aws-cdk-lib 2.200.1__py3-none-any.whl → 2.201.0__py3-none-any.whl

aws_cdk/aws_apigatewayv2/__init__.py

@@ -4186,7 +4186,7 @@ class CfnDomainName(
         :param domain_name: The custom domain name for your API in Amazon API Gateway. Uppercase letters and the underscore ( ``_`` ) character are not supported.
         :param domain_name_configurations: The domain name configurations.
         :param mutual_tls_authentication: The mutual TLS authentication configuration for a custom domain name.
-        :param routing_mode: Default: - "API_MAPPING_ONLY"
+        :param routing_mode: The routing mode API Gateway uses to route traffic to your APIs. Default: - "API_MAPPING_ONLY"
         :param tags: The collection of tags associated with a domain name.
         '''
         if __debug__:
@@ -4325,6 +4325,7 @@ class CfnDomainName(
     @builtins.property
     @jsii.member(jsii_name="routingMode")
     def routing_mode(self) -> typing.Optional[builtins.str]:
+        '''The routing mode API Gateway uses to route traffic to your APIs.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "routingMode"))
 
     @routing_mode.setter
@@ -4605,7 +4606,7 @@ class CfnDomainNameProps:
         :param domain_name: The custom domain name for your API in Amazon API Gateway. Uppercase letters and the underscore ( ``_`` ) character are not supported.
         :param domain_name_configurations: The domain name configurations.
         :param mutual_tls_authentication: The mutual TLS authentication configuration for a custom domain name.
-        :param routing_mode: Default: - "API_MAPPING_ONLY"
+        :param routing_mode: The routing mode API Gateway uses to route traffic to your APIs. Default: - "API_MAPPING_ONLY"
         :param tags: The collection of tags associated with a domain name.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-domainname.html
@@ -4694,7 +4695,8 @@ class CfnDomainNameProps:
 
     @builtins.property
     def routing_mode(self) -> typing.Optional[builtins.str]:
-        '''
+        '''The routing mode API Gateway uses to route traffic to your APIs.
+
         :default: - "API_MAPPING_ONLY"
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-domainname.html#cfn-apigatewayv2-domainname-routingmode
@@ -7515,7 +7517,9 @@ class CfnRoutingRule(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_apigatewayv2.CfnRoutingRule",
 ):
-    '''Schema for AWS::ApiGatewayV2::RoutingRule.
+    '''Represents a routing rule.
+
+    When the incoming request to a domain name matches the conditions for a rule, API Gateway invokes a stage of a target API. Supported only for REST APIs.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html
     :cloudformationResource: AWS::ApiGatewayV2::RoutingRule
@@ -7566,10 +7570,10 @@ class CfnRoutingRule(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param actions: 
-        :param conditions: 
-        :param domain_name_arn: The amazon resource name (ARN) of the domain name resource.
-        :param priority: 
+        :param actions: The resulting action based on matching a routing rules condition. Only InvokeApi is supported.
+        :param conditions: The conditions of the routing rule.
+        :param domain_name_arn: The ARN of the domain name.
+        :param priority: The order in which API Gateway evaluates a rule. Priority is evaluated from the lowest value to the highest value. Rules can't have the same priority. Priority values 1-1,000,000 are supported.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9e261e580ed01a26eb5f3398b18b1c8e713162e6c87041c85e7920fdbe505572)
@@ -7617,7 +7621,7 @@ class CfnRoutingRule(
     @builtins.property
     @jsii.member(jsii_name="attrRoutingRuleArn")
     def attr_routing_rule_arn(self) -> builtins.str:
-        '''Amazon Resource Name (ARN) of the resource.
+        '''Represents an Amazon Resource Name (ARN).
 
         :cloudformationAttribute: RoutingRuleArn
         '''
@@ -7626,7 +7630,7 @@ class CfnRoutingRule(
     @builtins.property
     @jsii.member(jsii_name="attrRoutingRuleId")
     def attr_routing_rule_id(self) -> builtins.str:
-        '''RoutingRule Id generated by service.
+        '''The identifier.
 
         :cloudformationAttribute: RoutingRuleId
         '''
@@ -7642,6 +7646,7 @@ class CfnRoutingRule(
     def actions(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.ActionProperty"]]]:
+        '''The resulting action based on matching a routing rules condition.'''
         return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.ActionProperty"]]], jsii.get(self, "actions"))
 
     @actions.setter
@@ -7659,6 +7664,7 @@ class CfnRoutingRule(
     def conditions(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.ConditionProperty"]]]:
+        '''The conditions of the routing rule.'''
         return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.ConditionProperty"]]], jsii.get(self, "conditions"))
 
     @conditions.setter
@@ -7674,7 +7680,7 @@ class CfnRoutingRule(
     @builtins.property
     @jsii.member(jsii_name="domainNameArn")
     def domain_name_arn(self) -> builtins.str:
-        '''The amazon resource name (ARN) of the domain name resource.'''
+        '''The ARN of the domain name.'''
         return typing.cast(builtins.str, jsii.get(self, "domainNameArn"))
 
     @domain_name_arn.setter
@@ -7687,6 +7693,7 @@ class CfnRoutingRule(
     @builtins.property
     @jsii.member(jsii_name="priority")
     def priority(self) -> jsii.Number:
+        '''The order in which API Gateway evaluates a rule.'''
         return typing.cast(jsii.Number, jsii.get(self, "priority"))
 
     @priority.setter
@@ -7713,10 +7720,11 @@ class CfnRoutingRule(
             stage: builtins.str,
             strip_base_path: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         ) -> None:
-            '''
-            :param api_id: 
-            :param stage: 
-            :param strip_base_path: 
+            '''Represents an InvokeApi action.
+
+            :param api_id: The API identifier of the target API.
+            :param stage: The name of the target stage.
+            :param strip_base_path: The strip base path setting. When true, API Gateway strips the incoming matched base path when forwarding the request to the target API.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-actioninvokeapi.html
             :exampleMetadata: fixture=_generated
@@ -7749,7 +7757,8 @@ class CfnRoutingRule(
 
         @builtins.property
         def api_id(self) -> builtins.str:
-            '''
+            '''The API identifier of the target API.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-actioninvokeapi.html#cfn-apigatewayv2-routingrule-actioninvokeapi-apiid
             '''
             result = self._values.get("api_id")
@@ -7758,7 +7767,8 @@ class CfnRoutingRule(
 
         @builtins.property
         def stage(self) -> builtins.str:
-            '''
+            '''The name of the target stage.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-actioninvokeapi.html#cfn-apigatewayv2-routingrule-actioninvokeapi-stage
             '''
             result = self._values.get("stage")
@@ -7769,7 +7779,10 @@ class CfnRoutingRule(
         def strip_base_path(
             self,
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''
+            '''The strip base path setting.
+
+            When true, API Gateway strips the incoming matched base path when forwarding the request to the target API.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-actioninvokeapi.html#cfn-apigatewayv2-routingrule-actioninvokeapi-stripbasepath
             '''
             result = self._values.get("strip_base_path")
@@ -7797,8 +7810,11 @@ class CfnRoutingRule(
             *,
             invoke_api: typing.Union[_IResolvable_da3f097b, typing.Union["CfnRoutingRule.ActionInvokeApiProperty", typing.Dict[builtins.str, typing.Any]]],
         ) -> None:
-            '''
-            :param invoke_api: 
+            '''Represents a routing rule action.
+
+            The only supported action is ``invokeApi`` .
+
+            :param invoke_api: Represents an InvokeApi action.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-action.html
             :exampleMetadata: fixture=_generated
@@ -7830,7 +7846,8 @@ class CfnRoutingRule(
         def invoke_api(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.ActionInvokeApiProperty"]:
-            '''
+            '''Represents an InvokeApi action.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-action.html#cfn-apigatewayv2-routingrule-action-invokeapi
             '''
             result = self._values.get("invoke_api")
@@ -7863,9 +7880,12 @@ class CfnRoutingRule(
             match_base_paths: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRoutingRule.MatchBasePathsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             match_headers: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRoutingRule.MatchHeadersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
-            '''
-            :param match_base_paths: 
-            :param match_headers: 
+            '''Represents a condition.
+
+            Conditions can contain up to two ``matchHeaders`` conditions and one ``matchBasePaths`` conditions. API Gateway evaluates header conditions and base path conditions together. You can only use AND between header and base path conditions.
+
+            :param match_base_paths: The base path to be matched.
+            :param match_headers: The headers to be matched.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-condition.html
             :exampleMetadata: fixture=_generated
@@ -7902,7 +7922,8 @@ class CfnRoutingRule(
         def match_base_paths(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.MatchBasePathsProperty"]]:
-            '''
+            '''The base path to be matched.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-condition.html#cfn-apigatewayv2-routingrule-condition-matchbasepaths
             '''
             result = self._values.get("match_base_paths")
@@ -7912,7 +7933,8 @@ class CfnRoutingRule(
         def match_headers(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.MatchHeadersProperty"]]:
-            '''
+            '''The headers to be matched.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-condition.html#cfn-apigatewayv2-routingrule-condition-matchheaders
             '''
             result = self._values.get("match_headers")
@@ -7936,8 +7958,9 @@ class CfnRoutingRule(
     )
     class MatchBasePathsProperty:
         def __init__(self, *, any_of: typing.Sequence[builtins.str]) -> None:
-            '''
-            :param any_of: 
+            '''Represents a ``MatchBasePaths`` condition.
+
+            :param any_of: The string of the case sensitive base path to be matched.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchbasepaths.html
             :exampleMetadata: fixture=_generated
@@ -7961,7 +7984,8 @@ class CfnRoutingRule(
 
         @builtins.property
         def any_of(self) -> typing.List[builtins.str]:
-            '''
+            '''The string of the case sensitive base path to be matched.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchbasepaths.html#cfn-apigatewayv2-routingrule-matchbasepaths-anyof
             '''
             result = self._values.get("any_of")
@@ -7986,9 +8010,10 @@ class CfnRoutingRule(
     )
     class MatchHeaderValueProperty:
         def __init__(self, *, header: builtins.str, value_glob: builtins.str) -> None:
-            '''
-            :param header: 
-            :param value_glob: 
+            '''Represents a ``MatchHeaderValue`` .
+
+            :param header: The case insensitive header name to be matched. The header name must be less than 40 characters and the only allowed characters are ``a-z`` , ``A-Z`` , ``0-9`` , and the following special characters: ``*?-!#$%&'.^_``|~.` .
+            :param value_glob: The case sensitive header glob value to be matched against entire header value. The header glob value must be less than 128 characters and the only allowed characters are ``a-z`` , ``A-Z`` , ``0-9`` , and the following special characters: ``*?-!#$%&'.^_``|~``. Wildcard matching is supported for header glob values but must be for``*prefix-match``,``suffix-match*``, or``*infix*-match` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchheadervalue.html
             :exampleMetadata: fixture=_generated
@@ -8015,7 +8040,10 @@ class CfnRoutingRule(
 
         @builtins.property
         def header(self) -> builtins.str:
-            '''
+            '''The case insensitive header name to be matched.
+
+            The header name must be less than 40 characters and the only allowed characters are ``a-z`` , ``A-Z`` , ``0-9`` , and the following special characters: ``*?-!#$%&'.^_``|~.` .
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchheadervalue.html#cfn-apigatewayv2-routingrule-matchheadervalue-header
             '''
             result = self._values.get("header")
@@ -8024,7 +8052,10 @@ class CfnRoutingRule(
 
         @builtins.property
         def value_glob(self) -> builtins.str:
-            '''
+            '''The case sensitive header glob value to be matched against entire header value.
+
+            The header glob value must be less than 128 characters and the only allowed characters are ``a-z`` , ``A-Z`` , ``0-9`` , and the following special characters: ``*?-!#$%&'.^_``|~``. Wildcard matching is supported for header glob values but must be for``*prefix-match``,``suffix-match*``, or``*infix*-match` .
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchheadervalue.html#cfn-apigatewayv2-routingrule-matchheadervalue-valueglob
             '''
             result = self._values.get("value_glob")
@@ -8053,8 +8084,9 @@ class CfnRoutingRule(
             *,
             any_of: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRoutingRule.MatchHeaderValueProperty", typing.Dict[builtins.str, typing.Any]]]]],
         ) -> None:
-            '''
-            :param any_of: 
+            '''Represents a ``MatchHeaders`` condition.
+
+            :param any_of: The header name and header value glob to be matched. The matchHeaders condition is matched if any of the header name and header value globs are matched.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchheaders.html
             :exampleMetadata: fixture=_generated
@@ -8083,7 +8115,10 @@ class CfnRoutingRule(
         def any_of(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.MatchHeaderValueProperty"]]]:
-            '''
+            '''The header name and header value glob to be matched.
+
+            The matchHeaders condition is matched if any of the header name and header value globs are matched.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchheaders.html#cfn-apigatewayv2-routingrule-matchheaders-anyof
             '''
             result = self._values.get("any_of")
@@ -8123,10 +8158,10 @@ class CfnRoutingRuleProps:
     ) -> None:
         '''Properties for defining a ``CfnRoutingRule``.
 
-        :param actions: 
-        :param conditions: 
-        :param domain_name_arn: The amazon resource name (ARN) of the domain name resource.
-        :param priority: 
+        :param actions: The resulting action based on matching a routing rules condition. Only InvokeApi is supported.
+        :param conditions: The conditions of the routing rule.
+        :param domain_name_arn: The ARN of the domain name.
+        :param priority: The order in which API Gateway evaluates a rule. Priority is evaluated from the lowest value to the highest value. Rules can't have the same priority. Priority values 1-1,000,000 are supported.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html
         :exampleMetadata: fixture=_generated
@@ -8179,7 +8214,10 @@ class CfnRoutingRuleProps:
     def actions(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnRoutingRule.ActionProperty]]]:
-        '''
+        '''The resulting action based on matching a routing rules condition.
+
+        Only InvokeApi is supported.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html#cfn-apigatewayv2-routingrule-actions
         '''
         result = self._values.get("actions")
@@ -8190,7 +8228,8 @@ class CfnRoutingRuleProps:
     def conditions(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnRoutingRule.ConditionProperty]]]:
-        '''
+        '''The conditions of the routing rule.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html#cfn-apigatewayv2-routingrule-conditions
         '''
         result = self._values.get("conditions")
@@ -8199,7 +8238,7 @@ class CfnRoutingRuleProps:
 
     @builtins.property
     def domain_name_arn(self) -> builtins.str:
-        '''The amazon resource name (ARN) of the domain name resource.
+        '''The ARN of the domain name.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html#cfn-apigatewayv2-routingrule-domainnamearn
         '''
@@ -8209,7 +8248,10 @@ class CfnRoutingRuleProps:
 
     @builtins.property
     def priority(self) -> jsii.Number:
-        '''
+        '''The order in which API Gateway evaluates a rule.
+
+        Priority is evaluated from the lowest value to the highest value. Rules can't have the same priority. Priority values 1-1,000,000 are supported.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html#cfn-apigatewayv2-routingrule-priority
         '''
         result = self._values.get("priority")

aws_cdk/aws_appconfig/__init__.py

@@ -382,6 +382,21 @@ The declaration order will be respected regardless of the approach used.
 > [!IMPORTANT]
 > If none of these options are utilized, there will not be any deployments.
 
+You can use customer managed key to encrypt a hosted configuration. For mora information, see [Data encryption at rest for AWS AppConfig](https://docs.aws.amazon.com/appconfig/latest/userguide/appconfig-security.html#appconfig-security-data-encryption).
+
+```python
+# application: appconfig.Application
+# kms_key: kms.Key
+
+
+appconfig.HostedConfiguration(self, "MyHostedConfiguration",
+    application=application,
+    content=appconfig.ConfigurationContent.from_inline_text("This is my configuration content."),
+    type=appconfig.ConfigurationType.FEATURE_FLAGS,
+    kms_key=kms_key
+)
+```
+
 ### SourcedConfiguration
 
 A sourced configuration represents configuration stored in any of the following:
@@ -5541,12 +5556,14 @@ class ConfigurationType(enum.Enum):
     Example::
 
         # application: appconfig.Application
+        # kms_key: kms.Key
         
         
         appconfig.HostedConfiguration(self, "MyHostedConfiguration",
             application=application,
             content=appconfig.ConfigurationContent.from_inline_text("This is my configuration content."),
-            type=appconfig.ConfigurationType.FEATURE_FLAGS
+            type=appconfig.ConfigurationType.FEATURE_FLAGS,
+            kms_key=kms_key
         )
     '''
 
@@ -6787,6 +6804,7 @@ class HostedConfigurationOptions(ConfigurationOptions):
         "validators": "validators",
         "application": "application",
         "content": "content",
+        "kms_key": "kmsKey",
         "latest_version_number": "latestVersionNumber",
         "version_label": "versionLabel",
     },
@@ -6805,6 +6823,7 @@ class HostedConfigurationProps(ConfigurationProps):
         validators: typing.Optional[typing.Sequence["IValidator"]] = None,
         application: "IApplication",
         content: ConfigurationContent,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
         latest_version_number: typing.Optional[jsii.Number] = None,
         version_label: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -6820,6 +6839,7 @@ class HostedConfigurationProps(ConfigurationProps):
         :param validators: The validators for the configuration. Default: - No validators.
         :param application: The application associated with the configuration.
         :param content: The content of the hosted configuration.
+        :param kms_key: The customer managed key to encrypt hosted configuration. Default: None
         :param latest_version_number: The latest version number of the hosted configuration. Default: - None.
         :param version_label: The version label of the hosted configuration. Default: - None.
 
@@ -6852,6 +6872,7 @@ class HostedConfigurationProps(ConfigurationProps):
             check_type(argname="argument validators", value=validators, expected_type=type_hints["validators"])
             check_type(argname="argument application", value=application, expected_type=type_hints["application"])
             check_type(argname="argument content", value=content, expected_type=type_hints["content"])
+            check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
             check_type(argname="argument latest_version_number", value=latest_version_number, expected_type=type_hints["latest_version_number"])
             check_type(argname="argument version_label", value=version_label, expected_type=type_hints["version_label"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -6874,6 +6895,8 @@ class HostedConfigurationProps(ConfigurationProps):
             self._values["type"] = type
         if validators is not None:
             self._values["validators"] = validators
+        if kms_key is not None:
+            self._values["kms_key"] = kms_key
         if latest_version_number is not None:
             self._values["latest_version_number"] = latest_version_number
         if version_label is not None:
@@ -6979,6 +7002,15 @@ class HostedConfigurationProps(ConfigurationProps):
         assert result is not None, "Required property 'content' is missing"
         return typing.cast(ConfigurationContent, result)
 
+    @builtins.property
+    def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''The customer managed key to encrypt hosted configuration.
+
+        :default: None
+        '''
+        result = self._values.get("kms_key")
+        return typing.cast(typing.Optional[_IKey_5f11635f], result)
+
     @builtins.property
     def latest_version_number(self) -> typing.Optional[jsii.Number]:
         '''The latest version number of the hosted configuration.
@@ -13156,6 +13188,7 @@ class HostedConfiguration(
         id: builtins.str,
         *,
         content: ConfigurationContent,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
         latest_version_number: typing.Optional[jsii.Number] = None,
         version_label: typing.Optional[builtins.str] = None,
         application: IApplication,
@@ -13172,6 +13205,7 @@ class HostedConfiguration(
         :param scope: -
         :param id: -
         :param content: The content of the hosted configuration.
+        :param kms_key: The customer managed key to encrypt hosted configuration. Default: None
         :param latest_version_number: The latest version number of the hosted configuration. Default: - None.
         :param version_label: The version label of the hosted configuration. Default: - None.
         :param application: The application associated with the configuration.
@@ -13190,6 +13224,7 @@ class HostedConfiguration(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = HostedConfigurationProps(
             content=content,
+            kms_key=kms_key,
             latest_version_number=latest_version_number,
             version_label=version_label,
             application=application,
@@ -14623,6 +14658,7 @@ def _typecheckingstub__7cba9d5464f3f4cbc208d892995245e5078fc2cc794651c71942035a9
     validators: typing.Optional[typing.Sequence[IValidator]] = None,
     application: IApplication,
     content: ConfigurationContent,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
     latest_version_number: typing.Optional[jsii.Number] = None,
     version_label: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -15840,6 +15876,7 @@ def _typecheckingstub__8e7eecc550d3d689f07534db869c7be67f00e08dcbf880bbb2656d019
     id: builtins.str,
     *,
     content: ConfigurationContent,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
     latest_version_number: typing.Optional[jsii.Number] = None,
     version_label: typing.Optional[builtins.str] = None,
     application: IApplication,

aws_cdk/aws_appsync/__init__.py

@@ -5782,9 +5782,9 @@ class CfnApiCache(
         :param api_id: The GraphQL API ID.
         :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
         :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
-        :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
+        :param at_rest_encryption_enabled: *This parameter has been deprecated* . At-rest encryption flag for cache. You cannot update this setting after creation.
         :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
-        :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
+        :param transit_encryption_enabled: *This parameter has been deprecated* . Transit encryption flag when connecting to cache. You cannot update this setting after creation.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e9d92b7b2abdac7341eb92f7ac10d2d67dd2700af68eaf42c72c47ffdaacc344)
@@ -5905,7 +5905,7 @@ class CfnApiCache(
     def at_rest_encryption_enabled(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''At-rest encryption flag for cache.'''
+        '''*This parameter has been deprecated* .'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "atRestEncryptionEnabled"))
 
     @at_rest_encryption_enabled.setter
@@ -5939,7 +5939,7 @@ class CfnApiCache(
     def transit_encryption_enabled(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Transit encryption flag when connecting to cache.'''
+        '''*This parameter has been deprecated* .'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "transitEncryptionEnabled"))
 
     @transit_encryption_enabled.setter
@@ -5984,9 +5984,9 @@ class CfnApiCacheProps:
         :param api_id: The GraphQL API ID.
         :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
         :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
-        :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
+        :param at_rest_encryption_enabled: *This parameter has been deprecated* . At-rest encryption flag for cache. You cannot update this setting after creation.
         :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
-        :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
+        :param transit_encryption_enabled: *This parameter has been deprecated* . Transit encryption flag when connecting to cache. You cannot update this setting after creation.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html
         :exampleMetadata: fixture=_generated
@@ -6102,9 +6102,9 @@ class CfnApiCacheProps:
     def at_rest_encryption_enabled(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''At-rest encryption flag for cache.
+        '''*This parameter has been deprecated* .
 
-        You cannot update this setting after creation.
+        At-rest encryption flag for cache. You cannot update this setting after creation.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-atrestencryptionenabled
         '''
@@ -6129,9 +6129,9 @@ class CfnApiCacheProps:
     def transit_encryption_enabled(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Transit encryption flag when connecting to cache.
+        '''*This parameter has been deprecated* .
 
-        You cannot update this setting after creation.
+        Transit encryption flag when connecting to cache. You cannot update this setting after creation.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-transitencryptionenabled
         '''