aws-cdk-lib 2.201.0__py3-none-any.whl → 2.202.0__py3-none-any.whl

aws_cdk/aws_glue/__init__.py

@@ -10946,24 +10946,41 @@ class CfnRegistry(
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-registry.html
     :cloudformationResource: AWS::Glue::Registry
-    :exampleMetadata: fixture=_generated
+    :exampleMetadata: infused
 
     Example::
 
-        # The code below shows an example of how to instantiate this type.
-        # The values are placeholders you should change.
-        from aws_cdk import aws_glue as glue
+        from aws_cdk.aws_glue import CfnRegistry
+        from aws_cdk.aws_lambda_event_sources import ManagedKafkaEventSource, GlueSchemaRegistry
         
-        cfn_registry = glue.CfnRegistry(self, "MyCfnRegistry",
-            name="name",
+        # Your MSK cluster arn
+        # cluster_arn: str
         
-            # the properties below are optional
-            description="description",
-            tags=[CfnTag(
-                key="key",
-                value="value"
-            )]
+        # my_function: lambda.Function
+        
+        
+        # The Kafka topic you want to subscribe to
+        topic = "some-cool-topic"
+        
+        # Your Glue Schema Registry
+        glue_registry = CfnRegistry(self, "Registry",
+            name="schema-registry",
+            description="Schema registry for event source"
         )
+        my_function.add_event_source(ManagedKafkaEventSource(
+            cluster_arn=cluster_arn,
+            topic=topic,
+            starting_position=lambda_.StartingPosition.TRIM_HORIZON,
+            provisioned_poller_config=ProvisionedPollerConfig(
+                minimum_pollers=1,
+                maximum_pollers=3
+            ),
+            schema_registry_config=GlueSchemaRegistry(
+                schema_registry=glue_registry,
+                event_record_format=lambda_.EventRecordFormat.JSON,
+                schema_validation_configs=[lambda.KafkaSchemaValidationConfig(attribute=lambda_.KafkaSchemaValidationAttribute.KEY)]
+            )
+        ))
     '''
 
     def __init__(
@@ -11100,24 +11117,41 @@ class CfnRegistryProps:
         :param tags: AWS tags that contain a key value pair and may be searched by console, command line, or API.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-registry.html
-        :exampleMetadata: fixture=_generated
+        :exampleMetadata: infused
 
         Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            from aws_cdk import aws_glue as glue
+            from aws_cdk.aws_glue import CfnRegistry
+            from aws_cdk.aws_lambda_event_sources import ManagedKafkaEventSource, GlueSchemaRegistry
             
-            cfn_registry_props = glue.CfnRegistryProps(
-                name="name",
+            # Your MSK cluster arn
+            # cluster_arn: str
             
-                # the properties below are optional
-                description="description",
-                tags=[CfnTag(
-                    key="key",
-                    value="value"
-                )]
+            # my_function: lambda.Function
+            
+            
+            # The Kafka topic you want to subscribe to
+            topic = "some-cool-topic"
+            
+            # Your Glue Schema Registry
+            glue_registry = CfnRegistry(self, "Registry",
+                name="schema-registry",
+                description="Schema registry for event source"
             )
+            my_function.add_event_source(ManagedKafkaEventSource(
+                cluster_arn=cluster_arn,
+                topic=topic,
+                starting_position=lambda_.StartingPosition.TRIM_HORIZON,
+                provisioned_poller_config=ProvisionedPollerConfig(
+                    minimum_pollers=1,
+                    maximum_pollers=3
+                ),
+                schema_registry_config=GlueSchemaRegistry(
+                    schema_registry=glue_registry,
+                    event_record_format=lambda_.EventRecordFormat.JSON,
+                    schema_validation_configs=[lambda.KafkaSchemaValidationConfig(attribute=lambda_.KafkaSchemaValidationAttribute.KEY)]
+                )
+            ))
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__a9d85e07a2dcc4ae5cd073c48fc5eb424c7446e4be042407f1f89c111ef9bba1)

aws_cdk/aws_iam/__init__.py

@@ -14942,7 +14942,7 @@ class ArnPrincipal(
     Example::
 
         # Option 2: create your custom mastersRole with scoped assumeBy arn as the Cluster prop. Switch to this role from the AWS console.
-        from aws_cdk.lambda_layer_kubectl_v32 import KubectlV32Layer
+        from aws_cdk.lambda_layer_kubectl_v33 import KubectlV33Layer
         # vpc: ec2.Vpc
         
         
@@ -14952,8 +14952,8 @@ class ArnPrincipal(
         
         cluster = eks.Cluster(self, "EksCluster",
             vpc=vpc,
-            version=eks.KubernetesVersion.V1_32,
-            kubectl_layer=KubectlV32Layer(self, "KubectlLayer"),
+            version=eks.KubernetesVersion.V1_33,
+            kubectl_layer=KubectlV33Layer(self, "KubectlLayer"),
             masters_role=masters_role
         )
         

aws_cdk/aws_kms/__init__.py

@@ -113,9 +113,10 @@ trail = cloudtrail.Trail(self, "myCloudTrail",
 )
 ```
 
-Note that calls to `addToResourcePolicy` and `grant*` methods on `myKeyAlias` will be
-no-ops, and `addAlias` and `aliasTargetKey` will fail, as the imported alias does not
-have a reference to the underlying KMS Key.
+Note that calls to `addToResourcePolicy` method on `myKeyAlias` will be a no-op, `addAlias` and `aliasTargetKey` will fail.
+The `grant*` methods will not modify the key policy, as the imported alias does not have a reference to the underlying KMS Key.
+For the `grant*` methods to modify the principal's IAM policy, the feature flag `@aws-cdk/aws-kms:applyImportedAliasPermissionsToPrincipal`
+must be set to `true`. By default, this flag is `false` and `grant*` calls on an imported alias are a no-op.
 
 ### Lookup key by alias
 
@@ -3287,7 +3288,12 @@ class Alias(
 
         This method should be used
         instead of 'fromAliasAttributes' when the underlying KMS Key ARN is not available.
-        This Alias will not have a direct reference to the KMS Key, so addAlias and grant* methods are not supported.
+        This Alias will not have a direct reference to the KMS Key, so addAlias method is not supported.
+
+        If the ``@aws-cdk/aws-kms:applyImportedAliasPermissionsToPrincipal`` feature flag is set to ``true``,
+        the grant* methods will use the kms:ResourceAliases condition to grant permissions to the specific alias name.
+        They will only modify the principal policy, not the key resource policy.
+        Without the feature flag ``grant*`` methods will be a no-op.
 
         :param scope: The parent creating construct (usually ``this``).
         :param id: The construct's name.