aws-cdk-lib 2.187.0__py3-none-any.whl → 2.188.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of aws-cdk-lib might be problematic. Click here for more details.
- aws_cdk/__init__.py +22 -3
- aws_cdk/_jsii/__init__.py +1 -1
- aws_cdk/_jsii/{aws-cdk-lib@2.187.0.jsii.tgz → aws-cdk-lib@2.188.0.jsii.tgz} +0 -0
- aws_cdk/aws_amplify/__init__.py +21 -9
- aws_cdk/aws_apigateway/__init__.py +25 -19
- aws_cdk/aws_apigatewayv2/__init__.py +88 -0
- aws_cdk/aws_appconfig/__init__.py +30 -14
- aws_cdk/aws_arczonalshift/__init__.py +4 -4
- aws_cdk/aws_bedrock/__init__.py +605 -10
- aws_cdk/aws_budgets/__init__.py +8 -8
- aws_cdk/aws_cassandra/__init__.py +3 -1
- aws_cdk/aws_ce/__init__.py +2 -2
- aws_cdk/aws_cloudformation/__init__.py +3 -3
- aws_cdk/aws_codebuild/__init__.py +23 -1
- aws_cdk/aws_codepipeline/__init__.py +47 -32
- aws_cdk/aws_codepipeline_actions/__init__.py +2786 -1042
- aws_cdk/aws_codestarnotifications/__init__.py +16 -16
- aws_cdk/aws_cognito/__init__.py +8 -2
- aws_cdk/aws_ec2/__init__.py +2091 -227
- aws_cdk/aws_eks/__init__.py +112 -10
- aws_cdk/aws_events_targets/__init__.py +136 -0
- aws_cdk/aws_gamelift/__init__.py +5 -5
- aws_cdk/aws_iam/__init__.py +6 -4
- aws_cdk/aws_identitystore/__init__.py +15 -13
- aws_cdk/aws_kinesisfirehose/__init__.py +38 -0
- aws_cdk/aws_lambda_event_sources/__init__.py +22 -22
- aws_cdk/aws_lex/__init__.py +21 -17
- aws_cdk/aws_logs/__init__.py +18 -0
- aws_cdk/aws_logs_destinations/__init__.py +146 -0
- aws_cdk/aws_notifications/__init__.py +4 -4
- aws_cdk/aws_omics/__init__.py +9 -1
- aws_cdk/aws_opensearchserverless/__init__.py +31 -23
- aws_cdk/aws_organizations/__init__.py +1 -1
- aws_cdk/aws_pcaconnectorad/__init__.py +3 -2
- aws_cdk/aws_quicksight/__init__.py +35 -22
- aws_cdk/aws_rds/__init__.py +84 -0
- aws_cdk/aws_route53/__init__.py +3 -3
- aws_cdk/aws_route53recoverycontrol/__init__.py +4 -6
- aws_cdk/aws_rum/__init__.py +13 -10
- aws_cdk/aws_s3/__init__.py +3 -6
- aws_cdk/aws_sagemaker/__init__.py +41 -0
- aws_cdk/aws_ssmincidents/__init__.py +10 -10
- aws_cdk/aws_systemsmanagersap/__init__.py +17 -7
- aws_cdk/aws_transfer/__init__.py +19 -10
- aws_cdk/aws_wafv2/__init__.py +80 -35
- aws_cdk/cx_api/__init__.py +23 -2
- aws_cdk/pipelines/__init__.py +32 -0
- {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/METADATA +1 -1
- {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/RECORD +53 -53
- {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/LICENSE +0 -0
- {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/NOTICE +0 -0
- {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/WHEEL +0 -0
- {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/top_level.txt +0 -0
|
@@ -564,7 +564,7 @@ class CfnResponsePlan(
|
|
|
564
564
|
:param incident_template: Details used to create an incident when using this response plan.
|
|
565
565
|
:param name: The name of the response plan.
|
|
566
566
|
:param actions: The actions that the response plan starts at the beginning of an incident.
|
|
567
|
-
:param chat_channel: The
|
|
567
|
+
:param chat_channel: The chat channel used for collaboration during an incident.
|
|
568
568
|
:param display_name: The human readable name of the response plan.
|
|
569
569
|
:param engagements: The Amazon Resource Name (ARN) for the contacts and escalation plans that the response plan engages during an incident.
|
|
570
570
|
:param integrations: Information about third-party services integrated into the response plan.
|
|
@@ -691,7 +691,7 @@ class CfnResponsePlan(
|
|
|
691
691
|
def chat_channel(
|
|
692
692
|
self,
|
|
693
693
|
) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnResponsePlan.ChatChannelProperty"]]:
|
|
694
|
-
'''The
|
|
694
|
+
'''The chat channel used for collaboration during an incident.'''
|
|
695
695
|
return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnResponsePlan.ChatChannelProperty"]], jsii.get(self, "chatChannel"))
|
|
696
696
|
|
|
697
697
|
@chat_channel.setter
|
|
@@ -846,9 +846,9 @@ class CfnResponsePlan(
|
|
|
846
846
|
*,
|
|
847
847
|
chatbot_sns: typing.Optional[typing.Sequence[builtins.str]] = None,
|
|
848
848
|
) -> None:
|
|
849
|
-
'''The
|
|
849
|
+
'''The chat channel used for collaboration during an incident.
|
|
850
850
|
|
|
851
|
-
:param chatbot_sns: The Amazon SNS targets that
|
|
851
|
+
:param chatbot_sns: The Amazon SNS targets that uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel by using the Amazon SNS topics
|
|
852
852
|
|
|
853
853
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssmincidents-responseplan-chatchannel.html
|
|
854
854
|
:exampleMetadata: fixture=_generated
|
|
@@ -872,7 +872,7 @@ class CfnResponsePlan(
|
|
|
872
872
|
|
|
873
873
|
@builtins.property
|
|
874
874
|
def chatbot_sns(self) -> typing.Optional[typing.List[builtins.str]]:
|
|
875
|
-
'''The Amazon SNS targets that
|
|
875
|
+
'''The Amazon SNS targets that uses to notify the chat channel of updates to an incident.
|
|
876
876
|
|
|
877
877
|
You can also make updates to the incident through the chat channel by using the Amazon SNS topics
|
|
878
878
|
|
|
@@ -1065,7 +1065,7 @@ class CfnResponsePlan(
|
|
|
1065
1065
|
:param title: The title of the incident is a brief and easily recognizable.
|
|
1066
1066
|
:param dedupe_string: Used to create only one incident record for an incident.
|
|
1067
1067
|
:param incident_tags: Tags to assign to the template. When the ``StartIncident`` API action is called, Incident Manager assigns the tags specified in the template to the incident.
|
|
1068
|
-
:param notification_targets: The Amazon Simple Notification Service ( Amazon SNS ) targets that
|
|
1068
|
+
:param notification_targets: The Amazon Simple Notification Service ( Amazon SNS ) targets that uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel using the Amazon SNS topics.
|
|
1069
1069
|
:param summary: The summary describes what has happened during the incident.
|
|
1070
1070
|
|
|
1071
1071
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssmincidents-responseplan-incidenttemplate.html
|
|
@@ -1167,7 +1167,7 @@ class CfnResponsePlan(
|
|
|
1167
1167
|
def notification_targets(
|
|
1168
1168
|
self,
|
|
1169
1169
|
) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnResponsePlan.NotificationTargetItemProperty"]]]]:
|
|
1170
|
-
'''The Amazon Simple Notification Service ( Amazon SNS ) targets that
|
|
1170
|
+
'''The Amazon Simple Notification Service ( Amazon SNS ) targets that uses to notify the chat channel of updates to an incident.
|
|
1171
1171
|
|
|
1172
1172
|
You can also make updates to the incident through the chat channel using the Amazon SNS topics.
|
|
1173
1173
|
|
|
@@ -1271,7 +1271,7 @@ class CfnResponsePlan(
|
|
|
1271
1271
|
*,
|
|
1272
1272
|
sns_topic_arn: typing.Optional[builtins.str] = None,
|
|
1273
1273
|
) -> None:
|
|
1274
|
-
'''The Amazon SNS topic that's used by
|
|
1274
|
+
'''The Amazon SNS topic that's used by to notify the incidents chat channel.
|
|
1275
1275
|
|
|
1276
1276
|
:param sns_topic_arn: The Amazon Resource Name (ARN) of the Amazon SNS topic.
|
|
1277
1277
|
|
|
@@ -1719,7 +1719,7 @@ class CfnResponsePlanProps:
|
|
|
1719
1719
|
:param incident_template: Details used to create an incident when using this response plan.
|
|
1720
1720
|
:param name: The name of the response plan.
|
|
1721
1721
|
:param actions: The actions that the response plan starts at the beginning of an incident.
|
|
1722
|
-
:param chat_channel: The
|
|
1722
|
+
:param chat_channel: The chat channel used for collaboration during an incident.
|
|
1723
1723
|
:param display_name: The human readable name of the response plan.
|
|
1724
1724
|
:param engagements: The Amazon Resource Name (ARN) for the contacts and escalation plans that the response plan engages during an incident.
|
|
1725
1725
|
:param integrations: Information about third-party services integrated into the response plan.
|
|
@@ -1857,7 +1857,7 @@ class CfnResponsePlanProps:
|
|
|
1857
1857
|
def chat_channel(
|
|
1858
1858
|
self,
|
|
1859
1859
|
) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnResponsePlan.ChatChannelProperty]]:
|
|
1860
|
-
'''The
|
|
1860
|
+
'''The chat channel used for collaboration during an incident.
|
|
1861
1861
|
|
|
1862
1862
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmincidents-responseplan.html#cfn-ssmincidents-responseplan-chatchannel
|
|
1863
1863
|
'''
|
|
@@ -353,10 +353,11 @@ class CfnApplication(
|
|
|
353
353
|
ec2_instance_id: typing.Optional[builtins.str] = None,
|
|
354
354
|
sid: typing.Optional[builtins.str] = None,
|
|
355
355
|
) -> None:
|
|
356
|
-
'''
|
|
357
|
-
|
|
358
|
-
:param
|
|
359
|
-
:param
|
|
356
|
+
'''This is information about the component of your SAP application, such as Web Dispatcher.
|
|
357
|
+
|
|
358
|
+
:param component_type: This string is the type of the component. Accepted value is ``WD`` .
|
|
359
|
+
:param ec2_instance_id: This is the Amazon EC2 instance on which your SAP component is running. Accepted values are alphanumeric.
|
|
360
|
+
:param sid: This string is the SAP System ID of the component. Accepted values are alphanumeric.
|
|
360
361
|
|
|
361
362
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-systemsmanagersap-application-componentinfo.html
|
|
362
363
|
:exampleMetadata: fixture=_generated
|
|
@@ -388,7 +389,10 @@ class CfnApplication(
|
|
|
388
389
|
|
|
389
390
|
@builtins.property
|
|
390
391
|
def component_type(self) -> typing.Optional[builtins.str]:
|
|
391
|
-
'''
|
|
392
|
+
'''This string is the type of the component.
|
|
393
|
+
|
|
394
|
+
Accepted value is ``WD`` .
|
|
395
|
+
|
|
392
396
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-systemsmanagersap-application-componentinfo.html#cfn-systemsmanagersap-application-componentinfo-componenttype
|
|
393
397
|
'''
|
|
394
398
|
result = self._values.get("component_type")
|
|
@@ -396,7 +400,10 @@ class CfnApplication(
|
|
|
396
400
|
|
|
397
401
|
@builtins.property
|
|
398
402
|
def ec2_instance_id(self) -> typing.Optional[builtins.str]:
|
|
399
|
-
'''
|
|
403
|
+
'''This is the Amazon EC2 instance on which your SAP component is running.
|
|
404
|
+
|
|
405
|
+
Accepted values are alphanumeric.
|
|
406
|
+
|
|
400
407
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-systemsmanagersap-application-componentinfo.html#cfn-systemsmanagersap-application-componentinfo-ec2instanceid
|
|
401
408
|
'''
|
|
402
409
|
result = self._values.get("ec2_instance_id")
|
|
@@ -404,7 +411,10 @@ class CfnApplication(
|
|
|
404
411
|
|
|
405
412
|
@builtins.property
|
|
406
413
|
def sid(self) -> typing.Optional[builtins.str]:
|
|
407
|
-
'''
|
|
414
|
+
'''This string is the SAP System ID of the component.
|
|
415
|
+
|
|
416
|
+
Accepted values are alphanumeric.
|
|
417
|
+
|
|
408
418
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-systemsmanagersap-application-componentinfo.html#cfn-systemsmanagersap-application-componentinfo-sid
|
|
409
419
|
'''
|
|
410
420
|
result = self._values.get("sid")
|
aws_cdk/aws_transfer/__init__.py
CHANGED
|
@@ -771,6 +771,11 @@ class CfnCertificate(
|
|
|
771
771
|
):
|
|
772
772
|
'''Imports the signing and encryption certificates that you need to create local (AS2) profiles and partner profiles.
|
|
773
773
|
|
|
774
|
+
You can import both the certificate and its chain in the ``Certificate`` parameter.
|
|
775
|
+
.. epigraph::
|
|
776
|
+
|
|
777
|
+
If you use the ``Certificate`` parameter to upload both the certificate and its chain, don't use the ``CertificateChain`` parameter.
|
|
778
|
+
|
|
774
779
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-certificate.html
|
|
775
780
|
:cloudformationResource: AWS::Transfer::Certificate
|
|
776
781
|
:exampleMetadata: fixture=_generated
|
|
@@ -817,10 +822,10 @@ class CfnCertificate(
|
|
|
817
822
|
:param id: Construct identifier for this resource (unique in its scope).
|
|
818
823
|
:param certificate: The file name for the certificate.
|
|
819
824
|
:param usage: Specifies how this certificate is used. It can be used in the following ways:. - ``SIGNING`` : For signing AS2 messages - ``ENCRYPTION`` : For encrypting AS2 messages - ``TLS`` : For securing AS2 communications sent over HTTPS
|
|
820
|
-
:param active_date: An optional date that specifies when the certificate becomes active.
|
|
825
|
+
:param active_date: An optional date that specifies when the certificate becomes active. If you do not specify a value, ``ActiveDate`` takes the same value as ``NotBeforeDate`` , which is specified by the CA.
|
|
821
826
|
:param certificate_chain: The list of certificates that make up the chain for the certificate.
|
|
822
827
|
:param description: The name or description that's used to identity the certificate.
|
|
823
|
-
:param inactive_date: An optional date that specifies when the certificate becomes inactive.
|
|
828
|
+
:param inactive_date: An optional date that specifies when the certificate becomes inactive. If you do not specify a value, ``InactiveDate`` takes the same value as ``NotAfterDate`` , which is specified by the CA.
|
|
824
829
|
:param private_key: The file that contains the private key for the certificate that's being imported.
|
|
825
830
|
:param tags: Key-value pairs that can be used to group and search for certificates.
|
|
826
831
|
'''
|
|
@@ -1090,10 +1095,10 @@ class CfnCertificateProps:
|
|
|
1090
1095
|
|
|
1091
1096
|
:param certificate: The file name for the certificate.
|
|
1092
1097
|
:param usage: Specifies how this certificate is used. It can be used in the following ways:. - ``SIGNING`` : For signing AS2 messages - ``ENCRYPTION`` : For encrypting AS2 messages - ``TLS`` : For securing AS2 communications sent over HTTPS
|
|
1093
|
-
:param active_date: An optional date that specifies when the certificate becomes active.
|
|
1098
|
+
:param active_date: An optional date that specifies when the certificate becomes active. If you do not specify a value, ``ActiveDate`` takes the same value as ``NotBeforeDate`` , which is specified by the CA.
|
|
1094
1099
|
:param certificate_chain: The list of certificates that make up the chain for the certificate.
|
|
1095
1100
|
:param description: The name or description that's used to identity the certificate.
|
|
1096
|
-
:param inactive_date: An optional date that specifies when the certificate becomes inactive.
|
|
1101
|
+
:param inactive_date: An optional date that specifies when the certificate becomes inactive. If you do not specify a value, ``InactiveDate`` takes the same value as ``NotAfterDate`` , which is specified by the CA.
|
|
1097
1102
|
:param private_key: The file that contains the private key for the certificate that's being imported.
|
|
1098
1103
|
:param tags: Key-value pairs that can be used to group and search for certificates.
|
|
1099
1104
|
|
|
@@ -1177,6 +1182,8 @@ class CfnCertificateProps:
|
|
|
1177
1182
|
def active_date(self) -> typing.Optional[builtins.str]:
|
|
1178
1183
|
'''An optional date that specifies when the certificate becomes active.
|
|
1179
1184
|
|
|
1185
|
+
If you do not specify a value, ``ActiveDate`` takes the same value as ``NotBeforeDate`` , which is specified by the CA.
|
|
1186
|
+
|
|
1180
1187
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-certificate.html#cfn-transfer-certificate-activedate
|
|
1181
1188
|
'''
|
|
1182
1189
|
result = self._values.get("active_date")
|
|
@@ -1204,6 +1211,8 @@ class CfnCertificateProps:
|
|
|
1204
1211
|
def inactive_date(self) -> typing.Optional[builtins.str]:
|
|
1205
1212
|
'''An optional date that specifies when the certificate becomes inactive.
|
|
1206
1213
|
|
|
1214
|
+
If you do not specify a value, ``InactiveDate`` takes the same value as ``NotAfterDate`` , which is specified by the CA.
|
|
1215
|
+
|
|
1207
1216
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-certificate.html#cfn-transfer-certificate-inactivedate
|
|
1208
1217
|
'''
|
|
1209
1218
|
result = self._values.get("inactive_date")
|
|
@@ -1526,7 +1535,7 @@ class CfnConnector(
|
|
|
1526
1535
|
:param compression: Specifies whether the AS2 file is compressed.
|
|
1527
1536
|
:param encryption_algorithm: The algorithm that is used to encrypt the file. Note the following: - Do not use the ``DES_EDE3_CBC`` algorithm unless you must support a legacy client that requires it, as it is a weak encryption algorithm. - You can only specify ``NONE`` if the URL for your connector uses HTTPS. Using HTTPS ensures that no traffic is sent in clear text.
|
|
1528
1537
|
:param local_profile_id: A unique identifier for the AS2 local profile.
|
|
1529
|
-
:param mdn_response: Used for outbound requests (from an AWS Transfer Family
|
|
1538
|
+
:param mdn_response: Used for outbound requests (from an AWS Transfer Family connector to a partner AS2 server) to determine whether the partner response for transfers is synchronous or asynchronous. Specify either of the following values: - ``SYNC`` : The system expects a synchronous MDN response, confirming that the file was transferred successfully (or not). - ``NONE`` : Specifies that no MDN response is required.
|
|
1530
1539
|
:param mdn_signing_algorithm: The signing algorithm for the MDN response. .. epigraph:: If set to DEFAULT (or not set at all), the value for ``SigningAlgorithm`` is used.
|
|
1531
1540
|
:param message_subject: Used as the ``Subject`` HTTP header attribute in AS2 messages that are being sent with the connector.
|
|
1532
1541
|
:param partner_profile_id: A unique identifier for the partner profile for the connector.
|
|
@@ -1651,7 +1660,7 @@ class CfnConnector(
|
|
|
1651
1660
|
|
|
1652
1661
|
@builtins.property
|
|
1653
1662
|
def mdn_response(self) -> typing.Optional[builtins.str]:
|
|
1654
|
-
'''Used for outbound requests (from an AWS Transfer Family
|
|
1663
|
+
'''Used for outbound requests (from an AWS Transfer Family connector to a partner AS2 server) to determine whether the partner response for transfers is synchronous or asynchronous.
|
|
1655
1664
|
|
|
1656
1665
|
Specify either of the following values:
|
|
1657
1666
|
|
|
@@ -2394,7 +2403,7 @@ class CfnServer(
|
|
|
2394
2403
|
:param endpoint_type: The type of endpoint that you want your server to use. You can choose to make your server's endpoint publicly accessible (PUBLIC) or host it inside your VPC. With an endpoint that is hosted in a VPC, you can restrict access to your server and resources only within your VPC or choose to make it internet facing by attaching Elastic IP addresses directly to it. .. epigraph:: After May 19, 2021, you won't be able to create a server using ``EndpointType=VPC_ENDPOINT`` in your AWS account if your account hasn't already done so before May 19, 2021. If you have already created servers with ``EndpointType=VPC_ENDPOINT`` in your AWS account on or before May 19, 2021, you will not be affected. After this date, use ``EndpointType`` = ``VPC`` . For more information, see `Discontinuing the use of VPC_ENDPOINT <https://docs.aws.amazon.com//transfer/latest/userguide/create-server-in-vpc.html#deprecate-vpc-endpoint>`_ . It is recommended that you use ``VPC`` as the ``EndpointType`` . With this endpoint type, you have the option to directly associate up to three Elastic IPv4 addresses (BYO IP included) with your server's endpoint and use VPC security groups to restrict traffic by the client's public IP address. This is not possible with ``EndpointType`` set to ``VPC_ENDPOINT`` .
|
|
2395
2404
|
:param identity_provider_details: Required when ``IdentityProviderType`` is set to ``AWS_DIRECTORY_SERVICE`` , ``AWS _LAMBDA`` or ``API_GATEWAY`` . Accepts an array containing all of the information required to use a directory in ``AWS_DIRECTORY_SERVICE`` or invoke a customer-supplied authentication API, including the API Gateway URL. Cannot be specified when ``IdentityProviderType`` is set to ``SERVICE_MANAGED`` .
|
|
2396
2405
|
:param identity_provider_type: The mode of authentication for a server. The default value is ``SERVICE_MANAGED`` , which allows you to store and access user credentials within the AWS Transfer Family service. Use ``AWS_DIRECTORY_SERVICE`` to provide access to Active Directory groups in AWS Directory Service for Microsoft Active Directory or Microsoft Active Directory in your on-premises environment or in AWS using AD Connector. This option also requires you to provide a Directory ID by using the ``IdentityProviderDetails`` parameter. Use the ``API_GATEWAY`` value to integrate with an identity provider of your choosing. The ``API_GATEWAY`` setting requires you to provide an Amazon API Gateway endpoint URL to call for authentication by using the ``IdentityProviderDetails`` parameter. Use the ``AWS_LAMBDA`` value to directly use an AWS Lambda function as your identity provider. If you choose this value, you must specify the ARN for the Lambda function in the ``Function`` parameter for the ``IdentityProviderDetails`` data type.
|
|
2397
|
-
:param logging_role: The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon
|
|
2406
|
+
:param logging_role: The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When set, you can view user activity in your CloudWatch logs.
|
|
2398
2407
|
:param post_authentication_login_banner: Specifies a string to display when users connect to a server. This string is displayed after the user authenticates. .. epigraph:: The SFTP protocol does not support post-authentication display banners.
|
|
2399
2408
|
:param pre_authentication_login_banner: Specifies a string to display when users connect to a server. This string is displayed before the user authenticates. For example, the following banner displays details about using the system: ``This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel.``
|
|
2400
2409
|
:param protocol_details: The protocol settings that are configured for your server. - To indicate passive mode (for FTP and FTPS protocols), use the ``PassiveIp`` parameter. Enter a single dotted-quad IPv4 address, such as the external IP address of a firewall, router, or load balancer. - To ignore the error that is generated when the client attempts to use the ``SETSTAT`` command on a file that you are uploading to an Amazon S3 bucket, use the ``SetStatOption`` parameter. To have the AWS Transfer Family server ignore the ``SETSTAT`` command and upload files without needing to make any changes to your SFTP client, set the value to ``ENABLE_NO_OP`` . If you set the ``SetStatOption`` parameter to ``ENABLE_NO_OP`` , Transfer Family generates a log entry to Amazon CloudWatch Logs, so that you can determine when the client is making a ``SETSTAT`` call. - To determine whether your AWS Transfer Family server resumes recent, negotiated sessions through a unique session ID, use the ``TlsSessionResumptionMode`` parameter. - ``As2Transports`` indicates the transport method for the AS2 messages. Currently, only HTTP is supported. The ``Protocols`` parameter is an array of strings. *Allowed values* : One or more of ``SFTP`` , ``FTPS`` , ``FTP`` , ``AS2``
|
|
@@ -2606,7 +2615,7 @@ class CfnServer(
|
|
|
2606
2615
|
@builtins.property
|
|
2607
2616
|
@jsii.member(jsii_name="loggingRole")
|
|
2608
2617
|
def logging_role(self) -> typing.Optional[builtins.str]:
|
|
2609
|
-
'''The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon
|
|
2618
|
+
'''The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events.'''
|
|
2610
2619
|
return typing.cast(typing.Optional[builtins.str], jsii.get(self, "loggingRole"))
|
|
2611
2620
|
|
|
2612
2621
|
@logging_role.setter
|
|
@@ -3468,7 +3477,7 @@ class CfnServerProps:
|
|
|
3468
3477
|
:param endpoint_type: The type of endpoint that you want your server to use. You can choose to make your server's endpoint publicly accessible (PUBLIC) or host it inside your VPC. With an endpoint that is hosted in a VPC, you can restrict access to your server and resources only within your VPC or choose to make it internet facing by attaching Elastic IP addresses directly to it. .. epigraph:: After May 19, 2021, you won't be able to create a server using ``EndpointType=VPC_ENDPOINT`` in your AWS account if your account hasn't already done so before May 19, 2021. If you have already created servers with ``EndpointType=VPC_ENDPOINT`` in your AWS account on or before May 19, 2021, you will not be affected. After this date, use ``EndpointType`` = ``VPC`` . For more information, see `Discontinuing the use of VPC_ENDPOINT <https://docs.aws.amazon.com//transfer/latest/userguide/create-server-in-vpc.html#deprecate-vpc-endpoint>`_ . It is recommended that you use ``VPC`` as the ``EndpointType`` . With this endpoint type, you have the option to directly associate up to three Elastic IPv4 addresses (BYO IP included) with your server's endpoint and use VPC security groups to restrict traffic by the client's public IP address. This is not possible with ``EndpointType`` set to ``VPC_ENDPOINT`` .
|
|
3469
3478
|
:param identity_provider_details: Required when ``IdentityProviderType`` is set to ``AWS_DIRECTORY_SERVICE`` , ``AWS _LAMBDA`` or ``API_GATEWAY`` . Accepts an array containing all of the information required to use a directory in ``AWS_DIRECTORY_SERVICE`` or invoke a customer-supplied authentication API, including the API Gateway URL. Cannot be specified when ``IdentityProviderType`` is set to ``SERVICE_MANAGED`` .
|
|
3470
3479
|
:param identity_provider_type: The mode of authentication for a server. The default value is ``SERVICE_MANAGED`` , which allows you to store and access user credentials within the AWS Transfer Family service. Use ``AWS_DIRECTORY_SERVICE`` to provide access to Active Directory groups in AWS Directory Service for Microsoft Active Directory or Microsoft Active Directory in your on-premises environment or in AWS using AD Connector. This option also requires you to provide a Directory ID by using the ``IdentityProviderDetails`` parameter. Use the ``API_GATEWAY`` value to integrate with an identity provider of your choosing. The ``API_GATEWAY`` setting requires you to provide an Amazon API Gateway endpoint URL to call for authentication by using the ``IdentityProviderDetails`` parameter. Use the ``AWS_LAMBDA`` value to directly use an AWS Lambda function as your identity provider. If you choose this value, you must specify the ARN for the Lambda function in the ``Function`` parameter for the ``IdentityProviderDetails`` data type.
|
|
3471
|
-
:param logging_role: The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon
|
|
3480
|
+
:param logging_role: The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When set, you can view user activity in your CloudWatch logs.
|
|
3472
3481
|
:param post_authentication_login_banner: Specifies a string to display when users connect to a server. This string is displayed after the user authenticates. .. epigraph:: The SFTP protocol does not support post-authentication display banners.
|
|
3473
3482
|
:param pre_authentication_login_banner: Specifies a string to display when users connect to a server. This string is displayed before the user authenticates. For example, the following banner displays details about using the system: ``This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel.``
|
|
3474
3483
|
:param protocol_details: The protocol settings that are configured for your server. - To indicate passive mode (for FTP and FTPS protocols), use the ``PassiveIp`` parameter. Enter a single dotted-quad IPv4 address, such as the external IP address of a firewall, router, or load balancer. - To ignore the error that is generated when the client attempts to use the ``SETSTAT`` command on a file that you are uploading to an Amazon S3 bucket, use the ``SetStatOption`` parameter. To have the AWS Transfer Family server ignore the ``SETSTAT`` command and upload files without needing to make any changes to your SFTP client, set the value to ``ENABLE_NO_OP`` . If you set the ``SetStatOption`` parameter to ``ENABLE_NO_OP`` , Transfer Family generates a log entry to Amazon CloudWatch Logs, so that you can determine when the client is making a ``SETSTAT`` call. - To determine whether your AWS Transfer Family server resumes recent, negotiated sessions through a unique session ID, use the ``TlsSessionResumptionMode`` parameter. - ``As2Transports`` indicates the transport method for the AS2 messages. Currently, only HTTP is supported. The ``Protocols`` parameter is an array of strings. *Allowed values* : One or more of ``SFTP`` , ``FTPS`` , ``FTP`` , ``AS2``
|
|
@@ -3693,7 +3702,7 @@ class CfnServerProps:
|
|
|
3693
3702
|
|
|
3694
3703
|
@builtins.property
|
|
3695
3704
|
def logging_role(self) -> typing.Optional[builtins.str]:
|
|
3696
|
-
'''The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon
|
|
3705
|
+
'''The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events.
|
|
3697
3706
|
|
|
3698
3707
|
When set, you can view user activity in your CloudWatch logs.
|
|
3699
3708
|
|