def domain_list(self, value: typing.Optional[typing.List[builtins.str]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0f86b0a9a53fb7afe4df111651fb954ae88b1fcdc7037dc764fa0b071918819c)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "domainList", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="resourcePolicy")
+    def resource_policy(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAppMonitor.ResourcePolicyProperty"]]:
+        '''Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAppMonitor.ResourcePolicyProperty"]], jsii.get(self, "resourcePolicy"))
+
+    @resource_policy.setter
+    def resource_policy(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAppMonitor.ResourcePolicyProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__02ad50a0bedc842a57f77840ff242508a77c0b4d3a7db3dabb035464285b86fa)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "resourcePolicy", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -613,6 +686,145 @@ class CfnAppMonitor(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_rum.CfnAppMonitor.DeobfuscationConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"java_script_source_maps": "javaScriptSourceMaps"},
+    )
+    class DeobfuscationConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            java_script_source_maps: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAppMonitor.JavaScriptSourceMapsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''A structure that contains the configuration for how an app monitor can deobfuscate stack traces.
+
+            :param java_script_source_maps: A structure that contains the configuration for how an app monitor can unminify JavaScript error stack traces using source maps.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rum-appmonitor-deobfuscationconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_rum as rum
+                
+                deobfuscation_configuration_property = rum.CfnAppMonitor.DeobfuscationConfigurationProperty(
+                    java_script_source_maps=rum.CfnAppMonitor.JavaScriptSourceMapsProperty(
+                        status="status",
+                
+                        # the properties below are optional
+                        s3_uri="s3Uri"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__fdf3e214c72bb6242e27105dcba552227c63b454a171ca355bccf1321a0906ad)
+                check_type(argname="argument java_script_source_maps", value=java_script_source_maps, expected_type=type_hints["java_script_source_maps"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if java_script_source_maps is not None:
+                self._values["java_script_source_maps"] = java_script_source_maps
+
+        @builtins.property
+        def java_script_source_maps(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAppMonitor.JavaScriptSourceMapsProperty"]]:
+            '''A structure that contains the configuration for how an app monitor can unminify JavaScript error stack traces using source maps.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rum-appmonitor-deobfuscationconfiguration.html#cfn-rum-appmonitor-deobfuscationconfiguration-javascriptsourcemaps
+            '''
+            result = self._values.get("java_script_source_maps")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAppMonitor.JavaScriptSourceMapsProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "DeobfuscationConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_rum.CfnAppMonitor.JavaScriptSourceMapsProperty",
+        jsii_struct_bases=[],
+        name_mapping={"status": "status", "s3_uri": "s3Uri"},
+    )
+    class JavaScriptSourceMapsProperty:
+        def __init__(
+            self,
+            *,
+            status: builtins.str,
+            s3_uri: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''A structure that contains the configuration for how an app monitor can unminify JavaScript error stack traces using source maps.
+
+            :param status: Specifies whether JavaScript error stack traces should be unminified for this app monitor. The default is for JavaScript error stack trace unminification to be DISABLED
+            :param s3_uri: The S3Uri of the bucket or folder that stores the source map files. It is required if status is ENABLED.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rum-appmonitor-javascriptsourcemaps.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_rum as rum
+                
+                java_script_source_maps_property = rum.CfnAppMonitor.JavaScriptSourceMapsProperty(
+                    status="status",
+                
+                    # the properties below are optional
+                    s3_uri="s3Uri"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__78c04a50ef32713cea26d41602085c025ced86700aa160ec7d04d54d4b8e133d)
+                check_type(argname="argument status", value=status, expected_type=type_hints["status"])
+                check_type(argname="argument s3_uri", value=s3_uri, expected_type=type_hints["s3_uri"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "status": status,
+            }
+            if s3_uri is not None:
+                self._values["s3_uri"] = s3_uri
+
+        @builtins.property
+        def status(self) -> builtins.str:
+            '''Specifies whether JavaScript error stack traces should be unminified for this app monitor.
+
+            The default is for JavaScript error stack trace unminification to be DISABLED
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rum-appmonitor-javascriptsourcemaps.html#cfn-rum-appmonitor-javascriptsourcemaps-status
+            '''
+            result = self._values.get("status")
+            assert result is not None, "Required property 'status' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def s3_uri(self) -> typing.Optional[builtins.str]:
+            '''The S3Uri of the bucket or folder that stores the source map files.
+
+            It is required if status is ENABLED.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rum-appmonitor-javascriptsourcemaps.html#cfn-rum-appmonitor-javascriptsourcemaps-s3uri
+            '''
+            result = self._values.get("s3_uri")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "JavaScriptSourceMapsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_rum.CfnAppMonitor.MetricDefinitionProperty",
         jsii_struct_bases=[],
@@ -919,16 +1131,103 @@ class CfnAppMonitor(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_rum.CfnAppMonitor.ResourcePolicyProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "policy_document": "policyDocument",
+            "policy_revision_id": "policyRevisionId",
+        },
+    )
+    class ResourcePolicyProperty:
+        def __init__(
+            self,
+            *,
+            policy_document: builtins.str,
+            policy_revision_id: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it.
+
+            Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see `Using resource-based policies with CloudWatch RUM <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html>`_ .
+
+            :param policy_document: The JSON to use as the resource policy. The document can be up to 4 KB in size. For more information about the contents and syntax for this policy, see `Using resource-based policies with CloudWatch RUM <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html>`_ .
+            :param policy_revision_id: A string value that you can use to conditionally update your policy. You can provide the revision ID of your existing policy to make mutating requests against that policy. When you assign a policy revision ID, then later requests about that policy will be rejected with an ``InvalidPolicyRevisionIdException`` error if they don't provide the correct current revision ID.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rum-appmonitor-resourcepolicy.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_rum as rum
+                
+                resource_policy_property = rum.CfnAppMonitor.ResourcePolicyProperty(
+                    policy_document="policyDocument",
+                
+                    # the properties below are optional
+                    policy_revision_id="policyRevisionId"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__50574a83877817c5c30ff641cfa13fc211766060d3c8591b640545f5594000af)
+                check_type(argname="argument policy_document", value=policy_document, expected_type=type_hints["policy_document"])
+                check_type(argname="argument policy_revision_id", value=policy_revision_id, expected_type=type_hints["policy_revision_id"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "policy_document": policy_document,
+            }
+            if policy_revision_id is not None:
+                self._values["policy_revision_id"] = policy_revision_id
+
+        @builtins.property
+        def policy_document(self) -> builtins.str:
+            '''The JSON to use as the resource policy.
+
+            The document can be up to 4 KB in size. For more information about the contents and syntax for this policy, see `Using resource-based policies with CloudWatch RUM <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html>`_ .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rum-appmonitor-resourcepolicy.html#cfn-rum-appmonitor-resourcepolicy-policydocument
+            '''
+            result = self._values.get("policy_document")
+            assert result is not None, "Required property 'policy_document' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def policy_revision_id(self) -> typing.Optional[builtins.str]:
+            '''A string value that you can use to conditionally update your policy.
+
+            You can provide the revision ID of your existing policy to make mutating requests against that policy.
+
+            When you assign a policy revision ID, then later requests about that policy will be rejected with an ``InvalidPolicyRevisionIdException`` error if they don't provide the correct current revision ID.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rum-appmonitor-resourcepolicy.html#cfn-rum-appmonitor-resourcepolicy-policyrevisionid
+            '''
+            result = self._values.get("policy_revision_id")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "ResourcePolicyProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_rum.CfnAppMonitorProps",
     jsii_struct_bases=[],
     name_mapping={
-        "domain": "domain",
         "name": "name",
         "app_monitor_configuration": "appMonitorConfiguration",
         "custom_events": "customEvents",
         "cw_log_enabled": "cwLogEnabled",
+        "deobfuscation_configuration": "deobfuscationConfiguration",
+        "domain": "domain",
+        "domain_list": "domainList",
+        "resource_policy": "resourcePolicy",
         "tags": "tags",
     },
 )
@@ -936,20 +1235,26 @@ class CfnAppMonitorProps:
     def __init__(
         self,
         *,
-        domain: builtins.str,
         name: builtins.str,
         app_monitor_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.AppMonitorConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         custom_events: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.CustomEventsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         cw_log_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        deobfuscation_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.DeobfuscationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        domain: typing.Optional[builtins.str] = None,
+        domain_list: typing.Optional[typing.Sequence[builtins.str]] = None,
+        resource_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.ResourcePolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnAppMonitor``.
 
-        :param domain: The top-level internet domain name for which your application has administrative authority. This parameter is required.
         :param name: A name for the app monitor. This parameter is required.
         :param app_monitor_configuration: A structure that contains much of the configuration data for the app monitor. If you are using Amazon Cognito for authorization, you must include this structure in your request, and it must include the ID of the Amazon Cognito identity pool to use for authorization. If you don't include ``AppMonitorConfiguration`` , you must set up your own authorization method. For more information, see `Authorize your application to send data to AWS <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-get-started-authorization.html>`_ . If you omit this argument, the sample rate used for CloudWatch RUM is set to 10% of the user sessions.
         :param custom_events: Specifies whether this app monitor allows the web client to define and send custom events. If you omit this parameter, custom events are ``DISABLED`` .
         :param cw_log_enabled: Data collected by CloudWatch RUM is kept by RUM for 30 days and then deleted. This parameter specifies whether CloudWatch RUM sends a copy of this telemetry data to Amazon CloudWatch Logs in your account. This enables you to keep the telemetry data for more than 30 days, but it does incur Amazon CloudWatch Logs charges. If you omit this parameter, the default is ``false`` .
+        :param deobfuscation_configuration: A structure that contains the configuration for how an app monitor can deobfuscate stack traces.
+        :param domain: The top-level internet domain name for which your application has administrative authority. This parameter is required.
+        :param domain_list: The top-level internet domain names for which your application has administrative authority. The CreateAppMonitor requires either the domain or the domain list.
+        :param resource_policy: Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it. Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see `Using resource-based policies with CloudWatch RUM <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html>`_ .
         :param tags: Assigns one or more tags (key-value pairs) to the app monitor. Tags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values. Tags don't have any semantic meaning to AWS and are interpreted strictly as strings of characters. You can associate as many as 50 tags with an app monitor. For more information, see `Tagging AWS resources <https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html
@@ -962,7 +1267,6 @@ class CfnAppMonitorProps:
             from aws_cdk import aws_rum as rum
             
             cfn_app_monitor_props = rum.CfnAppMonitorProps(
-                domain="domain",
                 name="name",
             
                 # the properties below are optional
@@ -1000,6 +1304,22 @@ class CfnAppMonitorProps:
                     status="status"
                 ),
                 cw_log_enabled=False,
+                deobfuscation_configuration=rum.CfnAppMonitor.DeobfuscationConfigurationProperty(
+                    java_script_source_maps=rum.CfnAppMonitor.JavaScriptSourceMapsProperty(
+                        status="status",
+            
+                        # the properties below are optional
+                        s3_uri="s3Uri"
+                    )
+                ),
+                domain="domain",
+                domain_list=["domainList"],
+                resource_policy=rum.CfnAppMonitor.ResourcePolicyProperty(
+                    policy_document="policyDocument",
+            
+                    # the properties below are optional
+                    policy_revision_id="policyRevisionId"
+                ),
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -1008,14 +1328,16 @@ class CfnAppMonitorProps:
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2caf0433822b63bd4f9fca8828d4497f8e2d6471cd21d40d16fd3657ddb662f5)
-            check_type(argname="argument domain", value=domain, expected_type=type_hints["domain"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
             check_type(argname="argument app_monitor_configuration", value=app_monitor_configuration, expected_type=type_hints["app_monitor_configuration"])
             check_type(argname="argument custom_events", value=custom_events, expected_type=type_hints["custom_events"])
             check_type(argname="argument cw_log_enabled", value=cw_log_enabled, expected_type=type_hints["cw_log_enabled"])
+            check_type(argname="argument deobfuscation_configuration", value=deobfuscation_configuration, expected_type=type_hints["deobfuscation_configuration"])
+            check_type(argname="argument domain", value=domain, expected_type=type_hints["domain"])
+            check_type(argname="argument domain_list", value=domain_list, expected_type=type_hints["domain_list"])
+            check_type(argname="argument resource_policy", value=resource_policy, expected_type=type_hints["resource_policy"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
-            "domain": domain,
             "name": name,
         }
         if app_monitor_configuration is not None:
@@ -1024,21 +1346,17 @@ class CfnAppMonitorProps:
             self._values["custom_events"] = custom_events
         if cw_log_enabled is not None:
             self._values["cw_log_enabled"] = cw_log_enabled
+        if deobfuscation_configuration is not None:
+            self._values["deobfuscation_configuration"] = deobfuscation_configuration
+        if domain is not None:
+            self._values["domain"] = domain
+        if domain_list is not None:
+            self._values["domain_list"] = domain_list
+        if resource_policy is not None:
+            self._values["resource_policy"] = resource_policy
         if tags is not None:
             self._values["tags"] = tags
 
-    @builtins.property
-    def domain(self) -> builtins.str:
-        '''The top-level internet domain name for which your application has administrative authority.
-
-        This parameter is required.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html#cfn-rum-appmonitor-domain
-        '''
-        result = self._values.get("domain")
-        assert result is not None, "Required property 'domain' is missing"
-        return typing.cast(builtins.str, result)
-
     @builtins.property
     def name(self) -> builtins.str:
         '''A name for the app monitor.
@@ -1094,6 +1412,52 @@ class CfnAppMonitorProps:
         result = self._values.get("cw_log_enabled")
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
+    @builtins.property
+    def deobfuscation_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAppMonitor.DeobfuscationConfigurationProperty]]:
+        '''A structure that contains the configuration for how an app monitor can deobfuscate stack traces.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html#cfn-rum-appmonitor-deobfuscationconfiguration
+        '''
+        result = self._values.get("deobfuscation_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAppMonitor.DeobfuscationConfigurationProperty]], result)
+
+    @builtins.property
+    def domain(self) -> typing.Optional[builtins.str]:
+        '''The top-level internet domain name for which your application has administrative authority.
+
+        This parameter is required.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html#cfn-rum-appmonitor-domain
+        '''
+        result = self._values.get("domain")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def domain_list(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''The top-level internet domain names for which your application has administrative authority.
+
+        The CreateAppMonitor requires either the domain or the domain list.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html#cfn-rum-appmonitor-domainlist
+        '''
+        result = self._values.get("domain_list")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def resource_policy(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAppMonitor.ResourcePolicyProperty]]:
+        '''Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it.
+
+        Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see `Using resource-based policies with CloudWatch RUM <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html>`_ .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html#cfn-rum-appmonitor-resourcepolicy
+        '''
+        result = self._values.get("resource_policy")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAppMonitor.ResourcePolicyProperty]], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''Assigns one or more tags (key-value pairs) to the app monitor.
@@ -1134,11 +1498,14 @@ def _typecheckingstub__be8f88e750c0e7122a036d486a439c075fc32835a9e8ecd39a432f9d8
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
-    domain: builtins.str,
     name: builtins.str,
     app_monitor_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.AppMonitorConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     custom_events: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.CustomEventsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     cw_log_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    deobfuscation_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.DeobfuscationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    domain: typing.Optional[builtins.str] = None,
+    domain_list: typing.Optional[typing.Sequence[builtins.str]] = None,
+    resource_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.ResourcePolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -1156,12 +1523,6 @@ def _typecheckingstub__f3ff9506c9eec23255dd33f8626dae2e4ac799a56ca2372ad12d3677f
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__0456aa4886c478c5fc3157398096bfee936719f2df864f6df5d0d99dfb18c0a6(
-    value: builtins.str,
-) -> None:
-    """Type checking stubs"""
-    pass
-
 def _typecheckingstub__28bed8e51b4cd861f00044e721965e61478696f88fa5cf4528fece9faad98be4(
     value: builtins.str,
 ) -> None:
@@ -1186,6 +1547,30 @@ def _typecheckingstub__cd674d3834ab7c9a15c2cc3b7dfc188fd561725f3c30ee84200f63547
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__9f2d704d10058b4d7b134a686b042efc84971acf09b892129589706da314ce17(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAppMonitor.DeobfuscationConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0456aa4886c478c5fc3157398096bfee936719f2df864f6df5d0d99dfb18c0a6(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0f86b0a9a53fb7afe4df111651fb954ae88b1fcdc7037dc764fa0b071918819c(
+    value: typing.Optional[typing.List[builtins.str]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__02ad50a0bedc842a57f77840ff242508a77c0b4d3a7db3dabb035464285b86fa(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAppMonitor.ResourcePolicyProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__fd15333478ba004b01e5eeb19cecf4a73325add1db14df013fda84f63d3c4a4d(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
@@ -1215,6 +1600,21 @@ def _typecheckingstub__dbddfb5cea796155615c50462c2f74dceb1015bc37ceb1d56a4673eee
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__fdf3e214c72bb6242e27105dcba552227c63b454a171ca355bccf1321a0906ad(
+    *,
+    java_script_source_maps: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.JavaScriptSourceMapsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__78c04a50ef32713cea26d41602085c025ced86700aa160ec7d04d54d4b8e133d(
+    *,
+    status: builtins.str,
+    s3_uri: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__001da0942488042bedaa7bac57ce421214804f088803aac4b0f5c16385fb5991(
     *,
     name: builtins.str,
@@ -1237,13 +1637,24 @@ def _typecheckingstub__6bc8896836b392f4778e438dc2fd24dc53c06571d579092660fa95755
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__50574a83877817c5c30ff641cfa13fc211766060d3c8591b640545f5594000af(
+    *,
+    policy_document: builtins.str,
+    policy_revision_id: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__2caf0433822b63bd4f9fca8828d4497f8e2d6471cd21d40d16fd3657ddb662f5(
     *,
-    domain: builtins.str,
     name: builtins.str,
     app_monitor_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.AppMonitorConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     custom_events: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.CustomEventsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     cw_log_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    deobfuscation_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.DeobfuscationConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    domain: typing.Optional[builtins.str] = None,
+    domain_list: typing.Optional[typing.Sequence[builtins.str]] = None,
+    resource_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAppMonitor.ResourcePolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""