aws-cdk-lib 2.213.0__py3-none-any.whl → 2.214.0__py3-none-any.whl

aws_cdk/aws_ecs_patterns/__init__.py

@@ -72,6 +72,8 @@ Fargate services will use the `LATEST` platform version by default, but you can
 
 Fargate services use the default VPC Security Group unless one or more are provided using the `securityGroups` property in the constructor.
 
+**Security Considerations**: When using custom security groups on your load balancer, the `openListener` property controls whether the load balancer listener allows traffic from anywhere on the internet (0.0.0.0/0). By default, `openListener` is `true`, but it will automatically default to `false` when custom security groups are detected, preventing unintended internet exposure. You can always explicitly set `openListener: true` to override this behavior if needed.
+
 By setting `redirectHTTP` to true, CDK will automatically create a listener on port 80 that redirects HTTP traffic to the HTTPS port.
 
 If you specify the option `recordType` you can decide if you want the construct to use CNAME or Route53-Aliases as record sets.

aws_cdk/aws_eks/__init__.py

@@ -5551,6 +5551,9 @@ class CfnAddon(
             # the properties below are optional
             addon_version="addonVersion",
             configuration_values="configurationValues",
+            namespace_config=eks.CfnAddon.NamespaceConfigProperty(
+                namespace="namespace"
+            ),
             pod_identity_associations=[eks.CfnAddon.PodIdentityAssociationProperty(
                 role_arn="roleArn",
                 service_account="serviceAccount"
@@ -5574,6 +5577,7 @@ class CfnAddon(
         cluster_name: builtins.str,
         addon_version: typing.Optional[builtins.str] = None,
         configuration_values: typing.Optional[builtins.str] = None,
+        namespace_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAddon.NamespaceConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         pod_identity_associations: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAddon.PodIdentityAssociationProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         preserve_on_delete: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         resolve_conflicts: typing.Optional[builtins.str] = None,
@@ -5587,6 +5591,7 @@ class CfnAddon(
         :param cluster_name: The name of your cluster.
         :param addon_version: The version of the add-on.
         :param configuration_values: The configuration values that you provided.
+        :param namespace_config: The namespace configuration for the addon. This specifies the Kubernetes namespace where the addon is installed.
         :param pod_identity_associations: An array of EKS Pod Identity associations owned by the add-on. Each association maps a role to a service account in a namespace in the cluster. For more information, see `Attach an IAM Role to an Amazon EKS add-on using EKS Pod Identity <https://docs.aws.amazon.com/eks/latest/userguide/add-ons-iam.html>`_ in the *Amazon EKS User Guide* .
         :param preserve_on_delete: Specifying this option preserves the add-on software on your cluster but Amazon EKS stops managing any settings for the add-on. If an IAM account is associated with the add-on, it isn't removed.
         :param resolve_conflicts: How to resolve field value conflicts for an Amazon EKS add-on. Conflicts are handled based on the value you choose: - *None* – If the self-managed version of the add-on is installed on your cluster, Amazon EKS doesn't change the value. Creation of the add-on might fail. - *Overwrite* – If the self-managed version of the add-on is installed on your cluster and the Amazon EKS default value is different than the existing value, Amazon EKS changes the value to the Amazon EKS default value. - *Preserve* – This is similar to the NONE option. If the self-managed version of the add-on is installed on your cluster Amazon EKS doesn't change the add-on resource properties. Creation of the add-on might fail if conflicts are detected. This option works differently during the update operation. For more information, see ```UpdateAddon`` <https://docs.aws.amazon.com/eks/latest/APIReference/API_UpdateAddon.html>`_ . If you don't currently have the self-managed version of the add-on installed on your cluster, the Amazon EKS add-on is installed. Amazon EKS sets all values to default values, regardless of the option that you specify.
@@ -5602,6 +5607,7 @@ class CfnAddon(
             cluster_name=cluster_name,
             addon_version=addon_version,
             configuration_values=configuration_values,
+            namespace_config=namespace_config,
             pod_identity_associations=pod_identity_associations,
             preserve_on_delete=preserve_on_delete,
             resolve_conflicts=resolve_conflicts,
@@ -5713,6 +5719,24 @@ class CfnAddon(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "configurationValues", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="namespaceConfig")
+    def namespace_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAddon.NamespaceConfigProperty"]]:
+        '''The namespace configuration for the addon.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAddon.NamespaceConfigProperty"]], jsii.get(self, "namespaceConfig"))
+
+    @namespace_config.setter
+    def namespace_config(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAddon.NamespaceConfigProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__039b518895f39f54dce3ea31a35bed66445fb7b5e7f4c52a89adafc86911f331)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "namespaceConfig", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="podIdentityAssociations")
     def pod_identity_associations(
@@ -5788,6 +5812,58 @@ class CfnAddon(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_eks.CfnAddon.NamespaceConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={"namespace": "namespace"},
+    )
+    class NamespaceConfigProperty:
+        def __init__(self, *, namespace: builtins.str) -> None:
+            '''The custom namespace configuration to use with the add-on.
+
+            :param namespace: The custom namespace for creating the add-on.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-addon-namespaceconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_eks as eks
+                
+                namespace_config_property = eks.CfnAddon.NamespaceConfigProperty(
+                    namespace="namespace"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__c336eaf5f7476c60c3b0b8dc688fc9ea53319525b39f820a30e2510a38e67cbc)
+                check_type(argname="argument namespace", value=namespace, expected_type=type_hints["namespace"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "namespace": namespace,
+            }
+
+        @builtins.property
+        def namespace(self) -> builtins.str:
+            '''The custom namespace for creating the add-on.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-addon-namespaceconfig.html#cfn-eks-addon-namespaceconfig-namespace
+            '''
+            result = self._values.get("namespace")
+            assert result is not None, "Required property 'namespace' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "NamespaceConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_eks.CfnAddon.PodIdentityAssociationProperty",
         jsii_struct_bases=[],
@@ -5870,6 +5946,7 @@ class CfnAddon(
         "cluster_name": "clusterName",
         "addon_version": "addonVersion",
         "configuration_values": "configurationValues",
+        "namespace_config": "namespaceConfig",
         "pod_identity_associations": "podIdentityAssociations",
         "preserve_on_delete": "preserveOnDelete",
         "resolve_conflicts": "resolveConflicts",
@@ -5885,6 +5962,7 @@ class CfnAddonProps:
         cluster_name: builtins.str,
         addon_version: typing.Optional[builtins.str] = None,
         configuration_values: typing.Optional[builtins.str] = None,
+        namespace_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAddon.NamespaceConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         pod_identity_associations: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAddon.PodIdentityAssociationProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         preserve_on_delete: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         resolve_conflicts: typing.Optional[builtins.str] = None,
@@ -5897,6 +5975,7 @@ class CfnAddonProps:
         :param cluster_name: The name of your cluster.
         :param addon_version: The version of the add-on.
         :param configuration_values: The configuration values that you provided.
+        :param namespace_config: The namespace configuration for the addon. This specifies the Kubernetes namespace where the addon is installed.
         :param pod_identity_associations: An array of EKS Pod Identity associations owned by the add-on. Each association maps a role to a service account in a namespace in the cluster. For more information, see `Attach an IAM Role to an Amazon EKS add-on using EKS Pod Identity <https://docs.aws.amazon.com/eks/latest/userguide/add-ons-iam.html>`_ in the *Amazon EKS User Guide* .
         :param preserve_on_delete: Specifying this option preserves the add-on software on your cluster but Amazon EKS stops managing any settings for the add-on. If an IAM account is associated with the add-on, it isn't removed.
         :param resolve_conflicts: How to resolve field value conflicts for an Amazon EKS add-on. Conflicts are handled based on the value you choose: - *None* – If the self-managed version of the add-on is installed on your cluster, Amazon EKS doesn't change the value. Creation of the add-on might fail. - *Overwrite* – If the self-managed version of the add-on is installed on your cluster and the Amazon EKS default value is different than the existing value, Amazon EKS changes the value to the Amazon EKS default value. - *Preserve* – This is similar to the NONE option. If the self-managed version of the add-on is installed on your cluster Amazon EKS doesn't change the add-on resource properties. Creation of the add-on might fail if conflicts are detected. This option works differently during the update operation. For more information, see ```UpdateAddon`` <https://docs.aws.amazon.com/eks/latest/APIReference/API_UpdateAddon.html>`_ . If you don't currently have the self-managed version of the add-on installed on your cluster, the Amazon EKS add-on is installed. Amazon EKS sets all values to default values, regardless of the option that you specify.
@@ -5919,6 +5998,9 @@ class CfnAddonProps:
                 # the properties below are optional
                 addon_version="addonVersion",
                 configuration_values="configurationValues",
+                namespace_config=eks.CfnAddon.NamespaceConfigProperty(
+                    namespace="namespace"
+                ),
                 pod_identity_associations=[eks.CfnAddon.PodIdentityAssociationProperty(
                     role_arn="roleArn",
                     service_account="serviceAccount"
@@ -5938,6 +6020,7 @@ class CfnAddonProps:
             check_type(argname="argument cluster_name", value=cluster_name, expected_type=type_hints["cluster_name"])
             check_type(argname="argument addon_version", value=addon_version, expected_type=type_hints["addon_version"])
             check_type(argname="argument configuration_values", value=configuration_values, expected_type=type_hints["configuration_values"])
+            check_type(argname="argument namespace_config", value=namespace_config, expected_type=type_hints["namespace_config"])
             check_type(argname="argument pod_identity_associations", value=pod_identity_associations, expected_type=type_hints["pod_identity_associations"])
             check_type(argname="argument preserve_on_delete", value=preserve_on_delete, expected_type=type_hints["preserve_on_delete"])
             check_type(argname="argument resolve_conflicts", value=resolve_conflicts, expected_type=type_hints["resolve_conflicts"])
@@ -5951,6 +6034,8 @@ class CfnAddonProps:
             self._values["addon_version"] = addon_version
         if configuration_values is not None:
             self._values["configuration_values"] = configuration_values
+        if namespace_config is not None:
+            self._values["namespace_config"] = namespace_config
         if pod_identity_associations is not None:
             self._values["pod_identity_associations"] = pod_identity_associations
         if preserve_on_delete is not None:
@@ -6000,6 +6085,19 @@ class CfnAddonProps:
         result = self._values.get("configuration_values")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def namespace_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAddon.NamespaceConfigProperty]]:
+        '''The namespace configuration for the addon.
+
+        This specifies the Kubernetes namespace where the addon is installed.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-addon.html#cfn-eks-addon-namespaceconfig
+        '''
+        result = self._values.get("namespace_config")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAddon.NamespaceConfigProperty]], result)
+
     @builtins.property
     def pod_identity_associations(
         self,
@@ -18265,6 +18363,17 @@ class ServiceLoadBalancerAddressOptions:
 class TaintEffect(enum.Enum):
     '''Effect types of kubernetes node taint.
 
+    Note: These values are specifically for AWS EKS NodeGroups and use the AWS API format.
+    When using AWS CLI or API, taint effects must be NO_SCHEDULE, PREFER_NO_SCHEDULE, or NO_EXECUTE.
+    When using Kubernetes directly or kubectl, taint effects must be NoSchedule, PreferNoSchedule, or NoExecute.
+
+    For Kubernetes manifests (like Karpenter NodePools), use string literals with PascalCase format:
+
+    - 'NoSchedule' instead of TaintEffect.NO_SCHEDULE
+    - 'PreferNoSchedule' instead of TaintEffect.PREFER_NO_SCHEDULE
+    - 'NoExecute' instead of TaintEffect.NO_EXECUTE
+
+    :see: https://docs.aws.amazon.com/eks/latest/userguide/node-taints-managed-node-groups.html
     :exampleMetadata: infused
 
     Example::
@@ -22322,6 +22431,7 @@ def _typecheckingstub__45ff0728c7d6fc5f47c97aa791c327f70a32e19bdf463d94d9351053f
     cluster_name: builtins.str,
     addon_version: typing.Optional[builtins.str] = None,
     configuration_values: typing.Optional[builtins.str] = None,
+    namespace_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAddon.NamespaceConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     pod_identity_associations: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAddon.PodIdentityAssociationProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     preserve_on_delete: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     resolve_conflicts: typing.Optional[builtins.str] = None,
@@ -22367,6 +22477,12 @@ def _typecheckingstub__f2b158aed78a78d2962c2650df64f6c3880ccb508ebd6b281bda6c1a1
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__039b518895f39f54dce3ea31a35bed66445fb7b5e7f4c52a89adafc86911f331(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAddon.NamespaceConfigProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__04a430658e28600fba10a8c3e5edab2978904829dda6f2c70e9cca8560f7e400(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnAddon.PodIdentityAssociationProperty]]]],
 ) -> None:
@@ -22397,6 +22513,13 @@ def _typecheckingstub__61cfcc2cd9aba81e02df7f2a5c976044dc5e5cbf6c05b880c4944cb35
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__c336eaf5f7476c60c3b0b8dc688fc9ea53319525b39f820a30e2510a38e67cbc(
+    *,
+    namespace: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__3925c850dd0d0ad3b9faeea87aafbe69220a7bf33d95af5527715674625c9891(
     *,
     role_arn: builtins.str,
@@ -22411,6 +22534,7 @@ def _typecheckingstub__484b2779e40e4780cb0940ac7bc9daaf91fa04347613d732138d3be3d
     cluster_name: builtins.str,
     addon_version: typing.Optional[builtins.str] = None,
     configuration_values: typing.Optional[builtins.str] = None,
+    namespace_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAddon.NamespaceConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     pod_identity_associations: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAddon.PodIdentityAssociationProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     preserve_on_delete: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     resolve_conflicts: typing.Optional[builtins.str] = None,

aws_cdk/aws_elasticloadbalancingv2/__init__.py

@@ -10666,7 +10666,7 @@ class CfnTrustStore(
 ):
     '''Creates a trust store.
 
-    You must specify ``CaCertificatesBundleS3Bucket`` and ``CaCertificatesBundleS3Key`` .
+    You must specify ``CaCertificatesBundleS3Bucket`` and ``CaCertificatesBundleS3Key`` . When you create a trust store, you must specify ``Name`` .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-truststore.html
     :cloudformationResource: AWS::ElasticLoadBalancingV2::TrustStore
@@ -10766,7 +10766,9 @@ class CfnTrustStore(
     @builtins.property
     @jsii.member(jsii_name="attrStatus")
     def attr_status(self) -> builtins.str:
-        '''The current status of the trust store.
+        '''The status of the trust store.
+
+        The possible values are ``CREATING`` and ``ACTIVE`` .
 
         :cloudformationAttribute: Status
         '''
@@ -11093,6 +11095,8 @@ class CfnTrustStoreRevocation(
     def attr_trust_store_revocations(self) -> _IResolvable_da3f097b:
         '''Information about the revocation file in the trust store.
 
+        For more information, see `TrustStoreRevocation <https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-truststorerevocation-truststorerevocation.html>`_ .
+
         :cloudformationAttribute: TrustStoreRevocations
         '''
         return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrTrustStoreRevocations"))

aws_cdk/aws_entityresolution/__init__.py

@@ -140,6 +140,9 @@ class CfnIdMappingWorkflow(
         
             # the properties below are optional
             description="description",
+            id_mapping_incremental_run_config=entityresolution.CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty(
+                incremental_run_type="incrementalRunType"
+            ),
             output_source_config=[entityresolution.CfnIdMappingWorkflow.IdMappingWorkflowOutputSourceProperty(
                 output_s3_path="outputS3Path",
         
@@ -163,6 +166,7 @@ class CfnIdMappingWorkflow(
         role_arn: builtins.str,
         workflow_name: builtins.str,
         description: typing.Optional[builtins.str] = None,
+        id_mapping_incremental_run_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         output_source_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnIdMappingWorkflow.IdMappingWorkflowOutputSourceProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
@@ -174,6 +178,7 @@ class CfnIdMappingWorkflow(
         :param role_arn: The Amazon Resource Name (ARN) of the IAM role. AWS Entity Resolution assumes this role to create resources on your behalf as part of workflow execution.
         :param workflow_name: The name of the workflow. There can't be multiple ``IdMappingWorkflows`` with the same name.
         :param description: A description of the workflow.
+        :param id_mapping_incremental_run_config: 
         :param output_source_config: A list of ``IdMappingWorkflowOutputSource`` objects, each of which contains fields ``outputS3Path`` and ``KMSArn`` .
         :param tags: The tags used to organize, track, or control access for this resource.
         '''
@@ -187,6 +192,7 @@ class CfnIdMappingWorkflow(
             role_arn=role_arn,
             workflow_name=workflow_name,
             description=description,
+            id_mapping_incremental_run_config=id_mapping_incremental_run_config,
             output_source_config=output_source_config,
             tags=tags,
         )
@@ -336,6 +342,23 @@ class CfnIdMappingWorkflow(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="idMappingIncrementalRunConfig")
+    def id_mapping_incremental_run_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty"]], jsii.get(self, "idMappingIncrementalRunConfig"))
+
+    @id_mapping_incremental_run_config.setter
+    def id_mapping_incremental_run_config(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__05343eaa423891f629815a20fdb306f3b3da6aa0d3418d30466a32ec633713a2)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "idMappingIncrementalRunConfig", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="outputSourceConfig")
     def output_source_config(
@@ -367,6 +390,56 @@ class CfnIdMappingWorkflow(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_entityresolution.CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={"incremental_run_type": "incrementalRunType"},
+    )
+    class IdMappingIncrementalRunConfigProperty:
+        def __init__(self, *, incremental_run_type: builtins.str) -> None:
+            '''
+            :param incremental_run_type: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-entityresolution-idmappingworkflow-idmappingincrementalrunconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_entityresolution as entityresolution
+                
+                id_mapping_incremental_run_config_property = entityresolution.CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty(
+                    incremental_run_type="incrementalRunType"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__115e9b3aa3c15532ffa6d06e165d032acb0428815b530082a13312eaf046d37b)
+                check_type(argname="argument incremental_run_type", value=incremental_run_type, expected_type=type_hints["incremental_run_type"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "incremental_run_type": incremental_run_type,
+            }
+
+        @builtins.property
+        def incremental_run_type(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-entityresolution-idmappingworkflow-idmappingincrementalrunconfig.html#cfn-entityresolution-idmappingworkflow-idmappingincrementalrunconfig-incrementalruntype
+            '''
+            result = self._values.get("incremental_run_type")
+            assert result is not None, "Required property 'incremental_run_type' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "IdMappingIncrementalRunConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_entityresolution.CfnIdMappingWorkflow.IdMappingRuleBasedPropertiesProperty",
         jsii_struct_bases=[],
@@ -1015,6 +1088,7 @@ class CfnIdMappingWorkflow(
         "role_arn": "roleArn",
         "workflow_name": "workflowName",
         "description": "description",
+        "id_mapping_incremental_run_config": "idMappingIncrementalRunConfig",
         "output_source_config": "outputSourceConfig",
         "tags": "tags",
     },
@@ -1028,6 +1102,7 @@ class CfnIdMappingWorkflowProps:
         role_arn: builtins.str,
         workflow_name: builtins.str,
         description: typing.Optional[builtins.str] = None,
+        id_mapping_incremental_run_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         output_source_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnIdMappingWorkflow.IdMappingWorkflowOutputSourceProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
@@ -1038,6 +1113,7 @@ class CfnIdMappingWorkflowProps:
         :param role_arn: The Amazon Resource Name (ARN) of the IAM role. AWS Entity Resolution assumes this role to create resources on your behalf as part of workflow execution.
         :param workflow_name: The name of the workflow. There can't be multiple ``IdMappingWorkflows`` with the same name.
         :param description: A description of the workflow.
+        :param id_mapping_incremental_run_config: 
         :param output_source_config: A list of ``IdMappingWorkflowOutputSource`` objects, each of which contains fields ``outputS3Path`` and ``KMSArn`` .
         :param tags: The tags used to organize, track, or control access for this resource.
 
@@ -1088,6 +1164,9 @@ class CfnIdMappingWorkflowProps:
             
                 # the properties below are optional
                 description="description",
+                id_mapping_incremental_run_config=entityresolution.CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty(
+                    incremental_run_type="incrementalRunType"
+                ),
                 output_source_config=[entityresolution.CfnIdMappingWorkflow.IdMappingWorkflowOutputSourceProperty(
                     output_s3_path="outputS3Path",
             
@@ -1107,6 +1186,7 @@ class CfnIdMappingWorkflowProps:
             check_type(argname="argument role_arn", value=role_arn, expected_type=type_hints["role_arn"])
             check_type(argname="argument workflow_name", value=workflow_name, expected_type=type_hints["workflow_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument id_mapping_incremental_run_config", value=id_mapping_incremental_run_config, expected_type=type_hints["id_mapping_incremental_run_config"])
             check_type(argname="argument output_source_config", value=output_source_config, expected_type=type_hints["output_source_config"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -1117,6 +1197,8 @@ class CfnIdMappingWorkflowProps:
         }
         if description is not None:
             self._values["description"] = description
+        if id_mapping_incremental_run_config is not None:
+            self._values["id_mapping_incremental_run_config"] = id_mapping_incremental_run_config
         if output_source_config is not None:
             self._values["output_source_config"] = output_source_config
         if tags is not None:
@@ -1179,6 +1261,16 @@ class CfnIdMappingWorkflowProps:
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def id_mapping_incremental_run_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-entityresolution-idmappingworkflow.html#cfn-entityresolution-idmappingworkflow-idmappingincrementalrunconfig
+        '''
+        result = self._values.get("id_mapping_incremental_run_config")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty]], result)
+
     @builtins.property
     def output_source_config(
         self,
@@ -4546,6 +4638,7 @@ def _typecheckingstub__498454075de816db2ba240e783f9530effd93522c63f637ee5bff5bbf
     role_arn: builtins.str,
     workflow_name: builtins.str,
     description: typing.Optional[builtins.str] = None,
+    id_mapping_incremental_run_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     output_source_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnIdMappingWorkflow.IdMappingWorkflowOutputSourceProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
@@ -4594,6 +4687,12 @@ def _typecheckingstub__73508385219d92414fa73246ef135667c9eca037d9a796d5490e9c29d
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__05343eaa423891f629815a20fdb306f3b3da6aa0d3418d30466a32ec633713a2(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c441bfde4467a201e4e9322b69a020514feb4e0efb56d31892f1f02e461d7119(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnIdMappingWorkflow.IdMappingWorkflowOutputSourceProperty]]]],
 ) -> None:
@@ -4606,6 +4705,13 @@ def _typecheckingstub__f1c5de5e1db5e25e42cb52039b70835fa351dc563f560ac5ff3604bab
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__115e9b3aa3c15532ffa6d06e165d032acb0428815b530082a13312eaf046d37b(
+    *,
+    incremental_run_type: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__4bb92f6ba90c637e6800332c85746dca9a127a9d4ac3f6130ef5f9057e52d644(
     *,
     attribute_matching_model: builtins.str,
@@ -4673,6 +4779,7 @@ def _typecheckingstub__a92ec1b5f460936930fefdd0c239f69c3ec93198e4a71c3867bbe1bf1
     role_arn: builtins.str,
     workflow_name: builtins.str,
     description: typing.Optional[builtins.str] = None,
+    id_mapping_incremental_run_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnIdMappingWorkflow.IdMappingIncrementalRunConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     output_source_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnIdMappingWorkflow.IdMappingWorkflowOutputSourceProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None: