aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_appconfig/__init__.py

@@ -382,6 +382,21 @@ The declaration order will be respected regardless of the approach used.
 > [!IMPORTANT]
 > If none of these options are utilized, there will not be any deployments.
 
+You can use customer managed key to encrypt a hosted configuration. For mora information, see [Data encryption at rest for AWS AppConfig](https://docs.aws.amazon.com/appconfig/latest/userguide/appconfig-security.html#appconfig-security-data-encryption).
+
+```python
+# application: appconfig.Application
+# kms_key: kms.Key
+
+
+appconfig.HostedConfiguration(self, "MyHostedConfiguration",
+    application=application,
+    content=appconfig.ConfigurationContent.from_inline_text("This is my configuration content."),
+    type=appconfig.ConfigurationType.FEATURE_FLAGS,
+    kms_key=kms_key
+)
+```
+
 ### SourcedConfiguration
 
 A sourced configuration represents configuration stored in any of the following:
@@ -777,6 +792,26 @@ from ..aws_sqs import IQueue as _IQueue_7ed6f679
 from ..aws_ssm import (
     CfnDocument as _CfnDocument_8b177f00, IParameter as _IParameter_509a0f80
 )
+from ..interfaces.aws_appconfig import (
+    ApplicationReference as _ApplicationReference_2b7c5bb6,
+    ConfigurationProfileReference as _ConfigurationProfileReference_c0821f22,
+    DeploymentReference as _DeploymentReference_5ef418d1,
+    DeploymentStrategyReference as _DeploymentStrategyReference_e1908020,
+    EnvironmentReference as _EnvironmentReference_610ea6de,
+    ExtensionAssociationReference as _ExtensionAssociationReference_35a869f1,
+    ExtensionReference as _ExtensionReference_a0aef309,
+    HostedConfigurationVersionReference as _HostedConfigurationVersionReference_6f730fe8,
+    IApplicationRef as _IApplicationRef_768db227,
+    IConfigurationProfileRef as _IConfigurationProfileRef_3e332cf9,
+    IDeploymentRef as _IDeploymentRef_c08544bf,
+    IDeploymentStrategyRef as _IDeploymentStrategyRef_2cd4ca44,
+    IEnvironmentRef as _IEnvironmentRef_5f5c3f67,
+    IExtensionAssociationRef as _IExtensionAssociationRef_1b672c9b,
+    IExtensionRef as _IExtensionRef_abba29c3,
+    IHostedConfigurationVersionRef as _IHostedConfigurationVersionRef_eb4b6788,
+)
+from ..interfaces.aws_iam import IRoleRef as _IRoleRef_8400221f
+from ..interfaces.aws_kms import IKeyRef as _IKeyRef_d4fc6ef3
 
 
 class Action(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_appconfig.Action"):
@@ -1102,7 +1137,7 @@ class ApplicationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IApplicationRef_768db227, _ITaggableV2_4e6798f8)
 class CfnApplication(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1153,7 +1188,8 @@ class CfnApplication(
         description: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::AppConfig::Application``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: A name for the application.
@@ -1168,6 +1204,27 @@ class CfnApplication(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromApplicationId")
+    @builtins.classmethod
+    def from_application_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        application_id: builtins.str,
+    ) -> _IApplicationRef_768db227:
+        '''Creates a new IApplicationRef from a applicationId.
+
+        :param scope: -
+        :param id: -
+        :param application_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__afd571466571231348a78cb931c25e5d1b3c70347a376b9d64e551c1d6126654)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument application_id", value=application_id, expected_type=type_hints["application_id"])
+        return typing.cast(_IApplicationRef_768db227, jsii.sinvoke(cls, "fromApplicationId", [scope, id, application_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -1198,6 +1255,12 @@ class CfnApplication(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="applicationRef")
+    def application_ref(self) -> _ApplicationReference_2b7c5bb6:
+        '''A reference to a Application resource.'''
+        return typing.cast(_ApplicationReference_2b7c5bb6, jsii.get(self, "applicationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="attrApplicationId")
     def attr_application_id(self) -> builtins.str:
@@ -1352,7 +1415,7 @@ class CfnApplicationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IConfigurationProfileRef_3e332cf9, _ITaggableV2_4e6798f8)
 class CfnConfigurationProfile(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1424,7 +1487,8 @@ class CfnConfigurationProfile(
         type: typing.Optional[builtins.str] = None,
         validators: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnConfigurationProfile.ValidatorsProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::AppConfig::ConfigurationProfile``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param application_id: The application ID.
@@ -1518,6 +1582,12 @@ class CfnConfigurationProfile(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="configurationProfileRef")
+    def configuration_profile_ref(self) -> _ConfigurationProfileReference_c0821f22:
+        '''A reference to a ConfigurationProfile resource.'''
+        return typing.cast(_ConfigurationProfileReference_c0821f22, jsii.get(self, "configurationProfileRef"))
+
     @builtins.property
     @jsii.member(jsii_name="applicationId")
     def application_id(self) -> builtins.str:
@@ -1969,7 +2039,7 @@ class CfnConfigurationProfileProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IDeploymentRef_c08544bf, _ITaggableV2_4e6798f8)
 class CfnDeployment(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2038,7 +2108,8 @@ class CfnDeployment(
         kms_key_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::AppConfig::Deployment``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param application_id: The application ID.
@@ -2108,6 +2179,15 @@ class CfnDeployment(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrDeploymentNumber"))
 
+    @builtins.property
+    @jsii.member(jsii_name="attrState")
+    def attr_state(self) -> builtins.str:
+        '''The state of the deployment.
+
+        :cloudformationAttribute: State
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrState"))
+
     @builtins.property
     @jsii.member(jsii_name="cdkTagManager")
     def cdk_tag_manager(self) -> _TagManager_0a598cb3:
@@ -2119,6 +2199,12 @@ class CfnDeployment(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="deploymentRef")
+    def deployment_ref(self) -> _DeploymentReference_5ef418d1:
+        '''A reference to a Deployment resource.'''
+        return typing.cast(_DeploymentReference_5ef418d1, jsii.get(self, "deploymentRef"))
+
     @builtins.property
     @jsii.member(jsii_name="applicationId")
     def application_id(self) -> builtins.str:
@@ -2533,7 +2619,7 @@ class CfnDeploymentProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IDeploymentStrategyRef_2cd4ca44, _ITaggableV2_4e6798f8)
 class CfnDeploymentStrategy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2594,7 +2680,8 @@ class CfnDeploymentStrategy(
         growth_type: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::AppConfig::DeploymentStrategy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param deployment_duration_in_minutes: Total amount of time for a deployment to last.
@@ -2623,6 +2710,27 @@ class CfnDeploymentStrategy(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromDeploymentStrategyId")
+    @builtins.classmethod
+    def from_deployment_strategy_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        deployment_strategy_id: builtins.str,
+    ) -> _IDeploymentStrategyRef_2cd4ca44:
+        '''Creates a new IDeploymentStrategyRef from a deploymentStrategyId.
+
+        :param scope: -
+        :param id: -
+        :param deployment_strategy_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a211633629f45a21de52e2d3b8c73b520eee7fc38d9ec5fafe4d90b277a310a5)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument deployment_strategy_id", value=deployment_strategy_id, expected_type=type_hints["deployment_strategy_id"])
+        return typing.cast(_IDeploymentStrategyRef_2cd4ca44, jsii.sinvoke(cls, "fromDeploymentStrategyId", [scope, id, deployment_strategy_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -2673,6 +2781,12 @@ class CfnDeploymentStrategy(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="deploymentStrategyRef")
+    def deployment_strategy_ref(self) -> _DeploymentStrategyReference_e1908020:
+        '''A reference to a DeploymentStrategy resource.'''
+        return typing.cast(_DeploymentStrategyReference_e1908020, jsii.get(self, "deploymentStrategyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="deploymentDurationInMinutes")
     def deployment_duration_in_minutes(self) -> jsii.Number:
@@ -2973,7 +3087,7 @@ class CfnDeploymentStrategyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IEnvironmentRef_5f5c3f67, _ITaggableV2_4e6798f8)
 class CfnEnvironment(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3033,7 +3147,8 @@ class CfnEnvironment(
         monitors: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnEnvironment.MonitorsProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::AppConfig::Environment``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param application_id: The application ID.
@@ -3108,6 +3223,12 @@ class CfnEnvironment(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="environmentRef")
+    def environment_ref(self) -> _EnvironmentReference_610ea6de:
+        '''A reference to a Environment resource.'''
+        return typing.cast(_EnvironmentReference_610ea6de, jsii.get(self, "environmentRef"))
+
     @builtins.property
     @jsii.member(jsii_name="applicationId")
     def application_id(self) -> builtins.str:
@@ -3491,7 +3612,7 @@ class CfnEnvironmentProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IExtensionRef_abba29c3, _ITaggable_36806126)
 class CfnExtension(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3556,7 +3677,8 @@ class CfnExtension(
         parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[_IResolvable_da3f097b, typing.Union["CfnExtension.ParameterProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::AppConfig::Extension``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param actions: The actions defined in the extension.
@@ -3643,6 +3765,12 @@ class CfnExtension(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="extensionRef")
+    def extension_ref(self) -> _ExtensionReference_a0aef309:
+        '''A reference to a Extension resource.'''
+        return typing.cast(_ExtensionReference_a0aef309, jsii.get(self, "extensionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -3941,7 +4069,7 @@ class CfnExtension(
             )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IExtensionAssociationRef_1b672c9b, _ITaggable_36806126)
 class CfnExtensionAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3986,7 +4114,8 @@ class CfnExtensionAssociation(
         resource_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::AppConfig::ExtensionAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param extension_identifier: The name, the ID, or the Amazon Resource Name (ARN) of the extension.
@@ -4009,6 +4138,48 @@ class CfnExtensionAssociation(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromExtensionAssociationArn")
+    @builtins.classmethod
+    def from_extension_association_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IExtensionAssociationRef_1b672c9b:
+        '''Creates a new IExtensionAssociationRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0f2ddb8bad12cb1e96088c9c43262a44a268a1f9f59e087e06c9e1981203af04)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IExtensionAssociationRef_1b672c9b, jsii.sinvoke(cls, "fromExtensionAssociationArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromExtensionAssociationId")
+    @builtins.classmethod
+    def from_extension_association_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        extension_association_id: builtins.str,
+    ) -> _IExtensionAssociationRef_1b672c9b:
+        '''Creates a new IExtensionAssociationRef from a extensionAssociationId.
+
+        :param scope: -
+        :param id: -
+        :param extension_association_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__40444fb29d9428650401cd4b9cf7689bd4735cae65b5137a1802e1a8a7fd4825)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument extension_association_id", value=extension_association_id, expected_type=type_hints["extension_association_id"])
+        return typing.cast(_IExtensionAssociationRef_1b672c9b, jsii.sinvoke(cls, "fromExtensionAssociationId", [scope, id, extension_association_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -4080,6 +4251,12 @@ class CfnExtensionAssociation(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="extensionAssociationRef")
+    def extension_association_ref(self) -> _ExtensionAssociationReference_35a869f1:
+        '''A reference to a ExtensionAssociation resource.'''
+        return typing.cast(_ExtensionAssociationReference_35a869f1, jsii.get(self, "extensionAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -4456,7 +4633,7 @@ class CfnExtensionProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IHostedConfigurationVersionRef_eb4b6788)
 class CfnHostedConfigurationVersion(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4508,7 +4685,8 @@ class CfnHostedConfigurationVersion(
         latest_version_number: typing.Optional[jsii.Number] = None,
         version_label: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::AppConfig::HostedConfigurationVersion``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param application_id: The application ID.
@@ -4579,6 +4757,14 @@ class CfnHostedConfigurationVersion(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="hostedConfigurationVersionRef")
+    def hosted_configuration_version_ref(
+        self,
+    ) -> _HostedConfigurationVersionReference_6f730fe8:
+        '''A reference to a HostedConfigurationVersion resource.'''
+        return typing.cast(_HostedConfigurationVersionReference_6f730fe8, jsii.get(self, "hostedConfigurationVersionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="applicationId")
     def application_id(self) -> builtins.str:
@@ -4877,7 +5063,7 @@ class ConfigurationContent(
         '''Defines the hosted configuration content from a file.
 
         :param input_path: The path to the file that defines configuration content.
-        :param content_type: The content type of the configuration.
+        :param content_type: The configuration content type, specified as a standard MIME type. Supported examples include: - ``text/plain`` - ``application/json`` - ``application/octet-stream`` - ``application/x-yaml``. For an up-to-date list of valid MIME types, see: https://www.iana.org/assignments/media-types/media-types.xhtml
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__90a444a396ae95bf4dbe20a3cba4428b472f8dc18cddec786f4ed521d3ef8224)
@@ -4895,7 +5081,7 @@ class ConfigurationContent(
         '''Defines the hosted configuration content from inline code.
 
         :param content: The inline code that defines the configuration content.
-        :param content_type: The content type of the configuration.
+        :param content_type: The configuration content type, specified as a standard MIME type. Supported examples include: - ``text/plain`` - ``application/json`` - ``application/octet-stream`` - ``application/x-yaml``. For an up-to-date list of valid MIME types, see: https://www.iana.org/assignments/media-types/media-types.xhtml
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3dc78a8c320c476850c109277461b0640bc3492938af15c32744671285117e99)
@@ -4913,7 +5099,7 @@ class ConfigurationContent(
         '''Defines the hosted configuration content as JSON from inline code.
 
         :param content: The inline code that defines the configuration content.
-        :param content_type: The content type of the configuration.
+        :param content_type: The configuration content type, specified as a standard MIME type. Supported examples include: - ``text/plain`` - ``application/json`` - ``application/octet-stream`` - ``application/x-yaml``. For an up-to-date list of valid MIME types, see: https://www.iana.org/assignments/media-types/media-types.xhtml
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__0be240b695740e98f6925d6eb7c6948c1cdff98558955885c2275a539fa4e5f0)
@@ -4956,7 +5142,11 @@ class ConfigurationContent(
     @jsii.member(jsii_name="contentType")
     @abc.abstractmethod
     def content_type(self) -> builtins.str:
-        '''The configuration content type.'''
+        '''The configuration content type, specified as a standard MIME type. Supported examples include: - ``text/plain`` - ``application/json`` - ``application/octet-stream`` - ``application/x-yaml``.
+
+        For an up-to-date list of valid MIME types, see:
+        https://www.iana.org/assignments/media-types/media-types.xhtml
+        '''
         ...
 
 
@@ -4970,7 +5160,11 @@ class _ConfigurationContentProxy(ConfigurationContent):
     @builtins.property
     @jsii.member(jsii_name="contentType")
     def content_type(self) -> builtins.str:
-        '''The configuration content type.'''
+        '''The configuration content type, specified as a standard MIME type. Supported examples include: - ``text/plain`` - ``application/json`` - ``application/octet-stream`` - ``application/x-yaml``.
+
+        For an up-to-date list of valid MIME types, see:
+        https://www.iana.org/assignments/media-types/media-types.xhtml
+        '''
         return typing.cast(builtins.str, jsii.get(self, "contentType"))
 
 # Adding a "__jsii_proxy_class__(): typing.Type" function to the abstract class
@@ -5541,12 +5735,14 @@ class ConfigurationType(enum.Enum):
     Example::
 
         # application: appconfig.Application
+        # kms_key: kms.Key
         
         
         appconfig.HostedConfiguration(self, "MyHostedConfiguration",
             application=application,
             content=appconfig.ConfigurationContent.from_inline_text("This is my configuration content."),
-            type=appconfig.ConfigurationType.FEATURE_FLAGS
+            type=appconfig.ConfigurationType.FEATURE_FLAGS,
+            kms_key=kms_key
         )
     '''
 
@@ -6787,6 +6983,7 @@ class HostedConfigurationOptions(ConfigurationOptions):
         "validators": "validators",
         "application": "application",
         "content": "content",
+        "kms_key": "kmsKey",
         "latest_version_number": "latestVersionNumber",
         "version_label": "versionLabel",
     },
@@ -6805,6 +7002,7 @@ class HostedConfigurationProps(ConfigurationProps):
         validators: typing.Optional[typing.Sequence["IValidator"]] = None,
         application: "IApplication",
         content: ConfigurationContent,
+        kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
         latest_version_number: typing.Optional[jsii.Number] = None,
         version_label: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -6820,6 +7018,7 @@ class HostedConfigurationProps(ConfigurationProps):
         :param validators: The validators for the configuration. Default: - No validators.
         :param application: The application associated with the configuration.
         :param content: The content of the hosted configuration.
+        :param kms_key: The customer managed key to encrypt hosted configuration. Default: None
         :param latest_version_number: The latest version number of the hosted configuration. Default: - None.
         :param version_label: The version label of the hosted configuration. Default: - None.
 
@@ -6852,6 +7051,7 @@ class HostedConfigurationProps(ConfigurationProps):
             check_type(argname="argument validators", value=validators, expected_type=type_hints["validators"])
             check_type(argname="argument application", value=application, expected_type=type_hints["application"])
             check_type(argname="argument content", value=content, expected_type=type_hints["content"])
+            check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
             check_type(argname="argument latest_version_number", value=latest_version_number, expected_type=type_hints["latest_version_number"])
             check_type(argname="argument version_label", value=version_label, expected_type=type_hints["version_label"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -6874,6 +7074,8 @@ class HostedConfigurationProps(ConfigurationProps):
             self._values["type"] = type
         if validators is not None:
             self._values["validators"] = validators
+        if kms_key is not None:
+            self._values["kms_key"] = kms_key
         if latest_version_number is not None:
             self._values["latest_version_number"] = latest_version_number
         if version_label is not None:
@@ -6979,6 +7181,15 @@ class HostedConfigurationProps(ConfigurationProps):
         assert result is not None, "Required property 'content' is missing"
         return typing.cast(ConfigurationContent, result)
 
+    @builtins.property
+    def kms_key(self) -> typing.Optional[_IKeyRef_d4fc6ef3]:
+        '''The customer managed key to encrypt hosted configuration.
+
+        :default: None
+        '''
+        result = self._values.get("kms_key")
+        return typing.cast(typing.Optional[_IKeyRef_d4fc6ef3], result)
+
     @builtins.property
     def latest_version_number(self) -> typing.Optional[jsii.Number]:
         '''The latest version number of the hosted configuration.
@@ -7117,7 +7328,7 @@ class IApplication(_IResource_c80c4260, typing_extensions.Protocol):
         id: builtins.str,
         *,
         location: ConfigurationSource,
-        retrieval_role: typing.Optional[_IRole_235f5d8e] = None,
+        retrieval_role: typing.Optional[_IRoleRef_8400221f] = None,
         version_number: typing.Optional[builtins.str] = None,
         deletion_protection_check: typing.Optional[DeletionProtectionCheck] = None,
         deployment_key: typing.Optional[_IKey_5f11635f] = None,
@@ -7477,7 +7688,7 @@ class _IApplicationProxy(
         id: builtins.str,
         *,
         location: ConfigurationSource,
-        retrieval_role: typing.Optional[_IRole_235f5d8e] = None,
+        retrieval_role: typing.Optional[_IRoleRef_8400221f] = None,
         version_number: typing.Optional[builtins.str] = None,
         deletion_protection_check: typing.Optional[DeletionProtectionCheck] = None,
         deployment_key: typing.Optional[_IKey_5f11635f] = None,
@@ -9701,7 +9912,7 @@ class Monitor(
     def from_cloud_watch_alarm(
         cls,
         alarm: _IAlarm_ff3eabc0,
-        alarm_role: typing.Optional[_IRole_235f5d8e] = None,
+        alarm_role: typing.Optional[_IRoleRef_8400221f] = None,
     ) -> "Monitor":
         '''Creates a Monitor from a CloudWatch alarm.
 
@@ -10253,7 +10464,7 @@ class SourcedConfiguration(
         id: builtins.str,
         *,
         location: ConfigurationSource,
-        retrieval_role: typing.Optional[_IRole_235f5d8e] = None,
+        retrieval_role: typing.Optional[_IRoleRef_8400221f] = None,
         version_number: typing.Optional[builtins.str] = None,
         application: IApplication,
         deletion_protection_check: typing.Optional[DeletionProtectionCheck] = None,
@@ -10753,7 +10964,7 @@ class SourcedConfigurationOptions(ConfigurationOptions):
         type: typing.Optional[ConfigurationType] = None,
         validators: typing.Optional[typing.Sequence[IValidator]] = None,
         location: ConfigurationSource,
-        retrieval_role: typing.Optional[_IRole_235f5d8e] = None,
+        retrieval_role: typing.Optional[_IRoleRef_8400221f] = None,
         version_number: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Options for SourcedConfiguration.
@@ -10777,14 +10988,14 @@ class SourcedConfigurationOptions(ConfigurationOptions):
             # The code below shows an example of how to instantiate this type.
             # The values are placeholders you should change.
             from aws_cdk import aws_appconfig as appconfig
-            from aws_cdk import aws_iam as iam
             from aws_cdk import aws_kms as kms
+            from aws_cdk.interfaces import aws_iam as interfaces_aws_iam
             
             # configuration_source: appconfig.ConfigurationSource
             # deployment_strategy: appconfig.DeploymentStrategy
             # environment: appconfig.Environment
             # key: kms.Key
-            # role: iam.Role
+            # role_ref: interfaces_aws_iam.IRoleRef
             # validator: appconfig.IValidator
             
             sourced_configuration_options = appconfig.SourcedConfigurationOptions(
@@ -10797,7 +11008,7 @@ class SourcedConfigurationOptions(ConfigurationOptions):
                 deploy_to=[environment],
                 description="description",
                 name="name",
-                retrieval_role=role,
+                retrieval_role=role_ref,
                 type=appconfig.ConfigurationType.FREEFORM,
                 validators=[validator],
                 version_number="versionNumber"
@@ -10934,13 +11145,13 @@ class SourcedConfigurationOptions(ConfigurationOptions):
         return typing.cast(ConfigurationSource, result)
 
     @builtins.property
-    def retrieval_role(self) -> typing.Optional[_IRole_235f5d8e]:
+    def retrieval_role(self) -> typing.Optional[_IRoleRef_8400221f]:
         '''The IAM role to retrieve the configuration.
 
         :default: - A role is generated.
         '''
         result = self._values.get("retrieval_role")
-        return typing.cast(typing.Optional[_IRole_235f5d8e], result)
+        return typing.cast(typing.Optional[_IRoleRef_8400221f], result)
 
     @builtins.property
     def version_number(self) -> typing.Optional[builtins.str]:
@@ -10998,7 +11209,7 @@ class SourcedConfigurationProps(ConfigurationProps):
         validators: typing.Optional[typing.Sequence[IValidator]] = None,
         application: IApplication,
         location: ConfigurationSource,
-        retrieval_role: typing.Optional[_IRole_235f5d8e] = None,
+        retrieval_role: typing.Optional[_IRoleRef_8400221f] = None,
         version_number: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for SourcedConfiguration.
@@ -11172,13 +11383,13 @@ class SourcedConfigurationProps(ConfigurationProps):
         return typing.cast(ConfigurationSource, result)
 
     @builtins.property
-    def retrieval_role(self) -> typing.Optional[_IRole_235f5d8e]:
+    def retrieval_role(self) -> typing.Optional[_IRoleRef_8400221f]:
         '''The IAM role to retrieve the configuration.
 
         :default: - Auto generated if location type is not ConfigurationSourceType.CODE_PIPELINE otherwise no role specified.
         '''
         result = self._values.get("retrieval_role")
-        return typing.cast(typing.Optional[_IRole_235f5d8e], result)
+        return typing.cast(typing.Optional[_IRoleRef_8400221f], result)
 
     @builtins.property
     def version_number(self) -> typing.Optional[builtins.str]:
@@ -11499,7 +11710,7 @@ class Application(
         id: builtins.str,
         *,
         location: ConfigurationSource,
-        retrieval_role: typing.Optional[_IRole_235f5d8e] = None,
+        retrieval_role: typing.Optional[_IRoleRef_8400221f] = None,
         version_number: typing.Optional[builtins.str] = None,
         deletion_protection_check: typing.Optional[DeletionProtectionCheck] = None,
         deployment_key: typing.Optional[_IKey_5f11635f] = None,
@@ -13156,6 +13367,7 @@ class HostedConfiguration(
         id: builtins.str,
         *,
         content: ConfigurationContent,
+        kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
         latest_version_number: typing.Optional[jsii.Number] = None,
         version_label: typing.Optional[builtins.str] = None,
         application: IApplication,
@@ -13172,6 +13384,7 @@ class HostedConfiguration(
         :param scope: -
         :param id: -
         :param content: The content of the hosted configuration.
+        :param kms_key: The customer managed key to encrypt hosted configuration. Default: None
         :param latest_version_number: The latest version number of the hosted configuration. Default: - None.
         :param version_label: The version label of the hosted configuration. Default: - None.
         :param application: The application associated with the configuration.
@@ -13190,6 +13403,7 @@ class HostedConfiguration(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = HostedConfigurationProps(
             content=content,
+            kms_key=kms_key,
             latest_version_number=latest_version_number,
             version_label=version_label,
             application=application,
@@ -13530,7 +13744,11 @@ class HostedConfiguration(
     @builtins.property
     @jsii.member(jsii_name="contentType")
     def content_type(self) -> typing.Optional[builtins.str]:
-        '''The content type of the hosted configuration.'''
+        '''The configuration content type, specified as a standard MIME type. Supported examples include: - ``text/plain`` - ``application/json`` - ``application/octet-stream`` - ``application/x-yaml``.
+
+        For an up-to-date list of valid MIME types, see:
+        https://www.iana.org/assignments/media-types/media-types.xhtml
+        '''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "contentType"))
 
     @builtins.property
@@ -13738,6 +13956,14 @@ def _typecheckingstub__c5cb8c402a0d1a836162f596142de6ed2a1f2a0635a355ae334b92eb1
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__afd571466571231348a78cb931c25e5d1b3c70347a376b9d64e551c1d6126654(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    application_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__0ea7b1a84049868bc175511a7cff8896cbe830377b519f6e81ca6912165c12a6(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -14014,6 +14240,14 @@ def _typecheckingstub__bb88c221f102c1b57ba4f19db7656eb36ff011a70e3643e39d048c313
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a211633629f45a21de52e2d3b8c73b520eee7fc38d9ec5fafe4d90b277a310a5(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    deployment_strategy_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__6c07282bd387e2aab09e9241f96ded37ff336d3f231f996e048ef207d3a38bc3(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -14272,6 +14506,22 @@ def _typecheckingstub__b2e5a069dff64a93330fdfc39cee819956ed46cafa89dc1aee558b0c2
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__0f2ddb8bad12cb1e96088c9c43262a44a268a1f9f59e087e06c9e1981203af04(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__40444fb29d9428650401cd4b9cf7689bd4735cae65b5137a1802e1a8a7fd4825(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    extension_association_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__209622600665bfa16663cc19d0b91c8caf5c5d29f4cc7cb09fd6fba67bcb1739(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -14623,6 +14873,7 @@ def _typecheckingstub__7cba9d5464f3f4cbc208d892995245e5078fc2cc794651c71942035a9
     validators: typing.Optional[typing.Sequence[IValidator]] = None,
     application: IApplication,
     content: ConfigurationContent,
+    kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
     latest_version_number: typing.Optional[jsii.Number] = None,
     version_label: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -14674,7 +14925,7 @@ def _typecheckingstub__652068ebd01467de1bc3159a4c8fef165c1053fe6662fcbb6e0b8cb9f
     id: builtins.str,
     *,
     location: ConfigurationSource,
-    retrieval_role: typing.Optional[_IRole_235f5d8e] = None,
+    retrieval_role: typing.Optional[_IRoleRef_8400221f] = None,
     version_number: typing.Optional[builtins.str] = None,
     deletion_protection_check: typing.Optional[DeletionProtectionCheck] = None,
     deployment_key: typing.Optional[_IKey_5f11635f] = None,
@@ -15051,7 +15302,7 @@ def _typecheckingstub__a245d9ad2d5a72963867d7f392bf31c9977c87f33b0ba8389f1024ee4
 
 def _typecheckingstub__ccc59f1c5523364b8528526a5b6087774df2b905407caca37b7c685a5bfb76cb(
     alarm: _IAlarm_ff3eabc0,
-    alarm_role: typing.Optional[_IRole_235f5d8e] = None,
+    alarm_role: typing.Optional[_IRoleRef_8400221f] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -15092,7 +15343,7 @@ def _typecheckingstub__61200a738f2584e5d86190492c99ded9cebb5cc41d230eec1c74f7130
     id: builtins.str,
     *,
     location: ConfigurationSource,
-    retrieval_role: typing.Optional[_IRole_235f5d8e] = None,
+    retrieval_role: typing.Optional[_IRoleRef_8400221f] = None,
     version_number: typing.Optional[builtins.str] = None,
     application: IApplication,
     deletion_protection_check: typing.Optional[DeletionProtectionCheck] = None,
@@ -15242,7 +15493,7 @@ def _typecheckingstub__115deabe7a02ce295c431e7d9a99bcbe112bc017436380d80181c5db4
     type: typing.Optional[ConfigurationType] = None,
     validators: typing.Optional[typing.Sequence[IValidator]] = None,
     location: ConfigurationSource,
-    retrieval_role: typing.Optional[_IRole_235f5d8e] = None,
+    retrieval_role: typing.Optional[_IRoleRef_8400221f] = None,
     version_number: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -15260,7 +15511,7 @@ def _typecheckingstub__d41101d1b0f699a52d44a2b86fe3e9dcd0e6f1487f088908464eb49cb
     validators: typing.Optional[typing.Sequence[IValidator]] = None,
     application: IApplication,
     location: ConfigurationSource,
-    retrieval_role: typing.Optional[_IRole_235f5d8e] = None,
+    retrieval_role: typing.Optional[_IRoleRef_8400221f] = None,
     version_number: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -15356,7 +15607,7 @@ def _typecheckingstub__8c0399b30aac3a09a4a5e9f3f33f358c90afa60099a7dd6cfc1f1b40f
     id: builtins.str,
     *,
     location: ConfigurationSource,
-    retrieval_role: typing.Optional[_IRole_235f5d8e] = None,
+    retrieval_role: typing.Optional[_IRoleRef_8400221f] = None,
     version_number: typing.Optional[builtins.str] = None,
     deletion_protection_check: typing.Optional[DeletionProtectionCheck] = None,
     deployment_key: typing.Optional[_IKey_5f11635f] = None,
@@ -15840,6 +16091,7 @@ def _typecheckingstub__8e7eecc550d3d689f07534db869c7be67f00e08dcbf880bbb2656d019
     id: builtins.str,
     *,
     content: ConfigurationContent,
+    kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
     latest_version_number: typing.Optional[jsii.Number] = None,
     version_label: typing.Optional[builtins.str] = None,
     application: IApplication,
@@ -15978,3 +16230,6 @@ def _typecheckingstub__0a1e6913f9293558fa6d2222b6d11c3af6b25866b966dd63195511173
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IApplication, IConfiguration, IDeploymentStrategy, IEnvironment, IEventDestination, IExtensible, IExtension, IValidator]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])