aws-cdk-lib 2.209.1__py3-none-any.whl → 2.211.0__py3-none-any.whl

aws_cdk/aws_evs/__init__.py

@@ -85,11 +85,7 @@ class CfnEnvironment(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_evs.CfnEnvironment",
 ):
-    '''.. epigraph::
-
-   Amazon EVS is in public preview release and is subject to change.
-
-    Creates an Amazon EVS environment that runs VCF software, such as SDDC Manager, NSX Manager, and vCenter Server.
+    '''Creates an Amazon EVS environment that runs VCF software, such as SDDC Manager, NSX Manager, and vCenter Server.
 
     During environment creation, Amazon EVS performs validations on DNS settings, provisions VLAN subnets and hosts, and deploys the supplied version of VCF.
 
@@ -214,7 +210,7 @@ class CfnEnvironment(
         :param license_info: The license information that Amazon EVS requires to create an environment. Amazon EVS requires two license keys: a VCF solution key and a vSAN license key. The VCF solution key must cover a minimum of 256 cores. The vSAN license key must provide at least 110 TiB of vSAN capacity.
         :param service_access_subnet_id: The subnet that is used to establish connectivity between the Amazon EVS control plane and VPC. Amazon EVS uses this subnet to perform validations and create the environment.
         :param site_id: The Broadcom Site ID that is associated with your Amazon EVS environment. Amazon EVS uses the Broadcom Site ID that you provide to meet Broadcom VCF license usage reporting requirements for Amazon EVS.
-        :param terms_accepted: Customer confirmation that the customer has purchased and will continue to maintain the required number of VCF software licenses to cover all physical processor cores in the Amazon EVS environment. Information about your VCF software in Amazon EVS will be shared with Broadcom to verify license compliance.
+        :param terms_accepted: Customer confirmation that the customer has purchased and will continue to maintain the required number of VCF software licenses to cover all physical processor cores in the Amazon EVS environment. Information about your VCF software in Amazon EVS will be shared with Broadcom to verify license compliance. Amazon EVS does not validate license keys. To validate license keys, visit the Broadcom support portal.
         :param vcf_hostnames: The DNS hostnames to be used by the VCF management appliances in your environment. For environment creation to be successful, each hostname entry must resolve to a domain name that you've registered in your DNS service of choice and configured in the DHCP option set of your VPC. DNS hostnames cannot be changed after environment creation has started.
         :param vcf_version: The VCF version of the environment.
         :param vpc_id: The VPC associated with the environment.
@@ -613,11 +609,7 @@ class CfnEnvironment(
             type: builtins.str,
             impaired_since: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''.. epigraph::
-
-   Amazon EVS is in public preview release and is subject to change.
-
-            A check on the environment to identify environment health and validate VMware VCF licensing compliance.
+            '''A check on the environment to identify environment health and validate VMware VCF licensing compliance.
 
             :param result: The check result.
             :param type: The check type. Amazon EVS performs the following checks. - ``KEY_REUSE`` : checks that the VCF license key is not used by another Amazon EVS environment. This check fails if a used license is added to the environment. - ``KEY_COVERAGE`` : checks that your VCF license key allocates sufficient vCPU cores for all deployed hosts. The check fails when any assigned hosts in the EVS environment are not covered by license keys, or when any unassigned hosts cannot be covered by available vCPU cores in keys. - ``REACHABILITY`` : checks that the Amazon EVS control plane has a persistent connection to SDDC Manager. If Amazon EVS cannot reach the environment, this check fails. - ``HOST_COUNT`` : Checks that your environment has a minimum of 4 hosts, which is a requirement for VCF 5.2.1. If this check fails, you will need to add hosts so that your environment meets this minimum requirement. Amazon EVS only supports environments with 4-16 hosts.
@@ -710,11 +702,9 @@ class CfnEnvironment(
             *,
             private_route_server_peerings: typing.Sequence[builtins.str],
         ) -> None:
-            '''.. epigraph::
+            '''The connectivity configuration for the environment.
 
-   Amazon EVS is in public preview release and is subject to change.
-
-            The connectivity configuration for the environment. Amazon EVS requires that you specify two route server peer IDs. During environment creation, the route server endpoints peer with the NSX uplink VLAN for connectivity to the NSX overlay network.
+            Amazon EVS requires that you specify two route server peer IDs. During environment creation, the route server endpoints peer with the NSX uplink VLAN for connectivity to the NSX overlay network.
 
             :param private_route_server_peerings: The unique IDs for private route server peers.
 
@@ -780,11 +770,8 @@ class CfnEnvironment(
             dedicated_host_id: typing.Optional[builtins.str] = None,
             placement_group_id: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''.. epigraph::
-
-   Amazon EVS is in public preview release and is subject to change.
+            '''An object that represents a host.
 
-            An object that represents a host.
             .. epigraph::
 
                You cannot use ``dedicatedHostId`` and ``placementGroupId`` together in the same ``HostInfoForCreate`` object. This results in a ``ValidationException`` response.
@@ -899,11 +886,9 @@ class CfnEnvironment(
     )
     class InitialVlanInfoProperty:
         def __init__(self, *, cidr: builtins.str) -> None:
-            '''.. epigraph::
-
-   Amazon EVS is in public preview release and is subject to change.
+            '''An object that represents an initial VLAN subnet for the Amazon EVS environment.
 
-            An object that represents an initial VLAN subnet for the Amazon EVS environment. Amazon EVS creates initial VLAN subnets when you first create the environment. Amazon EVS creates the following 10 VLAN subnets: host management VLAN, vMotion VLAN, vSAN VLAN, VTEP VLAN, Edge VTEP VLAN, Management VM VLAN, HCX uplink VLAN, NSX uplink VLAN, expansion VLAN 1, expansion VLAN 2.
+            Amazon EVS creates initial VLAN subnets when you first create the environment. Amazon EVS creates the following 10 VLAN subnets: host management VLAN, vMotion VLAN, vSAN VLAN, VTEP VLAN, Edge VTEP VLAN, Management VM VLAN, HCX uplink VLAN, NSX uplink VLAN, expansion VLAN 1, expansion VLAN 2.
             .. epigraph::
 
                For each Amazon EVS VLAN subnet, you must specify a non-overlapping CIDR block. Amazon EVS VLAN subnets have a minimum CIDR block size of /28 and a maximum size of /24.
@@ -984,11 +969,9 @@ class CfnEnvironment(
             v_san: typing.Union[_IResolvable_da3f097b, typing.Union["CfnEnvironment.InitialVlanInfoProperty", typing.Dict[builtins.str, typing.Any]]],
             v_tep: typing.Union[_IResolvable_da3f097b, typing.Union["CfnEnvironment.InitialVlanInfoProperty", typing.Dict[builtins.str, typing.Any]]],
         ) -> None:
-            '''.. epigraph::
+            '''The initial VLAN subnets for the environment.
 
-   Amazon EVS is in public preview release and is subject to change.
-
-            The initial VLAN subnets for the environment. Amazon EVS VLAN subnets have a minimum CIDR block size of /28 and a maximum size of /24. Amazon EVS VLAN subnet CIDR blocks must not overlap with other subnets in the VPC.
+            Amazon EVS VLAN subnets have a minimum CIDR block size of /28 and a maximum size of /24. Amazon EVS VLAN subnet CIDR blocks must not overlap with other subnets in the VPC.
 
             :param edge_v_tep: The edge VTEP VLAN subnet. This VLAN subnet manages traffic flowing between the internal network and external networks, including internet access and other site connections.
             :param expansion_vlan1: An additional VLAN subnet that can be used to extend VCF capabilities once configured. For example, you can configure an expansion VLAN subnet to use NSX Federation for centralized management and synchronization of multiple NSX deployments across different locations.
@@ -1231,11 +1214,9 @@ class CfnEnvironment(
             solution_key: builtins.str,
             vsan_key: builtins.str,
         ) -> None:
-            '''.. epigraph::
+            '''The license information that Amazon EVS requires to create an environment.
 
-   Amazon EVS is in public preview release and is subject to change.
-
-            The license information that Amazon EVS requires to create an environment. Amazon EVS requires two license keys: a VCF solution key and a vSAN license key.
+            Amazon EVS requires two license keys: a VCF solution key and a vSAN license key.
 
             :param solution_key: The VCF solution key. This license unlocks VMware VCF product features, including vSphere, NSX, SDDC Manager, and vCenter Server. The VCF solution key must cover a minimum of 256 cores.
             :param vsan_key: The VSAN license key. This license unlocks vSAN features. The vSAN license key must provide at least 110 TiB of vSAN capacity.
@@ -1305,11 +1286,9 @@ class CfnEnvironment(
     )
     class SecretProperty:
         def __init__(self, *, secret_arn: typing.Optional[builtins.str] = None) -> None:
-            '''.. epigraph::
+            '''A managed secret that contains the credentials for installing vCenter Server, NSX, and SDDC Manager.
 
-   Amazon EVS is in public preview release and is subject to change.
-
-            A managed secret that contains the credentials for installing vCenter Server, NSX, and SDDC Manager. During environment creation, the Amazon EVS control plane uses AWS Secrets Manager to create, encrypt, validate, and store secrets. If you choose to delete your environment, Amazon EVS also deletes the secrets that are associated with your environment. Amazon EVS does not provide managed rotation of secrets. We recommend that you rotate secrets regularly to ensure that secrets are not long-lived.
+            During environment creation, the Amazon EVS control plane uses AWS Secrets Manager to create, encrypt, validate, and store secrets. If you choose to delete your environment, Amazon EVS also deletes the secrets that are associated with your environment. Amazon EVS does not provide managed rotation of secrets. We recommend that you rotate secrets regularly to ensure that secrets are not long-lived.
 
             :param secret_arn: The Amazon Resource Name (ARN) of the secret.
 
@@ -1364,11 +1343,9 @@ class CfnEnvironment(
             *,
             security_groups: typing.Optional[typing.Sequence[builtins.str]] = None,
         ) -> None:
-            '''.. epigraph::
-
-   Amazon EVS is in public preview release and is subject to change.
+            '''The security groups that allow traffic between the Amazon EVS control plane and your VPC for Amazon EVS service access.
 
-            The security groups that allow traffic between the Amazon EVS control plane and your VPC for Amazon EVS service access. If a security group is not specified, Amazon EVS uses the default security group in your account for service access.
+            If a security group is not specified, Amazon EVS uses the default security group in your account for service access.
 
             :param security_groups: The security groups that allow service access.
 
@@ -1441,11 +1418,9 @@ class CfnEnvironment(
             sddc_manager: builtins.str,
             v_center: builtins.str,
         ) -> None:
-            '''.. epigraph::
-
-   Amazon EVS is in public preview release and is subject to change.
+            '''The DNS hostnames that Amazon EVS uses to install VMware vCenter Server, NSX, SDDC Manager, and Cloud Builder.
 
-            The DNS hostnames that Amazon EVS uses to install VMware vCenter Server, NSX, SDDC Manager, and Cloud Builder. Each hostname must be unique, and resolve to a domain name that you've registered in your DNS service of choice. Hostnames cannot be changed.
+            Each hostname must be unique, and resolve to a domain name that you've registered in your DNS service of choice. Hostnames cannot be changed.
 
             VMware VCF requires the deployment of two NSX Edge nodes, and three NSX Manager virtual machines.
 
@@ -1650,7 +1625,7 @@ class CfnEnvironmentProps:
         :param license_info: The license information that Amazon EVS requires to create an environment. Amazon EVS requires two license keys: a VCF solution key and a vSAN license key. The VCF solution key must cover a minimum of 256 cores. The vSAN license key must provide at least 110 TiB of vSAN capacity.
         :param service_access_subnet_id: The subnet that is used to establish connectivity between the Amazon EVS control plane and VPC. Amazon EVS uses this subnet to perform validations and create the environment.
         :param site_id: The Broadcom Site ID that is associated with your Amazon EVS environment. Amazon EVS uses the Broadcom Site ID that you provide to meet Broadcom VCF license usage reporting requirements for Amazon EVS.
-        :param terms_accepted: Customer confirmation that the customer has purchased and will continue to maintain the required number of VCF software licenses to cover all physical processor cores in the Amazon EVS environment. Information about your VCF software in Amazon EVS will be shared with Broadcom to verify license compliance.
+        :param terms_accepted: Customer confirmation that the customer has purchased and will continue to maintain the required number of VCF software licenses to cover all physical processor cores in the Amazon EVS environment. Information about your VCF software in Amazon EVS will be shared with Broadcom to verify license compliance. Amazon EVS does not validate license keys. To validate license keys, visit the Broadcom support portal.
         :param vcf_hostnames: The DNS hostnames to be used by the VCF management appliances in your environment. For environment creation to be successful, each hostname entry must resolve to a domain name that you've registered in your DNS service of choice and configured in the DHCP option set of your VPC. DNS hostnames cannot be changed after environment creation has started.
         :param vcf_version: The VCF version of the environment.
         :param vpc_id: The VPC associated with the environment.
@@ -1843,7 +1818,7 @@ class CfnEnvironmentProps:
     def terms_accepted(self) -> typing.Union[builtins.bool, _IResolvable_da3f097b]:
         '''Customer confirmation that the customer has purchased and will continue to maintain the required number of VCF software licenses to cover all physical processor cores in the Amazon EVS environment.
 
-        Information about your VCF software in Amazon EVS will be shared with Broadcom to verify license compliance.
+        Information about your VCF software in Amazon EVS will be shared with Broadcom to verify license compliance. Amazon EVS does not validate license keys. To validate license keys, visit the Broadcom support portal.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-evs-environment.html#cfn-evs-environment-termsaccepted
         '''

aws_cdk/aws_iot/__init__.py

@@ -5706,6 +5706,332 @@ class CfnDomainConfigurationProps:
         )
 
 
+@jsii.implements(_IInspectable_c2943556)
+class CfnEncryptionConfiguration(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_iot.CfnEncryptionConfiguration",
+):
+    '''Resource Type definition for AWS::IoT::EncryptionConfiguration.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html
+    :cloudformationResource: AWS::IoT::EncryptionConfiguration
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_iot as iot
+        
+        cfn_encryption_configuration = iot.CfnEncryptionConfiguration(self, "MyCfnEncryptionConfiguration",
+            encryption_type="encryptionType",
+        
+            # the properties below are optional
+            kms_access_role_arn="kmsAccessRoleArn",
+            kms_key_arn="kmsKeyArn"
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        encryption_type: builtins.str,
+        kms_access_role_arn: typing.Optional[builtins.str] = None,
+        kms_key_arn: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param encryption_type: 
+        :param kms_access_role_arn: 
+        :param kms_key_arn: 
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__590a310b1ce9a41bd611fc7e92d5bb9381ff548973b6322c201006617fc000f1)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnEncryptionConfigurationProps(
+            encryption_type=encryption_type,
+            kms_access_role_arn=kms_access_role_arn,
+            kms_key_arn=kms_key_arn,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__233141f5c147d73830fe3e9d9d504b3652e1d15f02ed8b705668c8e28e9b750c)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5cd2e788d7ff1c10202a0e433dda70ca35befefeabdbfc3016d8016e6cf1ed37)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrAccountId")
+    def attr_account_id(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: AccountId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrAccountId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrConfigurationDetails")
+    def attr_configuration_details(self) -> _IResolvable_da3f097b:
+        '''
+        :cloudformationAttribute: ConfigurationDetails
+        '''
+        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrConfigurationDetails"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrLastModifiedDate")
+    def attr_last_modified_date(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: LastModifiedDate
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrLastModifiedDate"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="encryptionType")
+    def encryption_type(self) -> builtins.str:
+        return typing.cast(builtins.str, jsii.get(self, "encryptionType"))
+
+    @encryption_type.setter
+    def encryption_type(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7fba231b8f68aa059f7c06875e959b3f3bd5636f6165991d32e54a5cc6d0bcd5)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "encryptionType", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="kmsAccessRoleArn")
+    def kms_access_role_arn(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsAccessRoleArn"))
+
+    @kms_access_role_arn.setter
+    def kms_access_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c7090d98481b34dbf2479198088f6a73b9c942d4517672b8d308682e61d5dbba)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "kmsAccessRoleArn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="kmsKeyArn")
+    def kms_key_arn(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsKeyArn"))
+
+    @kms_key_arn.setter
+    def kms_key_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__19b09278cd32890a2953a31edf28ad2ac6b609136b5854732d407ccb4b6766d9)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "kmsKeyArn", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_iot.CfnEncryptionConfiguration.ConfigurationDetailsProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "configuration_status": "configurationStatus",
+            "error_code": "errorCode",
+            "error_message": "errorMessage",
+        },
+    )
+    class ConfigurationDetailsProperty:
+        def __init__(
+            self,
+            *,
+            configuration_status: typing.Optional[builtins.str] = None,
+            error_code: typing.Optional[builtins.str] = None,
+            error_message: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''
+            :param configuration_status: 
+            :param error_code: 
+            :param error_message: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-encryptionconfiguration-configurationdetails.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_iot as iot
+                
+                configuration_details_property = iot.CfnEncryptionConfiguration.ConfigurationDetailsProperty(
+                    configuration_status="configurationStatus",
+                    error_code="errorCode",
+                    error_message="errorMessage"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__177ce092c0e88e844eafa9e6b2f72e02413a4aecda7bf05efcdfd6fbf7857eff)
+                check_type(argname="argument configuration_status", value=configuration_status, expected_type=type_hints["configuration_status"])
+                check_type(argname="argument error_code", value=error_code, expected_type=type_hints["error_code"])
+                check_type(argname="argument error_message", value=error_message, expected_type=type_hints["error_message"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if configuration_status is not None:
+                self._values["configuration_status"] = configuration_status
+            if error_code is not None:
+                self._values["error_code"] = error_code
+            if error_message is not None:
+                self._values["error_message"] = error_message
+
+        @builtins.property
+        def configuration_status(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-encryptionconfiguration-configurationdetails.html#cfn-iot-encryptionconfiguration-configurationdetails-configurationstatus
+            '''
+            result = self._values.get("configuration_status")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def error_code(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-encryptionconfiguration-configurationdetails.html#cfn-iot-encryptionconfiguration-configurationdetails-errorcode
+            '''
+            result = self._values.get("error_code")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def error_message(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-encryptionconfiguration-configurationdetails.html#cfn-iot-encryptionconfiguration-configurationdetails-errormessage
+            '''
+            result = self._values.get("error_message")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "ConfigurationDetailsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_iot.CfnEncryptionConfigurationProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "encryption_type": "encryptionType",
+        "kms_access_role_arn": "kmsAccessRoleArn",
+        "kms_key_arn": "kmsKeyArn",
+    },
+)
+class CfnEncryptionConfigurationProps:
+    def __init__(
+        self,
+        *,
+        encryption_type: builtins.str,
+        kms_access_role_arn: typing.Optional[builtins.str] = None,
+        kms_key_arn: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnEncryptionConfiguration``.
+
+        :param encryption_type: 
+        :param kms_access_role_arn: 
+        :param kms_key_arn: 
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_iot as iot
+            
+            cfn_encryption_configuration_props = iot.CfnEncryptionConfigurationProps(
+                encryption_type="encryptionType",
+            
+                # the properties below are optional
+                kms_access_role_arn="kmsAccessRoleArn",
+                kms_key_arn="kmsKeyArn"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__336ea497535e43391cf9df6341fe126d948316050e95d2d41cb831737802b9ab)
+            check_type(argname="argument encryption_type", value=encryption_type, expected_type=type_hints["encryption_type"])
+            check_type(argname="argument kms_access_role_arn", value=kms_access_role_arn, expected_type=type_hints["kms_access_role_arn"])
+            check_type(argname="argument kms_key_arn", value=kms_key_arn, expected_type=type_hints["kms_key_arn"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "encryption_type": encryption_type,
+        }
+        if kms_access_role_arn is not None:
+            self._values["kms_access_role_arn"] = kms_access_role_arn
+        if kms_key_arn is not None:
+            self._values["kms_key_arn"] = kms_key_arn
+
+    @builtins.property
+    def encryption_type(self) -> builtins.str:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#cfn-iot-encryptionconfiguration-encryptiontype
+        '''
+        result = self._values.get("encryption_type")
+        assert result is not None, "Required property 'encryption_type' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def kms_access_role_arn(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#cfn-iot-encryptionconfiguration-kmsaccessrolearn
+        '''
+        result = self._values.get("kms_access_role_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def kms_key_arn(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#cfn-iot-encryptionconfiguration-kmskeyarn
+        '''
+        result = self._values.get("kms_key_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnEncryptionConfigurationProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
 class CfnFleetMetric(
     _CfnResource_9df397a6,
@@ -21300,6 +21626,8 @@ __all__ = [
     "CfnDimensionProps",
     "CfnDomainConfiguration",
     "CfnDomainConfigurationProps",
+    "CfnEncryptionConfiguration",
+    "CfnEncryptionConfigurationProps",
     "CfnFleetMetric",
     "CfnFleetMetricProps",
     "CfnJobTemplate",
@@ -22270,6 +22598,65 @@ def _typecheckingstub__af698e1a1ead0a2d7000837dd712796a150772065ad59ab9baf10a759
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__590a310b1ce9a41bd611fc7e92d5bb9381ff548973b6322c201006617fc000f1(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    encryption_type: builtins.str,
+    kms_access_role_arn: typing.Optional[builtins.str] = None,
+    kms_key_arn: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__233141f5c147d73830fe3e9d9d504b3652e1d15f02ed8b705668c8e28e9b750c(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5cd2e788d7ff1c10202a0e433dda70ca35befefeabdbfc3016d8016e6cf1ed37(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__7fba231b8f68aa059f7c06875e959b3f3bd5636f6165991d32e54a5cc6d0bcd5(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c7090d98481b34dbf2479198088f6a73b9c942d4517672b8d308682e61d5dbba(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__19b09278cd32890a2953a31edf28ad2ac6b609136b5854732d407ccb4b6766d9(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__177ce092c0e88e844eafa9e6b2f72e02413a4aecda7bf05efcdfd6fbf7857eff(
+    *,
+    configuration_status: typing.Optional[builtins.str] = None,
+    error_code: typing.Optional[builtins.str] = None,
+    error_message: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__336ea497535e43391cf9df6341fe126d948316050e95d2d41cb831737802b9ab(
+    *,
+    encryption_type: builtins.str,
+    kms_access_role_arn: typing.Optional[builtins.str] = None,
+    kms_key_arn: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__3b4b6a6d0b19c68229922afca72d9918cdfd5933a93f8ad694fe94bccab652c5(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,