aws-cdk-lib 2.185.0__py3-none-any.whl → 2.187.0__py3-none-any.whl

aws_cdk/_jsii/__init__.py

@@ -34,7 +34,7 @@ import aws_cdk.cloud_assembly_schema._jsii
 import constructs._jsii
 
 __jsii_assembly__ = jsii.JSIIAssembly.load(
-    "aws-cdk-lib", "2.185.0", __name__[0:-6], "aws-cdk-lib@2.185.0.jsii.tgz"
+    "aws-cdk-lib", "2.187.0", __name__[0:-6], "aws-cdk-lib@2.187.0.jsii.tgz"
 )
 
 __all__ = [

aws_cdk/aws_amazonmq/__init__.py

@@ -1382,7 +1382,7 @@ class CfnBroker(
             :param username: The username of the broker user. For Amazon MQ for ActiveMQ brokers, this value can contain only alphanumeric characters, dashes, periods, underscores, and tildes (- . _ ~). For Amazon MQ for RabbitMQ brokers, this value can contain only alphanumeric characters, dashes, periods, underscores (- . _). This value must not contain a tilde (~) character. Amazon MQ prohibts using guest as a valid usename. This value must be 2-100 characters long. .. epigraph:: Do not add personally identifiable information (PII) or other confidential or sensitive information in broker usernames. Broker usernames are accessible to other AWS services, including CloudWatch Logs . Broker usernames are not intended to be used for private or sensitive data.
             :param console_access: Enables access to the ActiveMQ web console for the ActiveMQ user. Does not apply to RabbitMQ brokers.
             :param groups: The list of groups (20 maximum) to which the ActiveMQ user belongs. This value can contain only alphanumeric characters, dashes, periods, underscores, and tildes (- . _ ~). This value must be 2-100 characters long. Does not apply to RabbitMQ brokers.
-            :param jolokia_api_access: 
+            :param jolokia_api_access: Turn on Jolokia access for your ActiveMQ broker user (Does not apply to RabbitMQ brokers).
             :param replication_user: Defines if this user is intended for CRDR replication purposes.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-amazonmq-broker-user.html
@@ -1479,7 +1479,8 @@ class CfnBroker(
 
         @builtins.property
         def jolokia_api_access(self) -> typing.Optional[builtins.str]:
-            '''
+            '''Turn on Jolokia access for your ActiveMQ broker user (Does not apply to RabbitMQ brokers).
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-amazonmq-broker-user.html#cfn-amazonmq-broker-user-jolokiaapiaccess
             '''
             result = self._values.get("jolokia_api_access")

aws_cdk/aws_amplify/__init__.py

@@ -128,6 +128,7 @@ class CfnApp(
             cache_config=amplify.CfnApp.CacheConfigProperty(
                 type="type"
             ),
+            compute_role_arn="computeRoleArn",
             custom_headers="customHeaders",
             custom_rules=[amplify.CfnApp.CustomRuleProperty(
                 source="source",
@@ -165,6 +166,7 @@ class CfnApp(
         basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApp.BasicAuthConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         build_spec: typing.Optional[builtins.str] = None,
         cache_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApp.CacheConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        compute_role_arn: typing.Optional[builtins.str] = None,
         custom_headers: typing.Optional[builtins.str] = None,
         custom_rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApp.CustomRuleProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -185,6 +187,7 @@ class CfnApp(
         :param basic_auth_config: The credentials for basic authorization for an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for an Amplify app.
         :param cache_config: The cache configuration for the Amplify app. If you don't specify the cache configuration ``type`` , Amplify uses the default ``AMPLIFY_MANAGED`` setting.
+        :param compute_role_arn: 
         :param custom_headers: The custom HTTP headers for an Amplify app.
         :param custom_rules: The custom rewrite and redirect rules for an Amplify app.
         :param description: The description of the Amplify app.
@@ -207,6 +210,7 @@ class CfnApp(
             basic_auth_config=basic_auth_config,
             build_spec=build_spec,
             cache_config=cache_config,
+            compute_role_arn=compute_role_arn,
             custom_headers=custom_headers,
             custom_rules=custom_rules,
             description=description,
@@ -391,6 +395,18 @@ class CfnApp(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "cacheConfig", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="computeRoleArn")
+    def compute_role_arn(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "computeRoleArn"))
+
+    @compute_role_arn.setter
+    def compute_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d55f0c87bc50af5a1e7d9bf3f8fca41d5e5a849cb69dbf43ca51f24872058be8)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "computeRoleArn", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="customHeaders")
     def custom_headers(self) -> typing.Optional[builtins.str]:
@@ -1133,6 +1149,7 @@ class CfnApp(
         "basic_auth_config": "basicAuthConfig",
         "build_spec": "buildSpec",
         "cache_config": "cacheConfig",
+        "compute_role_arn": "computeRoleArn",
         "custom_headers": "customHeaders",
         "custom_rules": "customRules",
         "description": "description",
@@ -1155,6 +1172,7 @@ class CfnAppProps:
         basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         build_spec: typing.Optional[builtins.str] = None,
         cache_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CacheConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        compute_role_arn: typing.Optional[builtins.str] = None,
         custom_headers: typing.Optional[builtins.str] = None,
         custom_rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CustomRuleProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -1174,6 +1192,7 @@ class CfnAppProps:
         :param basic_auth_config: The credentials for basic authorization for an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for an Amplify app.
         :param cache_config: The cache configuration for the Amplify app. If you don't specify the cache configuration ``type`` , Amplify uses the default ``AMPLIFY_MANAGED`` setting.
+        :param compute_role_arn: 
         :param custom_headers: The custom HTTP headers for an Amplify app.
         :param custom_rules: The custom rewrite and redirect rules for an Amplify app.
         :param description: The description of the Amplify app.
@@ -1228,6 +1247,7 @@ class CfnAppProps:
                 cache_config=amplify.CfnApp.CacheConfigProperty(
                     type="type"
                 ),
+                compute_role_arn="computeRoleArn",
                 custom_headers="customHeaders",
                 custom_rules=[amplify.CfnApp.CustomRuleProperty(
                     source="source",
@@ -1261,6 +1281,7 @@ class CfnAppProps:
             check_type(argname="argument basic_auth_config", value=basic_auth_config, expected_type=type_hints["basic_auth_config"])
             check_type(argname="argument build_spec", value=build_spec, expected_type=type_hints["build_spec"])
             check_type(argname="argument cache_config", value=cache_config, expected_type=type_hints["cache_config"])
+            check_type(argname="argument compute_role_arn", value=compute_role_arn, expected_type=type_hints["compute_role_arn"])
             check_type(argname="argument custom_headers", value=custom_headers, expected_type=type_hints["custom_headers"])
             check_type(argname="argument custom_rules", value=custom_rules, expected_type=type_hints["custom_rules"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
@@ -1284,6 +1305,8 @@ class CfnAppProps:
             self._values["build_spec"] = build_spec
         if cache_config is not None:
             self._values["cache_config"] = cache_config
+        if compute_role_arn is not None:
+            self._values["compute_role_arn"] = compute_role_arn
         if custom_headers is not None:
             self._values["custom_headers"] = custom_headers
         if custom_rules is not None:
@@ -1378,6 +1401,14 @@ class CfnAppProps:
         result = self._values.get("cache_config")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApp.CacheConfigProperty]], result)
 
+    @builtins.property
+    def compute_role_arn(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-app.html#cfn-amplify-app-computerolearn
+        '''
+        result = self._values.get("compute_role_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def custom_headers(self) -> typing.Optional[builtins.str]:
         '''The custom HTTP headers for an Amplify app.
@@ -1534,10 +1565,12 @@ class CfnBranch(
                 enable_basic_auth=False
             ),
             build_spec="buildSpec",
+            compute_role_arn="computeRoleArn",
             description="description",
             enable_auto_build=False,
             enable_performance_mode=False,
             enable_pull_request_preview=False,
+            enable_skew_protection=False,
             environment_variables=[amplify.CfnBranch.EnvironmentVariableProperty(
                 name="name",
                 value="value"
@@ -1562,10 +1595,12 @@ class CfnBranch(
         backend: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnBranch.BackendProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnBranch.BasicAuthConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         build_spec: typing.Optional[builtins.str] = None,
+        compute_role_arn: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
         enable_auto_build: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_performance_mode: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_pull_request_preview: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        enable_skew_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         environment_variables: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnBranch.EnvironmentVariableProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         framework: typing.Optional[builtins.str] = None,
         pull_request_environment_name: typing.Optional[builtins.str] = None,
@@ -1580,10 +1615,12 @@ class CfnBranch(
         :param backend: The backend for a ``Branch`` of an Amplify app. Use for a backend created from an AWS CloudFormation stack. This field is available to Amplify Gen 2 apps only. When you deploy an application with Amplify Gen 2, you provision the app's backend infrastructure using Typescript code.
         :param basic_auth_config: The basic authorization credentials for a branch of an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for the branch.
+        :param compute_role_arn: 
         :param description: The description for the branch that is part of an Amplify app.
         :param enable_auto_build: Enables auto building for the branch.
         :param enable_performance_mode: Enables performance mode for the branch. Performance mode optimizes for faster hosting performance by keeping content cached at the edge for a longer interval. When performance mode is enabled, hosting configuration or code changes can take up to 10 minutes to roll out.
         :param enable_pull_request_preview: Specifies whether Amplify Hosting creates a preview for each pull request that is made for this branch. If this property is enabled, Amplify deploys your app to a unique preview URL after each pull request is opened. Development and QA teams can use this preview to test the pull request before it's merged into a production or integration branch. To provide backend support for your preview, Amplify automatically provisions a temporary backend environment that it deletes when the pull request is closed. If you want to specify a dedicated backend environment for your previews, use the ``PullRequestEnvironmentName`` property. For more information, see `Web Previews <https://docs.aws.amazon.com/amplify/latest/userguide/pr-previews.html>`_ in the *AWS Amplify Hosting User Guide* .
+        :param enable_skew_protection: 
         :param environment_variables: The environment variables for the branch.
         :param framework: The framework for the branch.
         :param pull_request_environment_name: If pull request previews are enabled for this branch, you can use this property to specify a dedicated backend environment for your previews. For example, you could specify an environment named ``prod`` , ``test`` , or ``dev`` that you initialized with the Amplify CLI and mapped to this branch. To enable pull request previews, set the ``EnablePullRequestPreview`` property to ``true`` . If you don't specify an environment, Amplify Hosting provides backend support for each preview by automatically provisioning a temporary backend environment. Amplify Hosting deletes this environment when the pull request is closed. For more information about creating backend environments, see `Feature Branch Deployments and Team Workflows <https://docs.aws.amazon.com/amplify/latest/userguide/multi-environments.html>`_ in the *AWS Amplify Hosting User Guide* .
@@ -1600,10 +1637,12 @@ class CfnBranch(
             backend=backend,
             basic_auth_config=basic_auth_config,
             build_spec=build_spec,
+            compute_role_arn=compute_role_arn,
             description=description,
             enable_auto_build=enable_auto_build,
             enable_performance_mode=enable_performance_mode,
             enable_pull_request_preview=enable_pull_request_preview,
+            enable_skew_protection=enable_skew_protection,
             environment_variables=environment_variables,
             framework=framework,
             pull_request_environment_name=pull_request_environment_name,
@@ -1750,6 +1789,18 @@ class CfnBranch(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "buildSpec", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="computeRoleArn")
+    def compute_role_arn(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "computeRoleArn"))
+
+    @compute_role_arn.setter
+    def compute_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__50c29bd1063cbc0e1fa76d9721d838c59c46a84f1257f3ced31f3d727d6f9e36)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "computeRoleArn", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="description")
     def description(self) -> typing.Optional[builtins.str]:
@@ -1817,6 +1868,23 @@ class CfnBranch(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "enablePullRequestPreview", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="enableSkewProtection")
+    def enable_skew_protection(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "enableSkewProtection"))
+
+    @enable_skew_protection.setter
+    def enable_skew_protection(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__432a4942ceb7d62c4b8b4afa118592daeb5e524bc422ad19ea2bc1d797199dac)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "enableSkewProtection", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="environmentVariables")
     def environment_variables(
@@ -2114,10 +2182,12 @@ class CfnBranch(
         "backend": "backend",
         "basic_auth_config": "basicAuthConfig",
         "build_spec": "buildSpec",
+        "compute_role_arn": "computeRoleArn",
         "description": "description",
         "enable_auto_build": "enableAutoBuild",
         "enable_performance_mode": "enablePerformanceMode",
         "enable_pull_request_preview": "enablePullRequestPreview",
+        "enable_skew_protection": "enableSkewProtection",
         "environment_variables": "environmentVariables",
         "framework": "framework",
         "pull_request_environment_name": "pullRequestEnvironmentName",
@@ -2134,10 +2204,12 @@ class CfnBranchProps:
         backend: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BackendProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         build_spec: typing.Optional[builtins.str] = None,
+        compute_role_arn: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
         enable_auto_build: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_performance_mode: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_pull_request_preview: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        enable_skew_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         environment_variables: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.EnvironmentVariableProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         framework: typing.Optional[builtins.str] = None,
         pull_request_environment_name: typing.Optional[builtins.str] = None,
@@ -2151,10 +2223,12 @@ class CfnBranchProps:
         :param backend: The backend for a ``Branch`` of an Amplify app. Use for a backend created from an AWS CloudFormation stack. This field is available to Amplify Gen 2 apps only. When you deploy an application with Amplify Gen 2, you provision the app's backend infrastructure using Typescript code.
         :param basic_auth_config: The basic authorization credentials for a branch of an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for the branch.
+        :param compute_role_arn: 
         :param description: The description for the branch that is part of an Amplify app.
         :param enable_auto_build: Enables auto building for the branch.
         :param enable_performance_mode: Enables performance mode for the branch. Performance mode optimizes for faster hosting performance by keeping content cached at the edge for a longer interval. When performance mode is enabled, hosting configuration or code changes can take up to 10 minutes to roll out.
         :param enable_pull_request_preview: Specifies whether Amplify Hosting creates a preview for each pull request that is made for this branch. If this property is enabled, Amplify deploys your app to a unique preview URL after each pull request is opened. Development and QA teams can use this preview to test the pull request before it's merged into a production or integration branch. To provide backend support for your preview, Amplify automatically provisions a temporary backend environment that it deletes when the pull request is closed. If you want to specify a dedicated backend environment for your previews, use the ``PullRequestEnvironmentName`` property. For more information, see `Web Previews <https://docs.aws.amazon.com/amplify/latest/userguide/pr-previews.html>`_ in the *AWS Amplify Hosting User Guide* .
+        :param enable_skew_protection: 
         :param environment_variables: The environment variables for the branch.
         :param framework: The framework for the branch.
         :param pull_request_environment_name: If pull request previews are enabled for this branch, you can use this property to specify a dedicated backend environment for your previews. For example, you could specify an environment named ``prod`` , ``test`` , or ``dev`` that you initialized with the Amplify CLI and mapped to this branch. To enable pull request previews, set the ``EnablePullRequestPreview`` property to ``true`` . If you don't specify an environment, Amplify Hosting provides backend support for each preview by automatically provisioning a temporary backend environment. Amplify Hosting deletes this environment when the pull request is closed. For more information about creating backend environments, see `Feature Branch Deployments and Team Workflows <https://docs.aws.amazon.com/amplify/latest/userguide/multi-environments.html>`_ in the *AWS Amplify Hosting User Guide* .
@@ -2186,10 +2260,12 @@ class CfnBranchProps:
                     enable_basic_auth=False
                 ),
                 build_spec="buildSpec",
+                compute_role_arn="computeRoleArn",
                 description="description",
                 enable_auto_build=False,
                 enable_performance_mode=False,
                 enable_pull_request_preview=False,
+                enable_skew_protection=False,
                 environment_variables=[amplify.CfnBranch.EnvironmentVariableProperty(
                     name="name",
                     value="value"
@@ -2210,10 +2286,12 @@ class CfnBranchProps:
             check_type(argname="argument backend", value=backend, expected_type=type_hints["backend"])
             check_type(argname="argument basic_auth_config", value=basic_auth_config, expected_type=type_hints["basic_auth_config"])
             check_type(argname="argument build_spec", value=build_spec, expected_type=type_hints["build_spec"])
+            check_type(argname="argument compute_role_arn", value=compute_role_arn, expected_type=type_hints["compute_role_arn"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
             check_type(argname="argument enable_auto_build", value=enable_auto_build, expected_type=type_hints["enable_auto_build"])
             check_type(argname="argument enable_performance_mode", value=enable_performance_mode, expected_type=type_hints["enable_performance_mode"])
             check_type(argname="argument enable_pull_request_preview", value=enable_pull_request_preview, expected_type=type_hints["enable_pull_request_preview"])
+            check_type(argname="argument enable_skew_protection", value=enable_skew_protection, expected_type=type_hints["enable_skew_protection"])
             check_type(argname="argument environment_variables", value=environment_variables, expected_type=type_hints["environment_variables"])
             check_type(argname="argument framework", value=framework, expected_type=type_hints["framework"])
             check_type(argname="argument pull_request_environment_name", value=pull_request_environment_name, expected_type=type_hints["pull_request_environment_name"])
@@ -2229,6 +2307,8 @@ class CfnBranchProps:
             self._values["basic_auth_config"] = basic_auth_config
         if build_spec is not None:
             self._values["build_spec"] = build_spec
+        if compute_role_arn is not None:
+            self._values["compute_role_arn"] = compute_role_arn
         if description is not None:
             self._values["description"] = description
         if enable_auto_build is not None:
@@ -2237,6 +2317,8 @@ class CfnBranchProps:
             self._values["enable_performance_mode"] = enable_performance_mode
         if enable_pull_request_preview is not None:
             self._values["enable_pull_request_preview"] = enable_pull_request_preview
+        if enable_skew_protection is not None:
+            self._values["enable_skew_protection"] = enable_skew_protection
         if environment_variables is not None:
             self._values["environment_variables"] = environment_variables
         if framework is not None:
@@ -2303,6 +2385,14 @@ class CfnBranchProps:
         result = self._values.get("build_spec")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def compute_role_arn(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.html#cfn-amplify-branch-computerolearn
+        '''
+        result = self._values.get("compute_role_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def description(self) -> typing.Optional[builtins.str]:
         '''The description for the branch that is part of an Amplify app.
@@ -2353,6 +2443,16 @@ class CfnBranchProps:
         result = self._values.get("enable_pull_request_preview")
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
+    @builtins.property
+    def enable_skew_protection(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.html#cfn-amplify-branch-enableskewprotection
+        '''
+        result = self._values.get("enable_skew_protection")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
     @builtins.property
     def environment_variables(
         self,
@@ -3187,6 +3287,7 @@ def _typecheckingstub__8dc8d772047a068d22a76d907b344356448c6a26d23e419ed69cc622d
     basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     build_spec: typing.Optional[builtins.str] = None,
     cache_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CacheConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    compute_role_arn: typing.Optional[builtins.str] = None,
     custom_headers: typing.Optional[builtins.str] = None,
     custom_rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CustomRuleProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     description: typing.Optional[builtins.str] = None,
@@ -3249,6 +3350,12 @@ def _typecheckingstub__1e0b47cf174f09e141957cc84bc0f442ba70bbfa96a59aad74b66dab1
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__d55f0c87bc50af5a1e7d9bf3f8fca41d5e5a849cb69dbf43ca51f24872058be8(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__623b6d97b6b1967c76a0782c9ba61b276ee5ff570dad9ab0003baf0626317805(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -3368,6 +3475,7 @@ def _typecheckingstub__cfa8f09e6d42b5d6d1122d3e9214ec780302e9c3fda48d7ca044dd076
     basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     build_spec: typing.Optional[builtins.str] = None,
     cache_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CacheConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    compute_role_arn: typing.Optional[builtins.str] = None,
     custom_headers: typing.Optional[builtins.str] = None,
     custom_rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CustomRuleProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     description: typing.Optional[builtins.str] = None,
@@ -3391,10 +3499,12 @@ def _typecheckingstub__859cd0a15aef1449f80ffe32589fdb895b13f3510c6905791c3eea033
     backend: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BackendProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     build_spec: typing.Optional[builtins.str] = None,
+    compute_role_arn: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
     enable_auto_build: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_performance_mode: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_pull_request_preview: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    enable_skew_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     environment_variables: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.EnvironmentVariableProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     framework: typing.Optional[builtins.str] = None,
     pull_request_environment_name: typing.Optional[builtins.str] = None,
@@ -3446,6 +3556,12 @@ def _typecheckingstub__ae472a508b2b0e4a122ae35d93c8733d00df3680d8823bd2ad857acc2
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__50c29bd1063cbc0e1fa76d9721d838c59c46a84f1257f3ced31f3d727d6f9e36(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__a71cabeaa4605532f47314006f7075821b92f53c6bdb0be7bbb3c0f09ff70ea2(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -3470,6 +3586,12 @@ def _typecheckingstub__6c8216d12e1375a7227a3e83088f390c0e7d3575f804bea24c90bc6e4
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__432a4942ceb7d62c4b8b4afa118592daeb5e524bc422ad19ea2bc1d797199dac(
+    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__8ff5456e47cd7b5d2fb38bcf736c28804423dcef024c2d036243fc28345dd532(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnBranch.EnvironmentVariableProperty]]]],
 ) -> None:
@@ -3531,10 +3653,12 @@ def _typecheckingstub__57c0d80a85d344dca51e3abe3e5e1ee9fff906ef48fa3809bec9a68a3
     backend: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BackendProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     build_spec: typing.Optional[builtins.str] = None,
+    compute_role_arn: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
     enable_auto_build: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_performance_mode: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_pull_request_preview: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    enable_skew_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     environment_variables: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.EnvironmentVariableProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     framework: typing.Optional[builtins.str] = None,
     pull_request_environment_name: typing.Optional[builtins.str] = None,