aws-cdk-lib 2.200.2__py3-none-any.whl → 2.202.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (62) hide show
  1. aws_cdk/__init__.py +129 -37
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.200.2.jsii.tgz → aws-cdk-lib@2.202.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_amazonmq/__init__.py +2 -3
  5. aws_cdk/aws_amplify/__init__.py +3 -3
  6. aws_cdk/aws_apigateway/__init__.py +21 -17
  7. aws_cdk/aws_apigatewayv2/__init__.py +87 -45
  8. aws_cdk/aws_appconfig/__init__.py +38 -1
  9. aws_cdk/aws_appsync/__init__.py +10 -10
  10. aws_cdk/aws_athena/__init__.py +227 -0
  11. aws_cdk/aws_autoscaling/__init__.py +38 -37
  12. aws_cdk/aws_bedrock/__init__.py +5108 -1571
  13. aws_cdk/aws_cloudfront/__init__.py +38 -38
  14. aws_cdk/aws_cloudfront/experimental/__init__.py +5 -0
  15. aws_cdk/aws_cloudtrail/__init__.py +178 -0
  16. aws_cdk/aws_cloudwatch/__init__.py +7 -3
  17. aws_cdk/aws_codepipeline_actions/__init__.py +746 -0
  18. aws_cdk/aws_connect/__init__.py +5 -5
  19. aws_cdk/aws_customerprofiles/__init__.py +377 -8
  20. aws_cdk/aws_datasync/__init__.py +189 -160
  21. aws_cdk/aws_datazone/__init__.py +512 -170
  22. aws_cdk/aws_deadline/__init__.py +32 -4
  23. aws_cdk/aws_dsql/__init__.py +150 -10
  24. aws_cdk/aws_ec2/__init__.py +1191 -304
  25. aws_cdk/aws_ecs/__init__.py +94 -11
  26. aws_cdk/aws_efs/__init__.py +103 -12
  27. aws_cdk/aws_eks/__init__.py +337 -168
  28. aws_cdk/aws_elasticloadbalancingv2/__init__.py +2 -2
  29. aws_cdk/aws_emr/__init__.py +10 -4
  30. aws_cdk/aws_entityresolution/__init__.py +25 -10
  31. aws_cdk/aws_evs/__init__.py +2204 -0
  32. aws_cdk/aws_fsx/__init__.py +7 -7
  33. aws_cdk/aws_glue/__init__.py +58 -24
  34. aws_cdk/aws_iam/__init__.py +3 -3
  35. aws_cdk/aws_kms/__init__.py +10 -4
  36. aws_cdk/aws_lambda/__init__.py +1167 -55
  37. aws_cdk/aws_lambda_event_sources/__init__.py +638 -1
  38. aws_cdk/aws_lightsail/__init__.py +17 -13
  39. aws_cdk/aws_logs/__init__.py +1 -0
  40. aws_cdk/aws_msk/__init__.py +21 -2
  41. aws_cdk/aws_mwaa/__init__.py +45 -2
  42. aws_cdk/aws_networkfirewall/__init__.py +562 -0
  43. aws_cdk/aws_opensearchservice/__init__.py +3 -3
  44. aws_cdk/aws_opsworkscm/__init__.py +9 -43
  45. aws_cdk/aws_rds/__init__.py +287 -87
  46. aws_cdk/aws_s3/__init__.py +39 -15
  47. aws_cdk/aws_sagemaker/__init__.py +223 -3
  48. aws_cdk/aws_securityhub/__init__.py +18 -34
  49. aws_cdk/aws_ssm/__init__.py +83 -1
  50. aws_cdk/aws_stepfunctions/__init__.py +235 -45
  51. aws_cdk/aws_synthetics/__init__.py +74 -0
  52. aws_cdk/aws_transfer/__init__.py +3 -3
  53. aws_cdk/aws_verifiedpermissions/__init__.py +17 -6
  54. aws_cdk/aws_wafv2/__init__.py +770 -7
  55. aws_cdk/cx_api/__init__.py +14 -0
  56. aws_cdk/pipelines/__init__.py +147 -38
  57. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/METADATA +3 -3
  58. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/RECORD +62 -61
  59. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/LICENSE +0 -0
  60. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/NOTICE +0 -0
  61. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/WHEEL +0 -0
  62. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/top_level.txt +0 -0
@@ -4186,7 +4186,7 @@ class CfnDomainName(
4186
4186
  :param domain_name: The custom domain name for your API in Amazon API Gateway. Uppercase letters and the underscore ( ``_`` ) character are not supported.
4187
4187
  :param domain_name_configurations: The domain name configurations.
4188
4188
  :param mutual_tls_authentication: The mutual TLS authentication configuration for a custom domain name.
4189
- :param routing_mode: Default: - "API_MAPPING_ONLY"
4189
+ :param routing_mode: The routing mode API Gateway uses to route traffic to your APIs. Default: - "API_MAPPING_ONLY"
4190
4190
  :param tags: The collection of tags associated with a domain name.
4191
4191
  '''
4192
4192
  if __debug__:
@@ -4325,6 +4325,7 @@ class CfnDomainName(
4325
4325
  @builtins.property
4326
4326
  @jsii.member(jsii_name="routingMode")
4327
4327
  def routing_mode(self) -> typing.Optional[builtins.str]:
4328
+ '''The routing mode API Gateway uses to route traffic to your APIs.'''
4328
4329
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "routingMode"))
4329
4330
 
4330
4331
  @routing_mode.setter
@@ -4605,7 +4606,7 @@ class CfnDomainNameProps:
4605
4606
  :param domain_name: The custom domain name for your API in Amazon API Gateway. Uppercase letters and the underscore ( ``_`` ) character are not supported.
4606
4607
  :param domain_name_configurations: The domain name configurations.
4607
4608
  :param mutual_tls_authentication: The mutual TLS authentication configuration for a custom domain name.
4608
- :param routing_mode: Default: - "API_MAPPING_ONLY"
4609
+ :param routing_mode: The routing mode API Gateway uses to route traffic to your APIs. Default: - "API_MAPPING_ONLY"
4609
4610
  :param tags: The collection of tags associated with a domain name.
4610
4611
 
4611
4612
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-domainname.html
@@ -4694,7 +4695,8 @@ class CfnDomainNameProps:
4694
4695
 
4695
4696
  @builtins.property
4696
4697
  def routing_mode(self) -> typing.Optional[builtins.str]:
4697
- '''
4698
+ '''The routing mode API Gateway uses to route traffic to your APIs.
4699
+
4698
4700
  :default: - "API_MAPPING_ONLY"
4699
4701
 
4700
4702
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-domainname.html#cfn-apigatewayv2-domainname-routingmode
@@ -7515,7 +7517,9 @@ class CfnRoutingRule(
7515
7517
  metaclass=jsii.JSIIMeta,
7516
7518
  jsii_type="aws-cdk-lib.aws_apigatewayv2.CfnRoutingRule",
7517
7519
  ):
7518
- '''Schema for AWS::ApiGatewayV2::RoutingRule.
7520
+ '''Represents a routing rule.
7521
+
7522
+ When the incoming request to a domain name matches the conditions for a rule, API Gateway invokes a stage of a target API. Supported only for REST APIs.
7519
7523
 
7520
7524
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html
7521
7525
  :cloudformationResource: AWS::ApiGatewayV2::RoutingRule
@@ -7566,10 +7570,10 @@ class CfnRoutingRule(
7566
7570
  '''
7567
7571
  :param scope: Scope in which this resource is defined.
7568
7572
  :param id: Construct identifier for this resource (unique in its scope).
7569
- :param actions:
7570
- :param conditions:
7571
- :param domain_name_arn: The amazon resource name (ARN) of the domain name resource.
7572
- :param priority:
7573
+ :param actions: The resulting action based on matching a routing rules condition. Only InvokeApi is supported.
7574
+ :param conditions: The conditions of the routing rule.
7575
+ :param domain_name_arn: The ARN of the domain name.
7576
+ :param priority: The order in which API Gateway evaluates a rule. Priority is evaluated from the lowest value to the highest value. Rules can't have the same priority. Priority values 1-1,000,000 are supported.
7573
7577
  '''
7574
7578
  if __debug__:
7575
7579
  type_hints = typing.get_type_hints(_typecheckingstub__9e261e580ed01a26eb5f3398b18b1c8e713162e6c87041c85e7920fdbe505572)
@@ -7617,7 +7621,7 @@ class CfnRoutingRule(
7617
7621
  @builtins.property
7618
7622
  @jsii.member(jsii_name="attrRoutingRuleArn")
7619
7623
  def attr_routing_rule_arn(self) -> builtins.str:
7620
- '''Amazon Resource Name (ARN) of the resource.
7624
+ '''Represents an Amazon Resource Name (ARN).
7621
7625
 
7622
7626
  :cloudformationAttribute: RoutingRuleArn
7623
7627
  '''
@@ -7626,7 +7630,7 @@ class CfnRoutingRule(
7626
7630
  @builtins.property
7627
7631
  @jsii.member(jsii_name="attrRoutingRuleId")
7628
7632
  def attr_routing_rule_id(self) -> builtins.str:
7629
- '''RoutingRule Id generated by service.
7633
+ '''The identifier.
7630
7634
 
7631
7635
  :cloudformationAttribute: RoutingRuleId
7632
7636
  '''
@@ -7642,6 +7646,7 @@ class CfnRoutingRule(
7642
7646
  def actions(
7643
7647
  self,
7644
7648
  ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.ActionProperty"]]]:
7649
+ '''The resulting action based on matching a routing rules condition.'''
7645
7650
  return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.ActionProperty"]]], jsii.get(self, "actions"))
7646
7651
 
7647
7652
  @actions.setter
@@ -7659,6 +7664,7 @@ class CfnRoutingRule(
7659
7664
  def conditions(
7660
7665
  self,
7661
7666
  ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.ConditionProperty"]]]:
7667
+ '''The conditions of the routing rule.'''
7662
7668
  return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.ConditionProperty"]]], jsii.get(self, "conditions"))
7663
7669
 
7664
7670
  @conditions.setter
@@ -7674,7 +7680,7 @@ class CfnRoutingRule(
7674
7680
  @builtins.property
7675
7681
  @jsii.member(jsii_name="domainNameArn")
7676
7682
  def domain_name_arn(self) -> builtins.str:
7677
- '''The amazon resource name (ARN) of the domain name resource.'''
7683
+ '''The ARN of the domain name.'''
7678
7684
  return typing.cast(builtins.str, jsii.get(self, "domainNameArn"))
7679
7685
 
7680
7686
  @domain_name_arn.setter
@@ -7687,6 +7693,7 @@ class CfnRoutingRule(
7687
7693
  @builtins.property
7688
7694
  @jsii.member(jsii_name="priority")
7689
7695
  def priority(self) -> jsii.Number:
7696
+ '''The order in which API Gateway evaluates a rule.'''
7690
7697
  return typing.cast(jsii.Number, jsii.get(self, "priority"))
7691
7698
 
7692
7699
  @priority.setter
@@ -7713,10 +7720,11 @@ class CfnRoutingRule(
7713
7720
  stage: builtins.str,
7714
7721
  strip_base_path: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
7715
7722
  ) -> None:
7716
- '''
7717
- :param api_id:
7718
- :param stage:
7719
- :param strip_base_path:
7723
+ '''Represents an InvokeApi action.
7724
+
7725
+ :param api_id: The API identifier of the target API.
7726
+ :param stage: The name of the target stage.
7727
+ :param strip_base_path: The strip base path setting. When true, API Gateway strips the incoming matched base path when forwarding the request to the target API.
7720
7728
 
7721
7729
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-actioninvokeapi.html
7722
7730
  :exampleMetadata: fixture=_generated
@@ -7749,7 +7757,8 @@ class CfnRoutingRule(
7749
7757
 
7750
7758
  @builtins.property
7751
7759
  def api_id(self) -> builtins.str:
7752
- '''
7760
+ '''The API identifier of the target API.
7761
+
7753
7762
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-actioninvokeapi.html#cfn-apigatewayv2-routingrule-actioninvokeapi-apiid
7754
7763
  '''
7755
7764
  result = self._values.get("api_id")
@@ -7758,7 +7767,8 @@ class CfnRoutingRule(
7758
7767
 
7759
7768
  @builtins.property
7760
7769
  def stage(self) -> builtins.str:
7761
- '''
7770
+ '''The name of the target stage.
7771
+
7762
7772
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-actioninvokeapi.html#cfn-apigatewayv2-routingrule-actioninvokeapi-stage
7763
7773
  '''
7764
7774
  result = self._values.get("stage")
@@ -7769,7 +7779,10 @@ class CfnRoutingRule(
7769
7779
  def strip_base_path(
7770
7780
  self,
7771
7781
  ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
7772
- '''
7782
+ '''The strip base path setting.
7783
+
7784
+ When true, API Gateway strips the incoming matched base path when forwarding the request to the target API.
7785
+
7773
7786
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-actioninvokeapi.html#cfn-apigatewayv2-routingrule-actioninvokeapi-stripbasepath
7774
7787
  '''
7775
7788
  result = self._values.get("strip_base_path")
@@ -7797,8 +7810,11 @@ class CfnRoutingRule(
7797
7810
  *,
7798
7811
  invoke_api: typing.Union[_IResolvable_da3f097b, typing.Union["CfnRoutingRule.ActionInvokeApiProperty", typing.Dict[builtins.str, typing.Any]]],
7799
7812
  ) -> None:
7800
- '''
7801
- :param invoke_api:
7813
+ '''Represents a routing rule action.
7814
+
7815
+ The only supported action is ``invokeApi`` .
7816
+
7817
+ :param invoke_api: Represents an InvokeApi action.
7802
7818
 
7803
7819
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-action.html
7804
7820
  :exampleMetadata: fixture=_generated
@@ -7830,7 +7846,8 @@ class CfnRoutingRule(
7830
7846
  def invoke_api(
7831
7847
  self,
7832
7848
  ) -> typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.ActionInvokeApiProperty"]:
7833
- '''
7849
+ '''Represents an InvokeApi action.
7850
+
7834
7851
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-action.html#cfn-apigatewayv2-routingrule-action-invokeapi
7835
7852
  '''
7836
7853
  result = self._values.get("invoke_api")
@@ -7863,9 +7880,12 @@ class CfnRoutingRule(
7863
7880
  match_base_paths: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRoutingRule.MatchBasePathsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
7864
7881
  match_headers: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRoutingRule.MatchHeadersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
7865
7882
  ) -> None:
7866
- '''
7867
- :param match_base_paths:
7868
- :param match_headers:
7883
+ '''Represents a condition.
7884
+
7885
+ Conditions can contain up to two ``matchHeaders`` conditions and one ``matchBasePaths`` conditions. API Gateway evaluates header conditions and base path conditions together. You can only use AND between header and base path conditions.
7886
+
7887
+ :param match_base_paths: The base path to be matched.
7888
+ :param match_headers: The headers to be matched.
7869
7889
 
7870
7890
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-condition.html
7871
7891
  :exampleMetadata: fixture=_generated
@@ -7902,7 +7922,8 @@ class CfnRoutingRule(
7902
7922
  def match_base_paths(
7903
7923
  self,
7904
7924
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.MatchBasePathsProperty"]]:
7905
- '''
7925
+ '''The base path to be matched.
7926
+
7906
7927
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-condition.html#cfn-apigatewayv2-routingrule-condition-matchbasepaths
7907
7928
  '''
7908
7929
  result = self._values.get("match_base_paths")
@@ -7912,7 +7933,8 @@ class CfnRoutingRule(
7912
7933
  def match_headers(
7913
7934
  self,
7914
7935
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.MatchHeadersProperty"]]:
7915
- '''
7936
+ '''The headers to be matched.
7937
+
7916
7938
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-condition.html#cfn-apigatewayv2-routingrule-condition-matchheaders
7917
7939
  '''
7918
7940
  result = self._values.get("match_headers")
@@ -7936,8 +7958,9 @@ class CfnRoutingRule(
7936
7958
  )
7937
7959
  class MatchBasePathsProperty:
7938
7960
  def __init__(self, *, any_of: typing.Sequence[builtins.str]) -> None:
7939
- '''
7940
- :param any_of:
7961
+ '''Represents a ``MatchBasePaths`` condition.
7962
+
7963
+ :param any_of: The string of the case sensitive base path to be matched.
7941
7964
 
7942
7965
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchbasepaths.html
7943
7966
  :exampleMetadata: fixture=_generated
@@ -7961,7 +7984,8 @@ class CfnRoutingRule(
7961
7984
 
7962
7985
  @builtins.property
7963
7986
  def any_of(self) -> typing.List[builtins.str]:
7964
- '''
7987
+ '''The string of the case sensitive base path to be matched.
7988
+
7965
7989
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchbasepaths.html#cfn-apigatewayv2-routingrule-matchbasepaths-anyof
7966
7990
  '''
7967
7991
  result = self._values.get("any_of")
@@ -7986,9 +8010,10 @@ class CfnRoutingRule(
7986
8010
  )
7987
8011
  class MatchHeaderValueProperty:
7988
8012
  def __init__(self, *, header: builtins.str, value_glob: builtins.str) -> None:
7989
- '''
7990
- :param header:
7991
- :param value_glob:
8013
+ '''Represents a ``MatchHeaderValue`` .
8014
+
8015
+ :param header: The case insensitive header name to be matched. The header name must be less than 40 characters and the only allowed characters are ``a-z`` , ``A-Z`` , ``0-9`` , and the following special characters: ``*?-!#$%&'.^_``|~.` .
8016
+ :param value_glob: The case sensitive header glob value to be matched against entire header value. The header glob value must be less than 128 characters and the only allowed characters are ``a-z`` , ``A-Z`` , ``0-9`` , and the following special characters: ``*?-!#$%&'.^_``|~``. Wildcard matching is supported for header glob values but must be for``*prefix-match``,``suffix-match*``, or``*infix*-match` .
7992
8017
 
7993
8018
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchheadervalue.html
7994
8019
  :exampleMetadata: fixture=_generated
@@ -8015,7 +8040,10 @@ class CfnRoutingRule(
8015
8040
 
8016
8041
  @builtins.property
8017
8042
  def header(self) -> builtins.str:
8018
- '''
8043
+ '''The case insensitive header name to be matched.
8044
+
8045
+ The header name must be less than 40 characters and the only allowed characters are ``a-z`` , ``A-Z`` , ``0-9`` , and the following special characters: ``*?-!#$%&'.^_``|~.` .
8046
+
8019
8047
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchheadervalue.html#cfn-apigatewayv2-routingrule-matchheadervalue-header
8020
8048
  '''
8021
8049
  result = self._values.get("header")
@@ -8024,7 +8052,10 @@ class CfnRoutingRule(
8024
8052
 
8025
8053
  @builtins.property
8026
8054
  def value_glob(self) -> builtins.str:
8027
- '''
8055
+ '''The case sensitive header glob value to be matched against entire header value.
8056
+
8057
+ The header glob value must be less than 128 characters and the only allowed characters are ``a-z`` , ``A-Z`` , ``0-9`` , and the following special characters: ``*?-!#$%&'.^_``|~``. Wildcard matching is supported for header glob values but must be for``*prefix-match``,``suffix-match*``, or``*infix*-match` .
8058
+
8028
8059
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchheadervalue.html#cfn-apigatewayv2-routingrule-matchheadervalue-valueglob
8029
8060
  '''
8030
8061
  result = self._values.get("value_glob")
@@ -8053,8 +8084,9 @@ class CfnRoutingRule(
8053
8084
  *,
8054
8085
  any_of: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRoutingRule.MatchHeaderValueProperty", typing.Dict[builtins.str, typing.Any]]]]],
8055
8086
  ) -> None:
8056
- '''
8057
- :param any_of:
8087
+ '''Represents a ``MatchHeaders`` condition.
8088
+
8089
+ :param any_of: The header name and header value glob to be matched. The matchHeaders condition is matched if any of the header name and header value globs are matched.
8058
8090
 
8059
8091
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchheaders.html
8060
8092
  :exampleMetadata: fixture=_generated
@@ -8083,7 +8115,10 @@ class CfnRoutingRule(
8083
8115
  def any_of(
8084
8116
  self,
8085
8117
  ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingRule.MatchHeaderValueProperty"]]]:
8086
- '''
8118
+ '''The header name and header value glob to be matched.
8119
+
8120
+ The matchHeaders condition is matched if any of the header name and header value globs are matched.
8121
+
8087
8122
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-routingrule-matchheaders.html#cfn-apigatewayv2-routingrule-matchheaders-anyof
8088
8123
  '''
8089
8124
  result = self._values.get("any_of")
@@ -8123,10 +8158,10 @@ class CfnRoutingRuleProps:
8123
8158
  ) -> None:
8124
8159
  '''Properties for defining a ``CfnRoutingRule``.
8125
8160
 
8126
- :param actions:
8127
- :param conditions:
8128
- :param domain_name_arn: The amazon resource name (ARN) of the domain name resource.
8129
- :param priority:
8161
+ :param actions: The resulting action based on matching a routing rules condition. Only InvokeApi is supported.
8162
+ :param conditions: The conditions of the routing rule.
8163
+ :param domain_name_arn: The ARN of the domain name.
8164
+ :param priority: The order in which API Gateway evaluates a rule. Priority is evaluated from the lowest value to the highest value. Rules can't have the same priority. Priority values 1-1,000,000 are supported.
8130
8165
 
8131
8166
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html
8132
8167
  :exampleMetadata: fixture=_generated
@@ -8179,7 +8214,10 @@ class CfnRoutingRuleProps:
8179
8214
  def actions(
8180
8215
  self,
8181
8216
  ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnRoutingRule.ActionProperty]]]:
8182
- '''
8217
+ '''The resulting action based on matching a routing rules condition.
8218
+
8219
+ Only InvokeApi is supported.
8220
+
8183
8221
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html#cfn-apigatewayv2-routingrule-actions
8184
8222
  '''
8185
8223
  result = self._values.get("actions")
@@ -8190,7 +8228,8 @@ class CfnRoutingRuleProps:
8190
8228
  def conditions(
8191
8229
  self,
8192
8230
  ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnRoutingRule.ConditionProperty]]]:
8193
- '''
8231
+ '''The conditions of the routing rule.
8232
+
8194
8233
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html#cfn-apigatewayv2-routingrule-conditions
8195
8234
  '''
8196
8235
  result = self._values.get("conditions")
@@ -8199,7 +8238,7 @@ class CfnRoutingRuleProps:
8199
8238
 
8200
8239
  @builtins.property
8201
8240
  def domain_name_arn(self) -> builtins.str:
8202
- '''The amazon resource name (ARN) of the domain name resource.
8241
+ '''The ARN of the domain name.
8203
8242
 
8204
8243
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html#cfn-apigatewayv2-routingrule-domainnamearn
8205
8244
  '''
@@ -8209,7 +8248,10 @@ class CfnRoutingRuleProps:
8209
8248
 
8210
8249
  @builtins.property
8211
8250
  def priority(self) -> jsii.Number:
8212
- '''
8251
+ '''The order in which API Gateway evaluates a rule.
8252
+
8253
+ Priority is evaluated from the lowest value to the highest value. Rules can't have the same priority. Priority values 1-1,000,000 are supported.
8254
+
8213
8255
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-routingrule.html#cfn-apigatewayv2-routingrule-priority
8214
8256
  '''
8215
8257
  result = self._values.get("priority")
@@ -382,6 +382,21 @@ The declaration order will be respected regardless of the approach used.
382
382
  > [!IMPORTANT]
383
383
  > If none of these options are utilized, there will not be any deployments.
384
384
 
385
+ You can use customer managed key to encrypt a hosted configuration. For mora information, see [Data encryption at rest for AWS AppConfig](https://docs.aws.amazon.com/appconfig/latest/userguide/appconfig-security.html#appconfig-security-data-encryption).
386
+
387
+ ```python
388
+ # application: appconfig.Application
389
+ # kms_key: kms.Key
390
+
391
+
392
+ appconfig.HostedConfiguration(self, "MyHostedConfiguration",
393
+ application=application,
394
+ content=appconfig.ConfigurationContent.from_inline_text("This is my configuration content."),
395
+ type=appconfig.ConfigurationType.FEATURE_FLAGS,
396
+ kms_key=kms_key
397
+ )
398
+ ```
399
+
385
400
  ### SourcedConfiguration
386
401
 
387
402
  A sourced configuration represents configuration stored in any of the following:
@@ -5541,12 +5556,14 @@ class ConfigurationType(enum.Enum):
5541
5556
  Example::
5542
5557
 
5543
5558
  # application: appconfig.Application
5559
+ # kms_key: kms.Key
5544
5560
 
5545
5561
 
5546
5562
  appconfig.HostedConfiguration(self, "MyHostedConfiguration",
5547
5563
  application=application,
5548
5564
  content=appconfig.ConfigurationContent.from_inline_text("This is my configuration content."),
5549
- type=appconfig.ConfigurationType.FEATURE_FLAGS
5565
+ type=appconfig.ConfigurationType.FEATURE_FLAGS,
5566
+ kms_key=kms_key
5550
5567
  )
5551
5568
  '''
5552
5569
 
@@ -6787,6 +6804,7 @@ class HostedConfigurationOptions(ConfigurationOptions):
6787
6804
  "validators": "validators",
6788
6805
  "application": "application",
6789
6806
  "content": "content",
6807
+ "kms_key": "kmsKey",
6790
6808
  "latest_version_number": "latestVersionNumber",
6791
6809
  "version_label": "versionLabel",
6792
6810
  },
@@ -6805,6 +6823,7 @@ class HostedConfigurationProps(ConfigurationProps):
6805
6823
  validators: typing.Optional[typing.Sequence["IValidator"]] = None,
6806
6824
  application: "IApplication",
6807
6825
  content: ConfigurationContent,
6826
+ kms_key: typing.Optional[_IKey_5f11635f] = None,
6808
6827
  latest_version_number: typing.Optional[jsii.Number] = None,
6809
6828
  version_label: typing.Optional[builtins.str] = None,
6810
6829
  ) -> None:
@@ -6820,6 +6839,7 @@ class HostedConfigurationProps(ConfigurationProps):
6820
6839
  :param validators: The validators for the configuration. Default: - No validators.
6821
6840
  :param application: The application associated with the configuration.
6822
6841
  :param content: The content of the hosted configuration.
6842
+ :param kms_key: The customer managed key to encrypt hosted configuration. Default: None
6823
6843
  :param latest_version_number: The latest version number of the hosted configuration. Default: - None.
6824
6844
  :param version_label: The version label of the hosted configuration. Default: - None.
6825
6845
 
@@ -6852,6 +6872,7 @@ class HostedConfigurationProps(ConfigurationProps):
6852
6872
  check_type(argname="argument validators", value=validators, expected_type=type_hints["validators"])
6853
6873
  check_type(argname="argument application", value=application, expected_type=type_hints["application"])
6854
6874
  check_type(argname="argument content", value=content, expected_type=type_hints["content"])
6875
+ check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
6855
6876
  check_type(argname="argument latest_version_number", value=latest_version_number, expected_type=type_hints["latest_version_number"])
6856
6877
  check_type(argname="argument version_label", value=version_label, expected_type=type_hints["version_label"])
6857
6878
  self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -6874,6 +6895,8 @@ class HostedConfigurationProps(ConfigurationProps):
6874
6895
  self._values["type"] = type
6875
6896
  if validators is not None:
6876
6897
  self._values["validators"] = validators
6898
+ if kms_key is not None:
6899
+ self._values["kms_key"] = kms_key
6877
6900
  if latest_version_number is not None:
6878
6901
  self._values["latest_version_number"] = latest_version_number
6879
6902
  if version_label is not None:
@@ -6979,6 +7002,15 @@ class HostedConfigurationProps(ConfigurationProps):
6979
7002
  assert result is not None, "Required property 'content' is missing"
6980
7003
  return typing.cast(ConfigurationContent, result)
6981
7004
 
7005
+ @builtins.property
7006
+ def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
7007
+ '''The customer managed key to encrypt hosted configuration.
7008
+
7009
+ :default: None
7010
+ '''
7011
+ result = self._values.get("kms_key")
7012
+ return typing.cast(typing.Optional[_IKey_5f11635f], result)
7013
+
6982
7014
  @builtins.property
6983
7015
  def latest_version_number(self) -> typing.Optional[jsii.Number]:
6984
7016
  '''The latest version number of the hosted configuration.
@@ -13156,6 +13188,7 @@ class HostedConfiguration(
13156
13188
  id: builtins.str,
13157
13189
  *,
13158
13190
  content: ConfigurationContent,
13191
+ kms_key: typing.Optional[_IKey_5f11635f] = None,
13159
13192
  latest_version_number: typing.Optional[jsii.Number] = None,
13160
13193
  version_label: typing.Optional[builtins.str] = None,
13161
13194
  application: IApplication,
@@ -13172,6 +13205,7 @@ class HostedConfiguration(
13172
13205
  :param scope: -
13173
13206
  :param id: -
13174
13207
  :param content: The content of the hosted configuration.
13208
+ :param kms_key: The customer managed key to encrypt hosted configuration. Default: None
13175
13209
  :param latest_version_number: The latest version number of the hosted configuration. Default: - None.
13176
13210
  :param version_label: The version label of the hosted configuration. Default: - None.
13177
13211
  :param application: The application associated with the configuration.
@@ -13190,6 +13224,7 @@ class HostedConfiguration(
13190
13224
  check_type(argname="argument id", value=id, expected_type=type_hints["id"])
13191
13225
  props = HostedConfigurationProps(
13192
13226
  content=content,
13227
+ kms_key=kms_key,
13193
13228
  latest_version_number=latest_version_number,
13194
13229
  version_label=version_label,
13195
13230
  application=application,
@@ -14623,6 +14658,7 @@ def _typecheckingstub__7cba9d5464f3f4cbc208d892995245e5078fc2cc794651c71942035a9
14623
14658
  validators: typing.Optional[typing.Sequence[IValidator]] = None,
14624
14659
  application: IApplication,
14625
14660
  content: ConfigurationContent,
14661
+ kms_key: typing.Optional[_IKey_5f11635f] = None,
14626
14662
  latest_version_number: typing.Optional[jsii.Number] = None,
14627
14663
  version_label: typing.Optional[builtins.str] = None,
14628
14664
  ) -> None:
@@ -15840,6 +15876,7 @@ def _typecheckingstub__8e7eecc550d3d689f07534db869c7be67f00e08dcbf880bbb2656d019
15840
15876
  id: builtins.str,
15841
15877
  *,
15842
15878
  content: ConfigurationContent,
15879
+ kms_key: typing.Optional[_IKey_5f11635f] = None,
15843
15880
  latest_version_number: typing.Optional[jsii.Number] = None,
15844
15881
  version_label: typing.Optional[builtins.str] = None,
15845
15882
  application: IApplication,
@@ -5782,9 +5782,9 @@ class CfnApiCache(
5782
5782
  :param api_id: The GraphQL API ID.
5783
5783
  :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
5784
5784
  :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
5785
- :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
5785
+ :param at_rest_encryption_enabled: *This parameter has been deprecated* . At-rest encryption flag for cache. You cannot update this setting after creation.
5786
5786
  :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
5787
- :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
5787
+ :param transit_encryption_enabled: *This parameter has been deprecated* . Transit encryption flag when connecting to cache. You cannot update this setting after creation.
5788
5788
  '''
5789
5789
  if __debug__:
5790
5790
  type_hints = typing.get_type_hints(_typecheckingstub__e9d92b7b2abdac7341eb92f7ac10d2d67dd2700af68eaf42c72c47ffdaacc344)
@@ -5905,7 +5905,7 @@ class CfnApiCache(
5905
5905
  def at_rest_encryption_enabled(
5906
5906
  self,
5907
5907
  ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
5908
- '''At-rest encryption flag for cache.'''
5908
+ '''*This parameter has been deprecated* .'''
5909
5909
  return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "atRestEncryptionEnabled"))
5910
5910
 
5911
5911
  @at_rest_encryption_enabled.setter
@@ -5939,7 +5939,7 @@ class CfnApiCache(
5939
5939
  def transit_encryption_enabled(
5940
5940
  self,
5941
5941
  ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
5942
- '''Transit encryption flag when connecting to cache.'''
5942
+ '''*This parameter has been deprecated* .'''
5943
5943
  return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "transitEncryptionEnabled"))
5944
5944
 
5945
5945
  @transit_encryption_enabled.setter
@@ -5984,9 +5984,9 @@ class CfnApiCacheProps:
5984
5984
  :param api_id: The GraphQL API ID.
5985
5985
  :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
5986
5986
  :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
5987
- :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
5987
+ :param at_rest_encryption_enabled: *This parameter has been deprecated* . At-rest encryption flag for cache. You cannot update this setting after creation.
5988
5988
  :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
5989
- :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
5989
+ :param transit_encryption_enabled: *This parameter has been deprecated* . Transit encryption flag when connecting to cache. You cannot update this setting after creation.
5990
5990
 
5991
5991
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html
5992
5992
  :exampleMetadata: fixture=_generated
@@ -6102,9 +6102,9 @@ class CfnApiCacheProps:
6102
6102
  def at_rest_encryption_enabled(
6103
6103
  self,
6104
6104
  ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
6105
- '''At-rest encryption flag for cache.
6105
+ '''*This parameter has been deprecated* .
6106
6106
 
6107
- You cannot update this setting after creation.
6107
+ At-rest encryption flag for cache. You cannot update this setting after creation.
6108
6108
 
6109
6109
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-atrestencryptionenabled
6110
6110
  '''
@@ -6129,9 +6129,9 @@ class CfnApiCacheProps:
6129
6129
  def transit_encryption_enabled(
6130
6130
  self,
6131
6131
  ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
6132
- '''Transit encryption flag when connecting to cache.
6132
+ '''*This parameter has been deprecated* .
6133
6133
 
6134
- You cannot update this setting after creation.
6134
+ Transit encryption flag when connecting to cache. You cannot update this setting after creation.
6135
6135
 
6136
6136
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-transitencryptionenabled
6137
6137
  '''