aws-cdk-lib 2.186.0__py3-none-any.whl → 2.188.0__py3-none-any.whl

aws_cdk/cloud_assembly_schema/__init__.py

@@ -604,7 +604,10 @@ class AssetManifest:
                             executable=["executable"],
                             network_mode="networkMode",
                             platform="platform"
-                        )
+                        ),
+            
+                        # the properties below are optional
+                        display_name="displayName"
                     )
                 },
                 files={
@@ -627,7 +630,10 @@ class AssetManifest:
                             executable=["executable"],
                             packaging=cloud_assembly_schema.FileAssetPackaging.FILE,
                             path="path"
-                        )
+                        ),
+            
+                        # the properties below are optional
+                        display_name="displayName"
                     )
                 }
             )
@@ -4132,7 +4138,11 @@ class DockerCacheOption:
 @jsii.data_type(
     jsii_type="aws-cdk-lib.cloud_assembly_schema.DockerImageAsset",
     jsii_struct_bases=[],
-    name_mapping={"destinations": "destinations", "source": "source"},
+    name_mapping={
+        "destinations": "destinations",
+        "source": "source",
+        "display_name": "displayName",
+    },
 )
 class DockerImageAsset:
     def __init__(
@@ -4140,11 +4150,13 @@ class DockerImageAsset:
         *,
         destinations: typing.Mapping[builtins.str, typing.Union["DockerImageDestination", typing.Dict[builtins.str, typing.Any]]],
         source: typing.Union["DockerImageSource", typing.Dict[builtins.str, typing.Any]],
+        display_name: typing.Optional[builtins.str] = None,
     ) -> None:
         '''A file asset.
 
-        :param destinations: Destinations for this file asset.
-        :param source: Source description for file assets.
+        :param destinations: Destinations for this container asset.
+        :param source: Source description for container assets.
+        :param display_name: A display name for this asset. Default: - The identifier will be used as the display name
 
         :exampleMetadata: fixture=_generated
 
@@ -4203,7 +4215,10 @@ class DockerImageAsset:
                     executable=["executable"],
                     network_mode="networkMode",
                     platform="platform"
-                )
+                ),
+            
+                # the properties below are optional
+                display_name="displayName"
             )
         '''
         if isinstance(source, dict):
@@ -4212,25 +4227,37 @@ class DockerImageAsset:
             type_hints = typing.get_type_hints(_typecheckingstub__18a2a085c0212f98043b6dccf8c92e1bdc5d9e20c7266a3be7bc908b8b771cd3)
             check_type(argname="argument destinations", value=destinations, expected_type=type_hints["destinations"])
             check_type(argname="argument source", value=source, expected_type=type_hints["source"])
+            check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "destinations": destinations,
             "source": source,
         }
+        if display_name is not None:
+            self._values["display_name"] = display_name
 
     @builtins.property
     def destinations(self) -> typing.Mapping[builtins.str, "DockerImageDestination"]:
-        '''Destinations for this file asset.'''
+        '''Destinations for this container asset.'''
         result = self._values.get("destinations")
         assert result is not None, "Required property 'destinations' is missing"
         return typing.cast(typing.Mapping[builtins.str, "DockerImageDestination"], result)
 
     @builtins.property
     def source(self) -> "DockerImageSource":
-        '''Source description for file assets.'''
+        '''Source description for container assets.'''
         result = self._values.get("source")
         assert result is not None, "Required property 'source' is missing"
         return typing.cast("DockerImageSource", result)
 
+    @builtins.property
+    def display_name(self) -> typing.Optional[builtins.str]:
+        '''A display name for this asset.
+
+        :default: - The identifier will be used as the display name
+        '''
+        result = self._values.get("display_name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -4828,7 +4855,11 @@ class EndpointServiceAvailabilityZonesContextQuery(ContextLookupRoleOptions):
 @jsii.data_type(
     jsii_type="aws-cdk-lib.cloud_assembly_schema.FileAsset",
     jsii_struct_bases=[],
-    name_mapping={"destinations": "destinations", "source": "source"},
+    name_mapping={
+        "destinations": "destinations",
+        "source": "source",
+        "display_name": "displayName",
+    },
 )
 class FileAsset:
     def __init__(
@@ -4836,11 +4867,13 @@ class FileAsset:
         *,
         destinations: typing.Mapping[builtins.str, typing.Union["FileDestination", typing.Dict[builtins.str, typing.Any]]],
         source: typing.Union["FileSource", typing.Dict[builtins.str, typing.Any]],
+        display_name: typing.Optional[builtins.str] = None,
     ) -> None:
         '''A file asset.
 
         :param destinations: Destinations for this file asset.
         :param source: Source description for file assets.
+        :param display_name: A display name for this asset. Default: - The identifier will be used as the display name
 
         :exampleMetadata: fixture=_generated
 
@@ -4871,7 +4904,10 @@ class FileAsset:
                     executable=["executable"],
                     packaging=cloud_assembly_schema.FileAssetPackaging.FILE,
                     path="path"
-                )
+                ),
+            
+                # the properties below are optional
+                display_name="displayName"
             )
         '''
         if isinstance(source, dict):
@@ -4880,10 +4916,13 @@ class FileAsset:
             type_hints = typing.get_type_hints(_typecheckingstub__a482db8874b6a4a96f9be44511cc506737e4b70dff2a99f6ee0f1566bc96c3d8)
             check_type(argname="argument destinations", value=destinations, expected_type=type_hints["destinations"])
             check_type(argname="argument source", value=source, expected_type=type_hints["source"])
+            check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "destinations": destinations,
             "source": source,
         }
+        if display_name is not None:
+            self._values["display_name"] = display_name
 
     @builtins.property
     def destinations(self) -> typing.Mapping[builtins.str, "FileDestination"]:
@@ -4899,6 +4938,15 @@ class FileAsset:
         assert result is not None, "Required property 'source' is missing"
         return typing.cast("FileSource", result)
 
+    @builtins.property
+    def display_name(self) -> typing.Optional[builtins.str]:
+        '''A display name for this asset.
+
+        :default: - The identifier will be used as the display name
+        '''
+        result = self._values.get("display_name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -9192,6 +9240,7 @@ def _typecheckingstub__18a2a085c0212f98043b6dccf8c92e1bdc5d9e20c7266a3be7bc908b8
     *,
     destinations: typing.Mapping[builtins.str, typing.Union[DockerImageDestination, typing.Dict[builtins.str, typing.Any]]],
     source: typing.Union[DockerImageSource, typing.Dict[builtins.str, typing.Any]],
+    display_name: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -9243,6 +9292,7 @@ def _typecheckingstub__a482db8874b6a4a96f9be44511cc506737e4b70dff2a99f6ee0f1566b
     *,
     destinations: typing.Mapping[builtins.str, typing.Union[FileDestination, typing.Dict[builtins.str, typing.Any]]],
     source: typing.Union[FileSource, typing.Dict[builtins.str, typing.Any]],
+    display_name: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass

aws_cdk/cx_api/__init__.py

@@ -616,16 +616,19 @@ When this feature flag is enabled, CDK expands the scope of usage data collectio
 
 * `@aws-cdk/aws-lambda:createNewPoliciesWithAddToRolePolicy`
 
-When this feature flag is enabled, Lambda will create new inline policies with AddToRolePolicy.
+[Deprecated default feature] When this feature flag is enabled, Lambda will create new inline policies with AddToRolePolicy.
 The purpose of this is to prevent lambda from creating a dependency on the Default Policy Statement.
 This solves an issue where a circular dependency could occur if adding lambda to something like a Cognito Trigger, then adding the User Pool to the lambda execution role permissions.
+However in the current implementation, we have removed a dependency of the lambda function on the policy. In addition to this, a Role will be attached to the Policy instead of an inline policy being attached to the role.
+This will create a data race condition in the CloudFormation template because the creation of the Lambda function no longer waits for the policy to be created. Having said that, we are not deprecating the feature (we are defaulting the feature flag to false for new stacks) since this feature can still be used to get around the circular dependency issue (issue-7016) particularly in cases where the lambda resource creation doesnt need to depend on the policy resource creation.
+We recommend to unset the feature flag if already set which will restore the original behavior.
 
 *cdk.json*
 
 ```json
 {
   "context": {
-    "@aws-cdk/aws-lambda:createNewPoliciesWithAddToRolePolicy": true
+    "@aws-cdk/aws-lambda:createNewPoliciesWithAddToRolePolicy": false
   }
 }
 ```
@@ -682,6 +685,39 @@ When this flag is disabled:
   }
 }
 ```
+
+* `@aws-cdk/aws-dynamodb:retainTableReplica`
+
+Currently, table replica will always be deleted when stack deletes regardless of source table's deletion policy.
+When enabled, table replica will be default to the removal policy of source table unless specified otherwise.
+
+*cdk.json*
+
+```json
+{
+  "context": {
+    "@aws-cdk/aws-dynamodb:retainTableReplica": true
+  }
+}
+```
+
+* `@aws-cdk/cognito:logUserPoolClientSecretValue`
+
+When this feature flag is enabled, the SDK API call response to desribe user pool client values will be logged in the custom
+resource lambda function logs.
+
+When this feature flag is disabled, the SDK API call response to describe user pool client values will not be logged in the custom
+resource lambda function logs.
+
+*cdk.json*
+
+```json
+{
+  "context": {
+    "@aws-cdk/cognito:logUserPoolClientSecretValue": true
+  }
+}
+```
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)

aws_cdk/pipelines/__init__.py

@@ -897,6 +897,12 @@ Note that if you provide an existing pipeline, you cannot provide values for
 `pipelineName`, `crossAccountKeys`, `reuseCrossRegionSupportStacks`, or `role`
 because those values are passed in directly to the underlying `codepipeline.Pipeline`.
 
+### Use pipeline service role as default action role in pipeline
+
+By default CDK automatically creates roles for each action (`CodeBuildStep`, etc).
+If you prefer to use the pipeline service role as default instead, set the `usePipelineRoleForActions` property.
+This will tell CDK to default to the pipeline service role in AWS CodePipeline if no action role is provided.
+
 ## Using Docker in the pipeline
 
 Docker can be used in 3 different places in the pipeline:
@@ -2387,6 +2393,7 @@ class CodePipelineActionFactoryResult:
         "self_mutation_code_build_defaults": "selfMutationCodeBuildDefaults",
         "synth_code_build_defaults": "synthCodeBuildDefaults",
         "use_change_sets": "useChangeSets",
+        "use_pipeline_role_for_actions": "usePipelineRoleForActions",
     },
 )
 class CodePipelineProps:
@@ -2413,6 +2420,7 @@ class CodePipelineProps:
         self_mutation_code_build_defaults: typing.Optional[typing.Union[CodeBuildOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         synth_code_build_defaults: typing.Optional[typing.Union[CodeBuildOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         use_change_sets: typing.Optional[builtins.bool] = None,
+        use_pipeline_role_for_actions: typing.Optional[builtins.bool] = None,
     ) -> None:
         '''Properties for a ``CodePipeline``.
 
@@ -2436,6 +2444,7 @@ class CodePipelineProps:
         :param self_mutation_code_build_defaults: Additional customizations to apply to the self mutation CodeBuild projects. Default: - Only ``codeBuildDefaults`` are applied
         :param synth_code_build_defaults: Additional customizations to apply to the synthesize CodeBuild projects. Default: - Only ``codeBuildDefaults`` are applied
         :param use_change_sets: Deploy every stack by creating a change set and executing it. When enabled, creates a "Prepare" and "Execute" action for each stack. Disable to deploy the stack in one pipeline action. Default: true
+        :param use_pipeline_role_for_actions: Use pipeline service role for actions if no action role configured. Default: - false
 
         :exampleMetadata: infused
 
@@ -2484,6 +2493,7 @@ class CodePipelineProps:
             check_type(argname="argument self_mutation_code_build_defaults", value=self_mutation_code_build_defaults, expected_type=type_hints["self_mutation_code_build_defaults"])
             check_type(argname="argument synth_code_build_defaults", value=synth_code_build_defaults, expected_type=type_hints["synth_code_build_defaults"])
             check_type(argname="argument use_change_sets", value=use_change_sets, expected_type=type_hints["use_change_sets"])
+            check_type(argname="argument use_pipeline_role_for_actions", value=use_pipeline_role_for_actions, expected_type=type_hints["use_pipeline_role_for_actions"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "synth": synth,
         }
@@ -2525,6 +2535,8 @@ class CodePipelineProps:
             self._values["synth_code_build_defaults"] = synth_code_build_defaults
         if use_change_sets is not None:
             self._values["use_change_sets"] = use_change_sets
+        if use_pipeline_role_for_actions is not None:
+            self._values["use_pipeline_role_for_actions"] = use_pipeline_role_for_actions
 
     @builtins.property
     def synth(self) -> "IFileSetProducer":
@@ -2793,6 +2805,15 @@ class CodePipelineProps:
         result = self._values.get("use_change_sets")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def use_pipeline_role_for_actions(self) -> typing.Optional[builtins.bool]:
+        '''Use pipeline service role for actions if no action role configured.
+
+        :default: - false
+        '''
+        result = self._values.get("use_pipeline_role_for_actions")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -4608,6 +4629,7 @@ class ShellStepProps:
         "asset_type": "assetType",
         "is_template": "isTemplate",
         "asset_publishing_role_arn": "assetPublishingRoleArn",
+        "display_name": "displayName",
     },
 )
 class StackAsset:
@@ -4620,6 +4642,7 @@ class StackAsset:
         asset_type: AssetType,
         is_template: builtins.bool,
         asset_publishing_role_arn: typing.Optional[builtins.str] = None,
+        display_name: typing.Optional[builtins.str] = None,
     ) -> None:
         '''An asset used by a Stack.
 
@@ -4629,6 +4652,7 @@ class StackAsset:
         :param asset_type: Type of asset to publish.
         :param is_template: Does this asset represent the CloudFormation template for the stack. Default: false
         :param asset_publishing_role_arn: Role ARN to assume to publish. Default: - No need to assume any role
+        :param display_name: The display name of this asset. Default: - Use some generated string as display name
 
         :exampleMetadata: fixture=_generated
 
@@ -4646,7 +4670,8 @@ class StackAsset:
                 is_template=False,
             
                 # the properties below are optional
-                asset_publishing_role_arn="assetPublishingRoleArn"
+                asset_publishing_role_arn="assetPublishingRoleArn",
+                display_name="displayName"
             )
         '''
         if __debug__:
@@ -4657,6 +4682,7 @@ class StackAsset:
             check_type(argname="argument asset_type", value=asset_type, expected_type=type_hints["asset_type"])
             check_type(argname="argument is_template", value=is_template, expected_type=type_hints["is_template"])
             check_type(argname="argument asset_publishing_role_arn", value=asset_publishing_role_arn, expected_type=type_hints["asset_publishing_role_arn"])
+            check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "asset_id": asset_id,
             "asset_manifest_path": asset_manifest_path,
@@ -4666,6 +4692,8 @@ class StackAsset:
         }
         if asset_publishing_role_arn is not None:
             self._values["asset_publishing_role_arn"] = asset_publishing_role_arn
+        if display_name is not None:
+            self._values["display_name"] = display_name
 
     @builtins.property
     def asset_id(self) -> builtins.str:
@@ -4718,6 +4746,15 @@ class StackAsset:
         result = self._values.get("asset_publishing_role_arn")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def display_name(self) -> typing.Optional[builtins.str]:
+        '''The display name of this asset.
+
+        :default: - Use some generated string as display name
+        '''
+        result = self._values.get("display_name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -4992,7 +5029,8 @@ class StackDeploymentProps:
                     is_template=False,
             
                     # the properties below are optional
-                    asset_publishing_role_arn="assetPublishingRoleArn"
+                    asset_publishing_role_arn="assetPublishingRoleArn",
+                    display_name="displayName"
                 )],
                 assume_role_arn="assumeRoleArn",
                 execution_role_arn="executionRoleArn",
@@ -6541,6 +6579,7 @@ class CodePipeline(
         self_mutation_code_build_defaults: typing.Optional[typing.Union[CodeBuildOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         synth_code_build_defaults: typing.Optional[typing.Union[CodeBuildOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         use_change_sets: typing.Optional[builtins.bool] = None,
+        use_pipeline_role_for_actions: typing.Optional[builtins.bool] = None,
     ) -> None:
         '''
         :param scope: -
@@ -6565,6 +6604,7 @@ class CodePipeline(
         :param self_mutation_code_build_defaults: Additional customizations to apply to the self mutation CodeBuild projects. Default: - Only ``codeBuildDefaults`` are applied
         :param synth_code_build_defaults: Additional customizations to apply to the synthesize CodeBuild projects. Default: - Only ``codeBuildDefaults`` are applied
         :param use_change_sets: Deploy every stack by creating a change set and executing it. When enabled, creates a "Prepare" and "Execute" action for each stack. Disable to deploy the stack in one pipeline action. Default: true
+        :param use_pipeline_role_for_actions: Use pipeline service role for actions if no action role configured. Default: - false
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7b4b4a0bcbd5fab3e4b78aa07ff9504469ae96c16799604ca3345bcb94480fc3)
@@ -6591,6 +6631,7 @@ class CodePipeline(
             self_mutation_code_build_defaults=self_mutation_code_build_defaults,
             synth_code_build_defaults=synth_code_build_defaults,
             use_change_sets=use_change_sets,
+            use_pipeline_role_for_actions=use_pipeline_role_for_actions,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -6634,6 +6675,12 @@ class CodePipeline(
         '''
         return typing.cast(_IProject_aafae30a, jsii.get(self, "synthProject"))
 
+    @builtins.property
+    @jsii.member(jsii_name="usePipelineRoleForActions")
+    def use_pipeline_role_for_actions(self) -> builtins.bool:
+        '''Allow pipeline service role used for actions if no action role configured instead of creating a new role for each action.'''
+        return typing.cast(builtins.bool, jsii.get(self, "usePipelineRoleForActions"))
+
 
 @jsii.implements(ICodePipelineActionFactory)
 class CodePipelineSource(
@@ -7903,6 +7950,7 @@ def _typecheckingstub__c46bc21ca63efb27c935c31017ebbc8c85b3b93ae1798e54892dd3eae
     self_mutation_code_build_defaults: typing.Optional[typing.Union[CodeBuildOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     synth_code_build_defaults: typing.Optional[typing.Union[CodeBuildOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     use_change_sets: typing.Optional[builtins.bool] = None,
+    use_pipeline_role_for_actions: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -8124,6 +8172,7 @@ def _typecheckingstub__0b53846c07332af34759787d6881e8bb143a9ccedff4818aa79091268
     asset_type: AssetType,
     is_template: builtins.bool,
     asset_publishing_role_arn: typing.Optional[builtins.str] = None,
+    display_name: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -8365,6 +8414,7 @@ def _typecheckingstub__7b4b4a0bcbd5fab3e4b78aa07ff9504469ae96c16799604ca3345bcb9
     self_mutation_code_build_defaults: typing.Optional[typing.Union[CodeBuildOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     synth_code_build_defaults: typing.Optional[typing.Union[CodeBuildOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     use_change_sets: typing.Optional[builtins.bool] = None,
+    use_pipeline_role_for_actions: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass

{aws_cdk_lib-2.186.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: aws-cdk-lib
-Version: 2.186.0
+Version: 2.188.0
 Summary: Version 2 of the AWS Cloud Development Kit library
 Home-page: https://github.com/aws/aws-cdk
 Author: Amazon Web Services
@@ -20,11 +20,11 @@ Requires-Python: ~=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE
 License-File: NOTICE
-Requires-Dist: aws-cdk.asset-awscli-v1<3.0.0,>=2.2.227
+Requires-Dist: aws-cdk.asset-awscli-v1<3.0.0,>=2.2.229
 Requires-Dist: aws-cdk.asset-node-proxy-agent-v6<3.0.0,>=2.1.0
-Requires-Dist: aws-cdk.cloud-assembly-schema<41.0.0,>=40.7.0
+Requires-Dist: aws-cdk.cloud-assembly-schema<42.0.0,>=41.0.0
 Requires-Dist: constructs<11.0.0,>=10.0.0
-Requires-Dist: jsii<2.0.0,>=1.109.0
+Requires-Dist: jsii<2.0.0,>=1.110.0
 Requires-Dist: publication>=0.0.3
 Requires-Dist: typeguard<4.3.0,>=2.13.3