aws-cdk-lib 2.187.0__py3-none-any.whl → 2.188.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (53) hide show
  1. aws_cdk/__init__.py +22 -3
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.187.0.jsii.tgz → aws-cdk-lib@2.188.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_amplify/__init__.py +21 -9
  5. aws_cdk/aws_apigateway/__init__.py +25 -19
  6. aws_cdk/aws_apigatewayv2/__init__.py +88 -0
  7. aws_cdk/aws_appconfig/__init__.py +30 -14
  8. aws_cdk/aws_arczonalshift/__init__.py +4 -4
  9. aws_cdk/aws_bedrock/__init__.py +605 -10
  10. aws_cdk/aws_budgets/__init__.py +8 -8
  11. aws_cdk/aws_cassandra/__init__.py +3 -1
  12. aws_cdk/aws_ce/__init__.py +2 -2
  13. aws_cdk/aws_cloudformation/__init__.py +3 -3
  14. aws_cdk/aws_codebuild/__init__.py +23 -1
  15. aws_cdk/aws_codepipeline/__init__.py +47 -32
  16. aws_cdk/aws_codepipeline_actions/__init__.py +2786 -1042
  17. aws_cdk/aws_codestarnotifications/__init__.py +16 -16
  18. aws_cdk/aws_cognito/__init__.py +8 -2
  19. aws_cdk/aws_ec2/__init__.py +2091 -227
  20. aws_cdk/aws_eks/__init__.py +112 -10
  21. aws_cdk/aws_events_targets/__init__.py +136 -0
  22. aws_cdk/aws_gamelift/__init__.py +5 -5
  23. aws_cdk/aws_iam/__init__.py +6 -4
  24. aws_cdk/aws_identitystore/__init__.py +15 -13
  25. aws_cdk/aws_kinesisfirehose/__init__.py +38 -0
  26. aws_cdk/aws_lambda_event_sources/__init__.py +22 -22
  27. aws_cdk/aws_lex/__init__.py +21 -17
  28. aws_cdk/aws_logs/__init__.py +18 -0
  29. aws_cdk/aws_logs_destinations/__init__.py +146 -0
  30. aws_cdk/aws_notifications/__init__.py +4 -4
  31. aws_cdk/aws_omics/__init__.py +9 -1
  32. aws_cdk/aws_opensearchserverless/__init__.py +31 -23
  33. aws_cdk/aws_organizations/__init__.py +1 -1
  34. aws_cdk/aws_pcaconnectorad/__init__.py +3 -2
  35. aws_cdk/aws_quicksight/__init__.py +35 -22
  36. aws_cdk/aws_rds/__init__.py +84 -0
  37. aws_cdk/aws_route53/__init__.py +3 -3
  38. aws_cdk/aws_route53recoverycontrol/__init__.py +4 -6
  39. aws_cdk/aws_rum/__init__.py +13 -10
  40. aws_cdk/aws_s3/__init__.py +3 -6
  41. aws_cdk/aws_sagemaker/__init__.py +41 -0
  42. aws_cdk/aws_ssmincidents/__init__.py +10 -10
  43. aws_cdk/aws_systemsmanagersap/__init__.py +17 -7
  44. aws_cdk/aws_transfer/__init__.py +19 -10
  45. aws_cdk/aws_wafv2/__init__.py +80 -35
  46. aws_cdk/cx_api/__init__.py +23 -2
  47. aws_cdk/pipelines/__init__.py +32 -0
  48. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/METADATA +1 -1
  49. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/RECORD +53 -53
  50. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/LICENSE +0 -0
  51. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/NOTICE +0 -0
  52. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/WHEEL +0 -0
  53. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.188.0.dist-info}/top_level.txt +0 -0
@@ -564,7 +564,7 @@ class CfnResponsePlan(
564
564
  :param incident_template: Details used to create an incident when using this response plan.
565
565
  :param name: The name of the response plan.
566
566
  :param actions: The actions that the response plan starts at the beginning of an incident.
567
- :param chat_channel: The AWS Chatbot chat channel used for collaboration during an incident.
567
+ :param chat_channel: The chat channel used for collaboration during an incident.
568
568
  :param display_name: The human readable name of the response plan.
569
569
  :param engagements: The Amazon Resource Name (ARN) for the contacts and escalation plans that the response plan engages during an incident.
570
570
  :param integrations: Information about third-party services integrated into the response plan.
@@ -691,7 +691,7 @@ class CfnResponsePlan(
691
691
  def chat_channel(
692
692
  self,
693
693
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnResponsePlan.ChatChannelProperty"]]:
694
- '''The AWS Chatbot chat channel used for collaboration during an incident.'''
694
+ '''The chat channel used for collaboration during an incident.'''
695
695
  return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnResponsePlan.ChatChannelProperty"]], jsii.get(self, "chatChannel"))
696
696
 
697
697
  @chat_channel.setter
@@ -846,9 +846,9 @@ class CfnResponsePlan(
846
846
  *,
847
847
  chatbot_sns: typing.Optional[typing.Sequence[builtins.str]] = None,
848
848
  ) -> None:
849
- '''The AWS Chatbot chat channel used for collaboration during an incident.
849
+ '''The chat channel used for collaboration during an incident.
850
850
 
851
- :param chatbot_sns: The Amazon SNS targets that AWS Chatbot uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel by using the Amazon SNS topics
851
+ :param chatbot_sns: The Amazon SNS targets that uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel by using the Amazon SNS topics
852
852
 
853
853
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssmincidents-responseplan-chatchannel.html
854
854
  :exampleMetadata: fixture=_generated
@@ -872,7 +872,7 @@ class CfnResponsePlan(
872
872
 
873
873
  @builtins.property
874
874
  def chatbot_sns(self) -> typing.Optional[typing.List[builtins.str]]:
875
- '''The Amazon SNS targets that AWS Chatbot uses to notify the chat channel of updates to an incident.
875
+ '''The Amazon SNS targets that uses to notify the chat channel of updates to an incident.
876
876
 
877
877
  You can also make updates to the incident through the chat channel by using the Amazon SNS topics
878
878
 
@@ -1065,7 +1065,7 @@ class CfnResponsePlan(
1065
1065
  :param title: The title of the incident is a brief and easily recognizable.
1066
1066
  :param dedupe_string: Used to create only one incident record for an incident.
1067
1067
  :param incident_tags: Tags to assign to the template. When the ``StartIncident`` API action is called, Incident Manager assigns the tags specified in the template to the incident.
1068
- :param notification_targets: The Amazon Simple Notification Service ( Amazon SNS ) targets that AWS Chatbot uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel using the Amazon SNS topics.
1068
+ :param notification_targets: The Amazon Simple Notification Service ( Amazon SNS ) targets that uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel using the Amazon SNS topics.
1069
1069
  :param summary: The summary describes what has happened during the incident.
1070
1070
 
1071
1071
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssmincidents-responseplan-incidenttemplate.html
@@ -1167,7 +1167,7 @@ class CfnResponsePlan(
1167
1167
  def notification_targets(
1168
1168
  self,
1169
1169
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnResponsePlan.NotificationTargetItemProperty"]]]]:
1170
- '''The Amazon Simple Notification Service ( Amazon SNS ) targets that AWS Chatbot uses to notify the chat channel of updates to an incident.
1170
+ '''The Amazon Simple Notification Service ( Amazon SNS ) targets that uses to notify the chat channel of updates to an incident.
1171
1171
 
1172
1172
  You can also make updates to the incident through the chat channel using the Amazon SNS topics.
1173
1173
 
@@ -1271,7 +1271,7 @@ class CfnResponsePlan(
1271
1271
  *,
1272
1272
  sns_topic_arn: typing.Optional[builtins.str] = None,
1273
1273
  ) -> None:
1274
- '''The Amazon SNS topic that's used by AWS Chatbot to notify the incidents chat channel.
1274
+ '''The Amazon SNS topic that's used by to notify the incidents chat channel.
1275
1275
 
1276
1276
  :param sns_topic_arn: The Amazon Resource Name (ARN) of the Amazon SNS topic.
1277
1277
 
@@ -1719,7 +1719,7 @@ class CfnResponsePlanProps:
1719
1719
  :param incident_template: Details used to create an incident when using this response plan.
1720
1720
  :param name: The name of the response plan.
1721
1721
  :param actions: The actions that the response plan starts at the beginning of an incident.
1722
- :param chat_channel: The AWS Chatbot chat channel used for collaboration during an incident.
1722
+ :param chat_channel: The chat channel used for collaboration during an incident.
1723
1723
  :param display_name: The human readable name of the response plan.
1724
1724
  :param engagements: The Amazon Resource Name (ARN) for the contacts and escalation plans that the response plan engages during an incident.
1725
1725
  :param integrations: Information about third-party services integrated into the response plan.
@@ -1857,7 +1857,7 @@ class CfnResponsePlanProps:
1857
1857
  def chat_channel(
1858
1858
  self,
1859
1859
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnResponsePlan.ChatChannelProperty]]:
1860
- '''The AWS Chatbot chat channel used for collaboration during an incident.
1860
+ '''The chat channel used for collaboration during an incident.
1861
1861
 
1862
1862
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmincidents-responseplan.html#cfn-ssmincidents-responseplan-chatchannel
1863
1863
  '''
@@ -353,10 +353,11 @@ class CfnApplication(
353
353
  ec2_instance_id: typing.Optional[builtins.str] = None,
354
354
  sid: typing.Optional[builtins.str] = None,
355
355
  ) -> None:
356
- '''
357
- :param component_type:
358
- :param ec2_instance_id:
359
- :param sid:
356
+ '''This is information about the component of your SAP application, such as Web Dispatcher.
357
+
358
+ :param component_type: This string is the type of the component. Accepted value is ``WD`` .
359
+ :param ec2_instance_id: This is the Amazon EC2 instance on which your SAP component is running. Accepted values are alphanumeric.
360
+ :param sid: This string is the SAP System ID of the component. Accepted values are alphanumeric.
360
361
 
361
362
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-systemsmanagersap-application-componentinfo.html
362
363
  :exampleMetadata: fixture=_generated
@@ -388,7 +389,10 @@ class CfnApplication(
388
389
 
389
390
  @builtins.property
390
391
  def component_type(self) -> typing.Optional[builtins.str]:
391
- '''
392
+ '''This string is the type of the component.
393
+
394
+ Accepted value is ``WD`` .
395
+
392
396
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-systemsmanagersap-application-componentinfo.html#cfn-systemsmanagersap-application-componentinfo-componenttype
393
397
  '''
394
398
  result = self._values.get("component_type")
@@ -396,7 +400,10 @@ class CfnApplication(
396
400
 
397
401
  @builtins.property
398
402
  def ec2_instance_id(self) -> typing.Optional[builtins.str]:
399
- '''
403
+ '''This is the Amazon EC2 instance on which your SAP component is running.
404
+
405
+ Accepted values are alphanumeric.
406
+
400
407
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-systemsmanagersap-application-componentinfo.html#cfn-systemsmanagersap-application-componentinfo-ec2instanceid
401
408
  '''
402
409
  result = self._values.get("ec2_instance_id")
@@ -404,7 +411,10 @@ class CfnApplication(
404
411
 
405
412
  @builtins.property
406
413
  def sid(self) -> typing.Optional[builtins.str]:
407
- '''
414
+ '''This string is the SAP System ID of the component.
415
+
416
+ Accepted values are alphanumeric.
417
+
408
418
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-systemsmanagersap-application-componentinfo.html#cfn-systemsmanagersap-application-componentinfo-sid
409
419
  '''
410
420
  result = self._values.get("sid")
@@ -771,6 +771,11 @@ class CfnCertificate(
771
771
  ):
772
772
  '''Imports the signing and encryption certificates that you need to create local (AS2) profiles and partner profiles.
773
773
 
774
+ You can import both the certificate and its chain in the ``Certificate`` parameter.
775
+ .. epigraph::
776
+
777
+ If you use the ``Certificate`` parameter to upload both the certificate and its chain, don't use the ``CertificateChain`` parameter.
778
+
774
779
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-certificate.html
775
780
  :cloudformationResource: AWS::Transfer::Certificate
776
781
  :exampleMetadata: fixture=_generated
@@ -817,10 +822,10 @@ class CfnCertificate(
817
822
  :param id: Construct identifier for this resource (unique in its scope).
818
823
  :param certificate: The file name for the certificate.
819
824
  :param usage: Specifies how this certificate is used. It can be used in the following ways:. - ``SIGNING`` : For signing AS2 messages - ``ENCRYPTION`` : For encrypting AS2 messages - ``TLS`` : For securing AS2 communications sent over HTTPS
820
- :param active_date: An optional date that specifies when the certificate becomes active.
825
+ :param active_date: An optional date that specifies when the certificate becomes active. If you do not specify a value, ``ActiveDate`` takes the same value as ``NotBeforeDate`` , which is specified by the CA.
821
826
  :param certificate_chain: The list of certificates that make up the chain for the certificate.
822
827
  :param description: The name or description that's used to identity the certificate.
823
- :param inactive_date: An optional date that specifies when the certificate becomes inactive.
828
+ :param inactive_date: An optional date that specifies when the certificate becomes inactive. If you do not specify a value, ``InactiveDate`` takes the same value as ``NotAfterDate`` , which is specified by the CA.
824
829
  :param private_key: The file that contains the private key for the certificate that's being imported.
825
830
  :param tags: Key-value pairs that can be used to group and search for certificates.
826
831
  '''
@@ -1090,10 +1095,10 @@ class CfnCertificateProps:
1090
1095
 
1091
1096
  :param certificate: The file name for the certificate.
1092
1097
  :param usage: Specifies how this certificate is used. It can be used in the following ways:. - ``SIGNING`` : For signing AS2 messages - ``ENCRYPTION`` : For encrypting AS2 messages - ``TLS`` : For securing AS2 communications sent over HTTPS
1093
- :param active_date: An optional date that specifies when the certificate becomes active.
1098
+ :param active_date: An optional date that specifies when the certificate becomes active. If you do not specify a value, ``ActiveDate`` takes the same value as ``NotBeforeDate`` , which is specified by the CA.
1094
1099
  :param certificate_chain: The list of certificates that make up the chain for the certificate.
1095
1100
  :param description: The name or description that's used to identity the certificate.
1096
- :param inactive_date: An optional date that specifies when the certificate becomes inactive.
1101
+ :param inactive_date: An optional date that specifies when the certificate becomes inactive. If you do not specify a value, ``InactiveDate`` takes the same value as ``NotAfterDate`` , which is specified by the CA.
1097
1102
  :param private_key: The file that contains the private key for the certificate that's being imported.
1098
1103
  :param tags: Key-value pairs that can be used to group and search for certificates.
1099
1104
 
@@ -1177,6 +1182,8 @@ class CfnCertificateProps:
1177
1182
  def active_date(self) -> typing.Optional[builtins.str]:
1178
1183
  '''An optional date that specifies when the certificate becomes active.
1179
1184
 
1185
+ If you do not specify a value, ``ActiveDate`` takes the same value as ``NotBeforeDate`` , which is specified by the CA.
1186
+
1180
1187
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-certificate.html#cfn-transfer-certificate-activedate
1181
1188
  '''
1182
1189
  result = self._values.get("active_date")
@@ -1204,6 +1211,8 @@ class CfnCertificateProps:
1204
1211
  def inactive_date(self) -> typing.Optional[builtins.str]:
1205
1212
  '''An optional date that specifies when the certificate becomes inactive.
1206
1213
 
1214
+ If you do not specify a value, ``InactiveDate`` takes the same value as ``NotAfterDate`` , which is specified by the CA.
1215
+
1207
1216
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-certificate.html#cfn-transfer-certificate-inactivedate
1208
1217
  '''
1209
1218
  result = self._values.get("inactive_date")
@@ -1526,7 +1535,7 @@ class CfnConnector(
1526
1535
  :param compression: Specifies whether the AS2 file is compressed.
1527
1536
  :param encryption_algorithm: The algorithm that is used to encrypt the file. Note the following: - Do not use the ``DES_EDE3_CBC`` algorithm unless you must support a legacy client that requires it, as it is a weak encryption algorithm. - You can only specify ``NONE`` if the URL for your connector uses HTTPS. Using HTTPS ensures that no traffic is sent in clear text.
1528
1537
  :param local_profile_id: A unique identifier for the AS2 local profile.
1529
- :param mdn_response: Used for outbound requests (from an AWS Transfer Family server to a partner AS2 server) to determine whether the partner response for transfers is synchronous or asynchronous. Specify either of the following values: - ``SYNC`` : The system expects a synchronous MDN response, confirming that the file was transferred successfully (or not). - ``NONE`` : Specifies that no MDN response is required.
1538
+ :param mdn_response: Used for outbound requests (from an AWS Transfer Family connector to a partner AS2 server) to determine whether the partner response for transfers is synchronous or asynchronous. Specify either of the following values: - ``SYNC`` : The system expects a synchronous MDN response, confirming that the file was transferred successfully (or not). - ``NONE`` : Specifies that no MDN response is required.
1530
1539
  :param mdn_signing_algorithm: The signing algorithm for the MDN response. .. epigraph:: If set to DEFAULT (or not set at all), the value for ``SigningAlgorithm`` is used.
1531
1540
  :param message_subject: Used as the ``Subject`` HTTP header attribute in AS2 messages that are being sent with the connector.
1532
1541
  :param partner_profile_id: A unique identifier for the partner profile for the connector.
@@ -1651,7 +1660,7 @@ class CfnConnector(
1651
1660
 
1652
1661
  @builtins.property
1653
1662
  def mdn_response(self) -> typing.Optional[builtins.str]:
1654
- '''Used for outbound requests (from an AWS Transfer Family server to a partner AS2 server) to determine whether the partner response for transfers is synchronous or asynchronous.
1663
+ '''Used for outbound requests (from an AWS Transfer Family connector to a partner AS2 server) to determine whether the partner response for transfers is synchronous or asynchronous.
1655
1664
 
1656
1665
  Specify either of the following values:
1657
1666
 
@@ -2394,7 +2403,7 @@ class CfnServer(
2394
2403
  :param endpoint_type: The type of endpoint that you want your server to use. You can choose to make your server's endpoint publicly accessible (PUBLIC) or host it inside your VPC. With an endpoint that is hosted in a VPC, you can restrict access to your server and resources only within your VPC or choose to make it internet facing by attaching Elastic IP addresses directly to it. .. epigraph:: After May 19, 2021, you won't be able to create a server using ``EndpointType=VPC_ENDPOINT`` in your AWS account if your account hasn't already done so before May 19, 2021. If you have already created servers with ``EndpointType=VPC_ENDPOINT`` in your AWS account on or before May 19, 2021, you will not be affected. After this date, use ``EndpointType`` = ``VPC`` . For more information, see `Discontinuing the use of VPC_ENDPOINT <https://docs.aws.amazon.com//transfer/latest/userguide/create-server-in-vpc.html#deprecate-vpc-endpoint>`_ . It is recommended that you use ``VPC`` as the ``EndpointType`` . With this endpoint type, you have the option to directly associate up to three Elastic IPv4 addresses (BYO IP included) with your server's endpoint and use VPC security groups to restrict traffic by the client's public IP address. This is not possible with ``EndpointType`` set to ``VPC_ENDPOINT`` .
2395
2404
  :param identity_provider_details: Required when ``IdentityProviderType`` is set to ``AWS_DIRECTORY_SERVICE`` , ``AWS _LAMBDA`` or ``API_GATEWAY`` . Accepts an array containing all of the information required to use a directory in ``AWS_DIRECTORY_SERVICE`` or invoke a customer-supplied authentication API, including the API Gateway URL. Cannot be specified when ``IdentityProviderType`` is set to ``SERVICE_MANAGED`` .
2396
2405
  :param identity_provider_type: The mode of authentication for a server. The default value is ``SERVICE_MANAGED`` , which allows you to store and access user credentials within the AWS Transfer Family service. Use ``AWS_DIRECTORY_SERVICE`` to provide access to Active Directory groups in AWS Directory Service for Microsoft Active Directory or Microsoft Active Directory in your on-premises environment or in AWS using AD Connector. This option also requires you to provide a Directory ID by using the ``IdentityProviderDetails`` parameter. Use the ``API_GATEWAY`` value to integrate with an identity provider of your choosing. The ``API_GATEWAY`` setting requires you to provide an Amazon API Gateway endpoint URL to call for authentication by using the ``IdentityProviderDetails`` parameter. Use the ``AWS_LAMBDA`` value to directly use an AWS Lambda function as your identity provider. If you choose this value, you must specify the ARN for the Lambda function in the ``Function`` parameter for the ``IdentityProviderDetails`` data type.
2397
- :param logging_role: The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFSevents. When set, you can view user activity in your CloudWatch logs.
2406
+ :param logging_role: The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When set, you can view user activity in your CloudWatch logs.
2398
2407
  :param post_authentication_login_banner: Specifies a string to display when users connect to a server. This string is displayed after the user authenticates. .. epigraph:: The SFTP protocol does not support post-authentication display banners.
2399
2408
  :param pre_authentication_login_banner: Specifies a string to display when users connect to a server. This string is displayed before the user authenticates. For example, the following banner displays details about using the system: ``This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel.``
2400
2409
  :param protocol_details: The protocol settings that are configured for your server. - To indicate passive mode (for FTP and FTPS protocols), use the ``PassiveIp`` parameter. Enter a single dotted-quad IPv4 address, such as the external IP address of a firewall, router, or load balancer. - To ignore the error that is generated when the client attempts to use the ``SETSTAT`` command on a file that you are uploading to an Amazon S3 bucket, use the ``SetStatOption`` parameter. To have the AWS Transfer Family server ignore the ``SETSTAT`` command and upload files without needing to make any changes to your SFTP client, set the value to ``ENABLE_NO_OP`` . If you set the ``SetStatOption`` parameter to ``ENABLE_NO_OP`` , Transfer Family generates a log entry to Amazon CloudWatch Logs, so that you can determine when the client is making a ``SETSTAT`` call. - To determine whether your AWS Transfer Family server resumes recent, negotiated sessions through a unique session ID, use the ``TlsSessionResumptionMode`` parameter. - ``As2Transports`` indicates the transport method for the AS2 messages. Currently, only HTTP is supported. The ``Protocols`` parameter is an array of strings. *Allowed values* : One or more of ``SFTP`` , ``FTPS`` , ``FTP`` , ``AS2``
@@ -2606,7 +2615,7 @@ class CfnServer(
2606
2615
  @builtins.property
2607
2616
  @jsii.member(jsii_name="loggingRole")
2608
2617
  def logging_role(self) -> typing.Optional[builtins.str]:
2609
- '''The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFSevents.'''
2618
+ '''The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events.'''
2610
2619
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "loggingRole"))
2611
2620
 
2612
2621
  @logging_role.setter
@@ -3468,7 +3477,7 @@ class CfnServerProps:
3468
3477
  :param endpoint_type: The type of endpoint that you want your server to use. You can choose to make your server's endpoint publicly accessible (PUBLIC) or host it inside your VPC. With an endpoint that is hosted in a VPC, you can restrict access to your server and resources only within your VPC or choose to make it internet facing by attaching Elastic IP addresses directly to it. .. epigraph:: After May 19, 2021, you won't be able to create a server using ``EndpointType=VPC_ENDPOINT`` in your AWS account if your account hasn't already done so before May 19, 2021. If you have already created servers with ``EndpointType=VPC_ENDPOINT`` in your AWS account on or before May 19, 2021, you will not be affected. After this date, use ``EndpointType`` = ``VPC`` . For more information, see `Discontinuing the use of VPC_ENDPOINT <https://docs.aws.amazon.com//transfer/latest/userguide/create-server-in-vpc.html#deprecate-vpc-endpoint>`_ . It is recommended that you use ``VPC`` as the ``EndpointType`` . With this endpoint type, you have the option to directly associate up to three Elastic IPv4 addresses (BYO IP included) with your server's endpoint and use VPC security groups to restrict traffic by the client's public IP address. This is not possible with ``EndpointType`` set to ``VPC_ENDPOINT`` .
3469
3478
  :param identity_provider_details: Required when ``IdentityProviderType`` is set to ``AWS_DIRECTORY_SERVICE`` , ``AWS _LAMBDA`` or ``API_GATEWAY`` . Accepts an array containing all of the information required to use a directory in ``AWS_DIRECTORY_SERVICE`` or invoke a customer-supplied authentication API, including the API Gateway URL. Cannot be specified when ``IdentityProviderType`` is set to ``SERVICE_MANAGED`` .
3470
3479
  :param identity_provider_type: The mode of authentication for a server. The default value is ``SERVICE_MANAGED`` , which allows you to store and access user credentials within the AWS Transfer Family service. Use ``AWS_DIRECTORY_SERVICE`` to provide access to Active Directory groups in AWS Directory Service for Microsoft Active Directory or Microsoft Active Directory in your on-premises environment or in AWS using AD Connector. This option also requires you to provide a Directory ID by using the ``IdentityProviderDetails`` parameter. Use the ``API_GATEWAY`` value to integrate with an identity provider of your choosing. The ``API_GATEWAY`` setting requires you to provide an Amazon API Gateway endpoint URL to call for authentication by using the ``IdentityProviderDetails`` parameter. Use the ``AWS_LAMBDA`` value to directly use an AWS Lambda function as your identity provider. If you choose this value, you must specify the ARN for the Lambda function in the ``Function`` parameter for the ``IdentityProviderDetails`` data type.
3471
- :param logging_role: The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFSevents. When set, you can view user activity in your CloudWatch logs.
3480
+ :param logging_role: The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When set, you can view user activity in your CloudWatch logs.
3472
3481
  :param post_authentication_login_banner: Specifies a string to display when users connect to a server. This string is displayed after the user authenticates. .. epigraph:: The SFTP protocol does not support post-authentication display banners.
3473
3482
  :param pre_authentication_login_banner: Specifies a string to display when users connect to a server. This string is displayed before the user authenticates. For example, the following banner displays details about using the system: ``This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel.``
3474
3483
  :param protocol_details: The protocol settings that are configured for your server. - To indicate passive mode (for FTP and FTPS protocols), use the ``PassiveIp`` parameter. Enter a single dotted-quad IPv4 address, such as the external IP address of a firewall, router, or load balancer. - To ignore the error that is generated when the client attempts to use the ``SETSTAT`` command on a file that you are uploading to an Amazon S3 bucket, use the ``SetStatOption`` parameter. To have the AWS Transfer Family server ignore the ``SETSTAT`` command and upload files without needing to make any changes to your SFTP client, set the value to ``ENABLE_NO_OP`` . If you set the ``SetStatOption`` parameter to ``ENABLE_NO_OP`` , Transfer Family generates a log entry to Amazon CloudWatch Logs, so that you can determine when the client is making a ``SETSTAT`` call. - To determine whether your AWS Transfer Family server resumes recent, negotiated sessions through a unique session ID, use the ``TlsSessionResumptionMode`` parameter. - ``As2Transports`` indicates the transport method for the AS2 messages. Currently, only HTTP is supported. The ``Protocols`` parameter is an array of strings. *Allowed values* : One or more of ``SFTP`` , ``FTPS`` , ``FTP`` , ``AS2``
@@ -3693,7 +3702,7 @@ class CfnServerProps:
3693
3702
 
3694
3703
  @builtins.property
3695
3704
  def logging_role(self) -> typing.Optional[builtins.str]:
3696
- '''The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFSevents.
3705
+ '''The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events.
3697
3706
 
3698
3707
  When set, you can view user activity in your CloudWatch logs.
3699
3708