aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_events/__init__.py

@@ -335,9 +335,50 @@ events.EventBus(self, "Bus",
 )
 ```
 
-**Note**: Archives and schema discovery are not supported for event buses encrypted using a customer managed key.
-To enable archives or schema discovery on an event bus, choose to use an AWS owned key.
+To use a customer managed key for an archive, use the `kmsKey` attribute.
+
+Note: When you attach a customer managed key to either an EventBus or an Archive, a policy that allows EventBridge to interact with your resource will be added.
+
+```python
+import aws_cdk.aws_kms as kms
+from aws_cdk.aws_events import Archive, EventBus
+
+# kms_key: kms.IKey
+
+
+stack = Stack()
+
+event_bus = EventBus(stack, "Bus")
+
+archive = Archive(stack, "Archive",
+    kms_key=kms_key,
+    source_event_bus=event_bus,
+    event_pattern=events.EventPattern(
+        source=["aws.ec2"]
+    )
+)
+```
+
+To enable archives or schema discovery on an event bus, customers has the choice of using either an AWS owned key or a customer managed key.
 For more information, see [KMS key options for event bus encryption](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-encryption-at-rest-key-options.html).
+
+## Configuring logging
+
+To configure logging for an Event Bus, leverage the LogConfig property. It allows different level of logging (NONE, INFO, TRACE, ERROR) and wether to include details or not.
+
+```python
+from aws_cdk.aws_events import EventBus, IncludeDetail, Level
+
+
+bus = EventBus(self, "Bus",
+    log_config=events.LogConfig(
+        include_detail=IncludeDetail.FULL,
+        level=Level.TRACE
+    )
+)
+```
+
+See more [Specifying event bus log level](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-bus-logs.html#eb-event-bus-logs-level)
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)
@@ -396,6 +437,23 @@ from ..aws_iam import (
 )
 from ..aws_kms import IKey as _IKey_5f11635f
 from ..aws_sqs import IQueue as _IQueue_7ed6f679
+from ..interfaces.aws_events import (
+    ApiDestinationReference as _ApiDestinationReference_6371608b,
+    ArchiveReference as _ArchiveReference_40db88e4,
+    ConnectionReference as _ConnectionReference_d427d036,
+    EndpointReference as _EndpointReference_091493df,
+    EventBusPolicyReference as _EventBusPolicyReference_9bb2c85f,
+    EventBusReference as _EventBusReference_f9e830e1,
+    IApiDestinationRef as _IApiDestinationRef_8cd0a954,
+    IArchiveRef as _IArchiveRef_e95a5adc,
+    IConnectionRef as _IConnectionRef_bea3332b,
+    IEndpointRef as _IEndpointRef_c14d05f7,
+    IEventBusPolicyRef as _IEventBusPolicyRef_308d5d57,
+    IEventBusRef as _IEventBusRef_aa86e9b4,
+    IRuleRef as _IRuleRef_4038a611,
+    RuleReference as _RuleReference_38eeaae2,
+)
+from ..interfaces.aws_iam import IRoleRef as _IRoleRef_8400221f
 
 
 @jsii.data_type(
@@ -404,6 +462,7 @@ from ..aws_sqs import IQueue as _IQueue_7ed6f679
     name_mapping={
         "api_destination_arn": "apiDestinationArn",
         "connection": "connection",
+        "api_destination_arn_for_policy": "apiDestinationArnForPolicy",
     },
 )
 class ApiDestinationAttributes:
@@ -412,11 +471,13 @@ class ApiDestinationAttributes:
         *,
         api_destination_arn: builtins.str,
         connection: "IConnection",
+        api_destination_arn_for_policy: typing.Optional[builtins.str] = None,
     ) -> None:
         '''The properties to import an existing Api Destination.
 
         :param api_destination_arn: The ARN of the Api Destination.
         :param connection: The Connection to associate with the Api Destination.
+        :param api_destination_arn_for_policy: The Amazon Resource Name (ARN) of an API destination in resource format. Default: undefined - Imported API destination does not have ARN in resource format
 
         :exampleMetadata: infused
 
@@ -424,8 +485,13 @@ class ApiDestinationAttributes:
 
             connection = events.Connection.from_event_bus_arn(self, "Connection", "arn:aws:events:us-east-1:123456789012:event-bus/EventBusName", "arn:aws:secretsmanager:us-east-1:123456789012:secret:SecretName-f3gDy9")
             
-            api_destination_arn = "arn:aws:events:us-east-1:123456789012:api-destination/DestinationName"
-            destination = events.ApiDestination.from_api_destination_attributes(self, "Destination", api_destination_arn=api_destination_arn, connection=connection)
+            api_destination_arn = "arn:aws:events:us-east-1:123456789012:api-destination/DestinationName/11111111-1111-1111-1111-111111111111"
+            api_destination_arn_for_policy = "arn:aws:events:us-east-1:123456789012:api-destination/DestinationName"
+            destination = events.ApiDestination.from_api_destination_attributes(self, "Destination",
+                api_destination_arn=api_destination_arn,
+                connection=connection,
+                api_destination_arn_for_policy=api_destination_arn_for_policy
+            )
             
             rule = events.Rule(self, "OtherRule",
                 schedule=events.Schedule.rate(Duration.minutes(10)),
@@ -436,10 +502,13 @@ class ApiDestinationAttributes:
             type_hints = typing.get_type_hints(_typecheckingstub__803612bfb0a8da2a8e0ca427792d066e933032d6f722156869f61949617c8303)
             check_type(argname="argument api_destination_arn", value=api_destination_arn, expected_type=type_hints["api_destination_arn"])
             check_type(argname="argument connection", value=connection, expected_type=type_hints["connection"])
+            check_type(argname="argument api_destination_arn_for_policy", value=api_destination_arn_for_policy, expected_type=type_hints["api_destination_arn_for_policy"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "api_destination_arn": api_destination_arn,
             "connection": connection,
         }
+        if api_destination_arn_for_policy is not None:
+            self._values["api_destination_arn_for_policy"] = api_destination_arn_for_policy
 
     @builtins.property
     def api_destination_arn(self) -> builtins.str:
@@ -455,6 +524,15 @@ class ApiDestinationAttributes:
         assert result is not None, "Required property 'connection' is missing"
         return typing.cast("IConnection", result)
 
+    @builtins.property
+    def api_destination_arn_for_policy(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of an API destination in resource format.
+
+        :default: undefined - Imported API destination does not have ARN in resource format
+        '''
+        result = self._values.get("api_destination_arn_for_policy")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -610,38 +688,26 @@ class Archive(
     '''Define an EventBridge Archive.
 
     :resource: AWS::Events::Archive
-    :exampleMetadata: fixture=_generated
+    :exampleMetadata: infused
 
     Example::
 
-        # The code below shows an example of how to instantiate this type.
-        # The values are placeholders you should change.
-        import aws_cdk as cdk
-        from aws_cdk import aws_events as events
+        import aws_cdk.aws_kms as kms
+        from aws_cdk.aws_events import Archive, EventBus
         
-        # detail: Any
-        # event_bus: events.EventBus
+        # kms_key: kms.IKey
         
-        archive = events.Archive(self, "MyArchive",
-            event_pattern=events.EventPattern(
-                account=["account"],
-                detail={
-                    "detail_key": detail
-                },
-                detail_type=["detailType"],
-                id=["id"],
-                region=["region"],
-                resources=["resources"],
-                source=["source"],
-                time=["time"],
-                version=["version"]
-            ),
-            source_event_bus=event_bus,
         
-            # the properties below are optional
-            archive_name="archiveName",
-            description="description",
-            retention=cdk.Duration.minutes(30)
+        stack = Stack()
+        
+        event_bus = EventBus(stack, "Bus")
+        
+        archive = Archive(stack, "Archive",
+            kms_key=kms_key,
+            source_event_bus=event_bus,
+            event_pattern=events.EventPattern(
+                source=["aws.ec2"]
+            )
         )
     '''
 
@@ -654,6 +720,7 @@ class Archive(
         event_pattern: typing.Union["EventPattern", typing.Dict[builtins.str, typing.Any]],
         archive_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
         retention: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
         '''
@@ -663,6 +730,7 @@ class Archive(
         :param event_pattern: An event pattern to use to filter events sent to the archive.
         :param archive_name: The name of the archive. Default: - Automatically generated
         :param description: A description for the archive. Default: - none
+        :param kms_key: The customer managed key that encrypts this archive. Default: - Use an AWS managed key
         :param retention: The number of days to retain events for. Default value is 0. If set to 0, events are retained indefinitely. Default: - Infinite
         '''
         if __debug__:
@@ -674,6 +742,7 @@ class Archive(
             event_pattern=event_pattern,
             archive_name=archive_name,
             description=description,
+            kms_key=kms_key,
             retention=retention,
         )
 
@@ -823,6 +892,7 @@ typing.cast(typing.Any, Authorization).__jsii_proxy_class__ = lambda : _Authoriz
         "event_pattern": "eventPattern",
         "archive_name": "archiveName",
         "description": "description",
+        "kms_key": "kmsKey",
         "retention": "retention",
     },
 )
@@ -833,6 +903,7 @@ class BaseArchiveProps:
         event_pattern: typing.Union["EventPattern", typing.Dict[builtins.str, typing.Any]],
         archive_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
         retention: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
         '''The event archive base properties.
@@ -840,6 +911,7 @@ class BaseArchiveProps:
         :param event_pattern: An event pattern to use to filter events sent to the archive.
         :param archive_name: The name of the archive. Default: - Automatically generated
         :param description: A description for the archive. Default: - none
+        :param kms_key: The customer managed key that encrypts this archive. Default: - Use an AWS managed key
         :param retention: The number of days to retain events for. Default value is 0. If set to 0, events are retained indefinitely. Default: - Infinite
 
         :exampleMetadata: infused
@@ -867,6 +939,7 @@ class BaseArchiveProps:
             check_type(argname="argument event_pattern", value=event_pattern, expected_type=type_hints["event_pattern"])
             check_type(argname="argument archive_name", value=archive_name, expected_type=type_hints["archive_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
             check_type(argname="argument retention", value=retention, expected_type=type_hints["retention"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "event_pattern": event_pattern,
@@ -875,6 +948,8 @@ class BaseArchiveProps:
             self._values["archive_name"] = archive_name
         if description is not None:
             self._values["description"] = description
+        if kms_key is not None:
+            self._values["kms_key"] = kms_key
         if retention is not None:
             self._values["retention"] = retention
 
@@ -903,6 +978,15 @@ class BaseArchiveProps:
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''The customer managed key that encrypts this archive.
+
+        :default: - Use an AWS managed key
+        '''
+        result = self._values.get("kms_key")
+        return typing.cast(typing.Optional[_IKey_5f11635f], result)
+
     @builtins.property
     def retention(self) -> typing.Optional[_Duration_4839e8c3]:
         '''The number of days to retain events for.
@@ -926,7 +1010,7 @@ class BaseArchiveProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IApiDestinationRef_8cd0a954)
 class CfnApiDestination(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -980,7 +1064,8 @@ class CfnApiDestination(
         invocation_rate_limit_per_second: typing.Optional[jsii.Number] = None,
         name: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Events::ApiDestination``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param connection_arn: The ARN of the connection to use for the API destination. The destination endpoint must support the authorization type specified for the connection.
@@ -1005,6 +1090,48 @@ class CfnApiDestination(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromApiDestinationArn")
+    @builtins.classmethod
+    def from_api_destination_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IApiDestinationRef_8cd0a954:
+        '''Creates a new IApiDestinationRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e4d067d14eb4986a791825f5574a2a1b7996e52c30d1c10ce8e7b59e60ddb769)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IApiDestinationRef_8cd0a954, jsii.sinvoke(cls, "fromApiDestinationArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromApiDestinationName")
+    @builtins.classmethod
+    def from_api_destination_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        api_destination_name: builtins.str,
+    ) -> _IApiDestinationRef_8cd0a954:
+        '''Creates a new IApiDestinationRef from a apiDestinationName.
+
+        :param scope: -
+        :param id: -
+        :param api_destination_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2f7e79e48e08b958f9ad095544607e87dd2f1aa8eef727bec93c1ee0def4c583)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument api_destination_name", value=api_destination_name, expected_type=type_hints["api_destination_name"])
+        return typing.cast(_IApiDestinationRef_8cd0a954, jsii.sinvoke(cls, "fromApiDestinationName", [scope, id, api_destination_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -1035,6 +1162,12 @@ class CfnApiDestination(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="apiDestinationRef")
+    def api_destination_ref(self) -> _ApiDestinationReference_6371608b:
+        '''A reference to a ApiDestination resource.'''
+        return typing.cast(_ApiDestinationReference_6371608b, jsii.get(self, "apiDestinationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="attrArn")
     def attr_arn(self) -> builtins.str:
@@ -1053,7 +1186,7 @@ class CfnApiDestination(
 
         For example, the following resource defines an IAM policy that grants permission to update a specific API destination.
 
-        ``Resources: ExamplePolicy: Type: AWS::IAM::Policy Properties: PolicyName: ExamplePolicy PolicyDocument: Version: '2012-10-17' Statement: - Effect: Allow Action: - events:UpdateApiDestination Resource: - !GetAtt myApiDestination.ArnForPolicy``
+        ``Resources: ExamplePolicy: Type: AWS::IAM::Policy Properties: PolicyName: ExamplePolicy PolicyDocument: Version: '2012-10-17 ' Statement: - Effect: Allow Action: - events:UpdateApiDestination Resource: - !GetAtt myApiDestination.ArnForPolicy``
 
         :cloudformationAttribute: ArnForPolicy
         '''
@@ -1289,7 +1422,7 @@ class CfnApiDestinationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IArchiveRef_e95a5adc)
 class CfnArchive(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1340,7 +1473,8 @@ class CfnArchive(
         kms_key_identifier: typing.Optional[builtins.str] = None,
         retention_days: typing.Optional[jsii.Number] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Events::Archive``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param source_arn: The ARN of the event bus that sends events to the archive.
@@ -1365,6 +1499,48 @@ class CfnArchive(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromArchiveArn")
+    @builtins.classmethod
+    def from_archive_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IArchiveRef_e95a5adc:
+        '''Creates a new IArchiveRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8e8ead948e3f54f53c0d21e22906517bc78f6bc7b15975a7503199c89c0cc2d8)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IArchiveRef_e95a5adc, jsii.sinvoke(cls, "fromArchiveArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromArchiveName")
+    @builtins.classmethod
+    def from_archive_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        archive_name: builtins.str,
+    ) -> _IArchiveRef_e95a5adc:
+        '''Creates a new IArchiveRef from a archiveName.
+
+        :param scope: -
+        :param id: -
+        :param archive_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f94b64dd5cb2b916b6680e63c92384270a55a857a32d8c25ec445a22c5a86f62)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument archive_name", value=archive_name, expected_type=type_hints["archive_name"])
+        return typing.cast(_IArchiveRef_e95a5adc, jsii.sinvoke(cls, "fromArchiveName", [scope, id, archive_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -1395,6 +1571,12 @@ class CfnArchive(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="archiveRef")
+    def archive_ref(self) -> _ArchiveReference_40db88e4:
+        '''A reference to a Archive resource.'''
+        return typing.cast(_ArchiveReference_40db88e4, jsii.get(self, "archiveRef"))
+
     @builtins.property
     @jsii.member(jsii_name="attrArn")
     def attr_arn(self) -> builtins.str:
@@ -1644,7 +1826,7 @@ class CfnArchiveProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IConnectionRef_bea3332b)
 class CfnConnection(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1768,7 +1950,8 @@ class CfnConnection(
         kms_key_identifier: typing.Optional[builtins.str] = None,
         name: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Events::Connection``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param authorization_type: The type of authorization to use for the connection. .. epigraph:: OAUTH tokens are refreshed when a 401 or 407 response is returned.
@@ -1793,6 +1976,48 @@ class CfnConnection(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromConnectionArn")
+    @builtins.classmethod
+    def from_connection_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IConnectionRef_bea3332b:
+        '''Creates a new IConnectionRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__630a9669f06abf4f4e8bad75138d45b4182263c18c97fb22a426fbc0a2bbcdc2)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IConnectionRef_bea3332b, jsii.sinvoke(cls, "fromConnectionArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromConnectionName")
+    @builtins.classmethod
+    def from_connection_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        connection_name: builtins.str,
+    ) -> _IConnectionRef_bea3332b:
+        '''Creates a new IConnectionRef from a connectionName.
+
+        :param scope: -
+        :param id: -
+        :param connection_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d14cab009a8170454a66a3e141b7bf3bd9913cd1520a24a6bd2047517dc43bca)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument connection_name", value=connection_name, expected_type=type_hints["connection_name"])
+        return typing.cast(_IConnectionRef_bea3332b, jsii.sinvoke(cls, "fromConnectionName", [scope, id, connection_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -1841,7 +2066,7 @@ class CfnConnection(
 
         For example, the following resource defines an IAM policy that grants permission to update a specific connection.
 
-        ``Resources: ExamplePolicy: Type: AWS::IAM::Policy Properties: PolicyName: ExamplePolicy PolicyDocument: Version: '2012-10-17' Statement: - Effect: Allow Action: - events:UpdateConnection Resource: - !GetAtt myConnection.ArnForPolicy``
+        ``Resources: ExamplePolicy: Type: AWS::IAM::Policy Properties: PolicyName: ExamplePolicy PolicyDocument: Version: '2012-10-17 ' Statement: - Effect: Allow Action: - events:UpdateConnection Resource: - !GetAtt myConnection.ArnForPolicy``
 
         :cloudformationAttribute: ArnForPolicy
         '''
@@ -1891,6 +2116,12 @@ class CfnConnection(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="connectionRef")
+    def connection_ref(self) -> _ConnectionReference_d427d036:
+        '''A reference to a Connection resource.'''
+        return typing.cast(_ConnectionReference_d427d036, jsii.get(self, "connectionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="authorizationType")
     def authorization_type(self) -> typing.Optional[builtins.str]:
@@ -3182,7 +3413,7 @@ class CfnConnectionProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IEndpointRef_c14d05f7)
 class CfnEndpoint(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3239,7 +3470,8 @@ class CfnEndpoint(
         replication_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnEndpoint.ReplicationConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         role_arn: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Events::Endpoint``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param event_buses: The event buses being used by the endpoint. *Exactly* : ``2``
@@ -3264,6 +3496,48 @@ class CfnEndpoint(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromEndpointArn")
+    @builtins.classmethod
+    def from_endpoint_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IEndpointRef_c14d05f7:
+        '''Creates a new IEndpointRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b8df0737b10ec98bf62c1be2c67715f159dc221d2935abd8e8ae6669ca458d7f)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IEndpointRef_c14d05f7, jsii.sinvoke(cls, "fromEndpointArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromEndpointName")
+    @builtins.classmethod
+    def from_endpoint_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        endpoint_name: builtins.str,
+    ) -> _IEndpointRef_c14d05f7:
+        '''Creates a new IEndpointRef from a endpointName.
+
+        :param scope: -
+        :param id: -
+        :param endpoint_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__777109eec20698d982fd6e8cd9ad182871f5e151603cba27527f7f96a6fb3f5e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument endpoint_name", value=endpoint_name, expected_type=type_hints["endpoint_name"])
+        return typing.cast(_IEndpointRef_c14d05f7, jsii.sinvoke(cls, "fromEndpointName", [scope, id, endpoint_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -3344,6 +3618,12 @@ class CfnEndpoint(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="endpointRef")
+    def endpoint_ref(self) -> _EndpointReference_091493df:
+        '''A reference to a Endpoint resource.'''
+        return typing.cast(_EndpointReference_091493df, jsii.get(self, "endpointRef"))
+
     @builtins.property
     @jsii.member(jsii_name="eventBuses")
     def event_buses(
@@ -3958,7 +4238,7 @@ class CfnEndpointProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IEventBusRef_aa86e9b4, _ITaggableV2_4e6798f8)
 class CfnEventBus(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3993,6 +4273,10 @@ class CfnEventBus(
             description="description",
             event_source_name="eventSourceName",
             kms_key_identifier="kmsKeyIdentifier",
+            log_config=events.CfnEventBus.LogConfigProperty(
+                include_detail="includeDetail",
+                level="level"
+            ),
             policy=policy,
             tags=[CfnTag(
                 key="key",
@@ -4011,10 +4295,12 @@ class CfnEventBus(
         description: typing.Optional[builtins.str] = None,
         event_source_name: typing.Optional[builtins.str] = None,
         kms_key_identifier: typing.Optional[builtins.str] = None,
+        log_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnEventBus.LogConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         policy: typing.Any = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Events::EventBus``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the new event bus. Custom event bus names can't contain the ``/`` character, but you can use the ``/`` character in partner event bus names. In addition, for partner event buses, the name must exactly match the name of the partner event source that this event bus is matched to. You can't use the name ``default`` for a custom event bus, as this name is already used for your account's default event bus.
@@ -4022,6 +4308,7 @@ class CfnEventBus(
         :param description: The event bus description.
         :param event_source_name: If you are creating a partner event bus, this specifies the partner event source that the new event bus will be matched with.
         :param kms_key_identifier: The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt events on this event bus. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN. If you do not specify a customer managed key identifier, EventBridge uses an AWS owned key to encrypt events on the event bus. For more information, see `Identify and view keys <https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html>`_ in the *AWS Key Management Service Developer Guide* . .. epigraph:: Schema discovery is not supported for event buses encrypted using a customer managed key. EventBridge returns an error if: - You call ``[CreateDiscoverer](https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-discoverers.html#CreateDiscoverer)`` on an event bus set to use a customer managed key for encryption. - You call ``[UpdatedEventBus](https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_UpdatedEventBus.html)`` to set a customer managed key on an event bus with schema discovery enabled. To enable schema discovery on an event bus, choose to use an AWS owned key . For more information, see `Encrypting events <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-encryption-event-bus-cmkey.html>`_ in the *Amazon EventBridge User Guide* . > If you have specified that EventBridge use a customer managed key for encrypting the source event bus, we strongly recommend you also specify a customer managed key for any archives for the event bus as well. For more information, see `Encrypting archives <https://docs.aws.amazon.com/eventbridge/latest/userguide/encryption-archives.html>`_ in the *Amazon EventBridge User Guide* .
+        :param log_config: The logging configuration settings for the event bus. For more information, see `Configuring logs for event buses <https://docs.aws.amazon.com/eb-event-bus-logs.html>`_ in the *EventBridge User Guide* .
         :param policy: The permissions policy of the event bus, describing which other AWS accounts can write events to this event bus.
         :param tags: Tags to associate with the event bus.
         '''
@@ -4035,12 +4322,55 @@ class CfnEventBus(
             description=description,
             event_source_name=event_source_name,
             kms_key_identifier=kms_key_identifier,
+            log_config=log_config,
             policy=policy,
             tags=tags,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromEventBusArn")
+    @builtins.classmethod
+    def from_event_bus_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IEventBusRef_aa86e9b4:
+        '''Creates a new IEventBusRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__52da9c5fdac4b9a20af016bb86d96bb717169d7d2f8789450b948f3ae2849d73)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IEventBusRef_aa86e9b4, jsii.sinvoke(cls, "fromEventBusArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromEventBusName")
+    @builtins.classmethod
+    def from_event_bus_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        event_bus_name: builtins.str,
+    ) -> _IEventBusRef_aa86e9b4:
+        '''Creates a new IEventBusRef from a eventBusName.
+
+        :param scope: -
+        :param id: -
+        :param event_bus_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c06912850ab4232d75f46bf4e7fc5fb53350cab9f80c585bec5b376767c64960)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument event_bus_name", value=event_bus_name, expected_type=type_hints["event_bus_name"])
+        return typing.cast(_IEventBusRef_aa86e9b4, jsii.sinvoke(cls, "fromEventBusName", [scope, id, event_bus_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -4108,6 +4438,12 @@ class CfnEventBus(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="eventBusRef")
+    def event_bus_ref(self) -> _EventBusReference_f9e830e1:
+        '''A reference to a EventBus resource.'''
+        return typing.cast(_EventBusReference_f9e830e1, jsii.get(self, "eventBusRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -4178,6 +4514,24 @@ class CfnEventBus(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "kmsKeyIdentifier", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="logConfig")
+    def log_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnEventBus.LogConfigProperty"]]:
+        '''The logging configuration settings for the event bus.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnEventBus.LogConfigProperty"]], jsii.get(self, "logConfig"))
+
+    @log_config.setter
+    def log_config(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnEventBus.LogConfigProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__51db51bf8f1ebc8d9c19cdf02644ddeaaef6bd2b5c86607383cd85b5fa2030c1)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "logConfig", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="policy")
     def policy(self) -> typing.Any:
@@ -4257,8 +4611,86 @@ class CfnEventBus(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_events.CfnEventBus.LogConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={"include_detail": "includeDetail", "level": "level"},
+    )
+    class LogConfigProperty:
+        def __init__(
+            self,
+            *,
+            include_detail: typing.Optional[builtins.str] = None,
+            level: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''The logging configuration settings for the event bus.
+
+            For more information, see `Configuring logs for event buses <https://docs.aws.amazon.com/eb-event-bus-logs.html>`_ in the *EventBridge User Guide* .
+
+            :param include_detail: Whether EventBridge include detailed event information in the records it generates. Detailed data can be useful for troubleshooting and debugging. This information includes details of the event itself, as well as target details. For more information, see `Including detail data in event bus logs <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-bus-logs.html#eb-event-logs-data>`_ in the *EventBridge User Guide* .
+            :param level: The level of logging detail to include. This applies to all log destinations for the event bus. For more information, see `Specifying event bus log level <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-bus-logs.html#eb-event-bus-logs-level>`_ in the *EventBridge User Guide* .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-eventbus-logconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_events as events
+                
+                log_config_property = events.CfnEventBus.LogConfigProperty(
+                    include_detail="includeDetail",
+                    level="level"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__325c97a9fc2ec199dfb4fb51645bc16dde3cf1f257d1bcf5c86f7cd3a0b2d77c)
+                check_type(argname="argument include_detail", value=include_detail, expected_type=type_hints["include_detail"])
+                check_type(argname="argument level", value=level, expected_type=type_hints["level"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if include_detail is not None:
+                self._values["include_detail"] = include_detail
+            if level is not None:
+                self._values["level"] = level
+
+        @builtins.property
+        def include_detail(self) -> typing.Optional[builtins.str]:
+            '''Whether EventBridge include detailed event information in the records it generates.
+
+            Detailed data can be useful for troubleshooting and debugging. This information includes details of the event itself, as well as target details.
+
+            For more information, see `Including detail data in event bus logs <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-bus-logs.html#eb-event-logs-data>`_ in the *EventBridge User Guide* .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-eventbus-logconfig.html#cfn-events-eventbus-logconfig-includedetail
+            '''
+            result = self._values.get("include_detail")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def level(self) -> typing.Optional[builtins.str]:
+            '''The level of logging detail to include. This applies to all log destinations for the event bus.
+
+            For more information, see `Specifying event bus log level <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-bus-logs.html#eb-event-bus-logs-level>`_ in the *EventBridge User Guide* .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-eventbus-logconfig.html#cfn-events-eventbus-logconfig-level
+            '''
+            result = self._values.get("level")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "LogConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IEventBusPolicyRef_308d5d57)
 class CfnEventBusPolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4316,14 +4748,15 @@ class CfnEventBusPolicy(
         principal: typing.Optional[builtins.str] = None,
         statement: typing.Any = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Events::EventBusPolicy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param statement_id: An identifier string for the external account that you are granting permissions to. If you later want to revoke the permission for this external account, specify this ``StatementId`` when you run `RemovePermission <https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_RemovePermission.html>`_ . .. epigraph:: Each ``StatementId`` must be unique.
-        :param action: The action that you are enabling the other account to perform.
-        :param condition: This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization. For more information about AWS Organizations, see `What Is AWS Organizations <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html>`_ in the *AWS Organizations User Guide* . If you specify ``Condition`` with an AWS organization ID, and specify "*" as the value for ``Principal`` , you grant permission to all the accounts in the named organization. The ``Condition`` is a JSON string which must contain ``Type`` , ``Key`` , and ``Value`` fields.
+        :param action: (deprecated) The action that you are enabling the other account to perform.
+        :param condition: (deprecated) This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization.
         :param event_bus_name: The name of the event bus associated with the rule. If you omit this, the default event bus is used.
-        :param principal: The 12-digit AWS account ID that you are permitting to put events to your default event bus. Specify "*" to permit any account to put events to your default event bus. If you specify "*" without specifying ``Condition`` , avoid creating rules that may match undesirable events. To create more secure rules, make sure that the event pattern for each rule contains an ``account`` field with a specific account ID from which to receive events. Rules with an account field do not match any events sent from other accounts.
+        :param principal: (deprecated) The 12-digit AWS account ID that you are permitting to put events to your default event bus. Specify "*" to permit any account to put events to your default event bus.
         :param statement: A JSON string that describes the permission policy statement. You can include a ``Policy`` parameter in the request instead of using the ``StatementId`` , ``Action`` , ``Principal`` , or ``Condition`` parameters.
         '''
         if __debug__:
@@ -4371,19 +4804,17 @@ class CfnEventBusPolicy(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
-    @builtins.property
-    @jsii.member(jsii_name="attrId")
-    def attr_id(self) -> builtins.str:
-        '''
-        :cloudformationAttribute: Id
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrId"))
-
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="eventBusPolicyRef")
+    def event_bus_policy_ref(self) -> _EventBusPolicyReference_9bb2c85f:
+        '''A reference to a EventBusPolicy resource.'''
+        return typing.cast(_EventBusPolicyReference_9bb2c85f, jsii.get(self, "eventBusPolicyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="statementId")
     def statement_id(self) -> builtins.str:
@@ -4400,7 +4831,12 @@ class CfnEventBusPolicy(
     @builtins.property
     @jsii.member(jsii_name="action")
     def action(self) -> typing.Optional[builtins.str]:
-        '''The action that you are enabling the other account to perform.'''
+        '''(deprecated) The action that you are enabling the other account to perform.
+
+        :deprecated: this property has been deprecated
+
+        :stability: deprecated
+        '''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "action"))
 
     @action.setter
@@ -4415,7 +4851,12 @@ class CfnEventBusPolicy(
     def condition(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnEventBusPolicy.ConditionProperty"]]:
-        '''This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization.'''
+        '''(deprecated) This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization.
+
+        :deprecated: this property has been deprecated
+
+        :stability: deprecated
+        '''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnEventBusPolicy.ConditionProperty"]], jsii.get(self, "condition"))
 
     @condition.setter
@@ -4444,7 +4885,12 @@ class CfnEventBusPolicy(
     @builtins.property
     @jsii.member(jsii_name="principal")
     def principal(self) -> typing.Optional[builtins.str]:
-        '''The 12-digit AWS account ID that you are permitting to put events to your default event bus.'''
+        '''(deprecated) The 12-digit AWS account ID that you are permitting to put events to your default event bus.
+
+        :deprecated: this property has been deprecated
+
+        :stability: deprecated
+        '''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "principal"))
 
     @principal.setter
@@ -4480,15 +4926,11 @@ class CfnEventBusPolicy(
             type: typing.Optional[builtins.str] = None,
             value: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''A JSON string which you can use to limit the event bus permissions you are granting to only accounts that fulfill the condition.
-
-            Currently, the only supported condition is membership in a certain AWS organization. The string must contain ``Type`` , ``Key`` , and ``Value`` fields. The ``Value`` field specifies the ID of the AWS organization. Following is an example value for ``Condition`` :
-
-            ``'{"Type" : "StringEquals", "Key": "aws:PrincipalOrgID", "Value": "o-1234567890"}'``
+            '''This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization.
 
-            :param key: Specifies the key for the condition. Currently the only supported key is ``aws:PrincipalOrgID`` .
-            :param type: Specifies the type of condition. Currently the only supported value is ``StringEquals`` .
-            :param value: Specifies the value for the key. Currently, this must be the ID of the organization.
+            :param key: Specifies the value for the key. Currently, this must be the ID of the organization.
+            :param type: Specifies the type of condition. Currently the only supported value is StringEquals.
+            :param value: Specifies the key for the condition. Currently the only supported key is aws:PrincipalOrgID.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-eventbuspolicy-condition.html
             :exampleMetadata: fixture=_generated
@@ -4520,9 +4962,9 @@ class CfnEventBusPolicy(
 
         @builtins.property
         def key(self) -> typing.Optional[builtins.str]:
-            '''Specifies the key for the condition.
+            '''Specifies the value for the key.
 
-            Currently the only supported key is ``aws:PrincipalOrgID`` .
+            Currently, this must be the ID of the organization.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-eventbuspolicy-condition.html#cfn-events-eventbuspolicy-condition-key
             '''
@@ -4533,7 +4975,7 @@ class CfnEventBusPolicy(
         def type(self) -> typing.Optional[builtins.str]:
             '''Specifies the type of condition.
 
-            Currently the only supported value is ``StringEquals`` .
+            Currently the only supported value is StringEquals.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-eventbuspolicy-condition.html#cfn-events-eventbuspolicy-condition-type
             '''
@@ -4542,9 +4984,9 @@ class CfnEventBusPolicy(
 
         @builtins.property
         def value(self) -> typing.Optional[builtins.str]:
-            '''Specifies the value for the key.
+            '''Specifies the key for the condition.
 
-            Currently, this must be the ID of the organization.
+            Currently the only supported key is aws:PrincipalOrgID.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-eventbuspolicy-condition.html#cfn-events-eventbuspolicy-condition-value
             '''
@@ -4589,10 +5031,10 @@ class CfnEventBusPolicyProps:
         '''Properties for defining a ``CfnEventBusPolicy``.
 
         :param statement_id: An identifier string for the external account that you are granting permissions to. If you later want to revoke the permission for this external account, specify this ``StatementId`` when you run `RemovePermission <https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_RemovePermission.html>`_ . .. epigraph:: Each ``StatementId`` must be unique.
-        :param action: The action that you are enabling the other account to perform.
-        :param condition: This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization. For more information about AWS Organizations, see `What Is AWS Organizations <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html>`_ in the *AWS Organizations User Guide* . If you specify ``Condition`` with an AWS organization ID, and specify "*" as the value for ``Principal`` , you grant permission to all the accounts in the named organization. The ``Condition`` is a JSON string which must contain ``Type`` , ``Key`` , and ``Value`` fields.
+        :param action: (deprecated) The action that you are enabling the other account to perform.
+        :param condition: (deprecated) This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization.
         :param event_bus_name: The name of the event bus associated with the rule. If you omit this, the default event bus is used.
-        :param principal: The 12-digit AWS account ID that you are permitting to put events to your default event bus. Specify "*" to permit any account to put events to your default event bus. If you specify "*" without specifying ``Condition`` , avoid creating rules that may match undesirable events. To create more secure rules, make sure that the event pattern for each rule contains an ``account`` field with a specific account ID from which to receive events. Rules with an account field do not match any events sent from other accounts.
+        :param principal: (deprecated) The 12-digit AWS account ID that you are permitting to put events to your default event bus. Specify "*" to permit any account to put events to your default event bus.
         :param statement: A JSON string that describes the permission policy statement. You can include a ``Policy`` parameter in the request instead of using the ``StatementId`` , ``Action`` , ``Principal`` , or ``Condition`` parameters.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbuspolicy.html
@@ -4660,9 +5102,12 @@ class CfnEventBusPolicyProps:
 
     @builtins.property
     def action(self) -> typing.Optional[builtins.str]:
-        '''The action that you are enabling the other account to perform.
+        '''(deprecated) The action that you are enabling the other account to perform.
+
+        :deprecated: this property has been deprecated
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbuspolicy.html#cfn-events-eventbuspolicy-action
+        :stability: deprecated
         '''
         result = self._values.get("action")
         return typing.cast(typing.Optional[builtins.str], result)
@@ -4671,15 +5116,12 @@ class CfnEventBusPolicyProps:
     def condition(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnEventBusPolicy.ConditionProperty]]:
-        '''This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization.
-
-        For more information about AWS Organizations, see `What Is AWS Organizations <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html>`_ in the *AWS Organizations User Guide* .
+        '''(deprecated) This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization.
 
-        If you specify ``Condition`` with an AWS organization ID, and specify "*" as the value for ``Principal`` , you grant permission to all the accounts in the named organization.
-
-        The ``Condition`` is a JSON string which must contain ``Type`` , ``Key`` , and ``Value`` fields.
+        :deprecated: this property has been deprecated
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbuspolicy.html#cfn-events-eventbuspolicy-condition
+        :stability: deprecated
         '''
         result = self._values.get("condition")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnEventBusPolicy.ConditionProperty]], result)
@@ -4697,13 +5139,14 @@ class CfnEventBusPolicyProps:
 
     @builtins.property
     def principal(self) -> typing.Optional[builtins.str]:
-        '''The 12-digit AWS account ID that you are permitting to put events to your default event bus.
+        '''(deprecated) The 12-digit AWS account ID that you are permitting to put events to your default event bus.
 
         Specify "*" to permit any account to put events to your default event bus.
 
-        If you specify "*" without specifying ``Condition`` , avoid creating rules that may match undesirable events. To create more secure rules, make sure that the event pattern for each rule contains an ``account`` field with a specific account ID from which to receive events. Rules with an account field do not match any events sent from other accounts.
+        :deprecated: this property has been deprecated
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbuspolicy.html#cfn-events-eventbuspolicy-principal
+        :stability: deprecated
         '''
         result = self._values.get("principal")
         return typing.cast(typing.Optional[builtins.str], result)
@@ -4740,6 +5183,7 @@ class CfnEventBusPolicyProps:
         "description": "description",
         "event_source_name": "eventSourceName",
         "kms_key_identifier": "kmsKeyIdentifier",
+        "log_config": "logConfig",
         "policy": "policy",
         "tags": "tags",
     },
@@ -4753,6 +5197,7 @@ class CfnEventBusProps:
         description: typing.Optional[builtins.str] = None,
         event_source_name: typing.Optional[builtins.str] = None,
         kms_key_identifier: typing.Optional[builtins.str] = None,
+        log_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnEventBus.LogConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         policy: typing.Any = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
@@ -4763,6 +5208,7 @@ class CfnEventBusProps:
         :param description: The event bus description.
         :param event_source_name: If you are creating a partner event bus, this specifies the partner event source that the new event bus will be matched with.
         :param kms_key_identifier: The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt events on this event bus. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN. If you do not specify a customer managed key identifier, EventBridge uses an AWS owned key to encrypt events on the event bus. For more information, see `Identify and view keys <https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html>`_ in the *AWS Key Management Service Developer Guide* . .. epigraph:: Schema discovery is not supported for event buses encrypted using a customer managed key. EventBridge returns an error if: - You call ``[CreateDiscoverer](https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-discoverers.html#CreateDiscoverer)`` on an event bus set to use a customer managed key for encryption. - You call ``[UpdatedEventBus](https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_UpdatedEventBus.html)`` to set a customer managed key on an event bus with schema discovery enabled. To enable schema discovery on an event bus, choose to use an AWS owned key . For more information, see `Encrypting events <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-encryption-event-bus-cmkey.html>`_ in the *Amazon EventBridge User Guide* . > If you have specified that EventBridge use a customer managed key for encrypting the source event bus, we strongly recommend you also specify a customer managed key for any archives for the event bus as well. For more information, see `Encrypting archives <https://docs.aws.amazon.com/eventbridge/latest/userguide/encryption-archives.html>`_ in the *Amazon EventBridge User Guide* .
+        :param log_config: The logging configuration settings for the event bus. For more information, see `Configuring logs for event buses <https://docs.aws.amazon.com/eb-event-bus-logs.html>`_ in the *EventBridge User Guide* .
         :param policy: The permissions policy of the event bus, describing which other AWS accounts can write events to this event bus.
         :param tags: Tags to associate with the event bus.
 
@@ -4787,6 +5233,10 @@ class CfnEventBusProps:
                 description="description",
                 event_source_name="eventSourceName",
                 kms_key_identifier="kmsKeyIdentifier",
+                log_config=events.CfnEventBus.LogConfigProperty(
+                    include_detail="includeDetail",
+                    level="level"
+                ),
                 policy=policy,
                 tags=[CfnTag(
                     key="key",
@@ -4801,6 +5251,7 @@ class CfnEventBusProps:
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
             check_type(argname="argument event_source_name", value=event_source_name, expected_type=type_hints["event_source_name"])
             check_type(argname="argument kms_key_identifier", value=kms_key_identifier, expected_type=type_hints["kms_key_identifier"])
+            check_type(argname="argument log_config", value=log_config, expected_type=type_hints["log_config"])
             check_type(argname="argument policy", value=policy, expected_type=type_hints["policy"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -4814,6 +5265,8 @@ class CfnEventBusProps:
             self._values["event_source_name"] = event_source_name
         if kms_key_identifier is not None:
             self._values["kms_key_identifier"] = kms_key_identifier
+        if log_config is not None:
+            self._values["log_config"] = log_config
         if policy is not None:
             self._values["policy"] = policy
         if tags is not None:
@@ -4889,6 +5342,19 @@ class CfnEventBusProps:
         result = self._values.get("kms_key_identifier")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def log_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnEventBus.LogConfigProperty]]:
+        '''The logging configuration settings for the event bus.
+
+        For more information, see `Configuring logs for event buses <https://docs.aws.amazon.com/eb-event-bus-logs.html>`_ in the *EventBridge User Guide* .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbus.html#cfn-events-eventbus-logconfig
+        '''
+        result = self._values.get("log_config")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnEventBus.LogConfigProperty]], result)
+
     @builtins.property
     def policy(self) -> typing.Any:
         '''The permissions policy of the event bus, describing which other AWS accounts can write events to this event bus.
@@ -4919,7 +5385,7 @@ class CfnEventBusProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IRuleRef_4038a611, _ITaggableV2_4e6798f8)
 class CfnRule(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4968,6 +5434,10 @@ class CfnRule(
             role_arn="roleArn",
             schedule_expression="scheduleExpression",
             state="state",
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )],
             targets=[events.CfnRule.TargetProperty(
                 arn="arn",
                 id="id",
@@ -5101,9 +5571,11 @@ class CfnRule(
         role_arn: typing.Optional[builtins.str] = None,
         schedule_expression: typing.Optional[builtins.str] = None,
         state: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         targets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnRule.TargetProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Events::Rule``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param description: The description of the rule.
@@ -5113,6 +5585,7 @@ class CfnRule(
         :param role_arn: The Amazon Resource Name (ARN) of the role that is used for target invocation. If you're setting an event bus in another account as the target and that account granted permission to your account through an organization instead of directly by the account ID, you must specify a ``RoleArn`` with proper permissions in the ``Target`` structure, instead of here in this parameter.
         :param schedule_expression: The scheduling expression. For example, "cron(0 20 * * ? *)", "rate(5 minutes)". For more information, see `Creating an Amazon EventBridge rule that runs on a schedule <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-create-rule-schedule.html>`_ .
         :param state: The state of the rule. Valid values include: - ``DISABLED`` : The rule is disabled. EventBridge does not match any events against the rule. - ``ENABLED`` : The rule is enabled. EventBridge matches events against the rule, *except* for AWS management events delivered through CloudTrail. - ``ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS`` : The rule is enabled for all events, including AWS management events delivered through CloudTrail. Management events provide visibility into management operations that are performed on resources in your AWS account. These are also known as control plane operations. For more information, see `Logging management events <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html#logging-management-events>`_ in the *CloudTrail User Guide* , and `Filtering management events from AWS services <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-service-event.html#eb-service-event-cloudtrail>`_ in the **Amazon EventBridge User Guide** . This value is only valid for rules on the `default <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-what-is-how-it-works-concepts.html#eb-bus-concepts-buses>`_ event bus or `custom event buses <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-create-event-bus.html>`_ . It does not apply to `partner event buses <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-saas.html>`_ .
+        :param tags: Any tags assigned to the event rule.
         :param targets: Adds the specified targets to the specified rule, or updates the targets if they are already associated with the rule. Targets are the resources that are invoked when a rule is triggered. The maximum number of entries per request is 10. .. epigraph:: Each rule can have up to five (5) targets associated with it at one time. For a list of services you can configure as targets for events, see `EventBridge targets <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-targets.html>`_ in the **Amazon EventBridge User Guide** . Creating rules with built-in targets is supported only in the AWS Management Console . The built-in targets are: - ``Amazon EBS CreateSnapshot API call`` - ``Amazon EC2 RebootInstances API call`` - ``Amazon EC2 StopInstances API call`` - ``Amazon EC2 TerminateInstances API call`` For some target types, ``PutTargets`` provides target-specific parameters. If the target is a Kinesis data stream, you can optionally specify which shard the event goes to by using the ``KinesisParameters`` argument. To invoke a command on multiple EC2 instances with one rule, you can use the ``RunCommandParameters`` field. To be able to make API calls against the resources that you own, Amazon EventBridge needs the appropriate permissions: - For AWS Lambda and Amazon SNS resources, EventBridge relies on resource-based policies. - For EC2 instances, Kinesis Data Streams, AWS Step Functions state machines and API Gateway APIs, EventBridge relies on IAM roles that you specify in the ``RoleARN`` argument in ``PutTargets`` . For more information, see `Authentication and Access Control <https://docs.aws.amazon.com/eventbridge/latest/userguide/auth-and-access-control-eventbridge.html>`_ in the **Amazon EventBridge User Guide** . If another AWS account is in the same region and has granted you permission (using ``PutPermission`` ), you can send events to that account. Set that account's event bus as a target of the rules in your account. To send the matched events to the other account, specify that account's event bus as the ``Arn`` value when you run ``PutTargets`` . If your account sends events to another account, your account is charged for each sent event. Each event sent to another account is charged as a custom event. The account receiving the event is not charged. For more information, see `Amazon EventBridge Pricing <https://docs.aws.amazon.com/eventbridge/pricing/>`_ . .. epigraph:: ``Input`` , ``InputPath`` , and ``InputTransformer`` are not available with ``PutTarget`` if the target is an event bus of a different AWS account. If you are setting the event bus of another account as the target, and that account granted permission to your account through an organization instead of directly by the account ID, then you must specify a ``RoleArn`` with proper permissions in the ``Target`` structure. For more information, see `Sending and Receiving Events Between AWS Accounts <https://docs.aws.amazon.com/eventbridge/latest/userguide/eventbridge-cross-account-event-delivery.html>`_ in the *Amazon EventBridge User Guide* . .. epigraph:: If you have an IAM role on a cross-account event bus target, a ``PutTargets`` call without a role on the same target (same ``Id`` and ``Arn`` ) will not remove the role. For more information about enabling cross-account events, see `PutPermission <https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_PutPermission.html>`_ . *Input* , *InputPath* , and *InputTransformer* are mutually exclusive and optional parameters of a target. When a rule is triggered due to a matched event: - If none of the following arguments are specified for a target, then the entire event is passed to the target in JSON format (unless the target is Amazon EC2 Run Command or Amazon ECS task, in which case nothing from the event is passed to the target). - If *Input* is specified in the form of valid JSON, then the matched event is overridden with this constant. - If *InputPath* is specified in the form of JSONPath (for example, ``$.detail`` ), then only the part of the event specified in the path is passed to the target (for example, only the detail part of the event is passed). - If *InputTransformer* is specified, then one or more specified JSONPaths are extracted from the event and used as values in a template that you specify as the input to the target. When you specify ``InputPath`` or ``InputTransformer`` , you must use JSON dot notation, not bracket notation. When you add targets to a rule and the associated rule triggers soon after, new or updated targets might not be immediately invoked. Allow a short period of time for changes to take effect. This action can partially fail if too many requests are made at the same time. If that happens, ``FailedEntryCount`` is non-zero in the response and each entry in ``FailedEntries`` provides the ID of the failed target and the error code.
         '''
         if __debug__:
@@ -5127,6 +5600,7 @@ class CfnRule(
             role_arn=role_arn,
             schedule_expression=schedule_expression,
             state=state,
+            tags=tags,
             targets=targets,
         )
 
@@ -5171,11 +5645,23 @@ class CfnRule(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrArn"))
 
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="ruleRef")
+    def rule_ref(self) -> _RuleReference_38eeaae2:
+        '''A reference to a Rule resource.'''
+        return typing.cast(_RuleReference_38eeaae2, jsii.get(self, "ruleRef"))
+
     @builtins.property
     @jsii.member(jsii_name="description")
     def description(self) -> typing.Optional[builtins.str]:
@@ -5267,6 +5753,19 @@ class CfnRule(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "state", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''Any tags assigned to the event rule.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4daedf0bf9c9ce5671a843d87568d852259b36183898da9f395d6fb1b1a1e974)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="targets")
     def targets(
@@ -7167,9 +7666,9 @@ class CfnRule(
     )
     class SqsParametersProperty:
         def __init__(self, *, message_group_id: builtins.str) -> None:
-            '''This structure includes the custom parameter to be used when the target is an SQS FIFO queue.
+            '''The custom parameters for EventBridge to use for a target that is an Amazon SQS fair or FIFO queue.
 
-            :param message_group_id: The FIFO message group ID to use as the target.
+            :param message_group_id: The ID of the message group to use as the target.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-sqsparameters.html
             :exampleMetadata: fixture=_generated
@@ -7193,7 +7692,7 @@ class CfnRule(
 
         @builtins.property
         def message_group_id(self) -> builtins.str:
-            '''The FIFO message group ID to use as the target.
+            '''The ID of the message group to use as the target.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-sqsparameters.html#cfn-events-rule-sqsparameters-messagegroupid
             '''
@@ -7356,7 +7855,7 @@ class CfnRule(
             :param role_arn: The Amazon Resource Name (ARN) of the IAM role to be used for this target when the rule is triggered. If one rule triggers multiple targets, you can use a different IAM role for each target.
             :param run_command_parameters: Parameters used when you are using the rule to invoke Amazon EC2 Run Command.
             :param sage_maker_pipeline_parameters: Contains the SageMaker AI Model Building Pipeline parameters to start execution of a SageMaker AI Model Building Pipeline. If you specify a SageMaker AI Model Building Pipeline as a target, you can use this to specify parameters to start a pipeline execution based on EventBridge events.
-            :param sqs_parameters: Contains the message group ID to use when the target is a FIFO queue. If you specify an SQS FIFO queue as a target, the queue must have content-based deduplication enabled.
+            :param sqs_parameters: Contains the message group ID to use when the target is an Amazon SQS fair or FIFO queue. If you specify a fair or FIFO queue as a target, the queue must have content-based deduplication enabled.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-target.html
             :exampleMetadata: fixture=_generated
@@ -7734,9 +8233,9 @@ class CfnRule(
         def sqs_parameters(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRule.SqsParametersProperty"]]:
-            '''Contains the message group ID to use when the target is a FIFO queue.
+            '''Contains the message group ID to use when the target is an Amazon SQS fair or FIFO queue.
 
-            If you specify an SQS FIFO queue as a target, the queue must have content-based deduplication enabled.
+            If you specify a fair or FIFO queue as a target, the queue must have content-based deduplication enabled.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-target.html#cfn-events-rule-target-sqsparameters
             '''
@@ -7766,6 +8265,7 @@ class CfnRule(
         "role_arn": "roleArn",
         "schedule_expression": "scheduleExpression",
         "state": "state",
+        "tags": "tags",
         "targets": "targets",
     },
 )
@@ -7780,6 +8280,7 @@ class CfnRuleProps:
         role_arn: typing.Optional[builtins.str] = None,
         schedule_expression: typing.Optional[builtins.str] = None,
         state: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         targets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnRule.TargetProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnRule``.
@@ -7791,6 +8292,7 @@ class CfnRuleProps:
         :param role_arn: The Amazon Resource Name (ARN) of the role that is used for target invocation. If you're setting an event bus in another account as the target and that account granted permission to your account through an organization instead of directly by the account ID, you must specify a ``RoleArn`` with proper permissions in the ``Target`` structure, instead of here in this parameter.
         :param schedule_expression: The scheduling expression. For example, "cron(0 20 * * ? *)", "rate(5 minutes)". For more information, see `Creating an Amazon EventBridge rule that runs on a schedule <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-create-rule-schedule.html>`_ .
         :param state: The state of the rule. Valid values include: - ``DISABLED`` : The rule is disabled. EventBridge does not match any events against the rule. - ``ENABLED`` : The rule is enabled. EventBridge matches events against the rule, *except* for AWS management events delivered through CloudTrail. - ``ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS`` : The rule is enabled for all events, including AWS management events delivered through CloudTrail. Management events provide visibility into management operations that are performed on resources in your AWS account. These are also known as control plane operations. For more information, see `Logging management events <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html#logging-management-events>`_ in the *CloudTrail User Guide* , and `Filtering management events from AWS services <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-service-event.html#eb-service-event-cloudtrail>`_ in the **Amazon EventBridge User Guide** . This value is only valid for rules on the `default <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-what-is-how-it-works-concepts.html#eb-bus-concepts-buses>`_ event bus or `custom event buses <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-create-event-bus.html>`_ . It does not apply to `partner event buses <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-saas.html>`_ .
+        :param tags: Any tags assigned to the event rule.
         :param targets: Adds the specified targets to the specified rule, or updates the targets if they are already associated with the rule. Targets are the resources that are invoked when a rule is triggered. The maximum number of entries per request is 10. .. epigraph:: Each rule can have up to five (5) targets associated with it at one time. For a list of services you can configure as targets for events, see `EventBridge targets <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-targets.html>`_ in the **Amazon EventBridge User Guide** . Creating rules with built-in targets is supported only in the AWS Management Console . The built-in targets are: - ``Amazon EBS CreateSnapshot API call`` - ``Amazon EC2 RebootInstances API call`` - ``Amazon EC2 StopInstances API call`` - ``Amazon EC2 TerminateInstances API call`` For some target types, ``PutTargets`` provides target-specific parameters. If the target is a Kinesis data stream, you can optionally specify which shard the event goes to by using the ``KinesisParameters`` argument. To invoke a command on multiple EC2 instances with one rule, you can use the ``RunCommandParameters`` field. To be able to make API calls against the resources that you own, Amazon EventBridge needs the appropriate permissions: - For AWS Lambda and Amazon SNS resources, EventBridge relies on resource-based policies. - For EC2 instances, Kinesis Data Streams, AWS Step Functions state machines and API Gateway APIs, EventBridge relies on IAM roles that you specify in the ``RoleARN`` argument in ``PutTargets`` . For more information, see `Authentication and Access Control <https://docs.aws.amazon.com/eventbridge/latest/userguide/auth-and-access-control-eventbridge.html>`_ in the **Amazon EventBridge User Guide** . If another AWS account is in the same region and has granted you permission (using ``PutPermission`` ), you can send events to that account. Set that account's event bus as a target of the rules in your account. To send the matched events to the other account, specify that account's event bus as the ``Arn`` value when you run ``PutTargets`` . If your account sends events to another account, your account is charged for each sent event. Each event sent to another account is charged as a custom event. The account receiving the event is not charged. For more information, see `Amazon EventBridge Pricing <https://docs.aws.amazon.com/eventbridge/pricing/>`_ . .. epigraph:: ``Input`` , ``InputPath`` , and ``InputTransformer`` are not available with ``PutTarget`` if the target is an event bus of a different AWS account. If you are setting the event bus of another account as the target, and that account granted permission to your account through an organization instead of directly by the account ID, then you must specify a ``RoleArn`` with proper permissions in the ``Target`` structure. For more information, see `Sending and Receiving Events Between AWS Accounts <https://docs.aws.amazon.com/eventbridge/latest/userguide/eventbridge-cross-account-event-delivery.html>`_ in the *Amazon EventBridge User Guide* . .. epigraph:: If you have an IAM role on a cross-account event bus target, a ``PutTargets`` call without a role on the same target (same ``Id`` and ``Arn`` ) will not remove the role. For more information about enabling cross-account events, see `PutPermission <https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_PutPermission.html>`_ . *Input* , *InputPath* , and *InputTransformer* are mutually exclusive and optional parameters of a target. When a rule is triggered due to a matched event: - If none of the following arguments are specified for a target, then the entire event is passed to the target in JSON format (unless the target is Amazon EC2 Run Command or Amazon ECS task, in which case nothing from the event is passed to the target). - If *Input* is specified in the form of valid JSON, then the matched event is overridden with this constant. - If *InputPath* is specified in the form of JSONPath (for example, ``$.detail`` ), then only the part of the event specified in the path is passed to the target (for example, only the detail part of the event is passed). - If *InputTransformer* is specified, then one or more specified JSONPaths are extracted from the event and used as values in a template that you specify as the input to the target. When you specify ``InputPath`` or ``InputTransformer`` , you must use JSON dot notation, not bracket notation. When you add targets to a rule and the associated rule triggers soon after, new or updated targets might not be immediately invoked. Allow a short period of time for changes to take effect. This action can partially fail if too many requests are made at the same time. If that happens, ``FailedEntryCount`` is non-zero in the response and each entry in ``FailedEntries`` provides the ID of the failed target and the error code.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-rule.html
@@ -7812,6 +8314,10 @@ class CfnRuleProps:
                 role_arn="roleArn",
                 schedule_expression="scheduleExpression",
                 state="state",
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )],
                 targets=[events.CfnRule.TargetProperty(
                     arn="arn",
                     id="id",
@@ -7941,6 +8447,7 @@ class CfnRuleProps:
             check_type(argname="argument role_arn", value=role_arn, expected_type=type_hints["role_arn"])
             check_type(argname="argument schedule_expression", value=schedule_expression, expected_type=type_hints["schedule_expression"])
             check_type(argname="argument state", value=state, expected_type=type_hints["state"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
             check_type(argname="argument targets", value=targets, expected_type=type_hints["targets"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if description is not None:
@@ -7957,6 +8464,8 @@ class CfnRuleProps:
             self._values["schedule_expression"] = schedule_expression
         if state is not None:
             self._values["state"] = state
+        if tags is not None:
+            self._values["tags"] = tags
         if targets is not None:
             self._values["targets"] = targets
 
@@ -8041,6 +8550,15 @@ class CfnRuleProps:
         result = self._values.get("state")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''Any tags assigned to the event rule.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-rule.html#cfn-events-rule-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
     @builtins.property
     def targets(
         self,
@@ -8753,6 +9271,7 @@ class EventBusPolicyProps:
         "event_bus_name": "eventBusName",
         "event_source_name": "eventSourceName",
         "kms_key": "kmsKey",
+        "log_config": "logConfig",
     },
 )
 class EventBusProps:
@@ -8764,6 +9283,7 @@ class EventBusProps:
         event_bus_name: typing.Optional[builtins.str] = None,
         event_source_name: typing.Optional[builtins.str] = None,
         kms_key: typing.Optional[_IKey_5f11635f] = None,
+        log_config: typing.Optional[typing.Union["LogConfig", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''Properties to define an event bus.
 
@@ -8772,6 +9292,7 @@ class EventBusProps:
         :param event_bus_name: The name of the event bus you are creating Note: If 'eventSourceName' is passed in, you cannot set this. Default: - automatically generated name
         :param event_source_name: The partner event source to associate with this event bus resource Note: If 'eventBusName' is passed in, you cannot set this. Default: - no partner event source
         :param kms_key: The customer managed key that encrypt events on this event bus. Default: - Use an AWS managed key
+        :param log_config: The Logging Configuration of the Èvent Bus. Default: - no logging
 
         :exampleMetadata: infused
 
@@ -8795,6 +9316,8 @@ class EventBusProps:
                 )]
             )
         '''
+        if isinstance(log_config, dict):
+            log_config = LogConfig(**log_config)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__298a8c4285f4e039344007a0deb097d820ddec52c59d396d7a8faa1aa9c8b743)
             check_type(argname="argument dead_letter_queue", value=dead_letter_queue, expected_type=type_hints["dead_letter_queue"])
@@ -8802,6 +9325,7 @@ class EventBusProps:
             check_type(argname="argument event_bus_name", value=event_bus_name, expected_type=type_hints["event_bus_name"])
             check_type(argname="argument event_source_name", value=event_source_name, expected_type=type_hints["event_source_name"])
             check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
+            check_type(argname="argument log_config", value=log_config, expected_type=type_hints["log_config"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if dead_letter_queue is not None:
             self._values["dead_letter_queue"] = dead_letter_queue
@@ -8813,6 +9337,8 @@ class EventBusProps:
             self._values["event_source_name"] = event_source_name
         if kms_key is not None:
             self._values["kms_key"] = kms_key
+        if log_config is not None:
+            self._values["log_config"] = log_config
 
     @builtins.property
     def dead_letter_queue(self) -> typing.Optional[_IQueue_7ed6f679]:
@@ -8869,6 +9395,15 @@ class EventBusProps:
         result = self._values.get("kms_key")
         return typing.cast(typing.Optional[_IKey_5f11635f], result)
 
+    @builtins.property
+    def log_config(self) -> typing.Optional["LogConfig"]:
+        '''The Logging Configuration of the Èvent Bus.
+
+        :default: - no logging
+        '''
+        result = self._values.get("log_config")
+        return typing.cast(typing.Optional["LogConfig"], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -9477,6 +10012,16 @@ class IApiDestination(_IResource_c80c4260, typing_extensions.Protocol):
         '''
         ...
 
+    @builtins.property
+    @jsii.member(jsii_name="apiDestinationArnForPolicy")
+    def api_destination_arn_for_policy(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of an API destination in resource format, so it can be used in the Resource element of IAM permission policy statements.
+
+        :see: https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridge.html#amazoneventbridge-resources-for-iam-policies
+        :attribute: true
+        '''
+        ...
+
 
 class _IApiDestinationProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
@@ -9503,6 +10048,16 @@ class _IApiDestinationProxy(
         '''
         return typing.cast(builtins.str, jsii.get(self, "apiDestinationName"))
 
+    @builtins.property
+    @jsii.member(jsii_name="apiDestinationArnForPolicy")
+    def api_destination_arn_for_policy(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of an API destination in resource format, so it can be used in the Resource element of IAM permission policy statements.
+
+        :see: https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridge.html#amazoneventbridge-resources-for-iam-policies
+        :attribute: true
+        '''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "apiDestinationArnForPolicy"))
+
 # Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
 typing.cast(typing.Any, IApiDestination).__jsii_proxy_class__ = lambda : _IApiDestinationProxy
 
@@ -9628,6 +10183,7 @@ class IEventBus(_IResource_c80c4260, typing_extensions.Protocol):
         event_pattern: typing.Union[EventPattern, typing.Dict[builtins.str, typing.Any]],
         archive_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
         retention: typing.Optional[_Duration_4839e8c3] = None,
     ) -> Archive:
         '''Create an EventBridge archive to send events to.
@@ -9639,6 +10195,7 @@ class IEventBus(_IResource_c80c4260, typing_extensions.Protocol):
         :param event_pattern: An event pattern to use to filter events sent to the archive.
         :param archive_name: The name of the archive. Default: - Automatically generated
         :param description: A description for the archive. Default: - none
+        :param kms_key: The customer managed key that encrypts this archive. Default: - Use an AWS managed key
         :param retention: The number of days to retain events for. Default value is 0. If set to 0, events are retained indefinitely. Default: - Infinite
         '''
         ...
@@ -9711,6 +10268,7 @@ class _IEventBusProxy(
         event_pattern: typing.Union[EventPattern, typing.Dict[builtins.str, typing.Any]],
         archive_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
         retention: typing.Optional[_Duration_4839e8c3] = None,
     ) -> Archive:
         '''Create an EventBridge archive to send events to.
@@ -9722,6 +10280,7 @@ class _IEventBusProxy(
         :param event_pattern: An event pattern to use to filter events sent to the archive.
         :param archive_name: The name of the archive. Default: - Automatically generated
         :param description: A description for the archive. Default: - none
+        :param kms_key: The customer managed key that encrypts this archive. Default: - Use an AWS managed key
         :param retention: The number of days to retain events for. Default value is 0. If set to 0, events are retained indefinitely. Default: - Infinite
         '''
         if __debug__:
@@ -9731,6 +10290,7 @@ class _IEventBusProxy(
             event_pattern=event_pattern,
             archive_name=archive_name,
             description=description,
+            kms_key=kms_key,
             retention=retention,
         )
 
@@ -9857,6 +10417,142 @@ class _IRuleTargetProxy:
 typing.cast(typing.Any, IRuleTarget).__jsii_proxy_class__ = lambda : _IRuleTargetProxy
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_events.IncludeDetail")
+class IncludeDetail(enum.Enum):
+    '''Whether EventBridge include detailed event information in the records it generates.
+
+    Detailed data can be useful for troubleshooting and debugging.
+    This information includes details of the event itself, as well as target details.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        from aws_cdk.aws_events import EventBus, IncludeDetail, Level
+        
+        
+        bus = EventBus(self, "Bus",
+            log_config=events.LogConfig(
+                include_detail=IncludeDetail.FULL,
+                level=Level.TRACE
+            )
+        )
+    '''
+
+    FULL = "FULL"
+    '''FULL: Include all details related to event itself and the request EventBridge sends to the target.
+
+    Detailed data can be useful for troubleshooting and debugging.
+    '''
+    NONE = "NONE"
+    '''NONE: Does not include any details.'''
+
+
+@jsii.enum(jsii_type="aws-cdk-lib.aws_events.Level")
+class Level(enum.Enum):
+    '''The level of logging detail to include.
+
+    This applies to all log destinations for the event bus.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        from aws_cdk.aws_events import EventBus, IncludeDetail, Level
+        
+        
+        bus = EventBus(self, "Bus",
+            log_config=events.LogConfig(
+                include_detail=IncludeDetail.FULL,
+                level=Level.TRACE
+            )
+        )
+    '''
+
+    INFO = "INFO"
+    '''INFO: EventBridge sends any logs related to errors, as well as major steps performed during event processing.'''
+    ERROR = "ERROR"
+    '''ERROR: EventBridge sends any logs related to errors generated during event processing and target delivery.'''
+    TRACE = "TRACE"
+    '''TRACE: EventBridge sends any logs generated during all steps in the event processing.'''
+    OFF = "OFF"
+    '''OFF: EventBridge does not send any logs.
+
+    This is the default.
+    '''
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_events.LogConfig",
+    jsii_struct_bases=[],
+    name_mapping={"include_detail": "includeDetail", "level": "level"},
+)
+class LogConfig:
+    def __init__(
+        self,
+        *,
+        include_detail: typing.Optional[IncludeDetail] = None,
+        level: typing.Optional[Level] = None,
+    ) -> None:
+        '''Interface for Logging Configuration of the Event Bus.
+
+        :param include_detail: Whether EventBridge include detailed event information in the records it generates. Default: no details
+        :param level: Logging level. Default: OFF
+
+        :exampleMetadata: infused
+
+        Example::
+
+            from aws_cdk.aws_events import EventBus, IncludeDetail, Level
+            
+            
+            bus = EventBus(self, "Bus",
+                log_config=events.LogConfig(
+                    include_detail=IncludeDetail.FULL,
+                    level=Level.TRACE
+                )
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__198ca7d856a2573ae11c3570c27c6ff5d3b3d059abd28650a790b698a11f30b9)
+            check_type(argname="argument include_detail", value=include_detail, expected_type=type_hints["include_detail"])
+            check_type(argname="argument level", value=level, expected_type=type_hints["level"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if include_detail is not None:
+            self._values["include_detail"] = include_detail
+        if level is not None:
+            self._values["level"] = level
+
+    @builtins.property
+    def include_detail(self) -> typing.Optional[IncludeDetail]:
+        '''Whether EventBridge include detailed event information in the records it generates.
+
+        :default: no details
+        '''
+        result = self._values.get("include_detail")
+        return typing.cast(typing.Optional[IncludeDetail], result)
+
+    @builtins.property
+    def level(self) -> typing.Optional[Level]:
+        '''Logging level.
+
+        :default: OFF
+        '''
+        result = self._values.get("level")
+        return typing.cast(typing.Optional[Level], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "LogConfig(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IResolvable_da3f097b)
 class Match(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_events.Match"):
     '''An event pattern matcher.
@@ -10579,7 +11275,7 @@ class Rule(
         *,
         enabled: typing.Optional[builtins.bool] = None,
         event_bus: typing.Optional[IEventBus] = None,
-        role: typing.Optional[_IRole_235f5d8e] = None,
+        role: typing.Optional[_IRoleRef_8400221f] = None,
         schedule: typing.Optional["Schedule"] = None,
         targets: typing.Optional[typing.Sequence[IRuleTarget]] = None,
         cross_stack_scope: typing.Optional[_constructs_77d1e7e8.Construct] = None,
@@ -10771,7 +11467,7 @@ class RuleProps(EventCommonOptions):
         rule_name: typing.Optional[builtins.str] = None,
         enabled: typing.Optional[builtins.bool] = None,
         event_bus: typing.Optional[IEventBus] = None,
-        role: typing.Optional[_IRole_235f5d8e] = None,
+        role: typing.Optional[_IRoleRef_8400221f] = None,
         schedule: typing.Optional["Schedule"] = None,
         targets: typing.Optional[typing.Sequence[IRuleTarget]] = None,
     ) -> None:
@@ -10904,7 +11600,7 @@ class RuleProps(EventCommonOptions):
         return typing.cast(typing.Optional[IEventBus], result)
 
     @builtins.property
-    def role(self) -> typing.Optional[_IRole_235f5d8e]:
+    def role(self) -> typing.Optional[_IRoleRef_8400221f]:
         '''The role that is used for target invocation.
 
         Must be assumable by principal ``events.amazonaws.com``.
@@ -10912,7 +11608,7 @@ class RuleProps(EventCommonOptions):
         :default: - No role associated
         '''
         result = self._values.get("role")
-        return typing.cast(typing.Optional[_IRole_235f5d8e], result)
+        return typing.cast(typing.Optional[_IRoleRef_8400221f], result)
 
     @builtins.property
     def schedule(self) -> typing.Optional["Schedule"]:
@@ -11758,6 +12454,7 @@ class ApiDestination(
         *,
         api_destination_arn: builtins.str,
         connection: IConnection,
+        api_destination_arn_for_policy: typing.Optional[builtins.str] = None,
     ) -> "ApiDestination":
         '''Create an Api Destination construct from an existing Api Destination ARN.
 
@@ -11765,13 +12462,16 @@ class ApiDestination(
         :param id: The construct's id.
         :param api_destination_arn: The ARN of the Api Destination.
         :param connection: The Connection to associate with the Api Destination.
+        :param api_destination_arn_for_policy: The Amazon Resource Name (ARN) of an API destination in resource format. Default: undefined - Imported API destination does not have ARN in resource format
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e49376311071a64effa3b8c1dd1bd3ee0e1b2ef0514b800dd0053110fa18cb55)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         attrs = ApiDestinationAttributes(
-            api_destination_arn=api_destination_arn, connection=connection
+            api_destination_arn=api_destination_arn,
+            connection=connection,
+            api_destination_arn_for_policy=api_destination_arn_for_policy,
         )
 
         return typing.cast("ApiDestination", jsii.sinvoke(cls, "fromApiDestinationAttributes", [scope, id, attrs]))
@@ -11806,6 +12506,15 @@ class ApiDestination(
         '''The Connection to associate with Api Destination.'''
         return typing.cast(IConnection, jsii.get(self, "connection"))
 
+    @builtins.property
+    @jsii.member(jsii_name="apiDestinationArnForPolicy")
+    def api_destination_arn_for_policy(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of an API destination in resource format.
+
+        :attribute: true
+        '''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "apiDestinationArnForPolicy"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_events.ArchiveProps",
@@ -11814,6 +12523,7 @@ class ApiDestination(
         "event_pattern": "eventPattern",
         "archive_name": "archiveName",
         "description": "description",
+        "kms_key": "kmsKey",
         "retention": "retention",
         "source_event_bus": "sourceEventBus",
     },
@@ -11825,6 +12535,7 @@ class ArchiveProps(BaseArchiveProps):
         event_pattern: typing.Union[EventPattern, typing.Dict[builtins.str, typing.Any]],
         archive_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
         retention: typing.Optional[_Duration_4839e8c3] = None,
         source_event_bus: IEventBus,
     ) -> None:
@@ -11833,41 +12544,30 @@ class ArchiveProps(BaseArchiveProps):
         :param event_pattern: An event pattern to use to filter events sent to the archive.
         :param archive_name: The name of the archive. Default: - Automatically generated
         :param description: A description for the archive. Default: - none
+        :param kms_key: The customer managed key that encrypts this archive. Default: - Use an AWS managed key
         :param retention: The number of days to retain events for. Default value is 0. If set to 0, events are retained indefinitely. Default: - Infinite
         :param source_event_bus: The event source associated with the archive.
 
-        :exampleMetadata: fixture=_generated
+        :exampleMetadata: infused
 
         Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            import aws_cdk as cdk
-            from aws_cdk import aws_events as events
+            import aws_cdk.aws_kms as kms
+            from aws_cdk.aws_events import Archive, EventBus
             
-            # detail: Any
-            # event_bus: events.EventBus
+            # kms_key: kms.IKey
             
-            archive_props = events.ArchiveProps(
-                event_pattern=events.EventPattern(
-                    account=["account"],
-                    detail={
-                        "detail_key": detail
-                    },
-                    detail_type=["detailType"],
-                    id=["id"],
-                    region=["region"],
-                    resources=["resources"],
-                    source=["source"],
-                    time=["time"],
-                    version=["version"]
-                ),
-                source_event_bus=event_bus,
             
-                # the properties below are optional
-                archive_name="archiveName",
-                description="description",
-                retention=cdk.Duration.minutes(30)
+            stack = Stack()
+            
+            event_bus = EventBus(stack, "Bus")
+            
+            archive = Archive(stack, "Archive",
+                kms_key=kms_key,
+                source_event_bus=event_bus,
+                event_pattern=events.EventPattern(
+                    source=["aws.ec2"]
+                )
             )
         '''
         if isinstance(event_pattern, dict):
@@ -11877,6 +12577,7 @@ class ArchiveProps(BaseArchiveProps):
             check_type(argname="argument event_pattern", value=event_pattern, expected_type=type_hints["event_pattern"])
             check_type(argname="argument archive_name", value=archive_name, expected_type=type_hints["archive_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
             check_type(argname="argument retention", value=retention, expected_type=type_hints["retention"])
             check_type(argname="argument source_event_bus", value=source_event_bus, expected_type=type_hints["source_event_bus"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -11887,6 +12588,8 @@ class ArchiveProps(BaseArchiveProps):
             self._values["archive_name"] = archive_name
         if description is not None:
             self._values["description"] = description
+        if kms_key is not None:
+            self._values["kms_key"] = kms_key
         if retention is not None:
             self._values["retention"] = retention
 
@@ -11915,6 +12618,15 @@ class ArchiveProps(BaseArchiveProps):
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''The customer managed key that encrypts this archive.
+
+        :default: - Use an AWS managed key
+        '''
+        result = self._values.get("kms_key")
+        return typing.cast(typing.Optional[_IKey_5f11635f], result)
+
     @builtins.property
     def retention(self) -> typing.Optional[_Duration_4839e8c3]:
         '''The number of days to retain events for.
@@ -12136,6 +12848,7 @@ class EventBus(
         event_bus_name: typing.Optional[builtins.str] = None,
         event_source_name: typing.Optional[builtins.str] = None,
         kms_key: typing.Optional[_IKey_5f11635f] = None,
+        log_config: typing.Optional[typing.Union[LogConfig, typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''
         :param scope: -
@@ -12145,6 +12858,7 @@ class EventBus(
         :param event_bus_name: The name of the event bus you are creating Note: If 'eventSourceName' is passed in, you cannot set this. Default: - automatically generated name
         :param event_source_name: The partner event source to associate with this event bus resource Note: If 'eventBusName' is passed in, you cannot set this. Default: - no partner event source
         :param kms_key: The customer managed key that encrypt events on this event bus. Default: - Use an AWS managed key
+        :param log_config: The Logging Configuration of the Èvent Bus. Default: - no logging
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__95a51d19a0503daf5e05f08738b44a6276eaa23c373c99735de37b1247783380)
@@ -12156,6 +12870,7 @@ class EventBus(
             event_bus_name=event_bus_name,
             event_source_name=event_source_name,
             kms_key=kms_key,
+            log_config=log_config,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -12270,6 +12985,7 @@ class EventBus(
         event_pattern: typing.Union[EventPattern, typing.Dict[builtins.str, typing.Any]],
         archive_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
         retention: typing.Optional[_Duration_4839e8c3] = None,
     ) -> Archive:
         '''Create an EventBridge archive to send events to.
@@ -12281,6 +12997,7 @@ class EventBus(
         :param event_pattern: An event pattern to use to filter events sent to the archive.
         :param archive_name: The name of the archive. Default: - Automatically generated
         :param description: A description for the archive. Default: - none
+        :param kms_key: The customer managed key that encrypts this archive. Default: - Use an AWS managed key
         :param retention: The number of days to retain events for. Default value is 0. If set to 0, events are retained indefinitely. Default: - Infinite
         '''
         if __debug__:
@@ -12290,6 +13007,7 @@ class EventBus(
             event_pattern=event_pattern,
             archive_name=archive_name,
             description=description,
+            kms_key=kms_key,
             retention=retention,
         )
 
@@ -12384,6 +13102,9 @@ __all__ = [
     "IEventBus",
     "IRule",
     "IRuleTarget",
+    "IncludeDetail",
+    "Level",
+    "LogConfig",
     "Match",
     "OAuthAuthorizationProps",
     "OnEventOptions",
@@ -12401,6 +13122,7 @@ def _typecheckingstub__803612bfb0a8da2a8e0ca427792d066e933032d6f722156869f619496
     *,
     api_destination_arn: builtins.str,
     connection: IConnection,
+    api_destination_arn_for_policy: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -12425,6 +13147,7 @@ def _typecheckingstub__3d354e4791ce999debd366401bf6abece64fe39da3a499dafa6b3996b
     event_pattern: typing.Union[EventPattern, typing.Dict[builtins.str, typing.Any]],
     archive_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
     retention: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
@@ -12449,6 +13172,7 @@ def _typecheckingstub__74aa160eedb5cb0d834ff82193fc6747b652d04f044891f2ad16f69e1
     event_pattern: typing.Union[EventPattern, typing.Dict[builtins.str, typing.Any]],
     archive_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
     retention: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
@@ -12468,6 +13192,22 @@ def _typecheckingstub__0c7f09c3557e2395656d23b74c8de1fbe1e4a3b537284c9d270edc631
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__e4d067d14eb4986a791825f5574a2a1b7996e52c30d1c10ce8e7b59e60ddb769(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__2f7e79e48e08b958f9ad095544607e87dd2f1aa8eef727bec93c1ee0def4c583(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    api_destination_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__158c0bb8fa8e9ef1c2e58e89a44ebad609986b410e381f81aedd0308a9e35b28(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -12542,6 +13282,22 @@ def _typecheckingstub__a963410c1802040879d7bcae9506f4438510f71eb6934c222d9c998db
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__8e8ead948e3f54f53c0d21e22906517bc78f6bc7b15975a7503199c89c0cc2d8(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f94b64dd5cb2b916b6680e63c92384270a55a857a32d8c25ec445a22c5a86f62(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    archive_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c7da996869ac9a69e8a63a58883200e217a1913f5d321926f7ab5c4ebb3e56a6(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -12616,6 +13372,22 @@ def _typecheckingstub__65bde9b35de094b905dd335652d04503af85c50ac027a006a1d7ec926
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__630a9669f06abf4f4e8bad75138d45b4182263c18c97fb22a426fbc0a2bbcdc2(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d14cab009a8170454a66a3e141b7bf3bd9913cd1520a24a6bd2047517dc43bca(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    connection_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__192a6c229918a43504bd57de4e35ae7938880d0c805afe4cc4c5905924754719(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -12775,6 +13547,22 @@ def _typecheckingstub__66aefb2196270463c6a9f2eea0dcb5bb280d90c63f36870b21785e675
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__b8df0737b10ec98bf62c1be2c67715f159dc221d2935abd8e8ae6669ca458d7f(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__777109eec20698d982fd6e8cd9ad182871f5e151603cba27527f7f96a6fb3f5e(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    endpoint_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__575b3a669c9a519cfd6641ef37eb4e16de10be20251ac40d8d954a8cac93bb17(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -12887,12 +13675,29 @@ def _typecheckingstub__5766595a149723459145d9f55c6afa7ed3017d49f4af7cec85e0fffe2
     description: typing.Optional[builtins.str] = None,
     event_source_name: typing.Optional[builtins.str] = None,
     kms_key_identifier: typing.Optional[builtins.str] = None,
+    log_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnEventBus.LogConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     policy: typing.Any = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__52da9c5fdac4b9a20af016bb86d96bb717169d7d2f8789450b948f3ae2849d73(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c06912850ab4232d75f46bf4e7fc5fb53350cab9f80c585bec5b376767c64960(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    event_bus_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__505cff6efff7c5a6d5cba375be4fe0f0f9042abf1bfc4636e8e005ac832fdd64(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -12935,6 +13740,12 @@ def _typecheckingstub__1899d0d8378d7d8ade574708aa2d0221794e2fcd5f946287a6f238e59
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__51db51bf8f1ebc8d9c19cdf02644ddeaaef6bd2b5c86607383cd85b5fa2030c1(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnEventBus.LogConfigProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__6069dbf8a749c1a9a0cd15c07c6efbd2f70dbd4c7e3a6e98efd29bdb8c7acb24(
     value: typing.Any,
 ) -> None:
@@ -12954,6 +13765,14 @@ def _typecheckingstub__19cc778177531cf61ae62a46e1a008d0fb9f91cd857dc37c522f0cd73
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__325c97a9fc2ec199dfb4fb51645bc16dde3cf1f257d1bcf5c86f7cd3a0b2d77c(
+    *,
+    include_detail: typing.Optional[builtins.str] = None,
+    level: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c6df7e81a60de40e0e425694b7757e614a634ac89c7c10147ca4c807819a6b71(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -13044,6 +13863,7 @@ def _typecheckingstub__79e3f734387b70ada8040490433e9e9ec9b92701ddfb55826c4adc111
     description: typing.Optional[builtins.str] = None,
     event_source_name: typing.Optional[builtins.str] = None,
     kms_key_identifier: typing.Optional[builtins.str] = None,
+    log_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnEventBus.LogConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     policy: typing.Any = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
@@ -13061,6 +13881,7 @@ def _typecheckingstub__e06314755e55e41a2976ff974daa36bbbb473330c92c9fef111b716f2
     role_arn: typing.Optional[builtins.str] = None,
     schedule_expression: typing.Optional[builtins.str] = None,
     state: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     targets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnRule.TargetProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -13120,6 +13941,12 @@ def _typecheckingstub__08542b68c4470a8f44e4a04ee382bb40e94dc161aad2f92bfa79298da
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__4daedf0bf9c9ce5671a843d87568d852259b36183898da9f395d6fb1b1a1e974(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__0b3ddab1471338782440504c486a52daa0e3a535b2209abca3766744b2fabcfc(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnRule.TargetProperty]]]],
 ) -> None:
@@ -13347,6 +14174,7 @@ def _typecheckingstub__1ba0cfcfcd9cab75c7bd4b5ffa2348687b001ab869ed65280a51c734b
     role_arn: typing.Optional[builtins.str] = None,
     schedule_expression: typing.Optional[builtins.str] = None,
     state: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     targets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnRule.TargetProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -13422,6 +14250,7 @@ def _typecheckingstub__298a8c4285f4e039344007a0deb097d820ddec52c59d396d7a8faa1aa
     event_bus_name: typing.Optional[builtins.str] = None,
     event_source_name: typing.Optional[builtins.str] = None,
     kms_key: typing.Optional[_IKey_5f11635f] = None,
+    log_config: typing.Optional[typing.Union[LogConfig, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -13481,6 +14310,7 @@ def _typecheckingstub__1ed58495b96f0f8ed0dfb0c65e8400413d45c5c1f372215e535272012
     event_pattern: typing.Union[EventPattern, typing.Dict[builtins.str, typing.Any]],
     archive_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
     retention: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
@@ -13500,6 +14330,14 @@ def _typecheckingstub__ee62e84f884e0e5476947339e584feca527844abc70d56b2fe2d048cc
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__198ca7d856a2573ae11c3570c27c6ff5d3b3d059abd28650a790b698a11f30b9(
+    *,
+    include_detail: typing.Optional[IncludeDetail] = None,
+    level: typing.Optional[Level] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__40e12e6e33c3e0969083091ee3865292a66ff488c5232a973beb73ef6c62c5fa(
     *matchers: typing.Any,
 ) -> None:
@@ -13669,7 +14507,7 @@ def _typecheckingstub__15ada85ef5f1cb4f0237eff6253e200138049f1bebbea7163294d28f9
     *,
     enabled: typing.Optional[builtins.bool] = None,
     event_bus: typing.Optional[IEventBus] = None,
-    role: typing.Optional[_IRole_235f5d8e] = None,
+    role: typing.Optional[_IRoleRef_8400221f] = None,
     schedule: typing.Optional[Schedule] = None,
     targets: typing.Optional[typing.Sequence[IRuleTarget]] = None,
     cross_stack_scope: typing.Optional[_constructs_77d1e7e8.Construct] = None,
@@ -13702,7 +14540,7 @@ def _typecheckingstub__26677a946da4037892c1c589c005b7536d8ffed632ca92c5c52a92586
     rule_name: typing.Optional[builtins.str] = None,
     enabled: typing.Optional[builtins.bool] = None,
     event_bus: typing.Optional[IEventBus] = None,
-    role: typing.Optional[_IRole_235f5d8e] = None,
+    role: typing.Optional[_IRoleRef_8400221f] = None,
     schedule: typing.Optional[Schedule] = None,
     targets: typing.Optional[typing.Sequence[IRuleTarget]] = None,
 ) -> None:
@@ -13801,6 +14639,7 @@ def _typecheckingstub__e49376311071a64effa3b8c1dd1bd3ee0e1b2ef0514b800dd0053110f
     *,
     api_destination_arn: builtins.str,
     connection: IConnection,
+    api_destination_arn_for_policy: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -13810,6 +14649,7 @@ def _typecheckingstub__3e9e21c5f043688b8d785343f3fca5b1c769d309ab6d381af52c9421a
     event_pattern: typing.Union[EventPattern, typing.Dict[builtins.str, typing.Any]],
     archive_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
     retention: typing.Optional[_Duration_4839e8c3] = None,
     source_event_bus: IEventBus,
 ) -> None:
@@ -13859,6 +14699,7 @@ def _typecheckingstub__95a51d19a0503daf5e05f08738b44a6276eaa23c373c99735de37b124
     event_bus_name: typing.Optional[builtins.str] = None,
     event_source_name: typing.Optional[builtins.str] = None,
     kms_key: typing.Optional[_IKey_5f11635f] = None,
+    log_config: typing.Optional[typing.Union[LogConfig, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -13909,6 +14750,7 @@ def _typecheckingstub__7330918630167c372966fe4a86452f34a261c80460ae944bcce168d6b
     event_pattern: typing.Union[EventPattern, typing.Dict[builtins.str, typing.Any]],
     archive_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
     retention: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
@@ -13920,3 +14762,6 @@ def _typecheckingstub__f55b55b311ab4cc3f0aabb9339086b97d1f1340dcc28209fe5e78777c
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IApiDestination, IConnection, IEventBus, IRule, IRuleTarget]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])