aws-cdk-lib 2.186.0__py3-none-any.whl → 2.188.0__py3-none-any.whl

aws_cdk/_jsii/__init__.py

@@ -34,7 +34,7 @@ import aws_cdk.cloud_assembly_schema._jsii
 import constructs._jsii
 
 __jsii_assembly__ = jsii.JSIIAssembly.load(
-    "aws-cdk-lib", "2.186.0", __name__[0:-6], "aws-cdk-lib@2.186.0.jsii.tgz"
+    "aws-cdk-lib", "2.188.0", __name__[0:-6], "aws-cdk-lib@2.188.0.jsii.tgz"
 )
 
 __all__ = [

aws_cdk/aws_amplify/__init__.py

@@ -128,6 +128,7 @@ class CfnApp(
             cache_config=amplify.CfnApp.CacheConfigProperty(
                 type="type"
             ),
+            compute_role_arn="computeRoleArn",
             custom_headers="customHeaders",
             custom_rules=[amplify.CfnApp.CustomRuleProperty(
                 source="source",
@@ -165,6 +166,7 @@ class CfnApp(
         basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApp.BasicAuthConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         build_spec: typing.Optional[builtins.str] = None,
         cache_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApp.CacheConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        compute_role_arn: typing.Optional[builtins.str] = None,
         custom_headers: typing.Optional[builtins.str] = None,
         custom_rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApp.CustomRuleProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -185,6 +187,7 @@ class CfnApp(
         :param basic_auth_config: The credentials for basic authorization for an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for an Amplify app.
         :param cache_config: The cache configuration for the Amplify app. If you don't specify the cache configuration ``type`` , Amplify uses the default ``AMPLIFY_MANAGED`` setting.
+        :param compute_role_arn: The Amazon Resource Name (ARN) of the IAM role for an SSR app. The Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
         :param custom_headers: The custom HTTP headers for an Amplify app.
         :param custom_rules: The custom rewrite and redirect rules for an Amplify app.
         :param description: The description of the Amplify app.
@@ -207,6 +210,7 @@ class CfnApp(
             basic_auth_config=basic_auth_config,
             build_spec=build_spec,
             cache_config=cache_config,
+            compute_role_arn=compute_role_arn,
             custom_headers=custom_headers,
             custom_rules=custom_rules,
             description=description,
@@ -391,6 +395,19 @@ class CfnApp(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "cacheConfig", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="computeRoleArn")
+    def compute_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the IAM role for an SSR app.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "computeRoleArn"))
+
+    @compute_role_arn.setter
+    def compute_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d55f0c87bc50af5a1e7d9bf3f8fca41d5e5a849cb69dbf43ca51f24872058be8)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "computeRoleArn", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="customHeaders")
     def custom_headers(self) -> typing.Optional[builtins.str]:
@@ -1133,6 +1150,7 @@ class CfnApp(
         "basic_auth_config": "basicAuthConfig",
         "build_spec": "buildSpec",
         "cache_config": "cacheConfig",
+        "compute_role_arn": "computeRoleArn",
         "custom_headers": "customHeaders",
         "custom_rules": "customRules",
         "description": "description",
@@ -1155,6 +1173,7 @@ class CfnAppProps:
         basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         build_spec: typing.Optional[builtins.str] = None,
         cache_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CacheConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        compute_role_arn: typing.Optional[builtins.str] = None,
         custom_headers: typing.Optional[builtins.str] = None,
         custom_rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CustomRuleProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -1174,6 +1193,7 @@ class CfnAppProps:
         :param basic_auth_config: The credentials for basic authorization for an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for an Amplify app.
         :param cache_config: The cache configuration for the Amplify app. If you don't specify the cache configuration ``type`` , Amplify uses the default ``AMPLIFY_MANAGED`` setting.
+        :param compute_role_arn: The Amazon Resource Name (ARN) of the IAM role for an SSR app. The Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
         :param custom_headers: The custom HTTP headers for an Amplify app.
         :param custom_rules: The custom rewrite and redirect rules for an Amplify app.
         :param description: The description of the Amplify app.
@@ -1228,6 +1248,7 @@ class CfnAppProps:
                 cache_config=amplify.CfnApp.CacheConfigProperty(
                     type="type"
                 ),
+                compute_role_arn="computeRoleArn",
                 custom_headers="customHeaders",
                 custom_rules=[amplify.CfnApp.CustomRuleProperty(
                     source="source",
@@ -1261,6 +1282,7 @@ class CfnAppProps:
             check_type(argname="argument basic_auth_config", value=basic_auth_config, expected_type=type_hints["basic_auth_config"])
             check_type(argname="argument build_spec", value=build_spec, expected_type=type_hints["build_spec"])
             check_type(argname="argument cache_config", value=cache_config, expected_type=type_hints["cache_config"])
+            check_type(argname="argument compute_role_arn", value=compute_role_arn, expected_type=type_hints["compute_role_arn"])
             check_type(argname="argument custom_headers", value=custom_headers, expected_type=type_hints["custom_headers"])
             check_type(argname="argument custom_rules", value=custom_rules, expected_type=type_hints["custom_rules"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
@@ -1284,6 +1306,8 @@ class CfnAppProps:
             self._values["build_spec"] = build_spec
         if cache_config is not None:
             self._values["cache_config"] = cache_config
+        if compute_role_arn is not None:
+            self._values["compute_role_arn"] = compute_role_arn
         if custom_headers is not None:
             self._values["custom_headers"] = custom_headers
         if custom_rules is not None:
@@ -1378,6 +1402,17 @@ class CfnAppProps:
         result = self._values.get("cache_config")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApp.CacheConfigProperty]], result)
 
+    @builtins.property
+    def compute_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the IAM role for an SSR app.
+
+        The Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-app.html#cfn-amplify-app-computerolearn
+        '''
+        result = self._values.get("compute_role_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def custom_headers(self) -> typing.Optional[builtins.str]:
         '''The custom HTTP headers for an Amplify app.
@@ -1534,10 +1569,12 @@ class CfnBranch(
                 enable_basic_auth=False
             ),
             build_spec="buildSpec",
+            compute_role_arn="computeRoleArn",
             description="description",
             enable_auto_build=False,
             enable_performance_mode=False,
             enable_pull_request_preview=False,
+            enable_skew_protection=False,
             environment_variables=[amplify.CfnBranch.EnvironmentVariableProperty(
                 name="name",
                 value="value"
@@ -1562,10 +1599,12 @@ class CfnBranch(
         backend: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnBranch.BackendProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnBranch.BasicAuthConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         build_spec: typing.Optional[builtins.str] = None,
+        compute_role_arn: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
         enable_auto_build: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_performance_mode: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_pull_request_preview: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        enable_skew_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         environment_variables: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnBranch.EnvironmentVariableProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         framework: typing.Optional[builtins.str] = None,
         pull_request_environment_name: typing.Optional[builtins.str] = None,
@@ -1580,10 +1619,12 @@ class CfnBranch(
         :param backend: The backend for a ``Branch`` of an Amplify app. Use for a backend created from an AWS CloudFormation stack. This field is available to Amplify Gen 2 apps only. When you deploy an application with Amplify Gen 2, you provision the app's backend infrastructure using Typescript code.
         :param basic_auth_config: The basic authorization credentials for a branch of an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for the branch.
+        :param compute_role_arn: The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app. The SSR Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
         :param description: The description for the branch that is part of an Amplify app.
         :param enable_auto_build: Enables auto building for the branch.
         :param enable_performance_mode: Enables performance mode for the branch. Performance mode optimizes for faster hosting performance by keeping content cached at the edge for a longer interval. When performance mode is enabled, hosting configuration or code changes can take up to 10 minutes to roll out.
         :param enable_pull_request_preview: Specifies whether Amplify Hosting creates a preview for each pull request that is made for this branch. If this property is enabled, Amplify deploys your app to a unique preview URL after each pull request is opened. Development and QA teams can use this preview to test the pull request before it's merged into a production or integration branch. To provide backend support for your preview, Amplify automatically provisions a temporary backend environment that it deletes when the pull request is closed. If you want to specify a dedicated backend environment for your previews, use the ``PullRequestEnvironmentName`` property. For more information, see `Web Previews <https://docs.aws.amazon.com/amplify/latest/userguide/pr-previews.html>`_ in the *AWS Amplify Hosting User Guide* .
+        :param enable_skew_protection: Specifies whether the skew protection feature is enabled for the branch. Deployment skew protection is available to Amplify applications to eliminate version skew issues between client and servers in web applications. When you apply skew protection to a branch, you can ensure that your clients always interact with the correct version of server-side assets, regardless of when a deployment occurs. For more information about skew protection, see `Skew protection for Amplify deployments <https://docs.aws.amazon.com/amplify/latest/userguide/skew-protection.html>`_ in the *Amplify User Guide* .
         :param environment_variables: The environment variables for the branch.
         :param framework: The framework for the branch.
         :param pull_request_environment_name: If pull request previews are enabled for this branch, you can use this property to specify a dedicated backend environment for your previews. For example, you could specify an environment named ``prod`` , ``test`` , or ``dev`` that you initialized with the Amplify CLI and mapped to this branch. To enable pull request previews, set the ``EnablePullRequestPreview`` property to ``true`` . If you don't specify an environment, Amplify Hosting provides backend support for each preview by automatically provisioning a temporary backend environment. Amplify Hosting deletes this environment when the pull request is closed. For more information about creating backend environments, see `Feature Branch Deployments and Team Workflows <https://docs.aws.amazon.com/amplify/latest/userguide/multi-environments.html>`_ in the *AWS Amplify Hosting User Guide* .
@@ -1600,10 +1641,12 @@ class CfnBranch(
             backend=backend,
             basic_auth_config=basic_auth_config,
             build_spec=build_spec,
+            compute_role_arn=compute_role_arn,
             description=description,
             enable_auto_build=enable_auto_build,
             enable_performance_mode=enable_performance_mode,
             enable_pull_request_preview=enable_pull_request_preview,
+            enable_skew_protection=enable_skew_protection,
             environment_variables=environment_variables,
             framework=framework,
             pull_request_environment_name=pull_request_environment_name,
@@ -1750,6 +1793,19 @@ class CfnBranch(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "buildSpec", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="computeRoleArn")
+    def compute_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "computeRoleArn"))
+
+    @compute_role_arn.setter
+    def compute_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__50c29bd1063cbc0e1fa76d9721d838c59c46a84f1257f3ced31f3d727d6f9e36)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "computeRoleArn", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="description")
     def description(self) -> typing.Optional[builtins.str]:
@@ -1817,6 +1873,24 @@ class CfnBranch(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "enablePullRequestPreview", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="enableSkewProtection")
+    def enable_skew_protection(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''Specifies whether the skew protection feature is enabled for the branch.'''
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "enableSkewProtection"))
+
+    @enable_skew_protection.setter
+    def enable_skew_protection(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__432a4942ceb7d62c4b8b4afa118592daeb5e524bc422ad19ea2bc1d797199dac)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "enableSkewProtection", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="environmentVariables")
     def environment_variables(
@@ -2114,10 +2188,12 @@ class CfnBranch(
         "backend": "backend",
         "basic_auth_config": "basicAuthConfig",
         "build_spec": "buildSpec",
+        "compute_role_arn": "computeRoleArn",
         "description": "description",
         "enable_auto_build": "enableAutoBuild",
         "enable_performance_mode": "enablePerformanceMode",
         "enable_pull_request_preview": "enablePullRequestPreview",
+        "enable_skew_protection": "enableSkewProtection",
         "environment_variables": "environmentVariables",
         "framework": "framework",
         "pull_request_environment_name": "pullRequestEnvironmentName",
@@ -2134,10 +2210,12 @@ class CfnBranchProps:
         backend: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BackendProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         build_spec: typing.Optional[builtins.str] = None,
+        compute_role_arn: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
         enable_auto_build: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_performance_mode: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_pull_request_preview: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        enable_skew_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         environment_variables: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.EnvironmentVariableProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         framework: typing.Optional[builtins.str] = None,
         pull_request_environment_name: typing.Optional[builtins.str] = None,
@@ -2151,10 +2229,12 @@ class CfnBranchProps:
         :param backend: The backend for a ``Branch`` of an Amplify app. Use for a backend created from an AWS CloudFormation stack. This field is available to Amplify Gen 2 apps only. When you deploy an application with Amplify Gen 2, you provision the app's backend infrastructure using Typescript code.
         :param basic_auth_config: The basic authorization credentials for a branch of an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for the branch.
+        :param compute_role_arn: The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app. The SSR Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
         :param description: The description for the branch that is part of an Amplify app.
         :param enable_auto_build: Enables auto building for the branch.
         :param enable_performance_mode: Enables performance mode for the branch. Performance mode optimizes for faster hosting performance by keeping content cached at the edge for a longer interval. When performance mode is enabled, hosting configuration or code changes can take up to 10 minutes to roll out.
         :param enable_pull_request_preview: Specifies whether Amplify Hosting creates a preview for each pull request that is made for this branch. If this property is enabled, Amplify deploys your app to a unique preview URL after each pull request is opened. Development and QA teams can use this preview to test the pull request before it's merged into a production or integration branch. To provide backend support for your preview, Amplify automatically provisions a temporary backend environment that it deletes when the pull request is closed. If you want to specify a dedicated backend environment for your previews, use the ``PullRequestEnvironmentName`` property. For more information, see `Web Previews <https://docs.aws.amazon.com/amplify/latest/userguide/pr-previews.html>`_ in the *AWS Amplify Hosting User Guide* .
+        :param enable_skew_protection: Specifies whether the skew protection feature is enabled for the branch. Deployment skew protection is available to Amplify applications to eliminate version skew issues between client and servers in web applications. When you apply skew protection to a branch, you can ensure that your clients always interact with the correct version of server-side assets, regardless of when a deployment occurs. For more information about skew protection, see `Skew protection for Amplify deployments <https://docs.aws.amazon.com/amplify/latest/userguide/skew-protection.html>`_ in the *Amplify User Guide* .
         :param environment_variables: The environment variables for the branch.
         :param framework: The framework for the branch.
         :param pull_request_environment_name: If pull request previews are enabled for this branch, you can use this property to specify a dedicated backend environment for your previews. For example, you could specify an environment named ``prod`` , ``test`` , or ``dev`` that you initialized with the Amplify CLI and mapped to this branch. To enable pull request previews, set the ``EnablePullRequestPreview`` property to ``true`` . If you don't specify an environment, Amplify Hosting provides backend support for each preview by automatically provisioning a temporary backend environment. Amplify Hosting deletes this environment when the pull request is closed. For more information about creating backend environments, see `Feature Branch Deployments and Team Workflows <https://docs.aws.amazon.com/amplify/latest/userguide/multi-environments.html>`_ in the *AWS Amplify Hosting User Guide* .
@@ -2186,10 +2266,12 @@ class CfnBranchProps:
                     enable_basic_auth=False
                 ),
                 build_spec="buildSpec",
+                compute_role_arn="computeRoleArn",
                 description="description",
                 enable_auto_build=False,
                 enable_performance_mode=False,
                 enable_pull_request_preview=False,
+                enable_skew_protection=False,
                 environment_variables=[amplify.CfnBranch.EnvironmentVariableProperty(
                     name="name",
                     value="value"
@@ -2210,10 +2292,12 @@ class CfnBranchProps:
             check_type(argname="argument backend", value=backend, expected_type=type_hints["backend"])
             check_type(argname="argument basic_auth_config", value=basic_auth_config, expected_type=type_hints["basic_auth_config"])
             check_type(argname="argument build_spec", value=build_spec, expected_type=type_hints["build_spec"])
+            check_type(argname="argument compute_role_arn", value=compute_role_arn, expected_type=type_hints["compute_role_arn"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
             check_type(argname="argument enable_auto_build", value=enable_auto_build, expected_type=type_hints["enable_auto_build"])
             check_type(argname="argument enable_performance_mode", value=enable_performance_mode, expected_type=type_hints["enable_performance_mode"])
             check_type(argname="argument enable_pull_request_preview", value=enable_pull_request_preview, expected_type=type_hints["enable_pull_request_preview"])
+            check_type(argname="argument enable_skew_protection", value=enable_skew_protection, expected_type=type_hints["enable_skew_protection"])
             check_type(argname="argument environment_variables", value=environment_variables, expected_type=type_hints["environment_variables"])
             check_type(argname="argument framework", value=framework, expected_type=type_hints["framework"])
             check_type(argname="argument pull_request_environment_name", value=pull_request_environment_name, expected_type=type_hints["pull_request_environment_name"])
@@ -2229,6 +2313,8 @@ class CfnBranchProps:
             self._values["basic_auth_config"] = basic_auth_config
         if build_spec is not None:
             self._values["build_spec"] = build_spec
+        if compute_role_arn is not None:
+            self._values["compute_role_arn"] = compute_role_arn
         if description is not None:
             self._values["description"] = description
         if enable_auto_build is not None:
@@ -2237,6 +2323,8 @@ class CfnBranchProps:
             self._values["enable_performance_mode"] = enable_performance_mode
         if enable_pull_request_preview is not None:
             self._values["enable_pull_request_preview"] = enable_pull_request_preview
+        if enable_skew_protection is not None:
+            self._values["enable_skew_protection"] = enable_skew_protection
         if environment_variables is not None:
             self._values["environment_variables"] = environment_variables
         if framework is not None:
@@ -2303,6 +2391,17 @@ class CfnBranchProps:
         result = self._values.get("build_spec")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def compute_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app.
+
+        The SSR Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.html#cfn-amplify-branch-computerolearn
+        '''
+        result = self._values.get("compute_role_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def description(self) -> typing.Optional[builtins.str]:
         '''The description for the branch that is part of an Amplify app.
@@ -2353,6 +2452,19 @@ class CfnBranchProps:
         result = self._values.get("enable_pull_request_preview")
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
+    @builtins.property
+    def enable_skew_protection(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''Specifies whether the skew protection feature is enabled for the branch.
+
+        Deployment skew protection is available to Amplify applications to eliminate version skew issues between client and servers in web applications. When you apply skew protection to a branch, you can ensure that your clients always interact with the correct version of server-side assets, regardless of when a deployment occurs. For more information about skew protection, see `Skew protection for Amplify deployments <https://docs.aws.amazon.com/amplify/latest/userguide/skew-protection.html>`_ in the *Amplify User Guide* .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.html#cfn-amplify-branch-enableskewprotection
+        '''
+        result = self._values.get("enable_skew_protection")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
     @builtins.property
     def environment_variables(
         self,
@@ -3187,6 +3299,7 @@ def _typecheckingstub__8dc8d772047a068d22a76d907b344356448c6a26d23e419ed69cc622d
     basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     build_spec: typing.Optional[builtins.str] = None,
     cache_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CacheConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    compute_role_arn: typing.Optional[builtins.str] = None,
     custom_headers: typing.Optional[builtins.str] = None,
     custom_rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CustomRuleProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     description: typing.Optional[builtins.str] = None,
@@ -3249,6 +3362,12 @@ def _typecheckingstub__1e0b47cf174f09e141957cc84bc0f442ba70bbfa96a59aad74b66dab1
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__d55f0c87bc50af5a1e7d9bf3f8fca41d5e5a849cb69dbf43ca51f24872058be8(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__623b6d97b6b1967c76a0782c9ba61b276ee5ff570dad9ab0003baf0626317805(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -3368,6 +3487,7 @@ def _typecheckingstub__cfa8f09e6d42b5d6d1122d3e9214ec780302e9c3fda48d7ca044dd076
     basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     build_spec: typing.Optional[builtins.str] = None,
     cache_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CacheConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    compute_role_arn: typing.Optional[builtins.str] = None,
     custom_headers: typing.Optional[builtins.str] = None,
     custom_rules: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApp.CustomRuleProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     description: typing.Optional[builtins.str] = None,
@@ -3391,10 +3511,12 @@ def _typecheckingstub__859cd0a15aef1449f80ffe32589fdb895b13f3510c6905791c3eea033
     backend: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BackendProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     build_spec: typing.Optional[builtins.str] = None,
+    compute_role_arn: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
     enable_auto_build: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_performance_mode: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_pull_request_preview: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    enable_skew_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     environment_variables: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.EnvironmentVariableProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     framework: typing.Optional[builtins.str] = None,
     pull_request_environment_name: typing.Optional[builtins.str] = None,
@@ -3446,6 +3568,12 @@ def _typecheckingstub__ae472a508b2b0e4a122ae35d93c8733d00df3680d8823bd2ad857acc2
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__50c29bd1063cbc0e1fa76d9721d838c59c46a84f1257f3ced31f3d727d6f9e36(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__a71cabeaa4605532f47314006f7075821b92f53c6bdb0be7bbb3c0f09ff70ea2(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -3470,6 +3598,12 @@ def _typecheckingstub__6c8216d12e1375a7227a3e83088f390c0e7d3575f804bea24c90bc6e4
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__432a4942ceb7d62c4b8b4afa118592daeb5e524bc422ad19ea2bc1d797199dac(
+    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__8ff5456e47cd7b5d2fb38bcf736c28804423dcef024c2d036243fc28345dd532(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnBranch.EnvironmentVariableProperty]]]],
 ) -> None:
@@ -3531,10 +3665,12 @@ def _typecheckingstub__57c0d80a85d344dca51e3abe3e5e1ee9fff906ef48fa3809bec9a68a3
     backend: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BackendProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     basic_auth_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.BasicAuthConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     build_spec: typing.Optional[builtins.str] = None,
+    compute_role_arn: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
     enable_auto_build: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_performance_mode: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_pull_request_preview: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    enable_skew_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     environment_variables: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBranch.EnvironmentVariableProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     framework: typing.Optional[builtins.str] = None,
     pull_request_environment_name: typing.Optional[builtins.str] = None,