aws-cdk-lib 2.189.1__py3-none-any.whl → 2.190.0__py3-none-any.whl

aws_cdk/aws_neptune/__init__.py

@@ -2710,14 +2710,6 @@ class CfnDBSubnetGroup(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
-    @builtins.property
-    @jsii.member(jsii_name="attrId")
-    def attr_id(self) -> builtins.str:
-        '''
-        :cloudformationAttribute: Id
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrId"))
-
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:

aws_cdk/aws_opensearchservice/__init__.py

@@ -940,7 +940,9 @@ class CfnApplication(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_opensearchservice.CfnApplication",
 ):
-    '''Creates an OpenSearch Application.
+    '''Creates an OpenSearch UI application.
+
+    For more information, see `Using the OpenSearch user interface in Amazon OpenSearch Service <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/application.html>`_ .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-application.html
     :cloudformationResource: AWS::OpenSearchService::Application
@@ -994,11 +996,11 @@ class CfnApplication(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param name: Name of an OpenSearch Application.
+        :param name: The name of an OpenSearch application.
         :param app_configs: List of application configurations.
         :param data_sources: List of data sources.
-        :param endpoint: Endpoint URL of an OpenSearch Application.
-        :param iam_identity_center_options: Container for IAM Identity Center Options settings.
+        :param endpoint: The endpoint URL of an OpenSearch application.
+        :param iam_identity_center_options: Settings container for integrating IAM Identity Center with OpenSearch UI applications, which enables enabling secure user authentication and access control across multiple data sources. This setup supports single sign-on (SSO) through IAM Identity Center, allowing centralized user management.
         :param tags: An arbitrary set of tags (key-value pairs) for this application.
         '''
         if __debug__:
@@ -1060,7 +1062,7 @@ class CfnApplication(
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:
-        '''Unique identifier for an OpenSearch application.
+        '''The unique identifier of an OpenSearch application.
 
         :cloudformationAttribute: Id
         '''
@@ -1080,7 +1082,7 @@ class CfnApplication(
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
-        '''Name of an OpenSearch Application.'''
+        '''The name of an OpenSearch application.'''
         return typing.cast(builtins.str, jsii.get(self, "name"))
 
     @name.setter
@@ -1129,7 +1131,7 @@ class CfnApplication(
     @builtins.property
     @jsii.member(jsii_name="endpoint")
     def endpoint(self) -> typing.Optional[builtins.str]:
-        '''Endpoint URL of an OpenSearch Application.'''
+        '''The endpoint URL of an OpenSearch application.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "endpoint"))
 
     @endpoint.setter
@@ -1144,7 +1146,7 @@ class CfnApplication(
     def iam_identity_center_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.IamIdentityCenterOptionsProperty"]]:
-        '''Container for IAM Identity Center Options settings.'''
+        '''Settings container for integrating IAM Identity Center with OpenSearch UI applications, which enables enabling secure user authentication and access control across multiple data sources.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.IamIdentityCenterOptionsProperty"]], jsii.get(self, "iamIdentityCenterOptions"))
 
     @iam_identity_center_options.setter
@@ -1177,10 +1179,12 @@ class CfnApplication(
     )
     class AppConfigProperty:
         def __init__(self, *, key: builtins.str, value: builtins.str) -> None:
-            '''Configurations of the OpenSearch Application.
+            '''Configuration settings for an OpenSearch application.
+
+            For more information, see see `Using the OpenSearch user interface in Amazon OpenSearch Service <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/application.html>`_ .
 
-            :param key: Specify the item to configure, such as admin role for the OpenSearch Application.
-            :param value: Specifies the value to configure for the key, such as an IAM user ARN.
+            :param key: The configuration item to set, such as the admin role for the OpenSearch application.
+            :param value: The value assigned to the configuration key, such as an IAM user ARN.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-application-appconfig.html
             :exampleMetadata: fixture=_generated
@@ -1207,7 +1211,7 @@ class CfnApplication(
 
         @builtins.property
         def key(self) -> builtins.str:
-            '''Specify the item to configure, such as admin role for the OpenSearch Application.
+            '''The configuration item to set, such as the admin role for the OpenSearch application.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-application-appconfig.html#cfn-opensearchservice-application-appconfig-key
             '''
@@ -1217,7 +1221,7 @@ class CfnApplication(
 
         @builtins.property
         def value(self) -> builtins.str:
-            '''Specifies the value to configure for the key, such as an IAM user ARN.
+            '''The value assigned to the configuration key, such as an IAM user ARN.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-application-appconfig.html#cfn-opensearchservice-application-appconfig-value
             '''
@@ -1251,7 +1255,7 @@ class CfnApplication(
             data_source_arn: builtins.str,
             data_source_description: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Data sources that are associated with an OpenSearch Application.
+            '''Data sources that are associated with an OpenSearch application.
 
             :param data_source_arn: Amazon Resource Name (ARN) format.
             :param data_source_description: Detailed description of a data source.
@@ -1329,11 +1333,11 @@ class CfnApplication(
             iam_identity_center_instance_arn: typing.Optional[builtins.str] = None,
             iam_role_for_identity_center_application_arn: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Settings for IAM Identity Center for an OpenSearch Application.
+            '''Configuration settings for IAM Identity Center in an OpenSearch application.
 
-            :param enabled: IAM Identity Center is enabled for the OpenSearch Application.
+            :param enabled: Indicates whether IAM Identity Center is enabled for the OpenSearch application.
             :param iam_identity_center_instance_arn: Amazon Resource Name (ARN) format.
-            :param iam_role_for_identity_center_application_arn: Amazon Resource Name of the IAM Identity Center's Application created for the OpenSearch Application after enabling IAM Identity Center.
+            :param iam_role_for_identity_center_application_arn: The Amazon Resource Name (ARN) of the IAM role assigned to the IAM Identity Center application for the OpenSearch application.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-application-iamidentitycenteroptions.html
             :exampleMetadata: fixture=_generated
@@ -1367,7 +1371,7 @@ class CfnApplication(
         def enabled(
             self,
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''IAM Identity Center is enabled for the OpenSearch Application.
+            '''Indicates whether IAM Identity Center is enabled for the OpenSearch application.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-application-iamidentitycenteroptions.html#cfn-opensearchservice-application-iamidentitycenteroptions-enabled
             '''
@@ -1387,7 +1391,7 @@ class CfnApplication(
         def iam_role_for_identity_center_application_arn(
             self,
         ) -> typing.Optional[builtins.str]:
-            '''Amazon Resource Name of the IAM Identity Center's Application created for the OpenSearch Application after enabling IAM Identity Center.
+            '''The Amazon Resource Name (ARN) of the IAM role assigned to the IAM Identity Center application for the OpenSearch application.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-application-iamidentitycenteroptions.html#cfn-opensearchservice-application-iamidentitycenteroptions-iamroleforidentitycenterapplicationarn
             '''
@@ -1431,11 +1435,11 @@ class CfnApplicationProps:
     ) -> None:
         '''Properties for defining a ``CfnApplication``.
 
-        :param name: Name of an OpenSearch Application.
+        :param name: The name of an OpenSearch application.
         :param app_configs: List of application configurations.
         :param data_sources: List of data sources.
-        :param endpoint: Endpoint URL of an OpenSearch Application.
-        :param iam_identity_center_options: Container for IAM Identity Center Options settings.
+        :param endpoint: The endpoint URL of an OpenSearch application.
+        :param iam_identity_center_options: Settings container for integrating IAM Identity Center with OpenSearch UI applications, which enables enabling secure user authentication and access control across multiple data sources. This setup supports single sign-on (SSO) through IAM Identity Center, allowing centralized user management.
         :param tags: An arbitrary set of tags (key-value pairs) for this application.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-application.html
@@ -1497,7 +1501,7 @@ class CfnApplicationProps:
 
     @builtins.property
     def name(self) -> builtins.str:
-        '''Name of an OpenSearch Application.
+        '''The name of an OpenSearch application.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-application.html#cfn-opensearchservice-application-name
         '''
@@ -1529,7 +1533,7 @@ class CfnApplicationProps:
 
     @builtins.property
     def endpoint(self) -> typing.Optional[builtins.str]:
-        '''Endpoint URL of an OpenSearch Application.
+        '''The endpoint URL of an OpenSearch application.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-application.html#cfn-opensearchservice-application-endpoint
         '''
@@ -1540,7 +1544,9 @@ class CfnApplicationProps:
     def iam_identity_center_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.IamIdentityCenterOptionsProperty]]:
-        '''Container for IAM Identity Center Options settings.
+        '''Settings container for integrating IAM Identity Center with OpenSearch UI applications, which enables enabling secure user authentication and access control across multiple data sources.
+
+        This setup supports single sign-on (SSO) through IAM Identity Center, allowing centralized user management.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-application.html#cfn-opensearchservice-application-iamidentitycenteroptions
         '''
@@ -1761,7 +1767,7 @@ class CfnDomain(
         :param ebs_options: The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. For more information, see `EBS volume size limits <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/limits.html#ebsresource>`_ in the *Amazon OpenSearch Service Developer Guide* .
         :param encryption_at_rest_options: Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use. See `Encryption of data at rest for Amazon OpenSearch Service <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html>`_ . If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
         :param engine_version: The version of OpenSearch to use. The value must be in the format ``OpenSearch_X.Y`` or ``Elasticsearch_X.Y`` . If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see `Supported versions of OpenSearch and Elasticsearch <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/what-is.html#choosing-version>`_ in the *Amazon OpenSearch Service Developer Guide* . If you set the `EnableVersionUpgrade <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-upgradeopensearchdomain>`_ update policy to ``true`` , you can update ``EngineVersion`` without interruption. When ``EnableVersionUpgrade`` is set to ``false`` , or is not specified, updating ``EngineVersion`` results in `replacement <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement>`_ .
-        :param identity_center_options: Container for IAM Identity Center Option control for the domain.
+        :param identity_center_options: Configuration options for controlling IAM Identity Center integration within a domain.
         :param ip_address_type: Choose either dual stack or IPv4 as your IP address type. Dual stack allows you to share domain resources across IPv4 and IPv6 address types, and is the recommended option. If you set your IP address type to dual stack, you can't change your address type later.
         :param log_publishing_options: An object with one or more of the following keys: ``SEARCH_SLOW_LOGS`` , ``ES_APPLICATION_LOGS`` , ``INDEX_SLOW_LOGS`` , ``AUDIT_LOGS`` , depending on the types of logs you want to publish. Each key needs a valid ``LogPublishingOption`` value. For the full syntax, see the `examples <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html#aws-resource-opensearchservice-domain--examples>`_ .
         :param node_to_node_encryption_options: Specifies whether node-to-node encryption is enabled. See `Node-to-node encryption for Amazon OpenSearch Service <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ntn.html>`_ .
@@ -1898,7 +1904,7 @@ class CfnDomain(
     def attr_identity_center_options_identity_center_application_arn(
         self,
     ) -> builtins.str:
-        '''The ARN for IAM Identity Center Application which will integrate with Amazon OpenSearch Service.
+        '''The ARN of the IAM Identity Center application that integrates with Amazon OpenSearch Service.
 
         :cloudformationAttribute: IdentityCenterOptions.IdentityCenterApplicationARN
         '''
@@ -1907,7 +1913,7 @@ class CfnDomain(
     @builtins.property
     @jsii.member(jsii_name="attrIdentityCenterOptionsIdentityStoreId")
     def attr_identity_center_options_identity_store_id(self) -> builtins.str:
-        '''The ID of IAM Identity Store.
+        '''The identifier of the IAM Identity Store.
 
         :cloudformationAttribute: IdentityCenterOptions.IdentityStoreId
         '''
@@ -2180,7 +2186,7 @@ class CfnDomain(
     def identity_center_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomain.IdentityCenterOptionsProperty"]]:
-        '''Container for IAM Identity Center Option control for the domain.'''
+        '''Configuration options for controlling IAM Identity Center integration within a domain.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomain.IdentityCenterOptionsProperty"]], jsii.get(self, "identityCenterOptions"))
 
     @identity_center_options.setter
@@ -3372,14 +3378,16 @@ class CfnDomain(
             roles_key: typing.Optional[builtins.str] = None,
             subject_key: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Container for IAM Identity Center Options settings.
+            '''Settings container for integrating IAM Identity Center with OpenSearch UI applications, which enables enabling secure user authentication and access control across multiple data sources.
+
+            This setup supports single sign-on (SSO) through IAM Identity Center, allowing centralized user management.
 
-            :param enabled_api_access: True to enable IAM Identity Center for API access in Amazon OpenSearch Service.
-            :param identity_center_application_arn: The ARN for IAM Identity Center Application which will integrate with Amazon OpenSearch Service.
-            :param identity_center_instance_arn: The ARN for IAM Identity Center Instance.
-            :param identity_store_id: The ID of IAM Identity Store.
-            :param roles_key: Specify the attribute that contains the backend role (groupName, groupID) of IAM Identity Center.
-            :param subject_key: Specify the attribute that contains the subject (username, userID, email) of IAM Identity Center.
+            :param enabled_api_access: Indicates whether IAM Identity Center is enabled for the application.
+            :param identity_center_application_arn: The ARN of the IAM Identity Center application that integrates with Amazon OpenSearch Service.
+            :param identity_center_instance_arn: The Amazon Resource Name (ARN) of the IAM Identity Center instance.
+            :param identity_store_id: The identifier of the IAM Identity Store.
+            :param roles_key: Specifies the attribute that contains the backend role identifier (such as group name or group ID) in IAM Identity Center.
+            :param subject_key: Specifies the attribute that contains the subject identifier (such as username, user ID, or email) in IAM Identity Center.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.html
             :exampleMetadata: fixture=_generated
@@ -3425,7 +3433,7 @@ class CfnDomain(
         def enabled_api_access(
             self,
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''True to enable IAM Identity Center for API access in Amazon OpenSearch Service.
+            '''Indicates whether IAM Identity Center is enabled for the application.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.html#cfn-opensearchservice-domain-identitycenteroptions-enabledapiaccess
             '''
@@ -3434,7 +3442,7 @@ class CfnDomain(
 
         @builtins.property
         def identity_center_application_arn(self) -> typing.Optional[builtins.str]:
-            '''The ARN for IAM Identity Center Application which will integrate with Amazon OpenSearch Service.
+            '''The ARN of the IAM Identity Center application that integrates with Amazon OpenSearch Service.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.html#cfn-opensearchservice-domain-identitycenteroptions-identitycenterapplicationarn
             '''
@@ -3443,7 +3451,7 @@ class CfnDomain(
 
         @builtins.property
         def identity_center_instance_arn(self) -> typing.Optional[builtins.str]:
-            '''The ARN for IAM Identity Center Instance.
+            '''The Amazon Resource Name (ARN) of the IAM Identity Center instance.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.html#cfn-opensearchservice-domain-identitycenteroptions-identitycenterinstancearn
             '''
@@ -3452,7 +3460,7 @@ class CfnDomain(
 
         @builtins.property
         def identity_store_id(self) -> typing.Optional[builtins.str]:
-            '''The ID of IAM Identity Store.
+            '''The identifier of the IAM Identity Store.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.html#cfn-opensearchservice-domain-identitycenteroptions-identitystoreid
             '''
@@ -3461,7 +3469,7 @@ class CfnDomain(
 
         @builtins.property
         def roles_key(self) -> typing.Optional[builtins.str]:
-            '''Specify the attribute that contains the backend role (groupName, groupID) of IAM Identity Center.
+            '''Specifies the attribute that contains the backend role identifier (such as group name or group ID) in IAM Identity Center.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.html#cfn-opensearchservice-domain-identitycenteroptions-roleskey
             '''
@@ -3470,7 +3478,7 @@ class CfnDomain(
 
         @builtins.property
         def subject_key(self) -> typing.Optional[builtins.str]:
-            '''Specify the attribute that contains the subject (username, userID, email) of IAM Identity Center.
+            '''Specifies the attribute that contains the subject identifier (such as username, user ID, or email) in IAM Identity Center.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.html#cfn-opensearchservice-domain-identitycenteroptions-subjectkey
             '''
@@ -3854,11 +3862,11 @@ class CfnDomain(
             enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             type: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Container for specifying configuration of any node type.
+            '''Configuration options for defining the setup of any node type within the cluster.
 
-            :param count: The number of nodes of a particular node type in the cluster.
-            :param enabled: A boolean that indicates whether a particular node type is enabled or not.
-            :param type: The instance type of a particular node type in the cluster.
+            :param count: The number of nodes of a specific type within the cluster.
+            :param enabled: A boolean value indicating whether a specific node type is active or inactive.
+            :param type: The instance type of a particular node within the cluster.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-nodeconfig.html
             :exampleMetadata: fixture=_generated
@@ -3890,7 +3898,7 @@ class CfnDomain(
 
         @builtins.property
         def count(self) -> typing.Optional[jsii.Number]:
-            '''The number of nodes of a particular node type in the cluster.
+            '''The number of nodes of a specific type within the cluster.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-nodeconfig.html#cfn-opensearchservice-domain-nodeconfig-count
             '''
@@ -3901,7 +3909,7 @@ class CfnDomain(
         def enabled(
             self,
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''A boolean that indicates whether a particular node type is enabled or not.
+            '''A boolean value indicating whether a specific node type is active or inactive.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-nodeconfig.html#cfn-opensearchservice-domain-nodeconfig-enabled
             '''
@@ -3910,7 +3918,7 @@ class CfnDomain(
 
         @builtins.property
         def type(self) -> typing.Optional[builtins.str]:
-            '''The instance type of a particular node type in the cluster.
+            '''The instance type of a particular node within the cluster.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-nodeconfig.html#cfn-opensearchservice-domain-nodeconfig-type
             '''
@@ -3940,10 +3948,10 @@ class CfnDomain(
             node_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDomain.NodeConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             node_type: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Container for specifying node type.
+            '''Configuration settings for defining the node type within a cluster.
 
-            :param node_config: Container for specifying configuration of any node type.
-            :param node_type: Container for node type like coordinating.
+            :param node_config: Configuration options for defining the setup of any node type.
+            :param node_type: Defines the type of node, such as coordinating nodes.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-nodeoption.html
             :exampleMetadata: fixture=_generated
@@ -3977,7 +3985,7 @@ class CfnDomain(
         def node_config(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomain.NodeConfigProperty"]]:
-            '''Container for specifying configuration of any node type.
+            '''Configuration options for defining the setup of any node type.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-nodeoption.html#cfn-opensearchservice-domain-nodeoption-nodeconfig
             '''
@@ -3986,7 +3994,7 @@ class CfnDomain(
 
         @builtins.property
         def node_type(self) -> typing.Optional[builtins.str]:
-            '''Container for node type like coordinating.
+            '''Defines the type of node, such as coordinating nodes.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-nodeoption.html#cfn-opensearchservice-domain-nodeoption-nodetype
             '''
@@ -4952,7 +4960,7 @@ class CfnDomainProps:
         :param ebs_options: The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. For more information, see `EBS volume size limits <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/limits.html#ebsresource>`_ in the *Amazon OpenSearch Service Developer Guide* .
         :param encryption_at_rest_options: Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use. See `Encryption of data at rest for Amazon OpenSearch Service <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html>`_ . If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
         :param engine_version: The version of OpenSearch to use. The value must be in the format ``OpenSearch_X.Y`` or ``Elasticsearch_X.Y`` . If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see `Supported versions of OpenSearch and Elasticsearch <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/what-is.html#choosing-version>`_ in the *Amazon OpenSearch Service Developer Guide* . If you set the `EnableVersionUpgrade <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-upgradeopensearchdomain>`_ update policy to ``true`` , you can update ``EngineVersion`` without interruption. When ``EnableVersionUpgrade`` is set to ``false`` , or is not specified, updating ``EngineVersion`` results in `replacement <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement>`_ .
-        :param identity_center_options: Container for IAM Identity Center Option control for the domain.
+        :param identity_center_options: Configuration options for controlling IAM Identity Center integration within a domain.
         :param ip_address_type: Choose either dual stack or IPv4 as your IP address type. Dual stack allows you to share domain resources across IPv4 and IPv6 address types, and is the recommended option. If you set your IP address type to dual stack, you can't change your address type later.
         :param log_publishing_options: An object with one or more of the following keys: ``SEARCH_SLOW_LOGS`` , ``ES_APPLICATION_LOGS`` , ``INDEX_SLOW_LOGS`` , ``AUDIT_LOGS`` , depending on the types of logs you want to publish. Each key needs a valid ``LogPublishingOption`` value. For the full syntax, see the `examples <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html#aws-resource-opensearchservice-domain--examples>`_ .
         :param node_to_node_encryption_options: Specifies whether node-to-node encryption is enabled. See `Node-to-node encryption for Amazon OpenSearch Service <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ntn.html>`_ .
@@ -5311,7 +5319,7 @@ class CfnDomainProps:
     def identity_center_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomain.IdentityCenterOptionsProperty]]:
-        '''Container for IAM Identity Center Option control for the domain.
+        '''Configuration options for controlling IAM Identity Center integration within a domain.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html#cfn-opensearchservice-domain-identitycenteroptions
         '''

aws_cdk/aws_paymentcryptography/__init__.py

@@ -343,6 +343,7 @@ class CfnKey(
             ),
         
             # the properties below are optional
+            derive_key_usage="deriveKeyUsage",
             enabled=False,
             key_check_value_algorithm="keyCheckValueAlgorithm",
             tags=[CfnTag(
@@ -359,6 +360,7 @@ class CfnKey(
         *,
         exportable: typing.Union[builtins.bool, _IResolvable_da3f097b],
         key_attributes: typing.Union[_IResolvable_da3f097b, typing.Union["CfnKey.KeyAttributesProperty", typing.Dict[builtins.str, typing.Any]]],
+        derive_key_usage: typing.Optional[builtins.str] = None,
         enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         key_check_value_algorithm: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -368,6 +370,7 @@ class CfnKey(
         :param id: Construct identifier for this resource (unique in its scope).
         :param exportable: Specifies whether the key is exportable. This data is immutable after the key is created.
         :param key_attributes: The role of the key, the algorithm it supports, and the cryptographic operations allowed with the key. This data is immutable after the key is created.
+        :param derive_key_usage: The cryptographic usage of an ECDH derived key as defined in section A.5.2 of the TR-31 spec.
         :param enabled: Specifies whether the key is enabled.
         :param key_check_value_algorithm: The algorithm that AWS Payment Cryptography uses to calculate the key check value (KCV). It is used to validate the key integrity. For TDES keys, the KCV is computed by encrypting 8 bytes, each with value of zero, with the key to be checked and retaining the 3 highest order bytes of the encrypted result. For AES keys, the KCV is computed using a CMAC algorithm where the input data is 16 bytes of zero and retaining the 3 highest order bytes of the encrypted result.
         :param tags: 
@@ -379,6 +382,7 @@ class CfnKey(
         props = CfnKeyProps(
             exportable=exportable,
             key_attributes=key_attributes,
+            derive_key_usage=derive_key_usage,
             enabled=enabled,
             key_check_value_algorithm=key_check_value_algorithm,
             tags=tags,
@@ -489,6 +493,19 @@ class CfnKey(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "keyAttributes", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="deriveKeyUsage")
+    def derive_key_usage(self) -> typing.Optional[builtins.str]:
+        '''The cryptographic usage of an ECDH derived key as defined in section A.5.2 of the TR-31 spec.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "deriveKeyUsage"))
+
+    @derive_key_usage.setter
+    def derive_key_usage(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__656be50ed219aff27971e773805f3ea7068f9738b74cc7d35f92f017614b969e)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "deriveKeyUsage", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="enabled")
     def enabled(
@@ -883,6 +900,7 @@ class CfnKey(
     name_mapping={
         "exportable": "exportable",
         "key_attributes": "keyAttributes",
+        "derive_key_usage": "deriveKeyUsage",
         "enabled": "enabled",
         "key_check_value_algorithm": "keyCheckValueAlgorithm",
         "tags": "tags",
@@ -894,6 +912,7 @@ class CfnKeyProps:
         *,
         exportable: typing.Union[builtins.bool, _IResolvable_da3f097b],
         key_attributes: typing.Union[_IResolvable_da3f097b, typing.Union[CfnKey.KeyAttributesProperty, typing.Dict[builtins.str, typing.Any]]],
+        derive_key_usage: typing.Optional[builtins.str] = None,
         enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         key_check_value_algorithm: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -902,6 +921,7 @@ class CfnKeyProps:
 
         :param exportable: Specifies whether the key is exportable. This data is immutable after the key is created.
         :param key_attributes: The role of the key, the algorithm it supports, and the cryptographic operations allowed with the key. This data is immutable after the key is created.
+        :param derive_key_usage: The cryptographic usage of an ECDH derived key as defined in section A.5.2 of the TR-31 spec.
         :param enabled: Specifies whether the key is enabled.
         :param key_check_value_algorithm: The algorithm that AWS Payment Cryptography uses to calculate the key check value (KCV). It is used to validate the key integrity. For TDES keys, the KCV is computed by encrypting 8 bytes, each with value of zero, with the key to be checked and retaining the 3 highest order bytes of the encrypted result. For AES keys, the KCV is computed using a CMAC algorithm where the input data is 16 bytes of zero and retaining the 3 highest order bytes of the encrypted result.
         :param tags: 
@@ -935,6 +955,7 @@ class CfnKeyProps:
                 ),
             
                 # the properties below are optional
+                derive_key_usage="deriveKeyUsage",
                 enabled=False,
                 key_check_value_algorithm="keyCheckValueAlgorithm",
                 tags=[CfnTag(
@@ -947,6 +968,7 @@ class CfnKeyProps:
             type_hints = typing.get_type_hints(_typecheckingstub__1ba44ca0d377189c3fde668037b0b7a8a9ee19fc052286d570ba26e888b2cf78)
             check_type(argname="argument exportable", value=exportable, expected_type=type_hints["exportable"])
             check_type(argname="argument key_attributes", value=key_attributes, expected_type=type_hints["key_attributes"])
+            check_type(argname="argument derive_key_usage", value=derive_key_usage, expected_type=type_hints["derive_key_usage"])
             check_type(argname="argument enabled", value=enabled, expected_type=type_hints["enabled"])
             check_type(argname="argument key_check_value_algorithm", value=key_check_value_algorithm, expected_type=type_hints["key_check_value_algorithm"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
@@ -954,6 +976,8 @@ class CfnKeyProps:
             "exportable": exportable,
             "key_attributes": key_attributes,
         }
+        if derive_key_usage is not None:
+            self._values["derive_key_usage"] = derive_key_usage
         if enabled is not None:
             self._values["enabled"] = enabled
         if key_check_value_algorithm is not None:
@@ -987,6 +1011,15 @@ class CfnKeyProps:
         assert result is not None, "Required property 'key_attributes' is missing"
         return typing.cast(typing.Union[_IResolvable_da3f097b, CfnKey.KeyAttributesProperty], result)
 
+    @builtins.property
+    def derive_key_usage(self) -> typing.Optional[builtins.str]:
+        '''The cryptographic usage of an ECDH derived key as defined in section A.5.2 of the TR-31 spec.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-paymentcryptography-key.html#cfn-paymentcryptography-key-derivekeyusage
+        '''
+        result = self._values.get("derive_key_usage")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def enabled(
         self,
@@ -1088,6 +1121,7 @@ def _typecheckingstub__eae3f8af01ec3a496044e22e7d1ce2b96cf8f20736ded57ce899a918f
     *,
     exportable: typing.Union[builtins.bool, _IResolvable_da3f097b],
     key_attributes: typing.Union[_IResolvable_da3f097b, typing.Union[CfnKey.KeyAttributesProperty, typing.Dict[builtins.str, typing.Any]]],
+    derive_key_usage: typing.Optional[builtins.str] = None,
     enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     key_check_value_algorithm: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -1119,6 +1153,12 @@ def _typecheckingstub__509385bb900abd87d7e9680c46b008a76766e5f51864d21972df261f9
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__656be50ed219aff27971e773805f3ea7068f9738b74cc7d35f92f017614b969e(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__1defb803536cf97ac83055a5760a6073dfc007fbfe2b34f9a774538091a30ef3(
     value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
 ) -> None:
@@ -1166,6 +1206,7 @@ def _typecheckingstub__1ba44ca0d377189c3fde668037b0b7a8a9ee19fc052286d570ba26e88
     *,
     exportable: typing.Union[builtins.bool, _IResolvable_da3f097b],
     key_attributes: typing.Union[_IResolvable_da3f097b, typing.Union[CfnKey.KeyAttributesProperty, typing.Dict[builtins.str, typing.Any]]],
+    derive_key_usage: typing.Optional[builtins.str] = None,
     enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     key_check_value_algorithm: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,