aws-cdk-lib 2.204.0__py3-none-any.whl → 2.205.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (48) hide show
  1. aws_cdk/__init__.py +170 -92
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.204.0.jsii.tgz → aws-cdk-lib@2.205.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_aiops/__init__.py +89 -39
  5. aws_cdk/aws_applicationautoscaling/__init__.py +2 -2
  6. aws_cdk/aws_arczonalshift/__init__.py +4 -1
  7. aws_cdk/aws_b2bi/__init__.py +32 -16
  8. aws_cdk/aws_bedrock/__init__.py +198 -10
  9. aws_cdk/aws_cassandra/__init__.py +156 -0
  10. aws_cdk/aws_cloudformation/__init__.py +74 -72
  11. aws_cdk/aws_cloudfront/__init__.py +1181 -485
  12. aws_cdk/aws_cloudfront_origins/__init__.py +26 -21
  13. aws_cdk/aws_cloudwatch/__init__.py +61 -0
  14. aws_cdk/aws_codebuild/__init__.py +216 -36
  15. aws_cdk/aws_datasync/__init__.py +2 -2
  16. aws_cdk/aws_docdb/__init__.py +78 -0
  17. aws_cdk/aws_dynamodb/__init__.py +207 -35
  18. aws_cdk/aws_ec2/__init__.py +32 -30
  19. aws_cdk/aws_ecs/__init__.py +12 -19
  20. aws_cdk/aws_emrserverless/__init__.py +5 -5
  21. aws_cdk/aws_events/__init__.py +58 -3
  22. aws_cdk/aws_events_targets/__init__.py +7 -2
  23. aws_cdk/aws_evs/__init__.py +7 -7
  24. aws_cdk/aws_fsx/__init__.py +138 -78
  25. aws_cdk/aws_gamelift/__init__.py +19 -0
  26. aws_cdk/aws_glue/__init__.py +3 -3
  27. aws_cdk/aws_iot/__init__.py +1 -1
  28. aws_cdk/aws_kinesis/__init__.py +67 -13
  29. aws_cdk/aws_kinesisfirehose/__init__.py +28 -1
  30. aws_cdk/aws_lex/__init__.py +36 -19
  31. aws_cdk/aws_neptune/__init__.py +12 -12
  32. aws_cdk/aws_odb/__init__.py +4049 -0
  33. aws_cdk/aws_omics/__init__.py +1 -1
  34. aws_cdk/aws_qbusiness/__init__.py +471 -4
  35. aws_cdk/aws_quicksight/__init__.py +185 -16
  36. aws_cdk/aws_rds/__init__.py +169 -17
  37. aws_cdk/aws_redshiftserverless/__init__.py +72 -45
  38. aws_cdk/aws_route53/__init__.py +41 -19
  39. aws_cdk/aws_s3tables/__init__.py +1005 -0
  40. aws_cdk/aws_sagemaker/__init__.py +20 -0
  41. aws_cdk/aws_synthetics/__init__.py +141 -37
  42. aws_cdk/aws_transfer/__init__.py +23 -1
  43. {aws_cdk_lib-2.204.0.dist-info → aws_cdk_lib-2.205.0.dist-info}/METADATA +1 -1
  44. {aws_cdk_lib-2.204.0.dist-info → aws_cdk_lib-2.205.0.dist-info}/RECORD +48 -47
  45. {aws_cdk_lib-2.204.0.dist-info → aws_cdk_lib-2.205.0.dist-info}/LICENSE +0 -0
  46. {aws_cdk_lib-2.204.0.dist-info → aws_cdk_lib-2.205.0.dist-info}/NOTICE +0 -0
  47. {aws_cdk_lib-2.204.0.dist-info → aws_cdk_lib-2.205.0.dist-info}/WHEEL +0 -0
  48. {aws_cdk_lib-2.204.0.dist-info → aws_cdk_lib-2.205.0.dist-info}/top_level.txt +0 -0
@@ -1560,7 +1560,7 @@ class CfnHookDefaultVersion(
1560
1560
  @builtins.property
1561
1561
  @jsii.member(jsii_name="attrArn")
1562
1562
  def attr_arn(self) -> builtins.str:
1563
- '''The Amazon Resource Number (ARN) of the activated Hook, in this account and Region.
1563
+ '''The Amazon Resource Number (ARN) of the activated Hook in this account and Region.
1564
1564
 
1565
1565
  :cloudformationAttribute: Arn
1566
1566
  '''
@@ -1801,7 +1801,7 @@ class CfnHookTypeConfig(
1801
1801
  @builtins.property
1802
1802
  @jsii.member(jsii_name="attrConfigurationArn")
1803
1803
  def attr_configuration_arn(self) -> builtins.str:
1804
- '''The Amazon Resource Number (ARN) of the activated Hook type configuration, in this account and Region.
1804
+ '''The Amazon Resource Number (ARN) of the activated Hook type configuration in this account and Region.
1805
1805
 
1806
1806
  :cloudformationAttribute: ConfigurationArn
1807
1807
  '''
@@ -3461,7 +3461,8 @@ class CfnMacro(
3461
3461
  @builtins.property
3462
3462
  @jsii.member(jsii_name="attrId")
3463
3463
  def attr_id(self) -> builtins.str:
3464
- '''
3464
+ '''Returns a unique identifier for the resource.
3465
+
3465
3466
  :cloudformationAttribute: Id
3466
3467
  '''
3467
3468
  return typing.cast(builtins.str, jsii.get(self, "attrId"))
@@ -5445,7 +5446,7 @@ class CfnStack(
5445
5446
 
5446
5447
  For more information, see `Nested stacks <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-nested-stacks.html>`_ in the *AWS CloudFormation User Guide* .
5447
5448
 
5448
- You can add output values from a nested stack within the containing template. You use the `GetAtt <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getatt.html>`_ function with the nested stack's logical name and the name of the output value in the nested stack in the format ``Outputs. *NestedStackOutputName*`` .
5449
+ You can add output values from a nested stack within the containing template. You use the `GetAtt <https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html>`_ function with the nested stack's logical name and the name of the output value in the nested stack in the format ``Outputs. *NestedStackOutputName*`` .
5449
5450
 
5450
5451
  We strongly recommend that updates to nested stacks are run from the parent stack.
5451
5452
 
@@ -5579,7 +5580,7 @@ class CfnStack(
5579
5580
  @builtins.property
5580
5581
  @jsii.member(jsii_name="attrChangeSetId")
5581
5582
  def attr_change_set_id(self) -> builtins.str:
5582
- '''Returns the unique ID of the change set.
5583
+ '''Returns the unique identifier of the change set.
5583
5584
 
5584
5585
  :cloudformationAttribute: ChangeSetId
5585
5586
  '''
@@ -5588,7 +5589,7 @@ class CfnStack(
5588
5589
  @builtins.property
5589
5590
  @jsii.member(jsii_name="attrCreationTime")
5590
5591
  def attr_creation_time(self) -> builtins.str:
5591
- '''Returns The time at which the stack was created.
5592
+ '''Returns the time the stack was created.
5592
5593
 
5593
5594
  :cloudformationAttribute: CreationTime
5594
5595
  '''
@@ -5998,9 +5999,9 @@ class CfnStackSet(
5998
5999
  metaclass=jsii.JSIIMeta,
5999
6000
  jsii_type="aws-cdk-lib.aws_cloudformation.CfnStackSet",
6000
6001
  ):
6001
- '''The ``AWS::CloudFormation::StackSet`` resource enables you to provision stacks into AWS accounts and across Regions by using a single CloudFormation template.
6002
+ '''The ``AWS::CloudFormation::StackSet`` resource contains information about a StackSet.
6002
6003
 
6003
- In the stack set, you specify the template to use, in addition to any parameters and capabilities that the template requires.
6004
+ With StackSets, you can provision stacks across AWS accounts and Regions from a single CloudFormation template. Each stack is based on the same CloudFormation template, but you can customize individual stacks using parameters.
6004
6005
  .. epigraph::
6005
6006
 
6006
6007
  Run deployments to nested StackSets from the parent stack, not directly through the StackSet API.
@@ -6093,17 +6094,17 @@ class CfnStackSet(
6093
6094
  '''
6094
6095
  :param scope: Scope in which this resource is defined.
6095
6096
  :param id: Construct identifier for this resource (unique in its scope).
6096
- :param permission_model: Describes how the IAM roles required for stack set operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for stack sets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
6097
- :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set.
6098
- :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
6097
+ :param permission_model: Describes how the IAM roles required for StackSet operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for StackSets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
6098
+ :param stack_set_name: The name to associate with the StackSet. The name must be unique in the Region where you create your StackSet.
6099
+ :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this StackSet. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific StackSets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific StackSets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
6099
6100
  :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Enable or disable automatic deployments for StackSets in AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
6100
- :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
6101
- :param capabilities: The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
6102
- :param description: A description of the stack set.
6103
- :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. Valid only if the permissions model is ``SELF_MANAGED`` . *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
6104
- :param managed_execution: Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations. When active, StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your stack set's execution configuration while there are running or queued operations for that stack set. When inactive (default), StackSets performs one operation at a time in request order.
6105
- :param operation_preferences: The user-specified preferences for how CloudFormation performs a stack set operation.
6106
- :param parameters: The input parameters for the stack set template.
6101
+ :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for StackSets with self-managed permissions. - To create a StackSet with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a StackSet with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . StackSets with service-managed permissions are created in the management account, including StackSets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
6102
+ :param capabilities: The capabilities that are allowed in the StackSet. Some StackSet templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
6103
+ :param description: A description of the StackSet.
6104
+ :param execution_role_name: The name of the IAM execution role to use to create the StackSet. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the StackSet operation. Valid only if the permissions model is ``SELF_MANAGED`` . *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
6105
+ :param managed_execution: Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations. When active, StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your StackSet's execution configuration while there are running or queued operations for that StackSet. When inactive (default), StackSets performs one operation at a time in request order.
6106
+ :param operation_preferences: The user-specified preferences for how CloudFormation performs a StackSet operation.
6107
+ :param parameters: The input parameters for the StackSet template.
6107
6108
  :param stack_instances_group: A group of stack instances with parameters in some specific accounts and Regions.
6108
6109
  :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to supported resources in the stack. You can specify a maximum number of 50 tags. If you don't specify this parameter, CloudFormation doesn't modify the stack's tags. If you specify an empty value, CloudFormation removes all associated tags.
6109
6110
  :param template_body: The structure that contains the template body, with a minimum length of 1 byte and a maximum length of 51,200 bytes. You must include either ``TemplateURL`` or ``TemplateBody`` in a StackSet, but you can't use both. Dynamic references in the ``TemplateBody`` may not work correctly in all cases. It's recommended to pass templates that contain dynamic references through ``TemplateUrl`` instead.
@@ -6166,7 +6167,7 @@ class CfnStackSet(
6166
6167
  @builtins.property
6167
6168
  @jsii.member(jsii_name="attrStackSetId")
6168
6169
  def attr_stack_set_id(self) -> builtins.str:
6169
- '''The ID of the stack that you're creating.
6170
+ '''Returns the unique identifier of the resource.
6170
6171
 
6171
6172
  :cloudformationAttribute: StackSetId
6172
6173
  '''
@@ -6186,7 +6187,7 @@ class CfnStackSet(
6186
6187
  @builtins.property
6187
6188
  @jsii.member(jsii_name="permissionModel")
6188
6189
  def permission_model(self) -> builtins.str:
6189
- '''Describes how the IAM roles required for stack set operations are created.'''
6190
+ '''Describes how the IAM roles required for StackSet operations are created.'''
6190
6191
  return typing.cast(builtins.str, jsii.get(self, "permissionModel"))
6191
6192
 
6192
6193
  @permission_model.setter
@@ -6199,7 +6200,7 @@ class CfnStackSet(
6199
6200
  @builtins.property
6200
6201
  @jsii.member(jsii_name="stackSetName")
6201
6202
  def stack_set_name(self) -> builtins.str:
6202
- '''The name to associate with the stack set.'''
6203
+ '''The name to associate with the StackSet.'''
6203
6204
  return typing.cast(builtins.str, jsii.get(self, "stackSetName"))
6204
6205
 
6205
6206
  @stack_set_name.setter
@@ -6212,7 +6213,7 @@ class CfnStackSet(
6212
6213
  @builtins.property
6213
6214
  @jsii.member(jsii_name="administrationRoleArn")
6214
6215
  def administration_role_arn(self) -> typing.Optional[builtins.str]:
6215
- '''The Amazon Resource Number (ARN) of the IAM role to use to create this stack set.'''
6216
+ '''The Amazon Resource Number (ARN) of the IAM role to use to create this StackSet.'''
6216
6217
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "administrationRoleArn"))
6217
6218
 
6218
6219
  @administration_role_arn.setter
@@ -6256,7 +6257,7 @@ class CfnStackSet(
6256
6257
  @builtins.property
6257
6258
  @jsii.member(jsii_name="capabilities")
6258
6259
  def capabilities(self) -> typing.Optional[typing.List[builtins.str]]:
6259
- '''The capabilities that are allowed in the stack set.'''
6260
+ '''The capabilities that are allowed in the StackSet.'''
6260
6261
  return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "capabilities"))
6261
6262
 
6262
6263
  @capabilities.setter
@@ -6269,7 +6270,7 @@ class CfnStackSet(
6269
6270
  @builtins.property
6270
6271
  @jsii.member(jsii_name="description")
6271
6272
  def description(self) -> typing.Optional[builtins.str]:
6272
- '''A description of the stack set.'''
6273
+ '''A description of the StackSet.'''
6273
6274
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "description"))
6274
6275
 
6275
6276
  @description.setter
@@ -6282,7 +6283,7 @@ class CfnStackSet(
6282
6283
  @builtins.property
6283
6284
  @jsii.member(jsii_name="executionRoleName")
6284
6285
  def execution_role_name(self) -> typing.Optional[builtins.str]:
6285
- '''The name of the IAM execution role to use to create the stack set.'''
6286
+ '''The name of the IAM execution role to use to create the StackSet.'''
6286
6287
  return typing.cast(typing.Optional[builtins.str], jsii.get(self, "executionRoleName"))
6287
6288
 
6288
6289
  @execution_role_name.setter
@@ -6310,7 +6311,7 @@ class CfnStackSet(
6310
6311
  def operation_preferences(
6311
6312
  self,
6312
6313
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnStackSet.OperationPreferencesProperty"]]:
6313
- '''The user-specified preferences for how CloudFormation performs a stack set operation.'''
6314
+ '''The user-specified preferences for how CloudFormation performs a StackSet operation.'''
6314
6315
  return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnStackSet.OperationPreferencesProperty"]], jsii.get(self, "operationPreferences"))
6315
6316
 
6316
6317
  @operation_preferences.setter
@@ -6328,7 +6329,7 @@ class CfnStackSet(
6328
6329
  def parameters(
6329
6330
  self,
6330
6331
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnStackSet.ParameterProperty"]]]]:
6331
- '''The input parameters for the stack set template.'''
6332
+ '''The input parameters for the StackSet template.'''
6332
6333
  return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnStackSet.ParameterProperty"]]]], jsii.get(self, "parameters"))
6333
6334
 
6334
6335
  @parameters.setter
@@ -6498,7 +6499,7 @@ class CfnStackSet(
6498
6499
  accounts_url: typing.Optional[builtins.str] = None,
6499
6500
  organizational_unit_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
6500
6501
  ) -> None:
6501
- '''The AWS OrganizationalUnitIds or Accounts for which to create stack instances in the specified Regions.
6502
+ '''The AWS ``OrganizationalUnitIds`` or ``Accounts`` for which to create stack instances in the specified Regions.
6502
6503
 
6503
6504
  :param account_filter_type: Limit deployment targets to individual accounts or include additional accounts with provided OUs. The following is a list of possible values for the ``AccountFilterType`` operation. - ``INTERSECTION`` : StackSet deploys to the accounts specified in the ``Accounts`` parameter. - ``DIFFERENCE`` : StackSet deploys to the OU, excluding the accounts specified in the ``Accounts`` parameter. - ``UNION`` StackSet deploys to the OU, and the accounts specified in the ``Accounts`` parameter. ``UNION`` is not supported for create operations when using StackSet as a resource.
6504
6505
  :param accounts: The account IDs of the AWS accounts . If you have many account numbers, you can provide those accounts using the ``AccountsUrl`` property instead. *Pattern* : ``^[0-9]{12}$``
@@ -6611,7 +6612,7 @@ class CfnStackSet(
6611
6612
  ) -> None:
6612
6613
  '''Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations.
6613
6614
 
6614
- :param active: When ``true`` , StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your stack set's execution configuration while there are running or queued operations for that stack set. When ``false`` (default), StackSets performs one operation at a time in request order.
6615
+ :param active: When ``true`` , StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your StackSet's execution configuration while there are running or queued operations for that StackSet. When ``false`` (default), StackSets performs one operation at a time in request order.
6615
6616
 
6616
6617
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-managedexecution.html
6617
6618
  :exampleMetadata: fixture=_generated
@@ -6644,7 +6645,7 @@ class CfnStackSet(
6644
6645
 
6645
6646
  If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting.
6646
6647
 
6647
- You can't modify your stack set's execution configuration while there are running or queued operations for that stack set.
6648
+ You can't modify your StackSet's execution configuration while there are running or queued operations for that StackSet.
6648
6649
 
6649
6650
  When ``false`` (default), StackSets performs one operation at a time in request order.
6650
6651
 
@@ -6689,13 +6690,13 @@ class CfnStackSet(
6689
6690
  region_concurrency_type: typing.Optional[builtins.str] = None,
6690
6691
  region_order: typing.Optional[typing.Sequence[builtins.str]] = None,
6691
6692
  ) -> None:
6692
- '''The user-specified preferences for how CloudFormation performs a stack set operation.
6693
+ '''The user-specified preferences for how CloudFormation performs a StackSet operation.
6693
6694
 
6694
- For more information on maximum concurrent accounts and failure tolerance, see `Stack set operation options <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-concepts.html#stackset-ops-options>`_ in the *AWS CloudFormation User Guide* .
6695
+ For more information on maximum concurrent accounts and failure tolerance, see `StackSet operation options <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-concepts.html#stackset-ops-options>`_ in the *AWS CloudFormation User Guide* .
6695
6696
 
6696
- :param concurrency_mode: Specifies how the concurrency level behaves during the operation execution. - ``STRICT_FAILURE_TOLERANCE`` : This option dynamically lowers the concurrency level to ensure the number of failed accounts never exceeds the value of ``FailureToleranceCount`` +1. The initial actual concurrency is set to the lower of either the value of the ``MaxConcurrentCount`` , or the value of ``FailureToleranceCount`` +1. The actual concurrency is then reduced proportionally by the number of failures. This is the default behavior. If failure tolerance or Maximum concurrent accounts are set to percentages, the behavior is similar. - ``SOFT_FAILURE_TOLERANCE`` : This option decouples ``FailureToleranceCount`` from the actual concurrency. This allows stack set operations to run at the concurrency level set by the ``MaxConcurrentCount`` value, or ``MaxConcurrentPercentage`` , regardless of the number of failures.
6697
- :param failure_tolerance_count: The number of accounts, per Region, for which this operation can fail before CloudFormation stops the operation in that Region. If the operation is stopped in a Region, CloudFormation doesn't attempt the operation in any subsequent Regions. Conditional: You must specify either ``FailureToleranceCount`` or ``FailureTolerancePercentage`` (but not both).
6698
- :param failure_tolerance_percentage: The percentage of accounts, per Region, for which this stack operation can fail before CloudFormation stops the operation in that Region. If the operation is stopped in a Region, CloudFormation doesn't attempt the operation in any subsequent Regions. When calculating the number of accounts based on the specified percentage, CloudFormation rounds *down* to the next whole number. Conditional: You must specify either ``FailureToleranceCount`` or ``FailureTolerancePercentage`` , but not both.
6697
+ :param concurrency_mode: Specifies how the concurrency level behaves during the operation execution. - ``STRICT_FAILURE_TOLERANCE`` : This option dynamically lowers the concurrency level to ensure the number of failed accounts never exceeds the value of ``FailureToleranceCount`` +1. The initial actual concurrency is set to the lower of either the value of the ``MaxConcurrentCount`` , or the value of ``FailureToleranceCount`` +1. The actual concurrency is then reduced proportionally by the number of failures. This is the default behavior. If failure tolerance or Maximum concurrent accounts are set to percentages, the behavior is similar. - ``SOFT_FAILURE_TOLERANCE`` : This option decouples ``FailureToleranceCount`` from the actual concurrency. This allows StackSet operations to run at the concurrency level set by the ``MaxConcurrentCount`` value, or ``MaxConcurrentPercentage`` , regardless of the number of failures.
6698
+ :param failure_tolerance_count: The number of accounts per Region this operation can fail in before CloudFormation stops the operation in that Region. If the operation is stopped in a Region, CloudFormation doesn't attempt the operation in any subsequent Regions. Conditional: You must specify either ``FailureToleranceCount`` or ``FailureTolerancePercentage`` (but not both).
6699
+ :param failure_tolerance_percentage: The percentage of accounts per Region this stack operation can fail in before CloudFormation stops the operation in that Region. If the operation is stopped in a Region, CloudFormation doesn't attempt the operation in any subsequent Regions. When calculating the number of accounts based on the specified percentage, CloudFormation rounds *down* to the next whole number. Conditional: You must specify either ``FailureToleranceCount`` or ``FailureTolerancePercentage`` , but not both.
6699
6700
  :param max_concurrent_count: The maximum number of accounts in which to perform this operation at one time. This is dependent on the value of ``FailureToleranceCount`` . ``MaxConcurrentCount`` is at most one more than the ``FailureToleranceCount`` . Note that this setting lets you specify the *maximum* for operations. For large deployments, under certain circumstances the actual number of accounts acted upon concurrently may be lower due to service throttling. Conditional: You must specify either ``MaxConcurrentCount`` or ``MaxConcurrentPercentage`` , but not both.
6700
6701
  :param max_concurrent_percentage: The maximum percentage of accounts in which to perform this operation at one time. When calculating the number of accounts based on the specified percentage, CloudFormation rounds down to the next whole number. This is true except in cases where rounding down would result is zero. In this case, CloudFormation sets the number as one instead. Note that this setting lets you specify the *maximum* for operations. For large deployments, under certain circumstances the actual number of accounts acted upon concurrently may be lower due to service throttling. Conditional: You must specify either ``MaxConcurrentCount`` or ``MaxConcurrentPercentage`` , but not both.
6701
6702
  :param region_concurrency_type: The concurrency type of deploying StackSets operations in Regions, could be in parallel or one Region at a time.
@@ -6753,7 +6754,7 @@ class CfnStackSet(
6753
6754
 
6754
6755
  If failure tolerance or Maximum concurrent accounts are set to percentages, the behavior is similar.
6755
6756
 
6756
- - ``SOFT_FAILURE_TOLERANCE`` : This option decouples ``FailureToleranceCount`` from the actual concurrency. This allows stack set operations to run at the concurrency level set by the ``MaxConcurrentCount`` value, or ``MaxConcurrentPercentage`` , regardless of the number of failures.
6757
+ - ``SOFT_FAILURE_TOLERANCE`` : This option decouples ``FailureToleranceCount`` from the actual concurrency. This allows StackSet operations to run at the concurrency level set by the ``MaxConcurrentCount`` value, or ``MaxConcurrentPercentage`` , regardless of the number of failures.
6757
6758
 
6758
6759
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-operationpreferences.html#cfn-cloudformation-stackset-operationpreferences-concurrencymode
6759
6760
  '''
@@ -6762,7 +6763,7 @@ class CfnStackSet(
6762
6763
 
6763
6764
  @builtins.property
6764
6765
  def failure_tolerance_count(self) -> typing.Optional[jsii.Number]:
6765
- '''The number of accounts, per Region, for which this operation can fail before CloudFormation stops the operation in that Region.
6766
+ '''The number of accounts per Region this operation can fail in before CloudFormation stops the operation in that Region.
6766
6767
 
6767
6768
  If the operation is stopped in a Region, CloudFormation doesn't attempt the operation in any subsequent Regions.
6768
6769
 
@@ -6775,7 +6776,7 @@ class CfnStackSet(
6775
6776
 
6776
6777
  @builtins.property
6777
6778
  def failure_tolerance_percentage(self) -> typing.Optional[jsii.Number]:
6778
- '''The percentage of accounts, per Region, for which this stack operation can fail before CloudFormation stops the operation in that Region.
6779
+ '''The percentage of accounts per Region this stack operation can fail in before CloudFormation stops the operation in that Region.
6779
6780
 
6780
6781
  If the operation is stopped in a Region, CloudFormation doesn't attempt the operation in any subsequent Regions.
6781
6782
 
@@ -6944,7 +6945,7 @@ class CfnStackSet(
6944
6945
 
6945
6946
  :param deployment_targets: The AWS ``OrganizationalUnitIds`` or ``Accounts`` for which to create stack instances in the specified Regions.
6946
6947
  :param regions: The names of one or more Regions where you want to create stack instances using the specified AWS accounts .
6947
- :param parameter_overrides: A list of stack set parameters whose values you want to override in the selected stack instances.
6948
+ :param parameter_overrides: A list of StackSet parameters whose values you want to override in the selected stack instances.
6948
6949
 
6949
6950
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-stackinstances.html
6950
6951
  :exampleMetadata: fixture=_generated
@@ -7009,7 +7010,7 @@ class CfnStackSet(
7009
7010
  def parameter_overrides(
7010
7011
  self,
7011
7012
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnStackSet.ParameterProperty"]]]]:
7012
- '''A list of stack set parameters whose values you want to override in the selected stack instances.
7013
+ '''A list of StackSet parameters whose values you want to override in the selected stack instances.
7013
7014
 
7014
7015
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-stackinstances.html#cfn-cloudformation-stackset-stackinstances-parameteroverrides
7015
7016
  '''
@@ -7071,17 +7072,17 @@ class CfnStackSetProps:
7071
7072
  ) -> None:
7072
7073
  '''Properties for defining a ``CfnStackSet``.
7073
7074
 
7074
- :param permission_model: Describes how the IAM roles required for stack set operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for stack sets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
7075
- :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set.
7076
- :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
7075
+ :param permission_model: Describes how the IAM roles required for StackSet operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for StackSets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
7076
+ :param stack_set_name: The name to associate with the StackSet. The name must be unique in the Region where you create your StackSet.
7077
+ :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this StackSet. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific StackSets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific StackSets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
7077
7078
  :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Enable or disable automatic deployments for StackSets in AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
7078
- :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
7079
- :param capabilities: The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
7080
- :param description: A description of the stack set.
7081
- :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. Valid only if the permissions model is ``SELF_MANAGED`` . *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
7082
- :param managed_execution: Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations. When active, StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your stack set's execution configuration while there are running or queued operations for that stack set. When inactive (default), StackSets performs one operation at a time in request order.
7083
- :param operation_preferences: The user-specified preferences for how CloudFormation performs a stack set operation.
7084
- :param parameters: The input parameters for the stack set template.
7079
+ :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for StackSets with self-managed permissions. - To create a StackSet with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a StackSet with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . StackSets with service-managed permissions are created in the management account, including StackSets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
7080
+ :param capabilities: The capabilities that are allowed in the StackSet. Some StackSet templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
7081
+ :param description: A description of the StackSet.
7082
+ :param execution_role_name: The name of the IAM execution role to use to create the StackSet. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the StackSet operation. Valid only if the permissions model is ``SELF_MANAGED`` . *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
7083
+ :param managed_execution: Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations. When active, StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your StackSet's execution configuration while there are running or queued operations for that StackSet. When inactive (default), StackSets performs one operation at a time in request order.
7084
+ :param operation_preferences: The user-specified preferences for how CloudFormation performs a StackSet operation.
7085
+ :param parameters: The input parameters for the StackSet template.
7085
7086
  :param stack_instances_group: A group of stack instances with parameters in some specific accounts and Regions.
7086
7087
  :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to supported resources in the stack. You can specify a maximum number of 50 tags. If you don't specify this parameter, CloudFormation doesn't modify the stack's tags. If you specify an empty value, CloudFormation removes all associated tags.
7087
7088
  :param template_body: The structure that contains the template body, with a minimum length of 1 byte and a maximum length of 51,200 bytes. You must include either ``TemplateURL`` or ``TemplateBody`` in a StackSet, but you can't use both. Dynamic references in the ``TemplateBody`` may not work correctly in all cases. It's recommended to pass templates that contain dynamic references through ``TemplateUrl`` instead.
@@ -7199,10 +7200,10 @@ class CfnStackSetProps:
7199
7200
 
7200
7201
  @builtins.property
7201
7202
  def permission_model(self) -> builtins.str:
7202
- '''Describes how the IAM roles required for stack set operations are created.
7203
+ '''Describes how the IAM roles required for StackSet operations are created.
7203
7204
 
7204
7205
  - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* .
7205
- - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for stack sets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
7206
+ - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for StackSets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
7206
7207
 
7207
7208
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-permissionmodel
7208
7209
  '''
@@ -7212,9 +7213,9 @@ class CfnStackSetProps:
7212
7213
 
7213
7214
  @builtins.property
7214
7215
  def stack_set_name(self) -> builtins.str:
7215
- '''The name to associate with the stack set.
7216
+ '''The name to associate with the StackSet.
7216
7217
 
7217
- The name must be unique in the Region where you create your stack set.
7218
+ The name must be unique in the Region where you create your StackSet.
7218
7219
 
7219
7220
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-stacksetname
7220
7221
  '''
@@ -7224,11 +7225,11 @@ class CfnStackSetProps:
7224
7225
 
7225
7226
  @builtins.property
7226
7227
  def administration_role_arn(self) -> typing.Optional[builtins.str]:
7227
- '''The Amazon Resource Number (ARN) of the IAM role to use to create this stack set.
7228
+ '''The Amazon Resource Number (ARN) of the IAM role to use to create this StackSet.
7228
7229
 
7229
- Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account.
7230
+ Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific StackSets within the same administrator account.
7230
7231
 
7231
- Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* .
7232
+ Use customized administrator roles to control which users or groups can manage specific StackSets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* .
7232
7233
 
7233
7234
  Valid only if the permissions model is ``SELF_MANAGED`` .
7234
7235
 
@@ -7256,14 +7257,14 @@ class CfnStackSetProps:
7256
7257
  def call_as(self) -> typing.Optional[builtins.str]:
7257
7258
  '''Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.
7258
7259
 
7259
- By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions.
7260
+ By default, ``SELF`` is specified. Use ``SELF`` for StackSets with self-managed permissions.
7260
7261
 
7261
- - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` .
7262
- - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` .
7262
+ - To create a StackSet with service-managed permissions while signed in to the management account, specify ``SELF`` .
7263
+ - To create a StackSet with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` .
7263
7264
 
7264
7265
  Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* .
7265
7266
 
7266
- Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators.
7267
+ StackSets with service-managed permissions are created in the management account, including StackSets that are created by delegated administrators.
7267
7268
 
7268
7269
  Valid only if the permissions model is ``SERVICE_MANAGED`` .
7269
7270
 
@@ -7274,9 +7275,9 @@ class CfnStackSetProps:
7274
7275
 
7275
7276
  @builtins.property
7276
7277
  def capabilities(self) -> typing.Optional[typing.List[builtins.str]]:
7277
- '''The capabilities that are allowed in the stack set.
7278
+ '''The capabilities that are allowed in the StackSet.
7278
7279
 
7279
- Some stack set templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
7280
+ Some StackSet templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
7280
7281
 
7281
7282
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-capabilities
7282
7283
  '''
@@ -7285,7 +7286,7 @@ class CfnStackSetProps:
7285
7286
 
7286
7287
  @builtins.property
7287
7288
  def description(self) -> typing.Optional[builtins.str]:
7288
- '''A description of the stack set.
7289
+ '''A description of the StackSet.
7289
7290
 
7290
7291
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-description
7291
7292
  '''
@@ -7294,9 +7295,9 @@ class CfnStackSetProps:
7294
7295
 
7295
7296
  @builtins.property
7296
7297
  def execution_role_name(self) -> typing.Optional[builtins.str]:
7297
- '''The name of the IAM execution role to use to create the stack set.
7298
+ '''The name of the IAM execution role to use to create the StackSet.
7298
7299
 
7299
- If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation.
7300
+ If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the StackSet operation.
7300
7301
 
7301
7302
  Valid only if the permissions model is ``SELF_MANAGED`` .
7302
7303
 
@@ -7316,7 +7317,7 @@ class CfnStackSetProps:
7316
7317
 
7317
7318
  If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting.
7318
7319
 
7319
- You can't modify your stack set's execution configuration while there are running or queued operations for that stack set.
7320
+ You can't modify your StackSet's execution configuration while there are running or queued operations for that StackSet.
7320
7321
 
7321
7322
  When inactive (default), StackSets performs one operation at a time in request order.
7322
7323
 
@@ -7329,7 +7330,7 @@ class CfnStackSetProps:
7329
7330
  def operation_preferences(
7330
7331
  self,
7331
7332
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnStackSet.OperationPreferencesProperty]]:
7332
- '''The user-specified preferences for how CloudFormation performs a stack set operation.
7333
+ '''The user-specified preferences for how CloudFormation performs a StackSet operation.
7333
7334
 
7334
7335
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-operationpreferences
7335
7336
  '''
@@ -7340,7 +7341,7 @@ class CfnStackSetProps:
7340
7341
  def parameters(
7341
7342
  self,
7342
7343
  ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnStackSet.ParameterProperty]]]]:
7343
- '''The input parameters for the stack set template.
7344
+ '''The input parameters for the StackSet template.
7344
7345
 
7345
7346
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-parameters
7346
7347
  '''
@@ -7990,7 +7991,7 @@ class CfnWaitCondition(
7990
7991
  ):
7991
7992
  '''The ``AWS::CloudFormation::WaitCondition`` resource provides a way to coordinate stack resource creation with configuration actions that are external to the stack creation or to track the status of a configuration process.
7992
7993
 
7993
- In these situations, we recommend that you associate a ``CreationPolicy`` attribute with the wait condition instead of using a wait condition handle. For more information and an example, see `CreationPolicy attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-creationpolicy.html>`_ in the *AWS CloudFormation User Guide* . If you use a ``CreationPolicy`` with a wait condition, don't specify any of the wait condition's properties.
7994
+ In these situations, we recommend that you associate a ``CreationPolicy`` attribute with the wait condition instead of using a wait condition handle. For more information and an example, see `CreationPolicy attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-attribute-creationpolicy.html>`_ in the *AWS CloudFormation User Guide* . If you use a ``CreationPolicy`` with a wait condition, don't specify any of the wait condition's properties.
7994
7995
  .. epigraph::
7995
7996
 
7996
7997
  If you use AWS PrivateLink , resources in the VPC that respond to wait conditions must have access to CloudFormation , specific Amazon S3 buckets. Resources must send wait condition responses to a presigned Amazon S3 URL. If they can't send responses to Amazon S3 , CloudFormation won't receive a response and the stack operation fails. For more information, see `Access CloudFormation using an interface endpoint ( AWS PrivateLink ) <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/vpc-interface-endpoints.html>`_ in the *AWS CloudFormation User Guide* . > For Amazon EC2 and Auto Scaling resources, we recommend that you use a ``CreationPolicy`` attribute instead of wait conditions. Add a ``CreationPolicy`` attribute to those resources, and use the ``cfn-signal`` helper script to signal when an instance creation process has completed successfully.
@@ -8077,7 +8078,8 @@ class CfnWaitCondition(
8077
8078
  @builtins.property
8078
8079
  @jsii.member(jsii_name="attrId")
8079
8080
  def attr_id(self) -> builtins.str:
8080
- '''
8081
+ '''Returns a unique identifier for the resource.
8082
+
8081
8083
  :cloudformationAttribute: Id
8082
8084
  '''
8083
8085
  return typing.cast(builtins.str, jsii.get(self, "attrId"))
@@ -8202,7 +8204,7 @@ class CfnWaitConditionHandle(
8202
8204
  @builtins.property
8203
8205
  @jsii.member(jsii_name="attrId")
8204
8206
  def attr_id(self) -> builtins.str:
8205
- '''A unique identifier for the resource.
8207
+ '''Returns a unique identifier for the resource.
8206
8208
 
8207
8209
  :cloudformationAttribute: Id
8208
8210
  '''