aws-cdk-lib 2.186.0__py3-none-any.whl → 2.188.0__py3-none-any.whl

aws_cdk/aws_kinesisfirehose/__init__.py

@@ -116,6 +116,17 @@ s3_destination = firehose.S3Bucket(bucket,
 See: [Custom S3 Prefixes](https://docs.aws.amazon.com/firehose/latest/dev/s3-prefixes.html)
 in the *Amazon Data Firehose Developer Guide*.
 
+To override default file extension appended by Data Format Conversion or S3 compression features, specify `fileExtension`.
+
+```python
+# bucket: s3.Bucket
+
+s3_destination = firehose.S3Bucket(bucket,
+    compression=firehose.Compression.GZIP,
+    file_extension=".json.gz"
+)
+```
+
 ## Server-side Encryption
 
 Enabling server-side encryption (SSE) requires Amazon Data Firehose to encrypt all data
@@ -484,6 +495,7 @@ delivery_stream = firehose.DeliveryStream(stack, "DeliveryStream",
         compression=firehose.Compression.GZIP,
         data_output_prefix="regularPrefix",
         error_output_prefix="errorPrefix",
+        file_extension=".log.gz",
         buffering_interval=cdk.Duration.seconds(60),
         buffering_size=cdk.Size.mebibytes(1),
         encryption_key=key,
@@ -11674,6 +11686,7 @@ class S3Bucket(
         self,
         bucket: _IBucket_42e086fd,
         *,
+        file_extension: typing.Optional[builtins.str] = None,
         buffering_interval: typing.Optional[_Duration_4839e8c3] = None,
         buffering_size: typing.Optional[_Size_7b441c34] = None,
         compression: typing.Optional[Compression] = None,
@@ -11687,6 +11700,7 @@ class S3Bucket(
     ) -> None:
         '''
         :param bucket: -
+        :param file_extension: Specify a file extension. It will override the default file extension appended by Data Format Conversion or S3 compression features such as ``.parquet`` or ``.gz``. File extension must start with a period (``.``) and can contain allowed characters: ``0-9a-z!-_.*'()``. Default: - The default file extension appended by Data Format Conversion or S3 compression features
         :param buffering_interval: The length of time that Firehose buffers incoming data before delivering it to the S3 bucket. Minimum: Duration.seconds(0) Maximum: Duration.seconds(900) Default: Duration.seconds(300)
         :param buffering_size: The size of the buffer that Amazon Data Firehose uses for incoming data before delivering it to the S3 bucket. Minimum: Size.mebibytes(1) Maximum: Size.mebibytes(128) Default: Size.mebibytes(5)
         :param compression: The type of compression that Amazon Data Firehose uses to compress the data that it delivers to the Amazon S3 bucket. The compression formats SNAPPY or ZIP cannot be specified for Amazon Redshift destinations because they are not supported by the Amazon Redshift COPY operation that reads from the S3 bucket. Default: - UNCOMPRESSED
@@ -11702,6 +11716,7 @@ class S3Bucket(
             type_hints = typing.get_type_hints(_typecheckingstub__a2eaf455255fc260033aa24d456779f4b21172e8b4cf2c51f6355f415c9f3ccd)
             check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
         props = S3BucketProps(
+            file_extension=file_extension,
             buffering_interval=buffering_interval,
             buffering_size=buffering_size,
             compression=compression,
@@ -11746,6 +11761,7 @@ class S3Bucket(
         "processor": "processor",
         "role": "role",
         "s3_backup": "s3Backup",
+        "file_extension": "fileExtension",
     },
 )
 class S3BucketProps(CommonDestinationS3Props, CommonDestinationProps):
@@ -11762,6 +11778,7 @@ class S3BucketProps(CommonDestinationS3Props, CommonDestinationProps):
         processor: typing.Optional[IDataProcessor] = None,
         role: typing.Optional[_IRole_235f5d8e] = None,
         s3_backup: typing.Optional[typing.Union[DestinationS3BackupProps, typing.Dict[builtins.str, typing.Any]]] = None,
+        file_extension: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Props for defining an S3 destination of an Amazon Data Firehose delivery stream.
 
@@ -11775,6 +11792,7 @@ class S3BucketProps(CommonDestinationS3Props, CommonDestinationProps):
         :param processor: The data transformation that should be performed on the data before writing to the destination. Default: - no data transformation will occur.
         :param role: The IAM role associated with this destination. Assumed by Amazon Data Firehose to invoke processors and write to destinations Default: - a role will be created with default permissions.
         :param s3_backup: The configuration for backing up source records to S3. Default: - source records will not be backed up to S3.
+        :param file_extension: Specify a file extension. It will override the default file extension appended by Data Format Conversion or S3 compression features such as ``.parquet`` or ``.gz``. File extension must start with a period (``.``) and can contain allowed characters: ``0-9a-z!-_.*'()``. Default: - The default file extension appended by Data Format Conversion or S3 compression features
 
         :exampleMetadata: infused
 
@@ -11814,6 +11832,7 @@ class S3BucketProps(CommonDestinationS3Props, CommonDestinationProps):
             check_type(argname="argument processor", value=processor, expected_type=type_hints["processor"])
             check_type(argname="argument role", value=role, expected_type=type_hints["role"])
             check_type(argname="argument s3_backup", value=s3_backup, expected_type=type_hints["s3_backup"])
+            check_type(argname="argument file_extension", value=file_extension, expected_type=type_hints["file_extension"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if buffering_interval is not None:
             self._values["buffering_interval"] = buffering_interval
@@ -11835,6 +11854,8 @@ class S3BucketProps(CommonDestinationS3Props, CommonDestinationProps):
             self._values["role"] = role
         if s3_backup is not None:
             self._values["s3_backup"] = s3_backup
+        if file_extension is not None:
+            self._values["file_extension"] = file_extension
 
     @builtins.property
     def buffering_interval(self) -> typing.Optional[_Duration_4839e8c3]:
@@ -11946,6 +11967,21 @@ class S3BucketProps(CommonDestinationS3Props, CommonDestinationProps):
         result = self._values.get("s3_backup")
         return typing.cast(typing.Optional[DestinationS3BackupProps], result)
 
+    @builtins.property
+    def file_extension(self) -> typing.Optional[builtins.str]:
+        '''Specify a file extension.
+
+        It will override the default file extension appended by Data Format Conversion or S3 compression features such as ``.parquet`` or ``.gz``.
+
+        File extension must start with a period (``.``) and can contain allowed characters: ``0-9a-z!-_.*'()``.
+
+        :default: - The default file extension appended by Data Format Conversion or S3 compression features
+
+        :see: https://docs.aws.amazon.com/firehose/latest/dev/create-destination.html#create-destination-s3
+        '''
+        result = self._values.get("file_extension")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -13621,6 +13657,7 @@ def _typecheckingstub__393c41d8ae2fe5acab13fd70fff9f4778e727adfd78b86d20820f0670
 def _typecheckingstub__a2eaf455255fc260033aa24d456779f4b21172e8b4cf2c51f6355f415c9f3ccd(
     bucket: _IBucket_42e086fd,
     *,
+    file_extension: typing.Optional[builtins.str] = None,
     buffering_interval: typing.Optional[_Duration_4839e8c3] = None,
     buffering_size: typing.Optional[_Size_7b441c34] = None,
     compression: typing.Optional[Compression] = None,
@@ -13653,6 +13690,7 @@ def _typecheckingstub__04b12dc503479d22af2396c4df8d38c37536719187eef6ddd01c18b52
     processor: typing.Optional[IDataProcessor] = None,
     role: typing.Optional[_IRole_235f5d8e] = None,
     s3_backup: typing.Optional[typing.Union[DestinationS3BackupProps, typing.Dict[builtins.str, typing.Any]]] = None,
+    file_extension: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass

aws_cdk/aws_kms/__init__.py

@@ -2234,19 +2234,18 @@ class Key(
 
     Example::
 
-        # vpc: ec2.Vpc
+        import aws_cdk.aws_kms as kms
         
-        engine = rds.DatabaseInstanceEngine.postgres(version=rds.PostgresEngineVersion.VER_16_3)
-        my_key = kms.Key(self, "MyKey")
         
-        rds.DatabaseInstance(self, "InstanceWithCustomizedSecret",
-            engine=engine,
-            vpc=vpc,
-            credentials=rds.Credentials.from_generated_secret("postgres",
-                secret_name="my-cool-name",
-                encryption_key=my_key,
-                exclude_characters="!&*^#@()",
-                replica_regions=[secretsmanager.ReplicaRegion(region="eu-west-1"), secretsmanager.ReplicaRegion(region="eu-west-2")]
+        my_kms_key = kms.Key(self, "myKMSKey")
+        my_bucket = s3.Bucket(self, "mySSEKMSEncryptedBucket",
+            encryption=s3.BucketEncryption.KMS,
+            encryption_key=my_kms_key,
+            object_ownership=s3.ObjectOwnership.BUCKET_OWNER_ENFORCED
+        )
+        cloudfront.Distribution(self, "myDist",
+            default_behavior=cloudfront.BehaviorOptions(
+                origin=origins.S3BucketOrigin.with_origin_access_control(my_bucket)
             )
         )
     '''

aws_cdk/aws_lakeformation/__init__.py

@@ -785,7 +785,7 @@ class CfnDataLakeSettings(
         :param create_table_default_permissions: Specifies whether access control on a newly created table is managed by Lake Formation permissions or exclusively by IAM permissions. A null value indicates that the access is controlled by Lake Formation permissions. ``ALL`` permissions assigned to ``IAM_ALLOWED_PRINCIPALS`` group indicate that the user's IAM permissions determine the access to the table. This is referred to as the setting "Use only IAM access control," and is to support the backward compatibility with the AWS Glue permission model implemented by IAM permissions. The only permitted values are an empty array or an array that contains a single JSON object that grants ``ALL`` permissions to ``IAM_ALLOWED_PRINCIPALS`` . For more information, see `Changing the default security settings for your data lake <https://docs.aws.amazon.com/lake-formation/latest/dg/change-settings.html>`_ .
         :param external_data_filtering_allow_list: A list of the account IDs of AWS accounts with Amazon EMR clusters or third-party engines that are allwed to perform data filtering.
         :param mutation_type: Specifies whether the data lake settings are updated by adding new values to the current settings ( ``APPEND`` ) or by replacing the current settings with new settings ( ``REPLACE`` ). .. epigraph:: If you choose ``REPLACE`` , your current data lake settings will be replaced with the new values in your template.
-        :param parameters: A key-value map that provides an additional configuration on your data lake. ``CrossAccountVersion`` is the key you can configure in the ``Parameters`` field. Accepted values for the ``CrossAccountVersion`` key are 1, 2, and 3.
+        :param parameters: A key-value map that provides an additional configuration on your data lake. ``CrossAccountVersion`` is the key you can configure in the ``Parameters`` field. Accepted values for the ``CrossAccountVersion`` key are 1, 2, 3, and 4.
         :param trusted_resource_owners: An array of UTF-8 strings. A list of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log. You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
         '''
         if __debug__:
@@ -1187,7 +1187,7 @@ class CfnDataLakeSettingsProps:
         :param create_table_default_permissions: Specifies whether access control on a newly created table is managed by Lake Formation permissions or exclusively by IAM permissions. A null value indicates that the access is controlled by Lake Formation permissions. ``ALL`` permissions assigned to ``IAM_ALLOWED_PRINCIPALS`` group indicate that the user's IAM permissions determine the access to the table. This is referred to as the setting "Use only IAM access control," and is to support the backward compatibility with the AWS Glue permission model implemented by IAM permissions. The only permitted values are an empty array or an array that contains a single JSON object that grants ``ALL`` permissions to ``IAM_ALLOWED_PRINCIPALS`` . For more information, see `Changing the default security settings for your data lake <https://docs.aws.amazon.com/lake-formation/latest/dg/change-settings.html>`_ .
         :param external_data_filtering_allow_list: A list of the account IDs of AWS accounts with Amazon EMR clusters or third-party engines that are allwed to perform data filtering.
         :param mutation_type: Specifies whether the data lake settings are updated by adding new values to the current settings ( ``APPEND`` ) or by replacing the current settings with new settings ( ``REPLACE`` ). .. epigraph:: If you choose ``REPLACE`` , your current data lake settings will be replaced with the new values in your template.
-        :param parameters: A key-value map that provides an additional configuration on your data lake. ``CrossAccountVersion`` is the key you can configure in the ``Parameters`` field. Accepted values for the ``CrossAccountVersion`` key are 1, 2, and 3.
+        :param parameters: A key-value map that provides an additional configuration on your data lake. ``CrossAccountVersion`` is the key you can configure in the ``Parameters`` field. Accepted values for the ``CrossAccountVersion`` key are 1, 2, 3, and 4.
         :param trusted_resource_owners: An array of UTF-8 strings. A list of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log. You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-datalakesettings.html
@@ -1417,7 +1417,7 @@ class CfnDataLakeSettingsProps:
     def parameters(self) -> typing.Any:
         '''A key-value map that provides an additional configuration on your data lake.
 
-        ``CrossAccountVersion`` is the key you can configure in the ``Parameters`` field. Accepted values for the ``CrossAccountVersion`` key are 1, 2, and 3.
+        ``CrossAccountVersion`` is the key you can configure in the ``Parameters`` field. Accepted values for the ``CrossAccountVersion`` key are 1, 2, 3, and 4.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-datalakesettings.html#cfn-lakeformation-datalakesettings-parameters
         '''