aws-cdk-lib 2.212.0__py3-none-any.whl → 2.214.0__py3-none-any.whl

aws_cdk/aws_dynamodb/__init__.py

@@ -18,7 +18,9 @@ By default, `TableV2` will create a single table in the main deployment region r
 ```python
 table = dynamodb.TableV2(self, "Table",
     partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
-    contributor_insights=True,
+    contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+        enabled=True
+    ),
     table_class=dynamodb.TableClass.STANDARD_INFREQUENT_ACCESS,
     point_in_time_recovery_specification=dynamodb.PointInTimeRecoverySpecification(
         point_in_time_recovery_enabled=True
@@ -68,12 +70,12 @@ global_table.add_replica(region="us-east-2", deletion_protection=True)
 
 The following properties are configurable on a per-replica basis, but will be inherited from the `TableV2` properties if not specified:
 
-* contributorInsights
+* contributorInsightsSpecification
 * deletionProtection
 * pointInTimeRecoverySpecification
 * tableClass
 * readCapacity (only configurable if the `TableV2` billing mode is `PROVISIONED`)
-* globalSecondaryIndexes (only `contributorInsights` and `readCapacity`)
+* globalSecondaryIndexes (only `contributorInsightsSpecification` and `readCapacity`)
 
 The following example shows how to define properties on a per-replica basis:
 
@@ -86,7 +88,9 @@ stack = cdk.Stack(app, "Stack", env=cdk.Environment(region="us-west-2"))
 
 global_table = dynamodb.TableV2(stack, "GlobalTable",
     partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
-    contributor_insights=True,
+    contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+        enabled=True
+    ),
     point_in_time_recovery_specification=dynamodb.PointInTimeRecoverySpecification(
         point_in_time_recovery_enabled=True
     ),
@@ -98,7 +102,9 @@ global_table = dynamodb.TableV2(stack, "GlobalTable",
         )
     ), dynamodb.ReplicaTableProps(
         region="us-east-2",
-        contributor_insights=False
+        contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+            enabled=False
+        )
     )
     ]
 )
@@ -430,7 +436,7 @@ table = dynamodb.TableV2(self, "Table",
 )
 ```
 
-All `globalSecondaryIndexes` for replica tables are inherited from the primary table. You can configure `contributorInsights` and `readCapacity` for each `globalSecondaryIndex` on a per-replica basis:
+All `globalSecondaryIndexes` for replica tables are inherited from the primary table. You can configure `contributorInsightsSpecification` and `readCapacity` for each `globalSecondaryIndex` on a per-replica basis:
 
 ```python
 import aws_cdk as cdk
@@ -441,7 +447,9 @@ stack = cdk.Stack(app, "Stack", env=cdk.Environment(region="us-west-2"))
 
 global_table = dynamodb.TableV2(stack, "GlobalTable",
     partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
-    contributor_insights=True,
+    contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+        enabled=True
+    ),
     billing=dynamodb.Billing.provisioned(
         read_capacity=dynamodb.Capacity.fixed(10),
         write_capacity=dynamodb.Capacity.autoscaled(max_capacity=10)
@@ -468,7 +476,9 @@ global_table = dynamodb.TableV2(stack, "GlobalTable",
         region="us-east-2",
         global_secondary_index_options={
             "gsi2": dynamodb.ReplicaGlobalSecondaryIndexOptions(
-                contributor_insights=False
+                contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+                    enabled=False
+                )
             )
         }
     )
@@ -586,25 +596,37 @@ table = dynamodb.TableV2(self, "Table",
 
 ## Contributor Insights
 
-Enabling `contributorInsights` for `TableV2` will provide information about the most accessed and throttled items in a table or `globalSecondaryIndex`. DynamoDB delivers this information to you via CloudWatch Contributor Insights rules, reports, and graphs of report data.
+Enabling `contributorInsightSpecification` for `TableV2` will provide information about the most accessed and throttled or throttled only items in a table or `globalSecondaryIndex`. DynamoDB delivers this information to you via CloudWatch Contributor Insights rules, reports, and graphs of report data.
+
+By default, Contributor Insights for DynamoDB monitors all requests, including both the most accessed and most throttled items.
+To limit the scope to only the most accessed or only the most throttled items, use the optional `mode` parameter.
+
+* To monitor all traffic on a table or index, set `mode` to `ContributorInsightsMode.ACCESSED_AND_THROTTLED_KEYS`.
+* To monitor only throttled traffic on a table or index, set `mode` to `ContributorInsightsMode.THROTTLED_KEYS`.
 
 ```python
 table = dynamodb.TableV2(self, "Table",
     partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
-    contributor_insights=True
+    contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+        enabled=True,
+        mode=dynamodb.ContributorInsightsMode.ACCESSED_AND_THROTTLED_KEYS
+    )
 )
 ```
 
-When you use `Table`, you can enable contributor insights for a table or specific global secondary index by setting `contributorInsightsEnabled` to `true`.
+When you use `Table`, you can enable contributor insights for a table or specific global secondary index by setting `contributorInsightsSpecification` parameter `enabled` to `true`.
 
 ```python
 table = dynamodb.Table(self, "Table",
     partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
-    contributor_insights_enabled=True
+    contributor_insights_specification=dynamodb.ContributorInsightsSpecification( # for a table
+        enabled=True,
+        mode=dynamodb.ContributorInsightsMode.THROTTLED_KEYS)
 )
 
 table.add_global_secondary_index(
-    contributor_insights_enabled=True,  # for a specific global secondary index
+    contributor_insights_specification=dynamodb.ContributorInsightsSpecification( # for a specific global secondary index
+        enabled=True),
     index_name="gsi",
     partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING)
 )
@@ -2376,7 +2398,7 @@ class CfnGlobalTable(
             '''Configures contributor insights settings for a replica or one of its indexes.
 
             :param enabled: Indicates whether CloudWatch Contributor Insights are to be enabled (true) or disabled (false).
-            :param mode: 
+            :param mode: Specifies the CloudWatch Contributor Insights mode for a global table. Valid values are ``ACCESSED_AND_THROTTLED_KEYS`` (tracks all access and throttled events) or ``THROTTLED_KEYS`` (tracks only throttled events). This setting determines what type of contributor insights data is collected for the global table.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-contributorinsightsspecification.html
             :exampleMetadata: fixture=_generated
@@ -2416,7 +2438,10 @@ class CfnGlobalTable(
 
         @builtins.property
         def mode(self) -> typing.Optional[builtins.str]:
-            '''
+            '''Specifies the CloudWatch Contributor Insights mode for a global table.
+
+            Valid values are ``ACCESSED_AND_THROTTLED_KEYS`` (tracks all access and throttled events) or ``THROTTLED_KEYS`` (tracks only throttled events). This setting determines what type of contributor insights data is collected for the global table.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-contributorinsightsspecification.html#cfn-dynamodb-globaltable-contributorinsightsspecification-mode
             '''
             result = self._values.get("mode")
@@ -5242,7 +5267,7 @@ class CfnTable(
         :param key_schema: Specifies the attributes that make up the primary key for the table. The attributes in the ``KeySchema`` property must also be defined in the ``AttributeDefinitions`` property.
         :param attribute_definitions: A list of attributes that describe the key schema for the table and indexes. This property is required to create a DynamoDB table. Update requires: `Some interruptions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt>`_ . Replacement if you edit an existing AttributeDefinition.
         :param billing_mode: Specify how you are charged for read and write throughput and how you manage capacity. Valid values include: - ``PAY_PER_REQUEST`` - We recommend using ``PAY_PER_REQUEST`` for most DynamoDB workloads. ``PAY_PER_REQUEST`` sets the billing mode to `On-demand capacity mode <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/on-demand-capacity-mode.html>`_ . - ``PROVISIONED`` - We recommend using ``PROVISIONED`` for steady workloads with predictable growth where capacity requirements can be reliably forecasted. ``PROVISIONED`` sets the billing mode to `Provisioned capacity mode <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/provisioned-capacity-mode.html>`_ . If not specified, the default is ``PROVISIONED`` .
-        :param contributor_insights_specification: The settings used to enable or disable CloudWatch Contributor Insights for the specified table.
+        :param contributor_insights_specification: The settings used to specify whether to enable CloudWatch Contributor Insights for the table and define which events to monitor.
         :param deletion_protection_enabled: Determines if a table is protected from deletion. When enabled, the table cannot be deleted by any user or process. This setting is disabled by default. For more information, see `Using deletion protection <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/WorkingWithTables.Basics.html#WorkingWithTables.Basics.DeletionProtection>`_ in the *Amazon DynamoDB Developer Guide* .
         :param global_secondary_indexes: Global secondary indexes to be created on the table. You can create up to 20 global secondary indexes. .. epigraph:: If you update a table to include a new global secondary index, AWS CloudFormation initiates the index creation and then proceeds with the stack update. AWS CloudFormation doesn't wait for the index to complete creation because the backfilling phase can take a long time, depending on the size of the table. You can't use the index or update the table until the index's status is ``ACTIVE`` . You can track its status by using the DynamoDB `DescribeTable <https://docs.aws.amazon.com/cli/latest/reference/dynamodb/describe-table.html>`_ command. If you add or delete an index during an update, we recommend that you don't update any other resources. If your stack fails to update and is rolled back while adding a new index, you must manually delete the index. Updates are not supported. The following are exceptions: - If you update either the contributor insights specification or the provisioned throughput values of global secondary indexes, you can update the table without interruption. - You can delete or add one global secondary index without interruption. If you do both in the same update (for example, by changing the index's logical ID), the update fails.
         :param import_source_specification: Specifies the properties of data being imported from the S3 bucket source to the" table. .. epigraph:: If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification`` , the ``TableClass`` property, the ``DeletionProtectionEnabled`` property, or the ``WarmThroughput`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission.
@@ -5253,7 +5278,7 @@ class CfnTable(
         :param provisioned_throughput: Throughput for the specified table, which consists of values for ``ReadCapacityUnits`` and ``WriteCapacityUnits`` . For more information about the contents of a provisioned throughput structure, see `Amazon DynamoDB Table ProvisionedThroughput <https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_ProvisionedThroughput.html>`_ . If you set ``BillingMode`` as ``PROVISIONED`` , you must specify this property. If you set ``BillingMode`` as ``PAY_PER_REQUEST`` , you cannot specify this property.
         :param resource_policy: An AWS resource-based policy document in JSON format that will be attached to the table. When you attach a resource-based policy while creating a table, the policy application is *strongly consistent* . The maximum size supported for a resource-based policy document is 20 KB. DynamoDB counts whitespaces when calculating the size of a policy against this limit. For a full list of all considerations that apply for resource-based policies, see `Resource-based policy considerations <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-considerations.html>`_ . .. epigraph:: You need to specify the ``CreateTable`` and ``PutResourcePolicy`` IAM actions for authorizing a user to create a table with a resource-based policy.
         :param sse_specification: Specifies the settings to enable server-side encryption.
-        :param stream_specification: The settings for the DynamoDB table stream, which capture changes to items stored in the table.
+        :param stream_specification: The settings for the DynamoDB table stream, which captures changes to items stored in the table. Including this property in your AWS CloudFormation template automatically enables streaming.
         :param table_class: The table class of the new table. Valid values are ``STANDARD`` and ``STANDARD_INFREQUENT_ACCESS`` .
         :param table_name: A name for the table. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the table name. For more information, see `Name Type <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html>`_ . .. epigraph:: If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
         :param tags: An array of key-value pairs to apply to this resource. For more information, see `Tag <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html>`_ .
@@ -5406,7 +5431,7 @@ class CfnTable(
     def contributor_insights_specification(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnTable.ContributorInsightsSpecificationProperty"]]:
-        '''The settings used to enable or disable CloudWatch Contributor Insights for the specified table.'''
+        '''The settings used to specify whether to enable CloudWatch Contributor Insights for the table and define which events to monitor.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnTable.ContributorInsightsSpecificationProperty"]], jsii.get(self, "contributorInsightsSpecification"))
 
     @contributor_insights_specification.setter
@@ -5607,7 +5632,7 @@ class CfnTable(
     def stream_specification(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnTable.StreamSpecificationProperty"]]:
-        '''The settings for the DynamoDB table stream, which capture changes to items stored in the table.'''
+        '''The settings for the DynamoDB table stream, which captures changes to items stored in the table.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnTable.StreamSpecificationProperty"]], jsii.get(self, "streamSpecification"))
 
     @stream_specification.setter
@@ -5785,10 +5810,10 @@ class CfnTable(
             enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
             mode: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''The settings used to enable or disable CloudWatch Contributor Insights.
+            '''Configures contributor insights settings for a table or one of its indexes.
 
             :param enabled: Indicates whether CloudWatch Contributor Insights are to be enabled (true) or disabled (false).
-            :param mode: 
+            :param mode: Specifies the CloudWatch Contributor Insights mode for a table. Valid values are ``ACCESSED_AND_THROTTLED_KEYS`` (tracks all access and throttled events) or ``THROTTLED_KEYS`` (tracks only throttled events). This setting determines what type of contributor insights data is collected for the table.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-table-contributorinsightsspecification.html
             :exampleMetadata: fixture=_generated
@@ -5828,7 +5853,10 @@ class CfnTable(
 
         @builtins.property
         def mode(self) -> typing.Optional[builtins.str]:
-            '''
+            '''Specifies the CloudWatch Contributor Insights mode for a table.
+
+            Valid values are ``ACCESSED_AND_THROTTLED_KEYS`` (tracks all access and throttled events) or ``THROTTLED_KEYS`` (tracks only throttled events). This setting determines what type of contributor insights data is collected for the table.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-table-contributorinsightsspecification.html#cfn-dynamodb-table-contributorinsightsspecification-mode
             '''
             result = self._values.get("mode")
@@ -5949,7 +5977,7 @@ class CfnTable(
             :param index_name: The name of the global secondary index. The name must be unique among all other indexes on this table.
             :param key_schema: The complete key schema for a global secondary index, which consists of one or more pairs of attribute names and key types: - ``HASH`` - partition key - ``RANGE`` - sort key > The partition key of an item is also known as its *hash attribute* . The term "hash attribute" derives from DynamoDB's usage of an internal hash function to evenly distribute data items across partitions, based on their partition key values. .. epigraph:: The sort key of an item is also known as its *range attribute* . The term "range attribute" derives from the way DynamoDB stores items with the same partition key physically close together, in sorted order by the sort key value.
             :param projection: Represents attributes that are copied (projected) from the table into the global secondary index. These are in addition to the primary key attributes and index key attributes, which are automatically projected.
-            :param contributor_insights_specification: The settings used to enable or disable CloudWatch Contributor Insights for the specified global secondary index.
+            :param contributor_insights_specification: The settings used to specify whether to enable CloudWatch Contributor Insights for the global table and define which events to monitor.
             :param on_demand_throughput: The maximum number of read and write units for the specified global secondary index. If you use this parameter, you must specify ``MaxReadRequestUnits`` , ``MaxWriteRequestUnits`` , or both. You must use either ``OnDemandThroughput`` or ``ProvisionedThroughput`` based on your table's capacity mode.
             :param provisioned_throughput: Represents the provisioned throughput settings for the specified global secondary index. You must use either ``OnDemandThroughput`` or ``ProvisionedThroughput`` based on your table's capacity mode. For current minimum and maximum provisioned throughput values, see `Service, Account, and Table Quotas <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Limits.html>`_ in the *Amazon DynamoDB Developer Guide* .
             :param warm_throughput: Represents the warm throughput value (in read units per second and write units per second) for the specified secondary index. If you use this parameter, you must specify ``ReadUnitsPerSecond`` , ``WriteUnitsPerSecond`` , or both.
@@ -6065,7 +6093,7 @@ class CfnTable(
         def contributor_insights_specification(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnTable.ContributorInsightsSpecificationProperty"]]:
-            '''The settings used to enable or disable CloudWatch Contributor Insights for the specified global secondary index.
+            '''The settings used to specify whether to enable CloudWatch Contributor Insights for the global table and define which events to monitor.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-table-globalsecondaryindex.html#cfn-dynamodb-table-globalsecondaryindex-contributorinsightsspecification
             '''
@@ -7195,7 +7223,7 @@ class CfnTable(
             '''Represents the DynamoDB Streams configuration for a table in DynamoDB.
 
             :param stream_view_type: When an item in the table is modified, ``StreamViewType`` determines what information is written to the stream for this table. Valid values for ``StreamViewType`` are: - ``KEYS_ONLY`` - Only the key attributes of the modified item are written to the stream. - ``NEW_IMAGE`` - The entire item, as it appears after it was modified, is written to the stream. - ``OLD_IMAGE`` - The entire item, as it appeared before it was modified, is written to the stream. - ``NEW_AND_OLD_IMAGES`` - Both the new and the old item images of the item are written to the stream.
-            :param resource_policy: Creates or updates a resource-based policy document that contains the permissions for DynamoDB resources, such as a table's streams. Resource-based policies let you define access permissions by specifying who has access to each resource, and the actions they are allowed to perform on each resource. In a CloudFormation template, you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to DynamoDB . For more information about resource-based policies, see `Using resource-based policies for DynamoDB <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/access-control-resource-based.html>`_ and `Resource-based policy examples <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-examples.html>`_ .
+            :param resource_policy: Creates or updates a resource-based policy document that contains the permissions for DynamoDB resources, such as a table's streams. Resource-based policies let you define access permissions by specifying who has access to each resource, and the actions they are allowed to perform on each resource. .. epigraph:: When you remove the ``StreamSpecification`` property from the template, DynamoDB disables the stream but retains any attached resource policy until the stream is deleted after 24 hours. When you modify the ``StreamViewType`` property, DynamoDB creates a new stream and retains the old stream's resource policy. The old stream and its resource policy are deleted after the 24-hour retention period. In a CloudFormation template, you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to DynamoDB . For more information about resource-based policies, see `Using resource-based policies for DynamoDB <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/access-control-resource-based.html>`_ and `Resource-based policy examples <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-examples.html>`_ .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-table-streamspecification.html
             :exampleMetadata: fixture=_generated
@@ -7251,6 +7279,9 @@ class CfnTable(
             '''Creates or updates a resource-based policy document that contains the permissions for DynamoDB resources, such as a table's streams.
 
             Resource-based policies let you define access permissions by specifying who has access to each resource, and the actions they are allowed to perform on each resource.
+            .. epigraph::
+
+               When you remove the ``StreamSpecification`` property from the template, DynamoDB disables the stream but retains any attached resource policy until the stream is deleted after 24 hours. When you modify the ``StreamViewType`` property, DynamoDB creates a new stream and retains the old stream's resource policy. The old stream and its resource policy are deleted after the 24-hour retention period.
 
             In a CloudFormation template, you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to DynamoDB . For more information about resource-based policies, see `Using resource-based policies for DynamoDB <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/access-control-resource-based.html>`_ and `Resource-based policy examples <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-examples.html>`_ .
 
@@ -7480,7 +7511,7 @@ class CfnTableProps:
         :param key_schema: Specifies the attributes that make up the primary key for the table. The attributes in the ``KeySchema`` property must also be defined in the ``AttributeDefinitions`` property.
         :param attribute_definitions: A list of attributes that describe the key schema for the table and indexes. This property is required to create a DynamoDB table. Update requires: `Some interruptions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt>`_ . Replacement if you edit an existing AttributeDefinition.
         :param billing_mode: Specify how you are charged for read and write throughput and how you manage capacity. Valid values include: - ``PAY_PER_REQUEST`` - We recommend using ``PAY_PER_REQUEST`` for most DynamoDB workloads. ``PAY_PER_REQUEST`` sets the billing mode to `On-demand capacity mode <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/on-demand-capacity-mode.html>`_ . - ``PROVISIONED`` - We recommend using ``PROVISIONED`` for steady workloads with predictable growth where capacity requirements can be reliably forecasted. ``PROVISIONED`` sets the billing mode to `Provisioned capacity mode <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/provisioned-capacity-mode.html>`_ . If not specified, the default is ``PROVISIONED`` .
-        :param contributor_insights_specification: The settings used to enable or disable CloudWatch Contributor Insights for the specified table.
+        :param contributor_insights_specification: The settings used to specify whether to enable CloudWatch Contributor Insights for the table and define which events to monitor.
         :param deletion_protection_enabled: Determines if a table is protected from deletion. When enabled, the table cannot be deleted by any user or process. This setting is disabled by default. For more information, see `Using deletion protection <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/WorkingWithTables.Basics.html#WorkingWithTables.Basics.DeletionProtection>`_ in the *Amazon DynamoDB Developer Guide* .
         :param global_secondary_indexes: Global secondary indexes to be created on the table. You can create up to 20 global secondary indexes. .. epigraph:: If you update a table to include a new global secondary index, AWS CloudFormation initiates the index creation and then proceeds with the stack update. AWS CloudFormation doesn't wait for the index to complete creation because the backfilling phase can take a long time, depending on the size of the table. You can't use the index or update the table until the index's status is ``ACTIVE`` . You can track its status by using the DynamoDB `DescribeTable <https://docs.aws.amazon.com/cli/latest/reference/dynamodb/describe-table.html>`_ command. If you add or delete an index during an update, we recommend that you don't update any other resources. If your stack fails to update and is rolled back while adding a new index, you must manually delete the index. Updates are not supported. The following are exceptions: - If you update either the contributor insights specification or the provisioned throughput values of global secondary indexes, you can update the table without interruption. - You can delete or add one global secondary index without interruption. If you do both in the same update (for example, by changing the index's logical ID), the update fails.
         :param import_source_specification: Specifies the properties of data being imported from the S3 bucket source to the" table. .. epigraph:: If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification`` , the ``TableClass`` property, the ``DeletionProtectionEnabled`` property, or the ``WarmThroughput`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission.
@@ -7491,7 +7522,7 @@ class CfnTableProps:
         :param provisioned_throughput: Throughput for the specified table, which consists of values for ``ReadCapacityUnits`` and ``WriteCapacityUnits`` . For more information about the contents of a provisioned throughput structure, see `Amazon DynamoDB Table ProvisionedThroughput <https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_ProvisionedThroughput.html>`_ . If you set ``BillingMode`` as ``PROVISIONED`` , you must specify this property. If you set ``BillingMode`` as ``PAY_PER_REQUEST`` , you cannot specify this property.
         :param resource_policy: An AWS resource-based policy document in JSON format that will be attached to the table. When you attach a resource-based policy while creating a table, the policy application is *strongly consistent* . The maximum size supported for a resource-based policy document is 20 KB. DynamoDB counts whitespaces when calculating the size of a policy against this limit. For a full list of all considerations that apply for resource-based policies, see `Resource-based policy considerations <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-considerations.html>`_ . .. epigraph:: You need to specify the ``CreateTable`` and ``PutResourcePolicy`` IAM actions for authorizing a user to create a table with a resource-based policy.
         :param sse_specification: Specifies the settings to enable server-side encryption.
-        :param stream_specification: The settings for the DynamoDB table stream, which capture changes to items stored in the table.
+        :param stream_specification: The settings for the DynamoDB table stream, which captures changes to items stored in the table. Including this property in your AWS CloudFormation template automatically enables streaming.
         :param table_class: The table class of the new table. Valid values are ``STANDARD`` and ``STANDARD_INFREQUENT_ACCESS`` .
         :param table_name: A name for the table. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the table name. For more information, see `Name Type <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html>`_ . .. epigraph:: If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
         :param tags: An array of key-value pairs to apply to this resource. For more information, see `Tag <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html>`_ .
@@ -7756,7 +7787,7 @@ class CfnTableProps:
     def contributor_insights_specification(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnTable.ContributorInsightsSpecificationProperty]]:
-        '''The settings used to enable or disable CloudWatch Contributor Insights for the specified table.
+        '''The settings used to specify whether to enable CloudWatch Contributor Insights for the table and define which events to monitor.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html#cfn-dynamodb-table-contributorinsightsspecification
         '''
@@ -7909,7 +7940,9 @@ class CfnTableProps:
     def stream_specification(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnTable.StreamSpecificationProperty]]:
-        '''The settings for the DynamoDB table stream, which capture changes to items stored in the table.
+        '''The settings for the DynamoDB table stream, which captures changes to items stored in the table.
+
+        Including this property in your AWS CloudFormation template automatically enables streaming.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html#cfn-dynamodb-table-streamspecification
         '''
@@ -7990,6 +8023,121 @@ class CfnTableProps:
         )
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_dynamodb.ContributorInsightsMode")
+class ContributorInsightsMode(enum.Enum):
+    '''DynamoDB's Contributor Insights Mode.
+
+    :see: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-dynamodb-table-contributorinsightsspecification.html
+    :exampleMetadata: infused
+
+    Example::
+
+        table = dynamodb.TableV2(self, "Table",
+            partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
+            contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+                enabled=True,
+                mode=dynamodb.ContributorInsightsMode.ACCESSED_AND_THROTTLED_KEYS
+            )
+        )
+    '''
+
+    ACCESSED_AND_THROTTLED_KEYS = "ACCESSED_AND_THROTTLED_KEYS"
+    '''Emits metrics for all read and write requests, whether successful or throttled.'''
+    THROTTLED_KEYS = "THROTTLED_KEYS"
+    '''Emits metrics for read and write requests that were throttled.'''
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_dynamodb.ContributorInsightsSpecification",
+    jsii_struct_bases=[],
+    name_mapping={"enabled": "enabled", "mode": "mode"},
+)
+class ContributorInsightsSpecification:
+    def __init__(
+        self,
+        *,
+        enabled: builtins.bool,
+        mode: typing.Optional[ContributorInsightsMode] = None,
+    ) -> None:
+        '''Reference to ContributorInsightsSpecification.
+
+        :param enabled: Indicates whether contributor insights is enabled. Default: false
+        :param mode: Indicates the type of metrics captured by contributor insights. Default: ACCESSED_AND_THROTTLED_KEYS
+
+        :exampleMetadata: infused
+
+        Example::
+
+            import aws_cdk as cdk
+            
+            
+            app = cdk.App()
+            stack = cdk.Stack(app, "Stack", env=cdk.Environment(region="us-west-2"))
+            
+            global_table = dynamodb.TableV2(stack, "GlobalTable",
+                partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
+                contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+                    enabled=True
+                ),
+                point_in_time_recovery_specification=dynamodb.PointInTimeRecoverySpecification(
+                    point_in_time_recovery_enabled=True
+                ),
+                replicas=[dynamodb.ReplicaTableProps(
+                    region="us-east-1",
+                    table_class=dynamodb.TableClass.STANDARD_INFREQUENT_ACCESS,
+                    point_in_time_recovery_specification=dynamodb.PointInTimeRecoverySpecification(
+                        point_in_time_recovery_enabled=False
+                    )
+                ), dynamodb.ReplicaTableProps(
+                    region="us-east-2",
+                    contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+                        enabled=False
+                    )
+                )
+                ]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__656543bd456aefaef11a80dfb0950fe5597d4bc0465f2f4fdec81a81dfe7358d)
+            check_type(argname="argument enabled", value=enabled, expected_type=type_hints["enabled"])
+            check_type(argname="argument mode", value=mode, expected_type=type_hints["mode"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "enabled": enabled,
+        }
+        if mode is not None:
+            self._values["mode"] = mode
+
+    @builtins.property
+    def enabled(self) -> builtins.bool:
+        '''Indicates whether contributor insights is enabled.
+
+        :default: false
+        '''
+        result = self._values.get("enabled")
+        assert result is not None, "Required property 'enabled' is missing"
+        return typing.cast(builtins.bool, result)
+
+    @builtins.property
+    def mode(self) -> typing.Optional[ContributorInsightsMode]:
+        '''Indicates the type of metrics captured by contributor insights.
+
+        :default: ACCESSED_AND_THROTTLED_KEYS
+        '''
+        result = self._values.get("mode")
+        return typing.cast(typing.Optional[ContributorInsightsMode], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "ContributorInsightsSpecification(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_dynamodb.CsvOptions",
     jsii_struct_bases=[],
@@ -9800,7 +9948,9 @@ class PointInTimeRecoverySpecification:
 
             table = dynamodb.TableV2(self, "Table",
                 partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
-                contributor_insights=True,
+                contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+                    enabled=True
+                ),
                 table_class=dynamodb.TableClass.STANDARD_INFREQUENT_ACCESS,
                 point_in_time_recovery_specification=dynamodb.PointInTimeRecoverySpecification(
                     point_in_time_recovery_enabled=True
@@ -9875,6 +10025,7 @@ class ProjectionType(enum.Enum):
     jsii_struct_bases=[],
     name_mapping={
         "contributor_insights": "contributorInsights",
+        "contributor_insights_specification": "contributorInsightsSpecification",
         "max_read_request_units": "maxReadRequestUnits",
         "read_capacity": "readCapacity",
     },
@@ -9884,12 +10035,14 @@ class ReplicaGlobalSecondaryIndexOptions:
         self,
         *,
         contributor_insights: typing.Optional[builtins.bool] = None,
+        contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
         max_read_request_units: typing.Optional[jsii.Number] = None,
         read_capacity: typing.Optional[Capacity] = None,
     ) -> None:
         '''Options used to configure global secondary indexes on a replica table.
 
-        :param contributor_insights: Whether CloudWatch contributor insights is enabled for a specific global secondary index on a replica table. Default: - inherited from the primary table
+        :param contributor_insights: (deprecated) Whether CloudWatch contributor insights is enabled for a specific global secondary index on a replica table. Default: - inherited from the primary table
+        :param contributor_insights_specification: Whether CloudWatch contributor insights is enabled and what mode is selected for a specific global secondary index on a replica table. Default: - contributor insights is not enabled
         :param max_read_request_units: The maximum read request units for a specific global secondary index on a replica table. Note: This can only be configured if primary table billing is PAY_PER_REQUEST. Default: - inherited from the primary table
         :param read_capacity: The read capacity for a specific global secondary index on a replica table. Note: This can only be configured if primary table billing is provisioned. Default: - inherited from the primary table
 
@@ -9905,7 +10058,9 @@ class ReplicaGlobalSecondaryIndexOptions:
             
             global_table = dynamodb.TableV2(stack, "GlobalTable",
                 partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
-                contributor_insights=True,
+                contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+                    enabled=True
+                ),
                 billing=dynamodb.Billing.provisioned(
                     read_capacity=dynamodb.Capacity.fixed(10),
                     write_capacity=dynamodb.Capacity.autoscaled(max_capacity=10)
@@ -9932,21 +10087,28 @@ class ReplicaGlobalSecondaryIndexOptions:
                     region="us-east-2",
                     global_secondary_index_options={
                         "gsi2": dynamodb.ReplicaGlobalSecondaryIndexOptions(
-                            contributor_insights=False
+                            contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+                                enabled=False
+                            )
                         )
                     }
                 )
                 ]
             )
         '''
+        if isinstance(contributor_insights_specification, dict):
+            contributor_insights_specification = ContributorInsightsSpecification(**contributor_insights_specification)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__eaa3a170e1978a5997011b8319bcd83bf34642dac50e342aad0705ee28b15714)
             check_type(argname="argument contributor_insights", value=contributor_insights, expected_type=type_hints["contributor_insights"])
+            check_type(argname="argument contributor_insights_specification", value=contributor_insights_specification, expected_type=type_hints["contributor_insights_specification"])
             check_type(argname="argument max_read_request_units", value=max_read_request_units, expected_type=type_hints["max_read_request_units"])
             check_type(argname="argument read_capacity", value=read_capacity, expected_type=type_hints["read_capacity"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if contributor_insights is not None:
             self._values["contributor_insights"] = contributor_insights
+        if contributor_insights_specification is not None:
+            self._values["contributor_insights_specification"] = contributor_insights_specification
         if max_read_request_units is not None:
             self._values["max_read_request_units"] = max_read_request_units
         if read_capacity is not None:
@@ -9954,13 +10116,28 @@ class ReplicaGlobalSecondaryIndexOptions:
 
     @builtins.property
     def contributor_insights(self) -> typing.Optional[builtins.bool]:
-        '''Whether CloudWatch contributor insights is enabled for a specific global secondary index on a replica table.
+        '''(deprecated) Whether CloudWatch contributor insights is enabled for a specific global secondary index on a replica table.
 
         :default: - inherited from the primary table
+
+        :deprecated: use ``contributorInsightsSpecification`` instead
+
+        :stability: deprecated
         '''
         result = self._values.get("contributor_insights")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def contributor_insights_specification(
+        self,
+    ) -> typing.Optional[ContributorInsightsSpecification]:
+        '''Whether CloudWatch contributor insights is enabled and what mode is selected for a specific global secondary index on a replica table.
+
+        :default: - contributor insights is not enabled
+        '''
+        result = self._values.get("contributor_insights_specification")
+        return typing.cast(typing.Optional[ContributorInsightsSpecification], result)
+
     @builtins.property
     def max_read_request_units(self) -> typing.Optional[jsii.Number]:
         '''The maximum read request units for a specific global secondary index on a replica table.
@@ -12707,7 +12884,9 @@ class TableClass(enum.Enum):
 
         table = dynamodb.TableV2(self, "Table",
             partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
-            contributor_insights=True,
+            contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+                enabled=True
+            ),
             table_class=dynamodb.TableClass.STANDARD_INFREQUENT_ACCESS,
             point_in_time_recovery_specification=dynamodb.PointInTimeRecoverySpecification(
                 point_in_time_recovery_enabled=True
@@ -12837,6 +13016,7 @@ typing.cast(typing.Any, TableEncryptionV2).__jsii_proxy_class__ = lambda : _Tabl
         "sort_key": "sortKey",
         "billing_mode": "billingMode",
         "contributor_insights_enabled": "contributorInsightsEnabled",
+        "contributor_insights_specification": "contributorInsightsSpecification",
         "deletion_protection": "deletionProtection",
         "encryption": "encryption",
         "encryption_key": "encryptionKey",
@@ -12867,6 +13047,7 @@ class TableOptions(SchemaOptions):
         sort_key: typing.Optional[typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]]] = None,
         billing_mode: typing.Optional[BillingMode] = None,
         contributor_insights_enabled: typing.Optional[builtins.bool] = None,
+        contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         encryption: typing.Optional[TableEncryption] = None,
         encryption_key: typing.Optional[_IKey_5f11635f] = None,
@@ -12895,7 +13076,8 @@ class TableOptions(SchemaOptions):
         :param partition_key: Partition key attribute definition.
         :param sort_key: Sort key attribute definition. Default: no sort key
         :param billing_mode: Specify how you are charged for read and write throughput and how you manage capacity. Default: PROVISIONED if ``replicationRegions`` is not specified, PAY_PER_REQUEST otherwise
-        :param contributor_insights_enabled: Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights_enabled: (deprecated) Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights_specification: Whether CloudWatch contributor insights is enabled and what mode is selected. Default: - contributor insights is not enabled
         :param deletion_protection: Enables deletion protection for the table. Default: false
         :param encryption: Whether server-side encryption with an AWS managed customer master key is enabled. This property cannot be set if ``serverSideEncryption`` is set. .. epigraph:: **NOTE**: if you set this to ``CUSTOMER_MANAGED`` and ``encryptionKey`` is not specified, the key that the Tablet generates for you will be created with default permissions. If you are using CDKv2, these permissions will be sufficient to enable the key for use with DynamoDB tables. If you are using CDKv1, make sure the feature flag ``@aws-cdk/aws-kms:defaultKeyPolicies`` is set to ``true`` in your ``cdk.json``. Default: - The table is encrypted with an encryption key managed by DynamoDB, and you are not charged any fee for using it.
         :param encryption_key: External KMS key to use for table encryption. This property can only be set if ``encryption`` is set to ``TableEncryption.CUSTOMER_MANAGED``. Default: - If ``encryption`` is set to ``TableEncryption.CUSTOMER_MANAGED`` and this property is undefined, a new KMS key will be created and associated with this table. If ``encryption`` and this property are both undefined, then the table is encrypted with an encryption key managed by DynamoDB, and you are not charged any fee for using it.
@@ -12943,6 +13125,12 @@ class TableOptions(SchemaOptions):
                 # the properties below are optional
                 billing_mode=dynamodb.BillingMode.PAY_PER_REQUEST,
                 contributor_insights_enabled=False,
+                contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+                    enabled=False,
+            
+                    # the properties below are optional
+                    mode=dynamodb.ContributorInsightsMode.ACCESSED_AND_THROTTLED_KEYS
+                ),
                 deletion_protection=False,
                 encryption=dynamodb.TableEncryption.DEFAULT,
                 encryption_key=key,
@@ -12989,6 +13177,8 @@ class TableOptions(SchemaOptions):
             partition_key = Attribute(**partition_key)
         if isinstance(sort_key, dict):
             sort_key = Attribute(**sort_key)
+        if isinstance(contributor_insights_specification, dict):
+            contributor_insights_specification = ContributorInsightsSpecification(**contributor_insights_specification)
         if isinstance(import_source, dict):
             import_source = ImportSourceSpecification(**import_source)
         if isinstance(point_in_time_recovery_specification, dict):
@@ -13001,6 +13191,7 @@ class TableOptions(SchemaOptions):
             check_type(argname="argument sort_key", value=sort_key, expected_type=type_hints["sort_key"])
             check_type(argname="argument billing_mode", value=billing_mode, expected_type=type_hints["billing_mode"])
             check_type(argname="argument contributor_insights_enabled", value=contributor_insights_enabled, expected_type=type_hints["contributor_insights_enabled"])
+            check_type(argname="argument contributor_insights_specification", value=contributor_insights_specification, expected_type=type_hints["contributor_insights_specification"])
             check_type(argname="argument deletion_protection", value=deletion_protection, expected_type=type_hints["deletion_protection"])
             check_type(argname="argument encryption", value=encryption, expected_type=type_hints["encryption"])
             check_type(argname="argument encryption_key", value=encryption_key, expected_type=type_hints["encryption_key"])
@@ -13030,6 +13221,8 @@ class TableOptions(SchemaOptions):
             self._values["billing_mode"] = billing_mode
         if contributor_insights_enabled is not None:
             self._values["contributor_insights_enabled"] = contributor_insights_enabled
+        if contributor_insights_specification is not None:
+            self._values["contributor_insights_specification"] = contributor_insights_specification
         if deletion_protection is not None:
             self._values["deletion_protection"] = deletion_protection
         if encryption is not None:
@@ -13098,13 +13291,28 @@ class TableOptions(SchemaOptions):
 
     @builtins.property
     def contributor_insights_enabled(self) -> typing.Optional[builtins.bool]:
-        '''Whether CloudWatch contributor insights is enabled.
+        '''(deprecated) Whether CloudWatch contributor insights is enabled.
 
         :default: false
+
+        :deprecated: use `contributorInsightsSpecification instead
+
+        :stability: deprecated
         '''
         result = self._values.get("contributor_insights_enabled")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def contributor_insights_specification(
+        self,
+    ) -> typing.Optional[ContributorInsightsSpecification]:
+        '''Whether CloudWatch contributor insights is enabled and what mode is selected.
+
+        :default: - contributor insights is not enabled
+        '''
+        result = self._values.get("contributor_insights_specification")
+        return typing.cast(typing.Optional[ContributorInsightsSpecification], result)
+
     @builtins.property
     def deletion_protection(self) -> typing.Optional[builtins.bool]:
         '''Enables deletion protection for the table.
@@ -13369,6 +13577,7 @@ class TableOptions(SchemaOptions):
     jsii_struct_bases=[],
     name_mapping={
         "contributor_insights": "contributorInsights",
+        "contributor_insights_specification": "contributorInsightsSpecification",
         "deletion_protection": "deletionProtection",
         "kinesis_stream": "kinesisStream",
         "point_in_time_recovery": "pointInTimeRecovery",
@@ -13383,6 +13592,7 @@ class TableOptionsV2:
         self,
         *,
         contributor_insights: typing.Optional[builtins.bool] = None,
+        contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         kinesis_stream: typing.Optional[_IStream_4e2457d2] = None,
         point_in_time_recovery: typing.Optional[builtins.bool] = None,
@@ -13393,7 +13603,8 @@ class TableOptionsV2:
     ) -> None:
         '''Options used to configure a DynamoDB table.
 
-        :param contributor_insights: Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights: (deprecated) Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights_specification: Whether CloudWatch contributor insights is enabled and what mode is selected. Default: - contributor insights is not enabled
         :param deletion_protection: Whether deletion protection is enabled. Default: false
         :param kinesis_stream: Kinesis Data Stream to capture item level changes. Default: - no Kinesis Data Stream
         :param point_in_time_recovery: (deprecated) Whether point-in-time recovery is enabled. Default: false - point in time recovery is not enabled.
@@ -13417,6 +13628,12 @@ class TableOptionsV2:
             
             table_options_v2 = dynamodb.TableOptionsV2(
                 contributor_insights=False,
+                contributor_insights_specification=dynamodb.ContributorInsightsSpecification(
+                    enabled=False,
+            
+                    # the properties below are optional
+                    mode=dynamodb.ContributorInsightsMode.ACCESSED_AND_THROTTLED_KEYS
+                ),
                 deletion_protection=False,
                 kinesis_stream=stream,
                 point_in_time_recovery=False,
@@ -13434,11 +13651,14 @@ class TableOptionsV2:
                 )]
             )
         '''
+        if isinstance(contributor_insights_specification, dict):
+            contributor_insights_specification = ContributorInsightsSpecification(**contributor_insights_specification)
         if isinstance(point_in_time_recovery_specification, dict):
             point_in_time_recovery_specification = PointInTimeRecoverySpecification(**point_in_time_recovery_specification)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1b65ee3c8ef5c3b632f4d1fad233252caadaa5f607c0fd92f49b64933f1de51c)
             check_type(argname="argument contributor_insights", value=contributor_insights, expected_type=type_hints["contributor_insights"])
+            check_type(argname="argument contributor_insights_specification", value=contributor_insights_specification, expected_type=type_hints["contributor_insights_specification"])
             check_type(argname="argument deletion_protection", value=deletion_protection, expected_type=type_hints["deletion_protection"])
             check_type(argname="argument kinesis_stream", value=kinesis_stream, expected_type=type_hints["kinesis_stream"])
             check_type(argname="argument point_in_time_recovery", value=point_in_time_recovery, expected_type=type_hints["point_in_time_recovery"])
@@ -13449,6 +13669,8 @@ class TableOptionsV2:
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if contributor_insights is not None:
             self._values["contributor_insights"] = contributor_insights
+        if contributor_insights_specification is not None:
+            self._values["contributor_insights_specification"] = contributor_insights_specification
         if deletion_protection is not None:
             self._values["deletion_protection"] = deletion_protection
         if kinesis_stream is not None:
@@ -13466,13 +13688,28 @@ class TableOptionsV2:
 
     @builtins.property
     def contributor_insights(self) -> typing.Optional[builtins.bool]:
-        '''Whether CloudWatch contributor insights is enabled.
+        '''(deprecated) Whether CloudWatch contributor insights is enabled.
 
         :default: false
+
+        :deprecated: use ``contributorInsightsSpecification`` instead
+
+        :stability: deprecated
         '''
         result = self._values.get("contributor_insights")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def contributor_insights_specification(
+        self,
+    ) -> typing.Optional[ContributorInsightsSpecification]:
+        '''Whether CloudWatch contributor insights is enabled and what mode is selected.
+
+        :default: - contributor insights is not enabled
+        '''
+        result = self._values.get("contributor_insights_specification")
+        return typing.cast(typing.Optional[ContributorInsightsSpecification], result)
+
     @builtins.property
     def deletion_protection(self) -> typing.Optional[builtins.bool]:
         '''Whether deletion protection is enabled.
@@ -13564,6 +13801,7 @@ class TableOptionsV2:
         "sort_key": "sortKey",
         "billing_mode": "billingMode",
         "contributor_insights_enabled": "contributorInsightsEnabled",
+        "contributor_insights_specification": "contributorInsightsSpecification",
         "deletion_protection": "deletionProtection",
         "encryption": "encryption",
         "encryption_key": "encryptionKey",
@@ -13597,6 +13835,7 @@ class TableProps(TableOptions):
         sort_key: typing.Optional[typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]]] = None,
         billing_mode: typing.Optional[BillingMode] = None,
         contributor_insights_enabled: typing.Optional[builtins.bool] = None,
+        contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         encryption: typing.Optional[TableEncryption] = None,
         encryption_key: typing.Optional[_IKey_5f11635f] = None,
@@ -13626,7 +13865,8 @@ class TableProps(TableOptions):
         :param partition_key: Partition key attribute definition.
         :param sort_key: Sort key attribute definition. Default: no sort key
         :param billing_mode: Specify how you are charged for read and write throughput and how you manage capacity. Default: PROVISIONED if ``replicationRegions`` is not specified, PAY_PER_REQUEST otherwise
-        :param contributor_insights_enabled: Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights_enabled: (deprecated) Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights_specification: Whether CloudWatch contributor insights is enabled and what mode is selected. Default: - contributor insights is not enabled
         :param deletion_protection: Enables deletion protection for the table. Default: false
         :param encryption: Whether server-side encryption with an AWS managed customer master key is enabled. This property cannot be set if ``serverSideEncryption`` is set. .. epigraph:: **NOTE**: if you set this to ``CUSTOMER_MANAGED`` and ``encryptionKey`` is not specified, the key that the Tablet generates for you will be created with default permissions. If you are using CDKv2, these permissions will be sufficient to enable the key for use with DynamoDB tables. If you are using CDKv1, make sure the feature flag ``@aws-cdk/aws-kms:defaultKeyPolicies`` is set to ``true`` in your ``cdk.json``. Default: - The table is encrypted with an encryption key managed by DynamoDB, and you are not charged any fee for using it.
         :param encryption_key: External KMS key to use for table encryption. This property can only be set if ``encryption`` is set to ``TableEncryption.CUSTOMER_MANAGED``. Default: - If ``encryption`` is set to ``TableEncryption.CUSTOMER_MANAGED`` and this property is undefined, a new KMS key will be created and associated with this table. If ``encryption`` and this property are both undefined, then the table is encrypted with an encryption key managed by DynamoDB, and you are not charged any fee for using it.
@@ -13681,6 +13921,8 @@ class TableProps(TableOptions):
             partition_key = Attribute(**partition_key)
         if isinstance(sort_key, dict):
             sort_key = Attribute(**sort_key)
+        if isinstance(contributor_insights_specification, dict):
+            contributor_insights_specification = ContributorInsightsSpecification(**contributor_insights_specification)
         if isinstance(import_source, dict):
             import_source = ImportSourceSpecification(**import_source)
         if isinstance(point_in_time_recovery_specification, dict):
@@ -13693,6 +13935,7 @@ class TableProps(TableOptions):
             check_type(argname="argument sort_key", value=sort_key, expected_type=type_hints["sort_key"])
             check_type(argname="argument billing_mode", value=billing_mode, expected_type=type_hints["billing_mode"])
             check_type(argname="argument contributor_insights_enabled", value=contributor_insights_enabled, expected_type=type_hints["contributor_insights_enabled"])
+            check_type(argname="argument contributor_insights_specification", value=contributor_insights_specification, expected_type=type_hints["contributor_insights_specification"])
             check_type(argname="argument deletion_protection", value=deletion_protection, expected_type=type_hints["deletion_protection"])
             check_type(argname="argument encryption", value=encryption, expected_type=type_hints["encryption"])
             check_type(argname="argument encryption_key", value=encryption_key, expected_type=type_hints["encryption_key"])
@@ -13725,6 +13968,8 @@ class TableProps(TableOptions):
             self._values["billing_mode"] = billing_mode
         if contributor_insights_enabled is not None:
             self._values["contributor_insights_enabled"] = contributor_insights_enabled
+        if contributor_insights_specification is not None:
+            self._values["contributor_insights_specification"] = contributor_insights_specification
         if deletion_protection is not None:
             self._values["deletion_protection"] = deletion_protection
         if encryption is not None:
@@ -13799,13 +14044,28 @@ class TableProps(TableOptions):
 
     @builtins.property
     def contributor_insights_enabled(self) -> typing.Optional[builtins.bool]:
-        '''Whether CloudWatch contributor insights is enabled.
+        '''(deprecated) Whether CloudWatch contributor insights is enabled.
 
         :default: false
+
+        :deprecated: use `contributorInsightsSpecification instead
+
+        :stability: deprecated
         '''
         result = self._values.get("contributor_insights_enabled")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def contributor_insights_specification(
+        self,
+    ) -> typing.Optional[ContributorInsightsSpecification]:
+        '''Whether CloudWatch contributor insights is enabled and what mode is selected.
+
+        :default: - contributor insights is not enabled
+        '''
+        result = self._values.get("contributor_insights_specification")
+        return typing.cast(typing.Optional[ContributorInsightsSpecification], result)
+
     @builtins.property
     def deletion_protection(self) -> typing.Optional[builtins.bool]:
         '''Enables deletion protection for the table.
@@ -14099,6 +14359,7 @@ class TableProps(TableOptions):
     jsii_struct_bases=[TableOptionsV2],
     name_mapping={
         "contributor_insights": "contributorInsights",
+        "contributor_insights_specification": "contributorInsightsSpecification",
         "deletion_protection": "deletionProtection",
         "kinesis_stream": "kinesisStream",
         "point_in_time_recovery": "pointInTimeRecovery",
@@ -14127,6 +14388,7 @@ class TablePropsV2(TableOptionsV2):
         self,
         *,
         contributor_insights: typing.Optional[builtins.bool] = None,
+        contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         kinesis_stream: typing.Optional[_IStream_4e2457d2] = None,
         point_in_time_recovery: typing.Optional[builtins.bool] = None,
@@ -14151,7 +14413,8 @@ class TablePropsV2(TableOptionsV2):
     ) -> None:
         '''Properties used to configure a DynamoDB table.
 
-        :param contributor_insights: Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights: (deprecated) Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights_specification: Whether CloudWatch contributor insights is enabled and what mode is selected. Default: - contributor insights is not enabled
         :param deletion_protection: Whether deletion protection is enabled. Default: false
         :param kinesis_stream: Kinesis Data Stream to capture item level changes. Default: - no Kinesis Data Stream
         :param point_in_time_recovery: (deprecated) Whether point-in-time recovery is enabled. Default: false - point in time recovery is not enabled.
@@ -14187,11 +14450,12 @@ class TablePropsV2(TableOptionsV2):
             mrsc_table = dynamodb.TableV2(stack, "MRSCTable",
                 partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
                 multi_region_consistency=dynamodb.MultiRegionConsistency.STRONG,
-                replicas=[dynamodb.ReplicaTableProps(region="us-east-1")
-                ],
-                witness_region="us-east-2"
+                replicas=[dynamodb.ReplicaTableProps(region="us-east-1"), dynamodb.ReplicaTableProps(region="us-east-2")
+                ]
             )
         '''
+        if isinstance(contributor_insights_specification, dict):
+            contributor_insights_specification = ContributorInsightsSpecification(**contributor_insights_specification)
         if isinstance(point_in_time_recovery_specification, dict):
             point_in_time_recovery_specification = PointInTimeRecoverySpecification(**point_in_time_recovery_specification)
         if isinstance(partition_key, dict):
@@ -14203,6 +14467,7 @@ class TablePropsV2(TableOptionsV2):
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__205e5df85e01c6c2d91d5922a57e3ed5903027748a8b3222622bebd1077e84ba)
             check_type(argname="argument contributor_insights", value=contributor_insights, expected_type=type_hints["contributor_insights"])
+            check_type(argname="argument contributor_insights_specification", value=contributor_insights_specification, expected_type=type_hints["contributor_insights_specification"])
             check_type(argname="argument deletion_protection", value=deletion_protection, expected_type=type_hints["deletion_protection"])
             check_type(argname="argument kinesis_stream", value=kinesis_stream, expected_type=type_hints["kinesis_stream"])
             check_type(argname="argument point_in_time_recovery", value=point_in_time_recovery, expected_type=type_hints["point_in_time_recovery"])
@@ -14229,6 +14494,8 @@ class TablePropsV2(TableOptionsV2):
         }
         if contributor_insights is not None:
             self._values["contributor_insights"] = contributor_insights
+        if contributor_insights_specification is not None:
+            self._values["contributor_insights_specification"] = contributor_insights_specification
         if deletion_protection is not None:
             self._values["deletion_protection"] = deletion_protection
         if kinesis_stream is not None:
@@ -14272,13 +14539,28 @@ class TablePropsV2(TableOptionsV2):
 
     @builtins.property
     def contributor_insights(self) -> typing.Optional[builtins.bool]:
-        '''Whether CloudWatch contributor insights is enabled.
+        '''(deprecated) Whether CloudWatch contributor insights is enabled.
 
         :default: false
+
+        :deprecated: use ``contributorInsightsSpecification`` instead
+
+        :stability: deprecated
         '''
         result = self._values.get("contributor_insights")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def contributor_insights_specification(
+        self,
+    ) -> typing.Optional[ContributorInsightsSpecification]:
+        '''Whether CloudWatch contributor insights is enabled and what mode is selected.
+
+        :default: - contributor insights is not enabled
+        '''
+        result = self._values.get("contributor_insights_specification")
+        return typing.cast(typing.Optional[ContributorInsightsSpecification], result)
+
     @builtins.property
     def deletion_protection(self) -> typing.Optional[builtins.bool]:
         '''Whether deletion protection is enabled.
@@ -14553,6 +14835,7 @@ class TableV2(
         warm_throughput: typing.Optional[typing.Union["WarmThroughput", typing.Dict[builtins.str, typing.Any]]] = None,
         witness_region: typing.Optional[builtins.str] = None,
         contributor_insights: typing.Optional[builtins.bool] = None,
+        contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         kinesis_stream: typing.Optional[_IStream_4e2457d2] = None,
         point_in_time_recovery: typing.Optional[builtins.bool] = None,
@@ -14578,7 +14861,8 @@ class TableV2(
         :param time_to_live_attribute: The name of the TTL attribute. Default: - TTL is disabled
         :param warm_throughput: The warm throughput configuration for the table. Default: - no warm throughput is configured
         :param witness_region: The witness Region for the MRSC global table. A MRSC global table can be configured with either three replicas, or with two replicas and one witness. Note: Witness region cannot be specified for a Multi-Region Eventual Consistency (MREC) Global Table. Witness regions are only supported for Multi-Region Strong Consistency (MRSC) Global Tables. Default: - no witness region
-        :param contributor_insights: Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights: (deprecated) Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights_specification: Whether CloudWatch contributor insights is enabled and what mode is selected. Default: - contributor insights is not enabled
         :param deletion_protection: Whether deletion protection is enabled. Default: false
         :param kinesis_stream: Kinesis Data Stream to capture item level changes. Default: - no Kinesis Data Stream
         :param point_in_time_recovery: (deprecated) Whether point-in-time recovery is enabled. Default: false - point in time recovery is not enabled.
@@ -14607,6 +14891,7 @@ class TableV2(
             warm_throughput=warm_throughput,
             witness_region=witness_region,
             contributor_insights=contributor_insights,
+            contributor_insights_specification=contributor_insights_specification,
             deletion_protection=deletion_protection,
             kinesis_stream=kinesis_stream,
             point_in_time_recovery=point_in_time_recovery,
@@ -14787,6 +15072,7 @@ class TableV2(
         max_read_request_units: typing.Optional[jsii.Number] = None,
         read_capacity: typing.Optional[Capacity] = None,
         contributor_insights: typing.Optional[builtins.bool] = None,
+        contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         kinesis_stream: typing.Optional[_IStream_4e2457d2] = None,
         point_in_time_recovery: typing.Optional[builtins.bool] = None,
@@ -14803,7 +15089,8 @@ class TableV2(
         :param global_secondary_index_options: Options used to configure global secondary index properties. Default: - inherited from the primary table
         :param max_read_request_units: The maximum read request units. Note: This can only be configured if the primary table billing is PAY_PER_REQUEST. Default: - inherited from the primary table
         :param read_capacity: The read capacity. Note: This can only be configured if the primary table billing is provisioned. Default: - inherited from the primary table
-        :param contributor_insights: Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights: (deprecated) Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights_specification: Whether CloudWatch contributor insights is enabled and what mode is selected. Default: - contributor insights is not enabled
         :param deletion_protection: Whether deletion protection is enabled. Default: false
         :param kinesis_stream: Kinesis Data Stream to capture item level changes. Default: - no Kinesis Data Stream
         :param point_in_time_recovery: (deprecated) Whether point-in-time recovery is enabled. Default: false - point in time recovery is not enabled.
@@ -14818,6 +15105,7 @@ class TableV2(
             max_read_request_units=max_read_request_units,
             read_capacity=read_capacity,
             contributor_insights=contributor_insights,
+            contributor_insights_specification=contributor_insights_specification,
             deletion_protection=deletion_protection,
             kinesis_stream=kinesis_stream,
             point_in_time_recovery=point_in_time_recovery,
@@ -15215,6 +15503,7 @@ class WarmThroughput:
         "partition_key": "partitionKey",
         "sort_key": "sortKey",
         "contributor_insights_enabled": "contributorInsightsEnabled",
+        "contributor_insights_specification": "contributorInsightsSpecification",
         "max_read_request_units": "maxReadRequestUnits",
         "max_write_request_units": "maxWriteRequestUnits",
         "read_capacity": "readCapacity",
@@ -15232,6 +15521,7 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
         partition_key: typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]],
         sort_key: typing.Optional[typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]]] = None,
         contributor_insights_enabled: typing.Optional[builtins.bool] = None,
+        contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
         max_read_request_units: typing.Optional[jsii.Number] = None,
         max_write_request_units: typing.Optional[jsii.Number] = None,
         read_capacity: typing.Optional[jsii.Number] = None,
@@ -15245,7 +15535,8 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
         :param projection_type: The set of attributes that are projected into the secondary index. Default: ALL
         :param partition_key: Partition key attribute definition.
         :param sort_key: Sort key attribute definition. Default: no sort key
-        :param contributor_insights_enabled: Whether CloudWatch contributor insights is enabled for the specified global secondary index. Default: false
+        :param contributor_insights_enabled: (deprecated) Whether CloudWatch contributor insights is enabled for the specified global secondary index. Default: false
+        :param contributor_insights_specification: Whether CloudWatch contributor insights is enabled and what mode is selected. Default: - contributor insights is not enabled
         :param max_read_request_units: The maximum read request units for the global secondary index. Can only be provided if table billingMode is PAY_PER_REQUEST. Default: - on-demand throughput is disabled
         :param max_write_request_units: The maximum write request units for the global secondary index. Can only be provided if table billingMode is PAY_PER_REQUEST. Default: - on-demand throughput is disabled
         :param read_capacity: The read capacity for the global secondary index. Can only be provided if table billingMode is Provisioned or undefined. Default: 5
@@ -15258,11 +15549,14 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
 
             table = dynamodb.Table(self, "Table",
                 partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING),
-                contributor_insights_enabled=True
+                contributor_insights_specification=dynamodb.ContributorInsightsSpecification( # for a table
+                    enabled=True,
+                    mode=dynamodb.ContributorInsightsMode.THROTTLED_KEYS)
             )
             
             table.add_global_secondary_index(
-                contributor_insights_enabled=True,  # for a specific global secondary index
+                contributor_insights_specification=dynamodb.ContributorInsightsSpecification( # for a specific global secondary index
+                    enabled=True),
                 index_name="gsi",
                 partition_key=dynamodb.Attribute(name="pk", type=dynamodb.AttributeType.STRING)
             )
@@ -15271,6 +15565,8 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
             partition_key = Attribute(**partition_key)
         if isinstance(sort_key, dict):
             sort_key = Attribute(**sort_key)
+        if isinstance(contributor_insights_specification, dict):
+            contributor_insights_specification = ContributorInsightsSpecification(**contributor_insights_specification)
         if isinstance(warm_throughput, dict):
             warm_throughput = WarmThroughput(**warm_throughput)
         if __debug__:
@@ -15281,6 +15577,7 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
             check_type(argname="argument partition_key", value=partition_key, expected_type=type_hints["partition_key"])
             check_type(argname="argument sort_key", value=sort_key, expected_type=type_hints["sort_key"])
             check_type(argname="argument contributor_insights_enabled", value=contributor_insights_enabled, expected_type=type_hints["contributor_insights_enabled"])
+            check_type(argname="argument contributor_insights_specification", value=contributor_insights_specification, expected_type=type_hints["contributor_insights_specification"])
             check_type(argname="argument max_read_request_units", value=max_read_request_units, expected_type=type_hints["max_read_request_units"])
             check_type(argname="argument max_write_request_units", value=max_write_request_units, expected_type=type_hints["max_write_request_units"])
             check_type(argname="argument read_capacity", value=read_capacity, expected_type=type_hints["read_capacity"])
@@ -15298,6 +15595,8 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
             self._values["sort_key"] = sort_key
         if contributor_insights_enabled is not None:
             self._values["contributor_insights_enabled"] = contributor_insights_enabled
+        if contributor_insights_specification is not None:
+            self._values["contributor_insights_specification"] = contributor_insights_specification
         if max_read_request_units is not None:
             self._values["max_read_request_units"] = max_read_request_units
         if max_write_request_units is not None:
@@ -15352,13 +15651,28 @@ class GlobalSecondaryIndexProps(SecondaryIndexProps, SchemaOptions):
 
     @builtins.property
     def contributor_insights_enabled(self) -> typing.Optional[builtins.bool]:
-        '''Whether CloudWatch contributor insights is enabled for the specified global secondary index.
+        '''(deprecated) Whether CloudWatch contributor insights is enabled for the specified global secondary index.
 
         :default: false
+
+        :deprecated: use ``contributorInsightsSpecification`` instead
+
+        :stability: deprecated
         '''
         result = self._values.get("contributor_insights_enabled")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def contributor_insights_specification(
+        self,
+    ) -> typing.Optional[ContributorInsightsSpecification]:
+        '''Whether CloudWatch contributor insights is enabled and what mode is selected.
+
+        :default: - contributor insights is not enabled
+        '''
+        result = self._values.get("contributor_insights_specification")
+        return typing.cast(typing.Optional[ContributorInsightsSpecification], result)
+
     @builtins.property
     def max_read_request_units(self) -> typing.Optional[jsii.Number]:
         '''The maximum read request units for the global secondary index.
@@ -16038,6 +16352,7 @@ class OperationsMetricOptions(SystemErrorsForOperationsMetricOptions):
     jsii_struct_bases=[TableOptionsV2],
     name_mapping={
         "contributor_insights": "contributorInsights",
+        "contributor_insights_specification": "contributorInsightsSpecification",
         "deletion_protection": "deletionProtection",
         "kinesis_stream": "kinesisStream",
         "point_in_time_recovery": "pointInTimeRecovery",
@@ -16056,6 +16371,7 @@ class ReplicaTableProps(TableOptionsV2):
         self,
         *,
         contributor_insights: typing.Optional[builtins.bool] = None,
+        contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         kinesis_stream: typing.Optional[_IStream_4e2457d2] = None,
         point_in_time_recovery: typing.Optional[builtins.bool] = None,
@@ -16070,7 +16386,8 @@ class ReplicaTableProps(TableOptionsV2):
     ) -> None:
         '''Properties used to configure a replica table.
 
-        :param contributor_insights: Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights: (deprecated) Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights_specification: Whether CloudWatch contributor insights is enabled and what mode is selected. Default: - contributor insights is not enabled
         :param deletion_protection: Whether deletion protection is enabled. Default: false
         :param kinesis_stream: Kinesis Data Stream to capture item level changes. Default: - no Kinesis Data Stream
         :param point_in_time_recovery: (deprecated) Whether point-in-time recovery is enabled. Default: false - point in time recovery is not enabled.
@@ -16100,11 +16417,14 @@ class ReplicaTableProps(TableOptionsV2):
             
             global_table.add_replica(region="us-east-2", deletion_protection=True)
         '''
+        if isinstance(contributor_insights_specification, dict):
+            contributor_insights_specification = ContributorInsightsSpecification(**contributor_insights_specification)
         if isinstance(point_in_time_recovery_specification, dict):
             point_in_time_recovery_specification = PointInTimeRecoverySpecification(**point_in_time_recovery_specification)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7500a741eaeb840f48aaefcd8fc5fbbb8b1082165601116ca363e5ddbaa79e6f)
             check_type(argname="argument contributor_insights", value=contributor_insights, expected_type=type_hints["contributor_insights"])
+            check_type(argname="argument contributor_insights_specification", value=contributor_insights_specification, expected_type=type_hints["contributor_insights_specification"])
             check_type(argname="argument deletion_protection", value=deletion_protection, expected_type=type_hints["deletion_protection"])
             check_type(argname="argument kinesis_stream", value=kinesis_stream, expected_type=type_hints["kinesis_stream"])
             check_type(argname="argument point_in_time_recovery", value=point_in_time_recovery, expected_type=type_hints["point_in_time_recovery"])
@@ -16121,6 +16441,8 @@ class ReplicaTableProps(TableOptionsV2):
         }
         if contributor_insights is not None:
             self._values["contributor_insights"] = contributor_insights
+        if contributor_insights_specification is not None:
+            self._values["contributor_insights_specification"] = contributor_insights_specification
         if deletion_protection is not None:
             self._values["deletion_protection"] = deletion_protection
         if kinesis_stream is not None:
@@ -16144,13 +16466,28 @@ class ReplicaTableProps(TableOptionsV2):
 
     @builtins.property
     def contributor_insights(self) -> typing.Optional[builtins.bool]:
-        '''Whether CloudWatch contributor insights is enabled.
+        '''(deprecated) Whether CloudWatch contributor insights is enabled.
 
         :default: false
+
+        :deprecated: use ``contributorInsightsSpecification`` instead
+
+        :stability: deprecated
         '''
         result = self._values.get("contributor_insights")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def contributor_insights_specification(
+        self,
+    ) -> typing.Optional[ContributorInsightsSpecification]:
+        '''Whether CloudWatch contributor insights is enabled and what mode is selected.
+
+        :default: - contributor insights is not enabled
+        '''
+        result = self._values.get("contributor_insights_specification")
+        return typing.cast(typing.Optional[ContributorInsightsSpecification], result)
+
     @builtins.property
     def deletion_protection(self) -> typing.Optional[builtins.bool]:
         '''Whether deletion protection is enabled.
@@ -16318,6 +16655,7 @@ class Table(
         table_name: typing.Optional[builtins.str] = None,
         billing_mode: typing.Optional[BillingMode] = None,
         contributor_insights_enabled: typing.Optional[builtins.bool] = None,
+        contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         encryption: typing.Optional[TableEncryption] = None,
         encryption_key: typing.Optional[_IKey_5f11635f] = None,
@@ -16348,7 +16686,8 @@ class Table(
         :param kinesis_stream: Kinesis Data Stream to capture item-level changes for the table. Default: - no Kinesis Data Stream
         :param table_name: Enforces a particular physical table name. Default: 
         :param billing_mode: Specify how you are charged for read and write throughput and how you manage capacity. Default: PROVISIONED if ``replicationRegions`` is not specified, PAY_PER_REQUEST otherwise
-        :param contributor_insights_enabled: Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights_enabled: (deprecated) Whether CloudWatch contributor insights is enabled. Default: false
+        :param contributor_insights_specification: Whether CloudWatch contributor insights is enabled and what mode is selected. Default: - contributor insights is not enabled
         :param deletion_protection: Enables deletion protection for the table. Default: false
         :param encryption: Whether server-side encryption with an AWS managed customer master key is enabled. This property cannot be set if ``serverSideEncryption`` is set. .. epigraph:: **NOTE**: if you set this to ``CUSTOMER_MANAGED`` and ``encryptionKey`` is not specified, the key that the Tablet generates for you will be created with default permissions. If you are using CDKv2, these permissions will be sufficient to enable the key for use with DynamoDB tables. If you are using CDKv1, make sure the feature flag ``@aws-cdk/aws-kms:defaultKeyPolicies`` is set to ``true`` in your ``cdk.json``. Default: - The table is encrypted with an encryption key managed by DynamoDB, and you are not charged any fee for using it.
         :param encryption_key: External KMS key to use for table encryption. This property can only be set if ``encryption`` is set to ``TableEncryption.CUSTOMER_MANAGED``. Default: - If ``encryption`` is set to ``TableEncryption.CUSTOMER_MANAGED`` and this property is undefined, a new KMS key will be created and associated with this table. If ``encryption`` and this property are both undefined, then the table is encrypted with an encryption key managed by DynamoDB, and you are not charged any fee for using it.
@@ -16382,6 +16721,7 @@ class Table(
             table_name=table_name,
             billing_mode=billing_mode,
             contributor_insights_enabled=contributor_insights_enabled,
+            contributor_insights_specification=contributor_insights_specification,
             deletion_protection=deletion_protection,
             encryption=encryption,
             encryption_key=encryption_key,
@@ -16498,6 +16838,7 @@ class Table(
         self,
         *,
         contributor_insights_enabled: typing.Optional[builtins.bool] = None,
+        contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
         max_read_request_units: typing.Optional[jsii.Number] = None,
         max_write_request_units: typing.Optional[jsii.Number] = None,
         read_capacity: typing.Optional[jsii.Number] = None,
@@ -16511,7 +16852,8 @@ class Table(
     ) -> None:
         '''Add a global secondary index of table.
 
-        :param contributor_insights_enabled: Whether CloudWatch contributor insights is enabled for the specified global secondary index. Default: false
+        :param contributor_insights_enabled: (deprecated) Whether CloudWatch contributor insights is enabled for the specified global secondary index. Default: false
+        :param contributor_insights_specification: Whether CloudWatch contributor insights is enabled and what mode is selected. Default: - contributor insights is not enabled
         :param max_read_request_units: The maximum read request units for the global secondary index. Can only be provided if table billingMode is PAY_PER_REQUEST. Default: - on-demand throughput is disabled
         :param max_write_request_units: The maximum write request units for the global secondary index. Can only be provided if table billingMode is PAY_PER_REQUEST. Default: - on-demand throughput is disabled
         :param read_capacity: The read capacity for the global secondary index. Can only be provided if table billingMode is Provisioned or undefined. Default: 5
@@ -16525,6 +16867,7 @@ class Table(
         '''
         props = GlobalSecondaryIndexProps(
             contributor_insights_enabled=contributor_insights_enabled,
+            contributor_insights_specification=contributor_insights_specification,
             max_read_request_units=max_read_request_units,
             max_write_request_units=max_write_request_units,
             read_capacity=read_capacity,
@@ -16744,6 +17087,8 @@ __all__ = [
     "CfnGlobalTableProps",
     "CfnTable",
     "CfnTableProps",
+    "ContributorInsightsMode",
+    "ContributorInsightsSpecification",
     "CsvOptions",
     "EnableScalingProps",
     "GlobalSecondaryIndexProps",
@@ -17509,6 +17854,14 @@ def _typecheckingstub__0b7f8e29621d526383ce725f2daafbe00b52cfe2381995edac86b72a6
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__656543bd456aefaef11a80dfb0950fe5597d4bc0465f2f4fdec81a81dfe7358d(
+    *,
+    enabled: builtins.bool,
+    mode: typing.Optional[ContributorInsightsMode] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__ea195ac1b9cf7ff33466083daefb8a95f1a8ce8a200cbc595c25050dc94670eb(
     *,
     delimiter: typing.Optional[builtins.str] = None,
@@ -17637,6 +17990,7 @@ def _typecheckingstub__4073f2e85ef31d8deba5f90be11b466e4a3f1ea003482bf5c4df5706f
 def _typecheckingstub__eaa3a170e1978a5997011b8319bcd83bf34642dac50e342aad0705ee28b15714(
     *,
     contributor_insights: typing.Optional[builtins.bool] = None,
+    contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
     max_read_request_units: typing.Optional[jsii.Number] = None,
     read_capacity: typing.Optional[Capacity] = None,
 ) -> None:
@@ -17944,6 +18298,7 @@ def _typecheckingstub__dadf5733fac70178ab246582a0b777b8c203659229753a8396594d751
     sort_key: typing.Optional[typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]]] = None,
     billing_mode: typing.Optional[BillingMode] = None,
     contributor_insights_enabled: typing.Optional[builtins.bool] = None,
+    contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     encryption: typing.Optional[TableEncryption] = None,
     encryption_key: typing.Optional[_IKey_5f11635f] = None,
@@ -17971,6 +18326,7 @@ def _typecheckingstub__dadf5733fac70178ab246582a0b777b8c203659229753a8396594d751
 def _typecheckingstub__1b65ee3c8ef5c3b632f4d1fad233252caadaa5f607c0fd92f49b64933f1de51c(
     *,
     contributor_insights: typing.Optional[builtins.bool] = None,
+    contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     kinesis_stream: typing.Optional[_IStream_4e2457d2] = None,
     point_in_time_recovery: typing.Optional[builtins.bool] = None,
@@ -17988,6 +18344,7 @@ def _typecheckingstub__00475a5e14af8c4c7049089f69b3d29ad81bc91e7e1f0a5a5b7b794a5
     sort_key: typing.Optional[typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]]] = None,
     billing_mode: typing.Optional[BillingMode] = None,
     contributor_insights_enabled: typing.Optional[builtins.bool] = None,
+    contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     encryption: typing.Optional[TableEncryption] = None,
     encryption_key: typing.Optional[_IKey_5f11635f] = None,
@@ -18018,6 +18375,7 @@ def _typecheckingstub__00475a5e14af8c4c7049089f69b3d29ad81bc91e7e1f0a5a5b7b794a5
 def _typecheckingstub__205e5df85e01c6c2d91d5922a57e3ed5903027748a8b3222622bebd1077e84ba(
     *,
     contributor_insights: typing.Optional[builtins.bool] = None,
+    contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     kinesis_stream: typing.Optional[_IStream_4e2457d2] = None,
     point_in_time_recovery: typing.Optional[builtins.bool] = None,
@@ -18062,6 +18420,7 @@ def _typecheckingstub__9ea47b003cdb497ff620f1410260696f97dbb2b00fa8558235f23771f
     warm_throughput: typing.Optional[typing.Union[WarmThroughput, typing.Dict[builtins.str, typing.Any]]] = None,
     witness_region: typing.Optional[builtins.str] = None,
     contributor_insights: typing.Optional[builtins.bool] = None,
+    contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     kinesis_stream: typing.Optional[_IStream_4e2457d2] = None,
     point_in_time_recovery: typing.Optional[builtins.bool] = None,
@@ -18152,6 +18511,7 @@ def _typecheckingstub__7f586bf63a567e16bde337be791f392306be66abca1c4abb791989fb9
     partition_key: typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]],
     sort_key: typing.Optional[typing.Union[Attribute, typing.Dict[builtins.str, typing.Any]]] = None,
     contributor_insights_enabled: typing.Optional[builtins.bool] = None,
+    contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
     max_read_request_units: typing.Optional[jsii.Number] = None,
     max_write_request_units: typing.Optional[jsii.Number] = None,
     read_capacity: typing.Optional[jsii.Number] = None,
@@ -18209,6 +18569,7 @@ def _typecheckingstub__323fc564f2052282a189a09de9130b5d9a855212d7bd5a514ddb98a52
 def _typecheckingstub__7500a741eaeb840f48aaefcd8fc5fbbb8b1082165601116ca363e5ddbaa79e6f(
     *,
     contributor_insights: typing.Optional[builtins.bool] = None,
+    contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     kinesis_stream: typing.Optional[_IStream_4e2457d2] = None,
     point_in_time_recovery: typing.Optional[builtins.bool] = None,
@@ -18233,6 +18594,7 @@ def _typecheckingstub__b92f0ed514f00b57a2a41d754e55fe495d22b05b0ad4711b80ce00457
     table_name: typing.Optional[builtins.str] = None,
     billing_mode: typing.Optional[BillingMode] = None,
     contributor_insights_enabled: typing.Optional[builtins.bool] = None,
+    contributor_insights_specification: typing.Optional[typing.Union[ContributorInsightsSpecification, typing.Dict[builtins.str, typing.Any]]] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     encryption: typing.Optional[TableEncryption] = None,
     encryption_key: typing.Optional[_IKey_5f11635f] = None,