aws-cdk-lib 2.187.0__py3-none-any.whl → 2.189.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (60) hide show
  1. aws_cdk/__init__.py +24 -3
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.187.0.jsii.tgz → aws-cdk-lib@2.189.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_amplify/__init__.py +21 -9
  5. aws_cdk/aws_apigateway/__init__.py +27 -19
  6. aws_cdk/aws_apigatewayv2/__init__.py +170 -0
  7. aws_cdk/aws_appconfig/__init__.py +30 -14
  8. aws_cdk/aws_arczonalshift/__init__.py +4 -4
  9. aws_cdk/aws_batch/__init__.py +2 -0
  10. aws_cdk/aws_bedrock/__init__.py +629 -32
  11. aws_cdk/aws_budgets/__init__.py +8 -8
  12. aws_cdk/aws_cassandra/__init__.py +3 -1
  13. aws_cdk/aws_ce/__init__.py +2 -2
  14. aws_cdk/aws_cloudformation/__init__.py +3 -3
  15. aws_cdk/aws_codebuild/__init__.py +23 -1
  16. aws_cdk/aws_codepipeline/__init__.py +47 -32
  17. aws_cdk/aws_codepipeline_actions/__init__.py +2786 -1042
  18. aws_cdk/aws_codestarnotifications/__init__.py +16 -16
  19. aws_cdk/aws_cognito/__init__.py +8 -2
  20. aws_cdk/aws_dsql/__init__.py +366 -0
  21. aws_cdk/aws_dynamodb/__init__.py +4 -4
  22. aws_cdk/aws_ec2/__init__.py +2130 -237
  23. aws_cdk/aws_eks/__init__.py +112 -10
  24. aws_cdk/aws_events_targets/__init__.py +136 -0
  25. aws_cdk/aws_fsx/__init__.py +2 -8
  26. aws_cdk/aws_gamelift/__init__.py +140 -14
  27. aws_cdk/aws_groundstation/__init__.py +4 -2
  28. aws_cdk/aws_iam/__init__.py +6 -4
  29. aws_cdk/aws_identitystore/__init__.py +15 -13
  30. aws_cdk/aws_kinesisfirehose/__init__.py +38 -0
  31. aws_cdk/aws_lambda_event_sources/__init__.py +22 -22
  32. aws_cdk/aws_lex/__init__.py +21 -17
  33. aws_cdk/aws_logs/__init__.py +18 -0
  34. aws_cdk/aws_logs_destinations/__init__.py +146 -0
  35. aws_cdk/aws_notifications/__init__.py +4 -4
  36. aws_cdk/aws_omics/__init__.py +9 -1
  37. aws_cdk/aws_opensearchserverless/__init__.py +31 -23
  38. aws_cdk/aws_organizations/__init__.py +1 -1
  39. aws_cdk/aws_paymentcryptography/__init__.py +6 -2
  40. aws_cdk/aws_pcaconnectorad/__init__.py +3 -2
  41. aws_cdk/aws_quicksight/__init__.py +35 -22
  42. aws_cdk/aws_rds/__init__.py +84 -0
  43. aws_cdk/aws_redshiftserverless/__init__.py +166 -0
  44. aws_cdk/aws_route53/__init__.py +3 -3
  45. aws_cdk/aws_route53recoverycontrol/__init__.py +4 -6
  46. aws_cdk/aws_rum/__init__.py +13 -10
  47. aws_cdk/aws_s3/__init__.py +3 -6
  48. aws_cdk/aws_sagemaker/__init__.py +41 -0
  49. aws_cdk/aws_ssmincidents/__init__.py +10 -10
  50. aws_cdk/aws_systemsmanagersap/__init__.py +17 -7
  51. aws_cdk/aws_transfer/__init__.py +19 -10
  52. aws_cdk/aws_wafv2/__init__.py +80 -35
  53. aws_cdk/cx_api/__init__.py +23 -2
  54. aws_cdk/pipelines/__init__.py +71 -1
  55. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.189.0.dist-info}/METADATA +1 -1
  56. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.189.0.dist-info}/RECORD +60 -59
  57. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.189.0.dist-info}/LICENSE +0 -0
  58. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.189.0.dist-info}/NOTICE +0 -0
  59. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.189.0.dist-info}/WHEEL +0 -0
  60. {aws_cdk_lib-2.187.0.dist-info → aws_cdk_lib-2.189.0.dist-info}/top_level.txt +0 -0
@@ -6051,12 +6051,12 @@ class CfnCluster(
6051
6051
  :param bootstrap_self_managed_addons: If you set this value to ``False`` when creating a cluster, the default networking add-ons will not be installed. The default networking addons include vpc-cni, coredns, and kube-proxy. Use this option when you plan to install third-party alternative add-ons or self-manage the default networking add-ons.
6052
6052
  :param compute_config: Indicates the current configuration of the compute capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the compute capability is enabled, EKS Auto Mode will create and delete EC2 Managed Instances in your AWS account. For more information, see EKS Auto Mode compute capability in the *Amazon EKS User Guide* .
6053
6053
  :param encryption_config: The encryption configuration for the cluster.
6054
- :param force: Force cluster version update. Default: - false
6054
+ :param force: Set this value to ``true`` to override upgrade-blocking readiness checks when updating a cluster. Default: - false
6055
6055
  :param kubernetes_network_config: The Kubernetes network configuration for the cluster.
6056
6056
  :param logging: The logging configuration for your cluster.
6057
6057
  :param name: The unique name to give to your cluster. The name can contain only alphanumeric characters (case-sensitive) and hyphens. It must start with an alphanumeric character and can't be longer than 100 characters. The name must be unique within the AWS Region and AWS account that you're creating the cluster in. Note that underscores can't be used in AWS CloudFormation .
6058
6058
  :param outpost_config: An object representing the configuration of your local Amazon EKS cluster on an AWS Outpost. This object isn't available for clusters on the AWS cloud.
6059
- :param remote_network_config: The configuration in the cluster for EKS Hybrid Nodes. You can't change or update this configuration after the cluster is created.
6059
+ :param remote_network_config: The configuration in the cluster for EKS Hybrid Nodes. You can add, change, or remove this configuration after the cluster is created.
6060
6060
  :param storage_config: Indicates the current configuration of the block storage capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the block storage capability is enabled, EKS Auto Mode will create and delete EBS volumes in your AWS account. For more information, see EKS Auto Mode block storage capability in the *Amazon EKS User Guide* .
6061
6061
  :param tags: The metadata that you apply to the cluster to assist with categorization and organization. Each tag consists of a key and an optional value, both of which you define. Cluster tags don't propagate to any other resources associated with the cluster. .. epigraph:: You must have the ``eks:TagResource`` and ``eks:UntagResource`` permissions for your `IAM principal <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html>`_ to manage the AWS CloudFormation stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.
6062
6062
  :param upgrade_policy: This value indicates if extended support is enabled or disabled for the cluster. `Learn more about EKS Extended Support in the *Amazon EKS User Guide* . <https://docs.aws.amazon.com/eks/latest/userguide/extended-support-control.html>`_
@@ -6318,7 +6318,7 @@ class CfnCluster(
6318
6318
  def force(
6319
6319
  self,
6320
6320
  ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
6321
- '''Force cluster version update.'''
6321
+ '''Set this value to ``true`` to override upgrade-blocking readiness checks when updating a cluster.'''
6322
6322
  return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "force"))
6323
6323
 
6324
6324
  @force.setter
@@ -7414,7 +7414,7 @@ class CfnCluster(
7414
7414
  ) -> None:
7415
7415
  '''The configuration in the cluster for EKS Hybrid Nodes.
7416
7416
 
7417
- You can't change or update this configuration after the cluster is created.
7417
+ You can add, change, or remove this configuration after the cluster is created.
7418
7418
 
7419
7419
  :param remote_node_networks: The list of network CIDRs that can contain hybrid nodes. These CIDR blocks define the expected IP address range of the hybrid nodes that join the cluster. These blocks are typically determined by your network administrator. Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, ``10.2.0.0/16`` ). It must satisfy the following requirements: - Each block must be within an ``IPv4`` RFC-1918 network range. Minimum allowed size is /24, maximum allowed size is /8. Publicly-routable addresses aren't supported. - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range. - Each block must have a route to the VPC that uses the VPC CIDR blocks, not public IPs or Elastic IPs. There are many options including AWS Transit Gateway , AWS Site-to-Site VPN , or AWS Direct Connect . - Each host must allow outbound connection to the EKS cluster control plane on TCP ports ``443`` and ``10250`` . - Each host must allow inbound connection from the EKS cluster control plane on TCP port 10250 for logs, exec and port-forward operations. - Each host must allow TCP and UDP network connectivity to and from other hosts that are running ``CoreDNS`` on UDP port ``53`` for service and pod DNS names.
7420
7420
  :param remote_pod_networks: The list of network CIDRs that can contain pods that run Kubernetes webhooks on hybrid nodes. These CIDR blocks are determined by configuring your Container Network Interface (CNI) plugin. We recommend the Calico CNI or Cilium CNI. Note that the Amazon VPC CNI plugin for Kubernetes isn't available for on-premises and edge locations. Enter one or more IPv4 CIDR blocks in decimal dotted-quad notation (for example, ``10.2.0.0/16`` ). It must satisfy the following requirements: - Each block must be within an ``IPv4`` RFC-1918 network range. Minimum allowed size is /24, maximum allowed size is /8. Publicly-routable addresses aren't supported. - Each block cannot overlap with the range of the VPC CIDR blocks for your EKS resources, or the block of the Kubernetes service IP range.
@@ -8034,12 +8034,12 @@ class CfnClusterProps:
8034
8034
  :param bootstrap_self_managed_addons: If you set this value to ``False`` when creating a cluster, the default networking add-ons will not be installed. The default networking addons include vpc-cni, coredns, and kube-proxy. Use this option when you plan to install third-party alternative add-ons or self-manage the default networking add-ons.
8035
8035
  :param compute_config: Indicates the current configuration of the compute capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the compute capability is enabled, EKS Auto Mode will create and delete EC2 Managed Instances in your AWS account. For more information, see EKS Auto Mode compute capability in the *Amazon EKS User Guide* .
8036
8036
  :param encryption_config: The encryption configuration for the cluster.
8037
- :param force: Force cluster version update. Default: - false
8037
+ :param force: Set this value to ``true`` to override upgrade-blocking readiness checks when updating a cluster. Default: - false
8038
8038
  :param kubernetes_network_config: The Kubernetes network configuration for the cluster.
8039
8039
  :param logging: The logging configuration for your cluster.
8040
8040
  :param name: The unique name to give to your cluster. The name can contain only alphanumeric characters (case-sensitive) and hyphens. It must start with an alphanumeric character and can't be longer than 100 characters. The name must be unique within the AWS Region and AWS account that you're creating the cluster in. Note that underscores can't be used in AWS CloudFormation .
8041
8041
  :param outpost_config: An object representing the configuration of your local Amazon EKS cluster on an AWS Outpost. This object isn't available for clusters on the AWS cloud.
8042
- :param remote_network_config: The configuration in the cluster for EKS Hybrid Nodes. You can't change or update this configuration after the cluster is created.
8042
+ :param remote_network_config: The configuration in the cluster for EKS Hybrid Nodes. You can add, change, or remove this configuration after the cluster is created.
8043
8043
  :param storage_config: Indicates the current configuration of the block storage capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the block storage capability is enabled, EKS Auto Mode will create and delete EBS volumes in your AWS account. For more information, see EKS Auto Mode block storage capability in the *Amazon EKS User Guide* .
8044
8044
  :param tags: The metadata that you apply to the cluster to assist with categorization and organization. Each tag consists of a key and an optional value, both of which you define. Cluster tags don't propagate to any other resources associated with the cluster. .. epigraph:: You must have the ``eks:TagResource`` and ``eks:UntagResource`` permissions for your `IAM principal <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html>`_ to manage the AWS CloudFormation stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.
8045
8045
  :param upgrade_policy: This value indicates if extended support is enabled or disabled for the cluster. `Learn more about EKS Extended Support in the *Amazon EKS User Guide* . <https://docs.aws.amazon.com/eks/latest/userguide/extended-support-control.html>`_
@@ -8272,7 +8272,7 @@ class CfnClusterProps:
8272
8272
  def force(
8273
8273
  self,
8274
8274
  ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
8275
- '''Force cluster version update.
8275
+ '''Set this value to ``true`` to override upgrade-blocking readiness checks when updating a cluster.
8276
8276
 
8277
8277
  :default: - false
8278
8278
 
@@ -8333,7 +8333,7 @@ class CfnClusterProps:
8333
8333
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnCluster.RemoteNetworkConfigProperty]]:
8334
8334
  '''The configuration in the cluster for EKS Hybrid Nodes.
8335
8335
 
8336
- You can't change or update this configuration after the cluster is created.
8336
+ You can add, change, or remove this configuration after the cluster is created.
8337
8337
 
8338
8338
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html#cfn-eks-cluster-remotenetworkconfig
8339
8339
  '''
@@ -11033,10 +11033,12 @@ class CfnPodIdentityAssociation(
11033
11033
  service_account="serviceAccount",
11034
11034
 
11035
11035
  # the properties below are optional
11036
+ disable_session_tags=False,
11036
11037
  tags=[CfnTag(
11037
11038
  key="key",
11038
11039
  value="value"
11039
- )]
11040
+ )],
11041
+ target_role_arn="targetRoleArn"
11040
11042
  )
11041
11043
  '''
11042
11044
 
@@ -11049,7 +11051,9 @@ class CfnPodIdentityAssociation(
11049
11051
  namespace: builtins.str,
11050
11052
  role_arn: builtins.str,
11051
11053
  service_account: builtins.str,
11054
+ disable_session_tags: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
11052
11055
  tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
11056
+ target_role_arn: typing.Optional[builtins.str] = None,
11053
11057
  ) -> None:
11054
11058
  '''
11055
11059
  :param scope: Scope in which this resource is defined.
@@ -11058,7 +11062,9 @@ class CfnPodIdentityAssociation(
11058
11062
  :param namespace: The name of the Kubernetes namespace inside the cluster to create the association in. The service account and the pods that use the service account must be in this namespace.
11059
11063
  :param role_arn: The Amazon Resource Name (ARN) of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.
11060
11064
  :param service_account: The name of the Kubernetes service account inside the cluster to associate the IAM credentials with.
11065
+ :param disable_session_tags: The Disable Session Tags of the pod identity association.
11061
11066
  :param tags: Metadata that assists with categorization and organization. Each tag consists of a key and an optional value. You define both. Tags don't propagate to any other cluster or AWS resources. The following basic restrictions apply to tags: - Maximum number of tags per resource – 50 - For each resource, each tag key must be unique, and each tag key can have only one value. - Maximum key length – 128 Unicode characters in UTF-8 - Maximum value length – 256 Unicode characters in UTF-8 - If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : /
11067
+ :param target_role_arn: The Target Role Arn of the pod identity association.
11062
11068
  '''
11063
11069
  if __debug__:
11064
11070
  type_hints = typing.get_type_hints(_typecheckingstub__be8311b6089cea26f85c63a586f0c5b063230a1b4a96ffcd4c6c983a331d8652)
@@ -11069,7 +11075,9 @@ class CfnPodIdentityAssociation(
11069
11075
  namespace=namespace,
11070
11076
  role_arn=role_arn,
11071
11077
  service_account=service_account,
11078
+ disable_session_tags=disable_session_tags,
11072
11079
  tags=tags,
11080
+ target_role_arn=target_role_arn,
11073
11081
  )
11074
11082
 
11075
11083
  jsii.create(self.__class__, self, [scope, id, props])
@@ -11122,6 +11130,15 @@ class CfnPodIdentityAssociation(
11122
11130
  '''
11123
11131
  return typing.cast(builtins.str, jsii.get(self, "attrAssociationId"))
11124
11132
 
11133
+ @builtins.property
11134
+ @jsii.member(jsii_name="attrExternalId")
11135
+ def attr_external_id(self) -> builtins.str:
11136
+ '''The External Id of the pod identity association.
11137
+
11138
+ :cloudformationAttribute: ExternalId
11139
+ '''
11140
+ return typing.cast(builtins.str, jsii.get(self, "attrExternalId"))
11141
+
11125
11142
  @builtins.property
11126
11143
  @jsii.member(jsii_name="cdkTagManager")
11127
11144
  def cdk_tag_manager(self) -> _TagManager_0a598cb3:
@@ -11185,6 +11202,24 @@ class CfnPodIdentityAssociation(
11185
11202
  check_type(argname="argument value", value=value, expected_type=type_hints["value"])
11186
11203
  jsii.set(self, "serviceAccount", value) # pyright: ignore[reportArgumentType]
11187
11204
 
11205
+ @builtins.property
11206
+ @jsii.member(jsii_name="disableSessionTags")
11207
+ def disable_session_tags(
11208
+ self,
11209
+ ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
11210
+ '''The Disable Session Tags of the pod identity association.'''
11211
+ return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "disableSessionTags"))
11212
+
11213
+ @disable_session_tags.setter
11214
+ def disable_session_tags(
11215
+ self,
11216
+ value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
11217
+ ) -> None:
11218
+ if __debug__:
11219
+ type_hints = typing.get_type_hints(_typecheckingstub__cb3dbe4cc3b44e9265bbfe13e41235db909b0c1dc0e052b3bdda07fd4b228e8b)
11220
+ check_type(argname="argument value", value=value, expected_type=type_hints["value"])
11221
+ jsii.set(self, "disableSessionTags", value) # pyright: ignore[reportArgumentType]
11222
+
11188
11223
  @builtins.property
11189
11224
  @jsii.member(jsii_name="tags")
11190
11225
  def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -11198,6 +11233,19 @@ class CfnPodIdentityAssociation(
11198
11233
  check_type(argname="argument value", value=value, expected_type=type_hints["value"])
11199
11234
  jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
11200
11235
 
11236
+ @builtins.property
11237
+ @jsii.member(jsii_name="targetRoleArn")
11238
+ def target_role_arn(self) -> typing.Optional[builtins.str]:
11239
+ '''The Target Role Arn of the pod identity association.'''
11240
+ return typing.cast(typing.Optional[builtins.str], jsii.get(self, "targetRoleArn"))
11241
+
11242
+ @target_role_arn.setter
11243
+ def target_role_arn(self, value: typing.Optional[builtins.str]) -> None:
11244
+ if __debug__:
11245
+ type_hints = typing.get_type_hints(_typecheckingstub__cb6220c6db8cf93a8a307b1ba0630d6bc64b4a09325e7cfe5854228aa75ff833)
11246
+ check_type(argname="argument value", value=value, expected_type=type_hints["value"])
11247
+ jsii.set(self, "targetRoleArn", value) # pyright: ignore[reportArgumentType]
11248
+
11201
11249
 
11202
11250
  @jsii.data_type(
11203
11251
  jsii_type="aws-cdk-lib.aws_eks.CfnPodIdentityAssociationProps",
@@ -11207,7 +11255,9 @@ class CfnPodIdentityAssociation(
11207
11255
  "namespace": "namespace",
11208
11256
  "role_arn": "roleArn",
11209
11257
  "service_account": "serviceAccount",
11258
+ "disable_session_tags": "disableSessionTags",
11210
11259
  "tags": "tags",
11260
+ "target_role_arn": "targetRoleArn",
11211
11261
  },
11212
11262
  )
11213
11263
  class CfnPodIdentityAssociationProps:
@@ -11218,7 +11268,9 @@ class CfnPodIdentityAssociationProps:
11218
11268
  namespace: builtins.str,
11219
11269
  role_arn: builtins.str,
11220
11270
  service_account: builtins.str,
11271
+ disable_session_tags: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
11221
11272
  tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
11273
+ target_role_arn: typing.Optional[builtins.str] = None,
11222
11274
  ) -> None:
11223
11275
  '''Properties for defining a ``CfnPodIdentityAssociation``.
11224
11276
 
@@ -11226,7 +11278,9 @@ class CfnPodIdentityAssociationProps:
11226
11278
  :param namespace: The name of the Kubernetes namespace inside the cluster to create the association in. The service account and the pods that use the service account must be in this namespace.
11227
11279
  :param role_arn: The Amazon Resource Name (ARN) of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.
11228
11280
  :param service_account: The name of the Kubernetes service account inside the cluster to associate the IAM credentials with.
11281
+ :param disable_session_tags: The Disable Session Tags of the pod identity association.
11229
11282
  :param tags: Metadata that assists with categorization and organization. Each tag consists of a key and an optional value. You define both. Tags don't propagate to any other cluster or AWS resources. The following basic restrictions apply to tags: - Maximum number of tags per resource – 50 - For each resource, each tag key must be unique, and each tag key can have only one value. - Maximum key length – 128 Unicode characters in UTF-8 - Maximum value length – 256 Unicode characters in UTF-8 - If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : /
11283
+ :param target_role_arn: The Target Role Arn of the pod identity association.
11230
11284
 
11231
11285
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-podidentityassociation.html
11232
11286
  :exampleMetadata: fixture=_generated
@@ -11244,10 +11298,12 @@ class CfnPodIdentityAssociationProps:
11244
11298
  service_account="serviceAccount",
11245
11299
 
11246
11300
  # the properties below are optional
11301
+ disable_session_tags=False,
11247
11302
  tags=[CfnTag(
11248
11303
  key="key",
11249
11304
  value="value"
11250
- )]
11305
+ )],
11306
+ target_role_arn="targetRoleArn"
11251
11307
  )
11252
11308
  '''
11253
11309
  if __debug__:
@@ -11256,15 +11312,21 @@ class CfnPodIdentityAssociationProps:
11256
11312
  check_type(argname="argument namespace", value=namespace, expected_type=type_hints["namespace"])
11257
11313
  check_type(argname="argument role_arn", value=role_arn, expected_type=type_hints["role_arn"])
11258
11314
  check_type(argname="argument service_account", value=service_account, expected_type=type_hints["service_account"])
11315
+ check_type(argname="argument disable_session_tags", value=disable_session_tags, expected_type=type_hints["disable_session_tags"])
11259
11316
  check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
11317
+ check_type(argname="argument target_role_arn", value=target_role_arn, expected_type=type_hints["target_role_arn"])
11260
11318
  self._values: typing.Dict[builtins.str, typing.Any] = {
11261
11319
  "cluster_name": cluster_name,
11262
11320
  "namespace": namespace,
11263
11321
  "role_arn": role_arn,
11264
11322
  "service_account": service_account,
11265
11323
  }
11324
+ if disable_session_tags is not None:
11325
+ self._values["disable_session_tags"] = disable_session_tags
11266
11326
  if tags is not None:
11267
11327
  self._values["tags"] = tags
11328
+ if target_role_arn is not None:
11329
+ self._values["target_role_arn"] = target_role_arn
11268
11330
 
11269
11331
  @builtins.property
11270
11332
  def cluster_name(self) -> builtins.str:
@@ -11310,6 +11372,17 @@ class CfnPodIdentityAssociationProps:
11310
11372
  assert result is not None, "Required property 'service_account' is missing"
11311
11373
  return typing.cast(builtins.str, result)
11312
11374
 
11375
+ @builtins.property
11376
+ def disable_session_tags(
11377
+ self,
11378
+ ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
11379
+ '''The Disable Session Tags of the pod identity association.
11380
+
11381
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-podidentityassociation.html#cfn-eks-podidentityassociation-disablesessiontags
11382
+ '''
11383
+ result = self._values.get("disable_session_tags")
11384
+ return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
11385
+
11313
11386
  @builtins.property
11314
11387
  def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
11315
11388
  '''Metadata that assists with categorization and organization.
@@ -11335,6 +11408,15 @@ class CfnPodIdentityAssociationProps:
11335
11408
  result = self._values.get("tags")
11336
11409
  return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
11337
11410
 
11411
+ @builtins.property
11412
+ def target_role_arn(self) -> typing.Optional[builtins.str]:
11413
+ '''The Target Role Arn of the pod identity association.
11414
+
11415
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-podidentityassociation.html#cfn-eks-podidentityassociation-targetrolearn
11416
+ '''
11417
+ result = self._values.get("target_role_arn")
11418
+ return typing.cast(typing.Optional[builtins.str], result)
11419
+
11338
11420
  def __eq__(self, rhs: typing.Any) -> builtins.bool:
11339
11421
  return isinstance(rhs, self.__class__) and rhs._values == self._values
11340
11422
 
@@ -16144,6 +16226,10 @@ class NodegroupAmiType(enum.Enum):
16144
16226
  '''Bottlerocket Linux with Nvidia-GPU support (ARM-64).'''
16145
16227
  BOTTLEROCKET_X86_64_NVIDIA = "BOTTLEROCKET_X86_64_NVIDIA"
16146
16228
  '''Bottlerocket with Nvidia-GPU support (x86-64).'''
16229
+ BOTTLEROCKET_ARM_64_FIPS = "BOTTLEROCKET_ARM_64_FIPS"
16230
+ '''Bottlerocket Linux (ARM-64) with FIPS enabled.'''
16231
+ BOTTLEROCKET_X86_64_FIPS = "BOTTLEROCKET_X86_64_FIPS"
16232
+ '''Bottlerocket (x86-64) with FIPS enabled.'''
16147
16233
  WINDOWS_CORE_2019_X86_64 = "WINDOWS_CORE_2019_X86_64"
16148
16234
  '''Windows Core 2019 (x86-64).'''
16149
16235
  WINDOWS_CORE_2022_X86_64 = "WINDOWS_CORE_2022_X86_64"
@@ -22706,7 +22792,9 @@ def _typecheckingstub__be8311b6089cea26f85c63a586f0c5b063230a1b4a96ffcd4c6c983a3
22706
22792
  namespace: builtins.str,
22707
22793
  role_arn: builtins.str,
22708
22794
  service_account: builtins.str,
22795
+ disable_session_tags: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
22709
22796
  tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
22797
+ target_role_arn: typing.Optional[builtins.str] = None,
22710
22798
  ) -> None:
22711
22799
  """Type checking stubs"""
22712
22800
  pass
@@ -22747,19 +22835,33 @@ def _typecheckingstub__ea3bb34348aff57e29a5352e7460510bda8dd51720dbf7d275297137f
22747
22835
  """Type checking stubs"""
22748
22836
  pass
22749
22837
 
22838
+ def _typecheckingstub__cb3dbe4cc3b44e9265bbfe13e41235db909b0c1dc0e052b3bdda07fd4b228e8b(
22839
+ value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
22840
+ ) -> None:
22841
+ """Type checking stubs"""
22842
+ pass
22843
+
22750
22844
  def _typecheckingstub__b0e0a0551adefc10761733af04b8c51e7dad6b483be9252882ecff10539c7dcc(
22751
22845
  value: typing.Optional[typing.List[_CfnTag_f6864754]],
22752
22846
  ) -> None:
22753
22847
  """Type checking stubs"""
22754
22848
  pass
22755
22849
 
22850
+ def _typecheckingstub__cb6220c6db8cf93a8a307b1ba0630d6bc64b4a09325e7cfe5854228aa75ff833(
22851
+ value: typing.Optional[builtins.str],
22852
+ ) -> None:
22853
+ """Type checking stubs"""
22854
+ pass
22855
+
22756
22856
  def _typecheckingstub__40e8da56b529234cdbb596fa46af952a935adf744e907347861dfc232b89038b(
22757
22857
  *,
22758
22858
  cluster_name: builtins.str,
22759
22859
  namespace: builtins.str,
22760
22860
  role_arn: builtins.str,
22761
22861
  service_account: builtins.str,
22862
+ disable_session_tags: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
22762
22863
  tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
22864
+ target_role_arn: typing.Optional[builtins.str] = None,
22763
22865
  ) -> None:
22764
22866
  """Type checking stubs"""
22765
22867
  pass
@@ -324,6 +324,20 @@ rule.add_target(
324
324
  ))
325
325
  ```
326
326
 
327
+ ## Invoke an API Gateway V2 HTTP API
328
+
329
+ Use the `ApiGatewayV2` target to trigger a HTTP API.
330
+
331
+ ```python
332
+ import aws_cdk.aws_apigatewayv2 as apigwv2
333
+
334
+ # http_api: apigwv2.HttpApi
335
+ # rule: events.Rule
336
+
337
+
338
+ rule.add_target(targets.ApiGatewayV2(http_api))
339
+ ```
340
+
327
341
  ## Invoke an API Destination
328
342
 
329
343
  Use the `targets.ApiDestination` target to trigger an external API. You need to
@@ -648,6 +662,7 @@ from .. import Duration as _Duration_4839e8c3, IResource as _IResource_c80c4260
648
662
  from ..aws_apigateway import (
649
663
  IRestApi as _IRestApi_1f02523d, RestApi as _RestApi_777c8238
650
664
  )
665
+ from ..aws_apigatewayv2 import IHttpApi as _IHttpApi_dc82ff0d
651
666
  from ..aws_appsync import IGraphqlApi as _IGraphqlApi_ed8270f3
652
667
  from ..aws_codebuild import IProject as _IProject_aafae30a
653
668
  from ..aws_codepipeline import IPipeline as _IPipeline_0931f838
@@ -900,6 +915,101 @@ class ApiGateway(
900
915
  return typing.cast(_RestApi_777c8238, jsii.get(self, "restApi"))
901
916
 
902
917
 
918
+ @jsii.implements(_IRuleTarget_7a91f454)
919
+ class ApiGatewayV2(
920
+ metaclass=jsii.JSIIMeta,
921
+ jsii_type="aws-cdk-lib.aws_events_targets.ApiGatewayV2",
922
+ ):
923
+ '''Use an API Gateway V2 HTTP APIs as a target for Amazon EventBridge rules.
924
+
925
+ :exampleMetadata: infused
926
+
927
+ Example::
928
+
929
+ import aws_cdk.aws_apigatewayv2 as apigwv2
930
+
931
+ # http_api: apigwv2.HttpApi
932
+ # rule: events.Rule
933
+
934
+
935
+ rule.add_target(targets.ApiGatewayV2(http_api))
936
+ '''
937
+
938
+ def __init__(
939
+ self,
940
+ http_api: _IHttpApi_dc82ff0d,
941
+ *,
942
+ event_role: typing.Optional[_IRole_235f5d8e] = None,
943
+ header_parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
944
+ method: typing.Optional[builtins.str] = None,
945
+ path: typing.Optional[builtins.str] = None,
946
+ path_parameter_values: typing.Optional[typing.Sequence[builtins.str]] = None,
947
+ post_body: typing.Optional[_RuleTargetInput_6beca786] = None,
948
+ query_string_parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
949
+ stage: typing.Optional[builtins.str] = None,
950
+ dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
951
+ max_event_age: typing.Optional[_Duration_4839e8c3] = None,
952
+ retry_attempts: typing.Optional[jsii.Number] = None,
953
+ ) -> None:
954
+ '''
955
+ :param http_api: - IHttpApi implementation to use as event target.
956
+ :param event_role: The role to assume before invoking the target (i.e., the pipeline) when the given rule is triggered. Default: - a new role will be created
957
+ :param header_parameters: The headers to be set when requesting API. Default: no header parameters
958
+ :param method: The method for api resource invoked by the rule. Default: '*' that treated as ANY
959
+ :param path: The api resource invoked by the rule. We can use wildcards('*') to specify the path. In that case, an equal number of real values must be specified for pathParameterValues. Default: '/'
960
+ :param path_parameter_values: The path parameter values to be used to populate to wildcards("*") of requesting api path. Default: no path parameters
961
+ :param post_body: This will be the post request body send to the API. Default: the entire EventBridge event
962
+ :param query_string_parameters: The query parameters to be set when requesting API. Default: no querystring parameters
963
+ :param stage: The deploy stage of api gateway invoked by the rule. Default: the value of deploymentStage.stageName of target api gateway.
964
+ :param dead_letter_queue: The SQS queue to be used as deadLetterQueue. Check out the `considerations for using a dead-letter queue <https://docs.aws.amazon.com/eventbridge/latest/userguide/rule-dlq.html#dlq-considerations>`_. The events not successfully delivered are automatically retried for a specified period of time, depending on the retry policy of the target. If an event is not delivered before all retry attempts are exhausted, it will be sent to the dead letter queue. Default: - no dead-letter queue
965
+ :param max_event_age: The maximum age of a request that Lambda sends to a function for processing. Minimum value of 60. Maximum value of 86400. Default: Duration.hours(24)
966
+ :param retry_attempts: The maximum number of times to retry when the function returns an error. Minimum value of 0. Maximum value of 185. Default: 185
967
+ '''
968
+ if __debug__:
969
+ type_hints = typing.get_type_hints(_typecheckingstub__383729f98d86a6617d8a045270e12ac1a082325deb3e0e67276cb84f86261302)
970
+ check_type(argname="argument http_api", value=http_api, expected_type=type_hints["http_api"])
971
+ props = ApiGatewayProps(
972
+ event_role=event_role,
973
+ header_parameters=header_parameters,
974
+ method=method,
975
+ path=path,
976
+ path_parameter_values=path_parameter_values,
977
+ post_body=post_body,
978
+ query_string_parameters=query_string_parameters,
979
+ stage=stage,
980
+ dead_letter_queue=dead_letter_queue,
981
+ max_event_age=max_event_age,
982
+ retry_attempts=retry_attempts,
983
+ )
984
+
985
+ jsii.create(self.__class__, self, [http_api, props])
986
+
987
+ @jsii.member(jsii_name="bind")
988
+ def bind(
989
+ self,
990
+ rule: _IRule_af9e3d28,
991
+ _id: typing.Optional[builtins.str] = None,
992
+ ) -> _RuleTargetConfig_4e70fe03:
993
+ '''Returns a RuleTarget that can be used to trigger this API Gateway HTTP APIs as a result from an EventBridge event.
994
+
995
+ :param rule: -
996
+ :param _id: -
997
+
998
+ :see: https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-use-resource-based.html#eb-api-gateway-permissions
999
+ '''
1000
+ if __debug__:
1001
+ type_hints = typing.get_type_hints(_typecheckingstub__278e3545966677d368a504247d212e49fccdecf42a63bdd56101b78bbeed205d)
1002
+ check_type(argname="argument rule", value=rule, expected_type=type_hints["rule"])
1003
+ check_type(argname="argument _id", value=_id, expected_type=type_hints["_id"])
1004
+ return typing.cast(_RuleTargetConfig_4e70fe03, jsii.invoke(self, "bind", [rule, _id]))
1005
+
1006
+ @builtins.property
1007
+ @jsii.member(jsii_name="iHttpApi")
1008
+ def i_http_api(self) -> _IHttpApi_dc82ff0d:
1009
+ '''Returns the target IHttpApi.'''
1010
+ return typing.cast(_IHttpApi_dc82ff0d, jsii.get(self, "iHttpApi"))
1011
+
1012
+
903
1013
  @jsii.implements(_IRuleTarget_7a91f454)
904
1014
  class AppSync(
905
1015
  metaclass=jsii.JSIIMeta,
@@ -5863,6 +5973,7 @@ __all__ = [
5863
5973
  "ApiDestinationProps",
5864
5974
  "ApiGateway",
5865
5975
  "ApiGatewayProps",
5976
+ "ApiGatewayV2",
5866
5977
  "AppSync",
5867
5978
  "AppSyncGraphQLApiProps",
5868
5979
  "AwsApi",
@@ -5955,6 +6066,31 @@ def _typecheckingstub__f34d8ba93048cf243454dc97d2236199033c050fc0bbc6ff84e18fa60
5955
6066
  """Type checking stubs"""
5956
6067
  pass
5957
6068
 
6069
+ def _typecheckingstub__383729f98d86a6617d8a045270e12ac1a082325deb3e0e67276cb84f86261302(
6070
+ http_api: _IHttpApi_dc82ff0d,
6071
+ *,
6072
+ event_role: typing.Optional[_IRole_235f5d8e] = None,
6073
+ header_parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
6074
+ method: typing.Optional[builtins.str] = None,
6075
+ path: typing.Optional[builtins.str] = None,
6076
+ path_parameter_values: typing.Optional[typing.Sequence[builtins.str]] = None,
6077
+ post_body: typing.Optional[_RuleTargetInput_6beca786] = None,
6078
+ query_string_parameters: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
6079
+ stage: typing.Optional[builtins.str] = None,
6080
+ dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
6081
+ max_event_age: typing.Optional[_Duration_4839e8c3] = None,
6082
+ retry_attempts: typing.Optional[jsii.Number] = None,
6083
+ ) -> None:
6084
+ """Type checking stubs"""
6085
+ pass
6086
+
6087
+ def _typecheckingstub__278e3545966677d368a504247d212e49fccdecf42a63bdd56101b78bbeed205d(
6088
+ rule: _IRule_af9e3d28,
6089
+ _id: typing.Optional[builtins.str] = None,
6090
+ ) -> None:
6091
+ """Type checking stubs"""
6092
+ pass
6093
+
5958
6094
  def _typecheckingstub__56a99cbd83a0d7a956b68eb6ee5cedd89a2b1c37754c2dc7f5a5ea2ccffb1c7f(
5959
6095
  appsync_api: _IGraphqlApi_ed8270f3,
5960
6096
  *,
@@ -3386,7 +3386,7 @@ class CfnFileSystem(
3386
3386
  :param disk_iops_configuration: The SSD IOPS (input/output operations per second) configuration for an Amazon FSx for Windows file system. By default, Amazon FSx automatically provisions 3 IOPS per GiB of storage capacity. You can provision additional IOPS per GiB of storage, up to the maximum limit associated with your chosen throughput capacity.
3387
3387
  :param preferred_subnet_id: Required when ``DeploymentType`` is set to ``MULTI_AZ_1`` . This specifies the subnet in which you want the preferred file server to be located. For in- AWS applications, we recommend that you launch your clients in the same availability zone as your preferred file server to reduce cross-availability zone data transfer costs and minimize latency.
3388
3388
  :param self_managed_active_directory_configuration: The configuration that Amazon FSx uses to join a FSx for Windows File Server file system or an FSx for ONTAP storage virtual machine (SVM) to a self-managed (including on-premises) Microsoft Active Directory (AD) directory. For more information, see `Using Amazon FSx for Windows with your self-managed Microsoft Active Directory <https://docs.aws.amazon.com/fsx/latest/WindowsGuide/self-managed-AD.html>`_ or `Managing FSx for ONTAP SVMs <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/managing-svms.html>`_ .
3389
- :param weekly_maintenance_start_time: A recurring weekly time, in the format ``D:HH:MM`` . ``D`` is the day of the week, for which 1 represents Monday and 7 represents Sunday. For further details, see `the ISO-8601 spec as described on Wikipedia <https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/ISO_week_date>`_ . ``HH`` is the zero-padded hour of the day (0-23), and ``MM`` is the zero-padded minute of the hour. For example, ``1:05:00`` specifies maintenance at 5 AM Monday.
3389
+ :param weekly_maintenance_start_time: The preferred start time to perform weekly maintenance, formatted d:HH:MM in the UTC time zone, where d is the weekday number, from 1 through 7, beginning with Monday and ending with Sunday.
3390
3390
 
3391
3391
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-windowsconfiguration.html
3392
3392
  :exampleMetadata: fixture=_generated
@@ -3617,13 +3617,7 @@ class CfnFileSystem(
3617
3617
 
3618
3618
  @builtins.property
3619
3619
  def weekly_maintenance_start_time(self) -> typing.Optional[builtins.str]:
3620
- '''A recurring weekly time, in the format ``D:HH:MM`` .
3621
-
3622
- ``D`` is the day of the week, for which 1 represents Monday and 7 represents Sunday. For further details, see `the ISO-8601 spec as described on Wikipedia <https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/ISO_week_date>`_ .
3623
-
3624
- ``HH`` is the zero-padded hour of the day (0-23), and ``MM`` is the zero-padded minute of the hour.
3625
-
3626
- For example, ``1:05:00`` specifies maintenance at 5 AM Monday.
3620
+ '''The preferred start time to perform weekly maintenance, formatted d:HH:MM in the UTC time zone, where d is the weekday number, from 1 through 7, beginning with Monday and ending with Sunday.
3627
3621
 
3628
3622
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-windowsconfiguration.html#cfn-fsx-filesystem-windowsconfiguration-weeklymaintenancestarttime
3629
3623
  '''