aws-cdk-lib 2.195.0__py3-none-any.whl → 2.196.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (100) hide show
  1. aws_cdk/__init__.py +433 -20
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.195.0.jsii.tgz → aws-cdk-lib@2.196.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_acmpca/__init__.py +1 -1
  5. aws_cdk/aws_amazonmq/__init__.py +2 -2
  6. aws_cdk/aws_apigateway/__init__.py +148 -69
  7. aws_cdk/aws_apigatewayv2/__init__.py +155 -24
  8. aws_cdk/aws_appconfig/__init__.py +24 -0
  9. aws_cdk/aws_applicationautoscaling/__init__.py +6 -0
  10. aws_cdk/aws_appmesh/__init__.py +42 -0
  11. aws_cdk/aws_appsync/__init__.py +92 -20
  12. aws_cdk/aws_autoscaling/__init__.py +24 -0
  13. aws_cdk/aws_backup/__init__.py +53 -14
  14. aws_cdk/aws_batch/__init__.py +72 -0
  15. aws_cdk/aws_bedrock/__init__.py +620 -14
  16. aws_cdk/aws_budgets/__init__.py +569 -0
  17. aws_cdk/aws_certificatemanager/__init__.py +21 -0
  18. aws_cdk/aws_chatbot/__init__.py +6 -0
  19. aws_cdk/aws_cloudfront/__init__.py +87 -0
  20. aws_cdk/aws_cloudfront/experimental/__init__.py +6 -0
  21. aws_cdk/aws_cloudtrail/__init__.py +6 -0
  22. aws_cdk/aws_cloudwatch/__init__.py +18 -0
  23. aws_cdk/aws_cloudwatch_actions/__init__.py +75 -1
  24. aws_cdk/aws_codebuild/__init__.py +48 -0
  25. aws_cdk/aws_codecommit/__init__.py +6 -0
  26. aws_cdk/aws_codedeploy/__init__.py +63 -0
  27. aws_cdk/aws_codeguruprofiler/__init__.py +6 -0
  28. aws_cdk/aws_codepipeline/__init__.py +6 -0
  29. aws_cdk/aws_codepipeline_actions/__init__.py +4 -4
  30. aws_cdk/aws_codestarnotifications/__init__.py +6 -0
  31. aws_cdk/aws_cognito/__init__.py +91 -12
  32. aws_cdk/aws_cognito_identitypool/__init__.py +6 -0
  33. aws_cdk/aws_config/__init__.py +36 -0
  34. aws_cdk/aws_datazone/__init__.py +557 -14
  35. aws_cdk/aws_docdb/__init__.py +27 -3
  36. aws_cdk/aws_dsql/__init__.py +21 -13
  37. aws_cdk/aws_dynamodb/__init__.py +20 -8
  38. aws_cdk/aws_ec2/__init__.py +282 -21
  39. aws_cdk/aws_ecr/__init__.py +6 -0
  40. aws_cdk/aws_ecr_assets/__init__.py +6 -0
  41. aws_cdk/aws_ecs/__init__.py +112 -19
  42. aws_cdk/aws_ecs_patterns/__init__.py +58 -0
  43. aws_cdk/aws_efs/__init__.py +12 -0
  44. aws_cdk/aws_eks/__init__.py +42 -0
  45. aws_cdk/aws_elasticloadbalancing/__init__.py +6 -0
  46. aws_cdk/aws_elasticloadbalancingv2/__init__.py +112 -9
  47. aws_cdk/aws_elasticsearch/__init__.py +9 -0
  48. aws_cdk/aws_events/__init__.py +36 -0
  49. aws_cdk/aws_events_targets/__init__.py +10 -10
  50. aws_cdk/aws_fsx/__init__.py +6 -0
  51. aws_cdk/aws_globalaccelerator/__init__.py +18 -0
  52. aws_cdk/aws_iam/__init__.py +66 -0
  53. aws_cdk/aws_imagebuilder/__init__.py +21 -16
  54. aws_cdk/aws_inspector/__init__.py +6 -0
  55. aws_cdk/aws_kinesis/__init__.py +19 -1
  56. aws_cdk/aws_kinesisanalytics/__init__.py +9 -11
  57. aws_cdk/aws_kinesisanalyticsv2/__init__.py +9 -11
  58. aws_cdk/aws_kinesisfirehose/__init__.py +6 -0
  59. aws_cdk/aws_kms/__init__.py +16 -4
  60. aws_cdk/aws_lambda/__init__.py +76 -6
  61. aws_cdk/aws_lambda_nodejs/__init__.py +6 -0
  62. aws_cdk/aws_logs/__init__.py +155 -12
  63. aws_cdk/aws_opensearchservice/__init__.py +6 -0
  64. aws_cdk/aws_quicksight/__init__.py +22 -22
  65. aws_cdk/aws_rds/__init__.py +306 -30
  66. aws_cdk/aws_redshiftserverless/__init__.py +7 -7
  67. aws_cdk/aws_route53/__init__.py +723 -25
  68. aws_cdk/aws_s3/__init__.py +37 -10
  69. aws_cdk/aws_s3_deployment/__init__.py +6 -0
  70. aws_cdk/aws_sagemaker/__init__.py +199 -4
  71. aws_cdk/aws_scheduler/__init__.py +12 -0
  72. aws_cdk/aws_secretsmanager/__init__.py +24 -0
  73. aws_cdk/aws_servicecatalog/__init__.py +24 -0
  74. aws_cdk/aws_servicediscovery/__init__.py +48 -0
  75. aws_cdk/aws_ses/__init__.py +133 -33
  76. aws_cdk/aws_signer/__init__.py +6 -0
  77. aws_cdk/aws_sns/__init__.py +18 -0
  78. aws_cdk/aws_sns_subscriptions/__init__.py +6 -0
  79. aws_cdk/aws_sqs/__init__.py +12 -0
  80. aws_cdk/aws_ssm/__init__.py +12 -0
  81. aws_cdk/aws_ssmcontacts/__init__.py +53 -2
  82. aws_cdk/aws_ssmguiconnect/__init__.py +7 -7
  83. aws_cdk/aws_stepfunctions/__init__.py +153 -7
  84. aws_cdk/aws_stepfunctions_tasks/__init__.py +46 -10
  85. aws_cdk/aws_synthetics/__init__.py +32 -0
  86. aws_cdk/aws_verifiedpermissions/__init__.py +168 -3
  87. aws_cdk/aws_vpclattice/__init__.py +3 -1
  88. aws_cdk/aws_wisdom/__init__.py +6 -4
  89. aws_cdk/custom_resources/__init__.py +18 -0
  90. aws_cdk/cx_api/__init__.py +33 -0
  91. aws_cdk/lambda_layer_awscli/__init__.py +6 -0
  92. aws_cdk/lambda_layer_node_proxy_agent/__init__.py +6 -0
  93. aws_cdk/pipelines/__init__.py +10 -10
  94. aws_cdk/triggers/__init__.py +6 -0
  95. {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.0.dist-info}/METADATA +83 -5
  96. {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.0.dist-info}/RECORD +100 -100
  97. {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.0.dist-info}/LICENSE +0 -0
  98. {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.0.dist-info}/NOTICE +0 -0
  99. {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.0.dist-info}/WHEEL +0 -0
  100. {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.0.dist-info}/top_level.txt +0 -0
@@ -798,6 +798,12 @@ class ProfilingGroup(
798
798
  check_type(argname="argument grantee", value=grantee, expected_type=type_hints["grantee"])
799
799
  return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantRead", [grantee]))
800
800
 
801
+ @jsii.python.classproperty
802
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
803
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
804
+ '''Uniquely identifies this class.'''
805
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
806
+
801
807
  @builtins.property
802
808
  @jsii.member(jsii_name="profilingGroupArn")
803
809
  def profiling_group_arn(self) -> builtins.str:
@@ -9822,6 +9822,12 @@ class Pipeline(
9822
9822
  check_type(argname="argument stage_name", value=stage_name, expected_type=type_hints["stage_name"])
9823
9823
  return typing.cast(IStage, jsii.invoke(self, "stage", [stage_name]))
9824
9824
 
9825
+ @jsii.python.classproperty
9826
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
9827
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
9828
+ '''Uniquely identifies this class.'''
9829
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
9830
+
9825
9831
  @builtins.property
9826
9832
  @jsii.member(jsii_name="artifactBucket")
9827
9833
  def artifact_bucket(self) -> _IBucket_42e086fd:
@@ -1094,8 +1094,8 @@ Here's an example:
1094
1094
  # This is the Stack containing a simple ECS Service that uses the provided ContainerImage.
1095
1095
  #
1096
1096
  class EcsAppStack(cdk.Stack):
1097
- def __init__(self, scope, id, *, image, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None):
1098
- super().__init__(scope, id, image=image, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation)
1097
+ def __init__(self, scope, id, *, image, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None, propertyInjectors=None):
1098
+ super().__init__(scope, id, image=image, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation, propertyInjectors=propertyInjectors)
1099
1099
 
1100
1100
  task_definition = ecs.TaskDefinition(self, "TaskDefinition",
1101
1101
  compatibility=ecs.Compatibility.FARGATE,
@@ -1119,8 +1119,8 @@ class EcsAppStack(cdk.Stack):
1119
1119
  #
1120
1120
  class PipelineStack(cdk.Stack):
1121
1121
 
1122
- def __init__(self, scope, id, *, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None):
1123
- super().__init__(scope, id, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation)
1122
+ def __init__(self, scope, id, *, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None, propertyInjectors=None):
1123
+ super().__init__(scope, id, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation, propertyInjectors=propertyInjectors)
1124
1124
 
1125
1125
  # ********* ECS part ****************
1126
1126
 
@@ -991,6 +991,12 @@ class NotificationRule(
991
991
  check_type(argname="argument target", value=target, expected_type=type_hints["target"])
992
992
  return typing.cast(builtins.bool, jsii.invoke(self, "addTarget", [target]))
993
993
 
994
+ @jsii.python.classproperty
995
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
996
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
997
+ '''Uniquely identifies this class.'''
998
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
999
+
994
1000
  @builtins.property
995
1001
  @jsii.member(jsii_name="notificationRuleArn")
996
1002
  def notification_rule_arn(self) -> builtins.str:
@@ -4519,7 +4519,7 @@ class CfnManagedLoginBranding(
4519
4519
  :param id: Construct identifier for this resource (unique in its scope).
4520
4520
  :param user_pool_id: The user pool where the branding style is assigned.
4521
4521
  :param assets: An array of image files that you want to apply to roles like backgrounds, logos, and icons. Each object must also indicate whether it is for dark mode, light mode, or browser-adaptive mode.
4522
- :param client_id: The app client that's assigned to the branding style that you want more information about.
4522
+ :param client_id: The app client that you want to assign the branding style to. Each style is linked to an app client until you delete it.
4523
4523
  :param return_merged_resources: When ``true`` , returns values for branding options that are unchanged from Amazon Cognito defaults. When ``false`` or when you omit this parameter, returns only values that you customized in your branding style.
4524
4524
  :param settings: A JSON file, encoded as a ``Document`` type, with the the settings that you want to apply to your style.
4525
4525
  :param use_cognito_provided_values: When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding editor. When you specify ``true`` for this option, you must also omit values for ``Settings`` and ``Assets`` in the request.
@@ -4617,7 +4617,7 @@ class CfnManagedLoginBranding(
4617
4617
  @builtins.property
4618
4618
  @jsii.member(jsii_name="clientId")
4619
4619
  def client_id(self) -> typing.Optional[builtins.str]:
4620
- '''The app client that's assigned to the branding style that you want more information about.'''
4620
+ '''The app client that you want to assign the branding style to.'''
4621
4621
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "clientId"))
4622
4622
 
4623
4623
  @client_id.setter
@@ -4832,7 +4832,7 @@ class CfnManagedLoginBrandingProps:
4832
4832
 
4833
4833
  :param user_pool_id: The user pool where the branding style is assigned.
4834
4834
  :param assets: An array of image files that you want to apply to roles like backgrounds, logos, and icons. Each object must also indicate whether it is for dark mode, light mode, or browser-adaptive mode.
4835
- :param client_id: The app client that's assigned to the branding style that you want more information about.
4835
+ :param client_id: The app client that you want to assign the branding style to. Each style is linked to an app client until you delete it.
4836
4836
  :param return_merged_resources: When ``true`` , returns values for branding options that are unchanged from Amazon Cognito defaults. When ``false`` or when you omit this parameter, returns only values that you customized in your branding style.
4837
4837
  :param settings: A JSON file, encoded as a ``Document`` type, with the the settings that you want to apply to your style.
4838
4838
  :param use_cognito_provided_values: When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding editor. When you specify ``true`` for this option, you must also omit values for ``Settings`` and ``Assets`` in the request.
@@ -4914,7 +4914,9 @@ class CfnManagedLoginBrandingProps:
4914
4914
 
4915
4915
  @builtins.property
4916
4916
  def client_id(self) -> typing.Optional[builtins.str]:
4917
- '''The app client that's assigned to the branding style that you want more information about.
4917
+ '''The app client that you want to assign the branding style to.
4918
+
4919
+ Each style is linked to an app client until you delete it.
4918
4920
 
4919
4921
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-managedloginbranding.html#cfn-cognito-managedloginbranding-clientid
4920
4922
  '''
@@ -8151,7 +8153,7 @@ class CfnUserPoolClient(
8151
8153
  :param logout_ur_ls: A list of allowed logout URLs for managed login authentication. When you pass ``logout_uri`` and ``client_id`` parameters to ``/logout`` , Amazon Cognito signs out your user and redirects them to the logout URL. This parameter describes the URLs that you want to be the permitted targets of ``logout_uri`` . A typical use of these URLs is when a user selects "Sign out" and you redirect them to your public homepage. For more information, see `Logout endpoint <https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html>`_ .
8152
8154
  :param prevent_user_existence_errors: Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to ``ENABLED`` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to ``LEGACY`` , those APIs return a ``UserNotFoundException`` exception if the user doesn't exist in the user pool. Valid values include: - ``ENABLED`` - This prevents user existence-related errors. - ``LEGACY`` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented. Defaults to ``LEGACY`` when you don't provide a value.
8153
8155
  :param read_attributes: The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information. When you don't specify the ``ReadAttributes`` for your app client, your app can read the values of ``email_verified`` , ``phone_number_verified`` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, ``ReadAttributes`` doesn't return any information. Amazon Cognito only populates ``ReadAttributes`` in the API response if you have specified your own custom set of read attributes.
8154
- :param refresh_token_rotation:
8156
+ :param refresh_token_rotation: The configuration of your app client for refresh token rotation. When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens.
8155
8157
  :param refresh_token_validity: The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for ``RefreshTokenValidity`` as ``seconds`` , ``minutes`` , ``hours`` , or ``days`` , set a ``TokenValidityUnits`` value in your API request. For example, when you set ``RefreshTokenValidity`` as ``10`` and ``TokenValidityUnits`` as ``days`` , your user can refresh their session and retrieve new access and ID tokens for 10 days. The default time unit for ``RefreshTokenValidity`` in an API request is days. You can't set ``RefreshTokenValidity`` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds. If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for 30 days.
8156
8158
  :param supported_identity_providers: A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: ``COGNITO`` , ``Facebook`` , ``Google`` , ``SignInWithApple`` , and ``LoginWithAmazon`` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example ``MySAMLIdP`` or ``MyOIDCIdP`` . This parameter sets the IdPs that `managed login <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html>`_ will display on the login page for your app client. The removal of ``COGNITO`` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent SDK-based authentication is to block access with a `AWS WAF rule <https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html>`_ .
8157
8159
  :param token_validity_units: The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours.
@@ -8528,6 +8530,7 @@ class CfnUserPoolClient(
8528
8530
  def refresh_token_rotation(
8529
8531
  self,
8530
8532
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnUserPoolClient.RefreshTokenRotationProperty"]]:
8533
+ '''The configuration of your app client for refresh token rotation.'''
8531
8534
  return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnUserPoolClient.RefreshTokenRotationProperty"]], jsii.get(self, "refreshTokenRotation"))
8532
8535
 
8533
8536
  @refresh_token_rotation.setter
@@ -8749,9 +8752,12 @@ class CfnUserPoolClient(
8749
8752
  feature: typing.Optional[builtins.str] = None,
8750
8753
  retry_grace_period_seconds: typing.Optional[jsii.Number] = None,
8751
8754
  ) -> None:
8752
- '''
8753
- :param feature:
8754
- :param retry_grace_period_seconds:
8755
+ '''The configuration of your app client for refresh token rotation.
8756
+
8757
+ When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens.
8758
+
8759
+ :param feature: The state of refresh token rotation for the current app client.
8760
+ :param retry_grace_period_seconds: When you request a token refresh with ``GetTokensFromRefreshToken`` , the original refresh token that you're rotating out can remain valid for a period of time of up to 60 seconds. This allows for client-side retries. When ``RetryGracePeriodSeconds`` is ``0`` , the grace period is disabled and a successful request immediately invalidates the submitted refresh token.
8755
8761
 
8756
8762
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpoolclient-refreshtokenrotation.html
8757
8763
  :exampleMetadata: fixture=_generated
@@ -8779,7 +8785,8 @@ class CfnUserPoolClient(
8779
8785
 
8780
8786
  @builtins.property
8781
8787
  def feature(self) -> typing.Optional[builtins.str]:
8782
- '''
8788
+ '''The state of refresh token rotation for the current app client.
8789
+
8783
8790
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpoolclient-refreshtokenrotation.html#cfn-cognito-userpoolclient-refreshtokenrotation-feature
8784
8791
  '''
8785
8792
  result = self._values.get("feature")
@@ -8787,7 +8794,10 @@ class CfnUserPoolClient(
8787
8794
 
8788
8795
  @builtins.property
8789
8796
  def retry_grace_period_seconds(self) -> typing.Optional[jsii.Number]:
8790
- '''
8797
+ '''When you request a token refresh with ``GetTokensFromRefreshToken`` , the original refresh token that you're rotating out can remain valid for a period of time of up to 60 seconds.
8798
+
8799
+ This allows for client-side retries. When ``RetryGracePeriodSeconds`` is ``0`` , the grace period is disabled and a successful request immediately invalidates the submitted refresh token.
8800
+
8791
8801
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpoolclient-refreshtokenrotation.html#cfn-cognito-userpoolclient-refreshtokenrotation-retrygraceperiodseconds
8792
8802
  '''
8793
8803
  result = self._values.get("retry_grace_period_seconds")
@@ -8979,7 +8989,7 @@ class CfnUserPoolClientProps:
8979
8989
  :param logout_ur_ls: A list of allowed logout URLs for managed login authentication. When you pass ``logout_uri`` and ``client_id`` parameters to ``/logout`` , Amazon Cognito signs out your user and redirects them to the logout URL. This parameter describes the URLs that you want to be the permitted targets of ``logout_uri`` . A typical use of these URLs is when a user selects "Sign out" and you redirect them to your public homepage. For more information, see `Logout endpoint <https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html>`_ .
8980
8990
  :param prevent_user_existence_errors: Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to ``ENABLED`` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to ``LEGACY`` , those APIs return a ``UserNotFoundException`` exception if the user doesn't exist in the user pool. Valid values include: - ``ENABLED`` - This prevents user existence-related errors. - ``LEGACY`` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented. Defaults to ``LEGACY`` when you don't provide a value.
8981
8991
  :param read_attributes: The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information. When you don't specify the ``ReadAttributes`` for your app client, your app can read the values of ``email_verified`` , ``phone_number_verified`` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, ``ReadAttributes`` doesn't return any information. Amazon Cognito only populates ``ReadAttributes`` in the API response if you have specified your own custom set of read attributes.
8982
- :param refresh_token_rotation:
8992
+ :param refresh_token_rotation: The configuration of your app client for refresh token rotation. When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens.
8983
8993
  :param refresh_token_validity: The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for ``RefreshTokenValidity`` as ``seconds`` , ``minutes`` , ``hours`` , or ``days`` , set a ``TokenValidityUnits`` value in your API request. For example, when you set ``RefreshTokenValidity`` as ``10`` and ``TokenValidityUnits`` as ``days`` , your user can refresh their session and retrieve new access and ID tokens for 10 days. The default time unit for ``RefreshTokenValidity`` in an API request is days. You can't set ``RefreshTokenValidity`` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds. If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for 30 days.
8984
8994
  :param supported_identity_providers: A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: ``COGNITO`` , ``Facebook`` , ``Google`` , ``SignInWithApple`` , and ``LoginWithAmazon`` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example ``MySAMLIdP`` or ``MyOIDCIdP`` . This parameter sets the IdPs that `managed login <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html>`_ will display on the login page for your app client. The removal of ``COGNITO`` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent SDK-based authentication is to block access with a `AWS WAF rule <https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html>`_ .
8985
8995
  :param token_validity_units: The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours.
@@ -9381,7 +9391,10 @@ class CfnUserPoolClientProps:
9381
9391
  def refresh_token_rotation(
9382
9392
  self,
9383
9393
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnUserPoolClient.RefreshTokenRotationProperty]]:
9384
- '''
9394
+ '''The configuration of your app client for refresh token rotation.
9395
+
9396
+ When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens.
9397
+
9385
9398
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolclient.html#cfn-cognito-userpoolclient-refreshtokenrotation
9386
9399
  '''
9387
9400
  result = self._values.get("refresh_token_rotation")
@@ -18232,6 +18245,12 @@ class UserPool(
18232
18245
  check_type(argname="argument provider", value=provider, expected_type=type_hints["provider"])
18233
18246
  return typing.cast(None, jsii.invoke(self, "registerIdentityProvider", [provider]))
18234
18247
 
18248
+ @jsii.python.classproperty
18249
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
18250
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
18251
+ '''Uniquely identifies this class.'''
18252
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
18253
+
18235
18254
  @builtins.property
18236
18255
  @jsii.member(jsii_name="identityProviders")
18237
18256
  def identity_providers(self) -> typing.List[IUserPoolIdentityProvider]:
@@ -18388,6 +18407,12 @@ class UserPoolClient(
18388
18407
  check_type(argname="argument user_pool_client_id", value=user_pool_client_id, expected_type=type_hints["user_pool_client_id"])
18389
18408
  return typing.cast(IUserPoolClient, jsii.sinvoke(cls, "fromUserPoolClientId", [scope, id, user_pool_client_id]))
18390
18409
 
18410
+ @jsii.python.classproperty
18411
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
18412
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
18413
+ '''Uniquely identifies this class.'''
18414
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
18415
+
18391
18416
  @builtins.property
18392
18417
  @jsii.member(jsii_name="oAuthFlows")
18393
18418
  def o_auth_flows(self) -> OAuthFlows:
@@ -19302,6 +19327,12 @@ class UserPoolDomain(
19302
19327
 
19303
19328
  return typing.cast(builtins.str, jsii.invoke(self, "signInUrl", [client, options]))
19304
19329
 
19330
+ @jsii.python.classproperty
19331
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
19332
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
19333
+ '''Uniquely identifies this class.'''
19334
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
19335
+
19305
19336
  @builtins.property
19306
19337
  @jsii.member(jsii_name="cloudFrontDomainName")
19307
19338
  def cloud_front_domain_name(self) -> builtins.str:
@@ -19890,6 +19921,12 @@ class UserPoolGroup(
19890
19921
  check_type(argname="argument group_name", value=group_name, expected_type=type_hints["group_name"])
19891
19922
  return typing.cast(IUserPoolGroup, jsii.sinvoke(cls, "fromGroupName", [scope, id, group_name]))
19892
19923
 
19924
+ @jsii.python.classproperty
19925
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
19926
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
19927
+ '''Uniquely identifies this class.'''
19928
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
19929
+
19893
19930
  @builtins.property
19894
19931
  @jsii.member(jsii_name="groupName")
19895
19932
  def group_name(self) -> builtins.str:
@@ -20251,6 +20288,12 @@ class UserPoolIdentityProviderAmazon(
20251
20288
  def _configure_attribute_mapping(self) -> typing.Any:
20252
20289
  return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
20253
20290
 
20291
+ @jsii.python.classproperty
20292
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
20293
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
20294
+ '''Uniquely identifies this class.'''
20295
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
20296
+
20254
20297
  @builtins.property
20255
20298
  @jsii.member(jsii_name="providerName")
20256
20299
  def provider_name(self) -> builtins.str:
@@ -20363,6 +20406,12 @@ class UserPoolIdentityProviderApple(
20363
20406
  def _configure_attribute_mapping(self) -> typing.Any:
20364
20407
  return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
20365
20408
 
20409
+ @jsii.python.classproperty
20410
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
20411
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
20412
+ '''Uniquely identifies this class.'''
20413
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
20414
+
20366
20415
  @builtins.property
20367
20416
  @jsii.member(jsii_name="providerName")
20368
20417
  def provider_name(self) -> builtins.str:
@@ -20465,6 +20514,12 @@ class UserPoolIdentityProviderFacebook(
20465
20514
  def _configure_attribute_mapping(self) -> typing.Any:
20466
20515
  return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
20467
20516
 
20517
+ @jsii.python.classproperty
20518
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
20519
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
20520
+ '''Uniquely identifies this class.'''
20521
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
20522
+
20468
20523
  @builtins.property
20469
20524
  @jsii.member(jsii_name="providerName")
20470
20525
  def provider_name(self) -> builtins.str:
@@ -20538,6 +20593,12 @@ class UserPoolIdentityProviderGoogle(
20538
20593
  def _configure_attribute_mapping(self) -> typing.Any:
20539
20594
  return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
20540
20595
 
20596
+ @jsii.python.classproperty
20597
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
20598
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
20599
+ '''Uniquely identifies this class.'''
20600
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
20601
+
20541
20602
  @builtins.property
20542
20603
  @jsii.member(jsii_name="providerName")
20543
20604
  def provider_name(self) -> builtins.str:
@@ -20661,6 +20722,12 @@ class UserPoolIdentityProviderOidc(
20661
20722
  def _configure_attribute_mapping(self) -> typing.Any:
20662
20723
  return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
20663
20724
 
20725
+ @jsii.python.classproperty
20726
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
20727
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
20728
+ '''Uniquely identifies this class.'''
20729
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
20730
+
20664
20731
  @builtins.property
20665
20732
  @jsii.member(jsii_name="providerName")
20666
20733
  def provider_name(self) -> builtins.str:
@@ -20849,6 +20916,12 @@ class UserPoolIdentityProviderSaml(
20849
20916
  def _configure_attribute_mapping(self) -> typing.Any:
20850
20917
  return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
20851
20918
 
20919
+ @jsii.python.classproperty
20920
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
20921
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
20922
+ '''Uniquely identifies this class.'''
20923
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
20924
+
20852
20925
  @builtins.property
20853
20926
  @jsii.member(jsii_name="providerName")
20854
20927
  def provider_name(self) -> builtins.str:
@@ -22009,6 +22082,12 @@ class UserPoolResourceServer(
22009
22082
  check_type(argname="argument user_pool_resource_server_id", value=user_pool_resource_server_id, expected_type=type_hints["user_pool_resource_server_id"])
22010
22083
  return typing.cast(IUserPoolResourceServer, jsii.sinvoke(cls, "fromUserPoolResourceServerId", [scope, id, user_pool_resource_server_id]))
22011
22084
 
22085
+ @jsii.python.classproperty
22086
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
22087
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
22088
+ '''Uniquely identifies this class.'''
22089
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
22090
+
22012
22091
  @builtins.property
22013
22092
  @jsii.member(jsii_name="userPoolResourceServerId")
22014
22093
  def user_pool_resource_server_id(self) -> builtins.str:
@@ -671,6 +671,12 @@ class IdentityPool(
671
671
  check_type(argname="argument user_pool", value=user_pool, expected_type=type_hints["user_pool"])
672
672
  return typing.cast(None, jsii.invoke(self, "addUserPoolAuthentication", [user_pool]))
673
673
 
674
+ @jsii.python.classproperty
675
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
676
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
677
+ '''Uniquely identifies this class.'''
678
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
679
+
674
680
  @builtins.property
675
681
  @jsii.member(jsii_name="authenticatedRole")
676
682
  def authenticated_role(self) -> _IRole_235f5d8e:
@@ -7286,6 +7286,12 @@ class ManagedRule(
7286
7286
 
7287
7287
  return typing.cast(_Rule_334ed2b5, jsii.invoke(self, "onReEvaluationStatus", [id, options]))
7288
7288
 
7289
+ @jsii.python.classproperty
7290
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
7291
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
7292
+ '''Uniquely identifies this class.'''
7293
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
7294
+
7289
7295
  @builtins.property
7290
7296
  @jsii.member(jsii_name="configRuleArn")
7291
7297
  def config_rule_arn(self) -> builtins.str:
@@ -12779,6 +12785,12 @@ class AccessKeysRotated(
12779
12785
 
12780
12786
  jsii.create(self.__class__, self, [scope, id, props])
12781
12787
 
12788
+ @jsii.python.classproperty
12789
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
12790
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
12791
+ '''Uniquely identifies this class.'''
12792
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
12793
+
12782
12794
 
12783
12795
  @jsii.data_type(
12784
12796
  jsii_type="aws-cdk-lib.aws_config.AccessKeysRotatedProps",
@@ -13009,6 +13021,12 @@ class CloudFormationStackDriftDetectionCheck(
13009
13021
 
13010
13022
  jsii.create(self.__class__, self, [scope, id, props])
13011
13023
 
13024
+ @jsii.python.classproperty
13025
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
13026
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
13027
+ '''Uniquely identifies this class.'''
13028
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
13029
+
13012
13030
 
13013
13031
  @jsii.data_type(
13014
13032
  jsii_type="aws-cdk-lib.aws_config.CloudFormationStackDriftDetectionCheckProps",
@@ -13244,6 +13262,12 @@ class CloudFormationStackNotificationCheck(
13244
13262
 
13245
13263
  jsii.create(self.__class__, self, [scope, id, props])
13246
13264
 
13265
+ @jsii.python.classproperty
13266
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
13267
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
13268
+ '''Uniquely identifies this class.'''
13269
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
13270
+
13247
13271
 
13248
13272
  @jsii.data_type(
13249
13273
  jsii_type="aws-cdk-lib.aws_config.CloudFormationStackNotificationCheckProps",
@@ -13603,6 +13627,12 @@ class CustomPolicy(
13603
13627
 
13604
13628
  return typing.cast(_Rule_334ed2b5, jsii.invoke(self, "onReEvaluationStatus", [id, options]))
13605
13629
 
13630
+ @jsii.python.classproperty
13631
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
13632
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
13633
+ '''Uniquely identifies this class.'''
13634
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
13635
+
13606
13636
  @builtins.property
13607
13637
  @jsii.member(jsii_name="configRuleArn")
13608
13638
  def config_rule_arn(self) -> builtins.str:
@@ -14058,6 +14088,12 @@ class CustomRule(
14058
14088
 
14059
14089
  return typing.cast(_Rule_334ed2b5, jsii.invoke(self, "onReEvaluationStatus", [id, options]))
14060
14090
 
14091
+ @jsii.python.classproperty
14092
+ @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
14093
+ def PROPERTY_INJECTION_ID(cls) -> builtins.str:
14094
+ '''Uniquely identifies this class.'''
14095
+ return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
14096
+
14061
14097
  @builtins.property
14062
14098
  @jsii.member(jsii_name="configRuleArn")
14063
14099
  def config_rule_arn(self) -> builtins.str: