aws-cdk-lib 2.195.0__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_docdbelastic/__init__.py

@@ -66,9 +66,13 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_docdbelastic import (
+    ClusterReference as _ClusterReference_042c3bbe,
+    IClusterRef as _IClusterRef_64376282,
+)
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IClusterRef_64376282, _ITaggable_36806126)
 class CfnCluster(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -129,7 +133,8 @@ class CfnCluster(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         vpc_security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::DocDBElastic::Cluster``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param admin_user_name: The name of the Amazon DocumentDB elastic clusters administrator. *Constraints* : - Must be from 1 to 63 letters or numbers. - The first character must be a letter. - Cannot be a reserved word.
@@ -222,6 +227,12 @@ class CfnCluster(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="clusterRef")
+    def cluster_ref(self) -> _ClusterReference_042c3bbe:
+        '''A reference to a Cluster resource.'''
+        return typing.cast(_ClusterReference_042c3bbe, jsii.get(self, "clusterRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:

aws_cdk/aws_dsql/__init__.py

@@ -77,15 +77,50 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_dsql import (
+    ClusterReference as _ClusterReference_5853d8a5,
+    IClusterRef as _IClusterRef_6da541cd,
+)
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IClusterRef_6da541cd, _ITaggableV2_4e6798f8)
 class CfnCluster(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_dsql.CfnCluster",
 ):
-    '''Resource Type definition for AWS::DSQL::Cluster.
+    '''The ``AWS::DSQL::Cluster`` resource specifies an cluster. You can use this resource to create, modify, and manage clusters.
+
+    This resource supports both single-Region clusters and multi-Region clusters through the ``MultiRegionProperties`` parameter.
+    .. epigraph::
+
+       Creating multi-Region clusters requires additional IAM permissions beyond those needed for single-Region clusters. > - The witness Region specified in ``multiRegionProperties.witnessRegion`` cannot be the same as the cluster's Region.
+
+    *Required permissions*
+
+    - **dsql:CreateCluster** - Required to create a cluster.
+
+    Resources: ``arn:aws:dsql:region:account-id:cluster/*``
+
+    - **dsql:TagResource** - Permission to add tags to a resource.
+
+    Resources: ``arn:aws:dsql:region:account-id:cluster/*``
+
+    - **dsql:PutMultiRegionProperties** - Permission to configure multi-Region properties for a cluster.
+
+    Resources: ``arn:aws:dsql:region:account-id:cluster/*``
+
+    - **dsql:AddPeerCluster** - When specifying ``multiRegionProperties.clusters`` , permission to add peer clusters.
+
+    Resources:
+
+    - Local cluster: ``arn:aws:dsql:region:account-id:cluster/*``
+    - Each peer cluster: exact ARN of each specified peer cluster
+    - **dsql:PutWitnessRegion** - When specifying ``multiRegionProperties.witnessRegion`` , permission to set a witness Region. This permission is checked both in the cluster Region and in the witness Region.
+
+    Resources: ``arn:aws:dsql:region:account-id:cluster/*``
+
+    Condition Keys: ``dsql:WitnessRegion`` (matching the specified witness region)
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html
     :cloudformationResource: AWS::DSQL::Cluster
@@ -99,6 +134,11 @@ class CfnCluster(
         
         cfn_cluster = dsql.CfnCluster(self, "MyCfnCluster",
             deletion_protection_enabled=False,
+            kms_encryption_key="kmsEncryptionKey",
+            multi_region_properties=dsql.CfnCluster.MultiRegionPropertiesProperty(
+                clusters=["clusters"],
+                witness_region="witnessRegion"
+            ),
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -112,24 +152,53 @@ class CfnCluster(
         id: builtins.str,
         *,
         deletion_protection_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        kms_encryption_key: typing.Optional[builtins.str] = None,
+        multi_region_properties: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCluster.MultiRegionPropertiesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::DSQL::Cluster``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param deletion_protection_enabled: Whether deletion protection is enabled in this cluster.
-        :param tags: 
+        :param deletion_protection_enabled: Whether deletion protection is enabled on this cluster.
+        :param kms_encryption_key: The KMS key that encrypts data on the cluster.
+        :param multi_region_properties: Defines the structure for multi-Region cluster configurations, containing the witness Region and peered cluster settings.
+        :param tags: A map of key and value pairs this cluster is tagged with.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b82b76673b1942e60f823768c857e13a61b0491cdd1ca21c1f2a574e980d253e)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnClusterProps(
-            deletion_protection_enabled=deletion_protection_enabled, tags=tags
+            deletion_protection_enabled=deletion_protection_enabled,
+            kms_encryption_key=kms_encryption_key,
+            multi_region_properties=multi_region_properties,
+            tags=tags,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromIdentifier")
+    @builtins.classmethod
+    def from_identifier(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        identifier: builtins.str,
+    ) -> _IClusterRef_6da541cd:
+        '''Creates a new IClusterRef from a identifier.
+
+        :param scope: -
+        :param id: -
+        :param identifier: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__bccb1b24da44362c4f4e80968f320da6e8a1b50c7b1913648f91026e37e545ce)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument identifier", value=identifier, expected_type=type_hints["identifier"])
+        return typing.cast(_IClusterRef_6da541cd, jsii.sinvoke(cls, "fromIdentifier", [scope, id, identifier]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -163,16 +232,25 @@ class CfnCluster(
     @builtins.property
     @jsii.member(jsii_name="attrCreationTime")
     def attr_creation_time(self) -> builtins.str:
-        '''The time of when the cluster was created in ISO-8601 format.
+        '''The timestamp when the cluster was created, in ISO 8601 format.
 
         :cloudformationAttribute: CreationTime
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrCreationTime"))
 
+    @builtins.property
+    @jsii.member(jsii_name="attrEncryptionDetails")
+    def attr_encryption_details(self) -> _IResolvable_da3f097b:
+        '''The encryption configuration details for the cluster.
+
+        :cloudformationAttribute: EncryptionDetails
+        '''
+        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrEncryptionDetails"))
+
     @builtins.property
     @jsii.member(jsii_name="attrIdentifier")
     def attr_identifier(self) -> builtins.str:
-        '''The ID of the created cluster.
+        '''The unique identifier assigned to the cluster upon creation.
 
         :cloudformationAttribute: Identifier
         '''
@@ -181,7 +259,9 @@ class CfnCluster(
     @builtins.property
     @jsii.member(jsii_name="attrResourceArn")
     def attr_resource_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) for the cluster.
+        '''The Amazon Resource Name (ARN) of the cluster.
+
+        Used for IAM permissions and resource identification.
 
         :cloudformationAttribute: ResourceArn
         '''
@@ -190,7 +270,15 @@ class CfnCluster(
     @builtins.property
     @jsii.member(jsii_name="attrStatus")
     def attr_status(self) -> builtins.str:
-        '''The status of the cluster.
+        '''The current status of the cluster. Possible values include: CREATING, ACTIVE, DELETING, FAILED.
+
+        The cluster can have two additional status values when working with multi-Region clusters:
+
+        ``PENDING_SETUP`` —Indicates the cluster is being configured
+
+        ``PENDING_DELETE`` —Indicates the cluster is being deleted
+
+        *Note:* These status values only appear for multi-Region cluster operations.
 
         :cloudformationAttribute: Status
         '''
@@ -199,7 +287,9 @@ class CfnCluster(
     @builtins.property
     @jsii.member(jsii_name="attrVpcEndpointServiceName")
     def attr_vpc_endpoint_service_name(self) -> builtins.str:
-        '''The VPC endpoint service name.
+        '''The VPC Endpoint Service name for the cluster.
+
+        This can be used to create a VPC endpoint to connect to the cluster from within a VPC.
 
         :cloudformationAttribute: VpcEndpointServiceName
         '''
@@ -216,12 +306,18 @@ class CfnCluster(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="clusterRef")
+    def cluster_ref(self) -> _ClusterReference_5853d8a5:
+        '''A reference to a Cluster resource.'''
+        return typing.cast(_ClusterReference_5853d8a5, jsii.get(self, "clusterRef"))
+
     @builtins.property
     @jsii.member(jsii_name="deletionProtectionEnabled")
     def deletion_protection_enabled(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Whether deletion protection is enabled in this cluster.'''
+        '''Whether deletion protection is enabled on this cluster.'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "deletionProtectionEnabled"))
 
     @deletion_protection_enabled.setter
@@ -234,9 +330,41 @@ class CfnCluster(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "deletionProtectionEnabled", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="kmsEncryptionKey")
+    def kms_encryption_key(self) -> typing.Optional[builtins.str]:
+        '''The KMS key that encrypts data on the cluster.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsEncryptionKey"))
+
+    @kms_encryption_key.setter
+    def kms_encryption_key(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8ae716ffcdd031c28de520d863a21a8cc04056fe6c3c1a6e658dd02ea3bae8eb)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "kmsEncryptionKey", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="multiRegionProperties")
+    def multi_region_properties(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCluster.MultiRegionPropertiesProperty"]]:
+        '''Defines the structure for multi-Region cluster configurations, containing the witness Region and peered cluster settings.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCluster.MultiRegionPropertiesProperty"]], jsii.get(self, "multiRegionProperties"))
+
+    @multi_region_properties.setter
+    def multi_region_properties(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCluster.MultiRegionPropertiesProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d1cd42de6387e3057eda85830c6674c4cac74a5be160e21869cc4c1b3274381c)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "multiRegionProperties", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''A map of key and value pairs this cluster is tagged with.'''
         return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
 
     @tags.setter
@@ -246,12 +374,177 @@ class CfnCluster(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_dsql.CfnCluster.EncryptionDetailsProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "encryption_status": "encryptionStatus",
+            "encryption_type": "encryptionType",
+            "kms_key_arn": "kmsKeyArn",
+        },
+    )
+    class EncryptionDetailsProperty:
+        def __init__(
+            self,
+            *,
+            encryption_status: typing.Optional[builtins.str] = None,
+            encryption_type: typing.Optional[builtins.str] = None,
+            kms_key_arn: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Configuration details about encryption for the cluster including the AWS KMS key ARN, encryption type, and encryption status.
+
+            :param encryption_status: The status of encryption for the cluster.
+            :param encryption_type: The type of encryption that protects the data on your cluster.
+            :param kms_key_arn: The ARN of the AWS KMS key that encrypts data in the cluster.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dsql-cluster-encryptiondetails.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_dsql as dsql
+                
+                encryption_details_property = dsql.CfnCluster.EncryptionDetailsProperty(
+                    encryption_status="encryptionStatus",
+                    encryption_type="encryptionType",
+                    kms_key_arn="kmsKeyArn"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__dd4156a8f1ca33d4dc585a1af5623fff8b945e08734aa29b92ad1fc93a6bccd0)
+                check_type(argname="argument encryption_status", value=encryption_status, expected_type=type_hints["encryption_status"])
+                check_type(argname="argument encryption_type", value=encryption_type, expected_type=type_hints["encryption_type"])
+                check_type(argname="argument kms_key_arn", value=kms_key_arn, expected_type=type_hints["kms_key_arn"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if encryption_status is not None:
+                self._values["encryption_status"] = encryption_status
+            if encryption_type is not None:
+                self._values["encryption_type"] = encryption_type
+            if kms_key_arn is not None:
+                self._values["kms_key_arn"] = kms_key_arn
+
+        @builtins.property
+        def encryption_status(self) -> typing.Optional[builtins.str]:
+            '''The status of encryption for the cluster.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dsql-cluster-encryptiondetails.html#cfn-dsql-cluster-encryptiondetails-encryptionstatus
+            '''
+            result = self._values.get("encryption_status")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def encryption_type(self) -> typing.Optional[builtins.str]:
+            '''The type of encryption that protects the data on your cluster.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dsql-cluster-encryptiondetails.html#cfn-dsql-cluster-encryptiondetails-encryptiontype
+            '''
+            result = self._values.get("encryption_type")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def kms_key_arn(self) -> typing.Optional[builtins.str]:
+            '''The ARN of the AWS KMS key that encrypts data in the cluster.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dsql-cluster-encryptiondetails.html#cfn-dsql-cluster-encryptiondetails-kmskeyarn
+            '''
+            result = self._values.get("kms_key_arn")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "EncryptionDetailsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_dsql.CfnCluster.MultiRegionPropertiesProperty",
+        jsii_struct_bases=[],
+        name_mapping={"clusters": "clusters", "witness_region": "witnessRegion"},
+    )
+    class MultiRegionPropertiesProperty:
+        def __init__(
+            self,
+            *,
+            clusters: typing.Optional[typing.Sequence[builtins.str]] = None,
+            witness_region: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Defines the structure for multi-Region cluster configurations, containing the witness Region and peered cluster settings.
+
+            :param clusters: The set of peered clusters that form the multi-Region cluster configuration. Each peered cluster represents a database instance in a different Region.
+            :param witness_region: The Region that serves as the witness Region for a multi-Region cluster. The witness Region helps maintain cluster consistency and quorum.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dsql-cluster-multiregionproperties.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_dsql as dsql
+                
+                multi_region_properties_property = dsql.CfnCluster.MultiRegionPropertiesProperty(
+                    clusters=["clusters"],
+                    witness_region="witnessRegion"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__b9a11b947e8fa036630c80e949e1619ff609036ee5de58658c8157988d8c212f)
+                check_type(argname="argument clusters", value=clusters, expected_type=type_hints["clusters"])
+                check_type(argname="argument witness_region", value=witness_region, expected_type=type_hints["witness_region"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if clusters is not None:
+                self._values["clusters"] = clusters
+            if witness_region is not None:
+                self._values["witness_region"] = witness_region
+
+        @builtins.property
+        def clusters(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''The set of peered clusters that form the multi-Region cluster configuration.
+
+            Each peered cluster represents a database instance in a different Region.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dsql-cluster-multiregionproperties.html#cfn-dsql-cluster-multiregionproperties-clusters
+            '''
+            result = self._values.get("clusters")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def witness_region(self) -> typing.Optional[builtins.str]:
+            '''The Region that serves as the witness Region for a multi-Region cluster.
+
+            The witness Region helps maintain cluster consistency and quorum.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dsql-cluster-multiregionproperties.html#cfn-dsql-cluster-multiregionproperties-witnessregion
+            '''
+            result = self._values.get("witness_region")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "MultiRegionPropertiesProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_dsql.CfnClusterProps",
     jsii_struct_bases=[],
     name_mapping={
         "deletion_protection_enabled": "deletionProtectionEnabled",
+        "kms_encryption_key": "kmsEncryptionKey",
+        "multi_region_properties": "multiRegionProperties",
         "tags": "tags",
     },
 )
@@ -260,12 +553,16 @@ class CfnClusterProps:
         self,
         *,
         deletion_protection_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        kms_encryption_key: typing.Optional[builtins.str] = None,
+        multi_region_properties: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCluster.MultiRegionPropertiesProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnCluster``.
 
-        :param deletion_protection_enabled: Whether deletion protection is enabled in this cluster.
-        :param tags: 
+        :param deletion_protection_enabled: Whether deletion protection is enabled on this cluster.
+        :param kms_encryption_key: The KMS key that encrypts data on the cluster.
+        :param multi_region_properties: Defines the structure for multi-Region cluster configurations, containing the witness Region and peered cluster settings.
+        :param tags: A map of key and value pairs this cluster is tagged with.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html
         :exampleMetadata: fixture=_generated
@@ -278,6 +575,11 @@ class CfnClusterProps:
             
             cfn_cluster_props = dsql.CfnClusterProps(
                 deletion_protection_enabled=False,
+                kms_encryption_key="kmsEncryptionKey",
+                multi_region_properties=dsql.CfnCluster.MultiRegionPropertiesProperty(
+                    clusters=["clusters"],
+                    witness_region="witnessRegion"
+                ),
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -287,10 +589,16 @@ class CfnClusterProps:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__c99b78beafe41f2e25cbcc0b8a8aff58ff66a77464bef06dbf9128ff75ebd08c)
             check_type(argname="argument deletion_protection_enabled", value=deletion_protection_enabled, expected_type=type_hints["deletion_protection_enabled"])
+            check_type(argname="argument kms_encryption_key", value=kms_encryption_key, expected_type=type_hints["kms_encryption_key"])
+            check_type(argname="argument multi_region_properties", value=multi_region_properties, expected_type=type_hints["multi_region_properties"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if deletion_protection_enabled is not None:
             self._values["deletion_protection_enabled"] = deletion_protection_enabled
+        if kms_encryption_key is not None:
+            self._values["kms_encryption_key"] = kms_encryption_key
+        if multi_region_properties is not None:
+            self._values["multi_region_properties"] = multi_region_properties
         if tags is not None:
             self._values["tags"] = tags
 
@@ -298,7 +606,7 @@ class CfnClusterProps:
     def deletion_protection_enabled(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Whether deletion protection is enabled in this cluster.
+        '''Whether deletion protection is enabled on this cluster.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html#cfn-dsql-cluster-deletionprotectionenabled
         '''
@@ -306,8 +614,29 @@ class CfnClusterProps:
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
     @builtins.property
-    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+    def kms_encryption_key(self) -> typing.Optional[builtins.str]:
+        '''The KMS key that encrypts data on the cluster.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html#cfn-dsql-cluster-kmsencryptionkey
         '''
+        result = self._values.get("kms_encryption_key")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def multi_region_properties(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnCluster.MultiRegionPropertiesProperty]]:
+        '''Defines the structure for multi-Region cluster configurations, containing the witness Region and peered cluster settings.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html#cfn-dsql-cluster-multiregionproperties
+        '''
+        result = self._values.get("multi_region_properties")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnCluster.MultiRegionPropertiesProperty]], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''A map of key and value pairs this cluster is tagged with.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html#cfn-dsql-cluster-tags
         '''
         result = self._values.get("tags")
@@ -337,11 +666,21 @@ def _typecheckingstub__b82b76673b1942e60f823768c857e13a61b0491cdd1ca21c1f2a574e9
     id: builtins.str,
     *,
     deletion_protection_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    kms_encryption_key: typing.Optional[builtins.str] = None,
+    multi_region_properties: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCluster.MultiRegionPropertiesProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__bccb1b24da44362c4f4e80968f320da6e8a1b50c7b1913648f91026e37e545ce(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    identifier: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__b05414cc6a0a47d76a5604395b89b41d7f04f08f9b28ec25471d8d9dfd914483(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -360,15 +699,46 @@ def _typecheckingstub__393f500a888707295be5db6ececab65a69f1c1889e02c7043d1d8ad0e
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__8ae716ffcdd031c28de520d863a21a8cc04056fe6c3c1a6e658dd02ea3bae8eb(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d1cd42de6387e3057eda85830c6674c4cac74a5be160e21869cc4c1b3274381c(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnCluster.MultiRegionPropertiesProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c9eb2f89b2e4104fba43d8d14808715e2f3435951317df69258fecf9b606d598(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__dd4156a8f1ca33d4dc585a1af5623fff8b945e08734aa29b92ad1fc93a6bccd0(
+    *,
+    encryption_status: typing.Optional[builtins.str] = None,
+    encryption_type: typing.Optional[builtins.str] = None,
+    kms_key_arn: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b9a11b947e8fa036630c80e949e1619ff609036ee5de58658c8157988d8c212f(
+    *,
+    clusters: typing.Optional[typing.Sequence[builtins.str]] = None,
+    witness_region: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c99b78beafe41f2e25cbcc0b8a8aff58ff66a77464bef06dbf9128ff75ebd08c(
     *,
     deletion_protection_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    kms_encryption_key: typing.Optional[builtins.str] = None,
+    multi_region_properties: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCluster.MultiRegionPropertiesProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""