aws-cdk-lib 2.213.0__py3-none-any.whl → 2.214.0__py3-none-any.whl

aws_cdk/aws_iam/__init__.py

@@ -7167,35 +7167,20 @@ class Effect(enum.Enum):
 
     Example::
 
-        from aws_cdk.aws_apigatewayv2_authorizers import WebSocketIamAuthorizer
-        from aws_cdk.aws_apigatewayv2_integrations import WebSocketLambdaIntegration
+        # books: apigateway.Resource
+        # iam_user: iam.User
         
-        # This function handles your connect route
-        # connect_handler: lambda.Function
         
-        
-        web_socket_api = apigwv2.WebSocketApi(self, "WebSocketApi")
-        
-        web_socket_api.add_route("$connect",
-            integration=WebSocketLambdaIntegration("Integration", connect_handler),
-            authorizer=WebSocketIamAuthorizer()
-        )
-        
-        # Create an IAM user (identity)
-        user = iam.User(self, "User")
-        
-        web_socket_arn = Stack.of(self).format_arn(
-            service="execute-api",
-            resource=web_socket_api.api_id
+        get_books = books.add_method("GET", apigateway.HttpIntegration("http://amazon.com"),
+            authorization_type=apigateway.AuthorizationType.IAM
         )
         
-        # Grant access to the IAM user
-        user.attach_inline_policy(iam.Policy(self, "AllowInvoke",
+        iam_user.attach_inline_policy(iam.Policy(self, "AllowBooks",
             statements=[
                 iam.PolicyStatement(
                     actions=["execute-api:Invoke"],
                     effect=iam.Effect.ALLOW,
-                    resources=[web_socket_arn]
+                    resources=[get_books.method_arn]
                 )
             ]
         ))
@@ -9826,6 +9811,24 @@ class OpenIdConnectProvider(
     requires access to AWS resources, but you don't want to create custom sign-in
     code or manage your own user identities.
 
+    ⚠️ **IMPORTANT NOTICE FOR CONTRIBUTORS** ⚠️
+
+    **DO NOT ADD NEW FEATURES TO THIS CONSTRUCT**
+
+    This construct uses a custom resource with Lambda functions and is maintained
+    for backward compatibility only. We cannot deprecate it due to its usage in
+    existing services like EKS (see https://github.com/aws/aws-cdk/pull/28634#discussion_r1842962697).
+
+    For new functionality, developers should use ``OidcProviderNative`` instead, which
+    utilizes the native CloudFormation resource ``AWS::IAM::OIDCProvider`` and provides
+    the same functionality with less complexity.
+
+    If you are considering adding features to this construct, please:
+
+    1. Consider implementing the feature in ``OidcProviderNative`` instead
+    2. Discuss with the CDK team before proceeding
+    3. Ensure any changes maintain strict backward compatibility
+
     :see: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_oidc.html
     :resource: AWS::CloudFormation::CustomResource
     :exampleMetadata: infused