aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_xray/__init__.py

@@ -67,9 +67,19 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_xray import (
+    GroupReference as _GroupReference_fbed0c3c,
+    IGroupRef as _IGroupRef_6a79d09c,
+    IResourcePolicyRef as _IResourcePolicyRef_9af6286a,
+    ISamplingRuleRef as _ISamplingRuleRef_32354932,
+    ITransactionSearchConfigRef as _ITransactionSearchConfigRef_ee102611,
+    ResourcePolicyReference as _ResourcePolicyReference_881e4e79,
+    SamplingRuleReference as _SamplingRuleReference_31c7bced,
+    TransactionSearchConfigReference as _TransactionSearchConfigReference_25d193f8,
+)
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IGroupRef_6a79d09c, _ITaggableV2_4e6798f8)
 class CfnGroup(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -115,7 +125,8 @@ class CfnGroup(
         insights_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnGroup.InsightsConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::XRay::Group``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param group_name: The unique case-sensitive name of the group.
@@ -186,6 +197,12 @@ class CfnGroup(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="groupRef")
+    def group_ref(self) -> _GroupReference_fbed0c3c:
+        '''A reference to a Group resource.'''
+        return typing.cast(_GroupReference_fbed0c3c, jsii.get(self, "groupRef"))
+
     @builtins.property
     @jsii.member(jsii_name="groupName")
     def group_name(self) -> builtins.str:
@@ -443,7 +460,7 @@ class CfnGroupProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IResourcePolicyRef_9af6286a)
 class CfnResourcePolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -481,7 +498,8 @@ class CfnResourcePolicy(
         policy_name: builtins.str,
         bypass_policy_lockout_check: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::XRay::ResourcePolicy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param policy_document: The resource-based policy document, which can be up to 5kb in size.
@@ -535,6 +553,12 @@ class CfnResourcePolicy(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="resourcePolicyRef")
+    def resource_policy_ref(self) -> _ResourcePolicyReference_881e4e79:
+        '''A reference to a ResourcePolicy resource.'''
+        return typing.cast(_ResourcePolicyReference_881e4e79, jsii.get(self, "resourcePolicyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="policyDocument")
     def policy_document(self) -> builtins.str:
@@ -677,7 +701,7 @@ class CfnResourcePolicyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _ISamplingRuleRef_32354932, _ITaggableV2_4e6798f8)
 class CfnSamplingRule(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -780,7 +804,8 @@ class CfnSamplingRule(
         sampling_rule_update: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSamplingRule.SamplingRuleUpdateProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::XRay::SamplingRule``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param rule_name: (deprecated) The ARN of the sampling rule. Specify a rule by either name or ARN, but not both.
@@ -853,6 +878,12 @@ class CfnSamplingRule(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="samplingRuleRef")
+    def sampling_rule_ref(self) -> _SamplingRuleReference_31c7bced:
+        '''A reference to a SamplingRule resource.'''
+        return typing.cast(_SamplingRuleReference_31c7bced, jsii.get(self, "samplingRuleRef"))
+
     @builtins.property
     @jsii.member(jsii_name="ruleName")
     def rule_name(self) -> typing.Optional[builtins.str]:
@@ -1765,7 +1796,7 @@ class CfnSamplingRuleProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ITransactionSearchConfigRef_ee102611)
 class CfnTransactionSearchConfig(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1795,7 +1826,8 @@ class CfnTransactionSearchConfig(
         *,
         indexing_percentage: typing.Optional[jsii.Number] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::XRay::TransactionSearchConfig``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param indexing_percentage: Determines the percentage of traces indexed from CloudWatch Logs to X-Ray.
@@ -1854,6 +1886,14 @@ class CfnTransactionSearchConfig(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="transactionSearchConfigRef")
+    def transaction_search_config_ref(
+        self,
+    ) -> _TransactionSearchConfigReference_25d193f8:
+        '''A reference to a TransactionSearchConfig resource.'''
+        return typing.cast(_TransactionSearchConfigReference_25d193f8, jsii.get(self, "transactionSearchConfigRef"))
+
     @builtins.property
     @jsii.member(jsii_name="indexingPercentage")
     def indexing_percentage(self) -> typing.Optional[jsii.Number]:

aws_cdk/cloud_assembly_schema/__init__.py

@@ -109,7 +109,7 @@ class ArtifactManifest:
         display_name: typing.Optional[builtins.str] = None,
         environment: typing.Optional[builtins.str] = None,
         metadata: typing.Optional[typing.Mapping[builtins.str, typing.Sequence[typing.Union["MetadataEntry", typing.Dict[builtins.str, typing.Any]]]]] = None,
-        properties: typing.Optional[typing.Union[typing.Union["AwsCloudFormationStackProperties", typing.Dict[builtins.str, typing.Any]], typing.Union["AssetManifestProperties", typing.Dict[builtins.str, typing.Any]], typing.Union["TreeArtifactProperties", typing.Dict[builtins.str, typing.Any]], typing.Union["NestedCloudAssemblyProperties", typing.Dict[builtins.str, typing.Any]]]] = None,
+        properties: typing.Optional[typing.Union[typing.Union["AwsCloudFormationStackProperties", typing.Dict[builtins.str, typing.Any]], typing.Union["AssetManifestProperties", typing.Dict[builtins.str, typing.Any]], typing.Union["TreeArtifactProperties", typing.Dict[builtins.str, typing.Any]], typing.Union["NestedCloudAssemblyProperties", typing.Dict[builtins.str, typing.Any]], typing.Union["FeatureFlagReportProperties", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''A manifest for a single artifact within the cloud assembly.
 
@@ -258,13 +258,13 @@ class ArtifactManifest:
     @builtins.property
     def properties(
         self,
-    ) -> typing.Optional[typing.Union["AwsCloudFormationStackProperties", "AssetManifestProperties", "TreeArtifactProperties", "NestedCloudAssemblyProperties"]]:
+    ) -> typing.Optional[typing.Union["AwsCloudFormationStackProperties", "AssetManifestProperties", "TreeArtifactProperties", "NestedCloudAssemblyProperties", "FeatureFlagReportProperties"]]:
         '''The set of properties for this artifact (depends on type).
 
         :default: - no properties.
         '''
         result = self._values.get("properties")
-        return typing.cast(typing.Optional[typing.Union["AwsCloudFormationStackProperties", "AssetManifestProperties", "TreeArtifactProperties", "NestedCloudAssemblyProperties"]], result)
+        return typing.cast(typing.Optional[typing.Union["AwsCloudFormationStackProperties", "AssetManifestProperties", "TreeArtifactProperties", "NestedCloudAssemblyProperties", "FeatureFlagReportProperties"]], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -312,6 +312,8 @@ class ArtifactType(enum.Enum):
     '''Manifest for all assets in the Cloud Assembly.'''
     NESTED_CLOUD_ASSEMBLY = "NESTED_CLOUD_ASSEMBLY"
     '''Nested Cloud Assembly.'''
+    FEATURE_FLAG_REPORT = "FEATURE_FLAG_REPORT"
+    '''Feature flag report.'''
 
 
 @jsii.data_type(
@@ -4857,6 +4859,206 @@ class EndpointServiceAvailabilityZonesContextQuery(ContextLookupRoleOptions):
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.cloud_assembly_schema.FeatureFlag",
+    jsii_struct_bases=[],
+    name_mapping={
+        "explanation": "explanation",
+        "recommended_value": "recommendedValue",
+        "unconfigured_behaves_like": "unconfiguredBehavesLike",
+        "user_value": "userValue",
+    },
+)
+class FeatureFlag:
+    def __init__(
+        self,
+        *,
+        explanation: typing.Optional[builtins.str] = None,
+        recommended_value: typing.Any = None,
+        unconfigured_behaves_like: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
+        user_value: typing.Any = None,
+    ) -> None:
+        '''A single feature flag.
+
+        :param explanation: Explanation about the purpose of this flag that can be shown to the user. Default: - No description
+        :param recommended_value: The library-recommended value for this flag, if any. It is possible that there is no recommended value. Default: - No recommended value.
+        :param unconfigured_behaves_like: The value of the flag if it is unconfigured. Default: - No value
+        :param user_value: The value configured by the user. This is the value configured at the root of the tree. Users may also have configured values at specific locations in the tree; we don't report on those. Default: - Not configured by the user
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import cloud_assembly_schema
+            
+            # recommended_value: Any
+            # unconfigured_behaves_like: Any
+            # user_value: Any
+            
+            feature_flag = FeatureFlag(
+                explanation="explanation",
+                recommended_value=recommended_value,
+                unconfigured_behaves_like={
+                    "unconfigured_behaves_like_key": unconfigured_behaves_like
+                },
+                user_value=user_value
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d7ccfacd89aa44cd30dd2b6b40d937da9546cf5f11f13266ca45710d4e373233)
+            check_type(argname="argument explanation", value=explanation, expected_type=type_hints["explanation"])
+            check_type(argname="argument recommended_value", value=recommended_value, expected_type=type_hints["recommended_value"])
+            check_type(argname="argument unconfigured_behaves_like", value=unconfigured_behaves_like, expected_type=type_hints["unconfigured_behaves_like"])
+            check_type(argname="argument user_value", value=user_value, expected_type=type_hints["user_value"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if explanation is not None:
+            self._values["explanation"] = explanation
+        if recommended_value is not None:
+            self._values["recommended_value"] = recommended_value
+        if unconfigured_behaves_like is not None:
+            self._values["unconfigured_behaves_like"] = unconfigured_behaves_like
+        if user_value is not None:
+            self._values["user_value"] = user_value
+
+    @builtins.property
+    def explanation(self) -> typing.Optional[builtins.str]:
+        '''Explanation about the purpose of this flag that can be shown to the user.
+
+        :default: - No description
+        '''
+        result = self._values.get("explanation")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def recommended_value(self) -> typing.Any:
+        '''The library-recommended value for this flag, if any.
+
+        It is possible that there is no recommended value.
+
+        :default: - No recommended value.
+        '''
+        result = self._values.get("recommended_value")
+        return typing.cast(typing.Any, result)
+
+    @builtins.property
+    def unconfigured_behaves_like(
+        self,
+    ) -> typing.Optional[typing.Mapping[builtins.str, typing.Any]]:
+        '''The value of the flag if it is unconfigured.
+
+        :default: - No value
+        '''
+        result = self._values.get("unconfigured_behaves_like")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, typing.Any]], result)
+
+    @builtins.property
+    def user_value(self) -> typing.Any:
+        '''The value configured by the user.
+
+        This is the value configured at the root of the tree. Users may also have
+        configured values at specific locations in the tree; we don't report on
+        those.
+
+        :default: - Not configured by the user
+        '''
+        result = self._values.get("user_value")
+        return typing.cast(typing.Any, result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "FeatureFlag(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.cloud_assembly_schema.FeatureFlagReportProperties",
+    jsii_struct_bases=[],
+    name_mapping={"flags": "flags", "module": "module"},
+)
+class FeatureFlagReportProperties:
+    def __init__(
+        self,
+        *,
+        flags: typing.Mapping[builtins.str, typing.Union[FeatureFlag, typing.Dict[builtins.str, typing.Any]]],
+        module: builtins.str,
+    ) -> None:
+        '''Artifact properties for a feature flag report.
+
+        A feature flag report is small enough that all the properties can be inlined
+        here, and doesn't need an additional file.
+
+        :param flags: Information about every feature flag supported by this library.
+        :param module: The library that this feature flag report applies to.
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import cloud_assembly_schema
+            
+            # recommended_value: Any
+            # unconfigured_behaves_like: Any
+            # user_value: Any
+            
+            feature_flag_report_properties = FeatureFlagReportProperties(
+                flags={
+                    "flags_key": FeatureFlag(
+                        explanation="explanation",
+                        recommended_value=recommended_value,
+                        unconfigured_behaves_like={
+                            "unconfigured_behaves_like_key": unconfigured_behaves_like
+                        },
+                        user_value=user_value
+                    )
+                },
+                module="module"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__028d9005a883d2bec5fe9dc6270df8f73f5150cc394cf0043b71cf90072d2ce5)
+            check_type(argname="argument flags", value=flags, expected_type=type_hints["flags"])
+            check_type(argname="argument module", value=module, expected_type=type_hints["module"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "flags": flags,
+            "module": module,
+        }
+
+    @builtins.property
+    def flags(self) -> typing.Mapping[builtins.str, FeatureFlag]:
+        '''Information about every feature flag supported by this library.'''
+        result = self._values.get("flags")
+        assert result is not None, "Required property 'flags' is missing"
+        return typing.cast(typing.Mapping[builtins.str, FeatureFlag], result)
+
+    @builtins.property
+    def module(self) -> builtins.str:
+        '''The library that this feature flag report applies to.'''
+        result = self._values.get("module")
+        assert result is not None, "Required property 'module' is missing"
+        return typing.cast(builtins.str, result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "FeatureFlagReportProperties(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.cloud_assembly_schema.FileAsset",
     jsii_struct_bases=[],
@@ -5699,7 +5901,7 @@ class IntegManifest:
 
         :param test_cases: test cases.
         :param version: Version of the manifest.
-        :param enable_lookups: Enable lookups for this test. If lookups are enabled then ``stackUpdateWorkflow`` must be set to false. Lookups should only be enabled when you are explicitely testing lookups. Default: false
+        :param enable_lookups: Enable lookups for this test. If lookups are enabled then ``stackUpdateWorkflow`` must be set to false. Lookups should only be enabled when you are explicitly testing lookups. Default: false
         :param synth_context: Additional context to use when performing a synth. Any context provided here will override any default context Default: - no additional context
 
         :exampleMetadata: fixture=_generated
@@ -5858,7 +6060,7 @@ class IntegManifest:
 
         If lookups are enabled
         then ``stackUpdateWorkflow`` must be set to false.
-        Lookups should only be enabled when you are explicitely testing
+        Lookups should only be enabled when you are explicitly testing
         lookups.
 
         :default: false
@@ -9019,6 +9221,8 @@ __all__ = [
     "DockerImageDestination",
     "DockerImageSource",
     "EndpointServiceAvailabilityZonesContextQuery",
+    "FeatureFlag",
+    "FeatureFlagReportProperties",
     "FileAsset",
     "FileAssetMetadataEntry",
     "FileAssetPackaging",
@@ -9060,7 +9264,7 @@ def _typecheckingstub__c0fe0dea35f8750630dc6eb16d5f979ef40079f01dc4afec1b7ebf62d
     display_name: typing.Optional[builtins.str] = None,
     environment: typing.Optional[builtins.str] = None,
     metadata: typing.Optional[typing.Mapping[builtins.str, typing.Sequence[typing.Union[MetadataEntry, typing.Dict[builtins.str, typing.Any]]]]] = None,
-    properties: typing.Optional[typing.Union[typing.Union[AwsCloudFormationStackProperties, typing.Dict[builtins.str, typing.Any]], typing.Union[AssetManifestProperties, typing.Dict[builtins.str, typing.Any]], typing.Union[TreeArtifactProperties, typing.Dict[builtins.str, typing.Any]], typing.Union[NestedCloudAssemblyProperties, typing.Dict[builtins.str, typing.Any]]]] = None,
+    properties: typing.Optional[typing.Union[typing.Union[AwsCloudFormationStackProperties, typing.Dict[builtins.str, typing.Any]], typing.Union[AssetManifestProperties, typing.Dict[builtins.str, typing.Any]], typing.Union[TreeArtifactProperties, typing.Dict[builtins.str, typing.Any]], typing.Union[NestedCloudAssemblyProperties, typing.Dict[builtins.str, typing.Any]], typing.Union[FeatureFlagReportProperties, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -9386,6 +9590,24 @@ def _typecheckingstub__b028a59a345f6074485bae83f874fa7eca8081fea4616b491a43cfb78
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__d7ccfacd89aa44cd30dd2b6b40d937da9546cf5f11f13266ca45710d4e373233(
+    *,
+    explanation: typing.Optional[builtins.str] = None,
+    recommended_value: typing.Any = None,
+    unconfigured_behaves_like: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
+    user_value: typing.Any = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__028d9005a883d2bec5fe9dc6270df8f73f5150cc394cf0043b71cf90072d2ce5(
+    *,
+    flags: typing.Mapping[builtins.str, typing.Union[FeatureFlag, typing.Dict[builtins.str, typing.Any]]],
+    module: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__a482db8874b6a4a96f9be44511cc506737e4b70dff2a99f6ee0f1566bc96c3d8(
     *,
     destinations: typing.Mapping[builtins.str, typing.Union[FileDestination, typing.Dict[builtins.str, typing.Any]]],
@@ -9736,3 +9958,6 @@ def _typecheckingstub__db3fe7ed770cad2fbb895987d45a3a52df9ebdb3b3e8652039785a299
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [ICloudAssembly]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/custom_resources/__init__.py

@@ -123,6 +123,8 @@ def is_complete(event, context):
 > Do not use this library if your threat model requires that you cannot trust actors who are able
 > to list StepFunction executions in your account.
 
+> **Default behaviour change Note**: the Custom Resource Provider doesn't log anything by default. To enable logging for the Provider framework, toggle `disableWaiterStateMachineLogging` and `disableFrameworkLambdaLogging` depending on you requirement to see waiter state machine logs or provider framework lambda logs
+
 ### Handling Lifecycle Events: onEvent
 
 The user-defined `onEvent` AWS Lambda function is invoked whenever a resource
@@ -1019,12 +1021,16 @@ from ..aws_iam import (
     IRole as _IRole_235f5d8e,
     PolicyStatement as _PolicyStatement_0fe33853,
 )
-from ..aws_kms import IKey as _IKey_5f11635f
-from ..aws_lambda import IFunction as _IFunction_6adb0ab8, Runtime as _Runtime_b4eaa844
+from ..aws_lambda import (
+    ApplicationLogLevel as _ApplicationLogLevel_cd92660a,
+    IFunction as _IFunction_6adb0ab8,
+    Runtime as _Runtime_b4eaa844,
+)
 from ..aws_logs import (
     ILogGroup as _ILogGroup_3c4fa718, RetentionDays as _RetentionDays_070f99f0
 )
 from ..aws_stepfunctions import LogLevel as _LogLevel_be1990fe
+from ..interfaces.aws_kms import IKeyRef as _IKeyRef_d4fc6ef3
 
 
 @jsii.implements(_IGrantable_71c4f5de)
@@ -2467,11 +2473,12 @@ class Provider(
         on_event_handler: _IFunction_6adb0ab8,
         disable_waiter_state_machine_logging: typing.Optional[builtins.bool] = None,
         framework_complete_and_timeout_role: typing.Optional[_IRole_235f5d8e] = None,
+        framework_lambda_logging_level: typing.Optional[_ApplicationLogLevel_cd92660a] = None,
         framework_on_event_role: typing.Optional[_IRole_235f5d8e] = None,
         is_complete_handler: typing.Optional[_IFunction_6adb0ab8] = None,
         log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
         log_retention: typing.Optional[_RetentionDays_070f99f0] = None,
-        provider_function_env_encryption: typing.Optional[_IKey_5f11635f] = None,
+        provider_function_env_encryption: typing.Optional[_IKeyRef_d4fc6ef3] = None,
         provider_function_name: typing.Optional[builtins.str] = None,
         query_interval: typing.Optional[_Duration_4839e8c3] = None,
         role: typing.Optional[_IRole_235f5d8e] = None,
@@ -2485,8 +2492,9 @@ class Provider(
         :param scope: -
         :param id: -
         :param on_event_handler: The AWS Lambda function to invoke for all resource lifecycle operations (CREATE/UPDATE/DELETE). This function is responsible to begin the requested resource operation (CREATE/UPDATE/DELETE) and return any additional properties to add to the event, which will later be passed to ``isComplete``. The ``PhysicalResourceId`` property must be included in the response.
-        :param disable_waiter_state_machine_logging: Whether logging for the waiter state machine is disabled. Default: - false
+        :param disable_waiter_state_machine_logging: Whether logging for the waiter state machine is disabled. Default: - true
         :param framework_complete_and_timeout_role: Lambda execution role for provider framework's isComplete/onTimeout Lambda function. Note that this role must be assumed by the 'lambda.amazonaws.com' service principal. To prevent circular dependency problem in the provider framework, please ensure you specify a different IAM Role for 'frameworkCompleteAndTimeoutRole' from 'frameworkOnEventRole'. This property cannot be used with 'role' property Default: - A default role will be created.
+        :param framework_lambda_logging_level: Log level of the provider framework lambda. Default: true - Logging is disabled by default
         :param framework_on_event_role: Lambda execution role for provider framework's onEvent Lambda function. Note that this role must be assumed by the 'lambda.amazonaws.com' service principal. This property cannot be used with 'role' property Default: - A default role will be created.
         :param is_complete_handler: The AWS Lambda function to invoke in order to determine if the operation is complete. This function will be called immediately after ``onEvent`` and then periodically based on the configured query interval as long as it returns ``false``. If the function still returns ``false`` and the alloted timeout has passed, the operation will fail. Default: - provider is synchronous. This means that the ``onEvent`` handler is expected to finish all lifecycle operations within the initial invocation.
         :param log_group: The Log Group used for logging of events emitted by the custom resource's lambda function. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: - a default log group created by AWS Lambda
@@ -2509,6 +2517,7 @@ class Provider(
             on_event_handler=on_event_handler,
             disable_waiter_state_machine_logging=disable_waiter_state_machine_logging,
             framework_complete_and_timeout_role=framework_complete_and_timeout_role,
+            framework_lambda_logging_level=framework_lambda_logging_level,
             framework_on_event_role=framework_on_event_role,
             is_complete_handler=is_complete_handler,
             log_group=log_group,
@@ -2558,6 +2567,7 @@ class Provider(
         "on_event_handler": "onEventHandler",
         "disable_waiter_state_machine_logging": "disableWaiterStateMachineLogging",
         "framework_complete_and_timeout_role": "frameworkCompleteAndTimeoutRole",
+        "framework_lambda_logging_level": "frameworkLambdaLoggingLevel",
         "framework_on_event_role": "frameworkOnEventRole",
         "is_complete_handler": "isCompleteHandler",
         "log_group": "logGroup",
@@ -2580,11 +2590,12 @@ class ProviderProps:
         on_event_handler: _IFunction_6adb0ab8,
         disable_waiter_state_machine_logging: typing.Optional[builtins.bool] = None,
         framework_complete_and_timeout_role: typing.Optional[_IRole_235f5d8e] = None,
+        framework_lambda_logging_level: typing.Optional[_ApplicationLogLevel_cd92660a] = None,
         framework_on_event_role: typing.Optional[_IRole_235f5d8e] = None,
         is_complete_handler: typing.Optional[_IFunction_6adb0ab8] = None,
         log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
         log_retention: typing.Optional[_RetentionDays_070f99f0] = None,
-        provider_function_env_encryption: typing.Optional[_IKey_5f11635f] = None,
+        provider_function_env_encryption: typing.Optional[_IKeyRef_d4fc6ef3] = None,
         provider_function_name: typing.Optional[builtins.str] = None,
         query_interval: typing.Optional[_Duration_4839e8c3] = None,
         role: typing.Optional[_IRole_235f5d8e] = None,
@@ -2597,8 +2608,9 @@ class ProviderProps:
         '''Initialization properties for the ``Provider`` construct.
 
         :param on_event_handler: The AWS Lambda function to invoke for all resource lifecycle operations (CREATE/UPDATE/DELETE). This function is responsible to begin the requested resource operation (CREATE/UPDATE/DELETE) and return any additional properties to add to the event, which will later be passed to ``isComplete``. The ``PhysicalResourceId`` property must be included in the response.
-        :param disable_waiter_state_machine_logging: Whether logging for the waiter state machine is disabled. Default: - false
+        :param disable_waiter_state_machine_logging: Whether logging for the waiter state machine is disabled. Default: - true
         :param framework_complete_and_timeout_role: Lambda execution role for provider framework's isComplete/onTimeout Lambda function. Note that this role must be assumed by the 'lambda.amazonaws.com' service principal. To prevent circular dependency problem in the provider framework, please ensure you specify a different IAM Role for 'frameworkCompleteAndTimeoutRole' from 'frameworkOnEventRole'. This property cannot be used with 'role' property Default: - A default role will be created.
+        :param framework_lambda_logging_level: Log level of the provider framework lambda. Default: true - Logging is disabled by default
         :param framework_on_event_role: Lambda execution role for provider framework's onEvent Lambda function. Note that this role must be assumed by the 'lambda.amazonaws.com' service principal. This property cannot be used with 'role' property Default: - A default role will be created.
         :param is_complete_handler: The AWS Lambda function to invoke in order to determine if the operation is complete. This function will be called immediately after ``onEvent`` and then periodically based on the configured query interval as long as it returns ``false``. If the function still returns ``false`` and the alloted timeout has passed, the operation will fail. Default: - provider is synchronous. This means that the ``onEvent`` handler is expected to finish all lifecycle operations within the initial invocation.
         :param log_group: The Log Group used for logging of events emitted by the custom resource's lambda function. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: - a default log group created by AWS Lambda
@@ -2653,6 +2665,7 @@ class ProviderProps:
             check_type(argname="argument on_event_handler", value=on_event_handler, expected_type=type_hints["on_event_handler"])
             check_type(argname="argument disable_waiter_state_machine_logging", value=disable_waiter_state_machine_logging, expected_type=type_hints["disable_waiter_state_machine_logging"])
             check_type(argname="argument framework_complete_and_timeout_role", value=framework_complete_and_timeout_role, expected_type=type_hints["framework_complete_and_timeout_role"])
+            check_type(argname="argument framework_lambda_logging_level", value=framework_lambda_logging_level, expected_type=type_hints["framework_lambda_logging_level"])
             check_type(argname="argument framework_on_event_role", value=framework_on_event_role, expected_type=type_hints["framework_on_event_role"])
             check_type(argname="argument is_complete_handler", value=is_complete_handler, expected_type=type_hints["is_complete_handler"])
             check_type(argname="argument log_group", value=log_group, expected_type=type_hints["log_group"])
@@ -2673,6 +2686,8 @@ class ProviderProps:
             self._values["disable_waiter_state_machine_logging"] = disable_waiter_state_machine_logging
         if framework_complete_and_timeout_role is not None:
             self._values["framework_complete_and_timeout_role"] = framework_complete_and_timeout_role
+        if framework_lambda_logging_level is not None:
+            self._values["framework_lambda_logging_level"] = framework_lambda_logging_level
         if framework_on_event_role is not None:
             self._values["framework_on_event_role"] = framework_on_event_role
         if is_complete_handler is not None:
@@ -2717,7 +2732,7 @@ class ProviderProps:
     def disable_waiter_state_machine_logging(self) -> typing.Optional[builtins.bool]:
         '''Whether logging for the waiter state machine is disabled.
 
-        :default: - false
+        :default: - true
         '''
         result = self._values.get("disable_waiter_state_machine_logging")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -2738,6 +2753,17 @@ class ProviderProps:
         result = self._values.get("framework_complete_and_timeout_role")
         return typing.cast(typing.Optional[_IRole_235f5d8e], result)
 
+    @builtins.property
+    def framework_lambda_logging_level(
+        self,
+    ) -> typing.Optional[_ApplicationLogLevel_cd92660a]:
+        '''Log level of the provider framework lambda.
+
+        :default: true - Logging is disabled by default
+        '''
+        result = self._values.get("framework_lambda_logging_level")
+        return typing.cast(typing.Optional[_ApplicationLogLevel_cd92660a], result)
+
     @builtins.property
     def framework_on_event_role(self) -> typing.Optional[_IRole_235f5d8e]:
         '''Lambda execution role for provider framework's onEvent Lambda function.
@@ -2798,13 +2824,13 @@ class ProviderProps:
         return typing.cast(typing.Optional[_RetentionDays_070f99f0], result)
 
     @builtins.property
-    def provider_function_env_encryption(self) -> typing.Optional[_IKey_5f11635f]:
+    def provider_function_env_encryption(self) -> typing.Optional[_IKeyRef_d4fc6ef3]:
         '''AWS KMS key used to encrypt provider lambda's environment variables.
 
         :default: - AWS Lambda creates and uses an AWS managed customer master key (CMK)
         '''
         result = self._values.get("provider_function_env_encryption")
-        return typing.cast(typing.Optional[_IKey_5f11635f], result)
+        return typing.cast(typing.Optional[_IKeyRef_d4fc6ef3], result)
 
     @builtins.property
     def provider_function_name(self) -> typing.Optional[builtins.str]:
@@ -2840,7 +2866,7 @@ class ProviderProps:
 
         :default: - A default role will be created.
 
-        :deprecated: - Use frameworkOnEventLambdaRole, frameworkIsCompleteLambdaRole, frameworkOnTimeoutLambdaRole
+        :deprecated: - Use frameworkOnEventRole, frameworkCompleteAndTimeoutRole
 
         :stability: deprecated
         '''
@@ -3445,11 +3471,12 @@ def _typecheckingstub__29415d7bf7977fcf110b77ce69cec309dcf0404601944735020770ddf
     on_event_handler: _IFunction_6adb0ab8,
     disable_waiter_state_machine_logging: typing.Optional[builtins.bool] = None,
     framework_complete_and_timeout_role: typing.Optional[_IRole_235f5d8e] = None,
+    framework_lambda_logging_level: typing.Optional[_ApplicationLogLevel_cd92660a] = None,
     framework_on_event_role: typing.Optional[_IRole_235f5d8e] = None,
     is_complete_handler: typing.Optional[_IFunction_6adb0ab8] = None,
     log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
     log_retention: typing.Optional[_RetentionDays_070f99f0] = None,
-    provider_function_env_encryption: typing.Optional[_IKey_5f11635f] = None,
+    provider_function_env_encryption: typing.Optional[_IKeyRef_d4fc6ef3] = None,
     provider_function_name: typing.Optional[builtins.str] = None,
     query_interval: typing.Optional[_Duration_4839e8c3] = None,
     role: typing.Optional[_IRole_235f5d8e] = None,
@@ -3467,11 +3494,12 @@ def _typecheckingstub__32b03803ee02437d8d83814282c700ede5633030e4d9f7ebdaf3b9d07
     on_event_handler: _IFunction_6adb0ab8,
     disable_waiter_state_machine_logging: typing.Optional[builtins.bool] = None,
     framework_complete_and_timeout_role: typing.Optional[_IRole_235f5d8e] = None,
+    framework_lambda_logging_level: typing.Optional[_ApplicationLogLevel_cd92660a] = None,
     framework_on_event_role: typing.Optional[_IRole_235f5d8e] = None,
     is_complete_handler: typing.Optional[_IFunction_6adb0ab8] = None,
     log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
     log_retention: typing.Optional[_RetentionDays_070f99f0] = None,
-    provider_function_env_encryption: typing.Optional[_IKey_5f11635f] = None,
+    provider_function_env_encryption: typing.Optional[_IKeyRef_d4fc6ef3] = None,
     provider_function_name: typing.Optional[builtins.str] = None,
     query_interval: typing.Optional[_Duration_4839e8c3] = None,
     role: typing.Optional[_IRole_235f5d8e] = None,