aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_msk/__init__.py

@@ -73,9 +73,25 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_msk import (
+    BatchScramSecretReference as _BatchScramSecretReference_dbb2b465,
+    ClusterPolicyReference as _ClusterPolicyReference_ec5aa960,
+    ClusterReference as _ClusterReference_f30274ab,
+    ConfigurationReference as _ConfigurationReference_fa1581ee,
+    IBatchScramSecretRef as _IBatchScramSecretRef_b81d624a,
+    IClusterPolicyRef as _IClusterPolicyRef_f86bdab3,
+    IClusterRef as _IClusterRef_c904150a,
+    IConfigurationRef as _IConfigurationRef_69565de0,
+    IReplicatorRef as _IReplicatorRef_ba6501db,
+    IServerlessClusterRef as _IServerlessClusterRef_d48e2d5f,
+    IVpcConnectionRef as _IVpcConnectionRef_08dbabf3,
+    ReplicatorReference as _ReplicatorReference_d24fd028,
+    ServerlessClusterReference as _ServerlessClusterReference_591ff7ca,
+    VpcConnectionReference as _VpcConnectionReference_c5ff3bd2,
+)
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IBatchScramSecretRef_b81d624a)
 class CfnBatchScramSecret(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -109,7 +125,8 @@ class CfnBatchScramSecret(
         cluster_arn: builtins.str,
         secret_arn_list: typing.Optional[typing.Sequence[builtins.str]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::MSK::BatchScramSecret``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param cluster_arn: The Amazon Resource Name (ARN) that uniquely identifies the cluster.
@@ -155,6 +172,12 @@ class CfnBatchScramSecret(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="batchScramSecretRef")
+    def batch_scram_secret_ref(self) -> _BatchScramSecretReference_dbb2b465:
+        '''A reference to a BatchScramSecret resource.'''
+        return typing.cast(_BatchScramSecretReference_dbb2b465, jsii.get(self, "batchScramSecretRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -264,7 +287,7 @@ class CfnBatchScramSecretProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IClusterRef_c904150a, _ITaggable_36806126)
 class CfnCluster(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -416,7 +439,8 @@ class CfnCluster(
         storage_mode: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::MSK::Cluster``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param broker_node_group_info: Information about the broker nodes in the cluster.
@@ -499,6 +523,12 @@ class CfnCluster(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="clusterRef")
+    def cluster_ref(self) -> _ClusterReference_f30274ab:
+        '''A reference to a Cluster resource.'''
+        return typing.cast(_ClusterReference_f30274ab, jsii.get(self, "clusterRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -843,7 +873,7 @@ class CfnCluster(
             '''Describes the setup to be used for the broker nodes in the cluster.
 
             :param client_subnets: The list of subnets to connect to in the client virtual private cloud (VPC). Amazon creates elastic network interfaces (ENIs) inside these subnets. Client applications use ENIs to produce and consume data. If you use the US West (N. California) Region, specify exactly two subnets. For other Regions where Amazon MSK is available, you can specify either two or three subnets. The subnets that you specify must be in distinct Availability Zones. When you create a cluster, Amazon MSK distributes the broker nodes evenly across the subnets that you specify. Client subnets can't occupy the Availability Zone with ID ``use1-az3`` .
-            :param instance_type: The type of Amazon EC2 instances to use for brokers. The following instance types are allowed: kafka.m5.large, kafka.m5.xlarge, kafka.m5.2xlarge, kafka.m5.4xlarge, kafka.m5.8xlarge, kafka.m5.12xlarge, kafka.m5.16xlarge, kafka.m5.24xlarge, and kafka.t3.small.
+            :param instance_type: The type of Amazon EC2 instances to use for brokers. Depending on the `broker type <https://docs.aws.amazon.com/msk/latest/developerguide/broker-instance-types.html>`_ , Amazon MSK supports the following broker sizes: *Standard broker sizes* - kafka.t3.small .. epigraph:: You can't select the kafka.t3.small instance type when the metadata mode is KRaft. - kafka.m5.large, kafka.m5.xlarge, kafka.m5.2xlarge, kafka.m5.4xlarge, kafka.m5.8xlarge, kafka.m5.12xlarge, kafka.m5.16xlarge, kafka.m5.24xlarge - kafka.m7g.large, kafka.m7g.xlarge, kafka.m7g.2xlarge, kafka.m7g.4xlarge, kafka.m7g.8xlarge, kafka.m7g.12xlarge, kafka.m7g.16xlarge *Express broker sizes* - express.m7g.large, express.m7g.xlarge, express.m7g.2xlarge, express.m7g.4xlarge, express.m7g.8xlarge, express.m7g.12xlarge, express.m7g.16xlarge .. epigraph:: Some broker sizes might not be available in certian AWS Regions. See the updated `Pricing tools <https://docs.aws.amazon.com/msk/pricing/>`_ section on the Amazon MSK pricing page for the latest list of available instances by Region.
             :param broker_az_distribution: This parameter is currently not in use.
             :param connectivity_info: Information about the cluster's connectivity setting.
             :param security_groups: The security groups to associate with the ENIs in order to specify who can connect to and communicate with the Amazon MSK cluster. If you don't specify a security group, Amazon MSK uses the default security group associated with the VPC. If you specify security groups that were shared with you, you must ensure that you have permissions to them. Specifically, you need the ``ec2:DescribeSecurityGroups`` permission.
@@ -937,7 +967,26 @@ class CfnCluster(
         def instance_type(self) -> builtins.str:
             '''The type of Amazon EC2 instances to use for brokers.
 
-            The following instance types are allowed: kafka.m5.large, kafka.m5.xlarge, kafka.m5.2xlarge, kafka.m5.4xlarge, kafka.m5.8xlarge, kafka.m5.12xlarge, kafka.m5.16xlarge, kafka.m5.24xlarge, and kafka.t3.small.
+            Depending on the `broker type <https://docs.aws.amazon.com/msk/latest/developerguide/broker-instance-types.html>`_ , Amazon MSK supports the following broker sizes:
+
+            *Standard broker sizes*
+
+            - kafka.t3.small
+
+            .. epigraph::
+
+               You can't select the kafka.t3.small instance type when the metadata mode is KRaft.
+
+            - kafka.m5.large, kafka.m5.xlarge, kafka.m5.2xlarge, kafka.m5.4xlarge, kafka.m5.8xlarge, kafka.m5.12xlarge, kafka.m5.16xlarge, kafka.m5.24xlarge
+            - kafka.m7g.large, kafka.m7g.xlarge, kafka.m7g.2xlarge, kafka.m7g.4xlarge, kafka.m7g.8xlarge, kafka.m7g.12xlarge, kafka.m7g.16xlarge
+
+            *Express broker sizes*
+
+            - express.m7g.large, express.m7g.xlarge, express.m7g.2xlarge, express.m7g.4xlarge, express.m7g.8xlarge, express.m7g.12xlarge, express.m7g.16xlarge
+
+            .. epigraph::
+
+               Some broker sizes might not be available in certian AWS Regions. See the updated `Pricing tools <https://docs.aws.amazon.com/msk/pricing/>`_ section on the Amazon MSK pricing page for the latest list of available instances by Region.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-brokernodegroupinfo.html#cfn-msk-cluster-brokernodegroupinfo-instancetype
             '''
@@ -3054,7 +3103,7 @@ class CfnCluster(
             )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IClusterPolicyRef_f86bdab3)
 class CfnClusterPolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3088,11 +3137,12 @@ class CfnClusterPolicy(
         cluster_arn: builtins.str,
         policy: typing.Any,
     ) -> None:
-        '''
+        '''Create a new ``AWS::MSK::ClusterPolicy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param cluster_arn: The Amazon Resource Name (ARN) that uniquely identifies the cluster.
-        :param policy: Resource policy for the cluster.
+        :param policy: Resource policy for the cluster. The maximum size supported for a resource-based policy document is 20 KB.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__44054483e71e00fc0cc8de4a0043676504f8ba8eaef21e7597ca21b373e44603)
@@ -3146,6 +3196,12 @@ class CfnClusterPolicy(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="clusterPolicyRef")
+    def cluster_policy_ref(self) -> _ClusterPolicyReference_ec5aa960:
+        '''A reference to a ClusterPolicy resource.'''
+        return typing.cast(_ClusterPolicyReference_ec5aa960, jsii.get(self, "clusterPolicyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="clusterArn")
     def cluster_arn(self) -> builtins.str:
@@ -3183,7 +3239,7 @@ class CfnClusterPolicyProps:
         '''Properties for defining a ``CfnClusterPolicy``.
 
         :param cluster_arn: The Amazon Resource Name (ARN) that uniquely identifies the cluster.
-        :param policy: Resource policy for the cluster.
+        :param policy: Resource policy for the cluster. The maximum size supported for a resource-based policy document is 20 KB.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-clusterpolicy.html
         :exampleMetadata: fixture=_generated
@@ -3224,6 +3280,8 @@ class CfnClusterPolicyProps:
     def policy(self) -> typing.Any:
         '''Resource policy for the cluster.
 
+        The maximum size supported for a resource-based policy document is 20 KB.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-clusterpolicy.html#cfn-msk-clusterpolicy-policy
         '''
         result = self._values.get("policy")
@@ -3605,7 +3663,7 @@ class CfnClusterProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IConfigurationRef_69565de0)
 class CfnConfiguration(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3658,7 +3716,8 @@ class CfnConfiguration(
         kafka_versions_list: typing.Optional[typing.Sequence[builtins.str]] = None,
         latest_revision: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnConfiguration.LatestRevisionProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::MSK::Configuration``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the configuration. Configuration names are strings that match the regex "^[0-9A-Za-z][0-9A-Za-z-]{0,}$".
@@ -3752,6 +3811,12 @@ class CfnConfiguration(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="configurationRef")
+    def configuration_ref(self) -> _ConfigurationReference_fa1581ee:
+        '''A reference to a Configuration resource.'''
+        return typing.cast(_ConfigurationReference_fa1581ee, jsii.get(self, "configurationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -4054,7 +4119,7 @@ class CfnConfigurationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IReplicatorRef_ba6501db, _ITaggableV2_4e6798f8)
 class CfnReplicator(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4136,7 +4201,8 @@ class CfnReplicator(
         description: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::MSK::Replicator``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param kafka_clusters: Kafka Clusters to use in setting up sources / targets for replication.
@@ -4220,6 +4286,12 @@ class CfnReplicator(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="replicatorRef")
+    def replicator_ref(self) -> _ReplicatorReference_d24fd028:
+        '''A reference to a Replicator resource.'''
+        return typing.cast(_ReplicatorReference_d24fd028, jsii.get(self, "replicatorRef"))
+
     @builtins.property
     @jsii.member(jsii_name="kafkaClusters")
     def kafka_clusters(
@@ -5244,7 +5316,7 @@ class CfnReplicatorProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IServerlessClusterRef_d48e2d5f, _ITaggable_36806126)
 class CfnServerlessCluster(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5295,7 +5367,8 @@ class CfnServerlessCluster(
         vpc_configs: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnServerlessCluster.VpcConfigProperty", typing.Dict[builtins.str, typing.Any]]]]],
         tags: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::MSK::ServerlessCluster``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param client_authentication: Includes all client authentication related information.
@@ -5360,6 +5433,12 @@ class CfnServerlessCluster(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serverlessClusterRef")
+    def serverless_cluster_ref(self) -> _ServerlessClusterReference_591ff7ca:
+        '''A reference to a ServerlessCluster resource.'''
+        return typing.cast(_ServerlessClusterReference_591ff7ca, jsii.get(self, "serverlessClusterRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -5810,7 +5889,7 @@ class CfnServerlessClusterProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IVpcConnectionRef_08dbabf3, _ITaggable_36806126)
 class CfnVpcConnection(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5854,7 +5933,8 @@ class CfnVpcConnection(
         vpc_id: builtins.str,
         tags: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::MSK::VpcConnection``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param authentication: The type of private link authentication.
@@ -5929,6 +6009,12 @@ class CfnVpcConnection(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="vpcConnectionRef")
+    def vpc_connection_ref(self) -> _VpcConnectionReference_c5ff3bd2:
+        '''A reference to a VpcConnection resource.'''
+        return typing.cast(_VpcConnectionReference_c5ff3bd2, jsii.get(self, "vpcConnectionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="authentication")
     def authentication(self) -> builtins.str:

aws_cdk/aws_mwaa/__init__.py

@@ -66,9 +66,13 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_mwaa import (
+    EnvironmentReference as _EnvironmentReference_14c1e070,
+    IEnvironmentRef as _IEnvironmentRef_842152e5,
+)
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IEnvironmentRef_842152e5, _ITaggable_36806126)
 class CfnEnvironment(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -145,7 +149,8 @@ class CfnEnvironment(
             startup_script_s3_path="startupScriptS3Path",
             tags=tags,
             webserver_access_mode="webserverAccessMode",
-            weekly_maintenance_window_start="weeklyMaintenanceWindowStart"
+            weekly_maintenance_window_start="weeklyMaintenanceWindowStart",
+            worker_replacement_strategy="workerReplacementStrategy"
         )
     '''
 
@@ -179,13 +184,15 @@ class CfnEnvironment(
         tags: typing.Any = None,
         webserver_access_mode: typing.Optional[builtins.str] = None,
         weekly_maintenance_window_start: typing.Optional[builtins.str] = None,
+        worker_replacement_strategy: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::MWAA::Environment``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of your Amazon MWAA environment.
         :param airflow_configuration_options: A list of key-value pairs containing the Airflow configuration options for your environment. For example, ``core.default_timezone: utc`` . To learn more, see `Apache Airflow configuration options <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-env-variables.html>`_ .
-        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` | ``2.8.1`` | ``2.9.2`` | ``2.10.1`` (latest)
+        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``2.7.2`` | ``2.8.1`` | ``2.9.2`` | ``2.10.1`` | ``2.10.3`` | ``3.0.6`` (latest)
         :param dag_s3_path: The relative path to the DAGs folder on your Amazon S3 bucket. For example, ``dags`` . To learn more, see `Adding or updating DAGs <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-folder.html>`_ .
         :param endpoint_management: Defines whether the VPC endpoints configured for the environment are created, and managed, by the customer or by Amazon MWAA. If set to ``SERVICE`` , Amazon MWAA will create and manage the required VPC endpoints in your VPC. If set to ``CUSTOMER`` , you must create, and manage, the VPC endpoints in your VPC.
         :param environment_class: The environment class type. Valid values: ``mw1.micro`` , ``mw1.small`` , ``mw1.medium`` , ``mw1.large`` , ``mw1.1large`` , and ``mw1.2large`` . To learn more, see `Amazon MWAA environment class <https://docs.aws.amazon.com/mwaa/latest/userguide/environment-class.html>`_ .
@@ -208,6 +215,7 @@ class CfnEnvironment(
         :param tags: The key-value tag pairs associated to your environment. For example, ``"Environment": "Staging"`` . To learn more, see `Tagging <https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html>`_ . If you specify new tags for an existing environment, the update requires service interruption before taking effect.
         :param webserver_access_mode: The Apache Airflow *Web server* access mode. To learn more, see `Apache Airflow access modes <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-networking.html>`_ . Valid values: ``PRIVATE_ONLY`` or ``PUBLIC_ONLY`` .
         :param weekly_maintenance_window_start: The day and time of the week to start weekly maintenance updates of your environment in the following format: ``DAY:HH:MM`` . For example: ``TUE:03:30`` . You can specify a start time in 30 minute increments only. Supported input includes the following: - MON|TUE|WED|THU|FRI|SAT|SUN:([01]\\d|2[0-3]):(00|30)
+        :param worker_replacement_strategy: The worker replacement strategy to use when updating the environment. Valid values: ``FORCED``, ``GRACEFUL``. FORCED means Apache Airflow workers will be stopped and replaced without waiting for tasks to complete before an update. GRACEFUL means Apache Airflow workers will be able to complete running tasks for up to 12 hours during an update before being stopped and replaced.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__558d6a60af086ab1a40ad8057fcb128456129bbbd328752ab90d8a6d573efb1c)
@@ -239,10 +247,53 @@ class CfnEnvironment(
             tags=tags,
             webserver_access_mode=webserver_access_mode,
             weekly_maintenance_window_start=weekly_maintenance_window_start,
+            worker_replacement_strategy=worker_replacement_strategy,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromEnvironmentArn")
+    @builtins.classmethod
+    def from_environment_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IEnvironmentRef_842152e5:
+        '''Creates a new IEnvironmentRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__eeab8395584e59cc2c2e2e79af17a538406c85ef97d8a9a2859b93823146cf1b)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IEnvironmentRef_842152e5, jsii.sinvoke(cls, "fromEnvironmentArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromEnvironmentName")
+    @builtins.classmethod
+    def from_environment_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        environment_name: builtins.str,
+    ) -> _IEnvironmentRef_842152e5:
+        '''Creates a new IEnvironmentRef from a environmentName.
+
+        :param scope: -
+        :param id: -
+        :param environment_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__00555161bf97ecf8a9091b34e1df9c2c441f970660c275c1bdb7afa29596b2cf)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument environment_name", value=environment_name, expected_type=type_hints["environment_name"])
+        return typing.cast(_IEnvironmentRef_842152e5, jsii.sinvoke(cls, "fromEnvironmentName", [scope, id, environment_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -378,6 +429,12 @@ class CfnEnvironment(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="environmentRef")
+    def environment_ref(self) -> _EnvironmentReference_14c1e070:
+        '''A reference to a Environment resource.'''
+        return typing.cast(_EnvironmentReference_14c1e070, jsii.get(self, "environmentRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -737,6 +794,19 @@ class CfnEnvironment(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "weeklyMaintenanceWindowStart", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="workerReplacementStrategy")
+    def worker_replacement_strategy(self) -> typing.Optional[builtins.str]:
+        '''The worker replacement strategy to use when updating the environment.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "workerReplacementStrategy"))
+
+    @worker_replacement_strategy.setter
+    def worker_replacement_strategy(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6a69a886eac1c8570e29fe73891b3d0a6bf8bc1d04ac36bc656c130c6498adef)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "workerReplacementStrategy", value) # pyright: ignore[reportArgumentType]
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_mwaa.CfnEnvironment.LoggingConfigurationProperty",
         jsii_struct_bases=[],
@@ -909,7 +979,7 @@ class CfnEnvironment(
 
             :param cloud_watch_log_group_arn: The ARN of the CloudWatch Logs log group for each type of Apache Airflow log type that you have enabled. .. epigraph:: ``CloudWatchLogGroupArn`` is available only as a return value, accessible when specified as an attribute in the ```Fn:GetAtt`` <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#aws-resource-mwaa-environment-return-values>`_ intrinsic function. Any value you provide for ``CloudWatchLogGroupArn`` is discarded by Amazon MWAA.
             :param enabled: Indicates whether to enable the Apache Airflow log type (e.g. ``DagProcessingLogs`` ) in CloudWatch Logs.
-            :param log_level: Defines the Apache Airflow logs to send for the log type (e.g. ``DagProcessingLogs`` ) to CloudWatch Logs. Valid values: ``CRITICAL`` , ``ERROR`` , ``WARNING`` , ``INFO`` .
+            :param log_level: Defines the Apache Airflow logs to send for the log type (e.g. ``DagProcessingLogs`` ) to CloudWatch Logs.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mwaa-environment-moduleloggingconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -965,7 +1035,7 @@ class CfnEnvironment(
 
         @builtins.property
         def log_level(self) -> typing.Optional[builtins.str]:
-            '''Defines the Apache Airflow logs to send for the log type (e.g. ``DagProcessingLogs`` ) to CloudWatch Logs. Valid values: ``CRITICAL`` , ``ERROR`` , ``WARNING`` , ``INFO`` .
+            '''Defines the Apache Airflow logs to send for the log type (e.g. ``DagProcessingLogs`` ) to CloudWatch Logs.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mwaa-environment-moduleloggingconfiguration.html#cfn-mwaa-environment-moduleloggingconfiguration-loglevel
             '''
@@ -1092,6 +1162,7 @@ class CfnEnvironment(
         "tags": "tags",
         "webserver_access_mode": "webserverAccessMode",
         "weekly_maintenance_window_start": "weeklyMaintenanceWindowStart",
+        "worker_replacement_strategy": "workerReplacementStrategy",
     },
 )
 class CfnEnvironmentProps:
@@ -1123,12 +1194,13 @@ class CfnEnvironmentProps:
         tags: typing.Any = None,
         webserver_access_mode: typing.Optional[builtins.str] = None,
         weekly_maintenance_window_start: typing.Optional[builtins.str] = None,
+        worker_replacement_strategy: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for defining a ``CfnEnvironment``.
 
         :param name: The name of your Amazon MWAA environment.
         :param airflow_configuration_options: A list of key-value pairs containing the Airflow configuration options for your environment. For example, ``core.default_timezone: utc`` . To learn more, see `Apache Airflow configuration options <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-env-variables.html>`_ .
-        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` | ``2.8.1`` | ``2.9.2`` | ``2.10.1`` (latest)
+        :param airflow_version: The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version. If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect. *Allowed Values* : ``2.7.2`` | ``2.8.1`` | ``2.9.2`` | ``2.10.1`` | ``2.10.3`` | ``3.0.6`` (latest)
         :param dag_s3_path: The relative path to the DAGs folder on your Amazon S3 bucket. For example, ``dags`` . To learn more, see `Adding or updating DAGs <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-folder.html>`_ .
         :param endpoint_management: Defines whether the VPC endpoints configured for the environment are created, and managed, by the customer or by Amazon MWAA. If set to ``SERVICE`` , Amazon MWAA will create and manage the required VPC endpoints in your VPC. If set to ``CUSTOMER`` , you must create, and manage, the VPC endpoints in your VPC.
         :param environment_class: The environment class type. Valid values: ``mw1.micro`` , ``mw1.small`` , ``mw1.medium`` , ``mw1.large`` , ``mw1.1large`` , and ``mw1.2large`` . To learn more, see `Amazon MWAA environment class <https://docs.aws.amazon.com/mwaa/latest/userguide/environment-class.html>`_ .
@@ -1151,6 +1223,7 @@ class CfnEnvironmentProps:
         :param tags: The key-value tag pairs associated to your environment. For example, ``"Environment": "Staging"`` . To learn more, see `Tagging <https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html>`_ . If you specify new tags for an existing environment, the update requires service interruption before taking effect.
         :param webserver_access_mode: The Apache Airflow *Web server* access mode. To learn more, see `Apache Airflow access modes <https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-networking.html>`_ . Valid values: ``PRIVATE_ONLY`` or ``PUBLIC_ONLY`` .
         :param weekly_maintenance_window_start: The day and time of the week to start weekly maintenance updates of your environment in the following format: ``DAY:HH:MM`` . For example: ``TUE:03:30`` . You can specify a start time in 30 minute increments only. Supported input includes the following: - MON|TUE|WED|THU|FRI|SAT|SUN:([01]\\d|2[0-3]):(00|30)
+        :param worker_replacement_strategy: The worker replacement strategy to use when updating the environment. Valid values: ``FORCED``, ``GRACEFUL``. FORCED means Apache Airflow workers will be stopped and replaced without waiting for tasks to complete before an update. GRACEFUL means Apache Airflow workers will be able to complete running tasks for up to 12 hours during an update before being stopped and replaced.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html
         :exampleMetadata: fixture=_generated
@@ -1220,7 +1293,8 @@ class CfnEnvironmentProps:
                 startup_script_s3_path="startupScriptS3Path",
                 tags=tags,
                 webserver_access_mode="webserverAccessMode",
-                weekly_maintenance_window_start="weeklyMaintenanceWindowStart"
+                weekly_maintenance_window_start="weeklyMaintenanceWindowStart",
+                worker_replacement_strategy="workerReplacementStrategy"
             )
         '''
         if __debug__:
@@ -1250,6 +1324,7 @@ class CfnEnvironmentProps:
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
             check_type(argname="argument webserver_access_mode", value=webserver_access_mode, expected_type=type_hints["webserver_access_mode"])
             check_type(argname="argument weekly_maintenance_window_start", value=weekly_maintenance_window_start, expected_type=type_hints["weekly_maintenance_window_start"])
+            check_type(argname="argument worker_replacement_strategy", value=worker_replacement_strategy, expected_type=type_hints["worker_replacement_strategy"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "name": name,
         }
@@ -1301,6 +1376,8 @@ class CfnEnvironmentProps:
             self._values["webserver_access_mode"] = webserver_access_mode
         if weekly_maintenance_window_start is not None:
             self._values["weekly_maintenance_window_start"] = weekly_maintenance_window_start
+        if worker_replacement_strategy is not None:
+            self._values["worker_replacement_strategy"] = worker_replacement_strategy
 
     @builtins.property
     def name(self) -> builtins.str:
@@ -1331,7 +1408,7 @@ class CfnEnvironmentProps:
 
         If you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect.
 
-        *Allowed Values* : ``1.10.12`` | ``2.0.2`` | ``2.2.2`` | ``2.4.3`` | ``2.5.1`` | ``2.6.3`` | ``2.7.2`` | ``2.8.1`` | ``2.9.2`` | ``2.10.1`` (latest)
+        *Allowed Values* : ``2.7.2`` | ``2.8.1`` | ``2.9.2`` | ``2.10.1`` | ``2.10.3`` | ``3.0.6`` (latest)
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion
         '''
@@ -1587,6 +1664,17 @@ class CfnEnvironmentProps:
         result = self._values.get("weekly_maintenance_window_start")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def worker_replacement_strategy(self) -> typing.Optional[builtins.str]:
+        '''The worker replacement strategy to use when updating the environment.
+
+        Valid values: ``FORCED``, ``GRACEFUL``. FORCED means Apache Airflow workers will be stopped and replaced without waiting for tasks to complete before an update. GRACEFUL means Apache Airflow workers will be able to complete running tasks for up to 12 hours during an update before being stopped and replaced.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-workerreplacementstrategy
+        '''
+        result = self._values.get("worker_replacement_strategy")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -1635,6 +1723,23 @@ def _typecheckingstub__558d6a60af086ab1a40ad8057fcb128456129bbbd328752ab90d8a6d5
     tags: typing.Any = None,
     webserver_access_mode: typing.Optional[builtins.str] = None,
     weekly_maintenance_window_start: typing.Optional[builtins.str] = None,
+    worker_replacement_strategy: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__eeab8395584e59cc2c2e2e79af17a538406c85ef97d8a9a2859b93823146cf1b(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__00555161bf97ecf8a9091b34e1df9c2c441f970660c275c1bdb7afa29596b2cf(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    environment_name: builtins.str,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -1801,6 +1906,12 @@ def _typecheckingstub__c4b7b1ca9a0752d370dddfd37838d62fc0fdbdce81d79923961a78bfa
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__6a69a886eac1c8570e29fe73891b3d0a6bf8bc1d04ac36bc656c130c6498adef(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__d823c014bd64bec48bc3afd2f5085d92c0e9f9e6f7641f491eeb3020665639f5(
     *,
     dag_processing_logs: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnEnvironment.ModuleLoggingConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -1856,6 +1967,7 @@ def _typecheckingstub__9d7baed808ece1f6aca4fce5dbeac04c731d688aec6f3395e1f0892ea
     tags: typing.Any = None,
     webserver_access_mode: typing.Optional[builtins.str] = None,
     weekly_maintenance_window_start: typing.Optional[builtins.str] = None,
+    worker_replacement_strategy: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass