aws-cdk-lib 2.195.0__py3-none-any.whl → 2.196.1__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of aws-cdk-lib might be problematic. Click here for more details.
- aws_cdk/__init__.py +433 -20
- aws_cdk/_jsii/__init__.py +1 -1
- aws_cdk/_jsii/{aws-cdk-lib@2.195.0.jsii.tgz → aws-cdk-lib@2.196.1.jsii.tgz} +0 -0
- aws_cdk/aws_acmpca/__init__.py +1 -1
- aws_cdk/aws_amazonmq/__init__.py +2 -2
- aws_cdk/aws_apigateway/__init__.py +148 -69
- aws_cdk/aws_apigatewayv2/__init__.py +155 -24
- aws_cdk/aws_appconfig/__init__.py +24 -0
- aws_cdk/aws_applicationautoscaling/__init__.py +6 -0
- aws_cdk/aws_appmesh/__init__.py +42 -0
- aws_cdk/aws_appsync/__init__.py +92 -20
- aws_cdk/aws_autoscaling/__init__.py +24 -0
- aws_cdk/aws_backup/__init__.py +53 -14
- aws_cdk/aws_batch/__init__.py +72 -0
- aws_cdk/aws_bedrock/__init__.py +620 -14
- aws_cdk/aws_budgets/__init__.py +569 -0
- aws_cdk/aws_certificatemanager/__init__.py +21 -0
- aws_cdk/aws_chatbot/__init__.py +6 -0
- aws_cdk/aws_cloudfront/__init__.py +87 -0
- aws_cdk/aws_cloudfront/experimental/__init__.py +6 -0
- aws_cdk/aws_cloudtrail/__init__.py +6 -0
- aws_cdk/aws_cloudwatch/__init__.py +18 -0
- aws_cdk/aws_cloudwatch_actions/__init__.py +75 -1
- aws_cdk/aws_codebuild/__init__.py +48 -0
- aws_cdk/aws_codecommit/__init__.py +6 -0
- aws_cdk/aws_codedeploy/__init__.py +63 -0
- aws_cdk/aws_codeguruprofiler/__init__.py +6 -0
- aws_cdk/aws_codepipeline/__init__.py +6 -0
- aws_cdk/aws_codepipeline_actions/__init__.py +4 -4
- aws_cdk/aws_codestarnotifications/__init__.py +6 -0
- aws_cdk/aws_cognito/__init__.py +91 -12
- aws_cdk/aws_cognito_identitypool/__init__.py +6 -0
- aws_cdk/aws_config/__init__.py +36 -0
- aws_cdk/aws_datazone/__init__.py +557 -14
- aws_cdk/aws_docdb/__init__.py +27 -3
- aws_cdk/aws_dsql/__init__.py +21 -13
- aws_cdk/aws_dynamodb/__init__.py +20 -8
- aws_cdk/aws_ec2/__init__.py +282 -21
- aws_cdk/aws_ecr/__init__.py +6 -0
- aws_cdk/aws_ecr_assets/__init__.py +6 -0
- aws_cdk/aws_ecs/__init__.py +112 -19
- aws_cdk/aws_ecs_patterns/__init__.py +58 -0
- aws_cdk/aws_efs/__init__.py +12 -0
- aws_cdk/aws_eks/__init__.py +42 -0
- aws_cdk/aws_elasticloadbalancing/__init__.py +6 -0
- aws_cdk/aws_elasticloadbalancingv2/__init__.py +112 -9
- aws_cdk/aws_elasticsearch/__init__.py +9 -0
- aws_cdk/aws_events/__init__.py +36 -0
- aws_cdk/aws_events_targets/__init__.py +10 -10
- aws_cdk/aws_fsx/__init__.py +6 -0
- aws_cdk/aws_globalaccelerator/__init__.py +18 -0
- aws_cdk/aws_iam/__init__.py +66 -0
- aws_cdk/aws_imagebuilder/__init__.py +21 -16
- aws_cdk/aws_inspector/__init__.py +6 -0
- aws_cdk/aws_kinesis/__init__.py +19 -1
- aws_cdk/aws_kinesisanalytics/__init__.py +9 -11
- aws_cdk/aws_kinesisanalyticsv2/__init__.py +9 -11
- aws_cdk/aws_kinesisfirehose/__init__.py +6 -0
- aws_cdk/aws_kms/__init__.py +16 -4
- aws_cdk/aws_lambda/__init__.py +76 -6
- aws_cdk/aws_logs/__init__.py +155 -12
- aws_cdk/aws_opensearchservice/__init__.py +6 -0
- aws_cdk/aws_quicksight/__init__.py +22 -22
- aws_cdk/aws_rds/__init__.py +306 -30
- aws_cdk/aws_redshiftserverless/__init__.py +7 -7
- aws_cdk/aws_route53/__init__.py +723 -25
- aws_cdk/aws_s3/__init__.py +37 -10
- aws_cdk/aws_s3_deployment/__init__.py +6 -0
- aws_cdk/aws_sagemaker/__init__.py +199 -4
- aws_cdk/aws_scheduler/__init__.py +12 -0
- aws_cdk/aws_secretsmanager/__init__.py +24 -0
- aws_cdk/aws_servicecatalog/__init__.py +24 -0
- aws_cdk/aws_servicediscovery/__init__.py +48 -0
- aws_cdk/aws_ses/__init__.py +133 -33
- aws_cdk/aws_signer/__init__.py +6 -0
- aws_cdk/aws_sns/__init__.py +18 -0
- aws_cdk/aws_sns_subscriptions/__init__.py +6 -0
- aws_cdk/aws_sqs/__init__.py +12 -0
- aws_cdk/aws_ssm/__init__.py +12 -0
- aws_cdk/aws_ssmcontacts/__init__.py +53 -2
- aws_cdk/aws_ssmguiconnect/__init__.py +7 -7
- aws_cdk/aws_stepfunctions/__init__.py +153 -7
- aws_cdk/aws_stepfunctions_tasks/__init__.py +46 -10
- aws_cdk/aws_synthetics/__init__.py +32 -0
- aws_cdk/aws_verifiedpermissions/__init__.py +168 -3
- aws_cdk/aws_vpclattice/__init__.py +3 -1
- aws_cdk/aws_wisdom/__init__.py +6 -4
- aws_cdk/custom_resources/__init__.py +18 -0
- aws_cdk/cx_api/__init__.py +33 -0
- aws_cdk/lambda_layer_awscli/__init__.py +6 -0
- aws_cdk/lambda_layer_node_proxy_agent/__init__.py +6 -0
- aws_cdk/pipelines/__init__.py +10 -10
- aws_cdk/triggers/__init__.py +6 -0
- {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.1.dist-info}/METADATA +83 -5
- {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.1.dist-info}/RECORD +99 -99
- {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.1.dist-info}/LICENSE +0 -0
- {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.1.dist-info}/NOTICE +0 -0
- {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.1.dist-info}/WHEEL +0 -0
- {aws_cdk_lib-2.195.0.dist-info → aws_cdk_lib-2.196.1.dist-info}/top_level.txt +0 -0
|
@@ -798,6 +798,12 @@ class ProfilingGroup(
|
|
|
798
798
|
check_type(argname="argument grantee", value=grantee, expected_type=type_hints["grantee"])
|
|
799
799
|
return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantRead", [grantee]))
|
|
800
800
|
|
|
801
|
+
@jsii.python.classproperty
|
|
802
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
803
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
804
|
+
'''Uniquely identifies this class.'''
|
|
805
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
806
|
+
|
|
801
807
|
@builtins.property
|
|
802
808
|
@jsii.member(jsii_name="profilingGroupArn")
|
|
803
809
|
def profiling_group_arn(self) -> builtins.str:
|
|
@@ -9822,6 +9822,12 @@ class Pipeline(
|
|
|
9822
9822
|
check_type(argname="argument stage_name", value=stage_name, expected_type=type_hints["stage_name"])
|
|
9823
9823
|
return typing.cast(IStage, jsii.invoke(self, "stage", [stage_name]))
|
|
9824
9824
|
|
|
9825
|
+
@jsii.python.classproperty
|
|
9826
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
9827
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
9828
|
+
'''Uniquely identifies this class.'''
|
|
9829
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
9830
|
+
|
|
9825
9831
|
@builtins.property
|
|
9826
9832
|
@jsii.member(jsii_name="artifactBucket")
|
|
9827
9833
|
def artifact_bucket(self) -> _IBucket_42e086fd:
|
|
@@ -1094,8 +1094,8 @@ Here's an example:
|
|
|
1094
1094
|
# This is the Stack containing a simple ECS Service that uses the provided ContainerImage.
|
|
1095
1095
|
#
|
|
1096
1096
|
class EcsAppStack(cdk.Stack):
|
|
1097
|
-
def __init__(self, scope, id, *, image, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None):
|
|
1098
|
-
super().__init__(scope, id, image=image, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation)
|
|
1097
|
+
def __init__(self, scope, id, *, image, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None, propertyInjectors=None):
|
|
1098
|
+
super().__init__(scope, id, image=image, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation, propertyInjectors=propertyInjectors)
|
|
1099
1099
|
|
|
1100
1100
|
task_definition = ecs.TaskDefinition(self, "TaskDefinition",
|
|
1101
1101
|
compatibility=ecs.Compatibility.FARGATE,
|
|
@@ -1119,8 +1119,8 @@ class EcsAppStack(cdk.Stack):
|
|
|
1119
1119
|
#
|
|
1120
1120
|
class PipelineStack(cdk.Stack):
|
|
1121
1121
|
|
|
1122
|
-
def __init__(self, scope, id, *, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None):
|
|
1123
|
-
super().__init__(scope, id, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation)
|
|
1122
|
+
def __init__(self, scope, id, *, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None, propertyInjectors=None):
|
|
1123
|
+
super().__init__(scope, id, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation, propertyInjectors=propertyInjectors)
|
|
1124
1124
|
|
|
1125
1125
|
# ********* ECS part ****************
|
|
1126
1126
|
|
|
@@ -991,6 +991,12 @@ class NotificationRule(
|
|
|
991
991
|
check_type(argname="argument target", value=target, expected_type=type_hints["target"])
|
|
992
992
|
return typing.cast(builtins.bool, jsii.invoke(self, "addTarget", [target]))
|
|
993
993
|
|
|
994
|
+
@jsii.python.classproperty
|
|
995
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
996
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
997
|
+
'''Uniquely identifies this class.'''
|
|
998
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
999
|
+
|
|
994
1000
|
@builtins.property
|
|
995
1001
|
@jsii.member(jsii_name="notificationRuleArn")
|
|
996
1002
|
def notification_rule_arn(self) -> builtins.str:
|
aws_cdk/aws_cognito/__init__.py
CHANGED
|
@@ -4519,7 +4519,7 @@ class CfnManagedLoginBranding(
|
|
|
4519
4519
|
:param id: Construct identifier for this resource (unique in its scope).
|
|
4520
4520
|
:param user_pool_id: The user pool where the branding style is assigned.
|
|
4521
4521
|
:param assets: An array of image files that you want to apply to roles like backgrounds, logos, and icons. Each object must also indicate whether it is for dark mode, light mode, or browser-adaptive mode.
|
|
4522
|
-
:param client_id: The app client that
|
|
4522
|
+
:param client_id: The app client that you want to assign the branding style to. Each style is linked to an app client until you delete it.
|
|
4523
4523
|
:param return_merged_resources: When ``true`` , returns values for branding options that are unchanged from Amazon Cognito defaults. When ``false`` or when you omit this parameter, returns only values that you customized in your branding style.
|
|
4524
4524
|
:param settings: A JSON file, encoded as a ``Document`` type, with the the settings that you want to apply to your style.
|
|
4525
4525
|
:param use_cognito_provided_values: When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding editor. When you specify ``true`` for this option, you must also omit values for ``Settings`` and ``Assets`` in the request.
|
|
@@ -4617,7 +4617,7 @@ class CfnManagedLoginBranding(
|
|
|
4617
4617
|
@builtins.property
|
|
4618
4618
|
@jsii.member(jsii_name="clientId")
|
|
4619
4619
|
def client_id(self) -> typing.Optional[builtins.str]:
|
|
4620
|
-
'''The app client that
|
|
4620
|
+
'''The app client that you want to assign the branding style to.'''
|
|
4621
4621
|
return typing.cast(typing.Optional[builtins.str], jsii.get(self, "clientId"))
|
|
4622
4622
|
|
|
4623
4623
|
@client_id.setter
|
|
@@ -4832,7 +4832,7 @@ class CfnManagedLoginBrandingProps:
|
|
|
4832
4832
|
|
|
4833
4833
|
:param user_pool_id: The user pool where the branding style is assigned.
|
|
4834
4834
|
:param assets: An array of image files that you want to apply to roles like backgrounds, logos, and icons. Each object must also indicate whether it is for dark mode, light mode, or browser-adaptive mode.
|
|
4835
|
-
:param client_id: The app client that
|
|
4835
|
+
:param client_id: The app client that you want to assign the branding style to. Each style is linked to an app client until you delete it.
|
|
4836
4836
|
:param return_merged_resources: When ``true`` , returns values for branding options that are unchanged from Amazon Cognito defaults. When ``false`` or when you omit this parameter, returns only values that you customized in your branding style.
|
|
4837
4837
|
:param settings: A JSON file, encoded as a ``Document`` type, with the the settings that you want to apply to your style.
|
|
4838
4838
|
:param use_cognito_provided_values: When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding editor. When you specify ``true`` for this option, you must also omit values for ``Settings`` and ``Assets`` in the request.
|
|
@@ -4914,7 +4914,9 @@ class CfnManagedLoginBrandingProps:
|
|
|
4914
4914
|
|
|
4915
4915
|
@builtins.property
|
|
4916
4916
|
def client_id(self) -> typing.Optional[builtins.str]:
|
|
4917
|
-
'''The app client that
|
|
4917
|
+
'''The app client that you want to assign the branding style to.
|
|
4918
|
+
|
|
4919
|
+
Each style is linked to an app client until you delete it.
|
|
4918
4920
|
|
|
4919
4921
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-managedloginbranding.html#cfn-cognito-managedloginbranding-clientid
|
|
4920
4922
|
'''
|
|
@@ -8151,7 +8153,7 @@ class CfnUserPoolClient(
|
|
|
8151
8153
|
:param logout_ur_ls: A list of allowed logout URLs for managed login authentication. When you pass ``logout_uri`` and ``client_id`` parameters to ``/logout`` , Amazon Cognito signs out your user and redirects them to the logout URL. This parameter describes the URLs that you want to be the permitted targets of ``logout_uri`` . A typical use of these URLs is when a user selects "Sign out" and you redirect them to your public homepage. For more information, see `Logout endpoint <https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html>`_ .
|
|
8152
8154
|
:param prevent_user_existence_errors: Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to ``ENABLED`` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to ``LEGACY`` , those APIs return a ``UserNotFoundException`` exception if the user doesn't exist in the user pool. Valid values include: - ``ENABLED`` - This prevents user existence-related errors. - ``LEGACY`` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented. Defaults to ``LEGACY`` when you don't provide a value.
|
|
8153
8155
|
:param read_attributes: The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information. When you don't specify the ``ReadAttributes`` for your app client, your app can read the values of ``email_verified`` , ``phone_number_verified`` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, ``ReadAttributes`` doesn't return any information. Amazon Cognito only populates ``ReadAttributes`` in the API response if you have specified your own custom set of read attributes.
|
|
8154
|
-
:param refresh_token_rotation:
|
|
8156
|
+
:param refresh_token_rotation: The configuration of your app client for refresh token rotation. When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens.
|
|
8155
8157
|
:param refresh_token_validity: The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for ``RefreshTokenValidity`` as ``seconds`` , ``minutes`` , ``hours`` , or ``days`` , set a ``TokenValidityUnits`` value in your API request. For example, when you set ``RefreshTokenValidity`` as ``10`` and ``TokenValidityUnits`` as ``days`` , your user can refresh their session and retrieve new access and ID tokens for 10 days. The default time unit for ``RefreshTokenValidity`` in an API request is days. You can't set ``RefreshTokenValidity`` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds. If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for 30 days.
|
|
8156
8158
|
:param supported_identity_providers: A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: ``COGNITO`` , ``Facebook`` , ``Google`` , ``SignInWithApple`` , and ``LoginWithAmazon`` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example ``MySAMLIdP`` or ``MyOIDCIdP`` . This parameter sets the IdPs that `managed login <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html>`_ will display on the login page for your app client. The removal of ``COGNITO`` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent SDK-based authentication is to block access with a `AWS WAF rule <https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html>`_ .
|
|
8157
8159
|
:param token_validity_units: The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours.
|
|
@@ -8528,6 +8530,7 @@ class CfnUserPoolClient(
|
|
|
8528
8530
|
def refresh_token_rotation(
|
|
8529
8531
|
self,
|
|
8530
8532
|
) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnUserPoolClient.RefreshTokenRotationProperty"]]:
|
|
8533
|
+
'''The configuration of your app client for refresh token rotation.'''
|
|
8531
8534
|
return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnUserPoolClient.RefreshTokenRotationProperty"]], jsii.get(self, "refreshTokenRotation"))
|
|
8532
8535
|
|
|
8533
8536
|
@refresh_token_rotation.setter
|
|
@@ -8749,9 +8752,12 @@ class CfnUserPoolClient(
|
|
|
8749
8752
|
feature: typing.Optional[builtins.str] = None,
|
|
8750
8753
|
retry_grace_period_seconds: typing.Optional[jsii.Number] = None,
|
|
8751
8754
|
) -> None:
|
|
8752
|
-
'''
|
|
8753
|
-
|
|
8754
|
-
|
|
8755
|
+
'''The configuration of your app client for refresh token rotation.
|
|
8756
|
+
|
|
8757
|
+
When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens.
|
|
8758
|
+
|
|
8759
|
+
:param feature: The state of refresh token rotation for the current app client.
|
|
8760
|
+
:param retry_grace_period_seconds: When you request a token refresh with ``GetTokensFromRefreshToken`` , the original refresh token that you're rotating out can remain valid for a period of time of up to 60 seconds. This allows for client-side retries. When ``RetryGracePeriodSeconds`` is ``0`` , the grace period is disabled and a successful request immediately invalidates the submitted refresh token.
|
|
8755
8761
|
|
|
8756
8762
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpoolclient-refreshtokenrotation.html
|
|
8757
8763
|
:exampleMetadata: fixture=_generated
|
|
@@ -8779,7 +8785,8 @@ class CfnUserPoolClient(
|
|
|
8779
8785
|
|
|
8780
8786
|
@builtins.property
|
|
8781
8787
|
def feature(self) -> typing.Optional[builtins.str]:
|
|
8782
|
-
'''
|
|
8788
|
+
'''The state of refresh token rotation for the current app client.
|
|
8789
|
+
|
|
8783
8790
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpoolclient-refreshtokenrotation.html#cfn-cognito-userpoolclient-refreshtokenrotation-feature
|
|
8784
8791
|
'''
|
|
8785
8792
|
result = self._values.get("feature")
|
|
@@ -8787,7 +8794,10 @@ class CfnUserPoolClient(
|
|
|
8787
8794
|
|
|
8788
8795
|
@builtins.property
|
|
8789
8796
|
def retry_grace_period_seconds(self) -> typing.Optional[jsii.Number]:
|
|
8790
|
-
'''
|
|
8797
|
+
'''When you request a token refresh with ``GetTokensFromRefreshToken`` , the original refresh token that you're rotating out can remain valid for a period of time of up to 60 seconds.
|
|
8798
|
+
|
|
8799
|
+
This allows for client-side retries. When ``RetryGracePeriodSeconds`` is ``0`` , the grace period is disabled and a successful request immediately invalidates the submitted refresh token.
|
|
8800
|
+
|
|
8791
8801
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpoolclient-refreshtokenrotation.html#cfn-cognito-userpoolclient-refreshtokenrotation-retrygraceperiodseconds
|
|
8792
8802
|
'''
|
|
8793
8803
|
result = self._values.get("retry_grace_period_seconds")
|
|
@@ -8979,7 +8989,7 @@ class CfnUserPoolClientProps:
|
|
|
8979
8989
|
:param logout_ur_ls: A list of allowed logout URLs for managed login authentication. When you pass ``logout_uri`` and ``client_id`` parameters to ``/logout`` , Amazon Cognito signs out your user and redirects them to the logout URL. This parameter describes the URLs that you want to be the permitted targets of ``logout_uri`` . A typical use of these URLs is when a user selects "Sign out" and you redirect them to your public homepage. For more information, see `Logout endpoint <https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html>`_ .
|
|
8980
8990
|
:param prevent_user_existence_errors: Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to ``ENABLED`` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to ``LEGACY`` , those APIs return a ``UserNotFoundException`` exception if the user doesn't exist in the user pool. Valid values include: - ``ENABLED`` - This prevents user existence-related errors. - ``LEGACY`` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented. Defaults to ``LEGACY`` when you don't provide a value.
|
|
8981
8991
|
:param read_attributes: The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information. When you don't specify the ``ReadAttributes`` for your app client, your app can read the values of ``email_verified`` , ``phone_number_verified`` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, ``ReadAttributes`` doesn't return any information. Amazon Cognito only populates ``ReadAttributes`` in the API response if you have specified your own custom set of read attributes.
|
|
8982
|
-
:param refresh_token_rotation:
|
|
8992
|
+
:param refresh_token_rotation: The configuration of your app client for refresh token rotation. When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens.
|
|
8983
8993
|
:param refresh_token_validity: The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for ``RefreshTokenValidity`` as ``seconds`` , ``minutes`` , ``hours`` , or ``days`` , set a ``TokenValidityUnits`` value in your API request. For example, when you set ``RefreshTokenValidity`` as ``10`` and ``TokenValidityUnits`` as ``days`` , your user can refresh their session and retrieve new access and ID tokens for 10 days. The default time unit for ``RefreshTokenValidity`` in an API request is days. You can't set ``RefreshTokenValidity`` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds. If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for 30 days.
|
|
8984
8994
|
:param supported_identity_providers: A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: ``COGNITO`` , ``Facebook`` , ``Google`` , ``SignInWithApple`` , and ``LoginWithAmazon`` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example ``MySAMLIdP`` or ``MyOIDCIdP`` . This parameter sets the IdPs that `managed login <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html>`_ will display on the login page for your app client. The removal of ``COGNITO`` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent SDK-based authentication is to block access with a `AWS WAF rule <https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html>`_ .
|
|
8985
8995
|
:param token_validity_units: The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours.
|
|
@@ -9381,7 +9391,10 @@ class CfnUserPoolClientProps:
|
|
|
9381
9391
|
def refresh_token_rotation(
|
|
9382
9392
|
self,
|
|
9383
9393
|
) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnUserPoolClient.RefreshTokenRotationProperty]]:
|
|
9384
|
-
'''
|
|
9394
|
+
'''The configuration of your app client for refresh token rotation.
|
|
9395
|
+
|
|
9396
|
+
When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens.
|
|
9397
|
+
|
|
9385
9398
|
:see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolclient.html#cfn-cognito-userpoolclient-refreshtokenrotation
|
|
9386
9399
|
'''
|
|
9387
9400
|
result = self._values.get("refresh_token_rotation")
|
|
@@ -18232,6 +18245,12 @@ class UserPool(
|
|
|
18232
18245
|
check_type(argname="argument provider", value=provider, expected_type=type_hints["provider"])
|
|
18233
18246
|
return typing.cast(None, jsii.invoke(self, "registerIdentityProvider", [provider]))
|
|
18234
18247
|
|
|
18248
|
+
@jsii.python.classproperty
|
|
18249
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
18250
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
18251
|
+
'''Uniquely identifies this class.'''
|
|
18252
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
18253
|
+
|
|
18235
18254
|
@builtins.property
|
|
18236
18255
|
@jsii.member(jsii_name="identityProviders")
|
|
18237
18256
|
def identity_providers(self) -> typing.List[IUserPoolIdentityProvider]:
|
|
@@ -18388,6 +18407,12 @@ class UserPoolClient(
|
|
|
18388
18407
|
check_type(argname="argument user_pool_client_id", value=user_pool_client_id, expected_type=type_hints["user_pool_client_id"])
|
|
18389
18408
|
return typing.cast(IUserPoolClient, jsii.sinvoke(cls, "fromUserPoolClientId", [scope, id, user_pool_client_id]))
|
|
18390
18409
|
|
|
18410
|
+
@jsii.python.classproperty
|
|
18411
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
18412
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
18413
|
+
'''Uniquely identifies this class.'''
|
|
18414
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
18415
|
+
|
|
18391
18416
|
@builtins.property
|
|
18392
18417
|
@jsii.member(jsii_name="oAuthFlows")
|
|
18393
18418
|
def o_auth_flows(self) -> OAuthFlows:
|
|
@@ -19302,6 +19327,12 @@ class UserPoolDomain(
|
|
|
19302
19327
|
|
|
19303
19328
|
return typing.cast(builtins.str, jsii.invoke(self, "signInUrl", [client, options]))
|
|
19304
19329
|
|
|
19330
|
+
@jsii.python.classproperty
|
|
19331
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
19332
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
19333
|
+
'''Uniquely identifies this class.'''
|
|
19334
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
19335
|
+
|
|
19305
19336
|
@builtins.property
|
|
19306
19337
|
@jsii.member(jsii_name="cloudFrontDomainName")
|
|
19307
19338
|
def cloud_front_domain_name(self) -> builtins.str:
|
|
@@ -19890,6 +19921,12 @@ class UserPoolGroup(
|
|
|
19890
19921
|
check_type(argname="argument group_name", value=group_name, expected_type=type_hints["group_name"])
|
|
19891
19922
|
return typing.cast(IUserPoolGroup, jsii.sinvoke(cls, "fromGroupName", [scope, id, group_name]))
|
|
19892
19923
|
|
|
19924
|
+
@jsii.python.classproperty
|
|
19925
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
19926
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
19927
|
+
'''Uniquely identifies this class.'''
|
|
19928
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
19929
|
+
|
|
19893
19930
|
@builtins.property
|
|
19894
19931
|
@jsii.member(jsii_name="groupName")
|
|
19895
19932
|
def group_name(self) -> builtins.str:
|
|
@@ -20251,6 +20288,12 @@ class UserPoolIdentityProviderAmazon(
|
|
|
20251
20288
|
def _configure_attribute_mapping(self) -> typing.Any:
|
|
20252
20289
|
return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
|
|
20253
20290
|
|
|
20291
|
+
@jsii.python.classproperty
|
|
20292
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
20293
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
20294
|
+
'''Uniquely identifies this class.'''
|
|
20295
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
20296
|
+
|
|
20254
20297
|
@builtins.property
|
|
20255
20298
|
@jsii.member(jsii_name="providerName")
|
|
20256
20299
|
def provider_name(self) -> builtins.str:
|
|
@@ -20363,6 +20406,12 @@ class UserPoolIdentityProviderApple(
|
|
|
20363
20406
|
def _configure_attribute_mapping(self) -> typing.Any:
|
|
20364
20407
|
return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
|
|
20365
20408
|
|
|
20409
|
+
@jsii.python.classproperty
|
|
20410
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
20411
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
20412
|
+
'''Uniquely identifies this class.'''
|
|
20413
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
20414
|
+
|
|
20366
20415
|
@builtins.property
|
|
20367
20416
|
@jsii.member(jsii_name="providerName")
|
|
20368
20417
|
def provider_name(self) -> builtins.str:
|
|
@@ -20465,6 +20514,12 @@ class UserPoolIdentityProviderFacebook(
|
|
|
20465
20514
|
def _configure_attribute_mapping(self) -> typing.Any:
|
|
20466
20515
|
return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
|
|
20467
20516
|
|
|
20517
|
+
@jsii.python.classproperty
|
|
20518
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
20519
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
20520
|
+
'''Uniquely identifies this class.'''
|
|
20521
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
20522
|
+
|
|
20468
20523
|
@builtins.property
|
|
20469
20524
|
@jsii.member(jsii_name="providerName")
|
|
20470
20525
|
def provider_name(self) -> builtins.str:
|
|
@@ -20538,6 +20593,12 @@ class UserPoolIdentityProviderGoogle(
|
|
|
20538
20593
|
def _configure_attribute_mapping(self) -> typing.Any:
|
|
20539
20594
|
return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
|
|
20540
20595
|
|
|
20596
|
+
@jsii.python.classproperty
|
|
20597
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
20598
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
20599
|
+
'''Uniquely identifies this class.'''
|
|
20600
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
20601
|
+
|
|
20541
20602
|
@builtins.property
|
|
20542
20603
|
@jsii.member(jsii_name="providerName")
|
|
20543
20604
|
def provider_name(self) -> builtins.str:
|
|
@@ -20661,6 +20722,12 @@ class UserPoolIdentityProviderOidc(
|
|
|
20661
20722
|
def _configure_attribute_mapping(self) -> typing.Any:
|
|
20662
20723
|
return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
|
|
20663
20724
|
|
|
20725
|
+
@jsii.python.classproperty
|
|
20726
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
20727
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
20728
|
+
'''Uniquely identifies this class.'''
|
|
20729
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
20730
|
+
|
|
20664
20731
|
@builtins.property
|
|
20665
20732
|
@jsii.member(jsii_name="providerName")
|
|
20666
20733
|
def provider_name(self) -> builtins.str:
|
|
@@ -20849,6 +20916,12 @@ class UserPoolIdentityProviderSaml(
|
|
|
20849
20916
|
def _configure_attribute_mapping(self) -> typing.Any:
|
|
20850
20917
|
return typing.cast(typing.Any, jsii.invoke(self, "configureAttributeMapping", []))
|
|
20851
20918
|
|
|
20919
|
+
@jsii.python.classproperty
|
|
20920
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
20921
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
20922
|
+
'''Uniquely identifies this class.'''
|
|
20923
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
20924
|
+
|
|
20852
20925
|
@builtins.property
|
|
20853
20926
|
@jsii.member(jsii_name="providerName")
|
|
20854
20927
|
def provider_name(self) -> builtins.str:
|
|
@@ -22009,6 +22082,12 @@ class UserPoolResourceServer(
|
|
|
22009
22082
|
check_type(argname="argument user_pool_resource_server_id", value=user_pool_resource_server_id, expected_type=type_hints["user_pool_resource_server_id"])
|
|
22010
22083
|
return typing.cast(IUserPoolResourceServer, jsii.sinvoke(cls, "fromUserPoolResourceServerId", [scope, id, user_pool_resource_server_id]))
|
|
22011
22084
|
|
|
22085
|
+
@jsii.python.classproperty
|
|
22086
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
22087
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
22088
|
+
'''Uniquely identifies this class.'''
|
|
22089
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
22090
|
+
|
|
22012
22091
|
@builtins.property
|
|
22013
22092
|
@jsii.member(jsii_name="userPoolResourceServerId")
|
|
22014
22093
|
def user_pool_resource_server_id(self) -> builtins.str:
|
|
@@ -671,6 +671,12 @@ class IdentityPool(
|
|
|
671
671
|
check_type(argname="argument user_pool", value=user_pool, expected_type=type_hints["user_pool"])
|
|
672
672
|
return typing.cast(None, jsii.invoke(self, "addUserPoolAuthentication", [user_pool]))
|
|
673
673
|
|
|
674
|
+
@jsii.python.classproperty
|
|
675
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
676
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
677
|
+
'''Uniquely identifies this class.'''
|
|
678
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
679
|
+
|
|
674
680
|
@builtins.property
|
|
675
681
|
@jsii.member(jsii_name="authenticatedRole")
|
|
676
682
|
def authenticated_role(self) -> _IRole_235f5d8e:
|
aws_cdk/aws_config/__init__.py
CHANGED
|
@@ -7286,6 +7286,12 @@ class ManagedRule(
|
|
|
7286
7286
|
|
|
7287
7287
|
return typing.cast(_Rule_334ed2b5, jsii.invoke(self, "onReEvaluationStatus", [id, options]))
|
|
7288
7288
|
|
|
7289
|
+
@jsii.python.classproperty
|
|
7290
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
7291
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
7292
|
+
'''Uniquely identifies this class.'''
|
|
7293
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
7294
|
+
|
|
7289
7295
|
@builtins.property
|
|
7290
7296
|
@jsii.member(jsii_name="configRuleArn")
|
|
7291
7297
|
def config_rule_arn(self) -> builtins.str:
|
|
@@ -12779,6 +12785,12 @@ class AccessKeysRotated(
|
|
|
12779
12785
|
|
|
12780
12786
|
jsii.create(self.__class__, self, [scope, id, props])
|
|
12781
12787
|
|
|
12788
|
+
@jsii.python.classproperty
|
|
12789
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
12790
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
12791
|
+
'''Uniquely identifies this class.'''
|
|
12792
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
12793
|
+
|
|
12782
12794
|
|
|
12783
12795
|
@jsii.data_type(
|
|
12784
12796
|
jsii_type="aws-cdk-lib.aws_config.AccessKeysRotatedProps",
|
|
@@ -13009,6 +13021,12 @@ class CloudFormationStackDriftDetectionCheck(
|
|
|
13009
13021
|
|
|
13010
13022
|
jsii.create(self.__class__, self, [scope, id, props])
|
|
13011
13023
|
|
|
13024
|
+
@jsii.python.classproperty
|
|
13025
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
13026
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
13027
|
+
'''Uniquely identifies this class.'''
|
|
13028
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
13029
|
+
|
|
13012
13030
|
|
|
13013
13031
|
@jsii.data_type(
|
|
13014
13032
|
jsii_type="aws-cdk-lib.aws_config.CloudFormationStackDriftDetectionCheckProps",
|
|
@@ -13244,6 +13262,12 @@ class CloudFormationStackNotificationCheck(
|
|
|
13244
13262
|
|
|
13245
13263
|
jsii.create(self.__class__, self, [scope, id, props])
|
|
13246
13264
|
|
|
13265
|
+
@jsii.python.classproperty
|
|
13266
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
13267
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
13268
|
+
'''Uniquely identifies this class.'''
|
|
13269
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
13270
|
+
|
|
13247
13271
|
|
|
13248
13272
|
@jsii.data_type(
|
|
13249
13273
|
jsii_type="aws-cdk-lib.aws_config.CloudFormationStackNotificationCheckProps",
|
|
@@ -13603,6 +13627,12 @@ class CustomPolicy(
|
|
|
13603
13627
|
|
|
13604
13628
|
return typing.cast(_Rule_334ed2b5, jsii.invoke(self, "onReEvaluationStatus", [id, options]))
|
|
13605
13629
|
|
|
13630
|
+
@jsii.python.classproperty
|
|
13631
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
13632
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
13633
|
+
'''Uniquely identifies this class.'''
|
|
13634
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
13635
|
+
|
|
13606
13636
|
@builtins.property
|
|
13607
13637
|
@jsii.member(jsii_name="configRuleArn")
|
|
13608
13638
|
def config_rule_arn(self) -> builtins.str:
|
|
@@ -14058,6 +14088,12 @@ class CustomRule(
|
|
|
14058
14088
|
|
|
14059
14089
|
return typing.cast(_Rule_334ed2b5, jsii.invoke(self, "onReEvaluationStatus", [id, options]))
|
|
14060
14090
|
|
|
14091
|
+
@jsii.python.classproperty
|
|
14092
|
+
@jsii.member(jsii_name="PROPERTY_INJECTION_ID")
|
|
14093
|
+
def PROPERTY_INJECTION_ID(cls) -> builtins.str:
|
|
14094
|
+
'''Uniquely identifies this class.'''
|
|
14095
|
+
return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
|
|
14096
|
+
|
|
14061
14097
|
@builtins.property
|
|
14062
14098
|
@jsii.member(jsii_name="configRuleArn")
|
|
14063
14099
|
def config_rule_arn(self) -> builtins.str:
|