aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_opensearchserverless/__init__.py

@@ -67,9 +67,25 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_opensearchserverless import (
+    AccessPolicyReference as _AccessPolicyReference_645132eb,
+    CollectionReference as _CollectionReference_355c1500,
+    IAccessPolicyRef as _IAccessPolicyRef_b72e06bb,
+    ICollectionRef as _ICollectionRef_3c562476,
+    IIndexRef as _IIndexRef_53f6bc35,
+    ILifecyclePolicyRef as _ILifecyclePolicyRef_57cf5ace,
+    ISecurityConfigRef as _ISecurityConfigRef_94652651,
+    ISecurityPolicyRef as _ISecurityPolicyRef_535a5cb1,
+    IVpcEndpointRef as _IVpcEndpointRef_32532ed6,
+    IndexReference as _IndexReference_e9ecd833,
+    LifecyclePolicyReference as _LifecyclePolicyReference_5f985de6,
+    SecurityConfigReference as _SecurityConfigReference_f5680479,
+    SecurityPolicyReference as _SecurityPolicyReference_e3c4978e,
+    VpcEndpointReference as _VpcEndpointReference_90f2b7dd,
+)
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IAccessPolicyRef_b72e06bb)
 class CfnAccessPolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -109,7 +125,8 @@ class CfnAccessPolicy(
         type: builtins.str,
         description: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::OpenSearchServerless::AccessPolicy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the policy.
@@ -157,6 +174,12 @@ class CfnAccessPolicy(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="accessPolicyRef")
+    def access_policy_ref(self) -> _AccessPolicyReference_645132eb:
+        '''A reference to a AccessPolicy resource.'''
+        return typing.cast(_AccessPolicyReference_645132eb, jsii.get(self, "accessPolicyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -326,7 +349,7 @@ class CfnAccessPolicyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _ICollectionRef_3c562476, _ITaggable_36806126)
 class CfnCollection(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -374,7 +397,8 @@ class CfnCollection(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         type: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::OpenSearchServerless::Collection``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the collection. Collection names must meet the following criteria: - Starts with a lowercase letter - Unique to your account and AWS Region - Contains between 3 and 28 characters - Contains only lowercase letters a-z, the numbers 0-9, and the hyphen (-)
@@ -397,6 +421,48 @@ class CfnCollection(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromCollectionArn")
+    @builtins.classmethod
+    def from_collection_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _ICollectionRef_3c562476:
+        '''Creates a new ICollectionRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1a867d3ccfec6274c8dba1d54e9985d5848fc3846259a0066b6a7a2747a2f202)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_ICollectionRef_3c562476, jsii.sinvoke(cls, "fromCollectionArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromCollectionId")
+    @builtins.classmethod
+    def from_collection_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        collection_id: builtins.str,
+    ) -> _ICollectionRef_3c562476:
+        '''Creates a new ICollectionRef from a collectionId.
+
+        :param scope: -
+        :param id: -
+        :param collection_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4873da41e53bbb04f400bc347dc5055de33d58a34837863127c0a03bff69ac7f)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument collection_id", value=collection_id, expected_type=type_hints["collection_id"])
+        return typing.cast(_ICollectionRef_3c562476, jsii.sinvoke(cls, "fromCollectionId", [scope, id, collection_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -471,11 +537,26 @@ class CfnCollection(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="attrKmsKeyArn")
+    def attr_kms_key_arn(self) -> builtins.str:
+        '''The ARN of the AWS KMS key used to encrypt the collection.
+
+        :cloudformationAttribute: KmsKeyArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrKmsKeyArn"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="collectionRef")
+    def collection_ref(self) -> _CollectionReference_355c1500:
+        '''A reference to a Collection resource.'''
+        return typing.cast(_CollectionReference_355c1500, jsii.get(self, "collectionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -689,7 +770,7 @@ class CfnCollectionProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IIndexRef_53f6bc35)
 class CfnIndex(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -723,10 +804,10 @@ class CfnIndex(
                         dimension=123,
                         index=False,
                         method=opensearchserverless.CfnIndex.MethodProperty(
-                            engine="engine",
                             name="name",
         
                             # the properties below are optional
+                            engine="engine",
                             parameters=opensearchserverless.CfnIndex.ParametersProperty(
                                 ef_construction=123,
                                 m=123
@@ -760,7 +841,8 @@ class CfnIndex(
         mappings: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnIndex.MappingsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         settings: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnIndex.IndexSettingsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::OpenSearchServerless::Index``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param collection_endpoint: The endpoint for the collection.
@@ -825,6 +907,12 @@ class CfnIndex(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="indexRef")
+    def index_ref(self) -> _IndexReference_e9ecd833:
+        '''A reference to a Index resource.'''
+        return typing.cast(_IndexReference_e9ecd833, jsii.get(self, "indexRef"))
+
     @builtins.property
     @jsii.member(jsii_name="collectionEndpoint")
     def collection_endpoint(self) -> builtins.str:
@@ -1076,10 +1164,10 @@ class CfnIndex(
                             dimension=123,
                             index=False,
                             method=opensearchserverless.CfnIndex.MethodProperty(
-                                engine="engine",
                                 name="name",
                 
                                 # the properties below are optional
+                                engine="engine",
                                 parameters=opensearchserverless.CfnIndex.ParametersProperty(
                                     ef_construction=123,
                                     m=123
@@ -1127,8 +1215,8 @@ class CfnIndex(
         jsii_type="aws-cdk-lib.aws_opensearchserverless.CfnIndex.MethodProperty",
         jsii_struct_bases=[],
         name_mapping={
-            "engine": "engine",
             "name": "name",
+            "engine": "engine",
             "parameters": "parameters",
             "space_type": "spaceType",
         },
@@ -1137,15 +1225,15 @@ class CfnIndex(
         def __init__(
             self,
             *,
-            engine: builtins.str,
             name: builtins.str,
+            engine: typing.Optional[builtins.str] = None,
             parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnIndex.ParametersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             space_type: typing.Optional[builtins.str] = None,
         ) -> None:
             '''Configuration for k-NN search method.
 
-            :param engine: The k-NN search engine to use.
             :param name: The algorithm name for k-NN search.
+            :param engine: The k-NN search engine to use.
             :param parameters: Additional parameters for the k-NN algorithm.
             :param space_type: The distance function used for k-NN search.
 
@@ -1159,10 +1247,10 @@ class CfnIndex(
                 from aws_cdk import aws_opensearchserverless as opensearchserverless
                 
                 method_property = opensearchserverless.CfnIndex.MethodProperty(
-                    engine="engine",
                     name="name",
                 
                     # the properties below are optional
+                    engine="engine",
                     parameters=opensearchserverless.CfnIndex.ParametersProperty(
                         ef_construction=123,
                         m=123
@@ -1172,29 +1260,20 @@ class CfnIndex(
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__1f32a7c2cc9cc53a405856608b840b3cd657cad90afeb4b25d6577b3e1573b35)
-                check_type(argname="argument engine", value=engine, expected_type=type_hints["engine"])
                 check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+                check_type(argname="argument engine", value=engine, expected_type=type_hints["engine"])
                 check_type(argname="argument parameters", value=parameters, expected_type=type_hints["parameters"])
                 check_type(argname="argument space_type", value=space_type, expected_type=type_hints["space_type"])
             self._values: typing.Dict[builtins.str, typing.Any] = {
-                "engine": engine,
                 "name": name,
             }
+            if engine is not None:
+                self._values["engine"] = engine
             if parameters is not None:
                 self._values["parameters"] = parameters
             if space_type is not None:
                 self._values["space_type"] = space_type
 
-        @builtins.property
-        def engine(self) -> builtins.str:
-            '''The k-NN search engine to use.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-index-method.html#cfn-opensearchserverless-index-method-engine
-            '''
-            result = self._values.get("engine")
-            assert result is not None, "Required property 'engine' is missing"
-            return typing.cast(builtins.str, result)
-
         @builtins.property
         def name(self) -> builtins.str:
             '''The algorithm name for k-NN search.
@@ -1205,6 +1284,15 @@ class CfnIndex(
             assert result is not None, "Required property 'name' is missing"
             return typing.cast(builtins.str, result)
 
+        @builtins.property
+        def engine(self) -> typing.Optional[builtins.str]:
+            '''The k-NN search engine to use.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-index-method.html#cfn-opensearchserverless-index-method-engine
+            '''
+            result = self._values.get("engine")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         @builtins.property
         def parameters(
             self,
@@ -1356,10 +1444,10 @@ class CfnIndex(
                     dimension=123,
                     index=False,
                     method=opensearchserverless.CfnIndex.MethodProperty(
-                        engine="engine",
                         name="name",
                 
                         # the properties below are optional
+                        engine="engine",
                         parameters=opensearchserverless.CfnIndex.ParametersProperty(
                             ef_construction=123,
                             m=123
@@ -1520,10 +1608,10 @@ class CfnIndexProps:
                             dimension=123,
                             index=False,
                             method=opensearchserverless.CfnIndex.MethodProperty(
-                                engine="engine",
                                 name="name",
             
                                 # the properties below are optional
+                                engine="engine",
                                 parameters=opensearchserverless.CfnIndex.ParametersProperty(
                                     ef_construction=123,
                                     m=123
@@ -1615,7 +1703,7 @@ class CfnIndexProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ILifecyclePolicyRef_57cf5ace)
 class CfnLifecyclePolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1655,7 +1743,8 @@ class CfnLifecyclePolicy(
         type: builtins.str,
         description: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::OpenSearchServerless::LifecyclePolicy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the lifecycle policy.
@@ -1708,6 +1797,12 @@ class CfnLifecyclePolicy(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="lifecyclePolicyRef")
+    def lifecycle_policy_ref(self) -> _LifecyclePolicyReference_5f985de6:
+        '''A reference to a LifecyclePolicy resource.'''
+        return typing.cast(_LifecyclePolicyReference_5f985de6, jsii.get(self, "lifecyclePolicyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -1870,7 +1965,7 @@ class CfnLifecyclePolicyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ISecurityConfigRef_94652651)
 class CfnSecurityConfig(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1892,6 +1987,10 @@ class CfnSecurityConfig(
         
         cfn_security_config = opensearchserverless.CfnSecurityConfig(self, "MyCfnSecurityConfig",
             description="description",
+            iam_federation_options=opensearchserverless.CfnSecurityConfig.IamFederationConfigOptionsProperty(
+                group_attribute="groupAttribute",
+                user_attribute="userAttribute"
+            ),
             iam_identity_center_options=opensearchserverless.CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty(
                 instance_arn="instanceArn",
         
@@ -1922,15 +2021,18 @@ class CfnSecurityConfig(
         id: builtins.str,
         *,
         description: typing.Optional[builtins.str] = None,
+        iam_federation_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSecurityConfig.IamFederationConfigOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         iam_identity_center_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
         saml_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSecurityConfig.SamlConfigOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         type: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::OpenSearchServerless::SecurityConfig``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param description: The description of the security configuration.
+        :param iam_federation_options: Describes IAM federation options in the form of a key-value map. Contains configuration details about how OpenSearch Serverless integrates with external identity providers through federation.
         :param iam_identity_center_options: Describes IAM Identity Center options in the form of a key-value map.
         :param name: The name of the security configuration.
         :param saml_options: SAML options for the security configuration in the form of a key-value map.
@@ -1942,6 +2044,7 @@ class CfnSecurityConfig(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnSecurityConfigProps(
             description=description,
+            iam_federation_options=iam_federation_options,
             iam_identity_center_options=iam_identity_center_options,
             name=name,
             saml_options=saml_options,
@@ -2023,6 +2126,12 @@ class CfnSecurityConfig(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="securityConfigRef")
+    def security_config_ref(self) -> _SecurityConfigReference_f5680479:
+        '''A reference to a SecurityConfig resource.'''
+        return typing.cast(_SecurityConfigReference_f5680479, jsii.get(self, "securityConfigRef"))
+
     @builtins.property
     @jsii.member(jsii_name="description")
     def description(self) -> typing.Optional[builtins.str]:
@@ -2036,6 +2145,24 @@ class CfnSecurityConfig(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="iamFederationOptions")
+    def iam_federation_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSecurityConfig.IamFederationConfigOptionsProperty"]]:
+        '''Describes IAM federation options in the form of a key-value map.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSecurityConfig.IamFederationConfigOptionsProperty"]], jsii.get(self, "iamFederationOptions"))
+
+    @iam_federation_options.setter
+    def iam_federation_options(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSecurityConfig.IamFederationConfigOptionsProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ccfa7fa0cc51cc5944f3e224a02320990df0f8ebafce43a7009528585ae23975)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "iamFederationOptions", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="iamIdentityCenterOptions")
     def iam_identity_center_options(
@@ -2098,6 +2225,85 @@ class CfnSecurityConfig(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "type", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_opensearchserverless.CfnSecurityConfig.IamFederationConfigOptionsProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "group_attribute": "groupAttribute",
+            "user_attribute": "userAttribute",
+        },
+    )
+    class IamFederationConfigOptionsProperty:
+        def __init__(
+            self,
+            *,
+            group_attribute: typing.Optional[builtins.str] = None,
+            user_attribute: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Describes IAM federation options for an OpenSearch Serverless security configuration in the form of a key-value map.
+
+            These options define how OpenSearch Serverless integrates with external identity providers using federation.
+
+            :param group_attribute: The group attribute for this IAM federation integration. This attribute is used to map identity provider groups to OpenSearch Serverless permissions.
+            :param user_attribute: The user attribute for this IAM federation integration. This attribute is used to identify users in the federated authentication process.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-securityconfig-iamfederationconfigoptions.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_opensearchserverless as opensearchserverless
+                
+                iam_federation_config_options_property = opensearchserverless.CfnSecurityConfig.IamFederationConfigOptionsProperty(
+                    group_attribute="groupAttribute",
+                    user_attribute="userAttribute"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__ce8f26dda3a935772ecc5546e8017fcfdc1c87fe45685294d9860d147cf53040)
+                check_type(argname="argument group_attribute", value=group_attribute, expected_type=type_hints["group_attribute"])
+                check_type(argname="argument user_attribute", value=user_attribute, expected_type=type_hints["user_attribute"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if group_attribute is not None:
+                self._values["group_attribute"] = group_attribute
+            if user_attribute is not None:
+                self._values["user_attribute"] = user_attribute
+
+        @builtins.property
+        def group_attribute(self) -> typing.Optional[builtins.str]:
+            '''The group attribute for this IAM federation integration.
+
+            This attribute is used to map identity provider groups to OpenSearch Serverless permissions.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-securityconfig-iamfederationconfigoptions.html#cfn-opensearchserverless-securityconfig-iamfederationconfigoptions-groupattribute
+            '''
+            result = self._values.get("group_attribute")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def user_attribute(self) -> typing.Optional[builtins.str]:
+            '''The user attribute for this IAM federation integration.
+
+            This attribute is used to identify users in the federated authentication process.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-securityconfig-iamfederationconfigoptions.html#cfn-opensearchserverless-securityconfig-iamfederationconfigoptions-userattribute
+            '''
+            result = self._values.get("user_attribute")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "IamFederationConfigOptionsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_opensearchserverless.CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty",
         jsii_struct_bases=[],
@@ -2267,7 +2473,7 @@ class CfnSecurityConfig(
 
             :param metadata: The XML IdP metadata file generated from your identity provider.
             :param group_attribute: The group attribute for this SAML integration.
-            :param open_search_serverless_entity_id: Custom entity id attribute to override default entity id for this saml integration.
+            :param open_search_serverless_entity_id: Custom entity ID attribute to override the default entity ID for this SAML integration.
             :param session_timeout: The session timeout, in minutes. Default is 60 minutes (12 hours).
             :param user_attribute: A user attribute for this SAML integration.
 
@@ -2330,7 +2536,7 @@ class CfnSecurityConfig(
 
         @builtins.property
         def open_search_serverless_entity_id(self) -> typing.Optional[builtins.str]:
-            '''Custom entity id attribute to override default entity id for this saml integration.
+            '''Custom entity ID attribute to override the default entity ID for this SAML integration.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-securityconfig-samlconfigoptions.html#cfn-opensearchserverless-securityconfig-samlconfigoptions-opensearchserverlessentityid
             '''
@@ -2374,6 +2580,7 @@ class CfnSecurityConfig(
     jsii_struct_bases=[],
     name_mapping={
         "description": "description",
+        "iam_federation_options": "iamFederationOptions",
         "iam_identity_center_options": "iamIdentityCenterOptions",
         "name": "name",
         "saml_options": "samlOptions",
@@ -2385,6 +2592,7 @@ class CfnSecurityConfigProps:
         self,
         *,
         description: typing.Optional[builtins.str] = None,
+        iam_federation_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.IamFederationConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         iam_identity_center_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
         saml_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.SamlConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -2393,6 +2601,7 @@ class CfnSecurityConfigProps:
         '''Properties for defining a ``CfnSecurityConfig``.
 
         :param description: The description of the security configuration.
+        :param iam_federation_options: Describes IAM federation options in the form of a key-value map. Contains configuration details about how OpenSearch Serverless integrates with external identity providers through federation.
         :param iam_identity_center_options: Describes IAM Identity Center options in the form of a key-value map.
         :param name: The name of the security configuration.
         :param saml_options: SAML options for the security configuration in the form of a key-value map.
@@ -2409,6 +2618,10 @@ class CfnSecurityConfigProps:
             
             cfn_security_config_props = opensearchserverless.CfnSecurityConfigProps(
                 description="description",
+                iam_federation_options=opensearchserverless.CfnSecurityConfig.IamFederationConfigOptionsProperty(
+                    group_attribute="groupAttribute",
+                    user_attribute="userAttribute"
+                ),
                 iam_identity_center_options=opensearchserverless.CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty(
                     instance_arn="instanceArn",
             
@@ -2435,6 +2648,7 @@ class CfnSecurityConfigProps:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__83172f8fcf5e40df2e2a8ddc136c744969aad86c37d45de37b6d75f0dc154be4)
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument iam_federation_options", value=iam_federation_options, expected_type=type_hints["iam_federation_options"])
             check_type(argname="argument iam_identity_center_options", value=iam_identity_center_options, expected_type=type_hints["iam_identity_center_options"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
             check_type(argname="argument saml_options", value=saml_options, expected_type=type_hints["saml_options"])
@@ -2442,6 +2656,8 @@ class CfnSecurityConfigProps:
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if description is not None:
             self._values["description"] = description
+        if iam_federation_options is not None:
+            self._values["iam_federation_options"] = iam_federation_options
         if iam_identity_center_options is not None:
             self._values["iam_identity_center_options"] = iam_identity_center_options
         if name is not None:
@@ -2460,6 +2676,19 @@ class CfnSecurityConfigProps:
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def iam_federation_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnSecurityConfig.IamFederationConfigOptionsProperty]]:
+        '''Describes IAM federation options in the form of a key-value map.
+
+        Contains configuration details about how OpenSearch Serverless integrates with external identity providers through federation.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-securityconfig.html#cfn-opensearchserverless-securityconfig-iamfederationoptions
+        '''
+        result = self._values.get("iam_federation_options")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnSecurityConfig.IamFederationConfigOptionsProperty]], result)
+
     @builtins.property
     def iam_identity_center_options(
         self,
@@ -2514,7 +2743,7 @@ class CfnSecurityConfigProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ISecurityPolicyRef_535a5cb1)
 class CfnSecurityPolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2556,7 +2785,8 @@ class CfnSecurityPolicy(
         type: builtins.str,
         description: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::OpenSearchServerless::SecurityPolicy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the policy.
@@ -2609,6 +2839,12 @@ class CfnSecurityPolicy(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="securityPolicyRef")
+    def security_policy_ref(self) -> _SecurityPolicyReference_e3c4978e:
+        '''A reference to a SecurityPolicy resource.'''
+        return typing.cast(_SecurityPolicyReference_e3c4978e, jsii.get(self, "securityPolicyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -2773,7 +3009,7 @@ class CfnSecurityPolicyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IVpcEndpointRef_32532ed6)
 class CfnVpcEndpoint(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2813,7 +3049,8 @@ class CfnVpcEndpoint(
         vpc_id: builtins.str,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::OpenSearchServerless::VpcEndpoint``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the endpoint.
@@ -2880,6 +3117,12 @@ class CfnVpcEndpoint(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="vpcEndpointRef")
+    def vpc_endpoint_ref(self) -> _VpcEndpointReference_90f2b7dd:
+        '''A reference to a VpcEndpoint resource.'''
+        return typing.cast(_VpcEndpointReference_90f2b7dd, jsii.get(self, "vpcEndpointRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -3135,6 +3378,22 @@ def _typecheckingstub__14f72b773d506ce15b59731aeb24f2f4a877a32d31af6ebf57a32ce70
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__1a867d3ccfec6274c8dba1d54e9985d5848fc3846259a0066b6a7a2747a2f202(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4873da41e53bbb04f400bc347dc5055de33d58a34837863127c0a03bff69ac7f(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    collection_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__3c88f558406d9de750b6a01e95a1eade398fef738592cdd78170d3f472b7ff7e(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -3261,8 +3520,8 @@ def _typecheckingstub__a5bb392b8c065f198a0fe7fd6e0fa2156f493990b76e0fee04edb9297
 
 def _typecheckingstub__1f32a7c2cc9cc53a405856608b840b3cd657cad90afeb4b25d6577b3e1573b35(
     *,
-    engine: builtins.str,
     name: builtins.str,
+    engine: typing.Optional[builtins.str] = None,
     parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnIndex.ParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     space_type: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -3362,6 +3621,7 @@ def _typecheckingstub__ed9d460597a09f666d8e08c01fd366ec5026a44848df01fe64ec8aa93
     id: builtins.str,
     *,
     description: typing.Optional[builtins.str] = None,
+    iam_federation_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.IamFederationConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     iam_identity_center_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
     saml_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.SamlConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -3388,6 +3648,12 @@ def _typecheckingstub__a7b44e920b0f0e4d138dcb200c4536168d3965f24eed3226a4574e927
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__ccfa7fa0cc51cc5944f3e224a02320990df0f8ebafce43a7009528585ae23975(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnSecurityConfig.IamFederationConfigOptionsProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__1158fc0f587cad32843a157af521fc2d669a0bc1f7c84c5e1dcd753237a9ca9a(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty]],
 ) -> None:
@@ -3412,6 +3678,14 @@ def _typecheckingstub__80701c5b69899d2a5416bba637f7adf26445dcef6c813c58399037cc3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__ce8f26dda3a935772ecc5546e8017fcfdc1c87fe45685294d9860d147cf53040(
+    *,
+    group_attribute: typing.Optional[builtins.str] = None,
+    user_attribute: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7013bb6fc78d2c057c35211835fafe79d7d06fc41bdb98c07e46a37fd20caff9(
     *,
     instance_arn: builtins.str,
@@ -3438,6 +3712,7 @@ def _typecheckingstub__0390198d9b44e1b80737604ac5328dbfc7481d5b1ba8f915caa2e8c2a
 def _typecheckingstub__83172f8fcf5e40df2e2a8ddc136c744969aad86c37d45de37b6d75f0dc154be4(
     *,
     description: typing.Optional[builtins.str] = None,
+    iam_federation_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.IamFederationConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     iam_identity_center_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
     saml_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.SamlConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,