aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_workspacesweb/__init__.py

@@ -77,9 +77,31 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_workspacesweb import (
+    BrowserSettingsReference as _BrowserSettingsReference_37e59681,
+    DataProtectionSettingsReference as _DataProtectionSettingsReference_3de93c3b,
+    IBrowserSettingsRef as _IBrowserSettingsRef_27fa755b,
+    IDataProtectionSettingsRef as _IDataProtectionSettingsRef_733dabd5,
+    IIdentityProviderRef as _IIdentityProviderRef_1989e7fb,
+    IIpAccessSettingsRef as _IIpAccessSettingsRef_5ce903cc,
+    INetworkSettingsRef as _INetworkSettingsRef_9fcb0139,
+    IPortalRef as _IPortalRef_cb17b713,
+    ISessionLoggerRef as _ISessionLoggerRef_0b36bc89,
+    ITrustStoreRef as _ITrustStoreRef_b3e9ed97,
+    IUserAccessLoggingSettingsRef as _IUserAccessLoggingSettingsRef_35b44bda,
+    IUserSettingsRef as _IUserSettingsRef_02671625,
+    IdentityProviderReference as _IdentityProviderReference_fb66eb46,
+    IpAccessSettingsReference as _IpAccessSettingsReference_456f1045,
+    NetworkSettingsReference as _NetworkSettingsReference_ed72cf7d,
+    PortalReference as _PortalReference_7c6ae828,
+    SessionLoggerReference as _SessionLoggerReference_21b78d4c,
+    TrustStoreReference as _TrustStoreReference_778699bf,
+    UserAccessLoggingSettingsReference as _UserAccessLoggingSettingsReference_b92d801e,
+    UserSettingsReference as _UserSettingsReference_9c05e0ee,
+)
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IBrowserSettingsRef_27fa755b, _ITaggableV2_4e6798f8)
 class CfnBrowserSettings(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -122,7 +144,8 @@ class CfnBrowserSettings(
         customer_managed_key: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WorkSpacesWeb::BrowserSettings``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param additional_encryption_context: Additional encryption context of the browser settings.
@@ -191,6 +214,12 @@ class CfnBrowserSettings(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrBrowserSettingsArn"))
 
+    @builtins.property
+    @jsii.member(jsii_name="browserSettingsRef")
+    def browser_settings_ref(self) -> _BrowserSettingsReference_37e59681:
+        '''A reference to a BrowserSettings resource.'''
+        return typing.cast(_BrowserSettingsReference_37e59681, jsii.get(self, "browserSettingsRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cdkTagManager")
     def cdk_tag_manager(self) -> _TagManager_0a598cb3:
@@ -377,7 +406,7 @@ class CfnBrowserSettingsProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IDataProtectionSettingsRef_733dabd5, _ITaggableV2_4e6798f8)
 class CfnDataProtectionSettings(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -450,7 +479,8 @@ class CfnDataProtectionSettings(
         inline_redaction_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDataProtectionSettings.InlineRedactionConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WorkSpacesWeb::DataProtectionSettings``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param additional_encryption_context: The additional encryption context of the data protection settings.
@@ -543,6 +573,12 @@ class CfnDataProtectionSettings(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="dataProtectionSettingsRef")
+    def data_protection_settings_ref(self) -> _DataProtectionSettingsReference_3de93c3b:
+        '''A reference to a DataProtectionSettings resource.'''
+        return typing.cast(_DataProtectionSettingsReference_3de93c3b, jsii.get(self, "dataProtectionSettingsRef"))
+
     @builtins.property
     @jsii.member(jsii_name="additionalEncryptionContext")
     def additional_encryption_context(
@@ -1298,7 +1334,7 @@ class CfnDataProtectionSettingsProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IIdentityProviderRef_1989e7fb, _ITaggableV2_4e6798f8)
 class CfnIdentityProvider(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1345,7 +1381,8 @@ class CfnIdentityProvider(
         portal_arn: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WorkSpacesWeb::IdentityProvider``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param identity_provider_details: The identity provider details. The following list describes the provider detail keys for each identity provider type. - For Google and Login with Amazon: - ``client_id`` - ``client_secret`` - ``authorize_scopes`` - For Facebook: - ``client_id`` - ``client_secret`` - ``authorize_scopes`` - ``api_version`` - For Sign in with Apple: - ``client_id`` - ``team_id`` - ``key_id`` - ``private_key`` - ``authorize_scopes`` - For OIDC providers: - ``client_id`` - ``client_secret`` - ``attributes_request_method`` - ``oidc_issuer`` - ``authorize_scopes`` - ``authorize_url`` *if not available from discovery URL specified by oidc_issuer key* - ``token_url`` *if not available from discovery URL specified by oidc_issuer key* - ``attributes_url`` *if not available from discovery URL specified by oidc_issuer key* - ``jwks_uri`` *if not available from discovery URL specified by oidc_issuer key* - For SAML providers: - ``MetadataFile`` OR ``MetadataURL`` - ``IDPSignout`` (boolean) *optional* - ``IDPInit`` (boolean) *optional* - ``RequestSigningAlgorithm`` (string) *optional* - Only accepts ``rsa-sha256`` - ``EncryptedResponses`` (boolean) *optional*
@@ -1418,6 +1455,12 @@ class CfnIdentityProvider(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="identityProviderRef")
+    def identity_provider_ref(self) -> _IdentityProviderReference_fb66eb46:
+        '''A reference to a IdentityProvider resource.'''
+        return typing.cast(_IdentityProviderReference_fb66eb46, jsii.get(self, "identityProviderRef"))
+
     @builtins.property
     @jsii.member(jsii_name="identityProviderDetails")
     def identity_provider_details(
@@ -1654,7 +1697,7 @@ class CfnIdentityProviderProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IIpAccessSettingsRef_5ce903cc, _ITaggableV2_4e6798f8)
 class CfnIpAccessSettings(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1708,7 +1751,8 @@ class CfnIpAccessSettings(
         display_name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WorkSpacesWeb::IpAccessSettings``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param ip_rules: The IP rules of the IP access settings.
@@ -1801,6 +1845,12 @@ class CfnIpAccessSettings(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="ipAccessSettingsRef")
+    def ip_access_settings_ref(self) -> _IpAccessSettingsReference_456f1045:
+        '''A reference to a IpAccessSettings resource.'''
+        return typing.cast(_IpAccessSettingsReference_456f1045, jsii.get(self, "ipAccessSettingsRef"))
+
     @builtins.property
     @jsii.member(jsii_name="ipRules")
     def ip_rules(
@@ -2124,7 +2174,7 @@ class CfnIpAccessSettingsProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _INetworkSettingsRef_9fcb0139, _ITaggableV2_4e6798f8)
 class CfnNetworkSettings(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2171,7 +2221,8 @@ class CfnNetworkSettings(
         vpc_id: builtins.str,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WorkSpacesWeb::NetworkSettings``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param security_group_ids: One or more security groups used to control access from streaming instances to your VPC. *Pattern* : ``^[\\w+\\-]+$``
@@ -2251,6 +2302,12 @@ class CfnNetworkSettings(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="networkSettingsRef")
+    def network_settings_ref(self) -> _NetworkSettingsReference_ed72cf7d:
+        '''A reference to a NetworkSettings resource.'''
+        return typing.cast(_NetworkSettingsReference_ed72cf7d, jsii.get(self, "networkSettingsRef"))
+
     @builtins.property
     @jsii.member(jsii_name="securityGroupIds")
     def security_group_ids(self) -> typing.List[builtins.str]:
@@ -2426,7 +2483,7 @@ class CfnNetworkSettingsProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IPortalRef_cb17b713, _ITaggableV2_4e6798f8)
 class CfnPortal(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2461,6 +2518,7 @@ class CfnPortal(
             ip_access_settings_arn="ipAccessSettingsArn",
             max_concurrent_sessions=123,
             network_settings_arn="networkSettingsArn",
+            session_logger_arn="sessionLoggerArn",
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -2486,12 +2544,14 @@ class CfnPortal(
         ip_access_settings_arn: typing.Optional[builtins.str] = None,
         max_concurrent_sessions: typing.Optional[jsii.Number] = None,
         network_settings_arn: typing.Optional[builtins.str] = None,
+        session_logger_arn: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         trust_store_arn: typing.Optional[builtins.str] = None,
         user_access_logging_settings_arn: typing.Optional[builtins.str] = None,
         user_settings_arn: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WorkSpacesWeb::Portal``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param additional_encryption_context: The additional encryption context of the portal.
@@ -2504,6 +2564,7 @@ class CfnPortal(
         :param ip_access_settings_arn: The ARN of the IP access settings that is associated with the web portal.
         :param max_concurrent_sessions: The maximum number of concurrent sessions for the portal.
         :param network_settings_arn: The ARN of the network settings that is associated with the web portal.
+        :param session_logger_arn: The ARN of the session logger that is assocaited with the portal.
         :param tags: The tags to add to the web portal. A tag is a key-value pair.
         :param trust_store_arn: The ARN of the trust store that is associated with the web portal.
         :param user_access_logging_settings_arn: The ARN of the user access logging settings that is associated with the web portal.
@@ -2524,6 +2585,7 @@ class CfnPortal(
             ip_access_settings_arn=ip_access_settings_arn,
             max_concurrent_sessions=max_concurrent_sessions,
             network_settings_arn=network_settings_arn,
+            session_logger_arn=session_logger_arn,
             tags=tags,
             trust_store_arn=trust_store_arn,
             user_access_logging_settings_arn=user_access_logging_settings_arn,
@@ -2645,6 +2707,12 @@ class CfnPortal(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="portalRef")
+    def portal_ref(self) -> _PortalReference_7c6ae828:
+        '''A reference to a Portal resource.'''
+        return typing.cast(_PortalReference_7c6ae828, jsii.get(self, "portalRef"))
+
     @builtins.property
     @jsii.member(jsii_name="additionalEncryptionContext")
     def additional_encryption_context(
@@ -2786,6 +2854,19 @@ class CfnPortal(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "networkSettingsArn", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="sessionLoggerArn")
+    def session_logger_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the session logger that is assocaited with the portal.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "sessionLoggerArn"))
+
+    @session_logger_arn.setter
+    def session_logger_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__799f778b7f3d528d4330acec14db7800e1877f11411b658cf7b11ad8463a43b6)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "sessionLoggerArn", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -2856,6 +2937,7 @@ class CfnPortal(
         "ip_access_settings_arn": "ipAccessSettingsArn",
         "max_concurrent_sessions": "maxConcurrentSessions",
         "network_settings_arn": "networkSettingsArn",
+        "session_logger_arn": "sessionLoggerArn",
         "tags": "tags",
         "trust_store_arn": "trustStoreArn",
         "user_access_logging_settings_arn": "userAccessLoggingSettingsArn",
@@ -2876,6 +2958,7 @@ class CfnPortalProps:
         ip_access_settings_arn: typing.Optional[builtins.str] = None,
         max_concurrent_sessions: typing.Optional[jsii.Number] = None,
         network_settings_arn: typing.Optional[builtins.str] = None,
+        session_logger_arn: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         trust_store_arn: typing.Optional[builtins.str] = None,
         user_access_logging_settings_arn: typing.Optional[builtins.str] = None,
@@ -2893,6 +2976,7 @@ class CfnPortalProps:
         :param ip_access_settings_arn: The ARN of the IP access settings that is associated with the web portal.
         :param max_concurrent_sessions: The maximum number of concurrent sessions for the portal.
         :param network_settings_arn: The ARN of the network settings that is associated with the web portal.
+        :param session_logger_arn: The ARN of the session logger that is assocaited with the portal.
         :param tags: The tags to add to the web portal. A tag is a key-value pair.
         :param trust_store_arn: The ARN of the trust store that is associated with the web portal.
         :param user_access_logging_settings_arn: The ARN of the user access logging settings that is associated with the web portal.
@@ -2920,6 +3004,7 @@ class CfnPortalProps:
                 ip_access_settings_arn="ipAccessSettingsArn",
                 max_concurrent_sessions=123,
                 network_settings_arn="networkSettingsArn",
+                session_logger_arn="sessionLoggerArn",
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -2941,6 +3026,7 @@ class CfnPortalProps:
             check_type(argname="argument ip_access_settings_arn", value=ip_access_settings_arn, expected_type=type_hints["ip_access_settings_arn"])
             check_type(argname="argument max_concurrent_sessions", value=max_concurrent_sessions, expected_type=type_hints["max_concurrent_sessions"])
             check_type(argname="argument network_settings_arn", value=network_settings_arn, expected_type=type_hints["network_settings_arn"])
+            check_type(argname="argument session_logger_arn", value=session_logger_arn, expected_type=type_hints["session_logger_arn"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
             check_type(argname="argument trust_store_arn", value=trust_store_arn, expected_type=type_hints["trust_store_arn"])
             check_type(argname="argument user_access_logging_settings_arn", value=user_access_logging_settings_arn, expected_type=type_hints["user_access_logging_settings_arn"])
@@ -2966,6 +3052,8 @@ class CfnPortalProps:
             self._values["max_concurrent_sessions"] = max_concurrent_sessions
         if network_settings_arn is not None:
             self._values["network_settings_arn"] = network_settings_arn
+        if session_logger_arn is not None:
+            self._values["session_logger_arn"] = session_logger_arn
         if tags is not None:
             self._values["tags"] = tags
         if trust_store_arn is not None:
@@ -3078,6 +3166,15 @@ class CfnPortalProps:
         result = self._values.get("network_settings_arn")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def session_logger_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the session logger that is assocaited with the portal.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-portal.html#cfn-workspacesweb-portal-sessionloggerarn
+        '''
+        result = self._values.get("session_logger_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''The tags to add to the web portal.
@@ -3128,18 +3225,16 @@ class CfnPortalProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
-class CfnTrustStore(
+@jsii.implements(_IInspectable_c2943556, _ISessionLoggerRef_0b36bc89, _ITaggableV2_4e6798f8)
+class CfnSessionLogger(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
-    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnTrustStore",
+    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnSessionLogger",
 ):
-    '''This resource specifies a trust store that can be associated with a web portal.
-
-    A trust store contains certificate authority (CA) certificates. Once associated with a web portal, the browser in a streaming session will recognize certificates that have been issued using any of the CAs in the trust store. If your organization has internal websites that use certificates issued by private CAs, you should add the private CA certificate to the trust store.
+    '''The session logger resource.
 
-    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-truststore.html
-    :cloudformationResource: AWS::WorkSpacesWeb::TrustStore
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-sessionlogger.html
+    :cloudformationResource: AWS::WorkSpacesWeb::SessionLogger
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -3148,10 +3243,31 @@ class CfnTrustStore(
         # The values are placeholders you should change.
         from aws_cdk import aws_workspacesweb as workspacesweb
         
-        cfn_trust_store = workspacesweb.CfnTrustStore(self, "MyCfnTrustStore",
-            certificate_list=["certificateList"],
+        # all: Any
+        
+        cfn_session_logger = workspacesweb.CfnSessionLogger(self, "MyCfnSessionLogger",
+            event_filter=workspacesweb.CfnSessionLogger.EventFilterProperty(
+                all=all,
+                include=["include"]
+            ),
+            log_configuration=workspacesweb.CfnSessionLogger.LogConfigurationProperty(
+                s3=workspacesweb.CfnSessionLogger.S3LogConfigurationProperty(
+                    bucket="bucket",
+                    folder_structure="folderStructure",
+                    log_file_format="logFileFormat",
+        
+                    # the properties below are optional
+                    bucket_owner="bucketOwner",
+                    key_prefix="keyPrefix"
+                )
+            ),
         
             # the properties below are optional
+            additional_encryption_context={
+                "additional_encryption_context_key": "additionalEncryptionContext"
+            },
+            customer_managed_key="customerManagedKey",
+            display_name="displayName",
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -3164,20 +3280,36 @@ class CfnTrustStore(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        certificate_list: typing.Sequence[builtins.str],
+        event_filter: typing.Union[_IResolvable_da3f097b, typing.Union["CfnSessionLogger.EventFilterProperty", typing.Dict[builtins.str, typing.Any]]],
+        log_configuration: typing.Union[_IResolvable_da3f097b, typing.Union["CfnSessionLogger.LogConfigurationProperty", typing.Dict[builtins.str, typing.Any]]],
+        additional_encryption_context: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
+        customer_managed_key: typing.Optional[builtins.str] = None,
+        display_name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WorkSpacesWeb::SessionLogger``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param certificate_list: A list of CA certificates to be added to the trust store.
-        :param tags: The tags to add to the trust store. A tag is a key-value pair.
+        :param event_filter: The filter that specifies which events to monitor.
+        :param log_configuration: The configuration that specifies where logs are fowarded.
+        :param additional_encryption_context: The additional encryption context of the session logger.
+        :param customer_managed_key: The custom managed key of the session logger.
+        :param display_name: The human-readable display name.
+        :param tags: 
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__cc9c8ead0938c5ad416a02ff1511be2c3cbf2519166e43c80e65e581fac2cab7)
+            type_hints = typing.get_type_hints(_typecheckingstub__5ecda6b775e0aad6e840315c150daa1cae407a534f747e34d2336449d0085a29)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-        props = CfnTrustStoreProps(certificate_list=certificate_list, tags=tags)
+        props = CfnSessionLoggerProps(
+            event_filter=event_filter,
+            log_configuration=log_configuration,
+            additional_encryption_context=additional_encryption_context,
+            customer_managed_key=customer_managed_key,
+            display_name=display_name,
+            tags=tags,
+        )
 
         jsii.create(self.__class__, self, [scope, id, props])
 
@@ -3188,7 +3320,7 @@ class CfnTrustStore(
         :param inspector: tree inspector to collect and process attributes.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__5fb3d54892745fdc13234075ce86bd3f8d4acfe9ec88a393309766bcf833012b)
+            type_hints = typing.get_type_hints(_typecheckingstub__32c2901f06899b3e8b2aed11d0479e80af4ae3bd2497852311c46da6edf80e41)
             check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
         return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
 
@@ -3201,7 +3333,7 @@ class CfnTrustStore(
         :param props: -
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__836cb2ee4e300cb4cb603faf540c0c6dad36379e65dad6d178875cdc39e56603)
+            type_hints = typing.get_type_hints(_typecheckingstub__02821e951e1a7ebffab0cee338cb22e018833b70a4b8b4db79eadb9491b74956)
             check_type(argname="argument props", value=props, expected_type=type_hints["props"])
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
 
@@ -3214,20 +3346,29 @@ class CfnTrustStore(
     @builtins.property
     @jsii.member(jsii_name="attrAssociatedPortalArns")
     def attr_associated_portal_arns(self) -> typing.List[builtins.str]:
-        '''A list of web portal ARNs that this trust store is associated with.
+        '''The associated portal ARN.
 
         :cloudformationAttribute: AssociatedPortalArns
         '''
         return typing.cast(typing.List[builtins.str], jsii.get(self, "attrAssociatedPortalArns"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrTrustStoreArn")
-    def attr_trust_store_arn(self) -> builtins.str:
-        '''The ARN of the trust store.
+    @jsii.member(jsii_name="attrCreationDate")
+    def attr_creation_date(self) -> builtins.str:
+        '''The date the session logger resource was created.
 
-        :cloudformationAttribute: TrustStoreArn
+        :cloudformationAttribute: CreationDate
         '''
-        return typing.cast(builtins.str, jsii.get(self, "attrTrustStoreArn"))
+        return typing.cast(builtins.str, jsii.get(self, "attrCreationDate"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrSessionLoggerArn")
+    def attr_session_logger_arn(self) -> builtins.str:
+        '''The ARN of the session logger resource.
+
+        :cloudformationAttribute: SessionLoggerArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrSessionLoggerArn"))
 
     @builtins.property
     @jsii.member(jsii_name="cdkTagManager")
@@ -3241,142 +3382,791 @@ class CfnTrustStore(
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
     @builtins.property
-    @jsii.member(jsii_name="certificateList")
-    def certificate_list(self) -> typing.List[builtins.str]:
-        '''A list of CA certificates to be added to the trust store.'''
-        return typing.cast(typing.List[builtins.str], jsii.get(self, "certificateList"))
+    @jsii.member(jsii_name="sessionLoggerRef")
+    def session_logger_ref(self) -> _SessionLoggerReference_21b78d4c:
+        '''A reference to a SessionLogger resource.'''
+        return typing.cast(_SessionLoggerReference_21b78d4c, jsii.get(self, "sessionLoggerRef"))
 
-    @certificate_list.setter
-    def certificate_list(self, value: typing.List[builtins.str]) -> None:
+    @builtins.property
+    @jsii.member(jsii_name="eventFilter")
+    def event_filter(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnSessionLogger.EventFilterProperty"]:
+        '''The filter that specifies which events to monitor.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnSessionLogger.EventFilterProperty"], jsii.get(self, "eventFilter"))
+
+    @event_filter.setter
+    def event_filter(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnSessionLogger.EventFilterProperty"],
+    ) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__d6c348f8d89e15637f5e7f299791ad808bd6fadfe67032f77e095b03cb3b19f1)
+            type_hints = typing.get_type_hints(_typecheckingstub__0f797a952eee0e5ef3c6c4e74102d30901b3a261e47539149a187359b0273935)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "certificateList", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "eventFilter", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="tags")
-    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''The tags to add to the trust store.'''
-        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+    @jsii.member(jsii_name="logConfiguration")
+    def log_configuration(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnSessionLogger.LogConfigurationProperty"]:
+        '''The configuration that specifies where logs are fowarded.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnSessionLogger.LogConfigurationProperty"], jsii.get(self, "logConfiguration"))
 
-    @tags.setter
-    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+    @log_configuration.setter
+    def log_configuration(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnSessionLogger.LogConfigurationProperty"],
+    ) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__413cb334bb35253edc995584173eeea4b9dcaddccf8f42db23cff1eb1c57eba2)
+            type_hints = typing.get_type_hints(_typecheckingstub__e28c4c53e5ee42bd3a2b3077ae66818ce670fc07686e11ffa703be889c6aa901)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "logConfiguration", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="additionalEncryptionContext")
+    def additional_encryption_context(
+        self,
+    ) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
+        '''The additional encryption context of the session logger.'''
+        return typing.cast(typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]], jsii.get(self, "additionalEncryptionContext"))
 
-@jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnTrustStoreProps",
-    jsii_struct_bases=[],
-    name_mapping={"certificate_list": "certificateList", "tags": "tags"},
-)
-class CfnTrustStoreProps:
-    def __init__(
+    @additional_encryption_context.setter
+    def additional_encryption_context(
         self,
-        *,
-        certificate_list: typing.Sequence[builtins.str],
-        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+        value: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]],
     ) -> None:
-        '''Properties for defining a ``CfnTrustStore``.
-
-        :param certificate_list: A list of CA certificates to be added to the trust store.
-        :param tags: The tags to add to the trust store. A tag is a key-value pair.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-truststore.html
-        :exampleMetadata: fixture=_generated
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__537d3e1f1f27dd421a4b648f2d1cfd2cafc17c6a94f1210fd5389a3d16c72bf0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "additionalEncryptionContext", value) # pyright: ignore[reportArgumentType]
 
-        Example::
+    @builtins.property
+    @jsii.member(jsii_name="customerManagedKey")
+    def customer_managed_key(self) -> typing.Optional[builtins.str]:
+        '''The custom managed key of the session logger.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "customerManagedKey"))
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            from aws_cdk import aws_workspacesweb as workspacesweb
-            
-            cfn_trust_store_props = workspacesweb.CfnTrustStoreProps(
-                certificate_list=["certificateList"],
-            
-                # the properties below are optional
-                tags=[CfnTag(
-                    key="key",
-                    value="value"
-                )]
-            )
-        '''
+    @customer_managed_key.setter
+    def customer_managed_key(self, value: typing.Optional[builtins.str]) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__7f61f2140f6607d292f5333bbaa4cf73f35e92dd28f8d49fc35bdca25eb8fa18)
-            check_type(argname="argument certificate_list", value=certificate_list, expected_type=type_hints["certificate_list"])
-            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {
-            "certificate_list": certificate_list,
-        }
-        if tags is not None:
-            self._values["tags"] = tags
+            type_hints = typing.get_type_hints(_typecheckingstub__6669ab733027174f86b8134ac28a12b3e8ce058fc6bb771f3ca2e6a1aa4a1ba0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "customerManagedKey", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    def certificate_list(self) -> typing.List[builtins.str]:
-        '''A list of CA certificates to be added to the trust store.
+    @jsii.member(jsii_name="displayName")
+    def display_name(self) -> typing.Optional[builtins.str]:
+        '''The human-readable display name.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "displayName"))
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-truststore.html#cfn-workspacesweb-truststore-certificatelist
-        '''
-        result = self._values.get("certificate_list")
-        assert result is not None, "Required property 'certificate_list' is missing"
-        return typing.cast(typing.List[builtins.str], result)
+    @display_name.setter
+    def display_name(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ae9fd345c1425b64f964d35fc511958d77a0f8f2e8685f0e6c4fca88750edc68)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "displayName", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
+    @jsii.member(jsii_name="tags")
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''The tags to add to the trust store.
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
 
-        A tag is a key-value pair.
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__85de43da52ead721682621ad8e0ec6970bf253d4dc82e6a8b363fb44db534497)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-truststore.html#cfn-workspacesweb-truststore-tags
-        '''
-        result = self._values.get("tags")
-        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_workspacesweb.CfnSessionLogger.EventFilterProperty",
+        jsii_struct_bases=[],
+        name_mapping={"all": "all", "include": "include"},
+    )
+    class EventFilterProperty:
+        def __init__(
+            self,
+            *,
+            all: typing.Any = None,
+            include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''The filter that specifies the events to monitor.
 
-    def __eq__(self, rhs: typing.Any) -> builtins.bool:
-        return isinstance(rhs, self.__class__) and rhs._values == self._values
+            :param all: The filter that monitors all of the available events, including any new events emitted in the future.
+            :param include: The filter that monitors only the listed set of events. New events are not auto-monitored.
 
-    def __ne__(self, rhs: typing.Any) -> builtins.bool:
-        return not (rhs == self)
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-sessionlogger-eventfilter.html
+            :exampleMetadata: fixture=_generated
 
-    def __repr__(self) -> str:
-        return "CfnTrustStoreProps(%s)" % ", ".join(
-            k + "=" + repr(v) for k, v in self._values.items()
-        )
+            Example::
 
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_workspacesweb as workspacesweb
+                
+                # all: Any
+                
+                event_filter_property = workspacesweb.CfnSessionLogger.EventFilterProperty(
+                    all=all,
+                    include=["include"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__2f1530e33fd800f934515849e7a6b073e430e992de682bef2cf8a8e5c89aa2d7)
+                check_type(argname="argument all", value=all, expected_type=type_hints["all"])
+                check_type(argname="argument include", value=include, expected_type=type_hints["include"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if all is not None:
+                self._values["all"] = all
+            if include is not None:
+                self._values["include"] = include
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
-class CfnUserAccessLoggingSettings(
-    _CfnResource_9df397a6,
-    metaclass=jsii.JSIIMeta,
-    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnUserAccessLoggingSettings",
-):
-    '''This resource specifies user access logging settings that can be associated with a web portal.
+        @builtins.property
+        def all(self) -> typing.Any:
+            '''The filter that monitors all of the available events, including any new events emitted in the future.
 
-    In order to receive logs from WorkSpaces Secure Browser, you must have an Amazon Kinesis Data Stream that starts with "amazon-workspaces-web-*". Your Amazon Kinesis data stream must either have server-side encryption turned off, or must use AWS managed keys for server-side encryption.
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-sessionlogger-eventfilter.html#cfn-workspacesweb-sessionlogger-eventfilter-all
+            '''
+            result = self._values.get("all")
+            return typing.cast(typing.Any, result)
 
-    For more information about setting server-side encryption in Amazon Kinesis , see `How Do I Get Started with Server-Side Encryption? <https://docs.aws.amazon.com/streams/latest/dev/getting-started-with-sse.html>`_ .
+        @builtins.property
+        def include(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''The filter that monitors only the listed set of events.
 
-    For more information about setting up user access logging, see `Set up user access logging <https://docs.aws.amazon.com/workspaces-web/latest/adminguide/user-logging.html>`_ .
+            New events are not auto-monitored.
 
-    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-useraccessloggingsettings.html
-    :cloudformationResource: AWS::WorkSpacesWeb::UserAccessLoggingSettings
-    :exampleMetadata: fixture=_generated
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-sessionlogger-eventfilter.html#cfn-workspacesweb-sessionlogger-eventfilter-include
+            '''
+            result = self._values.get("include")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
-    Example::
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
 
-        # The code below shows an example of how to instantiate this type.
-        # The values are placeholders you should change.
-        from aws_cdk import aws_workspacesweb as workspacesweb
-        
-        cfn_user_access_logging_settings = workspacesweb.CfnUserAccessLoggingSettings(self, "MyCfnUserAccessLoggingSettings",
-            kinesis_stream_arn="kinesisStreamArn",
-        
-            # the properties below are optional
-            tags=[CfnTag(
-                key="key",
-                value="value"
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "EventFilterProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_workspacesweb.CfnSessionLogger.LogConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"s3": "s3"},
+    )
+    class LogConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            s3: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSessionLogger.S3LogConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''The configuration of the log.
+
+            :param s3: The configuration for delivering the logs to S3.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-sessionlogger-logconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_workspacesweb as workspacesweb
+                
+                log_configuration_property = workspacesweb.CfnSessionLogger.LogConfigurationProperty(
+                    s3=workspacesweb.CfnSessionLogger.S3LogConfigurationProperty(
+                        bucket="bucket",
+                        folder_structure="folderStructure",
+                        log_file_format="logFileFormat",
+                
+                        # the properties below are optional
+                        bucket_owner="bucketOwner",
+                        key_prefix="keyPrefix"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__5e673953fb604a5eaf695974e9bd912f04871f2cb0d15f4408568306f9d8913e)
+                check_type(argname="argument s3", value=s3, expected_type=type_hints["s3"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if s3 is not None:
+                self._values["s3"] = s3
+
+        @builtins.property
+        def s3(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSessionLogger.S3LogConfigurationProperty"]]:
+            '''The configuration for delivering the logs to S3.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-sessionlogger-logconfiguration.html#cfn-workspacesweb-sessionlogger-logconfiguration-s3
+            '''
+            result = self._values.get("s3")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSessionLogger.S3LogConfigurationProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "LogConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_workspacesweb.CfnSessionLogger.S3LogConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "bucket": "bucket",
+            "folder_structure": "folderStructure",
+            "log_file_format": "logFileFormat",
+            "bucket_owner": "bucketOwner",
+            "key_prefix": "keyPrefix",
+        },
+    )
+    class S3LogConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            bucket: builtins.str,
+            folder_structure: builtins.str,
+            log_file_format: builtins.str,
+            bucket_owner: typing.Optional[builtins.str] = None,
+            key_prefix: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''The S3 log configuration.
+
+            :param bucket: The S3 bucket name where logs are delivered.
+            :param folder_structure: The folder structure that defines the organizational structure for log files in S3.
+            :param log_file_format: The format of the LogFile that is written to S3.
+            :param bucket_owner: The expected bucket owner of the target S3 bucket. The caller must have permissions to write to the target bucket.
+            :param key_prefix: The S3 path prefix that determines where log files are stored.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-sessionlogger-s3logconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_workspacesweb as workspacesweb
+                
+                s3_log_configuration_property = workspacesweb.CfnSessionLogger.S3LogConfigurationProperty(
+                    bucket="bucket",
+                    folder_structure="folderStructure",
+                    log_file_format="logFileFormat",
+                
+                    # the properties below are optional
+                    bucket_owner="bucketOwner",
+                    key_prefix="keyPrefix"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__2932cde5c903e31aee5df2ddaf173b3b2d8262005b0e7a9387a82480cca35f4f)
+                check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
+                check_type(argname="argument folder_structure", value=folder_structure, expected_type=type_hints["folder_structure"])
+                check_type(argname="argument log_file_format", value=log_file_format, expected_type=type_hints["log_file_format"])
+                check_type(argname="argument bucket_owner", value=bucket_owner, expected_type=type_hints["bucket_owner"])
+                check_type(argname="argument key_prefix", value=key_prefix, expected_type=type_hints["key_prefix"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "bucket": bucket,
+                "folder_structure": folder_structure,
+                "log_file_format": log_file_format,
+            }
+            if bucket_owner is not None:
+                self._values["bucket_owner"] = bucket_owner
+            if key_prefix is not None:
+                self._values["key_prefix"] = key_prefix
+
+        @builtins.property
+        def bucket(self) -> builtins.str:
+            '''The S3 bucket name where logs are delivered.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-sessionlogger-s3logconfiguration.html#cfn-workspacesweb-sessionlogger-s3logconfiguration-bucket
+            '''
+            result = self._values.get("bucket")
+            assert result is not None, "Required property 'bucket' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def folder_structure(self) -> builtins.str:
+            '''The folder structure that defines the organizational structure for log files in S3.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-sessionlogger-s3logconfiguration.html#cfn-workspacesweb-sessionlogger-s3logconfiguration-folderstructure
+            '''
+            result = self._values.get("folder_structure")
+            assert result is not None, "Required property 'folder_structure' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def log_file_format(self) -> builtins.str:
+            '''The format of the LogFile that is written to S3.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-sessionlogger-s3logconfiguration.html#cfn-workspacesweb-sessionlogger-s3logconfiguration-logfileformat
+            '''
+            result = self._values.get("log_file_format")
+            assert result is not None, "Required property 'log_file_format' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def bucket_owner(self) -> typing.Optional[builtins.str]:
+            '''The expected bucket owner of the target S3 bucket.
+
+            The caller must have permissions to write to the target bucket.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-sessionlogger-s3logconfiguration.html#cfn-workspacesweb-sessionlogger-s3logconfiguration-bucketowner
+            '''
+            result = self._values.get("bucket_owner")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def key_prefix(self) -> typing.Optional[builtins.str]:
+            '''The S3 path prefix that determines where log files are stored.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-workspacesweb-sessionlogger-s3logconfiguration.html#cfn-workspacesweb-sessionlogger-s3logconfiguration-keyprefix
+            '''
+            result = self._values.get("key_prefix")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "S3LogConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnSessionLoggerProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "event_filter": "eventFilter",
+        "log_configuration": "logConfiguration",
+        "additional_encryption_context": "additionalEncryptionContext",
+        "customer_managed_key": "customerManagedKey",
+        "display_name": "displayName",
+        "tags": "tags",
+    },
+)
+class CfnSessionLoggerProps:
+    def __init__(
+        self,
+        *,
+        event_filter: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSessionLogger.EventFilterProperty, typing.Dict[builtins.str, typing.Any]]],
+        log_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSessionLogger.LogConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+        additional_encryption_context: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
+        customer_managed_key: typing.Optional[builtins.str] = None,
+        display_name: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnSessionLogger``.
+
+        :param event_filter: The filter that specifies which events to monitor.
+        :param log_configuration: The configuration that specifies where logs are fowarded.
+        :param additional_encryption_context: The additional encryption context of the session logger.
+        :param customer_managed_key: The custom managed key of the session logger.
+        :param display_name: The human-readable display name.
+        :param tags: 
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-sessionlogger.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_workspacesweb as workspacesweb
+            
+            # all: Any
+            
+            cfn_session_logger_props = workspacesweb.CfnSessionLoggerProps(
+                event_filter=workspacesweb.CfnSessionLogger.EventFilterProperty(
+                    all=all,
+                    include=["include"]
+                ),
+                log_configuration=workspacesweb.CfnSessionLogger.LogConfigurationProperty(
+                    s3=workspacesweb.CfnSessionLogger.S3LogConfigurationProperty(
+                        bucket="bucket",
+                        folder_structure="folderStructure",
+                        log_file_format="logFileFormat",
+            
+                        # the properties below are optional
+                        bucket_owner="bucketOwner",
+                        key_prefix="keyPrefix"
+                    )
+                ),
+            
+                # the properties below are optional
+                additional_encryption_context={
+                    "additional_encryption_context_key": "additionalEncryptionContext"
+                },
+                customer_managed_key="customerManagedKey",
+                display_name="displayName",
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__042e70be11dd83b286871d0bfa14e8054acd3b7c9dfd43fc0e770ee8a2dbf3d3)
+            check_type(argname="argument event_filter", value=event_filter, expected_type=type_hints["event_filter"])
+            check_type(argname="argument log_configuration", value=log_configuration, expected_type=type_hints["log_configuration"])
+            check_type(argname="argument additional_encryption_context", value=additional_encryption_context, expected_type=type_hints["additional_encryption_context"])
+            check_type(argname="argument customer_managed_key", value=customer_managed_key, expected_type=type_hints["customer_managed_key"])
+            check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "event_filter": event_filter,
+            "log_configuration": log_configuration,
+        }
+        if additional_encryption_context is not None:
+            self._values["additional_encryption_context"] = additional_encryption_context
+        if customer_managed_key is not None:
+            self._values["customer_managed_key"] = customer_managed_key
+        if display_name is not None:
+            self._values["display_name"] = display_name
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def event_filter(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnSessionLogger.EventFilterProperty]:
+        '''The filter that specifies which events to monitor.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-sessionlogger.html#cfn-workspacesweb-sessionlogger-eventfilter
+        '''
+        result = self._values.get("event_filter")
+        assert result is not None, "Required property 'event_filter' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnSessionLogger.EventFilterProperty], result)
+
+    @builtins.property
+    def log_configuration(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnSessionLogger.LogConfigurationProperty]:
+        '''The configuration that specifies where logs are fowarded.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-sessionlogger.html#cfn-workspacesweb-sessionlogger-logconfiguration
+        '''
+        result = self._values.get("log_configuration")
+        assert result is not None, "Required property 'log_configuration' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnSessionLogger.LogConfigurationProperty], result)
+
+    @builtins.property
+    def additional_encryption_context(
+        self,
+    ) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
+        '''The additional encryption context of the session logger.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-sessionlogger.html#cfn-workspacesweb-sessionlogger-additionalencryptioncontext
+        '''
+        result = self._values.get("additional_encryption_context")
+        return typing.cast(typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]], result)
+
+    @builtins.property
+    def customer_managed_key(self) -> typing.Optional[builtins.str]:
+        '''The custom managed key of the session logger.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-sessionlogger.html#cfn-workspacesweb-sessionlogger-customermanagedkey
+        '''
+        result = self._values.get("customer_managed_key")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def display_name(self) -> typing.Optional[builtins.str]:
+        '''The human-readable display name.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-sessionlogger.html#cfn-workspacesweb-sessionlogger-displayname
+        '''
+        result = self._values.get("display_name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-sessionlogger.html#cfn-workspacesweb-sessionlogger-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnSessionLoggerProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_IInspectable_c2943556, _ITrustStoreRef_b3e9ed97, _ITaggableV2_4e6798f8)
+class CfnTrustStore(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnTrustStore",
+):
+    '''This resource specifies a trust store that can be associated with a web portal.
+
+    A trust store contains certificate authority (CA) certificates. Once associated with a web portal, the browser in a streaming session will recognize certificates that have been issued using any of the CAs in the trust store. If your organization has internal websites that use certificates issued by private CAs, you should add the private CA certificate to the trust store.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-truststore.html
+    :cloudformationResource: AWS::WorkSpacesWeb::TrustStore
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_workspacesweb as workspacesweb
+        
+        cfn_trust_store = workspacesweb.CfnTrustStore(self, "MyCfnTrustStore",
+            certificate_list=["certificateList"],
+        
+            # the properties below are optional
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        certificate_list: typing.Sequence[builtins.str],
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Create a new ``AWS::WorkSpacesWeb::TrustStore``.
+
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param certificate_list: A list of CA certificates to be added to the trust store.
+        :param tags: The tags to add to the trust store. A tag is a key-value pair.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__cc9c8ead0938c5ad416a02ff1511be2c3cbf2519166e43c80e65e581fac2cab7)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnTrustStoreProps(certificate_list=certificate_list, tags=tags)
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5fb3d54892745fdc13234075ce86bd3f8d4acfe9ec88a393309766bcf833012b)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__836cb2ee4e300cb4cb603faf540c0c6dad36379e65dad6d178875cdc39e56603)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrAssociatedPortalArns")
+    def attr_associated_portal_arns(self) -> typing.List[builtins.str]:
+        '''A list of web portal ARNs that this trust store is associated with.
+
+        :cloudformationAttribute: AssociatedPortalArns
+        '''
+        return typing.cast(typing.List[builtins.str], jsii.get(self, "attrAssociatedPortalArns"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrTrustStoreArn")
+    def attr_trust_store_arn(self) -> builtins.str:
+        '''The ARN of the trust store.
+
+        :cloudformationAttribute: TrustStoreArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrTrustStoreArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="trustStoreRef")
+    def trust_store_ref(self) -> _TrustStoreReference_778699bf:
+        '''A reference to a TrustStore resource.'''
+        return typing.cast(_TrustStoreReference_778699bf, jsii.get(self, "trustStoreRef"))
+
+    @builtins.property
+    @jsii.member(jsii_name="certificateList")
+    def certificate_list(self) -> typing.List[builtins.str]:
+        '''A list of CA certificates to be added to the trust store.'''
+        return typing.cast(typing.List[builtins.str], jsii.get(self, "certificateList"))
+
+    @certificate_list.setter
+    def certificate_list(self, value: typing.List[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d6c348f8d89e15637f5e7f299791ad808bd6fadfe67032f77e095b03cb3b19f1)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "certificateList", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags to add to the trust store.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__413cb334bb35253edc995584173eeea4b9dcaddccf8f42db23cff1eb1c57eba2)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnTrustStoreProps",
+    jsii_struct_bases=[],
+    name_mapping={"certificate_list": "certificateList", "tags": "tags"},
+)
+class CfnTrustStoreProps:
+    def __init__(
+        self,
+        *,
+        certificate_list: typing.Sequence[builtins.str],
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnTrustStore``.
+
+        :param certificate_list: A list of CA certificates to be added to the trust store.
+        :param tags: The tags to add to the trust store. A tag is a key-value pair.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-truststore.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_workspacesweb as workspacesweb
+            
+            cfn_trust_store_props = workspacesweb.CfnTrustStoreProps(
+                certificate_list=["certificateList"],
+            
+                # the properties below are optional
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7f61f2140f6607d292f5333bbaa4cf73f35e92dd28f8d49fc35bdca25eb8fa18)
+            check_type(argname="argument certificate_list", value=certificate_list, expected_type=type_hints["certificate_list"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "certificate_list": certificate_list,
+        }
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def certificate_list(self) -> typing.List[builtins.str]:
+        '''A list of CA certificates to be added to the trust store.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-truststore.html#cfn-workspacesweb-truststore-certificatelist
+        '''
+        result = self._values.get("certificate_list")
+        assert result is not None, "Required property 'certificate_list' is missing"
+        return typing.cast(typing.List[builtins.str], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags to add to the trust store.
+
+        A tag is a key-value pair.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-truststore.html#cfn-workspacesweb-truststore-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnTrustStoreProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_IInspectable_c2943556, _IUserAccessLoggingSettingsRef_35b44bda, _ITaggableV2_4e6798f8)
+class CfnUserAccessLoggingSettings(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_workspacesweb.CfnUserAccessLoggingSettings",
+):
+    '''This resource specifies user access logging settings that can be associated with a web portal.
+
+    In order to receive logs from WorkSpaces Secure Browser, you must have an Amazon Kinesis Data Stream that starts with "amazon-workspaces-web-*". Your Amazon Kinesis data stream must either have server-side encryption turned off, or must use AWS managed keys for server-side encryption.
+
+    For more information about setting server-side encryption in Amazon Kinesis , see `How Do I Get Started with Server-Side Encryption? <https://docs.aws.amazon.com/streams/latest/dev/getting-started-with-sse.html>`_ .
+
+    For more information about setting up user access logging, see `Set up user access logging <https://docs.aws.amazon.com/workspaces-web/latest/adminguide/user-logging.html>`_ .
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-useraccessloggingsettings.html
+    :cloudformationResource: AWS::WorkSpacesWeb::UserAccessLoggingSettings
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_workspacesweb as workspacesweb
+        
+        cfn_user_access_logging_settings = workspacesweb.CfnUserAccessLoggingSettings(self, "MyCfnUserAccessLoggingSettings",
+            kinesis_stream_arn="kinesisStreamArn",
+        
+            # the properties below are optional
+            tags=[CfnTag(
+                key="key",
+                value="value"
             )]
         )
     '''
@@ -3389,7 +4179,8 @@ class CfnUserAccessLoggingSettings(
         kinesis_stream_arn: builtins.str,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WorkSpacesWeb::UserAccessLoggingSettings``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param kinesis_stream_arn: The ARN of the Kinesis stream.
@@ -3464,6 +4255,14 @@ class CfnUserAccessLoggingSettings(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="userAccessLoggingSettingsRef")
+    def user_access_logging_settings_ref(
+        self,
+    ) -> _UserAccessLoggingSettingsReference_b92d801e:
+        '''A reference to a UserAccessLoggingSettings resource.'''
+        return typing.cast(_UserAccessLoggingSettingsReference_b92d801e, jsii.get(self, "userAccessLoggingSettingsRef"))
+
     @builtins.property
     @jsii.member(jsii_name="kinesisStreamArn")
     def kinesis_stream_arn(self) -> builtins.str:
@@ -3570,7 +4369,7 @@ class CfnUserAccessLoggingSettingsProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IUserSettingsRef_02671625, _ITaggableV2_4e6798f8)
 class CfnUserSettings(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3655,7 +4454,8 @@ class CfnUserSettings(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         toolbar_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnUserSettings.ToolbarConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::WorkSpacesWeb::UserSettings``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param copy_allowed: Specifies whether the user can copy text from the streaming session to the local device.
@@ -3753,6 +4553,12 @@ class CfnUserSettings(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="userSettingsRef")
+    def user_settings_ref(self) -> _UserSettingsReference_9c05e0ee:
+        '''A reference to a UserSettings resource.'''
+        return typing.cast(_UserSettingsReference_9c05e0ee, jsii.get(self, "userSettingsRef"))
+
     @builtins.property
     @jsii.member(jsii_name="copyAllowed")
     def copy_allowed(self) -> builtins.str:
@@ -4531,6 +5337,8 @@ __all__ = [
     "CfnNetworkSettingsProps",
     "CfnPortal",
     "CfnPortalProps",
+    "CfnSessionLogger",
+    "CfnSessionLoggerProps",
     "CfnTrustStore",
     "CfnTrustStoreProps",
     "CfnUserAccessLoggingSettings",
@@ -4933,6 +5741,7 @@ def _typecheckingstub__239c61bc87a1a693f01a28198d2d3000f7ef790e9684279e807a890b0
     ip_access_settings_arn: typing.Optional[builtins.str] = None,
     max_concurrent_sessions: typing.Optional[jsii.Number] = None,
     network_settings_arn: typing.Optional[builtins.str] = None,
+    session_logger_arn: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     trust_store_arn: typing.Optional[builtins.str] = None,
     user_access_logging_settings_arn: typing.Optional[builtins.str] = None,
@@ -5013,6 +5822,12 @@ def _typecheckingstub__beaa575cd54d9de94a0201b4213524db5df052dd0b9e1605b88d4487f
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__799f778b7f3d528d4330acec14db7800e1877f11411b658cf7b11ad8463a43b6(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__30535a8dcd75eba19481865deda3eac2505afe537e0650db0a95162feb2563e2(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
@@ -5049,6 +5864,7 @@ def _typecheckingstub__aa147912cdfb0d9ea5356fccc59e7ae5b02c822d1e3f5ae2e4826ae39
     ip_access_settings_arn: typing.Optional[builtins.str] = None,
     max_concurrent_sessions: typing.Optional[jsii.Number] = None,
     network_settings_arn: typing.Optional[builtins.str] = None,
+    session_logger_arn: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     trust_store_arn: typing.Optional[builtins.str] = None,
     user_access_logging_settings_arn: typing.Optional[builtins.str] = None,
@@ -5057,6 +5873,106 @@ def _typecheckingstub__aa147912cdfb0d9ea5356fccc59e7ae5b02c822d1e3f5ae2e4826ae39
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__5ecda6b775e0aad6e840315c150daa1cae407a534f747e34d2336449d0085a29(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    event_filter: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSessionLogger.EventFilterProperty, typing.Dict[builtins.str, typing.Any]]],
+    log_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSessionLogger.LogConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+    additional_encryption_context: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
+    customer_managed_key: typing.Optional[builtins.str] = None,
+    display_name: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__32c2901f06899b3e8b2aed11d0479e80af4ae3bd2497852311c46da6edf80e41(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__02821e951e1a7ebffab0cee338cb22e018833b70a4b8b4db79eadb9491b74956(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0f797a952eee0e5ef3c6c4e74102d30901b3a261e47539149a187359b0273935(
+    value: typing.Union[_IResolvable_da3f097b, CfnSessionLogger.EventFilterProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__e28c4c53e5ee42bd3a2b3077ae66818ce670fc07686e11ffa703be889c6aa901(
+    value: typing.Union[_IResolvable_da3f097b, CfnSessionLogger.LogConfigurationProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__537d3e1f1f27dd421a4b648f2d1cfd2cafc17c6a94f1210fd5389a3d16c72bf0(
+    value: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6669ab733027174f86b8134ac28a12b3e8ce058fc6bb771f3ca2e6a1aa4a1ba0(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ae9fd345c1425b64f964d35fc511958d77a0f8f2e8685f0e6c4fca88750edc68(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__85de43da52ead721682621ad8e0ec6970bf253d4dc82e6a8b363fb44db534497(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__2f1530e33fd800f934515849e7a6b073e430e992de682bef2cf8a8e5c89aa2d7(
+    *,
+    all: typing.Any = None,
+    include: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5e673953fb604a5eaf695974e9bd912f04871f2cb0d15f4408568306f9d8913e(
+    *,
+    s3: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSessionLogger.S3LogConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__2932cde5c903e31aee5df2ddaf173b3b2d8262005b0e7a9387a82480cca35f4f(
+    *,
+    bucket: builtins.str,
+    folder_structure: builtins.str,
+    log_file_format: builtins.str,
+    bucket_owner: typing.Optional[builtins.str] = None,
+    key_prefix: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__042e70be11dd83b286871d0bfa14e8054acd3b7c9dfd43fc0e770ee8a2dbf3d3(
+    *,
+    event_filter: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSessionLogger.EventFilterProperty, typing.Dict[builtins.str, typing.Any]]],
+    log_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnSessionLogger.LogConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+    additional_encryption_context: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
+    customer_managed_key: typing.Optional[builtins.str] = None,
+    display_name: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__cc9c8ead0938c5ad416a02ff1511be2c3cbf2519166e43c80e65e581fac2cab7(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,