aws-cdk-lib 2.195.0__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_events_targets/__init__.py

@@ -17,9 +17,11 @@ Currently supported are:
   * [Start a StepFunctions state machine](#start-a-stepfunctions-state-machine)
   * [Queue a Batch job](#queue-a-batch-job)
   * [Invoke an API Gateway REST API](#invoke-an-api-gateway-rest-api)
+  * [Invoke an AWS API](#invoke-an-aws-api)
   * [Invoke an API Destination](#invoke-an-api-destination)
   * [Invoke an AppSync GraphQL API](#invoke-an-appsync-graphql-api)
   * [Put an event on an EventBridge bus](#put-an-event-on-an-eventbridge-bus)
+  * [Put an event on a Firehose delivery stream](#put-an-event-on-a-firehose-delivery-stream)
   * [Run an ECS Task](#run-an-ecs-task)
 
     * [Tagging Tasks](#tagging-tasks)
@@ -27,6 +29,7 @@ Currently supported are:
     * [Assign public IP addresses to tasks](#assign-public-ip-addresses-to-tasks)
     * [Enable Amazon ECS Exec for ECS Task](#enable-amazon-ecs-exec-for-ecs-task)
   * [Run a Redshift query](#schedule-a-redshift-query-serverless-or-cluster)
+  * [Publish to an SNS topic](#publish-to-an-sns-topic)
 
 See the README of the `aws-cdk-lib/aws-events` library for more information on
 EventBridge.
@@ -338,6 +341,68 @@ import aws_cdk.aws_apigatewayv2 as apigwv2
 rule.add_target(targets.ApiGatewayV2(http_api))
 ```
 
+## Invoke an AWS API
+
+Use the `AwsApi` target to make direct AWS API calls from EventBridge rules. This is useful for invoking AWS services that don't have a dedicated EventBridge target.
+
+### Basic Usage
+
+The following example shows how to update an ECS service when a rule is triggered:
+
+```python
+rule = events.Rule(self, "Rule",
+    schedule=events.Schedule.rate(Duration.hours(1))
+)
+
+rule.add_target(targets.AwsApi(
+    service="ECS",
+    action="updateService",
+    parameters={
+        "service": "my-service",
+        "force_new_deployment": True
+    }
+))
+```
+
+### IAM Permissions
+
+By default, the AwsApi target automatically creates the necessary IAM permissions based on the service and action you specify. The permission format follows the pattern: `service:Action`.
+
+For example:
+
+* `ECS` service with `updateService` action → `ecs:UpdateService` permission
+* `RDS` service with `createDBSnapshot` action → `rds:CreateDBSnapshot` permission
+
+### Custom IAM Policy
+
+In some cases, you may need to provide a custom IAM policy statement, especially when:
+
+* You need to restrict permissions to specific resources (instead of `*`)
+* The service requires additional permissions beyond the main action
+* You want more granular control over the permissions
+
+```python
+import aws_cdk.aws_iam as iam
+import aws_cdk.aws_s3 as s3
+
+# rule: events.Rule
+# bucket: s3.Bucket
+
+
+rule.add_target(targets.AwsApi(
+    service="s3",
+    action="GetBucketEncryption",
+    parameters={
+        "Bucket": bucket.bucket_name
+    },
+    policy_statement=iam.PolicyStatement(
+        effect=iam.Effect.ALLOW,
+        actions=["s3:GetEncryptionConfiguration"],
+        resources=[bucket.bucket_arn]
+    )
+))
+```
+
 ## Invoke an API Destination
 
 Use the `targets.ApiDestination` target to trigger an external API. You need to
@@ -369,8 +434,13 @@ to create additional rules:
 ```python
 connection = events.Connection.from_event_bus_arn(self, "Connection", "arn:aws:events:us-east-1:123456789012:event-bus/EventBusName", "arn:aws:secretsmanager:us-east-1:123456789012:secret:SecretName-f3gDy9")
 
-api_destination_arn = "arn:aws:events:us-east-1:123456789012:api-destination/DestinationName"
-destination = events.ApiDestination.from_api_destination_attributes(self, "Destination", api_destination_arn=api_destination_arn, connection=connection)
+api_destination_arn = "arn:aws:events:us-east-1:123456789012:api-destination/DestinationName/11111111-1111-1111-1111-111111111111"
+api_destination_arn_for_policy = "arn:aws:events:us-east-1:123456789012:api-destination/DestinationName"
+destination = events.ApiDestination.from_api_destination_attributes(self, "Destination",
+    api_destination_arn=api_destination_arn,
+    connection=connection,
+    api_destination_arn_for_policy=api_destination_arn_for_policy
+)
 
 rule = events.Rule(self, "OtherRule",
     schedule=events.Schedule.rate(Duration.minutes(10)),
@@ -454,6 +524,28 @@ rule.add_target(targets.EventBus(
     events.EventBus.from_event_bus_arn(self, "External", "arn:aws:events:eu-west-1:999999999999:event-bus/test-bus")))
 ```
 
+## Put an event on a Firehose delivery stream
+
+Use the `FirehoseDeliveryStream` target to put event to an Amazon Data Firehose delivery stream.
+
+The code snippet below creates the scheduled event rule that put events to an Amazon Data Firehose delivery stream.
+
+```python
+import aws_cdk.aws_kinesisfirehose as firehose
+import aws_cdk.aws_s3 as s3
+
+# bucket: s3.Bucket
+
+stream = firehose.DeliveryStream(self, "DeliveryStream",
+    destination=firehose.S3Bucket(bucket)
+)
+
+rule = events.Rule(self, "Rule",
+    schedule=events.Schedule.expression("rate(1 minute)")
+)
+rule.add_target(targets.FirehoseDeliveryStream(stream))
+```
+
 ## Run an ECS Task
 
 Use the `EcsTask` target to run an ECS Task.
@@ -624,6 +716,40 @@ rule.add_target(targets.RedshiftQuery(workgroup.attr_workgroup_workgroup_arn,
     sql=["SELECT * FROM foo", "SELECT * FROM baz"]
 ))
 ```
+
+## Publish to an SNS Topic
+
+Use the `SnsTopic` target to publish to an SNS Topic.
+
+The code snippet below creates the scheduled event rule that publishes to an SNS Topic using a resource policy.
+
+```python
+import aws_cdk.aws_sns as sns
+
+# topic: sns.ITopic
+
+
+rule = events.Rule(self, "Rule",
+    schedule=events.Schedule.rate(cdk.Duration.hours(1))
+)
+
+rule.add_target(targets.SnsTopic(topic))
+```
+
+Alternatively, a role can be attached to the target when the rule is triggered.
+
+```python
+import aws_cdk.aws_sns as sns
+
+# topic: sns.ITopic
+
+
+rule = events.Rule(self, "Rule",
+    schedule=events.Schedule.rate(cdk.Duration.hours(1))
+)
+
+rule.add_target(targets.SnsTopic(topic, authorize_using_role=True))
+```
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)
@@ -690,7 +816,10 @@ from ..aws_iam import (
     IRole as _IRole_235f5d8e, PolicyStatement as _PolicyStatement_0fe33853
 )
 from ..aws_kinesis import IStream as _IStream_4e2457d2
-from ..aws_kinesisfirehose import CfnDeliveryStream as _CfnDeliveryStream_8f3b1735
+from ..aws_kinesisfirehose import (
+    CfnDeliveryStream as _CfnDeliveryStream_8f3b1735,
+    IDeliveryStream as _IDeliveryStream_8f118861,
+)
 from ..aws_lambda import IFunction as _IFunction_6adb0ab8
 from ..aws_logs import ILogGroup as _ILogGroup_3c4fa718
 from ..aws_secretsmanager import ISecret as _ISecret_6e020e6a
@@ -1103,28 +1232,22 @@ class AwsApi(
 ):
     '''Use an AWS Lambda function that makes API calls as an event rule target.
 
-    :exampleMetadata: fixture=_generated
+    :exampleMetadata: infused
 
     Example::
 
-        # The code below shows an example of how to instantiate this type.
-        # The values are placeholders you should change.
-        from aws_cdk import aws_events_targets as events_targets
-        from aws_cdk import aws_iam as iam
-        
-        # parameters: Any
-        # policy_statement: iam.PolicyStatement
-        
-        aws_api = events_targets.AwsApi(
-            action="action",
-            service="service",
-        
-            # the properties below are optional
-            api_version="apiVersion",
-            catch_error_pattern="catchErrorPattern",
-            parameters=parameters,
-            policy_statement=policy_statement
+        rule = events.Rule(self, "Rule",
+            schedule=events.Schedule.rate(Duration.hours(1))
         )
+        
+        rule.add_target(targets.AwsApi(
+            service="ECS",
+            action="updateService",
+            parameters={
+                "service": "my-service",
+                "force_new_deployment": True
+            }
+        ))
     '''
 
     def __init__(
@@ -1340,28 +1463,22 @@ class AwsApiProps(AwsApiInput):
         :param parameters: The parameters for the service action. Default: - no parameters
         :param policy_statement: The IAM policy statement to allow the API call. Use only if resource restriction is needed. Default: - extract the permission from the API call
 
-        :exampleMetadata: fixture=_generated
+        :exampleMetadata: infused
 
         Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            from aws_cdk import aws_events_targets as events_targets
-            from aws_cdk import aws_iam as iam
-            
-            # parameters: Any
-            # policy_statement: iam.PolicyStatement
-            
-            aws_api_props = events_targets.AwsApiProps(
-                action="action",
-                service="service",
-            
-                # the properties below are optional
-                api_version="apiVersion",
-                catch_error_pattern="catchErrorPattern",
-                parameters=parameters,
-                policy_statement=policy_statement
+            rule = events.Rule(self, "Rule",
+                schedule=events.Schedule.rate(Duration.hours(1))
             )
+            
+            rule.add_target(targets.AwsApi(
+                service="ECS",
+                action="updateService",
+                parameters={
+                    "service": "my-service",
+                    "force_new_deployment": True
+                }
+            ))
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__d0959cf5a09d52d03f2591de3b911528bd507126b7e2027cd7c4585de25301ad)
@@ -1648,19 +1765,19 @@ class CloudWatchLogGroup(
     @jsii.member(jsii_name="bind")
     def bind(
         self,
-        _rule: _IRule_af9e3d28,
+        rule: _IRule_af9e3d28,
         _id: typing.Optional[builtins.str] = None,
     ) -> _RuleTargetConfig_4e70fe03:
         '''Returns a RuleTarget that can be used to log an event into a CloudWatch LogGroup.
 
-        :param _rule: -
+        :param rule: -
         :param _id: -
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__5583066efc6b7b2980bfbfbf33e6491271f5faf3b97e5d2ae998d1fe4189d1d4)
-            check_type(argname="argument _rule", value=_rule, expected_type=type_hints["_rule"])
+            check_type(argname="argument rule", value=rule, expected_type=type_hints["rule"])
             check_type(argname="argument _id", value=_id, expected_type=type_hints["_id"])
-        return typing.cast(_RuleTargetConfig_4e70fe03, jsii.invoke(self, "bind", [_rule, _id]))
+        return typing.cast(_RuleTargetConfig_4e70fe03, jsii.invoke(self, "bind", [rule, _id]))
 
 
 @jsii.implements(_IRuleTarget_7a91f454)
@@ -2064,19 +2181,19 @@ class EcsTask(
     @jsii.member(jsii_name="bind")
     def bind(
         self,
-        _rule: _IRule_af9e3d28,
+        rule: _IRule_af9e3d28,
         _id: typing.Optional[builtins.str] = None,
     ) -> _RuleTargetConfig_4e70fe03:
         '''Allows using tasks as target of EventBridge events.
 
-        :param _rule: -
+        :param rule: -
         :param _id: -
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__8ad199a8641f171a0447e974756bbddd91b00aaa9bcf33d231826916b85b8166)
-            check_type(argname="argument _rule", value=_rule, expected_type=type_hints["_rule"])
+            check_type(argname="argument rule", value=rule, expected_type=type_hints["rule"])
             check_type(argname="argument _id", value=_id, expected_type=type_hints["_id"])
-        return typing.cast(_RuleTargetConfig_4e70fe03, jsii.invoke(self, "bind", [_rule, _id]))
+        return typing.cast(_RuleTargetConfig_4e70fe03, jsii.invoke(self, "bind", [rule, _id]))
 
     @builtins.property
     @jsii.member(jsii_name="securityGroups")
@@ -2281,15 +2398,142 @@ class EventBusProps:
         )
 
 
+@jsii.implements(_IRuleTarget_7a91f454)
+class FirehoseDeliveryStream(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_events_targets.FirehoseDeliveryStream",
+):
+    '''Customize the Amazon Data Firehose Stream Event Target.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        import aws_cdk.aws_kinesisfirehose as firehose
+        import aws_cdk.aws_s3 as s3
+        
+        # bucket: s3.Bucket
+        
+        stream = firehose.DeliveryStream(self, "DeliveryStream",
+            destination=firehose.S3Bucket(bucket)
+        )
+        
+        rule = events.Rule(self, "Rule",
+            schedule=events.Schedule.expression("rate(1 minute)")
+        )
+        rule.add_target(targets.FirehoseDeliveryStream(stream))
+    '''
+
+    def __init__(
+        self,
+        delivery_stream: _IDeliveryStream_8f118861,
+        *,
+        message: typing.Optional[_RuleTargetInput_6beca786] = None,
+    ) -> None:
+        '''
+        :param delivery_stream: -
+        :param message: The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire Event Bridge event
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e8b83537633e15491c91cd6cebe1eddb6bc388617c53b754a40f318f493dc48e)
+            check_type(argname="argument delivery_stream", value=delivery_stream, expected_type=type_hints["delivery_stream"])
+        props = FirehoseDeliveryStreamProps(message=message)
+
+        jsii.create(self.__class__, self, [delivery_stream, props])
+
+    @jsii.member(jsii_name="bind")
+    def bind(
+        self,
+        _rule: _IRule_af9e3d28,
+        _id: typing.Optional[builtins.str] = None,
+    ) -> _RuleTargetConfig_4e70fe03:
+        '''Returns a RuleTarget that can be used to trigger this Firehose Stream as a result from a Event Bridge event.
+
+        :param _rule: -
+        :param _id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__45499f815ce457b36825c13b8a0a6ffd1d6994523698febc614678776c341fb7)
+            check_type(argname="argument _rule", value=_rule, expected_type=type_hints["_rule"])
+            check_type(argname="argument _id", value=_id, expected_type=type_hints["_id"])
+        return typing.cast(_RuleTargetConfig_4e70fe03, jsii.invoke(self, "bind", [_rule, _id]))
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_events_targets.FirehoseDeliveryStreamProps",
+    jsii_struct_bases=[],
+    name_mapping={"message": "message"},
+)
+class FirehoseDeliveryStreamProps:
+    def __init__(
+        self,
+        *,
+        message: typing.Optional[_RuleTargetInput_6beca786] = None,
+    ) -> None:
+        '''Customize the Amazon Data Firehose Stream Event Target.
+
+        :param message: The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire Event Bridge event
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_events as events
+            from aws_cdk import aws_events_targets as events_targets
+            
+            # rule_target_input: events.RuleTargetInput
+            
+            firehose_delivery_stream_props = events_targets.FirehoseDeliveryStreamProps(
+                message=rule_target_input
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c2311008fe7ae7c5e650063e35f32620f673ed3b0110bcab83f56ce21512d70c)
+            check_type(argname="argument message", value=message, expected_type=type_hints["message"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if message is not None:
+            self._values["message"] = message
+
+    @builtins.property
+    def message(self) -> typing.Optional[_RuleTargetInput_6beca786]:
+        '''The message to send to the stream.
+
+        Must be a valid JSON text passed to the target stream.
+
+        :default: - the entire Event Bridge event
+        '''
+        result = self._values.get("message")
+        return typing.cast(typing.Optional[_RuleTargetInput_6beca786], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "FirehoseDeliveryStreamProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.interface(jsii_type="aws-cdk-lib.aws_events_targets.IDeliveryStream")
 class IDeliveryStream(_IResource_c80c4260, typing_extensions.Protocol):
-    '''Represents an Amazon Data Firehose delivery stream.'''
+    '''(deprecated) Represents an Amazon Data Firehose delivery stream.
+
+    :deprecated: Use aws_kinesisfirehose.IDeliveryStream
+
+    :stability: deprecated
+    '''
 
     @builtins.property
     @jsii.member(jsii_name="deliveryStreamArn")
     def delivery_stream_arn(self) -> builtins.str:
-        '''The ARN of the delivery stream.
+        '''(deprecated) The ARN of the delivery stream.
 
+        :stability: deprecated
         :attribute: true
         '''
         ...
@@ -2297,8 +2541,9 @@ class IDeliveryStream(_IResource_c80c4260, typing_extensions.Protocol):
     @builtins.property
     @jsii.member(jsii_name="deliveryStreamName")
     def delivery_stream_name(self) -> builtins.str:
-        '''The name of the delivery stream.
+        '''(deprecated) The name of the delivery stream.
 
+        :stability: deprecated
         :attribute: true
         '''
         ...
@@ -2307,15 +2552,21 @@ class IDeliveryStream(_IResource_c80c4260, typing_extensions.Protocol):
 class _IDeliveryStreamProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
 ):
-    '''Represents an Amazon Data Firehose delivery stream.'''
+    '''(deprecated) Represents an Amazon Data Firehose delivery stream.
+
+    :deprecated: Use aws_kinesisfirehose.IDeliveryStream
+
+    :stability: deprecated
+    '''
 
     __jsii_type__: typing.ClassVar[str] = "aws-cdk-lib.aws_events_targets.IDeliveryStream"
 
     @builtins.property
     @jsii.member(jsii_name="deliveryStreamArn")
     def delivery_stream_arn(self) -> builtins.str:
-        '''The ARN of the delivery stream.
+        '''(deprecated) The ARN of the delivery stream.
 
+        :stability: deprecated
         :attribute: true
         '''
         return typing.cast(builtins.str, jsii.get(self, "deliveryStreamArn"))
@@ -2323,8 +2574,9 @@ class _IDeliveryStreamProxy(
     @builtins.property
     @jsii.member(jsii_name="deliveryStreamName")
     def delivery_stream_name(self) -> builtins.str:
-        '''The name of the delivery stream.
+        '''(deprecated) The name of the delivery stream.
 
+        :stability: deprecated
         :attribute: true
         '''
         return typing.cast(builtins.str, jsii.get(self, "deliveryStreamName"))
@@ -2403,7 +2655,7 @@ class KinesisFirehoseStream(
 ):
     '''(deprecated) Customize the Amazon Data Firehose Stream Event Target.
 
-    :deprecated: Use KinesisFirehoseStreamV2
+    :deprecated: Use FirehoseDeliveryStream
 
     :stability: deprecated
     :exampleMetadata: fixture=_generated
@@ -2432,7 +2684,7 @@ class KinesisFirehoseStream(
     ) -> None:
         '''
         :param stream: -
-        :param message: The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire Event Bridge event
+        :param message: (deprecated) The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire Event Bridge event
 
         :stability: deprecated
         '''
@@ -2474,10 +2726,13 @@ class KinesisFirehoseStreamProps:
         *,
         message: typing.Optional[_RuleTargetInput_6beca786] = None,
     ) -> None:
-        '''Customize the Amazon Data Firehose Stream Event Target.
+        '''(deprecated) Customize the Amazon Data Firehose Stream Event Target.
 
-        :param message: The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire Event Bridge event
+        :param message: (deprecated) The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire Event Bridge event
+
+        :deprecated: Use FirehoseDeliveryStreamProps
 
+        :stability: deprecated
         :exampleMetadata: fixture=_generated
 
         Example::
@@ -2502,11 +2757,13 @@ class KinesisFirehoseStreamProps:
 
     @builtins.property
     def message(self) -> typing.Optional[_RuleTargetInput_6beca786]:
-        '''The message to send to the stream.
+        '''(deprecated) The message to send to the stream.
 
         Must be a valid JSON text passed to the target stream.
 
         :default: - the entire Event Bridge event
+
+        :stability: deprecated
         '''
         result = self._values.get("message")
         return typing.cast(typing.Optional[_RuleTargetInput_6beca786], result)
@@ -2528,8 +2785,11 @@ class KinesisFirehoseStreamV2(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_events_targets.KinesisFirehoseStreamV2",
 ):
-    '''Customize the Amazon Data Firehose Stream Event Target V2 to support L2 Amazon Data Firehose Delivery Stream instead of L1 Cfn Firehose Delivery Stream.
+    '''(deprecated) Customize the Amazon Data Firehose Stream Event Target V2 to support L2 Amazon Data Firehose Delivery Stream instead of L1 Cfn Firehose Delivery Stream.
 
+    :deprecated: Use FirehoseDeliveryStream
+
+    :stability: deprecated
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -2555,7 +2815,9 @@ class KinesisFirehoseStreamV2(
     ) -> None:
         '''
         :param stream: -
-        :param message: The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire Event Bridge event
+        :param message: (deprecated) The message to send to the stream. Must be a valid JSON text passed to the target stream. Default: - the entire Event Bridge event
+
+        :stability: deprecated
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e8230487c5e79599a4ad63af004c2c8350c2b25e209491350274d38019afa418)
@@ -2570,10 +2832,12 @@ class KinesisFirehoseStreamV2(
         _rule: _IRule_af9e3d28,
         _id: typing.Optional[builtins.str] = None,
     ) -> _RuleTargetConfig_4e70fe03:
-        '''Returns a RuleTarget that can be used to trigger this Firehose Stream as a result from a Event Bridge event.
+        '''(deprecated) Returns a RuleTarget that can be used to trigger this Firehose Stream as a result from a Event Bridge event.
 
         :param _rule: -
         :param _id: -
+
+        :stability: deprecated
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3467ab0e593ed64d775dafc3b3fc1b1835fa2853c7ee8685668bf081dd189e44)
@@ -2760,7 +3024,7 @@ class LogGroupTargetInput(
         message: typing.Any = None,
         timestamp: typing.Any = None,
     ) -> _RuleTargetInput_6beca786:
-        '''(deprecated) Pass a JSON object to the the log group event target.
+        '''(deprecated) Pass a JSON object to the log group event target.
 
         May contain strings returned by ``EventField.from()`` to substitute in parts of the
         matched event.
@@ -3302,14 +3566,18 @@ class SnsTopic(
         self,
         topic: _ITopic_9eca4852,
         *,
+        authorize_using_role: typing.Optional[builtins.bool] = None,
         message: typing.Optional[_RuleTargetInput_6beca786] = None,
+        role: typing.Optional[_IRole_235f5d8e] = None,
         dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
         max_event_age: typing.Optional[_Duration_4839e8c3] = None,
         retry_attempts: typing.Optional[jsii.Number] = None,
     ) -> None:
         '''
         :param topic: -
+        :param authorize_using_role: Specifies whether an IAM role should be used to publish to the topic. Default: - true if ``role`` is provided, false otherwise
         :param message: The message to send to the topic. Default: the entire EventBridge event
+        :param role: The IAM role to be used to publish to the topic. Default: - a new role will be created if ``authorizeUsingRole`` is true
         :param dead_letter_queue: The SQS queue to be used as deadLetterQueue. Check out the `considerations for using a dead-letter queue <https://docs.aws.amazon.com/eventbridge/latest/userguide/rule-dlq.html#dlq-considerations>`_. The events not successfully delivered are automatically retried for a specified period of time, depending on the retry policy of the target. If an event is not delivered before all retry attempts are exhausted, it will be sent to the dead letter queue. Default: - no dead-letter queue
         :param max_event_age: The maximum age of a request that Lambda sends to a function for processing. Minimum value of 60. Maximum value of 86400. Default: Duration.hours(24)
         :param retry_attempts: The maximum number of times to retry when the function returns an error. Minimum value of 0. Maximum value of 185. Default: 185
@@ -3318,7 +3586,9 @@ class SnsTopic(
             type_hints = typing.get_type_hints(_typecheckingstub__b58aa74b2a717b90ef291556746b786df8882b8158b4b3255bf88691dbd8fd07)
             check_type(argname="argument topic", value=topic, expected_type=type_hints["topic"])
         props = SnsTopicProps(
+            authorize_using_role=authorize_using_role,
             message=message,
+            role=role,
             dead_letter_queue=dead_letter_queue,
             max_event_age=max_event_age,
             retry_attempts=retry_attempts,
@@ -5722,7 +5992,9 @@ class SfnStateMachineProps(TargetBaseProps):
         "dead_letter_queue": "deadLetterQueue",
         "max_event_age": "maxEventAge",
         "retry_attempts": "retryAttempts",
+        "authorize_using_role": "authorizeUsingRole",
         "message": "message",
+        "role": "role",
     },
 )
 class SnsTopicProps(TargetBaseProps):
@@ -5732,14 +6004,18 @@ class SnsTopicProps(TargetBaseProps):
         dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
         max_event_age: typing.Optional[_Duration_4839e8c3] = None,
         retry_attempts: typing.Optional[jsii.Number] = None,
+        authorize_using_role: typing.Optional[builtins.bool] = None,
         message: typing.Optional[_RuleTargetInput_6beca786] = None,
+        role: typing.Optional[_IRole_235f5d8e] = None,
     ) -> None:
         '''Customize the SNS Topic Event Target.
 
         :param dead_letter_queue: The SQS queue to be used as deadLetterQueue. Check out the `considerations for using a dead-letter queue <https://docs.aws.amazon.com/eventbridge/latest/userguide/rule-dlq.html#dlq-considerations>`_. The events not successfully delivered are automatically retried for a specified period of time, depending on the retry policy of the target. If an event is not delivered before all retry attempts are exhausted, it will be sent to the dead letter queue. Default: - no dead-letter queue
         :param max_event_age: The maximum age of a request that Lambda sends to a function for processing. Minimum value of 60. Maximum value of 86400. Default: Duration.hours(24)
         :param retry_attempts: The maximum number of times to retry when the function returns an error. Minimum value of 0. Maximum value of 185. Default: 185
+        :param authorize_using_role: Specifies whether an IAM role should be used to publish to the topic. Default: - true if ``role`` is provided, false otherwise
         :param message: The message to send to the topic. Default: the entire EventBridge event
+        :param role: The IAM role to be used to publish to the topic. Default: - a new role will be created if ``authorizeUsingRole`` is true
 
         :exampleMetadata: infused
 
@@ -5750,7 +6026,9 @@ class SnsTopicProps(TargetBaseProps):
             
             
             on_commit_rule.add_target(targets.SnsTopic(topic,
-                message=events.RuleTargetInput.from_text(f"A commit was pushed to the repository {codecommit.ReferenceEvent.repositoryName} on branch {codecommit.ReferenceEvent.referenceName}")
+                message=events.RuleTargetInput.from_object({
+                    "DataType": f"custom_{events.EventField.fromPath('$.detail-type')}"
+                })
             ))
         '''
         if __debug__:
@@ -5758,7 +6036,9 @@ class SnsTopicProps(TargetBaseProps):
             check_type(argname="argument dead_letter_queue", value=dead_letter_queue, expected_type=type_hints["dead_letter_queue"])
             check_type(argname="argument max_event_age", value=max_event_age, expected_type=type_hints["max_event_age"])
             check_type(argname="argument retry_attempts", value=retry_attempts, expected_type=type_hints["retry_attempts"])
+            check_type(argname="argument authorize_using_role", value=authorize_using_role, expected_type=type_hints["authorize_using_role"])
             check_type(argname="argument message", value=message, expected_type=type_hints["message"])
+            check_type(argname="argument role", value=role, expected_type=type_hints["role"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if dead_letter_queue is not None:
             self._values["dead_letter_queue"] = dead_letter_queue
@@ -5766,8 +6046,12 @@ class SnsTopicProps(TargetBaseProps):
             self._values["max_event_age"] = max_event_age
         if retry_attempts is not None:
             self._values["retry_attempts"] = retry_attempts
+        if authorize_using_role is not None:
+            self._values["authorize_using_role"] = authorize_using_role
         if message is not None:
             self._values["message"] = message
+        if role is not None:
+            self._values["role"] = role
 
     @builtins.property
     def dead_letter_queue(self) -> typing.Optional[_IQueue_7ed6f679]:
@@ -5806,6 +6090,15 @@ class SnsTopicProps(TargetBaseProps):
         result = self._values.get("retry_attempts")
         return typing.cast(typing.Optional[jsii.Number], result)
 
+    @builtins.property
+    def authorize_using_role(self) -> typing.Optional[builtins.bool]:
+        '''Specifies whether an IAM role should be used to publish to the topic.
+
+        :default: - true if ``role`` is provided, false otherwise
+        '''
+        result = self._values.get("authorize_using_role")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def message(self) -> typing.Optional[_RuleTargetInput_6beca786]:
         '''The message to send to the topic.
@@ -5815,6 +6108,15 @@ class SnsTopicProps(TargetBaseProps):
         result = self._values.get("message")
         return typing.cast(typing.Optional[_RuleTargetInput_6beca786], result)
 
+    @builtins.property
+    def role(self) -> typing.Optional[_IRole_235f5d8e]:
+        '''The IAM role to be used to publish to the topic.
+
+        :default: - a new role will be created if ``authorizeUsingRole`` is true
+        '''
+        result = self._values.get("role")
+        return typing.cast(typing.Optional[_IRole_235f5d8e], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -5992,6 +6294,8 @@ __all__ = [
     "EphemeralStorageOverride",
     "EventBus",
     "EventBusProps",
+    "FirehoseDeliveryStream",
+    "FirehoseDeliveryStreamProps",
     "IDeliveryStream",
     "InferenceAcceleratorOverride",
     "KinesisFirehoseStream",
@@ -6179,7 +6483,7 @@ def _typecheckingstub__c7cd04d50c1c36eb2be36abb3fbdf553a534c7ae5d60f1c9cac6b5cf6
     pass
 
 def _typecheckingstub__5583066efc6b7b2980bfbfbf33e6491271f5faf3b97e5d2ae998d1fe4189d1d4(
-    _rule: _IRule_af9e3d28,
+    rule: _IRule_af9e3d28,
     _id: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -6235,7 +6539,7 @@ def _typecheckingstub__c13bb1641d81a866856c7cdeae6fa612e09bb941bc83053a19b901e30
     pass
 
 def _typecheckingstub__8ad199a8641f171a0447e974756bbddd91b00aaa9bcf33d231826916b85b8166(
-    _rule: _IRule_af9e3d28,
+    rule: _IRule_af9e3d28,
     _id: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -6272,6 +6576,28 @@ def _typecheckingstub__5af20e134873490c1ac4788761972ccd53cd625edbd9b75c1c1f0b1a3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__e8b83537633e15491c91cd6cebe1eddb6bc388617c53b754a40f318f493dc48e(
+    delivery_stream: _IDeliveryStream_8f118861,
+    *,
+    message: typing.Optional[_RuleTargetInput_6beca786] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__45499f815ce457b36825c13b8a0a6ffd1d6994523698febc614678776c341fb7(
+    _rule: _IRule_af9e3d28,
+    _id: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c2311008fe7ae7c5e650063e35f32620f673ed3b0110bcab83f56ce21512d70c(
+    *,
+    message: typing.Optional[_RuleTargetInput_6beca786] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__04d9348fef54fca78833e3224fa6f62badc3a0e6c0bfa6af7838fe531de0ebf6(
     *,
     device_name: builtins.str,
@@ -6428,7 +6754,9 @@ def _typecheckingstub__0e0733fbe09a8310edfc7237ca759e925b3db6d25ad43627fcf4f165c
 def _typecheckingstub__b58aa74b2a717b90ef291556746b786df8882b8158b4b3255bf88691dbd8fd07(
     topic: _ITopic_9eca4852,
     *,
+    authorize_using_role: typing.Optional[builtins.bool] = None,
     message: typing.Optional[_RuleTargetInput_6beca786] = None,
+    role: typing.Optional[_IRole_235f5d8e] = None,
     dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
     max_event_age: typing.Optional[_Duration_4839e8c3] = None,
     retry_attempts: typing.Optional[jsii.Number] = None,
@@ -6641,7 +6969,9 @@ def _typecheckingstub__29b5b095e8884167f8f78e4ccfc6cd844ecb24d73c2e229d24c0a7a18
     dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
     max_event_age: typing.Optional[_Duration_4839e8c3] = None,
     retry_attempts: typing.Optional[jsii.Number] = None,
+    authorize_using_role: typing.Optional[builtins.bool] = None,
     message: typing.Optional[_RuleTargetInput_6beca786] = None,
+    role: typing.Optional[_IRole_235f5d8e] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -6656,3 +6986,6 @@ def _typecheckingstub__6472cea5f7d90ec67bd493d4b2ba6bc083b2c915d8dc1da40193693c2
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IDeliveryStream]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])