aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_iot/__init__.py

@@ -73,9 +73,71 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_iot import (
+    AccountAuditConfigurationReference as _AccountAuditConfigurationReference_f8e98698,
+    AuthorizerReference as _AuthorizerReference_b295c2a2,
+    BillingGroupReference as _BillingGroupReference_66cca5b6,
+    CACertificateReference as _CACertificateReference_83573cce,
+    CertificateProviderReference as _CertificateProviderReference_981164d1,
+    CertificateReference as _CertificateReference_533e2762,
+    CommandReference as _CommandReference_e9477faf,
+    CustomMetricReference as _CustomMetricReference_d8d67689,
+    DimensionReference as _DimensionReference_63d400e8,
+    DomainConfigurationReference as _DomainConfigurationReference_854e303a,
+    EncryptionConfigurationReference as _EncryptionConfigurationReference_6480130f,
+    FleetMetricReference as _FleetMetricReference_c11c8509,
+    IAccountAuditConfigurationRef as _IAccountAuditConfigurationRef_c864d020,
+    IAuthorizerRef as _IAuthorizerRef_65593d38,
+    IBillingGroupRef as _IBillingGroupRef_9603d1f5,
+    ICACertificateRef as _ICACertificateRef_68956798,
+    ICertificateProviderRef as _ICertificateProviderRef_14051fa1,
+    ICertificateRef as _ICertificateRef_c215b21a,
+    ICommandRef as _ICommandRef_ea63e38e,
+    ICustomMetricRef as _ICustomMetricRef_007a6e16,
+    IDimensionRef as _IDimensionRef_b32b102e,
+    IDomainConfigurationRef as _IDomainConfigurationRef_fb2399ab,
+    IEncryptionConfigurationRef as _IEncryptionConfigurationRef_3733582d,
+    IFleetMetricRef as _IFleetMetricRef_85a593f7,
+    IJobTemplateRef as _IJobTemplateRef_f04ac76b,
+    ILoggingRef as _ILoggingRef_dd2ca6d7,
+    IMitigationActionRef as _IMitigationActionRef_e47dbe04,
+    IPolicyPrincipalAttachmentRef as _IPolicyPrincipalAttachmentRef_512e78f9,
+    IPolicyRef as _IPolicyRef_d07d9913,
+    IProvisioningTemplateRef as _IProvisioningTemplateRef_3b3b40e9,
+    IResourceSpecificLoggingRef as _IResourceSpecificLoggingRef_74a883ea,
+    IRoleAliasRef as _IRoleAliasRef_26714b8b,
+    IScheduledAuditRef as _IScheduledAuditRef_a5878e17,
+    ISecurityProfileRef as _ISecurityProfileRef_5d371790,
+    ISoftwarePackageRef as _ISoftwarePackageRef_8860c56e,
+    ISoftwarePackageVersionRef as _ISoftwarePackageVersionRef_729b2add,
+    IThingGroupRef as _IThingGroupRef_d398d262,
+    IThingPrincipalAttachmentRef as _IThingPrincipalAttachmentRef_1a94ae3e,
+    IThingRef as _IThingRef_8c8528e2,
+    IThingTypeRef as _IThingTypeRef_464ea9b2,
+    ITopicRuleDestinationRef as _ITopicRuleDestinationRef_a6a50916,
+    ITopicRuleRef as _ITopicRuleRef_748e9f37,
+    JobTemplateReference as _JobTemplateReference_235350b5,
+    LoggingReference as _LoggingReference_668b4b4d,
+    MitigationActionReference as _MitigationActionReference_1c906c4b,
+    PolicyPrincipalAttachmentReference as _PolicyPrincipalAttachmentReference_e9204988,
+    PolicyReference as _PolicyReference_824a382c,
+    ProvisioningTemplateReference as _ProvisioningTemplateReference_dbcf5a40,
+    ResourceSpecificLoggingReference as _ResourceSpecificLoggingReference_0f3d93df,
+    RoleAliasReference as _RoleAliasReference_b4e8a4b0,
+    ScheduledAuditReference as _ScheduledAuditReference_68453d17,
+    SecurityProfileReference as _SecurityProfileReference_8c2c6ff2,
+    SoftwarePackageReference as _SoftwarePackageReference_2fe38c44,
+    SoftwarePackageVersionReference as _SoftwarePackageVersionReference_fa8c0d20,
+    ThingGroupReference as _ThingGroupReference_32809203,
+    ThingPrincipalAttachmentReference as _ThingPrincipalAttachmentReference_fd3d444d,
+    ThingReference as _ThingReference_c3929a14,
+    ThingTypeReference as _ThingTypeReference_ab8a3ee4,
+    TopicRuleDestinationReference as _TopicRuleDestinationReference_f55f3506,
+    TopicRuleReference as _TopicRuleReference_dd2457a8,
+)
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IAccountAuditConfigurationRef_c864d020)
 class CfnAccountAuditConfiguration(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -176,7 +238,8 @@ class CfnAccountAuditConfiguration(
         role_arn: builtins.str,
         audit_notification_target_configurations: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAccountAuditConfiguration.AuditNotificationTargetConfigurationsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::AccountAuditConfiguration``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param account_id: The ID of the account. You can use the expression ``!Sub "${AWS::AccountId}"`` to use your account ID.
@@ -227,6 +290,14 @@ class CfnAccountAuditConfiguration(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="accountAuditConfigurationRef")
+    def account_audit_configuration_ref(
+        self,
+    ) -> _AccountAuditConfigurationReference_f8e98698:
+        '''A reference to a AccountAuditConfiguration resource.'''
+        return typing.cast(_AccountAuditConfigurationReference_f8e98698, jsii.get(self, "accountAuditConfigurationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -1219,7 +1290,7 @@ class CfnAccountAuditConfigurationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IAuthorizerRef_65593d38, _ITaggable_36806126)
 class CfnAuthorizer(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1270,7 +1341,8 @@ class CfnAuthorizer(
         token_key_name: typing.Optional[builtins.str] = None,
         token_signing_public_keys: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::Authorizer``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param authorizer_function_arn: The authorizer's Lambda function ARN.
@@ -1299,6 +1371,48 @@ class CfnAuthorizer(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromAuthorizerArn")
+    @builtins.classmethod
+    def from_authorizer_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IAuthorizerRef_65593d38:
+        '''Creates a new IAuthorizerRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__310c1c4c2dfff03e92b3a6a3e1de13fb9fbfa4745644dab039f56bcdb5c84be3)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IAuthorizerRef_65593d38, jsii.sinvoke(cls, "fromAuthorizerArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromAuthorizerName")
+    @builtins.classmethod
+    def from_authorizer_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        authorizer_name: builtins.str,
+    ) -> _IAuthorizerRef_65593d38:
+        '''Creates a new IAuthorizerRef from a authorizerName.
+
+        :param scope: -
+        :param id: -
+        :param authorizer_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4f19089485a26bdaae502a939567bac9583ba84ecc402865419db66df9aca955)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument authorizer_name", value=authorizer_name, expected_type=type_hints["authorizer_name"])
+        return typing.cast(_IAuthorizerRef_65593d38, jsii.sinvoke(cls, "fromAuthorizerName", [scope, id, authorizer_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -1338,6 +1452,12 @@ class CfnAuthorizer(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrArn"))
 
+    @builtins.property
+    @jsii.member(jsii_name="authorizerRef")
+    def authorizer_ref(self) -> _AuthorizerReference_b295c2a2:
+        '''A reference to a Authorizer resource.'''
+        return typing.cast(_AuthorizerReference_b295c2a2, jsii.get(self, "authorizerRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -1665,7 +1785,7 @@ class CfnAuthorizerProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IBillingGroupRef_9603d1f5, _ITaggable_36806126)
 class CfnBillingGroup(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1706,7 +1826,8 @@ class CfnBillingGroup(
         billing_group_properties: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnBillingGroup.BillingGroupPropertiesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::BillingGroup``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param billing_group_name: The name of the billing group.
@@ -1725,6 +1846,48 @@ class CfnBillingGroup(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromBillingGroupArn")
+    @builtins.classmethod
+    def from_billing_group_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IBillingGroupRef_9603d1f5:
+        '''Creates a new IBillingGroupRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4a18c3b4d0697a1a24c0fdba8322820151d3aef1daff80005d0610955c8df485)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IBillingGroupRef_9603d1f5, jsii.sinvoke(cls, "fromBillingGroupArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromBillingGroupName")
+    @builtins.classmethod
+    def from_billing_group_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        billing_group_name: builtins.str,
+    ) -> _IBillingGroupRef_9603d1f5:
+        '''Creates a new IBillingGroupRef from a billingGroupName.
+
+        :param scope: -
+        :param id: -
+        :param billing_group_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7a0f03a5d43c18591bbffa9ae9656ce12f0909732a6774987c89c161f4591a02)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument billing_group_name", value=billing_group_name, expected_type=type_hints["billing_group_name"])
+        return typing.cast(_IBillingGroupRef_9603d1f5, jsii.sinvoke(cls, "fromBillingGroupName", [scope, id, billing_group_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -1773,6 +1936,12 @@ class CfnBillingGroup(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="billingGroupRef")
+    def billing_group_ref(self) -> _BillingGroupReference_66cca5b6:
+        '''A reference to a BillingGroup resource.'''
+        return typing.cast(_BillingGroupReference_66cca5b6, jsii.get(self, "billingGroupRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -1981,7 +2150,7 @@ class CfnBillingGroupProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _ICACertificateRef_68956798, _ITaggable_36806126)
 class CfnCACertificate(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2034,7 +2203,8 @@ class CfnCACertificate(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         verification_certificate_pem: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::CACertificate``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param ca_certificate_pem: The certificate data in PEM format.
@@ -2117,6 +2287,12 @@ class CfnCACertificate(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="caCertificateRef")
+    def ca_certificate_ref(self) -> _CACertificateReference_83573cce:
+        '''A reference to a CACertificate resource.'''
+        return typing.cast(_CACertificateReference_83573cce, jsii.get(self, "caCertificateRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -2529,7 +2705,7 @@ class CfnCACertificateProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ICertificateRef_c215b21a)
 class CfnCertificate(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2569,7 +2745,8 @@ class CfnCertificate(
         certificate_pem: typing.Optional[builtins.str] = None,
         certificate_signing_request: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::Certificate``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param status: The status of the certificate. Valid values are ACTIVE, INACTIVE, REVOKED, PENDING_TRANSFER, and PENDING_ACTIVATION. The status value REGISTER_INACTIVE is deprecated and should not be used.
@@ -2592,6 +2769,48 @@ class CfnCertificate(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromCertificateArn")
+    @builtins.classmethod
+    def from_certificate_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _ICertificateRef_c215b21a:
+        '''Creates a new ICertificateRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__cfecee0031cd00f0c731c9897fab1d78a2ea52ff0b8755d7b8beba1d6b6d98e4)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_ICertificateRef_c215b21a, jsii.sinvoke(cls, "fromCertificateArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromCertificateId")
+    @builtins.classmethod
+    def from_certificate_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        certificate_id: builtins.str,
+    ) -> _ICertificateRef_c215b21a:
+        '''Creates a new ICertificateRef from a certificateId.
+
+        :param scope: -
+        :param id: -
+        :param certificate_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0cac852b52dc618227ba2aacd333c26f6b86646275afa7512cafab57889e07f9)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument certificate_id", value=certificate_id, expected_type=type_hints["certificate_id"])
+        return typing.cast(_ICertificateRef_c215b21a, jsii.sinvoke(cls, "fromCertificateId", [scope, id, certificate_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -2646,6 +2865,12 @@ class CfnCertificate(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="certificateRef")
+    def certificate_ref(self) -> _CertificateReference_533e2762:
+        '''A reference to a Certificate resource.'''
+        return typing.cast(_CertificateReference_533e2762, jsii.get(self, "certificateRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -2854,7 +3079,7 @@ class CfnCertificateProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _ICertificateProviderRef_14051fa1, _ITaggableV2_4e6798f8)
 class CfnCertificateProvider(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2897,7 +3122,8 @@ class CfnCertificateProvider(
         certificate_provider_name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::CertificateProvider``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param account_default_for_operations: A list of the operations that the certificate provider will use to generate certificates. Valid value: ``CreateCertificateFromCsr`` .
@@ -2918,6 +3144,48 @@ class CfnCertificateProvider(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromCertificateProviderArn")
+    @builtins.classmethod
+    def from_certificate_provider_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _ICertificateProviderRef_14051fa1:
+        '''Creates a new ICertificateProviderRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__071317decea219980ab41a3b4a58ce71a6e759554c7547835c48fcc07c94ffe5)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_ICertificateProviderRef_14051fa1, jsii.sinvoke(cls, "fromCertificateProviderArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromCertificateProviderName")
+    @builtins.classmethod
+    def from_certificate_provider_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        certificate_provider_name: builtins.str,
+    ) -> _ICertificateProviderRef_14051fa1:
+        '''Creates a new ICertificateProviderRef from a certificateProviderName.
+
+        :param scope: -
+        :param id: -
+        :param certificate_provider_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__18dde147f0565e214975cf9507950ba2bb212ec44d032db9966e44e55448df59)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument certificate_provider_name", value=certificate_provider_name, expected_type=type_hints["certificate_provider_name"])
+        return typing.cast(_ICertificateProviderRef_14051fa1, jsii.sinvoke(cls, "fromCertificateProviderName", [scope, id, certificate_provider_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -2969,6 +3237,12 @@ class CfnCertificateProvider(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
 
+    @builtins.property
+    @jsii.member(jsii_name="certificateProviderRef")
+    def certificate_provider_ref(self) -> _CertificateProviderReference_981164d1:
+        '''A reference to a CertificateProvider resource.'''
+        return typing.cast(_CertificateProviderReference_981164d1, jsii.get(self, "certificateProviderRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -3141,7 +3415,7 @@ class CfnCertificateProviderProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _ICommandRef_ea63e38e, _ITaggableV2_4e6798f8)
 class CfnCommand(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3224,7 +3498,8 @@ class CfnCommand(
         role_arn: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::Command``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param command_id: The unique identifier of the command.
@@ -3261,6 +3536,48 @@ class CfnCommand(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromCommandArn")
+    @builtins.classmethod
+    def from_command_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _ICommandRef_ea63e38e:
+        '''Creates a new ICommandRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__662c96af9f5c831d1987907418517956dd326eacc07062b92002cf137eb68595)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_ICommandRef_ea63e38e, jsii.sinvoke(cls, "fromCommandArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromCommandId")
+    @builtins.classmethod
+    def from_command_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        command_id: builtins.str,
+    ) -> _ICommandRef_ea63e38e:
+        '''Creates a new ICommandRef from a commandId.
+
+        :param scope: -
+        :param id: -
+        :param command_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__22de9dd2fe01080b28a2448b9e4a2600a3a0d700f87bad5caea74b72b7166f79)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument command_id", value=command_id, expected_type=type_hints["command_id"])
+        return typing.cast(_ICommandRef_ea63e38e, jsii.sinvoke(cls, "fromCommandId", [scope, id, command_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -3311,6 +3628,12 @@ class CfnCommand(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="commandRef")
+    def command_ref(self) -> _CommandReference_e9477faf:
+        '''A reference to a Command resource.'''
+        return typing.cast(_CommandReference_e9477faf, jsii.get(self, "commandRef"))
+
     @builtins.property
     @jsii.member(jsii_name="commandId")
     def command_id(self) -> builtins.str:
@@ -4095,7 +4418,7 @@ class CfnCommandProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _ICustomMetricRef_007a6e16, _ITaggable_36806126)
 class CfnCustomMetric(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4138,7 +4461,8 @@ class CfnCustomMetric(
         metric_name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::CustomMetric``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param metric_type: The type of the custom metric. Types include ``string-list`` , ``ip-address-list`` , ``number-list`` , and ``number`` . .. epigraph:: The type ``number`` only takes a single metric value as an input, but when you submit the metrics value in the DeviceMetrics report, you must pass it as an array with a single value.
@@ -4159,6 +4483,27 @@ class CfnCustomMetric(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromMetricName")
+    @builtins.classmethod
+    def from_metric_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        metric_name: builtins.str,
+    ) -> _ICustomMetricRef_007a6e16:
+        '''Creates a new ICustomMetricRef from a metricName.
+
+        :param scope: -
+        :param id: -
+        :param metric_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e694f3cb4ab80390387848a262c47752dd0bdbe195e0e49defffc1e9b36d4ed3)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument metric_name", value=metric_name, expected_type=type_hints["metric_name"])
+        return typing.cast(_ICustomMetricRef_007a6e16, jsii.sinvoke(cls, "fromMetricName", [scope, id, metric_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -4205,6 +4550,12 @@ class CfnCustomMetric(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="customMetricRef")
+    def custom_metric_ref(self) -> _CustomMetricReference_d8d67689:
+        '''A reference to a CustomMetric resource.'''
+        return typing.cast(_CustomMetricReference_d8d67689, jsii.get(self, "customMetricRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -4387,7 +4738,7 @@ class CfnCustomMetricProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IDimensionRef_b32b102e, _ITaggable_36806126)
 class CfnDimension(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4430,7 +4781,8 @@ class CfnDimension(
         name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::Dimension``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param string_values: Specifies the value or list of values for the dimension. For ``TOPIC_FILTER`` dimensions, this is a pattern used to match the MQTT topic (for example, "admin/#").
@@ -4448,6 +4800,48 @@ class CfnDimension(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromDimensionArn")
+    @builtins.classmethod
+    def from_dimension_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IDimensionRef_b32b102e:
+        '''Creates a new IDimensionRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a27be5f6de8bec8eb6287e16f0a821027e71511a4f1ca4088d662b82afafeac4)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IDimensionRef_b32b102e, jsii.sinvoke(cls, "fromDimensionArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromDimensionName")
+    @builtins.classmethod
+    def from_dimension_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        dimension_name: builtins.str,
+    ) -> _IDimensionRef_b32b102e:
+        '''Creates a new IDimensionRef from a dimensionName.
+
+        :param scope: -
+        :param id: -
+        :param dimension_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__01d55d2af5b261cda0b752c0632d64440b8d78fc046219d8c261cfc2035260d2)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument dimension_name", value=dimension_name, expected_type=type_hints["dimension_name"])
+        return typing.cast(_IDimensionRef_b32b102e, jsii.sinvoke(cls, "fromDimensionName", [scope, id, dimension_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -4492,6 +4886,12 @@ class CfnDimension(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="dimensionRef")
+    def dimension_ref(self) -> _DimensionReference_63d400e8:
+        '''A reference to a Dimension resource.'''
+        return typing.cast(_DimensionReference_63d400e8, jsii.get(self, "dimensionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -4667,7 +5067,7 @@ class CfnDimensionProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IDomainConfigurationRef_fb2399ab, _ITaggable_36806126)
 class CfnDomainConfiguration(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4735,7 +5135,8 @@ class CfnDomainConfiguration(
         tls_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDomainConfiguration.TlsConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         validation_certificate_arn: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::DomainConfiguration``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param application_protocol: An enumerated string that specifies the application-layer protocol.
@@ -4774,6 +5175,48 @@ class CfnDomainConfiguration(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromDomainConfigurationArn")
+    @builtins.classmethod
+    def from_domain_configuration_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IDomainConfigurationRef_fb2399ab:
+        '''Creates a new IDomainConfigurationRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8be2d6e1ff6693540055a9fa7d393b113d89ebf43e1634e7d647805cdd5b250e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IDomainConfigurationRef_fb2399ab, jsii.sinvoke(cls, "fromDomainConfigurationArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromDomainConfigurationName")
+    @builtins.classmethod
+    def from_domain_configuration_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        domain_configuration_name: builtins.str,
+    ) -> _IDomainConfigurationRef_fb2399ab:
+        '''Creates a new IDomainConfigurationRef from a domainConfigurationName.
+
+        :param scope: -
+        :param id: -
+        :param domain_configuration_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4b9a196292f0744bd9f4375ad0444e438c9fcd9546da1348cab2bf1a5cee12df)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument domain_configuration_name", value=domain_configuration_name, expected_type=type_hints["domain_configuration_name"])
+        return typing.cast(_IDomainConfigurationRef_fb2399ab, jsii.sinvoke(cls, "fromDomainConfigurationName", [scope, id, domain_configuration_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -4838,6 +5281,12 @@ class CfnDomainConfiguration(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="domainConfigurationRef")
+    def domain_configuration_ref(self) -> _DomainConfigurationReference_854e303a:
+        '''A reference to a DomainConfiguration resource.'''
+        return typing.cast(_DomainConfigurationReference_854e303a, jsii.get(self, "domainConfigurationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -5656,42 +6105,395 @@ class CfnDomainConfigurationProps:
         return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''Metadata which can be used to manage the domain configuration.
-
-        .. epigraph::
-
-           For URI Request parameters use format: ...key1=value1&key2=value2...
-
-           For the CLI command-line parameter use format: &&tags "key1=value1&key2=value2..."
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''Metadata which can be used to manage the domain configuration.
+
+        .. epigraph::
+
+           For URI Request parameters use format: ...key1=value1&key2=value2...
+
+           For the CLI command-line parameter use format: &&tags "key1=value1&key2=value2..."
+
+           For the cli-input-json file use format: "tags": "key1=value1&key2=value2..."
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-domainconfiguration.html#cfn-iot-domainconfiguration-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    @builtins.property
+    def tls_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainConfiguration.TlsConfigProperty]]:
+        '''An object that specifies the TLS configuration for a domain.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-domainconfiguration.html#cfn-iot-domainconfiguration-tlsconfig
+        '''
+        result = self._values.get("tls_config")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainConfiguration.TlsConfigProperty]], result)
+
+    @builtins.property
+    def validation_certificate_arn(self) -> typing.Optional[builtins.str]:
+        '''The certificate used to validate the server certificate and prove domain name ownership.
+
+        This certificate must be signed by a public certificate authority. This value is not required for AWS -managed domains.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-domainconfiguration.html#cfn-iot-domainconfiguration-validationcertificatearn
+        '''
+        result = self._values.get("validation_certificate_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnDomainConfigurationProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_IInspectable_c2943556, _IEncryptionConfigurationRef_3733582d)
+class CfnEncryptionConfiguration(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_iot.CfnEncryptionConfiguration",
+):
+    '''Retrieves the encryption configuration for resources and data of your AWS account in AWS IoT Core .
+
+    For more information, see `Data encryption at rest <https://docs.aws.amazon.com/iot/latest/developerguide/encryption-at-rest.html>`_ in the *AWS IoT Core Developer Guide* .
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html
+    :cloudformationResource: AWS::IoT::EncryptionConfiguration
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_iot as iot
+        
+        cfn_encryption_configuration = iot.CfnEncryptionConfiguration(self, "MyCfnEncryptionConfiguration",
+            encryption_type="encryptionType",
+        
+            # the properties below are optional
+            kms_access_role_arn="kmsAccessRoleArn",
+            kms_key_arn="kmsKeyArn"
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        encryption_type: builtins.str,
+        kms_access_role_arn: typing.Optional[builtins.str] = None,
+        kms_key_arn: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''Create a new ``AWS::IoT::EncryptionConfiguration``.
+
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param encryption_type: The type of the KMS key.
+        :param kms_access_role_arn: The Amazon Resource Name (ARN) of the IAM role assumed by AWS IoT Core to call AWS KMS on behalf of the customer.
+        :param kms_key_arn: The ARN of the customer managed KMS key.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__590a310b1ce9a41bd611fc7e92d5bb9381ff548973b6322c201006617fc000f1)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnEncryptionConfigurationProps(
+            encryption_type=encryption_type,
+            kms_access_role_arn=kms_access_role_arn,
+            kms_key_arn=kms_key_arn,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__233141f5c147d73830fe3e9d9d504b3652e1d15f02ed8b705668c8e28e9b750c)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5cd2e788d7ff1c10202a0e433dda70ca35befefeabdbfc3016d8016e6cf1ed37)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrAccountId")
+    def attr_account_id(self) -> builtins.str:
+        '''The unique identifier (ID) of an AWS account.
+
+        :cloudformationAttribute: AccountId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrAccountId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrConfigurationDetails")
+    def attr_configuration_details(self) -> _IResolvable_da3f097b:
+        '''
+        :cloudformationAttribute: ConfigurationDetails
+        '''
+        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrConfigurationDetails"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrLastModifiedDate")
+    def attr_last_modified_date(self) -> builtins.str:
+        '''The date when encryption configuration is last updated.
+
+        :cloudformationAttribute: LastModifiedDate
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrLastModifiedDate"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="encryptionConfigurationRef")
+    def encryption_configuration_ref(
+        self,
+    ) -> _EncryptionConfigurationReference_6480130f:
+        '''A reference to a EncryptionConfiguration resource.'''
+        return typing.cast(_EncryptionConfigurationReference_6480130f, jsii.get(self, "encryptionConfigurationRef"))
+
+    @builtins.property
+    @jsii.member(jsii_name="encryptionType")
+    def encryption_type(self) -> builtins.str:
+        '''The type of the KMS key.'''
+        return typing.cast(builtins.str, jsii.get(self, "encryptionType"))
+
+    @encryption_type.setter
+    def encryption_type(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7fba231b8f68aa059f7c06875e959b3f3bd5636f6165991d32e54a5cc6d0bcd5)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "encryptionType", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="kmsAccessRoleArn")
+    def kms_access_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the IAM role assumed by AWS IoT Core to call AWS KMS on behalf of the customer.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsAccessRoleArn"))
+
+    @kms_access_role_arn.setter
+    def kms_access_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c7090d98481b34dbf2479198088f6a73b9c942d4517672b8d308682e61d5dbba)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "kmsAccessRoleArn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="kmsKeyArn")
+    def kms_key_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the customer managed KMS key.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsKeyArn"))
+
+    @kms_key_arn.setter
+    def kms_key_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__19b09278cd32890a2953a31edf28ad2ac6b609136b5854732d407ccb4b6766d9)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "kmsKeyArn", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_iot.CfnEncryptionConfiguration.ConfigurationDetailsProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "configuration_status": "configurationStatus",
+            "error_code": "errorCode",
+            "error_message": "errorMessage",
+        },
+    )
+    class ConfigurationDetailsProperty:
+        def __init__(
+            self,
+            *,
+            configuration_status: typing.Optional[builtins.str] = None,
+            error_code: typing.Optional[builtins.str] = None,
+            error_message: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''The encryption configuration details that include the status information of the AWS Key Management Service ( AWS KMS ) key and the AWS KMS access role.
+
+            :param configuration_status: The health status of KMS key and AWS KMS access role. If either KMS key or AWS KMS access role is ``UNHEALTHY`` , the return value will be ``UNHEALTHY`` . To use a customer managed KMS key, the value of ``configurationStatus`` must be ``HEALTHY`` .
+            :param error_code: The error code that indicates either the KMS key or the AWS KMS access role is ``UNHEALTHY`` . Valid values: ``KMS_KEY_VALIDATION_ERROR`` and ``ROLE_VALIDATION_ERROR`` .
+            :param error_message: The detailed error message that corresponds to the ``errorCode`` .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-encryptionconfiguration-configurationdetails.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_iot as iot
+                
+                configuration_details_property = iot.CfnEncryptionConfiguration.ConfigurationDetailsProperty(
+                    configuration_status="configurationStatus",
+                    error_code="errorCode",
+                    error_message="errorMessage"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__177ce092c0e88e844eafa9e6b2f72e02413a4aecda7bf05efcdfd6fbf7857eff)
+                check_type(argname="argument configuration_status", value=configuration_status, expected_type=type_hints["configuration_status"])
+                check_type(argname="argument error_code", value=error_code, expected_type=type_hints["error_code"])
+                check_type(argname="argument error_message", value=error_message, expected_type=type_hints["error_message"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if configuration_status is not None:
+                self._values["configuration_status"] = configuration_status
+            if error_code is not None:
+                self._values["error_code"] = error_code
+            if error_message is not None:
+                self._values["error_message"] = error_message
+
+        @builtins.property
+        def configuration_status(self) -> typing.Optional[builtins.str]:
+            '''The health status of KMS key and AWS KMS access role.
+
+            If either KMS key or AWS KMS access role is ``UNHEALTHY`` , the return value will be ``UNHEALTHY`` . To use a customer managed KMS key, the value of ``configurationStatus`` must be ``HEALTHY`` .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-encryptionconfiguration-configurationdetails.html#cfn-iot-encryptionconfiguration-configurationdetails-configurationstatus
+            '''
+            result = self._values.get("configuration_status")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def error_code(self) -> typing.Optional[builtins.str]:
+            '''The error code that indicates either the KMS key or the AWS KMS access role is ``UNHEALTHY`` .
+
+            Valid values: ``KMS_KEY_VALIDATION_ERROR`` and ``ROLE_VALIDATION_ERROR`` .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-encryptionconfiguration-configurationdetails.html#cfn-iot-encryptionconfiguration-configurationdetails-errorcode
+            '''
+            result = self._values.get("error_code")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def error_message(self) -> typing.Optional[builtins.str]:
+            '''The detailed error message that corresponds to the ``errorCode`` .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-encryptionconfiguration-configurationdetails.html#cfn-iot-encryptionconfiguration-configurationdetails-errormessage
+            '''
+            result = self._values.get("error_message")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "ConfigurationDetailsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_iot.CfnEncryptionConfigurationProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "encryption_type": "encryptionType",
+        "kms_access_role_arn": "kmsAccessRoleArn",
+        "kms_key_arn": "kmsKeyArn",
+    },
+)
+class CfnEncryptionConfigurationProps:
+    def __init__(
+        self,
+        *,
+        encryption_type: builtins.str,
+        kms_access_role_arn: typing.Optional[builtins.str] = None,
+        kms_key_arn: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnEncryptionConfiguration``.
+
+        :param encryption_type: The type of the KMS key.
+        :param kms_access_role_arn: The Amazon Resource Name (ARN) of the IAM role assumed by AWS IoT Core to call AWS KMS on behalf of the customer.
+        :param kms_key_arn: The ARN of the customer managed KMS key.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_iot as iot
+            
+            cfn_encryption_configuration_props = iot.CfnEncryptionConfigurationProps(
+                encryption_type="encryptionType",
+            
+                # the properties below are optional
+                kms_access_role_arn="kmsAccessRoleArn",
+                kms_key_arn="kmsKeyArn"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__336ea497535e43391cf9df6341fe126d948316050e95d2d41cb831737802b9ab)
+            check_type(argname="argument encryption_type", value=encryption_type, expected_type=type_hints["encryption_type"])
+            check_type(argname="argument kms_access_role_arn", value=kms_access_role_arn, expected_type=type_hints["kms_access_role_arn"])
+            check_type(argname="argument kms_key_arn", value=kms_key_arn, expected_type=type_hints["kms_key_arn"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "encryption_type": encryption_type,
+        }
+        if kms_access_role_arn is not None:
+            self._values["kms_access_role_arn"] = kms_access_role_arn
+        if kms_key_arn is not None:
+            self._values["kms_key_arn"] = kms_key_arn
+
+    @builtins.property
+    def encryption_type(self) -> builtins.str:
+        '''The type of the KMS key.
 
-           For the cli-input-json file use format: "tags": "key1=value1&key2=value2..."
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-domainconfiguration.html#cfn-iot-domainconfiguration-tags
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#cfn-iot-encryptionconfiguration-encryptiontype
         '''
-        result = self._values.get("tags")
-        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+        result = self._values.get("encryption_type")
+        assert result is not None, "Required property 'encryption_type' is missing"
+        return typing.cast(builtins.str, result)
 
     @builtins.property
-    def tls_config(
-        self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainConfiguration.TlsConfigProperty]]:
-        '''An object that specifies the TLS configuration for a domain.
+    def kms_access_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the IAM role assumed by AWS IoT Core to call AWS KMS on behalf of the customer.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-domainconfiguration.html#cfn-iot-domainconfiguration-tlsconfig
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#cfn-iot-encryptionconfiguration-kmsaccessrolearn
         '''
-        result = self._values.get("tls_config")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainConfiguration.TlsConfigProperty]], result)
+        result = self._values.get("kms_access_role_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def validation_certificate_arn(self) -> typing.Optional[builtins.str]:
-        '''The certificate used to validate the server certificate and prove domain name ownership.
+    def kms_key_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the customer managed KMS key.
 
-        This certificate must be signed by a public certificate authority. This value is not required for AWS -managed domains.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-domainconfiguration.html#cfn-iot-domainconfiguration-validationcertificatearn
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#cfn-iot-encryptionconfiguration-kmskeyarn
         '''
-        result = self._values.get("validation_certificate_arn")
+        result = self._values.get("kms_key_arn")
         return typing.cast(typing.Optional[builtins.str], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
@@ -5701,12 +6503,12 @@ class CfnDomainConfigurationProps:
         return not (rhs == self)
 
     def __repr__(self) -> str:
-        return "CfnDomainConfigurationProps(%s)" % ", ".join(
+        return "CfnEncryptionConfigurationProps(%s)" % ", ".join(
             k + "=" + repr(v) for k, v in self._values.items()
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IFleetMetricRef_85a593f7, _ITaggable_36806126)
 class CfnFleetMetric(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5762,7 +6564,8 @@ class CfnFleetMetric(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         unit: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::FleetMetric``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param metric_name: The name of the fleet metric to create.
@@ -5866,6 +6669,12 @@ class CfnFleetMetric(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="fleetMetricRef")
+    def fleet_metric_ref(self) -> _FleetMetricReference_c11c8509:
+        '''A reference to a FleetMetric resource.'''
+        return typing.cast(_FleetMetricReference_c11c8509, jsii.get(self, "fleetMetricRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -6296,7 +7105,7 @@ class CfnFleetMetricProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IJobTemplateRef_f04ac76b, _ITaggable_36806126)
 class CfnJobTemplate(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -6368,7 +7177,8 @@ class CfnJobTemplate(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         timeout_config: typing.Any = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::JobTemplate``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param description: A description of the job template.
@@ -6407,6 +7217,48 @@ class CfnJobTemplate(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromJobTemplateArn")
+    @builtins.classmethod
+    def from_job_template_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IJobTemplateRef_f04ac76b:
+        '''Creates a new IJobTemplateRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f36e0acf648bcbed21194f2fcc86b7da45b2ca6201f04d69359e1bd54dae7b68)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IJobTemplateRef_f04ac76b, jsii.sinvoke(cls, "fromJobTemplateArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromJobTemplateId")
+    @builtins.classmethod
+    def from_job_template_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        job_template_id: builtins.str,
+    ) -> _IJobTemplateRef_f04ac76b:
+        '''Creates a new IJobTemplateRef from a jobTemplateId.
+
+        :param scope: -
+        :param id: -
+        :param job_template_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__67cc5fc3c14eec957174274cc3bede58847824cc340b0433ab36aa58df81d908)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument job_template_id", value=job_template_id, expected_type=type_hints["job_template_id"])
+        return typing.cast(_IJobTemplateRef_f04ac76b, jsii.sinvoke(cls, "fromJobTemplateId", [scope, id, job_template_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -6451,6 +7303,12 @@ class CfnJobTemplate(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="jobTemplateRef")
+    def job_template_ref(self) -> _JobTemplateReference_235350b5:
+        '''A reference to a JobTemplate resource.'''
+        return typing.cast(_JobTemplateReference_235350b5, jsii.get(self, "jobTemplateRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -7702,7 +8560,7 @@ class CfnJobTemplateProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ILoggingRef_dd2ca6d7)
 class CfnLogging(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -7712,7 +8570,7 @@ class CfnLogging(
 
     .. epigraph::
 
-       If you already set the log function of AWS IoT Core , you can't deploy the AWS Cloud Development Kit (AWS CDK) to change the logging settings. You can change the logging settings by either:
+       If you already set the log function of AWS IoT Core , you can't deploy the Cloud Development Kit  to change the logging settings. You can change the logging settings by either:
 
        - Importing the existing logging resource into your AWS CloudFormation stack, such as with the `infrastructure as code generator (IaC generator) <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC.html>`_ .
        - Calling ``aws iot set-v2-logging-options --disable-all-logs`` before creating a new CloudFormation stack. This command disables all AWS IoT logging. As a result, no AWS IoT logs will be delivered to Amazon CloudWatch until you re-enable logging.
@@ -7743,7 +8601,8 @@ class CfnLogging(
         default_log_level: builtins.str,
         role_arn: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::Logging``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param account_id: The account ID.
@@ -7797,6 +8656,12 @@ class CfnLogging(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="loggingRef")
+    def logging_ref(self) -> _LoggingReference_668b4b4d:
+        '''A reference to a Logging resource.'''
+        return typing.cast(_LoggingReference_668b4b4d, jsii.get(self, "loggingRef"))
+
     @builtins.property
     @jsii.member(jsii_name="accountId")
     def account_id(self) -> builtins.str:
@@ -7930,7 +8795,7 @@ class CfnLoggingProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IMitigationActionRef_e47dbe04, _ITaggable_36806126)
 class CfnMitigationAction(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -7996,7 +8861,8 @@ class CfnMitigationAction(
         action_name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::MitigationAction``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param action_params: The set of parameters for this mitigation action. The parameters vary, depending on the kind of action you apply.
@@ -8070,6 +8936,12 @@ class CfnMitigationAction(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="mitigationActionRef")
+    def mitigation_action_ref(self) -> _MitigationActionReference_1c906c4b:
+        '''A reference to a MitigationAction resource.'''
+        return typing.cast(_MitigationActionReference_1c906c4b, jsii.get(self, "mitigationActionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -8816,7 +9688,7 @@ class CfnMitigationActionProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IPolicyRef_d07d9913, _ITaggableV2_4e6798f8)
 class CfnPolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -8859,7 +9731,8 @@ class CfnPolicy(
         policy_name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::Policy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param policy_document: The JSON document that describes the policy.
@@ -8935,6 +9808,12 @@ class CfnPolicy(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="policyRef")
+    def policy_ref(self) -> _PolicyReference_824a382c:
+        '''A reference to a Policy resource.'''
+        return typing.cast(_PolicyReference_824a382c, jsii.get(self, "policyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="policyDocument")
     def policy_document(self) -> typing.Any:
@@ -8974,7 +9853,7 @@ class CfnPolicy(
         jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IPolicyPrincipalAttachmentRef_512e78f9)
 class CfnPolicyPrincipalAttachment(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -9008,7 +9887,8 @@ class CfnPolicyPrincipalAttachment(
         policy_name: builtins.str,
         principal: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::PolicyPrincipalAttachment``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param policy_name: The name of the AWS IoT policy.
@@ -9067,6 +9947,14 @@ class CfnPolicyPrincipalAttachment(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="policyPrincipalAttachmentRef")
+    def policy_principal_attachment_ref(
+        self,
+    ) -> _PolicyPrincipalAttachmentReference_e9204988:
+        '''A reference to a PolicyPrincipalAttachment resource.'''
+        return typing.cast(_PolicyPrincipalAttachmentReference_e9204988, jsii.get(self, "policyPrincipalAttachmentRef"))
+
     @builtins.property
     @jsii.member(jsii_name="policyName")
     def policy_name(self) -> builtins.str:
@@ -9258,7 +10146,7 @@ class CfnPolicyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IProvisioningTemplateRef_3b3b40e9, _ITaggable_36806126)
 class CfnProvisioningTemplate(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -9310,7 +10198,8 @@ class CfnProvisioningTemplate(
         template_name: typing.Optional[builtins.str] = None,
         template_type: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::ProvisioningTemplate``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param provisioning_role_arn: The role ARN for the role associated with the fleet provisioning template. This IoT role grants permission to provision a device.
@@ -9339,6 +10228,27 @@ class CfnProvisioningTemplate(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromTemplateName")
+    @builtins.classmethod
+    def from_template_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        template_name: builtins.str,
+    ) -> _IProvisioningTemplateRef_3b3b40e9:
+        '''Creates a new IProvisioningTemplateRef from a templateName.
+
+        :param scope: -
+        :param id: -
+        :param template_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__80fefadc353ed4d1a5c6862088ec6985075f9dba2564b757907dd3afc3440d66)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument template_name", value=template_name, expected_type=type_hints["template_name"])
+        return typing.cast(_IProvisioningTemplateRef_3b3b40e9, jsii.sinvoke(cls, "fromTemplateName", [scope, id, template_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -9383,6 +10293,12 @@ class CfnProvisioningTemplate(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="provisioningTemplateRef")
+    def provisioning_template_ref(self) -> _ProvisioningTemplateReference_dbcf5a40:
+        '''A reference to a ProvisioningTemplate resource.'''
+        return typing.cast(_ProvisioningTemplateReference_dbcf5a40, jsii.get(self, "provisioningTemplateRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -9763,7 +10679,7 @@ class CfnProvisioningTemplateProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IResourceSpecificLoggingRef_74a883ea)
 class CfnResourceSpecificLogging(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -9797,7 +10713,8 @@ class CfnResourceSpecificLogging(
         target_name: builtins.str,
         target_type: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::ResourceSpecificLogging``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param log_level: The default log level.Valid Values: ``DEBUG | INFO | ERROR | WARN | DISABLED``.
@@ -9858,6 +10775,14 @@ class CfnResourceSpecificLogging(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="resourceSpecificLoggingRef")
+    def resource_specific_logging_ref(
+        self,
+    ) -> _ResourceSpecificLoggingReference_0f3d93df:
+        '''A reference to a ResourceSpecificLogging resource.'''
+        return typing.cast(_ResourceSpecificLoggingReference_0f3d93df, jsii.get(self, "resourceSpecificLoggingRef"))
+
     @builtins.property
     @jsii.member(jsii_name="logLevel")
     def log_level(self) -> builtins.str:
@@ -9991,7 +10916,7 @@ class CfnResourceSpecificLoggingProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IRoleAliasRef_26714b8b, _ITaggable_36806126)
 class CfnRoleAlias(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -10034,7 +10959,8 @@ class CfnRoleAlias(
         role_alias: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::RoleAlias``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param role_arn: The role ARN.
@@ -10055,6 +10981,48 @@ class CfnRoleAlias(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromRoleAlias")
+    @builtins.classmethod
+    def from_role_alias(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        role_alias: builtins.str,
+    ) -> _IRoleAliasRef_26714b8b:
+        '''Creates a new IRoleAliasRef from a roleAlias.
+
+        :param scope: -
+        :param id: -
+        :param role_alias: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4cbdec422d0f8a201c529f6f73b276796c63bebaf61714ac8e1bb094a839d596)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument role_alias", value=role_alias, expected_type=type_hints["role_alias"])
+        return typing.cast(_IRoleAliasRef_26714b8b, jsii.sinvoke(cls, "fromRoleAlias", [scope, id, role_alias]))
+
+    @jsii.member(jsii_name="fromRoleAliasArn")
+    @builtins.classmethod
+    def from_role_alias_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IRoleAliasRef_26714b8b:
+        '''Creates a new IRoleAliasRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__103d13b2dd8fa40daeeecf5902c3729e010fd8f6c32e49a664c103632a12a7e2)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IRoleAliasRef_26714b8b, jsii.sinvoke(cls, "fromRoleAliasArn", [scope, id, arn]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -10099,6 +11067,12 @@ class CfnRoleAlias(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="roleAliasRef")
+    def role_alias_ref(self) -> _RoleAliasReference_b4e8a4b0:
+        '''A reference to a RoleAlias resource.'''
+        return typing.cast(_RoleAliasReference_b4e8a4b0, jsii.get(self, "roleAliasRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -10274,7 +11248,7 @@ class CfnRoleAliasProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IScheduledAuditRef_a5878e17, _ITaggable_36806126)
 class CfnScheduledAudit(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -10321,7 +11295,8 @@ class CfnScheduledAudit(
         scheduled_audit_name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::ScheduledAudit``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param frequency: How often the scheduled audit occurs.
@@ -10346,6 +11321,48 @@ class CfnScheduledAudit(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromScheduledAuditArn")
+    @builtins.classmethod
+    def from_scheduled_audit_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IScheduledAuditRef_a5878e17:
+        '''Creates a new IScheduledAuditRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1415801c9012935287c49ba75e6614ef915635bd76068d3a8818a8c15a35ae3e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IScheduledAuditRef_a5878e17, jsii.sinvoke(cls, "fromScheduledAuditArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromScheduledAuditName")
+    @builtins.classmethod
+    def from_scheduled_audit_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        scheduled_audit_name: builtins.str,
+    ) -> _IScheduledAuditRef_a5878e17:
+        '''Creates a new IScheduledAuditRef from a scheduledAuditName.
+
+        :param scope: -
+        :param id: -
+        :param scheduled_audit_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7f3a453ae1420fc4faa8cfbdd1bce7226bdfb0b3933f3eb439ee94cdd196262a)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument scheduled_audit_name", value=scheduled_audit_name, expected_type=type_hints["scheduled_audit_name"])
+        return typing.cast(_IScheduledAuditRef_a5878e17, jsii.sinvoke(cls, "fromScheduledAuditName", [scope, id, scheduled_audit_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -10390,6 +11407,12 @@ class CfnScheduledAudit(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="scheduledAuditRef")
+    def scheduled_audit_ref(self) -> _ScheduledAuditReference_68453d17:
+        '''A reference to a ScheduledAudit resource.'''
+        return typing.cast(_ScheduledAuditReference_68453d17, jsii.get(self, "scheduledAuditRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -10640,7 +11663,7 @@ class CfnScheduledAuditProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _ISecurityProfileRef_5d371790, _ITaggable_36806126)
 class CfnSecurityProfile(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -10741,7 +11764,8 @@ class CfnSecurityProfile(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         target_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::SecurityProfile``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param additional_metrics_to_retain_v2: A list of metrics whose data is retained (stored). By default, data is retained for any metric used in the profile's ``behaviors`` , but it's also retained for any metric specified here. Can be used with custom metrics; can't be used with dimensions.
@@ -10770,6 +11794,48 @@ class CfnSecurityProfile(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromSecurityProfileArn")
+    @builtins.classmethod
+    def from_security_profile_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _ISecurityProfileRef_5d371790:
+        '''Creates a new ISecurityProfileRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5d9189312f9aef6e5fb05f527807f2a38e973ab921573e55313d70b2abb872b2)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_ISecurityProfileRef_5d371790, jsii.sinvoke(cls, "fromSecurityProfileArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromSecurityProfileName")
+    @builtins.classmethod
+    def from_security_profile_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        security_profile_name: builtins.str,
+    ) -> _ISecurityProfileRef_5d371790:
+        '''Creates a new ISecurityProfileRef from a securityProfileName.
+
+        :param scope: -
+        :param id: -
+        :param security_profile_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__825fcc37fdfa495dc786c3f636eaf6ea6e2ace80152e8a8b2cc5948b5c593f99)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument security_profile_name", value=security_profile_name, expected_type=type_hints["security_profile_name"])
+        return typing.cast(_ISecurityProfileRef_5d371790, jsii.sinvoke(cls, "fromSecurityProfileName", [scope, id, security_profile_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -10814,6 +11880,12 @@ class CfnSecurityProfile(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="securityProfileRef")
+    def security_profile_ref(self) -> _SecurityProfileReference_8c2c6ff2:
+        '''A reference to a SecurityProfile resource.'''
+        return typing.cast(_SecurityProfileReference_8c2c6ff2, jsii.get(self, "securityProfileRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -12114,7 +13186,7 @@ class CfnSecurityProfileProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _ISoftwarePackageRef_8860c56e, _ITaggableV2_4e6798f8)
 class CfnSoftwarePackage(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -12153,7 +13225,8 @@ class CfnSoftwarePackage(
         package_name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::SoftwarePackage``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param description: A summary of the package being created. This can be used to outline the package's contents or purpose.
@@ -12170,6 +13243,27 @@ class CfnSoftwarePackage(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromPackageName")
+    @builtins.classmethod
+    def from_package_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        package_name: builtins.str,
+    ) -> _ISoftwarePackageRef_8860c56e:
+        '''Creates a new ISoftwarePackageRef from a packageName.
+
+        :param scope: -
+        :param id: -
+        :param package_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f04bb4bbac036b5e5c2dd4b5f400cb10635c3a33f5908c7858a66dfd6baa02ed)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument package_name", value=package_name, expected_type=type_hints["package_name"])
+        return typing.cast(_ISoftwarePackageRef_8860c56e, jsii.sinvoke(cls, "fromPackageName", [scope, id, package_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -12220,6 +13314,12 @@ class CfnSoftwarePackage(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="softwarePackageRef")
+    def software_package_ref(self) -> _SoftwarePackageReference_2fe38c44:
+        '''A reference to a SoftwarePackage resource.'''
+        return typing.cast(_SoftwarePackageReference_2fe38c44, jsii.get(self, "softwarePackageRef"))
+
     @builtins.property
     @jsii.member(jsii_name="description")
     def description(self) -> typing.Optional[builtins.str]:
@@ -12355,7 +13455,7 @@ class CfnSoftwarePackageProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _ISoftwarePackageVersionRef_729b2add, _ITaggableV2_4e6798f8)
 class CfnSoftwarePackageVersion(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -12425,7 +13525,8 @@ class CfnSoftwarePackageVersion(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         version_name: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::SoftwarePackageVersion``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param package_name: The name of the associated software package.
@@ -12533,6 +13634,12 @@ class CfnSoftwarePackageVersion(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="softwarePackageVersionRef")
+    def software_package_version_ref(self) -> _SoftwarePackageVersionReference_fa8c0d20:
+        '''A reference to a SoftwarePackageVersion resource.'''
+        return typing.cast(_SoftwarePackageVersionReference_fa8c0d20, jsii.get(self, "softwarePackageVersionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="packageName")
     def package_name(self) -> builtins.str:
@@ -13065,7 +14172,7 @@ class CfnSoftwarePackageVersionProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IThingRef_8c8528e2)
 class CfnThing(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -13103,7 +14210,8 @@ class CfnThing(
         attribute_payload: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnThing.AttributePayloadProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         thing_name: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::Thing``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param attribute_payload: A string that contains up to three key value pairs. Maximum length of 800. Duplicates not allowed.
@@ -13119,6 +14227,48 @@ class CfnThing(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromThingArn")
+    @builtins.classmethod
+    def from_thing_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IThingRef_8c8528e2:
+        '''Creates a new IThingRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__fead53b272148fd34aae6d40309f886d11f5b36948745142ad42085f84b82760)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IThingRef_8c8528e2, jsii.sinvoke(cls, "fromThingArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromThingName")
+    @builtins.classmethod
+    def from_thing_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        thing_name: builtins.str,
+    ) -> _IThingRef_8c8528e2:
+        '''Creates a new IThingRef from a thingName.
+
+        :param scope: -
+        :param id: -
+        :param thing_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__63e706c38ed2742098a2017e0b77f83259713c25e93c0c3263185f4952f4f6b0)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument thing_name", value=thing_name, expected_type=type_hints["thing_name"])
+        return typing.cast(_IThingRef_8c8528e2, jsii.sinvoke(cls, "fromThingName", [scope, id, thing_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -13172,6 +14322,12 @@ class CfnThing(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="thingRef")
+    def thing_ref(self) -> _ThingReference_c3929a14:
+        '''A reference to a Thing resource.'''
+        return typing.cast(_ThingReference_c3929a14, jsii.get(self, "thingRef"))
+
     @builtins.property
     @jsii.member(jsii_name="attributePayload")
     def attribute_payload(
@@ -13267,7 +14423,7 @@ class CfnThing(
             )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IThingGroupRef_d398d262, _ITaggable_36806126)
 class CfnThingGroup(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -13322,7 +14478,8 @@ class CfnThingGroup(
         thing_group_name: typing.Optional[builtins.str] = None,
         thing_group_properties: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnThingGroup.ThingGroupPropertiesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::ThingGroup``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param parent_group_name: The parent thing group name. A Dynamic Thing Group does not have ``parentGroupName`` defined.
@@ -13345,6 +14502,48 @@ class CfnThingGroup(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromThingGroupArn")
+    @builtins.classmethod
+    def from_thing_group_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IThingGroupRef_d398d262:
+        '''Creates a new IThingGroupRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__76e735ef090aa6b4711223ff32df96bd5172343cba35e1d77cd4b68872b59b0f)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IThingGroupRef_d398d262, jsii.sinvoke(cls, "fromThingGroupArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromThingGroupName")
+    @builtins.classmethod
+    def from_thing_group_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        thing_group_name: builtins.str,
+    ) -> _IThingGroupRef_d398d262:
+        '''Creates a new IThingGroupRef from a thingGroupName.
+
+        :param scope: -
+        :param id: -
+        :param thing_group_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1d16ed632ef5ccc8b15a0030144c594fbdeb61f18966f15c334fce5dc8361da1)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument thing_group_name", value=thing_group_name, expected_type=type_hints["thing_group_name"])
+        return typing.cast(_IThingGroupRef_d398d262, jsii.sinvoke(cls, "fromThingGroupName", [scope, id, thing_group_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -13404,6 +14603,12 @@ class CfnThingGroup(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="thingGroupRef")
+    def thing_group_ref(self) -> _ThingGroupReference_32809203:
+        '''A reference to a ThingGroup resource.'''
+        return typing.cast(_ThingGroupReference_32809203, jsii.get(self, "thingGroupRef"))
+
     @builtins.property
     @jsii.member(jsii_name="parentGroupName")
     def parent_group_name(self) -> typing.Optional[builtins.str]:
@@ -13753,7 +14958,7 @@ class CfnThingGroupProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IThingPrincipalAttachmentRef_1a94ae3e)
 class CfnThingPrincipalAttachment(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -13791,7 +14996,8 @@ class CfnThingPrincipalAttachment(
         thing_name: builtins.str,
         thing_principal_type: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::ThingPrincipalAttachment``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param principal: The principal, which can be a certificate ARN (as returned from the ``CreateCertificate`` operation) or an Amazon Cognito ID.
@@ -13853,6 +15059,14 @@ class CfnThingPrincipalAttachment(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="thingPrincipalAttachmentRef")
+    def thing_principal_attachment_ref(
+        self,
+    ) -> _ThingPrincipalAttachmentReference_fd3d444d:
+        '''A reference to a ThingPrincipalAttachment resource.'''
+        return typing.cast(_ThingPrincipalAttachmentReference_fd3d444d, jsii.get(self, "thingPrincipalAttachmentRef"))
+
     @builtins.property
     @jsii.member(jsii_name="principal")
     def principal(self) -> builtins.str:
@@ -14065,7 +15279,7 @@ class CfnThingProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IThingTypeRef_464ea9b2, _ITaggable_36806126)
 class CfnThingType(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -14116,7 +15330,8 @@ class CfnThingType(
         thing_type_name: typing.Optional[builtins.str] = None,
         thing_type_properties: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnThingType.ThingTypePropertiesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::ThingType``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param deprecate_thing_type: Deprecates a thing type. You can not associate new things with deprecated thing type. Requires permission to access the `DeprecateThingType <https://docs.aws.amazon.com//service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions>`_ action.
@@ -14137,6 +15352,48 @@ class CfnThingType(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromThingTypeArn")
+    @builtins.classmethod
+    def from_thing_type_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IThingTypeRef_464ea9b2:
+        '''Creates a new IThingTypeRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6719a471a2e56cfe6b27d1f229fe9a55487c255cf0c800a5247c6abc8687cf5f)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IThingTypeRef_464ea9b2, jsii.sinvoke(cls, "fromThingTypeArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromThingTypeName")
+    @builtins.classmethod
+    def from_thing_type_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        thing_type_name: builtins.str,
+    ) -> _IThingTypeRef_464ea9b2:
+        '''Creates a new IThingTypeRef from a thingTypeName.
+
+        :param scope: -
+        :param id: -
+        :param thing_type_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b64da11ae0952ff1dfbf98ffbed4eb8116a760ef7d0646991854dc1c1519bf2f)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument thing_type_name", value=thing_type_name, expected_type=type_hints["thing_type_name"])
+        return typing.cast(_IThingTypeRef_464ea9b2, jsii.sinvoke(cls, "fromThingTypeName", [scope, id, thing_type_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -14196,6 +15453,12 @@ class CfnThingType(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="thingTypeRef")
+    def thing_type_ref(self) -> _ThingTypeReference_ab8a3ee4:
+        '''A reference to a ThingType resource.'''
+        return typing.cast(_ThingTypeReference_ab8a3ee4, jsii.get(self, "thingTypeRef"))
+
     @builtins.property
     @jsii.member(jsii_name="deprecateThingType")
     def deprecate_thing_type(
@@ -14645,7 +15908,7 @@ class CfnThingTypeProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _ITopicRuleRef_748e9f37, _ITaggable_36806126)
 class CfnTopicRule(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -15149,7 +16412,8 @@ class CfnTopicRule(
         rule_name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::TopicRule``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param topic_rule_payload: The rule payload.
@@ -15166,6 +16430,48 @@ class CfnTopicRule(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromRuleName")
+    @builtins.classmethod
+    def from_rule_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        rule_name: builtins.str,
+    ) -> _ITopicRuleRef_748e9f37:
+        '''Creates a new ITopicRuleRef from a ruleName.
+
+        :param scope: -
+        :param id: -
+        :param rule_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__57ce3fcce047f65f3796a2c1921995470940a224ba618866916236a9660b6fda)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument rule_name", value=rule_name, expected_type=type_hints["rule_name"])
+        return typing.cast(_ITopicRuleRef_748e9f37, jsii.sinvoke(cls, "fromRuleName", [scope, id, rule_name]))
+
+    @jsii.member(jsii_name="fromTopicRuleArn")
+    @builtins.classmethod
+    def from_topic_rule_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _ITopicRuleRef_748e9f37:
+        '''Creates a new ITopicRuleRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0b3cee3077efed5f545bb3d6f2a1193d6e3a15b352974230ae5f7a2492402796)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_ITopicRuleRef_748e9f37, jsii.sinvoke(cls, "fromTopicRuleArn", [scope, id, arn]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -15216,6 +16522,12 @@ class CfnTopicRule(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="topicRuleRef")
+    def topic_rule_ref(self) -> _TopicRuleReference_dd2457a8:
+        '''A reference to a TopicRule resource.'''
+        return typing.cast(_TopicRuleReference_dd2457a8, jsii.get(self, "topicRuleRef"))
+
     @builtins.property
     @jsii.member(jsii_name="topicRulePayload")
     def topic_rule_payload(
@@ -20280,7 +21592,7 @@ class CfnTopicRule(
             )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ITopicRuleDestinationRef_a6a50916)
 class CfnTopicRuleDestination(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -20321,7 +21633,8 @@ class CfnTopicRuleDestination(
         status: typing.Optional[builtins.str] = None,
         vpc_properties: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnTopicRuleDestination.VpcDestinationPropertiesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::IoT::TopicRuleDestination``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param http_url_properties: Properties of the HTTP URL.
@@ -20393,6 +21706,12 @@ class CfnTopicRuleDestination(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="topicRuleDestinationRef")
+    def topic_rule_destination_ref(self) -> _TopicRuleDestinationReference_f55f3506:
+        '''A reference to a TopicRuleDestination resource.'''
+        return typing.cast(_TopicRuleDestinationReference_f55f3506, jsii.get(self, "topicRuleDestinationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="httpUrlProperties")
     def http_url_properties(
@@ -21300,6 +22619,8 @@ __all__ = [
     "CfnDimensionProps",
     "CfnDomainConfiguration",
     "CfnDomainConfigurationProps",
+    "CfnEncryptionConfiguration",
+    "CfnEncryptionConfigurationProps",
     "CfnFleetMetric",
     "CfnFleetMetricProps",
     "CfnJobTemplate",
@@ -21477,6 +22798,22 @@ def _typecheckingstub__4e4fa4db2b2f39dbc6512c349a1f375506fa414803e0c743e3c239b76
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__310c1c4c2dfff03e92b3a6a3e1de13fb9fbfa4745644dab039f56bcdb5c84be3(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4f19089485a26bdaae502a939567bac9583ba84ecc402865419db66df9aca955(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    authorizer_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__e047b673b6f702c39e8e2ee56ca74ec98eafb41c24942f77cf48dcfc0c6cf100(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -21562,6 +22899,22 @@ def _typecheckingstub__9800cd08bb1d66b3bd0eb0dfcdd44bd57f861cc577346b257704a3a82
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__4a18c3b4d0697a1a24c0fdba8322820151d3aef1daff80005d0610955c8df485(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__7a0f03a5d43c18591bbffa9ae9656ce12f0909732a6774987c89c161f4591a02(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    billing_group_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__71274764d0e63931050375d1e81d7c1388a96fa05d064b54b94b25b9fe32aaec(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -21720,6 +23073,22 @@ def _typecheckingstub__46aee44d4d6a9733c85214e26c075d74543dcab8e828397dcca352833
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__cfecee0031cd00f0c731c9897fab1d78a2ea52ff0b8755d7b8beba1d6b6d98e4(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0cac852b52dc618227ba2aacd333c26f6b86646275afa7512cafab57889e07f9(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    certificate_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c8dc35779a0ee0a520fa80f198a73f56234310d7e74f491d3dd025d9915126f8(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -21785,6 +23154,22 @@ def _typecheckingstub__aa47c66749868972aaf4a345219010725c3e649282a1cdc821cea25f3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__071317decea219980ab41a3b4a58ce71a6e759554c7547835c48fcc07c94ffe5(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__18dde147f0565e214975cf9507950ba2bb212ec44d032db9966e44e55448df59(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    certificate_provider_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__deee97fb5276134b41fef575240d151e07ce4376265ee400e7c314dd54b29bcd(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -21851,6 +23236,22 @@ def _typecheckingstub__52a5cb4afc582c05e5d1b2fa90cfc417ff3948833b71595e4f4dfe2cc
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__662c96af9f5c831d1987907418517956dd326eacc07062b92002cf137eb68595(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__22de9dd2fe01080b28a2448b9e4a2600a3a0d700f87bad5caea74b72b7166f79(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    command_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__1a90c6f8d7ba96e3a8933e52848f62e6fd81587904327421693b26311a4e50eb(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -21996,6 +23397,14 @@ def _typecheckingstub__b5d4b322e821a4658786c2a37bf522048717e259abfffbbac6e69e0d2
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__e694f3cb4ab80390387848a262c47752dd0bdbe195e0e49defffc1e9b36d4ed3(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    metric_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__638a54d00e3051dcffa8bb253ab09bd53a1cd5493472b15fec16df04226e2dda(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -22054,6 +23463,22 @@ def _typecheckingstub__9286d29081a37ed320df129ad3a910f5794612db8e193487b1e0eed45
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a27be5f6de8bec8eb6287e16f0a821027e71511a4f1ca4088d662b82afafeac4(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__01d55d2af5b261cda0b752c0632d64440b8d78fc046219d8c261cfc2035260d2(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    dimension_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__4753c5c665600fcdab2b16cb0586de1d0d979ee70e2269c0128df8953dbe2f7a(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -22121,6 +23546,22 @@ def _typecheckingstub__58bae527b5502ff5c7ab6b93d68302d8e2cbc6a5632a832f2c6bf436e
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__8be2d6e1ff6693540055a9fa7d393b113d89ebf43e1634e7d647805cdd5b250e(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4b9a196292f0744bd9f4375ad0444e438c9fcd9546da1348cab2bf1a5cee12df(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    domain_configuration_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__0a0813992a6140c2db60a1dd5dbed6984f02439abf3e084f624560966cd09acb(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -22270,6 +23711,65 @@ def _typecheckingstub__af698e1a1ead0a2d7000837dd712796a150772065ad59ab9baf10a759
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__590a310b1ce9a41bd611fc7e92d5bb9381ff548973b6322c201006617fc000f1(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    encryption_type: builtins.str,
+    kms_access_role_arn: typing.Optional[builtins.str] = None,
+    kms_key_arn: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__233141f5c147d73830fe3e9d9d504b3652e1d15f02ed8b705668c8e28e9b750c(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5cd2e788d7ff1c10202a0e433dda70ca35befefeabdbfc3016d8016e6cf1ed37(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__7fba231b8f68aa059f7c06875e959b3f3bd5636f6165991d32e54a5cc6d0bcd5(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c7090d98481b34dbf2479198088f6a73b9c942d4517672b8d308682e61d5dbba(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__19b09278cd32890a2953a31edf28ad2ac6b609136b5854732d407ccb4b6766d9(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__177ce092c0e88e844eafa9e6b2f72e02413a4aecda7bf05efcdfd6fbf7857eff(
+    *,
+    configuration_status: typing.Optional[builtins.str] = None,
+    error_code: typing.Optional[builtins.str] = None,
+    error_message: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__336ea497535e43391cf9df6341fe126d948316050e95d2d41cb831737802b9ab(
+    *,
+    encryption_type: builtins.str,
+    kms_access_role_arn: typing.Optional[builtins.str] = None,
+    kms_key_arn: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__3b4b6a6d0b19c68229922afca72d9918cdfd5933a93f8ad694fe94bccab652c5(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -22405,6 +23905,22 @@ def _typecheckingstub__41042e233d09c55a1d146a4913894e94014a62c885bf42884b1cf8623
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f36e0acf648bcbed21194f2fcc86b7da45b2ca6201f04d69359e1bd54dae7b68(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__67cc5fc3c14eec957174274cc3bede58847824cc340b0433ab36aa58df81d908(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    job_template_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__6e312804d00a9ebd568eb211e138b295fcca0a066c0b9880246f965814d927ba(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -22866,6 +24382,14 @@ def _typecheckingstub__02bb96ea93d9f923c4ca5284f1e7592d6a1e2f3924af8805a542593c8
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__80fefadc353ed4d1a5c6862088ec6985075f9dba2564b757907dd3afc3440d66(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    template_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__4f23fd7ad121fbd12d24cc67b77b8f9cde545c62beb82c8984b004d910d4007f(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -23010,6 +24534,22 @@ def _typecheckingstub__24de62bb2eee992c56b5999c4656f168b122a254284d811246124cfd0
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__4cbdec422d0f8a201c529f6f73b276796c63bebaf61714ac8e1bb094a839d596(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    role_alias: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__103d13b2dd8fa40daeeecf5902c3729e010fd8f6c32e49a664c103632a12a7e2(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__466b08fa2ec60e9b31c176c4cdf8fbb3029194b8bc191943df68a7e8c247da45(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -23070,6 +24610,22 @@ def _typecheckingstub__c7920148477352c97a5c3a934c25ee187add77bf6cf214ae8e8ed66f8
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__1415801c9012935287c49ba75e6614ef915635bd76068d3a8818a8c15a35ae3e(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__7f3a453ae1420fc4faa8cfbdd1bce7226bdfb0b3933f3eb439ee94cdd196262a(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    scheduled_audit_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c0e565bf4c581801adb6ecd4225ff95491969258026b567567c0ab12ccb5960d(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -23146,6 +24702,22 @@ def _typecheckingstub__029ea4c46fb568945f84463c5a4ee9f1b86d6603726f353ba1221eccb
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__5d9189312f9aef6e5fb05f527807f2a38e973ab921573e55313d70b2abb872b2(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__825fcc37fdfa495dc786c3f636eaf6ea6e2ace80152e8a8b2cc5948b5c593f99(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    security_profile_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__01270b509850263b600475745e4f2e5a23398af759ef8d275256c9c5ee96841a(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -23315,6 +24887,14 @@ def _typecheckingstub__94c7c8e186e68cde7a8264af8ace7c73f6ac201c314e1535a6ab915b3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f04bb4bbac036b5e5c2dd4b5f400cb10635c3a33f5908c7858a66dfd6baa02ed(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    package_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__63aa8695e9803a4aca16ebc3d38552c41e2bb2fd816d055d387721bdbd7371d0(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -23477,6 +25057,22 @@ def _typecheckingstub__c22f8db826ad742b31d2dec16a9996680b75b22e7a2c5f79d66f96032
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__fead53b272148fd34aae6d40309f886d11f5b36948745142ad42085f84b82760(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__63e706c38ed2742098a2017e0b77f83259713c25e93c0c3263185f4952f4f6b0(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    thing_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__32465539b8a37cf5a294735d32588ba511e2cc22b1bbd83dd5d0bfab0cfdca65(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -23521,6 +25117,22 @@ def _typecheckingstub__36ccd1615ce6e784c22f81e639e55416200039d2854f7590649016da4
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__76e735ef090aa6b4711223ff32df96bd5172343cba35e1d77cd4b68872b59b0f(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1d16ed632ef5ccc8b15a0030144c594fbdeb61f18966f15c334fce5dc8361da1(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    thing_group_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__18ff1ebfd86161f406ac84ba71a1dc78e50f664eda555af2e5f18f25c0df4a69(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -23659,6 +25271,22 @@ def _typecheckingstub__855c3886be1512886349890e201c5566281b169c77e8a1ea7d540216e
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__6719a471a2e56cfe6b27d1f229fe9a55487c255cf0c800a5247c6abc8687cf5f(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b64da11ae0952ff1dfbf98ffbed4eb8116a760ef7d0646991854dc1c1519bf2f(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    thing_type_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__f9c29e2b8e3da219ccb94d1ec0f11a3001e04a4679eb9b83f2688dceced3e0cb(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -23741,6 +25369,22 @@ def _typecheckingstub__5caaa56cc812bba0346f32f2da90d212415353bad7f74e7f8649afe3f
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__57ce3fcce047f65f3796a2c1921995470940a224ba618866916236a9660b6fda(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    rule_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0b3cee3077efed5f545bb3d6f2a1193d6e3a15b352974230ae5f7a2492402796(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__eca25123973615712d5902c87dd205f411a2a1bf5bed9629dcf16e9089a125b8(
     inspector: _TreeInspector_488e0dd5,
 ) -> None: