aws-cdk-lib 2.194.0__py3-none-any.whl → 2.196.0__py3-none-any.whl

aws_cdk/aws_ecs_patterns/__init__.py

@@ -1143,6 +1143,20 @@ network_load_balanced_fargate_service = ecs_patterns.NetworkLoadBalancedFargateS
 )
 ```
 
+### Set healthCheckGracePeriod for QueueProcessingFargateService
+
+```python
+# vpc: ec2.Vpc
+
+queue_processing_fargate_service = ecs_patterns.QueueProcessingFargateService(self, "Service",
+    vpc=vpc,
+    memory_limit_mi_b=512,
+    image=ecs.ContainerImage.from_registry("test"),
+    min_healthy_percent=100,
+    health_check_grace_period=Duration.seconds(120)
+)
+```
+
 ### Set securityGroups for NetworkLoadBalancedFargateService
 
 ```python
@@ -8560,6 +8574,12 @@ class ApplicationLoadBalancedFargateService(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="assignPublicIp")
     def assign_public_ip(self) -> builtins.bool:
@@ -10064,6 +10084,12 @@ class ApplicationMultipleTargetGroupsFargateService(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="assignPublicIp")
     def assign_public_ip(self) -> builtins.bool:
@@ -11428,6 +11454,12 @@ class NetworkLoadBalancedFargateService(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="assignPublicIp")
     def assign_public_ip(self) -> builtins.bool:
@@ -12731,6 +12763,12 @@ class NetworkMultipleTargetGroupsFargateService(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="assignPublicIp")
     def assign_public_ip(self) -> builtins.bool:
@@ -14068,6 +14106,7 @@ class QueueProcessingFargateService(
         assign_public_ip: typing.Optional[builtins.bool] = None,
         container_name: typing.Optional[builtins.str] = None,
         health_check: typing.Optional[typing.Union[_HealthCheck_6459d04f, typing.Dict[builtins.str, typing.Any]]] = None,
+        health_check_grace_period: typing.Optional[_Duration_4839e8c3] = None,
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
         task_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
         capacity_provider_strategies: typing.Optional[typing.Sequence[typing.Union[_CapacityProviderStrategy_8d7b6657, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -14112,6 +14151,7 @@ class QueueProcessingFargateService(
         :param assign_public_ip: Specifies whether the task's elastic network interface receives a public IP address. If true, each task will receive a public IP address. Default: false
         :param container_name: Optional name for the container added. This name is not used when ``taskDefinition`` is provided. Default: - QueueProcessingContainer
         :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
+        :param health_check_grace_period: The period of time, in seconds, that the Amazon ECS service scheduler ignores unhealthy Elastic Load Balancing target health checks after a task has first started. Default: - defaults to 60 seconds if at least one load balancer is in-use and it is not already set
         :param security_groups: The security groups to associate with the service. If you do not specify a security group, a new security group is created. Default: - A new security group is created.
         :param task_subnets: The subnets to associate with the service. Default: - Public subnets if ``assignPublicIp`` is set, otherwise the first available one of Private, Isolated, Public, in that order.
         :param capacity_provider_strategies: A list of Capacity Provider strategies used to place a service. Default: - undefined
@@ -14157,6 +14197,7 @@ class QueueProcessingFargateService(
             assign_public_ip=assign_public_ip,
             container_name=container_name,
             health_check=health_check,
+            health_check_grace_period=health_check_grace_period,
             security_groups=security_groups,
             task_subnets=task_subnets,
             capacity_provider_strategies=capacity_provider_strategies,
@@ -14251,6 +14292,7 @@ class QueueProcessingFargateService(
         "assign_public_ip": "assignPublicIp",
         "container_name": "containerName",
         "health_check": "healthCheck",
+        "health_check_grace_period": "healthCheckGracePeriod",
         "security_groups": "securityGroups",
         "task_subnets": "taskSubnets",
     },
@@ -14299,6 +14341,7 @@ class QueueProcessingFargateServiceProps(
         assign_public_ip: typing.Optional[builtins.bool] = None,
         container_name: typing.Optional[builtins.str] = None,
         health_check: typing.Optional[typing.Union[_HealthCheck_6459d04f, typing.Dict[builtins.str, typing.Any]]] = None,
+        health_check_grace_period: typing.Optional[_Duration_4839e8c3] = None,
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
         task_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
@@ -14341,6 +14384,7 @@ class QueueProcessingFargateServiceProps(
         :param assign_public_ip: Specifies whether the task's elastic network interface receives a public IP address. If true, each task will receive a public IP address. Default: false
         :param container_name: Optional name for the container added. This name is not used when ``taskDefinition`` is provided. Default: - QueueProcessingContainer
         :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
+        :param health_check_grace_period: The period of time, in seconds, that the Amazon ECS service scheduler ignores unhealthy Elastic Load Balancing target health checks after a task has first started. Default: - defaults to 60 seconds if at least one load balancer is in-use and it is not already set
         :param security_groups: The security groups to associate with the service. If you do not specify a security group, a new security group is created. Default: - A new security group is created.
         :param task_subnets: The subnets to associate with the service. Default: - Public subnets if ``assignPublicIp`` is set, otherwise the first available one of Private, Isolated, Public, in that order.
 
@@ -14416,6 +14460,7 @@ class QueueProcessingFargateServiceProps(
             check_type(argname="argument assign_public_ip", value=assign_public_ip, expected_type=type_hints["assign_public_ip"])
             check_type(argname="argument container_name", value=container_name, expected_type=type_hints["container_name"])
             check_type(argname="argument health_check", value=health_check, expected_type=type_hints["health_check"])
+            check_type(argname="argument health_check_grace_period", value=health_check_grace_period, expected_type=type_hints["health_check_grace_period"])
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
             check_type(argname="argument task_subnets", value=task_subnets, expected_type=type_hints["task_subnets"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -14493,6 +14538,8 @@ class QueueProcessingFargateServiceProps(
             self._values["container_name"] = container_name
         if health_check is not None:
             self._values["health_check"] = health_check
+        if health_check_grace_period is not None:
+            self._values["health_check_grace_period"] = health_check_grace_period
         if security_groups is not None:
             self._values["security_groups"] = security_groups
         if task_subnets is not None:
@@ -14937,6 +14984,15 @@ class QueueProcessingFargateServiceProps(
         result = self._values.get("health_check")
         return typing.cast(typing.Optional[_HealthCheck_6459d04f], result)
 
+    @builtins.property
+    def health_check_grace_period(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The period of time, in seconds, that the Amazon ECS service scheduler ignores unhealthy Elastic Load Balancing target health checks after a task has first started.
+
+        :default: - defaults to 60 seconds if at least one load balancer is in-use and it is not already set
+        '''
+        result = self._values.get("health_check_grace_period")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def security_groups(self) -> typing.Optional[typing.List[_ISecurityGroup_acf8a799]]:
         '''The security groups to associate with the service.
@@ -17671,6 +17727,7 @@ def _typecheckingstub__f7f1cc7ffec4414918cb71e7371c364ad046987205ab7eb0cbe7ad6fc
     assign_public_ip: typing.Optional[builtins.bool] = None,
     container_name: typing.Optional[builtins.str] = None,
     health_check: typing.Optional[typing.Union[_HealthCheck_6459d04f, typing.Dict[builtins.str, typing.Any]]] = None,
+    health_check_grace_period: typing.Optional[_Duration_4839e8c3] = None,
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
     task_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
     capacity_provider_strategies: typing.Optional[typing.Sequence[typing.Union[_CapacityProviderStrategy_8d7b6657, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -17750,6 +17807,7 @@ def _typecheckingstub__9959b47db027250927e99f3cbc475109465e4e426a52383adb8d29f22
     assign_public_ip: typing.Optional[builtins.bool] = None,
     container_name: typing.Optional[builtins.str] = None,
     health_check: typing.Optional[typing.Union[_HealthCheck_6459d04f, typing.Dict[builtins.str, typing.Any]]] = None,
+    health_check_grace_period: typing.Optional[_Duration_4839e8c3] = None,
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
     task_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:

aws_cdk/aws_efs/__init__.py

@@ -4562,6 +4562,12 @@ class AccessPoint(
             check_type(argname="argument access_point_id", value=access_point_id, expected_type=type_hints["access_point_id"])
         return typing.cast(IAccessPoint, jsii.sinvoke(cls, "fromAccessPointId", [scope, id, access_point_id]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="accessPointArn")
     def access_point_arn(self) -> builtins.str:
@@ -4831,6 +4837,12 @@ class FileSystem(
         '''The default port File System listens on.'''
         return typing.cast(jsii.Number, jsii.sget(cls, "DEFAULT_PORT"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="connections")
     def connections(self) -> _Connections_0f31fce8:

aws_cdk/aws_eks/__init__.py

@@ -14893,6 +14893,12 @@ class KubernetesManifest(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="RESOURCE_TYPE")
     def RESOURCE_TYPE(cls) -> builtins.str:
@@ -16225,6 +16231,12 @@ class Nodegroup(
             check_type(argname="argument nodegroup_name", value=nodegroup_name, expected_type=type_hints["nodegroup_name"])
         return typing.cast(INodegroup, jsii.sinvoke(cls, "fromNodegroupName", [scope, id, nodegroup_name]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="cluster")
     def cluster(self) -> ICluster:
@@ -17334,6 +17346,12 @@ class OpenIdConnectProvider(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_eks.OpenIdConnectProviderProps",
@@ -18286,6 +18304,12 @@ class AccessEntry(
             check_type(argname="argument new_access_policies", value=new_access_policies, expected_type=type_hints["new_access_policies"])
         return typing.cast(None, jsii.invoke(self, "addAccessPolicies", [new_access_policies]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="accessEntryArn")
     def access_entry_arn(self) -> builtins.str:
@@ -18480,6 +18504,12 @@ class Addon(
 
         return typing.cast(IAddon, jsii.sinvoke(cls, "fromAddonAttributes", [scope, id, attrs]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="addonArn")
     def addon_arn(self) -> builtins.str:
@@ -19248,6 +19278,12 @@ class Cluster(
             check_type(argname="argument access_policies", value=access_policies, expected_type=type_hints["access_policies"])
         return typing.cast(None, jsii.invoke(self, "grantAccess", [id, principal, access_policies]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="adminRole")
     def admin_role(self) -> _Role_e8c6e11f:
@@ -20951,6 +20987,12 @@ class FargateCluster(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="defaultProfile")
     def default_profile(self) -> FargateProfile:

aws_cdk/aws_elasticloadbalancing/__init__.py

@@ -2269,6 +2269,12 @@ class LoadBalancer(
             check_type(argname="argument target", value=target, expected_type=type_hints["target"])
         return typing.cast(None, jsii.invoke(self, "addTarget", [target]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="connections")
     def connections(self) -> _Connections_0f31fce8:

aws_cdk/aws_elasticloadbalancingv2/__init__.py

@@ -798,6 +798,30 @@ listener.add_targets("Targets",
 
 Only a single Lambda function can be added to a single listener rule.
 
+### Multi-Value Headers with Lambda Targets
+
+When using a Lambda function as a target, you can enable [multi-value headers](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/lambda-functions.html#multi-value-headers) to allow the load balancer to send headers with multiple values:
+
+```python
+import aws_cdk.aws_lambda as lambda_
+import aws_cdk.aws_elasticloadbalancingv2_targets as targets
+
+# vpc: ec2.Vpc
+# lambda_function: lambda.Function
+
+
+# Create a target group with multi-value headers enabled
+target_group = elbv2.ApplicationTargetGroup(self, "LambdaTargetGroup",
+    vpc=vpc,
+    targets=[targets.LambdaTarget(lambda_function)],
+
+    # Enable multi-value headers
+    multi_value_headers_enabled=True
+)
+```
+
+When multi-value headers are enabled, the request and response headers exchanged between the load balancer and the Lambda function include headers with multiple values. If this option is disabled (the default) and the request contains a duplicate header field name, the load balancer uses the last value sent by the client.
+
 ## Using Application Load Balancer Targets
 
 To use a single application load balancer as a target for the network load balancer, use the integration class in the
@@ -3839,7 +3863,7 @@ class CfnListener(
         :param mutual_authentication: The mutual authentication configuration information.
         :param port: The port on which the load balancer is listening. You can't specify a port for a Gateway Load Balancer.
         :param protocol: The protocol for connections from clients to the load balancer. For Application Load Balancers, the supported protocols are HTTP and HTTPS. For Network Load Balancers, the supported protocols are TCP, TLS, UDP, and TCP_UDP. You can’t specify the UDP or TCP_UDP protocol if dual-stack mode is enabled. You can't specify a protocol for a Gateway Load Balancer.
-        :param ssl_policy: [HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported. Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. For more information, see `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html#describe-ssl-policies>`_ in the *Application Load Balancers Guide* and `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/network/create-tls-listener.html#describe-ssl-policies>`_ in the *Network Load Balancers Guide* .
+        :param ssl_policy: [HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported. For more information, see `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html>`_ in the *Application Load Balancers Guide* and `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/network/describe-ssl-policies.html>`_ in the *Network Load Balancers Guide* . Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. To decrease the possibility of an interruption if your load balancer is handling a high volume of traffic, create an additional load balancer or request an LCU reservation.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__da6c6bab97eae93f0a1595d72a25ac890e7034cc701e7cf76b58f5c6a2170048)
@@ -5788,7 +5812,7 @@ class CfnListenerProps:
         :param mutual_authentication: The mutual authentication configuration information.
         :param port: The port on which the load balancer is listening. You can't specify a port for a Gateway Load Balancer.
         :param protocol: The protocol for connections from clients to the load balancer. For Application Load Balancers, the supported protocols are HTTP and HTTPS. For Network Load Balancers, the supported protocols are TCP, TLS, UDP, and TCP_UDP. You can’t specify the UDP or TCP_UDP protocol if dual-stack mode is enabled. You can't specify a protocol for a Gateway Load Balancer.
-        :param ssl_policy: [HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported. Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. For more information, see `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html#describe-ssl-policies>`_ in the *Application Load Balancers Guide* and `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/network/create-tls-listener.html#describe-ssl-policies>`_ in the *Network Load Balancers Guide* .
+        :param ssl_policy: [HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported. For more information, see `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html>`_ in the *Application Load Balancers Guide* and `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/network/describe-ssl-policies.html>`_ in the *Network Load Balancers Guide* . Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. To decrease the possibility of an interruption if your load balancer is handling a high volume of traffic, create an additional load balancer or request an LCU reservation.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listener.html
         :exampleMetadata: fixture=_generated
@@ -6014,9 +6038,9 @@ class CfnListenerProps:
     def ssl_policy(self) -> typing.Optional[builtins.str]:
         '''[HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported.
 
-        Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic.
+        For more information, see `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html>`_ in the *Application Load Balancers Guide* and `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/network/describe-ssl-policies.html>`_ in the *Network Load Balancers Guide* .
 
-        For more information, see `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html#describe-ssl-policies>`_ in the *Application Load Balancers Guide* and `Security policies <https://docs.aws.amazon.com/elasticloadbalancing/latest/network/create-tls-listener.html#describe-ssl-policies>`_ in the *Network Load Balancers Guide* .
+        Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. To decrease the possibility of an interruption if your load balancer is handling a high volume of traffic, create an additional load balancer or request an LCU reservation.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listener.html#cfn-elasticloadbalancingv2-listener-sslpolicy
         '''
@@ -8472,9 +8496,9 @@ class CfnLoadBalancer(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param enable_prefix_for_ipv6_source_nat: [Network Load Balancers with UDP listeners] Indicates whether to use an IPv6 prefix from each subnet for source NAT. The IP address type must be ``dualstack`` . The default value is ``off`` .
-        :param enforce_security_group_inbound_rules_on_private_link_traffic: Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through AWS PrivateLink . The default is ``on`` .
+        :param enforce_security_group_inbound_rules_on_private_link_traffic: Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through AWS PrivateLink . The default is ``on`` . You can't configure this property on a Network Load Balancer unless you associated a security group with the load balancer when you created it.
         :param ip_address_type: The IP address type. Internal load balancers must use ``ipv4`` . [Application Load Balancers] The possible values are ``ipv4`` (IPv4 addresses), ``dualstack`` (IPv4 and IPv6 addresses), and ``dualstack-without-public-ipv4`` (public IPv6 addresses and private IPv4 and IPv6 addresses). Application Load Balancer authentication supports IPv4 addresses only when connecting to an Identity Provider (IdP) or Amazon Cognito endpoint. Without a public IPv4 address the load balancer can't complete the authentication process, resulting in HTTP 500 errors. [Network Load Balancers and Gateway Load Balancers] The possible values are ``ipv4`` (IPv4 addresses) and ``dualstack`` (IPv4 and IPv6 addresses).
-        :param ipv4_ipam_pool_id: 
+        :param ipv4_ipam_pool_id: The ID of the IPv4 IPAM pool.
         :param load_balancer_attributes: The load balancer attributes.
         :param minimum_load_balancer_capacity: The minimum capacity for a load balancer.
         :param name: The name of the load balancer. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, must not begin or end with a hyphen, and must not begin with "internal-". If you don't specify a name, AWS CloudFormation generates a unique physical ID for the load balancer. If you specify a name, you cannot perform updates that require replacement of this resource, but you can perform other updates. To replace the resource, specify a new name.
@@ -8663,6 +8687,7 @@ class CfnLoadBalancer(
     @builtins.property
     @jsii.member(jsii_name="ipv4IpamPoolId")
     def ipv4_ipam_pool_id(self) -> typing.Optional[builtins.str]:
+        '''The ID of the IPv4 IPAM pool.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "ipv4IpamPoolId"))
 
     @ipv4_ipam_pool_id.setter
@@ -9132,9 +9157,9 @@ class CfnLoadBalancerProps:
         '''Properties for defining a ``CfnLoadBalancer``.
 
         :param enable_prefix_for_ipv6_source_nat: [Network Load Balancers with UDP listeners] Indicates whether to use an IPv6 prefix from each subnet for source NAT. The IP address type must be ``dualstack`` . The default value is ``off`` .
-        :param enforce_security_group_inbound_rules_on_private_link_traffic: Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through AWS PrivateLink . The default is ``on`` .
+        :param enforce_security_group_inbound_rules_on_private_link_traffic: Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through AWS PrivateLink . The default is ``on`` . You can't configure this property on a Network Load Balancer unless you associated a security group with the load balancer when you created it.
         :param ip_address_type: The IP address type. Internal load balancers must use ``ipv4`` . [Application Load Balancers] The possible values are ``ipv4`` (IPv4 addresses), ``dualstack`` (IPv4 and IPv6 addresses), and ``dualstack-without-public-ipv4`` (public IPv6 addresses and private IPv4 and IPv6 addresses). Application Load Balancer authentication supports IPv4 addresses only when connecting to an Identity Provider (IdP) or Amazon Cognito endpoint. Without a public IPv4 address the load balancer can't complete the authentication process, resulting in HTTP 500 errors. [Network Load Balancers and Gateway Load Balancers] The possible values are ``ipv4`` (IPv4 addresses) and ``dualstack`` (IPv4 and IPv6 addresses).
-        :param ipv4_ipam_pool_id: 
+        :param ipv4_ipam_pool_id: The ID of the IPv4 IPAM pool.
         :param load_balancer_attributes: The load balancer attributes.
         :param minimum_load_balancer_capacity: The minimum capacity for a load balancer.
         :param name: The name of the load balancer. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, must not begin or end with a hyphen, and must not begin with "internal-". If you don't specify a name, AWS CloudFormation generates a unique physical ID for the load balancer. If you specify a name, you cannot perform updates that require replacement of this resource, but you can perform other updates. To replace the resource, specify a new name.
@@ -9248,6 +9273,8 @@ class CfnLoadBalancerProps:
 
         The default is ``on`` .
 
+        You can't configure this property on a Network Load Balancer unless you associated a security group with the load balancer when you created it.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-loadbalancer.html#cfn-elasticloadbalancingv2-loadbalancer-enforcesecuritygroupinboundrulesonprivatelinktraffic
         '''
         result = self._values.get("enforce_security_group_inbound_rules_on_private_link_traffic")
@@ -9270,7 +9297,8 @@ class CfnLoadBalancerProps:
 
     @builtins.property
     def ipv4_ipam_pool_id(self) -> typing.Optional[builtins.str]:
-        '''
+        '''The ID of the IPv4 IPAM pool.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-loadbalancer.html#cfn-elasticloadbalancingv2-loadbalancer-ipv4ipampoolid
         '''
         result = self._values.get("ipv4_ipam_pool_id")
@@ -18022,6 +18050,12 @@ class NetworkLoadBalancer(
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricTcpTargetResetCount", [props]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="connections")
     def connections(self) -> _Connections_0f31fce8:
@@ -20177,6 +20211,12 @@ class TrustStore(
             check_type(argname="argument trust_store_arn", value=trust_store_arn, expected_type=type_hints["trust_store_arn"])
         return typing.cast(ITrustStore, jsii.sinvoke(cls, "fromTrustStoreArn", [scope, id, trust_store_arn]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="numberOfCaCertificates")
     def number_of_ca_certificates(self) -> jsii.Number:
@@ -20381,6 +20421,12 @@ class TrustStoreRevocation(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_elasticloadbalancingv2.TrustStoreRevocationProps",
@@ -22084,6 +22130,7 @@ class ApplicationLoadBalancerProps(BaseLoadBalancerProps):
         "vpc": "vpc",
         "enable_anomaly_mitigation": "enableAnomalyMitigation",
         "load_balancing_algorithm_type": "loadBalancingAlgorithmType",
+        "multi_value_headers_enabled": "multiValueHeadersEnabled",
         "port": "port",
         "protocol": "protocol",
         "protocol_version": "protocolVersion",
@@ -22106,6 +22153,7 @@ class ApplicationTargetGroupProps(BaseTargetGroupProps):
         vpc: typing.Optional[_IVpc_f30d5663] = None,
         enable_anomaly_mitigation: typing.Optional[builtins.bool] = None,
         load_balancing_algorithm_type: typing.Optional[TargetGroupLoadBalancingAlgorithmType] = None,
+        multi_value_headers_enabled: typing.Optional[builtins.bool] = None,
         port: typing.Optional[jsii.Number] = None,
         protocol: typing.Optional[ApplicationProtocol] = None,
         protocol_version: typing.Optional[ApplicationProtocolVersion] = None,
@@ -22125,6 +22173,7 @@ class ApplicationTargetGroupProps(BaseTargetGroupProps):
         :param vpc: The virtual private cloud (VPC). only if ``TargetType`` is ``Ip`` or ``InstanceId`` Default: - undefined
         :param enable_anomaly_mitigation: Indicates whether anomaly mitigation is enabled. Only available when ``loadBalancingAlgorithmType`` is ``TargetGroupLoadBalancingAlgorithmType.WEIGHTED_RANDOM`` Default: false
         :param load_balancing_algorithm_type: The load balancing algorithm to select targets for routing requests. Default: TargetGroupLoadBalancingAlgorithmType.ROUND_ROBIN
+        :param multi_value_headers_enabled: Indicates whether the target group supports multi-value headers. If the value is true, the request and response headers exchanged between the load balancer and the Lambda function include arrays of values or strings. Only applicable for Lambda targets. Default: false
         :param port: The port on which the target receives traffic. This is not applicable for Lambda targets. Default: - Determined from protocol if known
         :param protocol: The protocol used for communication with the target. This is not applicable for Lambda targets. Default: - Determined from port if known
         :param protocol_version: The protocol version to use. Default: ApplicationProtocolVersion.HTTP1
@@ -22165,6 +22214,7 @@ class ApplicationTargetGroupProps(BaseTargetGroupProps):
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
             check_type(argname="argument enable_anomaly_mitigation", value=enable_anomaly_mitigation, expected_type=type_hints["enable_anomaly_mitigation"])
             check_type(argname="argument load_balancing_algorithm_type", value=load_balancing_algorithm_type, expected_type=type_hints["load_balancing_algorithm_type"])
+            check_type(argname="argument multi_value_headers_enabled", value=multi_value_headers_enabled, expected_type=type_hints["multi_value_headers_enabled"])
             check_type(argname="argument port", value=port, expected_type=type_hints["port"])
             check_type(argname="argument protocol", value=protocol, expected_type=type_hints["protocol"])
             check_type(argname="argument protocol_version", value=protocol_version, expected_type=type_hints["protocol_version"])
@@ -22191,6 +22241,8 @@ class ApplicationTargetGroupProps(BaseTargetGroupProps):
             self._values["enable_anomaly_mitigation"] = enable_anomaly_mitigation
         if load_balancing_algorithm_type is not None:
             self._values["load_balancing_algorithm_type"] = load_balancing_algorithm_type
+        if multi_value_headers_enabled is not None:
+            self._values["multi_value_headers_enabled"] = multi_value_headers_enabled
         if port is not None:
             self._values["port"] = port
         if protocol is not None:
@@ -22309,6 +22361,22 @@ class ApplicationTargetGroupProps(BaseTargetGroupProps):
         result = self._values.get("load_balancing_algorithm_type")
         return typing.cast(typing.Optional[TargetGroupLoadBalancingAlgorithmType], result)
 
+    @builtins.property
+    def multi_value_headers_enabled(self) -> typing.Optional[builtins.bool]:
+        '''Indicates whether the target group supports multi-value headers.
+
+        If the value is true, the request and response headers exchanged between
+        the load balancer and the Lambda function include arrays of values or strings.
+
+        Only applicable for Lambda targets.
+
+        :default: false
+
+        :see: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-target-groups.html#target-group-attributes
+        '''
+        result = self._values.get("multi_value_headers_enabled")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def port(self) -> typing.Optional[jsii.Number]:
         '''The port on which the target receives traffic.
@@ -23429,6 +23497,12 @@ class NetworkListener(
 
         return typing.cast("NetworkTargetGroup", jsii.invoke(self, "addTargets", [id, props]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="loadBalancer")
     def load_balancer(self) -> INetworkLoadBalancer:
@@ -23682,6 +23756,12 @@ class NetworkTargetGroup(
     def _validate_target_group(self) -> typing.List[builtins.str]:
         return typing.cast(typing.List[builtins.str], jsii.invoke(self, "validateTargetGroup", []))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="firstLoadBalancerFullName")
     def first_load_balancer_full_name(self) -> builtins.str:
@@ -24039,6 +24119,12 @@ class ApplicationListener(
         '''Validate this listener.'''
         return typing.cast(typing.List[builtins.str], jsii.invoke(self, "validateListener", []))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="connections")
     def connections(self) -> _Connections_0f31fce8:
@@ -25516,6 +25602,12 @@ class ApplicationLoadBalancer(
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricTargetTLSNegotiationErrorCount", [props]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="connections")
     def connections(self) -> _Connections_0f31fce8:
@@ -25583,6 +25675,7 @@ class ApplicationTargetGroup(
         *,
         enable_anomaly_mitigation: typing.Optional[builtins.bool] = None,
         load_balancing_algorithm_type: typing.Optional[TargetGroupLoadBalancingAlgorithmType] = None,
+        multi_value_headers_enabled: typing.Optional[builtins.bool] = None,
         port: typing.Optional[jsii.Number] = None,
         protocol: typing.Optional[ApplicationProtocol] = None,
         protocol_version: typing.Optional[ApplicationProtocolVersion] = None,
@@ -25603,6 +25696,7 @@ class ApplicationTargetGroup(
         :param id: -
         :param enable_anomaly_mitigation: Indicates whether anomaly mitigation is enabled. Only available when ``loadBalancingAlgorithmType`` is ``TargetGroupLoadBalancingAlgorithmType.WEIGHTED_RANDOM`` Default: false
         :param load_balancing_algorithm_type: The load balancing algorithm to select targets for routing requests. Default: TargetGroupLoadBalancingAlgorithmType.ROUND_ROBIN
+        :param multi_value_headers_enabled: Indicates whether the target group supports multi-value headers. If the value is true, the request and response headers exchanged between the load balancer and the Lambda function include arrays of values or strings. Only applicable for Lambda targets. Default: false
         :param port: The port on which the target receives traffic. This is not applicable for Lambda targets. Default: - Determined from protocol if known
         :param protocol: The protocol used for communication with the target. This is not applicable for Lambda targets. Default: - Determined from port if known
         :param protocol_version: The protocol version to use. Default: ApplicationProtocolVersion.HTTP1
@@ -25625,6 +25719,7 @@ class ApplicationTargetGroup(
         props = ApplicationTargetGroupProps(
             enable_anomaly_mitigation=enable_anomaly_mitigation,
             load_balancing_algorithm_type=load_balancing_algorithm_type,
+            multi_value_headers_enabled=multi_value_headers_enabled,
             port=port,
             protocol=protocol,
             protocol_version=protocol_version,
@@ -26254,6 +26349,12 @@ class ApplicationTargetGroup(
     def _validate_target_group(self) -> typing.List[builtins.str]:
         return typing.cast(typing.List[builtins.str], jsii.invoke(self, "validateTargetGroup", []))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="firstLoadBalancerFullName")
     def first_load_balancer_full_name(self) -> builtins.str:
@@ -28363,6 +28464,7 @@ def _typecheckingstub__0fbf37aa0a91cb985ce7a336a6188364cc38400538c1653e53453287c
     vpc: typing.Optional[_IVpc_f30d5663] = None,
     enable_anomaly_mitigation: typing.Optional[builtins.bool] = None,
     load_balancing_algorithm_type: typing.Optional[TargetGroupLoadBalancingAlgorithmType] = None,
+    multi_value_headers_enabled: typing.Optional[builtins.bool] = None,
     port: typing.Optional[jsii.Number] = None,
     protocol: typing.Optional[ApplicationProtocol] = None,
     protocol_version: typing.Optional[ApplicationProtocolVersion] = None,
@@ -28856,6 +28958,7 @@ def _typecheckingstub__e179515c9d6138007cc1b74835b75f10a179c1f5ef977cbe4188c778c
     *,
     enable_anomaly_mitigation: typing.Optional[builtins.bool] = None,
     load_balancing_algorithm_type: typing.Optional[TargetGroupLoadBalancingAlgorithmType] = None,
+    multi_value_headers_enabled: typing.Optional[builtins.bool] = None,
     port: typing.Optional[jsii.Number] = None,
     protocol: typing.Optional[ApplicationProtocol] = None,
     protocol_version: typing.Optional[ApplicationProtocolVersion] = None,

aws_cdk/aws_elasticsearch/__init__.py

@@ -7482,6 +7482,15 @@ class Domain(
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricSearchLatency", [props]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''(deprecated) Uniquely identifies this class.
+
+        :stability: deprecated
+        '''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="connections")
     def connections(self) -> _Connections_0f31fce8: