aws-cdk-lib 2.200.2__py3-none-any.whl → 2.202.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (62) hide show
  1. aws_cdk/__init__.py +129 -37
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.200.2.jsii.tgz → aws-cdk-lib@2.202.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_amazonmq/__init__.py +2 -3
  5. aws_cdk/aws_amplify/__init__.py +3 -3
  6. aws_cdk/aws_apigateway/__init__.py +21 -17
  7. aws_cdk/aws_apigatewayv2/__init__.py +87 -45
  8. aws_cdk/aws_appconfig/__init__.py +38 -1
  9. aws_cdk/aws_appsync/__init__.py +10 -10
  10. aws_cdk/aws_athena/__init__.py +227 -0
  11. aws_cdk/aws_autoscaling/__init__.py +38 -37
  12. aws_cdk/aws_bedrock/__init__.py +5108 -1571
  13. aws_cdk/aws_cloudfront/__init__.py +38 -38
  14. aws_cdk/aws_cloudfront/experimental/__init__.py +5 -0
  15. aws_cdk/aws_cloudtrail/__init__.py +178 -0
  16. aws_cdk/aws_cloudwatch/__init__.py +7 -3
  17. aws_cdk/aws_codepipeline_actions/__init__.py +746 -0
  18. aws_cdk/aws_connect/__init__.py +5 -5
  19. aws_cdk/aws_customerprofiles/__init__.py +377 -8
  20. aws_cdk/aws_datasync/__init__.py +189 -160
  21. aws_cdk/aws_datazone/__init__.py +512 -170
  22. aws_cdk/aws_deadline/__init__.py +32 -4
  23. aws_cdk/aws_dsql/__init__.py +150 -10
  24. aws_cdk/aws_ec2/__init__.py +1191 -304
  25. aws_cdk/aws_ecs/__init__.py +94 -11
  26. aws_cdk/aws_efs/__init__.py +103 -12
  27. aws_cdk/aws_eks/__init__.py +337 -168
  28. aws_cdk/aws_elasticloadbalancingv2/__init__.py +2 -2
  29. aws_cdk/aws_emr/__init__.py +10 -4
  30. aws_cdk/aws_entityresolution/__init__.py +25 -10
  31. aws_cdk/aws_evs/__init__.py +2204 -0
  32. aws_cdk/aws_fsx/__init__.py +7 -7
  33. aws_cdk/aws_glue/__init__.py +58 -24
  34. aws_cdk/aws_iam/__init__.py +3 -3
  35. aws_cdk/aws_kms/__init__.py +10 -4
  36. aws_cdk/aws_lambda/__init__.py +1167 -55
  37. aws_cdk/aws_lambda_event_sources/__init__.py +638 -1
  38. aws_cdk/aws_lightsail/__init__.py +17 -13
  39. aws_cdk/aws_logs/__init__.py +1 -0
  40. aws_cdk/aws_msk/__init__.py +21 -2
  41. aws_cdk/aws_mwaa/__init__.py +45 -2
  42. aws_cdk/aws_networkfirewall/__init__.py +562 -0
  43. aws_cdk/aws_opensearchservice/__init__.py +3 -3
  44. aws_cdk/aws_opsworkscm/__init__.py +9 -43
  45. aws_cdk/aws_rds/__init__.py +287 -87
  46. aws_cdk/aws_s3/__init__.py +39 -15
  47. aws_cdk/aws_sagemaker/__init__.py +223 -3
  48. aws_cdk/aws_securityhub/__init__.py +18 -34
  49. aws_cdk/aws_ssm/__init__.py +83 -1
  50. aws_cdk/aws_stepfunctions/__init__.py +235 -45
  51. aws_cdk/aws_synthetics/__init__.py +74 -0
  52. aws_cdk/aws_transfer/__init__.py +3 -3
  53. aws_cdk/aws_verifiedpermissions/__init__.py +17 -6
  54. aws_cdk/aws_wafv2/__init__.py +770 -7
  55. aws_cdk/cx_api/__init__.py +14 -0
  56. aws_cdk/pipelines/__init__.py +147 -38
  57. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/METADATA +3 -3
  58. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/RECORD +62 -61
  59. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/LICENSE +0 -0
  60. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/NOTICE +0 -0
  61. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/WHEEL +0 -0
  62. {aws_cdk_lib-2.200.2.dist-info → aws_cdk_lib-2.202.0.dist-info}/top_level.txt +0 -0
@@ -1569,6 +1569,12 @@ class CfnWorkGroup(
1569
1569
  selected_engine_version="selectedEngineVersion"
1570
1570
  ),
1571
1571
  execution_role="executionRole",
1572
+ managed_query_results_configuration=athena.CfnWorkGroup.ManagedQueryResultsConfigurationProperty(
1573
+ enabled=False,
1574
+ encryption_configuration=athena.CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty(
1575
+ kms_key="kmsKey"
1576
+ )
1577
+ ),
1572
1578
  publish_cloud_watch_metrics_enabled=False,
1573
1579
  requester_pays_enabled=False,
1574
1580
  result_configuration=athena.CfnWorkGroup.ResultConfigurationProperty(
@@ -1597,6 +1603,12 @@ class CfnWorkGroup(
1597
1603
  selected_engine_version="selectedEngineVersion"
1598
1604
  ),
1599
1605
  execution_role="executionRole",
1606
+ managed_query_results_configuration=athena.CfnWorkGroup.ManagedQueryResultsConfigurationProperty(
1607
+ enabled=False,
1608
+ encryption_configuration=athena.CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty(
1609
+ kms_key="kmsKey"
1610
+ )
1611
+ ),
1600
1612
  publish_cloud_watch_metrics_enabled=False,
1601
1613
  remove_bytes_scanned_cutoff_per_query=False,
1602
1614
  remove_customer_content_encryption_configuration=False,
@@ -2113,6 +2125,142 @@ class CfnWorkGroup(
2113
2125
  k + "=" + repr(v) for k, v in self._values.items()
2114
2126
  )
2115
2127
 
2128
+ @jsii.data_type(
2129
+ jsii_type="aws-cdk-lib.aws_athena.CfnWorkGroup.ManagedQueryResultsConfigurationProperty",
2130
+ jsii_struct_bases=[],
2131
+ name_mapping={
2132
+ "enabled": "enabled",
2133
+ "encryption_configuration": "encryptionConfiguration",
2134
+ },
2135
+ )
2136
+ class ManagedQueryResultsConfigurationProperty:
2137
+ def __init__(
2138
+ self,
2139
+ *,
2140
+ enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
2141
+ encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
2142
+ ) -> None:
2143
+ '''The configuration for storing results in Athena owned storage, which includes whether this feature is enabled;
2144
+
2145
+ whether encryption configuration, if any, is used for encrypting query results.
2146
+
2147
+ :param enabled: If set to true, allows you to store query results in Athena owned storage. If set to false, workgroup member stores query results in location specified under ``ResultConfiguration$OutputLocation`` . The default is false. A workgroup cannot have the ``ResultConfiguration$OutputLocation`` parameter when you set this field to true.
2148
+ :param encryption_configuration: If you encrypt query and calculation results in Athena owned storage, this field indicates the encryption option (for example, SSE_KMS or CSE_KMS) and key information.
2149
+
2150
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedqueryresultsconfiguration.html
2151
+ :exampleMetadata: fixture=_generated
2152
+
2153
+ Example::
2154
+
2155
+ # The code below shows an example of how to instantiate this type.
2156
+ # The values are placeholders you should change.
2157
+ from aws_cdk import aws_athena as athena
2158
+
2159
+ managed_query_results_configuration_property = athena.CfnWorkGroup.ManagedQueryResultsConfigurationProperty(
2160
+ enabled=False,
2161
+ encryption_configuration=athena.CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty(
2162
+ kms_key="kmsKey"
2163
+ )
2164
+ )
2165
+ '''
2166
+ if __debug__:
2167
+ type_hints = typing.get_type_hints(_typecheckingstub__f6c4d2e9be468cb69e158be7cc0f67bd537760da2f65bdfea130a3adceb65198)
2168
+ check_type(argname="argument enabled", value=enabled, expected_type=type_hints["enabled"])
2169
+ check_type(argname="argument encryption_configuration", value=encryption_configuration, expected_type=type_hints["encryption_configuration"])
2170
+ self._values: typing.Dict[builtins.str, typing.Any] = {}
2171
+ if enabled is not None:
2172
+ self._values["enabled"] = enabled
2173
+ if encryption_configuration is not None:
2174
+ self._values["encryption_configuration"] = encryption_configuration
2175
+
2176
+ @builtins.property
2177
+ def enabled(
2178
+ self,
2179
+ ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
2180
+ '''If set to true, allows you to store query results in Athena owned storage.
2181
+
2182
+ If set to false, workgroup member stores query results in location specified under ``ResultConfiguration$OutputLocation`` . The default is false. A workgroup cannot have the ``ResultConfiguration$OutputLocation`` parameter when you set this field to true.
2183
+
2184
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedqueryresultsconfiguration.html#cfn-athena-workgroup-managedqueryresultsconfiguration-enabled
2185
+ '''
2186
+ result = self._values.get("enabled")
2187
+ return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
2188
+
2189
+ @builtins.property
2190
+ def encryption_configuration(
2191
+ self,
2192
+ ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty"]]:
2193
+ '''If you encrypt query and calculation results in Athena owned storage, this field indicates the encryption option (for example, SSE_KMS or CSE_KMS) and key information.
2194
+
2195
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedqueryresultsconfiguration.html#cfn-athena-workgroup-managedqueryresultsconfiguration-encryptionconfiguration
2196
+ '''
2197
+ result = self._values.get("encryption_configuration")
2198
+ return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty"]], result)
2199
+
2200
+ def __eq__(self, rhs: typing.Any) -> builtins.bool:
2201
+ return isinstance(rhs, self.__class__) and rhs._values == self._values
2202
+
2203
+ def __ne__(self, rhs: typing.Any) -> builtins.bool:
2204
+ return not (rhs == self)
2205
+
2206
+ def __repr__(self) -> str:
2207
+ return "ManagedQueryResultsConfigurationProperty(%s)" % ", ".join(
2208
+ k + "=" + repr(v) for k, v in self._values.items()
2209
+ )
2210
+
2211
+ @jsii.data_type(
2212
+ jsii_type="aws-cdk-lib.aws_athena.CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty",
2213
+ jsii_struct_bases=[],
2214
+ name_mapping={"kms_key": "kmsKey"},
2215
+ )
2216
+ class ManagedStorageEncryptionConfigurationProperty:
2217
+ def __init__(self, *, kms_key: typing.Optional[builtins.str] = None) -> None:
2218
+ '''Indicates the encryption configuration for Athena Managed Storage.
2219
+
2220
+ If not setting this field, Managed Storage will encrypt the query results with Athena's encryption key
2221
+
2222
+ :param kms_key: For SSE-KMS and CSE-KMS, this is the KMS key ARN or ID.
2223
+
2224
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedstorageencryptionconfiguration.html
2225
+ :exampleMetadata: fixture=_generated
2226
+
2227
+ Example::
2228
+
2229
+ # The code below shows an example of how to instantiate this type.
2230
+ # The values are placeholders you should change.
2231
+ from aws_cdk import aws_athena as athena
2232
+
2233
+ managed_storage_encryption_configuration_property = athena.CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty(
2234
+ kms_key="kmsKey"
2235
+ )
2236
+ '''
2237
+ if __debug__:
2238
+ type_hints = typing.get_type_hints(_typecheckingstub__53549459074bb1d23e4ee2a6fd045c500008070dfc2015833edc260380222a02)
2239
+ check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
2240
+ self._values: typing.Dict[builtins.str, typing.Any] = {}
2241
+ if kms_key is not None:
2242
+ self._values["kms_key"] = kms_key
2243
+
2244
+ @builtins.property
2245
+ def kms_key(self) -> typing.Optional[builtins.str]:
2246
+ '''For SSE-KMS and CSE-KMS, this is the KMS key ARN or ID.
2247
+
2248
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedstorageencryptionconfiguration.html#cfn-athena-workgroup-managedstorageencryptionconfiguration-kmskey
2249
+ '''
2250
+ result = self._values.get("kms_key")
2251
+ return typing.cast(typing.Optional[builtins.str], result)
2252
+
2253
+ def __eq__(self, rhs: typing.Any) -> builtins.bool:
2254
+ return isinstance(rhs, self.__class__) and rhs._values == self._values
2255
+
2256
+ def __ne__(self, rhs: typing.Any) -> builtins.bool:
2257
+ return not (rhs == self)
2258
+
2259
+ def __repr__(self) -> str:
2260
+ return "ManagedStorageEncryptionConfigurationProperty(%s)" % ", ".join(
2261
+ k + "=" + repr(v) for k, v in self._values.items()
2262
+ )
2263
+
2116
2264
  @jsii.data_type(
2117
2265
  jsii_type="aws-cdk-lib.aws_athena.CfnWorkGroup.ResultConfigurationProperty",
2118
2266
  jsii_struct_bases=[],
@@ -2453,6 +2601,7 @@ class CfnWorkGroup(
2453
2601
  "enforce_work_group_configuration": "enforceWorkGroupConfiguration",
2454
2602
  "engine_version": "engineVersion",
2455
2603
  "execution_role": "executionRole",
2604
+ "managed_query_results_configuration": "managedQueryResultsConfiguration",
2456
2605
  "publish_cloud_watch_metrics_enabled": "publishCloudWatchMetricsEnabled",
2457
2606
  "requester_pays_enabled": "requesterPaysEnabled",
2458
2607
  "result_configuration": "resultConfiguration",
@@ -2468,6 +2617,7 @@ class CfnWorkGroup(
2468
2617
  enforce_work_group_configuration: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
2469
2618
  engine_version: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWorkGroup.EngineVersionProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
2470
2619
  execution_role: typing.Optional[builtins.str] = None,
2620
+ managed_query_results_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWorkGroup.ManagedQueryResultsConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
2471
2621
  publish_cloud_watch_metrics_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
2472
2622
  requester_pays_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
2473
2623
  result_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWorkGroup.ResultConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -2482,6 +2632,7 @@ class CfnWorkGroup(
2482
2632
  :param enforce_work_group_configuration: If set to "true", the settings for the workgroup override client-side settings. If set to "false", client-side settings are used. For more information, see `Override client-side settings <https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html>`_ .
2483
2633
  :param engine_version: The engine version that all queries running on the workgroup use.
2484
2634
  :param execution_role: Role used to access user resources in an Athena for Apache Spark session. This property applies only to Spark-enabled workgroups in Athena.
2635
+ :param managed_query_results_configuration: The configuration for storing results in Athena owned storage, which includes whether this feature is enabled; whether encryption configuration, if any, is used for encrypting query results.
2485
2636
  :param publish_cloud_watch_metrics_enabled: Indicates that the Amazon CloudWatch metrics are enabled for the workgroup.
2486
2637
  :param requester_pays_enabled: If set to ``true`` , allows members assigned to a workgroup to reference Amazon S3 Requester Pays buckets in queries. If set to ``false`` , workgroup members cannot query data from Requester Pays buckets, and queries that retrieve data from Requester Pays buckets cause an error. The default is ``false`` . For more information about Requester Pays buckets, see `Requester Pays Buckets <https://docs.aws.amazon.com/AmazonS3/latest/dev/RequesterPaysBuckets.html>`_ in the *Amazon Simple Storage Service Developer Guide* .
2487
2638
  :param result_configuration: Specifies the location in Amazon S3 where query results are stored and the encryption option, if any, used for query results. For more information, see `Work with query results and recent queries <https://docs.aws.amazon.com/athena/latest/ug/querying.html>`_ .
@@ -2507,6 +2658,12 @@ class CfnWorkGroup(
2507
2658
  selected_engine_version="selectedEngineVersion"
2508
2659
  ),
2509
2660
  execution_role="executionRole",
2661
+ managed_query_results_configuration=athena.CfnWorkGroup.ManagedQueryResultsConfigurationProperty(
2662
+ enabled=False,
2663
+ encryption_configuration=athena.CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty(
2664
+ kms_key="kmsKey"
2665
+ )
2666
+ ),
2510
2667
  publish_cloud_watch_metrics_enabled=False,
2511
2668
  requester_pays_enabled=False,
2512
2669
  result_configuration=athena.CfnWorkGroup.ResultConfigurationProperty(
@@ -2532,6 +2689,7 @@ class CfnWorkGroup(
2532
2689
  check_type(argname="argument enforce_work_group_configuration", value=enforce_work_group_configuration, expected_type=type_hints["enforce_work_group_configuration"])
2533
2690
  check_type(argname="argument engine_version", value=engine_version, expected_type=type_hints["engine_version"])
2534
2691
  check_type(argname="argument execution_role", value=execution_role, expected_type=type_hints["execution_role"])
2692
+ check_type(argname="argument managed_query_results_configuration", value=managed_query_results_configuration, expected_type=type_hints["managed_query_results_configuration"])
2535
2693
  check_type(argname="argument publish_cloud_watch_metrics_enabled", value=publish_cloud_watch_metrics_enabled, expected_type=type_hints["publish_cloud_watch_metrics_enabled"])
2536
2694
  check_type(argname="argument requester_pays_enabled", value=requester_pays_enabled, expected_type=type_hints["requester_pays_enabled"])
2537
2695
  check_type(argname="argument result_configuration", value=result_configuration, expected_type=type_hints["result_configuration"])
@@ -2548,6 +2706,8 @@ class CfnWorkGroup(
2548
2706
  self._values["engine_version"] = engine_version
2549
2707
  if execution_role is not None:
2550
2708
  self._values["execution_role"] = execution_role
2709
+ if managed_query_results_configuration is not None:
2710
+ self._values["managed_query_results_configuration"] = managed_query_results_configuration
2551
2711
  if publish_cloud_watch_metrics_enabled is not None:
2552
2712
  self._values["publish_cloud_watch_metrics_enabled"] = publish_cloud_watch_metrics_enabled
2553
2713
  if requester_pays_enabled is not None:
@@ -2626,6 +2786,19 @@ class CfnWorkGroup(
2626
2786
  result = self._values.get("execution_role")
2627
2787
  return typing.cast(typing.Optional[builtins.str], result)
2628
2788
 
2789
+ @builtins.property
2790
+ def managed_query_results_configuration(
2791
+ self,
2792
+ ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWorkGroup.ManagedQueryResultsConfigurationProperty"]]:
2793
+ '''The configuration for storing results in Athena owned storage, which includes whether this feature is enabled;
2794
+
2795
+ whether encryption configuration, if any, is used for encrypting query results.
2796
+
2797
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-managedqueryresultsconfiguration
2798
+ '''
2799
+ result = self._values.get("managed_query_results_configuration")
2800
+ return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWorkGroup.ManagedQueryResultsConfigurationProperty"]], result)
2801
+
2629
2802
  @builtins.property
2630
2803
  def publish_cloud_watch_metrics_enabled(
2631
2804
  self,
@@ -2684,6 +2857,7 @@ class CfnWorkGroup(
2684
2857
  "enforce_work_group_configuration": "enforceWorkGroupConfiguration",
2685
2858
  "engine_version": "engineVersion",
2686
2859
  "execution_role": "executionRole",
2860
+ "managed_query_results_configuration": "managedQueryResultsConfiguration",
2687
2861
  "publish_cloud_watch_metrics_enabled": "publishCloudWatchMetricsEnabled",
2688
2862
  "remove_bytes_scanned_cutoff_per_query": "removeBytesScannedCutoffPerQuery",
2689
2863
  "remove_customer_content_encryption_configuration": "removeCustomerContentEncryptionConfiguration",
@@ -2701,6 +2875,7 @@ class CfnWorkGroup(
2701
2875
  enforce_work_group_configuration: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
2702
2876
  engine_version: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWorkGroup.EngineVersionProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
2703
2877
  execution_role: typing.Optional[builtins.str] = None,
2878
+ managed_query_results_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnWorkGroup.ManagedQueryResultsConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
2704
2879
  publish_cloud_watch_metrics_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
2705
2880
  remove_bytes_scanned_cutoff_per_query: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
2706
2881
  remove_customer_content_encryption_configuration: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
@@ -2715,6 +2890,7 @@ class CfnWorkGroup(
2715
2890
  :param enforce_work_group_configuration: If set to "true", the settings for the workgroup override client-side settings. If set to "false", client-side settings are used
2716
2891
  :param engine_version: The Athena engine version for running queries.
2717
2892
  :param execution_role: Execution Role ARN required to run Athena Spark Calculations.
2893
+ :param managed_query_results_configuration: The configuration for the managed query results and encryption option. ResultConfiguration and ManagedQueryResultsConfiguration cannot be set at the same time
2718
2894
  :param publish_cloud_watch_metrics_enabled: Indicates that the Amazon CloudWatch metrics are enabled for the workgroup.
2719
2895
  :param remove_bytes_scanned_cutoff_per_query: Indicates that the data usage control limit per query is removed.
2720
2896
  :param remove_customer_content_encryption_configuration:
@@ -2742,6 +2918,12 @@ class CfnWorkGroup(
2742
2918
  selected_engine_version="selectedEngineVersion"
2743
2919
  ),
2744
2920
  execution_role="executionRole",
2921
+ managed_query_results_configuration=athena.CfnWorkGroup.ManagedQueryResultsConfigurationProperty(
2922
+ enabled=False,
2923
+ encryption_configuration=athena.CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty(
2924
+ kms_key="kmsKey"
2925
+ )
2926
+ ),
2745
2927
  publish_cloud_watch_metrics_enabled=False,
2746
2928
  remove_bytes_scanned_cutoff_per_query=False,
2747
2929
  remove_customer_content_encryption_configuration=False,
@@ -2773,6 +2955,7 @@ class CfnWorkGroup(
2773
2955
  check_type(argname="argument enforce_work_group_configuration", value=enforce_work_group_configuration, expected_type=type_hints["enforce_work_group_configuration"])
2774
2956
  check_type(argname="argument engine_version", value=engine_version, expected_type=type_hints["engine_version"])
2775
2957
  check_type(argname="argument execution_role", value=execution_role, expected_type=type_hints["execution_role"])
2958
+ check_type(argname="argument managed_query_results_configuration", value=managed_query_results_configuration, expected_type=type_hints["managed_query_results_configuration"])
2776
2959
  check_type(argname="argument publish_cloud_watch_metrics_enabled", value=publish_cloud_watch_metrics_enabled, expected_type=type_hints["publish_cloud_watch_metrics_enabled"])
2777
2960
  check_type(argname="argument remove_bytes_scanned_cutoff_per_query", value=remove_bytes_scanned_cutoff_per_query, expected_type=type_hints["remove_bytes_scanned_cutoff_per_query"])
2778
2961
  check_type(argname="argument remove_customer_content_encryption_configuration", value=remove_customer_content_encryption_configuration, expected_type=type_hints["remove_customer_content_encryption_configuration"])
@@ -2791,6 +2974,8 @@ class CfnWorkGroup(
2791
2974
  self._values["engine_version"] = engine_version
2792
2975
  if execution_role is not None:
2793
2976
  self._values["execution_role"] = execution_role
2977
+ if managed_query_results_configuration is not None:
2978
+ self._values["managed_query_results_configuration"] = managed_query_results_configuration
2794
2979
  if publish_cloud_watch_metrics_enabled is not None:
2795
2980
  self._values["publish_cloud_watch_metrics_enabled"] = publish_cloud_watch_metrics_enabled
2796
2981
  if remove_bytes_scanned_cutoff_per_query is not None:
@@ -2864,6 +3049,19 @@ class CfnWorkGroup(
2864
3049
  result = self._values.get("execution_role")
2865
3050
  return typing.cast(typing.Optional[builtins.str], result)
2866
3051
 
3052
+ @builtins.property
3053
+ def managed_query_results_configuration(
3054
+ self,
3055
+ ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWorkGroup.ManagedQueryResultsConfigurationProperty"]]:
3056
+ '''The configuration for the managed query results and encryption option.
3057
+
3058
+ ResultConfiguration and ManagedQueryResultsConfiguration cannot be set at the same time
3059
+
3060
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfigurationupdates.html#cfn-athena-workgroup-workgroupconfigurationupdates-managedqueryresultsconfiguration
3061
+ '''
3062
+ result = self._values.get("managed_query_results_configuration")
3063
+ return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWorkGroup.ManagedQueryResultsConfigurationProperty"]], result)
3064
+
2867
3065
  @builtins.property
2868
3066
  def publish_cloud_watch_metrics_enabled(
2869
3067
  self,
@@ -3001,6 +3199,12 @@ class CfnWorkGroupProps:
3001
3199
  selected_engine_version="selectedEngineVersion"
3002
3200
  ),
3003
3201
  execution_role="executionRole",
3202
+ managed_query_results_configuration=athena.CfnWorkGroup.ManagedQueryResultsConfigurationProperty(
3203
+ enabled=False,
3204
+ encryption_configuration=athena.CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty(
3205
+ kms_key="kmsKey"
3206
+ )
3207
+ ),
3004
3208
  publish_cloud_watch_metrics_enabled=False,
3005
3209
  requester_pays_enabled=False,
3006
3210
  result_configuration=athena.CfnWorkGroup.ResultConfigurationProperty(
@@ -3029,6 +3233,12 @@ class CfnWorkGroupProps:
3029
3233
  selected_engine_version="selectedEngineVersion"
3030
3234
  ),
3031
3235
  execution_role="executionRole",
3236
+ managed_query_results_configuration=athena.CfnWorkGroup.ManagedQueryResultsConfigurationProperty(
3237
+ enabled=False,
3238
+ encryption_configuration=athena.CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty(
3239
+ kms_key="kmsKey"
3240
+ )
3241
+ ),
3032
3242
  publish_cloud_watch_metrics_enabled=False,
3033
3243
  remove_bytes_scanned_cutoff_per_query=False,
3034
3244
  remove_customer_content_encryption_configuration=False,
@@ -3567,6 +3777,21 @@ def _typecheckingstub__89f0b78a82f24ece8384b490252230129c42a711fdb038b4ecd645d32
3567
3777
  """Type checking stubs"""
3568
3778
  pass
3569
3779
 
3780
+ def _typecheckingstub__f6c4d2e9be468cb69e158be7cc0f67bd537760da2f65bdfea130a3adceb65198(
3781
+ *,
3782
+ enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
3783
+ encryption_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWorkGroup.ManagedStorageEncryptionConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
3784
+ ) -> None:
3785
+ """Type checking stubs"""
3786
+ pass
3787
+
3788
+ def _typecheckingstub__53549459074bb1d23e4ee2a6fd045c500008070dfc2015833edc260380222a02(
3789
+ *,
3790
+ kms_key: typing.Optional[builtins.str] = None,
3791
+ ) -> None:
3792
+ """Type checking stubs"""
3793
+ pass
3794
+
3570
3795
  def _typecheckingstub__86d94b0afb15160d6ec72666a7574c95b2d16afd21c5ca80a9f352f319f2f46c(
3571
3796
  *,
3572
3797
  acl_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWorkGroup.AclConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -3599,6 +3824,7 @@ def _typecheckingstub__5bc58a8f7fc071c8f6e3cf6044079ec303e9ba8521ef96ca98c62cfdd
3599
3824
  enforce_work_group_configuration: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
3600
3825
  engine_version: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWorkGroup.EngineVersionProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
3601
3826
  execution_role: typing.Optional[builtins.str] = None,
3827
+ managed_query_results_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWorkGroup.ManagedQueryResultsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
3602
3828
  publish_cloud_watch_metrics_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
3603
3829
  requester_pays_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
3604
3830
  result_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWorkGroup.ResultConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -3614,6 +3840,7 @@ def _typecheckingstub__6d600654f5aa48cb49fd4baf2a677e5f7725dcfa1249836427c1d9f65
3614
3840
  enforce_work_group_configuration: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
3615
3841
  engine_version: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWorkGroup.EngineVersionProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
3616
3842
  execution_role: typing.Optional[builtins.str] = None,
3843
+ managed_query_results_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnWorkGroup.ManagedQueryResultsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
3617
3844
  publish_cloud_watch_metrics_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
3618
3845
  remove_bytes_scanned_cutoff_per_query: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
3619
3846
  remove_customer_content_encryption_configuration: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,