aws-cdk-lib 2.199.0__py3-none-any.whl → 2.200.0__py3-none-any.whl

aws_cdk/aws_sns_subscriptions/__init__.py

@@ -13,8 +13,9 @@ Subscriptions can be added to the following endpoints:
 * AWS Lambda
 * Email
 * SMS
+* Amazon Data Firehose
 
-Subscriptions to Amazon SQS and AWS Lambda can be added on topics across regions.
+Subscriptions to Amazon SQS, AWS Lambda and Amazon Data Firehose can be added on topics across regions.
 
 Create an Amazon SNS Topic to add subscriptions.
 
@@ -143,6 +144,34 @@ sms_number = CfnParameter(self, "sms-param")
 
 my_topic.add_subscription(subscriptions.SmsSubscription(sms_number.value_as_string))
 ```
+
+### Amazon Data Firehose
+
+Subscribe an Amazon Data Firehose delivery stream to your topic:
+
+```python
+import aws_cdk.aws_kinesisfirehose as firehose
+# stream: firehose.DeliveryStream
+
+
+my_topic = sns.Topic(self, "Topic")
+
+my_topic.add_subscription(subscriptions.FirehoseSubscription(stream))
+```
+
+To remove any Amazon SNS metadata from published messages, specify `rawMessageDelivery` to true.
+
+```python
+import aws_cdk.aws_kinesisfirehose as firehose
+# stream: firehose.DeliveryStream
+
+
+my_topic = sns.Topic(self, "Topic")
+
+my_topic.add_subscription(subscriptions.FirehoseSubscription(stream,
+    raw_message_delivery=True
+))
+```
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)
@@ -176,6 +205,8 @@ def check_type(argname: str, value: object, expected_type: typing.Any) -> typing
 
 from .._jsii import *
 
+from ..aws_iam import IRole as _IRole_235f5d8e
+from ..aws_kinesisfirehose import IDeliveryStream as _IDeliveryStream_8f118861
 from ..aws_lambda import IFunction as _IFunction_6adb0ab8
 from ..aws_sns import (
     DeliveryPolicy as _DeliveryPolicy_76b14b4e,
@@ -248,6 +279,70 @@ class EmailSubscription(
         return typing.cast(_TopicSubscriptionConfig_3a01016e, jsii.invoke(self, "bind", [_topic]))
 
 
+@jsii.implements(_ITopicSubscription_363a9426)
+class FirehoseSubscription(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_sns_subscriptions.FirehoseSubscription",
+):
+    '''Use an Amazon Data Firehose delivery stream as a subscription target.
+
+    :see: https://docs.aws.amazon.com/sns/latest/dg/sns-firehose-as-subscriber.html
+    :exampleMetadata: infused
+
+    Example::
+
+        import aws_cdk.aws_kinesisfirehose as firehose
+        # stream: firehose.DeliveryStream
+        
+        
+        my_topic = sns.Topic(self, "Topic")
+        
+        my_topic.add_subscription(subscriptions.FirehoseSubscription(stream))
+    '''
+
+    def __init__(
+        self,
+        delivery_stream: _IDeliveryStream_8f118861,
+        *,
+        raw_message_delivery: typing.Optional[builtins.bool] = None,
+        role: typing.Optional[_IRole_235f5d8e] = None,
+        dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
+        filter_policy: typing.Optional[typing.Mapping[builtins.str, _SubscriptionFilter_8e774360]] = None,
+        filter_policy_with_message_body: typing.Optional[typing.Mapping[builtins.str, _FilterOrPolicy_ad79be59]] = None,
+    ) -> None:
+        '''
+        :param delivery_stream: -
+        :param raw_message_delivery: Whether to remove any Amazon SNS metadata from published messages. Default: false
+        :param role: The role to assume to write messages to the Amazon Data Firehose delivery stream. Default: - A new Role is created
+        :param dead_letter_queue: Queue to be used as dead letter queue. If not passed no dead letter queue is enabled. Default: - No dead letter queue enabled.
+        :param filter_policy: The filter policy. Default: - all messages are delivered
+        :param filter_policy_with_message_body: The filter policy that is applied on the message body. To apply a filter policy to the message attributes, use ``filterPolicy``. A maximum of one of ``filterPolicyWithMessageBody`` and ``filterPolicy`` may be used. Default: - all messages are delivered
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__eb284a753df4f96d68b5336d14cffbd9183054fb6ebd06d8ae9d19e34dadca66)
+            check_type(argname="argument delivery_stream", value=delivery_stream, expected_type=type_hints["delivery_stream"])
+        props = FirehoseSubscriptionProps(
+            raw_message_delivery=raw_message_delivery,
+            role=role,
+            dead_letter_queue=dead_letter_queue,
+            filter_policy=filter_policy,
+            filter_policy_with_message_body=filter_policy_with_message_body,
+        )
+
+        jsii.create(self.__class__, self, [delivery_stream, props])
+
+    @jsii.member(jsii_name="bind")
+    def bind(self, topic: _ITopic_9eca4852) -> _TopicSubscriptionConfig_3a01016e:
+        '''Returns a configuration for a Lambda function to subscribe to an SNS topic.
+
+        :param topic: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4451ffe60ee55af18e7cd4f32871e3dcb229ecdc56cfab772a77a55ca36a43d2)
+            check_type(argname="argument topic", value=topic, expected_type=type_hints["topic"])
+        return typing.cast(_TopicSubscriptionConfig_3a01016e, jsii.invoke(self, "bind", [topic]))
+
+
 @jsii.implements(_ITopicSubscription_363a9426)
 class LambdaSubscription(
     metaclass=jsii.JSIIMeta,
@@ -884,6 +979,135 @@ class EmailSubscriptionProps(SubscriptionProps):
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_sns_subscriptions.FirehoseSubscriptionProps",
+    jsii_struct_bases=[SubscriptionProps],
+    name_mapping={
+        "dead_letter_queue": "deadLetterQueue",
+        "filter_policy": "filterPolicy",
+        "filter_policy_with_message_body": "filterPolicyWithMessageBody",
+        "raw_message_delivery": "rawMessageDelivery",
+        "role": "role",
+    },
+)
+class FirehoseSubscriptionProps(SubscriptionProps):
+    def __init__(
+        self,
+        *,
+        dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
+        filter_policy: typing.Optional[typing.Mapping[builtins.str, _SubscriptionFilter_8e774360]] = None,
+        filter_policy_with_message_body: typing.Optional[typing.Mapping[builtins.str, _FilterOrPolicy_ad79be59]] = None,
+        raw_message_delivery: typing.Optional[builtins.bool] = None,
+        role: typing.Optional[_IRole_235f5d8e] = None,
+    ) -> None:
+        '''Properties for an Amazon Data Firehose subscription.
+
+        :param dead_letter_queue: Queue to be used as dead letter queue. If not passed no dead letter queue is enabled. Default: - No dead letter queue enabled.
+        :param filter_policy: The filter policy. Default: - all messages are delivered
+        :param filter_policy_with_message_body: The filter policy that is applied on the message body. To apply a filter policy to the message attributes, use ``filterPolicy``. A maximum of one of ``filterPolicyWithMessageBody`` and ``filterPolicy`` may be used. Default: - all messages are delivered
+        :param raw_message_delivery: Whether to remove any Amazon SNS metadata from published messages. Default: false
+        :param role: The role to assume to write messages to the Amazon Data Firehose delivery stream. Default: - A new Role is created
+
+        :exampleMetadata: infused
+
+        Example::
+
+            import aws_cdk.aws_kinesisfirehose as firehose
+            # stream: firehose.DeliveryStream
+            
+            
+            my_topic = sns.Topic(self, "Topic")
+            
+            my_topic.add_subscription(subscriptions.FirehoseSubscription(stream,
+                raw_message_delivery=True
+            ))
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__985141d3216aa767af7319f266fa3eda68db2fc5132677f99b8aeb05d240609c)
+            check_type(argname="argument dead_letter_queue", value=dead_letter_queue, expected_type=type_hints["dead_letter_queue"])
+            check_type(argname="argument filter_policy", value=filter_policy, expected_type=type_hints["filter_policy"])
+            check_type(argname="argument filter_policy_with_message_body", value=filter_policy_with_message_body, expected_type=type_hints["filter_policy_with_message_body"])
+            check_type(argname="argument raw_message_delivery", value=raw_message_delivery, expected_type=type_hints["raw_message_delivery"])
+            check_type(argname="argument role", value=role, expected_type=type_hints["role"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if dead_letter_queue is not None:
+            self._values["dead_letter_queue"] = dead_letter_queue
+        if filter_policy is not None:
+            self._values["filter_policy"] = filter_policy
+        if filter_policy_with_message_body is not None:
+            self._values["filter_policy_with_message_body"] = filter_policy_with_message_body
+        if raw_message_delivery is not None:
+            self._values["raw_message_delivery"] = raw_message_delivery
+        if role is not None:
+            self._values["role"] = role
+
+    @builtins.property
+    def dead_letter_queue(self) -> typing.Optional[_IQueue_7ed6f679]:
+        '''Queue to be used as dead letter queue.
+
+        If not passed no dead letter queue is enabled.
+
+        :default: - No dead letter queue enabled.
+        '''
+        result = self._values.get("dead_letter_queue")
+        return typing.cast(typing.Optional[_IQueue_7ed6f679], result)
+
+    @builtins.property
+    def filter_policy(
+        self,
+    ) -> typing.Optional[typing.Mapping[builtins.str, _SubscriptionFilter_8e774360]]:
+        '''The filter policy.
+
+        :default: - all messages are delivered
+        '''
+        result = self._values.get("filter_policy")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, _SubscriptionFilter_8e774360]], result)
+
+    @builtins.property
+    def filter_policy_with_message_body(
+        self,
+    ) -> typing.Optional[typing.Mapping[builtins.str, _FilterOrPolicy_ad79be59]]:
+        '''The filter policy that is applied on the message body.
+
+        To apply a filter policy to the message attributes, use ``filterPolicy``. A maximum of one of ``filterPolicyWithMessageBody`` and ``filterPolicy`` may be used.
+
+        :default: - all messages are delivered
+        '''
+        result = self._values.get("filter_policy_with_message_body")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, _FilterOrPolicy_ad79be59]], result)
+
+    @builtins.property
+    def raw_message_delivery(self) -> typing.Optional[builtins.bool]:
+        '''Whether to remove any Amazon SNS metadata from published messages.
+
+        :default: false
+
+        :see: https://docs.aws.amazon.com/sns/latest/dg/sns-large-payload-raw-message-delivery.html
+        '''
+        result = self._values.get("raw_message_delivery")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def role(self) -> typing.Optional[_IRole_235f5d8e]:
+        '''The role to assume to write messages to the Amazon Data Firehose delivery stream.
+
+        :default: - A new Role is created
+        '''
+        result = self._values.get("role")
+        return typing.cast(typing.Optional[_IRole_235f5d8e], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "FirehoseSubscriptionProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_sns_subscriptions.LambdaSubscriptionProps",
     jsii_struct_bases=[SubscriptionProps],
@@ -1235,6 +1459,8 @@ class SqsSubscriptionProps(SubscriptionProps):
 __all__ = [
     "EmailSubscription",
     "EmailSubscriptionProps",
+    "FirehoseSubscription",
+    "FirehoseSubscriptionProps",
     "LambdaSubscription",
     "LambdaSubscriptionProps",
     "SmsSubscription",
@@ -1265,6 +1491,24 @@ def _typecheckingstub__8196047448e43839102a9b8698847e0dced23efba9bc4c3183517832e
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__eb284a753df4f96d68b5336d14cffbd9183054fb6ebd06d8ae9d19e34dadca66(
+    delivery_stream: _IDeliveryStream_8f118861,
+    *,
+    raw_message_delivery: typing.Optional[builtins.bool] = None,
+    role: typing.Optional[_IRole_235f5d8e] = None,
+    dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
+    filter_policy: typing.Optional[typing.Mapping[builtins.str, _SubscriptionFilter_8e774360]] = None,
+    filter_policy_with_message_body: typing.Optional[typing.Mapping[builtins.str, _FilterOrPolicy_ad79be59]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4451ffe60ee55af18e7cd4f32871e3dcb229ecdc56cfab772a77a55ca36a43d2(
+    topic: _ITopic_9eca4852,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c6c58b72bfa1ffbf274b6dab576c34931fb67721a57d2059607f1e3269d774cc(
     fn: _IFunction_6adb0ab8,
     *,
@@ -1364,6 +1608,17 @@ def _typecheckingstub__4a78d2c696d1babec6ccfebac17827b1b6ba6f90d62674866fc5b2df7
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__985141d3216aa767af7319f266fa3eda68db2fc5132677f99b8aeb05d240609c(
+    *,
+    dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,
+    filter_policy: typing.Optional[typing.Mapping[builtins.str, _SubscriptionFilter_8e774360]] = None,
+    filter_policy_with_message_body: typing.Optional[typing.Mapping[builtins.str, _FilterOrPolicy_ad79be59]] = None,
+    raw_message_delivery: typing.Optional[builtins.bool] = None,
+    role: typing.Optional[_IRole_235f5d8e] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__38ecc690db1f9c84ad1bee66614e7fd336ee231d47fb11fd9782c269149d5b19(
     *,
     dead_letter_queue: typing.Optional[_IQueue_7ed6f679] = None,

aws_cdk/aws_stepfunctions/__init__.py

@@ -1525,6 +1525,7 @@ Any object that implements the `IGrantable` interface (has an associated princip
 * `stateMachine.grantRead(principal)` - grants the principal read access
 * `stateMachine.grantTaskResponse(principal)` - grants the principal the ability to send task tokens to the state machine
 * `stateMachine.grantExecution(principal, actions)` - grants the principal execution-level permissions for the IAM actions specified
+* `stateMachine.grantRedriveExecution(principal)` - grants the principal permission to redrive the executions of the state machine
 * `stateMachine.grant(principal, actions)` - grants the principal state-machine-level permissions for the IAM actions specified
 
 ### Start Execution Permission
@@ -1603,6 +1604,25 @@ The following read permissions are provided to a service principal by the `grant
 
 Grant execution-level permissions to a state machine by calling the `grantExecution()` API:
 
+### Redrive Execution Permission
+
+Grant the given identity permission to redrive the execution of the state machine:
+
+```python
+# definition: sfn.IChainable
+role = iam.Role(self, "Role",
+    assumed_by=iam.ServicePrincipal("lambda.amazonaws.com")
+)
+state_machine = sfn.StateMachine(self, "StateMachine",
+    definition_body=sfn.DefinitionBody.from_chainable(definition)
+)
+
+# Give role permission to start execution of state machine
+state_machine.grant_start_execution(role)
+# Give role permission to redrive any executions of the state machine
+state_machine.grant_redrive_execution(role)
+```
+
 ```python
 # definition: sfn.IChainable
 role = iam.Role(self, "Role",
@@ -11691,25 +11711,23 @@ class StateMachine(
 
     Example::
 
-        # Define a state machine with one Pass state
-        child = sfn.StateMachine(self, "ChildStateMachine",
-            definition=sfn.Chain.start(sfn.Pass(self, "PassState"))
-        )
+        import aws_cdk.aws_stepfunctions as stepfunctions
         
-        # Include the state machine in a Task state with callback pattern
-        task = tasks.StepFunctionsStartExecution(self, "ChildTask",
-            state_machine=child,
-            integration_pattern=sfn.IntegrationPattern.WAIT_FOR_TASK_TOKEN,
-            input=sfn.TaskInput.from_object({
-                "token": sfn.JsonPath.task_token,
-                "foo": "bar"
-            }),
-            name="MyExecutionName"
-        )
         
-        # Define a second state machine with the Task state above
-        sfn.StateMachine(self, "ParentStateMachine",
-            definition=task
+        pipeline = codepipeline.Pipeline(self, "MyPipeline")
+        input_artifact = codepipeline.Artifact()
+        start_state = stepfunctions.Pass(self, "StartState")
+        simple_state_machine = stepfunctions.StateMachine(self, "SimpleStateMachine",
+            definition=start_state
+        )
+        step_function_action = codepipeline_actions.StepFunctionInvokeAction(
+            action_name="Invoke",
+            state_machine=simple_state_machine,
+            state_machine_input=codepipeline_actions.StateMachineInput.file_path(input_artifact.at_path("assets/input.json"))
+        )
+        pipeline.add_stage(
+            stage_name="StepFunctions",
+            actions=[step_function_action]
         )
     '''
 
@@ -11869,6 +11887,20 @@ class StateMachine(
             check_type(argname="argument identity", value=identity, expected_type=type_hints["identity"])
         return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantRead", [identity]))
 
+    @jsii.member(jsii_name="grantRedriveExecution")
+    def grant_redrive_execution(
+        self,
+        identity: _IGrantable_71c4f5de,
+    ) -> _Grant_a7ae64f8:
+        '''Grant the given identity permission to redrive the execution of the state machine.
+
+        :param identity: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__105b46fe8f1d3a0f8f8d86eed1f7f5587ebf18870718ca73c5b57e8281defaf5)
+            check_type(argname="argument identity", value=identity, expected_type=type_hints["identity"])
+        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantRedriveExecution", [identity]))
+
     @jsii.member(jsii_name="grantStartExecution")
     def grant_start_execution(self, identity: _IGrantable_71c4f5de) -> _Grant_a7ae64f8:
         '''Grant the given identity permissions to start an execution of this state machine.
@@ -27239,6 +27271,12 @@ def _typecheckingstub__de328dbf28de2be4ba9b61ea81bce4e6d383ec0968b0e914acb7378b6
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__105b46fe8f1d3a0f8f8d86eed1f7f5587ebf18870718ca73c5b57e8281defaf5(
+    identity: _IGrantable_71c4f5de,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__efa2d941a46220f1692542e8c26652619270873ffe07f55fc9aa7a063799ed08(
     identity: _IGrantable_71c4f5de,
 ) -> None:

aws_cdk/aws_synthetics/__init__.py

@@ -1426,7 +1426,7 @@ class CfnCanary(
         :param schedule: A structure that contains information about how often the canary is to run, and when these runs are to stop.
         :param artifact_config: A structure that contains the configuration for canary artifacts, including the encryption-at-rest settings for artifacts that the canary uploads to Amazon S3.
         :param delete_lambda_resources_on_canary_deletion: (deprecated) Deletes associated lambda resources created by Synthetics if set to True. Default is False
-        :param dry_run_and_update: Setting to control if UpdateCanary will perform a DryRun and validate it is PASSING before performing the Update. Default is FALSE.
+        :param dry_run_and_update: Specifies whether to perform a dry run before updating the canary. If set to ``true`` , CloudFormation will execute a dry run to validate the changes before applying them to the canary. If the dry run succeeds, the canary will be updated with the changes. If the dry run fails, the CloudFormation deployment will fail with the dry run’s failure reason. If set to ``false`` or omitted, the canary will be updated directly without first performing a dry run. The default value is ``false`` . For more information, see `Performing safe canary updates <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/performing-safe-canary-upgrades.html>`_ .
         :param failure_retention_period: The number of days to retain data about failed runs of this canary. If you omit this field, the default of 31 days is used. The valid range is 1 to 455 days. This setting affects the range of information returned by `GetCanaryRuns <https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_GetCanaryRuns.html>`_ , as well as the range of information displayed in the Synthetics console.
         :param provisioned_resource_cleanup: Specifies whether to also delete the Lambda functions and layers used by this canary when the canary is deleted. If it is ``AUTOMATIC`` , the Lambda functions and layers will be deleted when the canary is deleted. If the value of this parameter is ``OFF`` , then the value of the ``DeleteLambda`` parameter of the `DeleteCanary <https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_DeleteCanary.html>`_ operation determines whether the Lambda functions and layers will be deleted.
         :param resources_to_replicate_tags: To have the tags that you apply to this canary also be applied to the Lambda function that the canary uses, specify this property with the value ``lambda-function`` . If you do this, CloudWatch Synthetics will keep the tags of the canary and the Lambda function synchronized. Any future changes you make to the canary's tags will also be applied to the function.
@@ -1666,7 +1666,7 @@ class CfnCanary(
     def dry_run_and_update(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Setting to control if UpdateCanary will perform a DryRun and validate it is PASSING before performing the Update.'''
+        '''Specifies whether to perform a dry run before updating the canary.'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "dryRunAndUpdate"))
 
     @dry_run_and_update.setter
@@ -1993,8 +1993,8 @@ class CfnCanary(
 
             :param handler: The entry point to use for the source code when running the canary. For canaries that use the ``syn-python-selenium-1.0`` runtime or a ``syn-nodejs.puppeteer`` runtime earlier than ``syn-nodejs.puppeteer-3.4`` , the handler must be specified as ``*fileName* .handler`` . For ``syn-python-selenium-1.1`` , ``syn-nodejs.puppeteer-3.4`` , and later runtimes, the handler can be specified as ``*fileName* . *functionName*`` , or you can specify a folder where canary scripts reside as ``*folder* / *fileName* . *functionName*`` .
             :param s3_bucket: If your canary script is located in S3, specify the bucket name here. The bucket must already exist.
-            :param s3_key: The S3 key of your script. For more information, see `Working with Amazon S3 Objects <https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingObjects.html>`_ .
-            :param s3_object_version: The S3 version ID of your script.
+            :param s3_key: The Amazon S3 key of your script. For more information, see `Working with Amazon S3 Objects <https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingObjects.html>`_ .
+            :param s3_object_version: The Amazon S3 version ID of your script.
             :param script: If you input your canary script directly into the canary instead of referring to an S3 location, the value of this parameter is the script in plain text. It can be up to 5 MB.
             :param source_location_arn: The ARN of the Lambda layer where Synthetics stores the canary script code.
 
@@ -2065,7 +2065,7 @@ class CfnCanary(
 
         @builtins.property
         def s3_key(self) -> typing.Optional[builtins.str]:
-            '''The S3 key of your script.
+            '''The Amazon S3 key of your script.
 
             For more information, see `Working with Amazon S3 Objects <https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingObjects.html>`_ .
 
@@ -2076,7 +2076,7 @@ class CfnCanary(
 
         @builtins.property
         def s3_object_version(self) -> typing.Optional[builtins.str]:
-            '''The S3 version ID of your script.
+            '''The Amazon S3 version ID of your script.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-code.html#cfn-synthetics-canary-code-s3objectversion
             '''
@@ -2121,8 +2121,9 @@ class CfnCanary(
     )
     class RetryConfigProperty:
         def __init__(self, *, max_retries: jsii.Number) -> None:
-            '''
-            :param max_retries: maximum times the canary will be retried upon the scheduled run failure.
+            '''The canary's retry configuration information.
+
+            :param max_retries: The maximum number of retries. The value must be less than or equal to two.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-retryconfig.html
             :exampleMetadata: fixture=_generated
@@ -2146,7 +2147,9 @@ class CfnCanary(
 
         @builtins.property
         def max_retries(self) -> jsii.Number:
-            '''maximum times the canary will be retried upon the scheduled run failure.
+            '''The maximum number of retries.
+
+            The value must be less than or equal to two.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-retryconfig.html#cfn-synthetics-canary-retryconfig-maxretries
             '''
@@ -2391,7 +2394,7 @@ class CfnCanary(
 
             :param expression: A ``rate`` expression or a ``cron`` expression that defines how often the canary is to run. For a rate expression, The syntax is ``rate( *number unit* )`` . *unit* can be ``minute`` , ``minutes`` , or ``hour`` . For example, ``rate(1 minute)`` runs the canary once a minute, ``rate(10 minutes)`` runs it once every 10 minutes, and ``rate(1 hour)`` runs it once every hour. You can specify a frequency between ``rate(1 minute)`` and ``rate(1 hour)`` . Specifying ``rate(0 minute)`` or ``rate(0 hour)`` is a special value that causes the canary to run only once when it is started. Use ``cron( *expression* )`` to specify a cron expression. You can't schedule a canary to wait for more than a year before running. For information about the syntax for cron expressions, see `Scheduling canary runs using cron <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries_cron.html>`_ .
             :param duration_in_seconds: How long, in seconds, for the canary to continue making regular runs according to the schedule in the ``Expression`` value. If you specify 0, the canary continues making runs until you stop it. If you omit this field, the default of 0 is used.
-            :param retry_config: 
+            :param retry_config: The canary's retry configuration information.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-schedule.html
             :exampleMetadata: fixture=_generated
@@ -2458,7 +2461,8 @@ class CfnCanary(
         def retry_config(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnCanary.RetryConfigProperty"]]:
-            '''
+            '''The canary's retry configuration information.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-schedule.html#cfn-synthetics-canary-schedule-retryconfig
             '''
             result = self._values.get("retry_config")
@@ -2500,7 +2504,7 @@ class CfnCanary(
 
             :param security_group_ids: The IDs of the security groups for this canary.
             :param subnet_ids: The IDs of the subnets where this canary is to run.
-            :param ipv6_allowed_for_dual_stack: Allow outbound IPv6 traffic on VPC canaries that are connected to dual-stack subnets if set to true.
+            :param ipv6_allowed_for_dual_stack: Set this to ``true`` to allow outbound IPv6 traffic on VPC canaries that are connected to dual-stack subnets. The default is ``false`` .
             :param vpc_id: The ID of the VPC where this canary is to run.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-vpcconfig.html
@@ -2560,7 +2564,9 @@ class CfnCanary(
         def ipv6_allowed_for_dual_stack(
             self,
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''Allow outbound IPv6 traffic on VPC canaries that are connected to dual-stack subnets if set to true.
+            '''Set this to ``true`` to allow outbound IPv6 traffic on VPC canaries that are connected to dual-stack subnets.
+
+            The default is ``false`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-vpcconfig.html#cfn-synthetics-canary-vpcconfig-ipv6allowedfordualstack
             '''
@@ -2734,7 +2740,7 @@ class CfnCanaryProps:
         :param schedule: A structure that contains information about how often the canary is to run, and when these runs are to stop.
         :param artifact_config: A structure that contains the configuration for canary artifacts, including the encryption-at-rest settings for artifacts that the canary uploads to Amazon S3.
         :param delete_lambda_resources_on_canary_deletion: (deprecated) Deletes associated lambda resources created by Synthetics if set to True. Default is False
-        :param dry_run_and_update: Setting to control if UpdateCanary will perform a DryRun and validate it is PASSING before performing the Update. Default is FALSE.
+        :param dry_run_and_update: Specifies whether to perform a dry run before updating the canary. If set to ``true`` , CloudFormation will execute a dry run to validate the changes before applying them to the canary. If the dry run succeeds, the canary will be updated with the changes. If the dry run fails, the CloudFormation deployment will fail with the dry run’s failure reason. If set to ``false`` or omitted, the canary will be updated directly without first performing a dry run. The default value is ``false`` . For more information, see `Performing safe canary updates <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/performing-safe-canary-upgrades.html>`_ .
         :param failure_retention_period: The number of days to retain data about failed runs of this canary. If you omit this field, the default of 31 days is used. The valid range is 1 to 455 days. This setting affects the range of information returned by `GetCanaryRuns <https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_GetCanaryRuns.html>`_ , as well as the range of information displayed in the Synthetics console.
         :param provisioned_resource_cleanup: Specifies whether to also delete the Lambda functions and layers used by this canary when the canary is deleted. If it is ``AUTOMATIC`` , the Lambda functions and layers will be deleted when the canary is deleted. If the value of this parameter is ``OFF`` , then the value of the ``DeleteLambda`` parameter of the `DeleteCanary <https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_DeleteCanary.html>`_ operation determines whether the Lambda functions and layers will be deleted.
         :param resources_to_replicate_tags: To have the tags that you apply to this canary also be applied to the Lambda function that the canary uses, specify this property with the value ``lambda-function`` . If you do this, CloudWatch Synthetics will keep the tags of the canary and the Lambda function synchronized. Any future changes you make to the canary's tags will also be applied to the function.
@@ -2992,9 +2998,13 @@ class CfnCanaryProps:
     def dry_run_and_update(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Setting to control if UpdateCanary will perform a DryRun and validate it is PASSING before performing the Update.
+        '''Specifies whether to perform a dry run before updating the canary.
+
+        If set to ``true`` , CloudFormation will execute a dry run to validate the changes before applying them to the canary. If the dry run succeeds, the canary will be updated with the changes. If the dry run fails, the CloudFormation deployment will fail with the dry run’s failure reason.
+
+        If set to ``false`` or omitted, the canary will be updated directly without first performing a dry run. The default value is ``false`` .
 
-        Default is FALSE.
+        For more information, see `Performing safe canary updates <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/performing-safe-canary-upgrades.html>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html#cfn-synthetics-canary-dryrunandupdate
         '''

aws_cdk/aws_voiceid/__init__.py

@@ -75,9 +75,13 @@ class CfnDomain(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_voiceid.CfnDomain",
 ):
-    '''Creates a domain that contains all Amazon Connect Voice ID data, such as speakers, fraudsters, customer audio, and voiceprints.
+    '''.. epigraph::
 
-    Every domain is created with a default watchlist that fraudsters can be a part of.
+   End of support notice: On May 20, 2026, AWS will end support for Amazon Connect Voice ID.
+
+    After May 20, 2026, you will no longer be able to access Voice ID on the Amazon Connect console, access Voice ID features on the Amazon Connect admin website or Contact Control Panel, or access Voice ID resources. For more information, visit `Amazon Connect Voice ID end of support <https://docs.aws.amazon.com/connect/latest/adminguide/amazonconnect-voiceid-end-of-support.html>`_ .
+
+    Creates a domain that contains all Amazon Connect Voice ID data, such as speakers, fraudsters, customer audio, and voiceprints. Every domain is created with a default watchlist that fraudsters can be a part of.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-voiceid-domain.html
     :cloudformationResource: AWS::VoiceID::Domain
@@ -249,7 +253,13 @@ class CfnDomain(
     )
     class ServerSideEncryptionConfigurationProperty:
         def __init__(self, *, kms_key_id: builtins.str) -> None:
-            '''The configuration containing information about the customer managed key used for encrypting customer data.
+            '''.. epigraph::
+
+   End of support notice: On May 20, 2026, AWS will end support for Amazon Connect Voice ID.
+
+            After May 20, 2026, you will no longer be able to access Voice ID on the Amazon Connect console, access Voice ID features on the Amazon Connect admin website or Contact Control Panel, or access Voice ID resources. For more information, visit `Amazon Connect Voice ID end of support <https://docs.aws.amazon.com/connect/latest/adminguide/amazonconnect-voiceid-end-of-support.html>`_ .
+
+            The configuration containing information about the customer managed key used for encrypting customer data.
 
             :param kms_key_id: The identifier of the KMS key to use to encrypt data stored by Voice ID. Voice ID doesn't support asymmetric customer managed keys.