aws-cdk-lib 2.199.0__py3-none-any.whl → 2.200.1__py3-none-any.whl

aws_cdk/aws_bedrock/__init__.py

@@ -12545,7 +12545,7 @@ class CfnFlow(
         def __init__(self, *, agent_alias_arn: builtins.str) -> None:
             '''Defines an agent node in your flow.
 
-            You specify the agent to invoke at this point in the flow. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            You specify the agent to invoke at this point in the flow. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param agent_alias_arn: The Amazon Resource Name (ARN) of the alias of the agent to invoke.
 
@@ -12603,7 +12603,7 @@ class CfnFlow(
         ) -> None:
             '''Defines a condition node in your flow.
 
-            You can specify conditions that determine which node comes next in the flow. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            You can specify conditions that determine which node comes next in the flow. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param conditions: An array of conditions. Each member contains the name of a condition and an expression that defines the condition.
 
@@ -13307,12 +13307,12 @@ class CfnFlow(
         ) -> None:
             '''Contains configurations for a node in your flow.
 
-            For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param agent: Contains configurations for an agent node in your flow. Invokes an alias of an agent and returns the response.
             :param collector: Contains configurations for a collector node in your flow. Collects an iteration of inputs and consolidates them into an array of outputs.
             :param condition: Contains configurations for a condition node in your flow. Defines conditions that lead to different branches of the flow.
-            :param inline_code: Inline code config strucuture, contains code configs.
+            :param inline_code: Contains configurations for an inline code node in your flow. Inline code nodes let you write and execute code directly within your flow, enabling data transformations, custom logic, and integrations without needing an external Lambda function.
             :param input: Contains configurations for an input flow node in your flow. The first node in the flow. ``inputs`` can't be specified for this node.
             :param iterator: Contains configurations for an iterator node in your flow. Takes an input that is an array and iteratively sends each item of the array as an output to the following node. The size of the array is also returned in the output. The output flow node at the end of the flow iteration will return a response for each member of the array. To return only one response, you can include a collector node downstream from the iterator node.
             :param knowledge_base: Contains configurations for a knowledge base node in your flow. Queries a knowledge base and returns the retrieved results or generated response.
@@ -13511,7 +13511,9 @@ class CfnFlow(
         def inline_code(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFlow.InlineCodeFlowNodeConfigurationProperty"]]:
-            '''Inline code config strucuture, contains code configs.
+            '''Contains configurations for an inline code node in your flow.
+
+            Inline code nodes let you write and execute code directly within your flow, enabling data transformations, custom logic, and integrations without needing an external Lambda function.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flow-flownodeconfiguration.html#cfn-bedrock-flow-flownodeconfiguration-inlinecode
             '''
@@ -13655,11 +13657,11 @@ class CfnFlow(
             name: builtins.str,
             type: builtins.str,
         ) -> None:
-            '''Contains configurations for an input to a node.
+            '''Contains configurations for an input in an Amazon Bedrock Flows node.
 
             :param expression: An expression that formats the input for the node. For an explanation of how to create expressions, see `Expressions in Prompt flows in Amazon Bedrock <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-expressions.html>`_ .
-            :param name: A name for the input that you can reference.
-            :param type: The data type of the input. If the input doesn't match this type at runtime, a validation error will be thrown.
+            :param name: Specifies a name for the input that you can reference.
+            :param type: Specifies the data type of the input. If the input doesn't match this type at runtime, a validation error will be thrown.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flow-flownodeinput.html
             :exampleMetadata: fixture=_generated
@@ -13701,7 +13703,7 @@ class CfnFlow(
 
         @builtins.property
         def name(self) -> builtins.str:
-            '''A name for the input that you can reference.
+            '''Specifies a name for the input that you can reference.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flow-flownodeinput.html#cfn-bedrock-flow-flownodeinput-name
             '''
@@ -13711,7 +13713,7 @@ class CfnFlow(
 
         @builtins.property
         def type(self) -> builtins.str:
-            '''The data type of the input.
+            '''Specifies the data type of the input.
 
             If the input doesn't match this type at runtime, a validation error will be thrown.
 
@@ -14169,10 +14171,12 @@ class CfnFlow(
     )
     class InlineCodeFlowNodeConfigurationProperty:
         def __init__(self, *, code: builtins.str, language: builtins.str) -> None:
-            '''Inline code config strucuture, contains code configs.
+            '''Contains configurations for an inline code node in your flow.
+
+            Inline code nodes let you write and execute code directly within your flow, enabling data transformations, custom logic, and integrations without needing an external Lambda function.
 
-            :param code: The inline code entered by customers. max size is 5MB.
-            :param language: Enum encodes the supported language type.
+            :param code: The code that's executed in your inline code node. The code can access input data from previous nodes in the flow, perform operations on that data, and produce output that can be used by other nodes in your flow. The code must be valid in the programming ``language`` that you specify.
+            :param language: The programming language used by your inline code node. The code must be valid in the programming ``language`` that you specify. Currently, only Python 3 ( ``Python_3`` ) is supported.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flow-inlinecodeflownodeconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -14199,9 +14203,11 @@ class CfnFlow(
 
         @builtins.property
         def code(self) -> builtins.str:
-            '''The inline code entered by customers.
+            '''The code that's executed in your inline code node.
 
-            max size is 5MB.
+            The code can access input data from previous nodes in the flow, perform operations on that data, and produce output that can be used by other nodes in your flow.
+
+            The code must be valid in the programming ``language`` that you specify.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flow-inlinecodeflownodeconfiguration.html#cfn-bedrock-flow-inlinecodeflownodeconfiguration-code
             '''
@@ -14211,7 +14217,9 @@ class CfnFlow(
 
         @builtins.property
         def language(self) -> builtins.str:
-            '''Enum encodes the supported language type.
+            '''The programming language used by your inline code node.
+
+            The code must be valid in the programming ``language`` that you specify. Currently, only Python 3 ( ``Python_3`` ) is supported.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flow-inlinecodeflownodeconfiguration.html#cfn-bedrock-flow-inlinecodeflownodeconfiguration-language
             '''
@@ -14249,7 +14257,7 @@ class CfnFlow(
         ) -> None:
             '''Contains configurations for a knowledge base node in a flow.
 
-            This node takes a query as the input and returns, as the output, the retrieved responses directly (as an array) or a response generated based on the retrieved responses. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            This node takes a query as the input and returns, as the output, the retrieved responses directly (as an array) or a response generated based on the retrieved responses. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param knowledge_base_id: The unique identifier of the knowledge base to query.
             :param guardrail_configuration: Contains configurations for a guardrail to apply during query and response generation for the knowledge base in this configuration.
@@ -14338,7 +14346,7 @@ class CfnFlow(
         def __init__(self, *, lambda_arn: builtins.str) -> None:
             '''Contains configurations for a Lambda function node in the flow.
 
-            You specify the Lambda function to invoke and the inputs into the function. The output is the response that is defined in the Lambda function. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            You specify the Lambda function to invoke and the inputs into the function. The output is the response that is defined in the Lambda function. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param lambda_arn: The Amazon Resource Name (ARN) of the Lambda function to invoke.
 
@@ -14397,7 +14405,7 @@ class CfnFlow(
         ) -> None:
             '''Contains configurations for a Lex node in the flow.
 
-            You specify a Amazon Lex bot to invoke. This node takes an utterance as the input and returns as the output the intent identified by the Amazon Lex bot. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            You specify a Amazon Lex bot to invoke. This node takes an utterance as the input and returns as the output the intent identified by the Amazon Lex bot. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param bot_alias_arn: The Amazon Resource Name (ARN) of the Amazon Lex bot alias to invoke.
             :param locale_id: The Region to invoke the Amazon Lex bot in.
@@ -14473,7 +14481,7 @@ class CfnFlow(
         ) -> None:
             '''Contains configurations for a prompt node in the flow.
 
-            You can use a prompt from Prompt management or you can define one in this node. If the prompt contains variables, the inputs into this node will fill in the variables. The output from this node is the response generated by the model. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            You can use a prompt from Prompt management or you can define one in this node. If the prompt contains variables, the inputs into this node will fill in the variables. The output from this node is the response generated by the model. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param source_configuration: Specifies whether the prompt is from Prompt management or defined inline.
             :param guardrail_configuration: Contains configurations for a guardrail to apply to the prompt in this node and the response generated from it.
@@ -15715,7 +15723,7 @@ class CfnFlowAlias(
         :param flow_arn: The Amazon Resource Name (ARN) of the alias.
         :param name: The name of the alias.
         :param routing_configuration: A list of configurations about the versions that the alias maps to. Currently, you can only specify one.
-        :param concurrency_configuration: 
+        :param concurrency_configuration: The configuration that specifies how nodes in the flow are executed concurrently.
         :param description: A description of the alias.
         :param tags: Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:. - `Tag naming limits and requirements <https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions>`_ - `Tagging best practices <https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices>`_
         '''
@@ -15869,6 +15877,7 @@ class CfnFlowAlias(
     def concurrency_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFlowAlias.FlowAliasConcurrencyConfigurationProperty"]]:
+        '''The configuration that specifies how nodes in the flow are executed concurrently.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFlowAlias.FlowAliasConcurrencyConfigurationProperty"]], jsii.get(self, "concurrencyConfiguration"))
 
     @concurrency_configuration.setter
@@ -15925,9 +15934,12 @@ class CfnFlowAlias(
             type: builtins.str,
             max_concurrency: typing.Optional[jsii.Number] = None,
         ) -> None:
-            '''
-            :param type: 
-            :param max_concurrency: Number of nodes executed concurrently at a time.
+            '''Determines how multiple nodes in a flow can run in parallel.
+
+            Running nodes concurrently can improve your flow's performance.
+
+            :param type: The type of concurrency to use for parallel node execution. Specify one of the following options:. - ``Automatic`` - Amazon Bedrock determines which nodes can be executed in parallel based on the flow definition and its dependencies. - ``Manual`` - You specify which nodes can be executed in parallel.
+            :param max_concurrency: The maximum number of nodes that can be executed concurrently in the flow.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flowalias-flowaliasconcurrencyconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -15957,7 +15969,11 @@ class CfnFlowAlias(
 
         @builtins.property
         def type(self) -> builtins.str:
-            '''
+            '''The type of concurrency to use for parallel node execution. Specify one of the following options:.
+
+            - ``Automatic`` - Amazon Bedrock determines which nodes can be executed in parallel based on the flow definition and its dependencies.
+            - ``Manual`` - You specify which nodes can be executed in parallel.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flowalias-flowaliasconcurrencyconfiguration.html#cfn-bedrock-flowalias-flowaliasconcurrencyconfiguration-type
             '''
             result = self._values.get("type")
@@ -15966,7 +15982,7 @@ class CfnFlowAlias(
 
         @builtins.property
         def max_concurrency(self) -> typing.Optional[jsii.Number]:
-            '''Number of nodes executed concurrently at a time.
+            '''The maximum number of nodes that can be executed concurrently in the flow.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flowalias-flowaliasconcurrencyconfiguration.html#cfn-bedrock-flowalias-flowaliasconcurrencyconfiguration-maxconcurrency
             '''
@@ -16068,7 +16084,7 @@ class CfnFlowAliasProps:
         :param flow_arn: The Amazon Resource Name (ARN) of the alias.
         :param name: The name of the alias.
         :param routing_configuration: A list of configurations about the versions that the alias maps to. Currently, you can only specify one.
-        :param concurrency_configuration: 
+        :param concurrency_configuration: The configuration that specifies how nodes in the flow are executed concurrently.
         :param description: A description of the alias.
         :param tags: Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:. - `Tag naming limits and requirements <https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions>`_ - `Tagging best practices <https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices>`_
 
@@ -16159,7 +16175,8 @@ class CfnFlowAliasProps:
     def concurrency_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFlowAlias.FlowAliasConcurrencyConfigurationProperty]]:
-        '''
+        '''The configuration that specifies how nodes in the flow are executed concurrently.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-flowalias.html#cfn-bedrock-flowalias-concurrencyconfiguration
         '''
         result = self._values.get("concurrency_configuration")
@@ -16755,7 +16772,7 @@ class CfnFlowVersion(
         def __init__(self, *, agent_alias_arn: builtins.str) -> None:
             '''Defines an agent node in your flow.
 
-            You specify the agent to invoke at this point in the flow. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            You specify the agent to invoke at this point in the flow. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param agent_alias_arn: The Amazon Resource Name (ARN) of the alias of the agent to invoke.
 
@@ -16813,7 +16830,7 @@ class CfnFlowVersion(
         ) -> None:
             '''Defines a condition node in your flow.
 
-            You can specify conditions that determine which node comes next in the flow. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            You can specify conditions that determine which node comes next in the flow. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param conditions: An array of conditions. Each member contains the name of a condition and an expression that defines the condition.
 
@@ -17517,12 +17534,12 @@ class CfnFlowVersion(
         ) -> None:
             '''Contains configurations for a node in your flow.
 
-            For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param agent: Contains configurations for an agent node in your flow. Invokes an alias of an agent and returns the response.
             :param collector: Contains configurations for a collector node in your flow. Collects an iteration of inputs and consolidates them into an array of outputs.
             :param condition: Contains configurations for a condition node in your flow. Defines conditions that lead to different branches of the flow.
-            :param inline_code: Inline code config strucuture, contains code configs.
+            :param inline_code: Contains configurations for an inline code node in your flow. Inline code nodes let you write and execute code directly within your flow, enabling data transformations, custom logic, and integrations without needing an external Lambda function.
             :param input: Contains configurations for an input flow node in your flow. The first node in the flow. ``inputs`` can't be specified for this node.
             :param iterator: Contains configurations for an iterator node in your flow. Takes an input that is an array and iteratively sends each item of the array as an output to the following node. The size of the array is also returned in the output. The output flow node at the end of the flow iteration will return a response for each member of the array. To return only one response, you can include a collector node downstream from the iterator node.
             :param knowledge_base: Contains configurations for a knowledge base node in your flow. Queries a knowledge base and returns the retrieved results or generated response.
@@ -17721,7 +17738,9 @@ class CfnFlowVersion(
         def inline_code(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFlowVersion.InlineCodeFlowNodeConfigurationProperty"]]:
-            '''Inline code config strucuture, contains code configs.
+            '''Contains configurations for an inline code node in your flow.
+
+            Inline code nodes let you write and execute code directly within your flow, enabling data transformations, custom logic, and integrations without needing an external Lambda function.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flowversion-flownodeconfiguration.html#cfn-bedrock-flowversion-flownodeconfiguration-inlinecode
             '''
@@ -17865,11 +17884,11 @@ class CfnFlowVersion(
             name: builtins.str,
             type: builtins.str,
         ) -> None:
-            '''Contains configurations for an input to a node.
+            '''Contains configurations for an input in an Amazon Bedrock Flows node.
 
             :param expression: An expression that formats the input for the node. For an explanation of how to create expressions, see `Expressions in Prompt flows in Amazon Bedrock <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-expressions.html>`_ .
-            :param name: A name for the input that you can reference.
-            :param type: The data type of the input. If the input doesn't match this type at runtime, a validation error will be thrown.
+            :param name: Specifies a name for the input that you can reference.
+            :param type: Specifies the data type of the input. If the input doesn't match this type at runtime, a validation error will be thrown.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flowversion-flownodeinput.html
             :exampleMetadata: fixture=_generated
@@ -17911,7 +17930,7 @@ class CfnFlowVersion(
 
         @builtins.property
         def name(self) -> builtins.str:
-            '''A name for the input that you can reference.
+            '''Specifies a name for the input that you can reference.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flowversion-flownodeinput.html#cfn-bedrock-flowversion-flownodeinput-name
             '''
@@ -17921,7 +17940,7 @@ class CfnFlowVersion(
 
         @builtins.property
         def type(self) -> builtins.str:
-            '''The data type of the input.
+            '''Specifies the data type of the input.
 
             If the input doesn't match this type at runtime, a validation error will be thrown.
 
@@ -18322,10 +18341,12 @@ class CfnFlowVersion(
     )
     class InlineCodeFlowNodeConfigurationProperty:
         def __init__(self, *, code: builtins.str, language: builtins.str) -> None:
-            '''Inline code config strucuture, contains code configs.
+            '''Contains configurations for an inline code node in your flow.
+
+            Inline code nodes let you write and execute code directly within your flow, enabling data transformations, custom logic, and integrations without needing an external Lambda function.
 
-            :param code: The inline code entered by customers. max size is 5MB.
-            :param language: Enum encodes the supported language type.
+            :param code: The code that's executed in your inline code node. The code can access input data from previous nodes in the flow, perform operations on that data, and produce output that can be used by other nodes in your flow. The code must be valid in the programming ``language`` that you specify.
+            :param language: The programming language used by your inline code node. The code must be valid in the programming ``language`` that you specify. Currently, only Python 3 ( ``Python_3`` ) is supported.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flowversion-inlinecodeflownodeconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -18352,9 +18373,11 @@ class CfnFlowVersion(
 
         @builtins.property
         def code(self) -> builtins.str:
-            '''The inline code entered by customers.
+            '''The code that's executed in your inline code node.
 
-            max size is 5MB.
+            The code can access input data from previous nodes in the flow, perform operations on that data, and produce output that can be used by other nodes in your flow.
+
+            The code must be valid in the programming ``language`` that you specify.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flowversion-inlinecodeflownodeconfiguration.html#cfn-bedrock-flowversion-inlinecodeflownodeconfiguration-code
             '''
@@ -18364,7 +18387,9 @@ class CfnFlowVersion(
 
         @builtins.property
         def language(self) -> builtins.str:
-            '''Enum encodes the supported language type.
+            '''The programming language used by your inline code node.
+
+            The code must be valid in the programming ``language`` that you specify. Currently, only Python 3 ( ``Python_3`` ) is supported.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flowversion-inlinecodeflownodeconfiguration.html#cfn-bedrock-flowversion-inlinecodeflownodeconfiguration-language
             '''
@@ -18402,7 +18427,7 @@ class CfnFlowVersion(
         ) -> None:
             '''Contains configurations for a knowledge base node in a flow.
 
-            This node takes a query as the input and returns, as the output, the retrieved responses directly (as an array) or a response generated based on the retrieved responses. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            This node takes a query as the input and returns, as the output, the retrieved responses directly (as an array) or a response generated based on the retrieved responses. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param knowledge_base_id: The unique identifier of the knowledge base to query.
             :param guardrail_configuration: Contains configurations for a guardrail to apply during query and response generation for the knowledge base in this configuration.
@@ -18491,7 +18516,7 @@ class CfnFlowVersion(
         def __init__(self, *, lambda_arn: builtins.str) -> None:
             '''Contains configurations for a Lambda function node in the flow.
 
-            You specify the Lambda function to invoke and the inputs into the function. The output is the response that is defined in the Lambda function. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            You specify the Lambda function to invoke and the inputs into the function. The output is the response that is defined in the Lambda function. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param lambda_arn: The Amazon Resource Name (ARN) of the Lambda function to invoke.
 
@@ -18550,7 +18575,7 @@ class CfnFlowVersion(
         ) -> None:
             '''Contains configurations for a Lex node in the flow.
 
-            You specify a Amazon Lex bot to invoke. This node takes an utterance as the input and returns as the output the intent identified by the Amazon Lex bot. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            You specify a Amazon Lex bot to invoke. This node takes an utterance as the input and returns as the output the intent identified by the Amazon Lex bot. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param bot_alias_arn: The Amazon Resource Name (ARN) of the Amazon Lex bot alias to invoke.
             :param locale_id: The Region to invoke the Amazon Lex bot in.
@@ -18626,7 +18651,7 @@ class CfnFlowVersion(
         ) -> None:
             '''Contains configurations for a prompt node in the flow.
 
-            You can use a prompt from Prompt management or you can define one in this node. If the prompt contains variables, the inputs into this node will fill in the variables. The output from this node is the response generated by the model. For more information, see `Node types in Amazon Bedrock works <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
+            You can use a prompt from Prompt management or you can define one in this node. If the prompt contains variables, the inputs into this node will fill in the variables. The output from this node is the response generated by the model. For more information, see `Node types in a flow <https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html>`_ in the Amazon Bedrock User Guide.
 
             :param source_configuration: Specifies whether the prompt is from Prompt management or defined inline.
             :param guardrail_configuration: Contains configurations for a guardrail to apply to the prompt in this node and the response generated from it.

aws_cdk/aws_cloudformation/__init__.py

@@ -2121,12 +2121,10 @@ class CfnHookVersion(
     @builtins.property
     @jsii.member(jsii_name="attrVisibility")
     def attr_visibility(self) -> builtins.str:
-        '''The scope at which the Hook is visible and usable in CloudFormation operations.
+        '''The visibility level that determines who can see and use this Hook in CloudFormation operations:.
 
-        Valid values include:
-
-        - ``PRIVATE`` : The extension (Hook) is only visible and usable within the account in which it's registered. CloudFormation marks any resources you register as ``PRIVATE`` .
-        - ``PUBLIC`` : The extension (Hook) is publicly visible and usable within any AWS account.
+        - ``PRIVATE`` : The Hook is only visible and usable within the account where it was registered. CloudFormation automatically marks any Hooks you register as ``PRIVATE`` .
+        - ``PUBLIC`` : The Hook is publicly visible and usable within any AWS account.
 
         :cloudformationAttribute: Visibility
         '''
@@ -4048,12 +4046,10 @@ class CfnModuleVersion(
     @builtins.property
     @jsii.member(jsii_name="attrVisibility")
     def attr_visibility(self) -> builtins.str:
-        '''The scope at which the module is visible and usable in CloudFormation operations.
-
-        Valid values include:
+        '''The visibility level that determines who can see and use this module in CloudFormation operations:.
 
-        - ``PRIVATE`` : The extension (module) is only visible and usable within the account in which it is registered. CloudFormation marks any extensions you register as ``PRIVATE`` .
-        - ``PUBLIC`` : The extension (module) is publicly visible and usable within any AWS account.
+        - ``PRIVATE`` : The module is only visible and usable within the account where it was registered. CloudFormation automatically marks any modules you register as ``PRIVATE`` .
+        - ``PUBLIC`` : The module is publicly visible and usable within any AWS account.
 
         :cloudformationAttribute: Visibility
         '''
@@ -5128,7 +5124,7 @@ class CfnResourceVersion(
 
         CloudFormation determines the provisioning type during registration, based on the types of handlers in the schema handler package submitted.
 
-        Valid values include:
+        Possible values:
 
         - ``FULLY_MUTABLE`` : The resource type includes an update handler to process updates to the type during stack update operations.
         - ``IMMUTABLE`` : The resource type doesn't include an update handler, so the type can't be updated and must instead be replaced during stack update operations.
@@ -5164,12 +5160,10 @@ class CfnResourceVersion(
     @builtins.property
     @jsii.member(jsii_name="attrVisibility")
     def attr_visibility(self) -> builtins.str:
-        '''The scope at which the resource is visible and usable in CloudFormation operations.
-
-        Valid values include:
+        '''The visibility level that determines who can see and use this resource in CloudFormation operations:.
 
-        - ``PRIVATE`` : The extension (resource) is only visible and usable within the account in which it is registered. CloudFormation marks any extensions you register as ``PRIVATE`` .
-        - ``PUBLIC`` : The extension (resource) is publicly visible and usable within any AWS account.
+        - ``PRIVATE`` : The resource is only visible and usable within the account where it was registered. CloudFormation automatically marks any resources you register as ``PRIVATE`` .
+        - ``PUBLIC`` : The resource is publicly visible and usable within any AWS account.
 
         :cloudformationAttribute: Visibility
         '''
@@ -5449,7 +5443,7 @@ class CfnStack(
 ):
     '''The ``AWS::CloudFormation::Stack`` resource nests a stack as a resource in a top-level template.
 
-    For more information, see `Embed stacks within other stacks using nested stacks <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-nested-stacks.html>`_ in the *AWS CloudFormation User Guide* .
+    For more information, see `Nested stacks <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-nested-stacks.html>`_ in the *AWS CloudFormation User Guide* .
 
     You can add output values from a nested stack within the containing template. You use the `GetAtt <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getatt.html>`_ function with the nested stack's logical name and the name of the output value in the nested stack in the format ``Outputs. *NestedStackOutputName*`` .
 
@@ -5457,7 +5451,7 @@ class CfnStack(
 
     When you apply template changes to update a top-level stack, CloudFormation updates the top-level stack and initiates an update to its nested stacks. CloudFormation updates the resources of modified nested stacks, but doesn't update the resources of unmodified nested stacks.
 
-    You must acknowledge IAM capabilities for nested stacks that contain IAM resources. Also, verify that you have cancel update stack permissions, which is required if an update rolls back. For more information about IAM and CloudFormation , see `Controlling access with AWS Identity and Access Management <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html>`_ in the *AWS CloudFormation User Guide* .
+    For stacks that contain IAM resources, you must acknowledge IAM capabilities. Also, make sure that you have cancel update stack permissions, which are required if an update rolls back. For more information about IAM and CloudFormation , see `Controlling access with AWS Identity and Access Management <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html>`_ in the *AWS CloudFormation User Guide* .
     .. epigraph::
 
        A subset of ``AWS::CloudFormation::Stack`` resource type properties listed below are available to customers using CloudFormation , AWS CDK , and Cloud Control  to configure.
@@ -5623,7 +5617,7 @@ class CfnStack(
     @builtins.property
     @jsii.member(jsii_name="attrParentId")
     def attr_parent_id(self) -> builtins.str:
-        '''For nested stacks--stacks created as resources for another stack--returns the stack ID of the direct parent of this stack.
+        '''For nested stacks, returns the stack ID of the direct parent of this stack.
 
         For the first level of nested stacks, the root stack is also the parent stack.
 
@@ -5634,7 +5628,7 @@ class CfnStack(
     @builtins.property
     @jsii.member(jsii_name="attrRootId")
     def attr_root_id(self) -> builtins.str:
-        '''For nested stacks--stacks created as resources for another stack--returns the stack ID of the top-level stack to which the nested stack ultimately belongs.
+        '''For nested stacks, returns the stack ID of the top-level stack to which the nested stack ultimately belongs.
 
         :cloudformationAttribute: RootId
         '''
@@ -6102,7 +6096,7 @@ class CfnStackSet(
         :param permission_model: Describes how the IAM roles required for stack set operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for stack sets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
         :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set.
         :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
-        :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
+        :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Enable or disable automatic deployments for StackSets in AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
         :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
         :param capabilities: The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
         :param description: A description of the stack set.
@@ -7080,7 +7074,7 @@ class CfnStackSetProps:
         :param permission_model: Describes how the IAM roles required for stack set operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for stack sets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
         :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set.
         :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
-        :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
+        :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Enable or disable automatic deployments for StackSets in AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
         :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
         :param capabilities: The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
         :param description: A description of the stack set.
@@ -7249,7 +7243,7 @@ class CfnStackSetProps:
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnStackSet.AutoDeploymentProperty]]:
         '''Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
 
-        For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* .
+        For more information, see `Enable or disable automatic deployments for StackSets in AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* .
 
         Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
 

aws_cdk/aws_cloudfront_origins/__init__.py

@@ -681,7 +681,7 @@ You can allow the traffic from the CloudFront managed prefix list named **com.am
 cf_origin_facing = ec2.PrefixList.from_lookup(self, "CloudFrontOriginFacing",
     prefix_list_name="com.amazonaws.global.cloudfront.origin-facing"
 )
-alb.connections.allow_from(ec2.Peer.prefix_list(cf_origin_facing.prefix_list_id), ec2.Port.HTTP)
+alb.connections.allow_from(cf_origin_facing, ec2.Port.HTTP)
 ```
 
 #### The VPC origin service security group

aws_cdk/aws_cloudtrail/__init__.py

@@ -2877,7 +2877,7 @@ class CfnTrail(
         :param insight_selectors: A JSON string that contains the Insights types you want to log on a trail. ``ApiCallRateInsight`` and ``ApiErrorRateInsight`` are valid Insight types. The ``ApiCallRateInsight`` Insights type analyzes write-only management API calls that are aggregated per minute against a baseline API call volume. The ``ApiErrorRateInsight`` Insights type analyzes management API calls that result in error codes. The error is shown if the API call is unsuccessful.
         :param is_multi_region_trail: Specifies whether the trail applies only to the current Region or to all Regions. The default is false. If the trail exists only in the current Region and this value is set to true, shadow trails (replications of the trail) will be created in the other Regions. If the trail exists in all Regions and this value is set to false, the trail will remain in the Region where it was created, and its shadow trails in other Regions will be deleted. As a best practice, consider using trails that log events in all Regions.
         :param is_organization_trail: Specifies whether the trail is applied to all accounts in an organization in AWS Organizations , or only for the current AWS account . The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the management account for an organization in AWS Organizations . If the trail is not an organization trail and this is set to ``true`` , the trail will be created in all AWS accounts that belong to the organization. If the trail is an organization trail and this is set to ``false`` , the trail will remain in the current AWS account but be deleted from all member accounts in the organization. .. epigraph:: Only the management account for the organization can convert an organization trail to a non-organization trail, or convert a non-organization trail to an organization trail.
-        :param kms_key_id: Specifies the AWS KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by "alias/", a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier. CloudTrail also supports AWS KMS multi-Region keys. For more information about multi-Region keys, see `Using multi-Region keys <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html>`_ in the *AWS Key Management Service Developer Guide* . Examples: - alias/MyAliasName - arn:aws:kms:us-east-2:123456789012:alias/MyAliasName - arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012 - 12345678-1234-1234-1234-123456789012
+        :param kms_key_id: Specifies the AWS KMS key ID to use to encrypt the logs and digest files delivered by CloudTrail. The value can be an alias name prefixed by "alias/", a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier. CloudTrail also supports AWS KMS multi-Region keys. For more information about multi-Region keys, see `Using multi-Region keys <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html>`_ in the *AWS Key Management Service Developer Guide* . Examples: - alias/MyAliasName - arn:aws:kms:us-east-2:123456789012:alias/MyAliasName - arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012 - 12345678-1234-1234-1234-123456789012
         :param s3_key_prefix: Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see `Finding Your CloudTrail Log Files <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/get-and-view-cloudtrail-log-files.html#cloudtrail-find-log-files>`_ . The maximum length is 200 characters.
         :param sns_topic_name: Specifies the name or ARN of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
         :param tags: A custom set of tags (key-value pairs) for this trail.
@@ -3157,7 +3157,7 @@ class CfnTrail(
     @builtins.property
     @jsii.member(jsii_name="kmsKeyId")
     def kms_key_id(self) -> typing.Optional[builtins.str]:
-        '''Specifies the AWS KMS key ID to use to encrypt the logs delivered by CloudTrail.'''
+        '''Specifies the AWS KMS key ID to use to encrypt the logs and digest files delivered by CloudTrail.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsKeyId"))
 
     @kms_key_id.setter
@@ -3945,7 +3945,7 @@ class CfnTrailProps:
         :param insight_selectors: A JSON string that contains the Insights types you want to log on a trail. ``ApiCallRateInsight`` and ``ApiErrorRateInsight`` are valid Insight types. The ``ApiCallRateInsight`` Insights type analyzes write-only management API calls that are aggregated per minute against a baseline API call volume. The ``ApiErrorRateInsight`` Insights type analyzes management API calls that result in error codes. The error is shown if the API call is unsuccessful.
         :param is_multi_region_trail: Specifies whether the trail applies only to the current Region or to all Regions. The default is false. If the trail exists only in the current Region and this value is set to true, shadow trails (replications of the trail) will be created in the other Regions. If the trail exists in all Regions and this value is set to false, the trail will remain in the Region where it was created, and its shadow trails in other Regions will be deleted. As a best practice, consider using trails that log events in all Regions.
         :param is_organization_trail: Specifies whether the trail is applied to all accounts in an organization in AWS Organizations , or only for the current AWS account . The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the management account for an organization in AWS Organizations . If the trail is not an organization trail and this is set to ``true`` , the trail will be created in all AWS accounts that belong to the organization. If the trail is an organization trail and this is set to ``false`` , the trail will remain in the current AWS account but be deleted from all member accounts in the organization. .. epigraph:: Only the management account for the organization can convert an organization trail to a non-organization trail, or convert a non-organization trail to an organization trail.
-        :param kms_key_id: Specifies the AWS KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by "alias/", a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier. CloudTrail also supports AWS KMS multi-Region keys. For more information about multi-Region keys, see `Using multi-Region keys <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html>`_ in the *AWS Key Management Service Developer Guide* . Examples: - alias/MyAliasName - arn:aws:kms:us-east-2:123456789012:alias/MyAliasName - arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012 - 12345678-1234-1234-1234-123456789012
+        :param kms_key_id: Specifies the AWS KMS key ID to use to encrypt the logs and digest files delivered by CloudTrail. The value can be an alias name prefixed by "alias/", a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier. CloudTrail also supports AWS KMS multi-Region keys. For more information about multi-Region keys, see `Using multi-Region keys <https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html>`_ in the *AWS Key Management Service Developer Guide* . Examples: - alias/MyAliasName - arn:aws:kms:us-east-2:123456789012:alias/MyAliasName - arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012 - 12345678-1234-1234-1234-123456789012
         :param s3_key_prefix: Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see `Finding Your CloudTrail Log Files <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/get-and-view-cloudtrail-log-files.html#cloudtrail-find-log-files>`_ . The maximum length is 200 characters.
         :param sns_topic_name: Specifies the name or ARN of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
         :param tags: A custom set of tags (key-value pairs) for this trail.
@@ -4222,7 +4222,7 @@ class CfnTrailProps:
 
     @builtins.property
     def kms_key_id(self) -> typing.Optional[builtins.str]:
-        '''Specifies the AWS KMS key ID to use to encrypt the logs delivered by CloudTrail.
+        '''Specifies the AWS KMS key ID to use to encrypt the logs and digest files delivered by CloudTrail.
 
         The value can be an alias name prefixed by "alias/", a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.