aws-cdk-lib 2.213.0__py3-none-any.whl → 2.214.0__py3-none-any.whl

aws_cdk/aws_qbusiness/__init__.py

@@ -2865,7 +2865,7 @@ class CfnDataSource(
         :param description: A description for the data source connector.
         :param document_enrichment_configuration: Provides the configuration information for altering document metadata and content during the document ingestion process. For more information, see `Custom document enrichment <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/custom-document-enrichment.html>`_ .
         :param media_extraction_configuration: The configuration for extracting information from media in documents.
-        :param role_arn: The Amazon Resource Name (ARN) of an IAM role with permission to access the data source and required resources.
+        :param role_arn: The Amazon Resource Name (ARN) of an IAM role with permission to access the data source and required resources. This field is required for all connector types except custom connectors, where it is optional.
         :param sync_schedule: Sets the frequency for Amazon Q Business to check the documents in your data source repository and update your index. If you don't set a schedule, Amazon Q Business won't periodically update the index. Specify a ``cron-`` format schedule string or an empty string to indicate that the index is updated on demand. You can't specify the ``Schedule`` parameter when the ``Type`` parameter is set to ``CUSTOM`` . If you do, you receive a ``ValidationException`` exception.
         :param tags: A list of key-value pairs that identify or categorize the data source connector. You can also use tags to help control access to the data source connector. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
         :param vpc_configuration: Configuration information for an Amazon VPC (Virtual Private Cloud) to connect to your data source. For more information, see `Using Amazon VPC with Amazon Q Business connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connector-vpc.html>`_ .
@@ -4268,7 +4268,7 @@ class CfnDataSourceProps:
         :param description: A description for the data source connector.
         :param document_enrichment_configuration: Provides the configuration information for altering document metadata and content during the document ingestion process. For more information, see `Custom document enrichment <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/custom-document-enrichment.html>`_ .
         :param media_extraction_configuration: The configuration for extracting information from media in documents.
-        :param role_arn: The Amazon Resource Name (ARN) of an IAM role with permission to access the data source and required resources.
+        :param role_arn: The Amazon Resource Name (ARN) of an IAM role with permission to access the data source and required resources. This field is required for all connector types except custom connectors, where it is optional.
         :param sync_schedule: Sets the frequency for Amazon Q Business to check the documents in your data source repository and update your index. If you don't set a schedule, Amazon Q Business won't periodically update the index. Specify a ``cron-`` format schedule string or an empty string to indicate that the index is updated on demand. You can't specify the ``Schedule`` parameter when the ``Type`` parameter is set to ``CUSTOM`` . If you do, you receive a ``ValidationException`` exception.
         :param tags: A list of key-value pairs that identify or categorize the data source connector. You can also use tags to help control access to the data source connector. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + -
         :param vpc_configuration: Configuration information for an Amazon VPC (Virtual Private Cloud) to connect to your data source. For more information, see `Using Amazon VPC with Amazon Q Business connectors <https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connector-vpc.html>`_ .
@@ -4501,6 +4501,8 @@ class CfnDataSourceProps:
     def role_arn(self) -> typing.Optional[builtins.str]:
         '''The Amazon Resource Name (ARN) of an IAM role with permission to access the data source and required resources.
 
+        This field is required for all connector types except custom connectors, where it is optional.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-datasource.html#cfn-qbusiness-datasource-rolearn
         '''
         result = self._values.get("role_arn")

aws_cdk/aws_rds/__init__.py

@@ -434,6 +434,25 @@ To apply changes of the cluster, such as engine version, in the next scheduled m
 
 For details, see [Modifying an Amazon Aurora DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Modifying.html).
 
+### Retaining Automated Backups
+
+By default, when a database cluster is deleted, automated backups are removed immediately unless an AWS Backup policy specifies a point-in-time restore rule. You can control this behavior using the `deleteAutomatedBackups` property:
+
+```python
+# vpc: ec2.IVpc
+
+# Retain automated backups after cluster deletion
+rds.DatabaseCluster(self, "Database",
+    engine=rds.DatabaseClusterEngine.aurora_mysql(version=rds.AuroraMysqlEngineVersion.VER_3_01_0),
+    writer=rds.ClusterInstance.provisioned("writer"),
+    vpc=vpc,
+    delete_automated_backups=False
+)
+```
+
+When set to `false`, automated backups are retained according to the configured retention period after the cluster is deleted. When set to `true` or not specified (default), automated backups are deleted immediately when the cluster is deleted.
+Detail about this feature can be found in the [AWS documentation](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.Retaining.html).
+
 ### Migrating from instanceProps
 
 Creating instances in a `DatabaseCluster` using `instanceProps` & `instances` is
@@ -2391,11 +2410,14 @@ class AuroraMysqlClusterEngineProps:
             
             cluster = rds.DatabaseCluster(self, "Database",
                 engine=rds.DatabaseClusterEngine.aurora_mysql(version=rds.AuroraMysqlEngineVersion.VER_3_01_0),
-                writer=rds.ClusterInstance.provisioned("Instance",
-                    instance_type=ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE3, ec2.InstanceSize.SMALL)
+                writer=rds.ClusterInstance.provisioned("writer",
+                    ca_certificate=rds.CaCertificate.RDS_CA_RSA2048_G1
                 ),
-                readers=[rds.ClusterInstance.provisioned("reader")],
-                instance_update_behaviour=rds.InstanceUpdateBehaviour.ROLLING,  # Optional - defaults to rds.InstanceUpdateBehaviour.BULK
+                readers=[
+                    rds.ClusterInstance.serverless_v2("reader",
+                        ca_certificate=rds.CaCertificate.of("custom-ca")
+                    )
+                ],
                 vpc=vpc
             )
         '''
@@ -4046,6 +4068,12 @@ class AuroraPostgresEngineVersion(
         '''Version "13.20".'''
         return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_13_20"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_13_21")
+    def VER_13_21(cls) -> "AuroraPostgresEngineVersion":
+        '''Version "13.21".'''
+        return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_13_21"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_13_3")
     def VER_13_3(cls) -> "AuroraPostgresEngineVersion":
@@ -4165,6 +4193,12 @@ class AuroraPostgresEngineVersion(
         '''Version "14.17".'''
         return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_14_17"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_14_18")
+    def VER_14_18(cls) -> "AuroraPostgresEngineVersion":
+        '''Version "14.18".'''
+        return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_14_18"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_14_3")
     def VER_14_3(cls) -> "AuroraPostgresEngineVersion":
@@ -4239,6 +4273,12 @@ class AuroraPostgresEngineVersion(
         '''Version "15.12".'''
         return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_15_12"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_15_13")
+    def VER_15_13(cls) -> "AuroraPostgresEngineVersion":
+        '''Version "15.13".'''
+        return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_15_13"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_15_2")
     def VER_15_2(cls) -> "AuroraPostgresEngineVersion":
@@ -4373,6 +4413,12 @@ class AuroraPostgresEngineVersion(
         '''Version "16.8 limitless".'''
         return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_16_8_LIMITLESS"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_16_9")
+    def VER_16_9(cls) -> "AuroraPostgresEngineVersion":
+        '''Version "16.9".'''
+        return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_16_9"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_17_1")
     def VER_17_1(cls) -> "AuroraPostgresEngineVersion":
@@ -21708,6 +21754,7 @@ class DatabaseClusterEngine(
         "credentials": "credentials",
         "database_insights_mode": "databaseInsightsMode",
         "default_database_name": "defaultDatabaseName",
+        "delete_automated_backups": "deleteAutomatedBackups",
         "deletion_protection": "deletionProtection",
         "domain": "domain",
         "domain_role": "domainRole",
@@ -21769,6 +21816,7 @@ class DatabaseClusterFromSnapshotProps:
         credentials: typing.Optional[Credentials] = None,
         database_insights_mode: typing.Optional["DatabaseInsightsMode"] = None,
         default_database_name: typing.Optional[builtins.str] = None,
+        delete_automated_backups: typing.Optional[builtins.bool] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         domain: typing.Optional[builtins.str] = None,
         domain_role: typing.Optional[_IRole_235f5d8e] = None,
@@ -21827,6 +21875,7 @@ class DatabaseClusterFromSnapshotProps:
         :param credentials: (deprecated) Credentials for the administrative user. Note - using this prop only works with ``Credentials.fromPassword()`` with the username of the snapshot, ``Credentials.fromUsername()`` with the username and password of the snapshot or ``Credentials.fromSecret()`` with a secret containing the username and password of the snapshot. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password that **will not be applied** to the cluster, use ``snapshotCredentials`` for the correct behavior.
         :param database_insights_mode: The database insights mode. Default: - DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set.
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
+        :param delete_automated_backups: Specifies whether to remove automated backups immediately after the DB cluster is deleted. Default: undefined - AWS RDS default is to remove automated backups immediately after the DB cluster is deleted, unless the AWS Backup policy specifies a point-in-time restore rule.
         :param deletion_protection: Indicates whether the DB cluster should have deletion protection enabled. Default: - true if ``removalPolicy`` is RETAIN, ``undefined`` otherwise, which will not enable deletion protection. To disable deletion protection after it has been enabled, you must explicitly set this value to ``false``.
         :param domain: Directory ID for associating the DB cluster with a specific Active Directory. Necessary for enabling Kerberos authentication. If specified, the DB cluster joins the given Active Directory, enabling Kerberos authentication. If not specified, the DB cluster will not be associated with any Active Directory, and Kerberos authentication will not be enabled. Default: - DB cluster is not associated with an Active Directory; Kerberos authentication is not enabled.
         :param domain_role: The IAM role to be used when making API calls to the Directory Service. The role needs the AWS-managed policy ``AmazonRDSDirectoryServiceAccess`` or equivalent. Default: - If ``DatabaseClusterBaseProps.domain`` is specified, a role with the ``AmazonRDSDirectoryServiceAccess`` policy is automatically created.
@@ -21904,6 +21953,7 @@ class DatabaseClusterFromSnapshotProps:
             check_type(argname="argument credentials", value=credentials, expected_type=type_hints["credentials"])
             check_type(argname="argument database_insights_mode", value=database_insights_mode, expected_type=type_hints["database_insights_mode"])
             check_type(argname="argument default_database_name", value=default_database_name, expected_type=type_hints["default_database_name"])
+            check_type(argname="argument delete_automated_backups", value=delete_automated_backups, expected_type=type_hints["delete_automated_backups"])
             check_type(argname="argument deletion_protection", value=deletion_protection, expected_type=type_hints["deletion_protection"])
             check_type(argname="argument domain", value=domain, expected_type=type_hints["domain"])
             check_type(argname="argument domain_role", value=domain_role, expected_type=type_hints["domain_role"])
@@ -21974,6 +22024,8 @@ class DatabaseClusterFromSnapshotProps:
             self._values["database_insights_mode"] = database_insights_mode
         if default_database_name is not None:
             self._values["default_database_name"] = default_database_name
+        if delete_automated_backups is not None:
+            self._values["delete_automated_backups"] = delete_automated_backups
         if deletion_protection is not None:
             self._values["deletion_protection"] = deletion_protection
         if domain is not None:
@@ -22225,6 +22277,15 @@ class DatabaseClusterFromSnapshotProps:
         result = self._values.get("default_database_name")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def delete_automated_backups(self) -> typing.Optional[builtins.bool]:
+        '''Specifies whether to remove automated backups immediately after the DB cluster is deleted.
+
+        :default: undefined - AWS RDS default is to remove automated backups immediately after the DB cluster is deleted, unless the AWS Backup policy specifies a point-in-time restore rule.
+        '''
+        result = self._values.get("delete_automated_backups")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def deletion_protection(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether the DB cluster should have deletion protection enabled.
@@ -22775,6 +22836,7 @@ class DatabaseClusterLookupOptions:
         "credentials": "credentials",
         "database_insights_mode": "databaseInsightsMode",
         "default_database_name": "defaultDatabaseName",
+        "delete_automated_backups": "deleteAutomatedBackups",
         "deletion_protection": "deletionProtection",
         "domain": "domain",
         "domain_role": "domainRole",
@@ -22835,6 +22897,7 @@ class DatabaseClusterProps:
         credentials: typing.Optional[Credentials] = None,
         database_insights_mode: typing.Optional["DatabaseInsightsMode"] = None,
         default_database_name: typing.Optional[builtins.str] = None,
+        delete_automated_backups: typing.Optional[builtins.bool] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         domain: typing.Optional[builtins.str] = None,
         domain_role: typing.Optional[_IRole_235f5d8e] = None,
@@ -22892,6 +22955,7 @@ class DatabaseClusterProps:
         :param credentials: Credentials for the administrative user. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password
         :param database_insights_mode: The database insights mode. Default: - DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set.
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
+        :param delete_automated_backups: Specifies whether to remove automated backups immediately after the DB cluster is deleted. Default: undefined - AWS RDS default is to remove automated backups immediately after the DB cluster is deleted, unless the AWS Backup policy specifies a point-in-time restore rule.
         :param deletion_protection: Indicates whether the DB cluster should have deletion protection enabled. Default: - true if ``removalPolicy`` is RETAIN, ``undefined`` otherwise, which will not enable deletion protection. To disable deletion protection after it has been enabled, you must explicitly set this value to ``false``.
         :param domain: Directory ID for associating the DB cluster with a specific Active Directory. Necessary for enabling Kerberos authentication. If specified, the DB cluster joins the given Active Directory, enabling Kerberos authentication. If not specified, the DB cluster will not be associated with any Active Directory, and Kerberos authentication will not be enabled. Default: - DB cluster is not associated with an Active Directory; Kerberos authentication is not enabled.
         :param domain_role: The IAM role to be used when making API calls to the Directory Service. The role needs the AWS-managed policy ``AmazonRDSDirectoryServiceAccess`` or equivalent. Default: - If ``DatabaseClusterBaseProps.domain`` is specified, a role with the ``AmazonRDSDirectoryServiceAccess`` policy is automatically created.
@@ -22977,6 +23041,7 @@ class DatabaseClusterProps:
             check_type(argname="argument credentials", value=credentials, expected_type=type_hints["credentials"])
             check_type(argname="argument database_insights_mode", value=database_insights_mode, expected_type=type_hints["database_insights_mode"])
             check_type(argname="argument default_database_name", value=default_database_name, expected_type=type_hints["default_database_name"])
+            check_type(argname="argument delete_automated_backups", value=delete_automated_backups, expected_type=type_hints["delete_automated_backups"])
             check_type(argname="argument deletion_protection", value=deletion_protection, expected_type=type_hints["deletion_protection"])
             check_type(argname="argument domain", value=domain, expected_type=type_hints["domain"])
             check_type(argname="argument domain_role", value=domain_role, expected_type=type_hints["domain_role"])
@@ -23046,6 +23111,8 @@ class DatabaseClusterProps:
             self._values["database_insights_mode"] = database_insights_mode
         if default_database_name is not None:
             self._values["default_database_name"] = default_database_name
+        if delete_automated_backups is not None:
+            self._values["delete_automated_backups"] = delete_automated_backups
         if deletion_protection is not None:
             self._values["deletion_protection"] = deletion_protection
         if domain is not None:
@@ -23274,6 +23341,15 @@ class DatabaseClusterProps:
         result = self._values.get("default_database_name")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def delete_automated_backups(self) -> typing.Optional[builtins.bool]:
+        '''Specifies whether to remove automated backups immediately after the DB cluster is deleted.
+
+        :default: undefined - AWS RDS default is to remove automated backups immediately after the DB cluster is deleted, unless the AWS Backup policy specifies a point-in-time restore rule.
+        '''
+        result = self._values.get("delete_automated_backups")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def deletion_protection(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether the DB cluster should have deletion protection enabled.
@@ -34052,6 +34128,12 @@ class MysqlEngineVersion(
         '''Version "8.0.42".'''
         return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_0_42"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_8_0_43")
+    def VER_8_0_43(cls) -> "MysqlEngineVersion":
+        '''Version "8.0.43".'''
+        return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_0_43"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_8_4_3")
     def VER_8_4_3(cls) -> "MysqlEngineVersion":
@@ -34070,6 +34152,12 @@ class MysqlEngineVersion(
         '''Version "8.4.5".'''
         return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_4_5"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_8_4_6")
+    def VER_8_4_6(cls) -> "MysqlEngineVersion":
+        '''Version "8.4.6".'''
+        return typing.cast("MysqlEngineVersion", jsii.sget(cls, "VER_8_4_6"))
+
     @builtins.property
     @jsii.member(jsii_name="mysqlFullVersion")
     def mysql_full_version(self) -> builtins.str:
@@ -41474,6 +41562,12 @@ class SqlServerEngineVersion(
         '''Version "13.00.6455.2.v1".'''
         return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_13_00_6455_2_V1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_13_00_6460_7_V1")
+    def VER_13_00_6460_7_V1(cls) -> "SqlServerEngineVersion":
+        '''Version "13.00.6460.7.v1".'''
+        return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_13_00_6460_7_V1"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_14")
     def VER_14(cls) -> "SqlServerEngineVersion":
@@ -41624,6 +41718,12 @@ class SqlServerEngineVersion(
         '''Version "14.00.3485.1.v1 ".'''
         return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_14_00_3485_1_V1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_14_00_3495_9_V1")
+    def VER_14_00_3495_9_V1(cls) -> "SqlServerEngineVersion":
+        '''Version "14.00.3495.9.v1 ".'''
+        return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_14_00_3495_9_V1"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_15")
     def VER_15(cls) -> "SqlServerEngineVersion":
@@ -41756,6 +41856,12 @@ class SqlServerEngineVersion(
         '''Version "15.00.4430.1.v1".'''
         return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_15_00_4430_1_V1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_15_00_4435_7_V1")
+    def VER_15_00_4435_7_V1(cls) -> "SqlServerEngineVersion":
+        '''Version "15.00.4435.7.v1".'''
+        return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_15_00_4435_7_V1"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_16")
     def VER_16(cls) -> "SqlServerEngineVersion":
@@ -41840,6 +41946,18 @@ class SqlServerEngineVersion(
         '''Version "16.00.4185.3.v1".'''
         return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_16_00_4185_3_V1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_16_00_4195_2_V1")
+    def VER_16_00_4195_2_V1(cls) -> "SqlServerEngineVersion":
+        '''Version "16.00.4195.2.v1".'''
+        return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_16_00_4195_2_V1"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_16_00_4205_1_V1")
+    def VER_16_00_4205_1_V1(cls) -> "SqlServerEngineVersion":
+        '''Version "16.00.4205.1.v1".'''
+        return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_16_00_4205_1_V1"))
+
     @builtins.property
     @jsii.member(jsii_name="sqlServerFullVersion")
     def sql_server_full_version(self) -> builtins.str:
@@ -43682,6 +43800,7 @@ class DatabaseClusterFromSnapshot(
         credentials: typing.Optional[Credentials] = None,
         database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
         default_database_name: typing.Optional[builtins.str] = None,
+        delete_automated_backups: typing.Optional[builtins.bool] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         domain: typing.Optional[builtins.str] = None,
         domain_role: typing.Optional[_IRole_235f5d8e] = None,
@@ -43741,6 +43860,7 @@ class DatabaseClusterFromSnapshot(
         :param credentials: (deprecated) Credentials for the administrative user. Note - using this prop only works with ``Credentials.fromPassword()`` with the username of the snapshot, ``Credentials.fromUsername()`` with the username and password of the snapshot or ``Credentials.fromSecret()`` with a secret containing the username and password of the snapshot. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password that **will not be applied** to the cluster, use ``snapshotCredentials`` for the correct behavior.
         :param database_insights_mode: The database insights mode. Default: - DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set.
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
+        :param delete_automated_backups: Specifies whether to remove automated backups immediately after the DB cluster is deleted. Default: undefined - AWS RDS default is to remove automated backups immediately after the DB cluster is deleted, unless the AWS Backup policy specifies a point-in-time restore rule.
         :param deletion_protection: Indicates whether the DB cluster should have deletion protection enabled. Default: - true if ``removalPolicy`` is RETAIN, ``undefined`` otherwise, which will not enable deletion protection. To disable deletion protection after it has been enabled, you must explicitly set this value to ``false``.
         :param domain: Directory ID for associating the DB cluster with a specific Active Directory. Necessary for enabling Kerberos authentication. If specified, the DB cluster joins the given Active Directory, enabling Kerberos authentication. If not specified, the DB cluster will not be associated with any Active Directory, and Kerberos authentication will not be enabled. Default: - DB cluster is not associated with an Active Directory; Kerberos authentication is not enabled.
         :param domain_role: The IAM role to be used when making API calls to the Directory Service. The role needs the AWS-managed policy ``AmazonRDSDirectoryServiceAccess`` or equivalent. Default: - If ``DatabaseClusterBaseProps.domain`` is specified, a role with the ``AmazonRDSDirectoryServiceAccess`` policy is automatically created.
@@ -43802,6 +43922,7 @@ class DatabaseClusterFromSnapshot(
             credentials=credentials,
             database_insights_mode=database_insights_mode,
             default_database_name=default_database_name,
+            delete_automated_backups=delete_automated_backups,
             deletion_protection=deletion_protection,
             domain=domain,
             domain_role=domain_role,
@@ -48069,6 +48190,7 @@ class DatabaseCluster(
         credentials: typing.Optional[Credentials] = None,
         database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
         default_database_name: typing.Optional[builtins.str] = None,
+        delete_automated_backups: typing.Optional[builtins.bool] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         domain: typing.Optional[builtins.str] = None,
         domain_role: typing.Optional[_IRole_235f5d8e] = None,
@@ -48127,6 +48249,7 @@ class DatabaseCluster(
         :param credentials: Credentials for the administrative user. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password
         :param database_insights_mode: The database insights mode. Default: - DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set.
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
+        :param delete_automated_backups: Specifies whether to remove automated backups immediately after the DB cluster is deleted. Default: undefined - AWS RDS default is to remove automated backups immediately after the DB cluster is deleted, unless the AWS Backup policy specifies a point-in-time restore rule.
         :param deletion_protection: Indicates whether the DB cluster should have deletion protection enabled. Default: - true if ``removalPolicy`` is RETAIN, ``undefined`` otherwise, which will not enable deletion protection. To disable deletion protection after it has been enabled, you must explicitly set this value to ``false``.
         :param domain: Directory ID for associating the DB cluster with a specific Active Directory. Necessary for enabling Kerberos authentication. If specified, the DB cluster joins the given Active Directory, enabling Kerberos authentication. If not specified, the DB cluster will not be associated with any Active Directory, and Kerberos authentication will not be enabled. Default: - DB cluster is not associated with an Active Directory; Kerberos authentication is not enabled.
         :param domain_role: The IAM role to be used when making API calls to the Directory Service. The role needs the AWS-managed policy ``AmazonRDSDirectoryServiceAccess`` or equivalent. Default: - If ``DatabaseClusterBaseProps.domain`` is specified, a role with the ``AmazonRDSDirectoryServiceAccess`` policy is automatically created.
@@ -48187,6 +48310,7 @@ class DatabaseCluster(
             credentials=credentials,
             database_insights_mode=database_insights_mode,
             default_database_name=default_database_name,
+            delete_automated_backups=delete_automated_backups,
             deletion_protection=deletion_protection,
             domain=domain,
             domain_role=domain_role,
@@ -51980,6 +52104,7 @@ def _typecheckingstub__1e44b5aef872ca17869a17181382f06cd0166bdbe07e2c33701d3bf1e
     credentials: typing.Optional[Credentials] = None,
     database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
     default_database_name: typing.Optional[builtins.str] = None,
+    delete_automated_backups: typing.Optional[builtins.bool] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     domain: typing.Optional[builtins.str] = None,
     domain_role: typing.Optional[_IRole_235f5d8e] = None,
@@ -52047,6 +52172,7 @@ def _typecheckingstub__a32e21c90ab65d3cfdb3b7ef2a0d741ba1528ec8824cd1817d1e485b4
     credentials: typing.Optional[Credentials] = None,
     database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
     default_database_name: typing.Optional[builtins.str] = None,
+    delete_automated_backups: typing.Optional[builtins.bool] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     domain: typing.Optional[builtins.str] = None,
     domain_role: typing.Optional[_IRole_235f5d8e] = None,
@@ -53296,6 +53422,7 @@ def _typecheckingstub__d1a2e259091e12a41b0f5818df495769518e049ebcc89ed340ffc7ba4
     credentials: typing.Optional[Credentials] = None,
     database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
     default_database_name: typing.Optional[builtins.str] = None,
+    delete_automated_backups: typing.Optional[builtins.bool] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     domain: typing.Optional[builtins.str] = None,
     domain_role: typing.Optional[_IRole_235f5d8e] = None,
@@ -53816,6 +53943,7 @@ def _typecheckingstub__c6184cbbefaa372690b9776dafecbf5857cf9bfbab91d1666aad22c56
     credentials: typing.Optional[Credentials] = None,
     database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
     default_database_name: typing.Optional[builtins.str] = None,
+    delete_automated_backups: typing.Optional[builtins.bool] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     domain: typing.Optional[builtins.str] = None,
     domain_role: typing.Optional[_IRole_235f5d8e] = None,

aws_cdk/aws_route53/__init__.py

@@ -652,6 +652,7 @@ from .. import (
     IResolvable as _IResolvable_da3f097b,
     IResource as _IResource_c80c4260,
     ITaggable as _ITaggable_36806126,
+    ITaggableV2 as _ITaggableV2_4e6798f8,
     RemovalPolicy as _RemovalPolicy_9f93c814,
     Resource as _Resource_45bc6135,
     TagManager as _TagManager_0a598cb3,
@@ -1352,7 +1353,7 @@ class CfnDNSSECProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
 class CfnHealthCheck(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1427,7 +1428,7 @@ class CfnHealthCheck(
         id: builtins.str,
         *,
         health_check_config: typing.Union[_IResolvable_da3f097b, typing.Union["CfnHealthCheck.HealthCheckConfigProperty", typing.Dict[builtins.str, typing.Any]]],
-        health_check_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnHealthCheck.HealthCheckTagProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        health_check_tags: typing.Optional[typing.Sequence[typing.Union["CfnHealthCheck.HealthCheckTagProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
@@ -1487,6 +1488,12 @@ class CfnHealthCheck(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrHealthCheckId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -1514,14 +1521,14 @@ class CfnHealthCheck(
     @jsii.member(jsii_name="healthCheckTags")
     def health_check_tags(
         self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnHealthCheck.HealthCheckTagProperty"]]]]:
+    ) -> typing.Optional[typing.List["CfnHealthCheck.HealthCheckTagProperty"]]:
         '''The ``HealthCheckTags`` property describes key-value pairs that are associated with an ``AWS::Route53::HealthCheck`` resource.'''
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnHealthCheck.HealthCheckTagProperty"]]]], jsii.get(self, "healthCheckTags"))
+        return typing.cast(typing.Optional[typing.List["CfnHealthCheck.HealthCheckTagProperty"]], jsii.get(self, "healthCheckTags"))
 
     @health_check_tags.setter
     def health_check_tags(
         self,
-        value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnHealthCheck.HealthCheckTagProperty"]]]],
+        value: typing.Optional[typing.List["CfnHealthCheck.HealthCheckTagProperty"]],
     ) -> None:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1d1493e762a114933a5a3775c215007c8d522e932362ff7c530eb00b515208ff)
@@ -2140,7 +2147,7 @@ class CfnHealthCheckProps:
         self,
         *,
         health_check_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnHealthCheck.HealthCheckConfigProperty, typing.Dict[builtins.str, typing.Any]]],
-        health_check_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnHealthCheck.HealthCheckTagProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        health_check_tags: typing.Optional[typing.Sequence[typing.Union[CfnHealthCheck.HealthCheckTagProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnHealthCheck``.
 
@@ -2216,13 +2223,13 @@ class CfnHealthCheckProps:
     @builtins.property
     def health_check_tags(
         self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnHealthCheck.HealthCheckTagProperty]]]]:
+    ) -> typing.Optional[typing.List[CfnHealthCheck.HealthCheckTagProperty]]:
         '''The ``HealthCheckTags`` property describes key-value pairs that are associated with an ``AWS::Route53::HealthCheck`` resource.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53-healthcheck.html#cfn-route53-healthcheck-healthchecktags
         '''
         result = self._values.get("health_check_tags")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnHealthCheck.HealthCheckTagProperty]]]], result)
+        return typing.cast(typing.Optional[typing.List[CfnHealthCheck.HealthCheckTagProperty]], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -15510,7 +15517,7 @@ def _typecheckingstub__469f7fe3ad975c091ea64f8ce59060016c4769f6532660a91964f0930
     id: builtins.str,
     *,
     health_check_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnHealthCheck.HealthCheckConfigProperty, typing.Dict[builtins.str, typing.Any]]],
-    health_check_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnHealthCheck.HealthCheckTagProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    health_check_tags: typing.Optional[typing.Sequence[typing.Union[CfnHealthCheck.HealthCheckTagProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -15534,7 +15541,7 @@ def _typecheckingstub__8b0df7baae49dfed1fb95576ba5c0e5d51660f268bef2a4d82fca3232
     pass
 
 def _typecheckingstub__1d1493e762a114933a5a3775c215007c8d522e932362ff7c530eb00b515208ff(
-    value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnHealthCheck.HealthCheckTagProperty]]]],
+    value: typing.Optional[typing.List[CfnHealthCheck.HealthCheckTagProperty]],
 ) -> None:
     """Type checking stubs"""
     pass
@@ -15581,7 +15588,7 @@ def _typecheckingstub__b181f58da0d2eb6f8c9ba8be7f7b44f29a68b4d09e2f4c600ab9522e6
 def _typecheckingstub__dcc59bb963f4ce3a4eb461ecda6f194c9faa6eea0ca5960c91dfd950e626f687(
     *,
     health_check_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnHealthCheck.HealthCheckConfigProperty, typing.Dict[builtins.str, typing.Any]]],
-    health_check_tags: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnHealthCheck.HealthCheckTagProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    health_check_tags: typing.Optional[typing.Sequence[typing.Union[CfnHealthCheck.HealthCheckTagProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
     pass

aws_cdk/aws_s3/__init__.py

@@ -4490,7 +4490,7 @@ class CfnBucket(
         :param metadata_table_configuration: The metadata table configuration of an Amazon S3 general purpose bucket.
         :param metrics_configurations: Specifies a metrics configuration for the CloudWatch request metrics (specified by the metrics configuration ID) from an Amazon S3 bucket. If you're updating an existing metrics configuration, note that this is a full replacement of the existing metrics configuration. If you don't include the elements you want to keep, they are erased. For more information, see `PutBucketMetricsConfiguration <https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTMetricConfiguration.html>`_ .
         :param notification_configuration: Configuration that defines how Amazon S3 handles bucket notifications.
-        :param object_lock_configuration: .. epigraph:: This operation is not supported for directory buckets. Places an Object Lock configuration on the specified bucket. The rule specified in the Object Lock configuration will be applied by default to every new object placed in the specified bucket. For more information, see `Locking Objects <https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html>`_ . .. epigraph:: - The ``DefaultRetention`` settings require both a mode and a period. - The ``DefaultRetention`` period can be either ``Days`` or ``Years`` but you must select one. You cannot specify ``Days`` and ``Years`` at the same time. - You can enable Object Lock for new or existing buckets. For more information, see `Configuring Object Lock <https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html>`_ .
+        :param object_lock_configuration: .. epigraph:: This operation is not supported for directory buckets. Places an Object Lock configuration on the specified bucket. The rule specified in the Object Lock configuration will be applied by default to every new object placed in the specified bucket. For more information, see `Locking Objects <https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html>`_ . .. epigraph:: - The ``DefaultRetention`` settings require both a mode and a period. - The ``DefaultRetention`` period can be either ``Days`` or ``Years`` but you must select one. You cannot specify ``Days`` and ``Years`` at the same time. - You can enable Object Lock for new or existing buckets. For more information, see `Configuring Object Lock <https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html>`_ . > You must URL encode any signed header values that contain spaces. For example, if your header value is ``my file.txt`` , containing two spaces after ``my`` , you must URL encode this value to ``my%20%20file.txt`` .
         :param object_lock_enabled: Indicates whether this bucket has an Object Lock configuration enabled. Enable ``ObjectLockEnabled`` when you apply ``ObjectLockConfiguration`` to a bucket.
         :param ownership_controls: Configuration that defines how Amazon S3 handles Object Ownership rules.
         :param public_access_block_configuration: Configuration that defines how Amazon S3 handles public access.
@@ -11696,7 +11696,7 @@ class CfnBucketPolicy(
 
        As a security precaution, the root user of the AWS account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action.
 
-    When using the ``AWS::S3::BucketPolicy`` resource, you can create, update, and delete bucket policies for S3 buckets located in regions different from the stack's region. This cross-region bucket policy modification functionality is supported for backward compatibility with existing workflows.
+    When using the ``AWS::S3::BucketPolicy`` resource, you can create, update, and delete bucket policies for S3 buckets located in Regions that are different from the stack's Region. However, the CloudFormation stacks should be deployed in the US East (N. Virginia) or ``us-east-1`` Region. This cross-region bucket policy modification functionality is supported for backward compatibility with existing workflows.
     .. epigraph::
 
        If the `DeletionPolicy attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html>`_ is not specified or set to ``Delete`` , the bucket policy will be removed when the stack is deleted. If set to ``Retain`` , the bucket policy will be preserved even after the stack is deleted.
@@ -11994,7 +11994,7 @@ class CfnBucketProps:
         :param metadata_table_configuration: The metadata table configuration of an Amazon S3 general purpose bucket.
         :param metrics_configurations: Specifies a metrics configuration for the CloudWatch request metrics (specified by the metrics configuration ID) from an Amazon S3 bucket. If you're updating an existing metrics configuration, note that this is a full replacement of the existing metrics configuration. If you don't include the elements you want to keep, they are erased. For more information, see `PutBucketMetricsConfiguration <https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTMetricConfiguration.html>`_ .
         :param notification_configuration: Configuration that defines how Amazon S3 handles bucket notifications.
-        :param object_lock_configuration: .. epigraph:: This operation is not supported for directory buckets. Places an Object Lock configuration on the specified bucket. The rule specified in the Object Lock configuration will be applied by default to every new object placed in the specified bucket. For more information, see `Locking Objects <https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html>`_ . .. epigraph:: - The ``DefaultRetention`` settings require both a mode and a period. - The ``DefaultRetention`` period can be either ``Days`` or ``Years`` but you must select one. You cannot specify ``Days`` and ``Years`` at the same time. - You can enable Object Lock for new or existing buckets. For more information, see `Configuring Object Lock <https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html>`_ .
+        :param object_lock_configuration: .. epigraph:: This operation is not supported for directory buckets. Places an Object Lock configuration on the specified bucket. The rule specified in the Object Lock configuration will be applied by default to every new object placed in the specified bucket. For more information, see `Locking Objects <https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html>`_ . .. epigraph:: - The ``DefaultRetention`` settings require both a mode and a period. - The ``DefaultRetention`` period can be either ``Days`` or ``Years`` but you must select one. You cannot specify ``Days`` and ``Years`` at the same time. - You can enable Object Lock for new or existing buckets. For more information, see `Configuring Object Lock <https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html>`_ . > You must URL encode any signed header values that contain spaces. For example, if your header value is ``my file.txt`` , containing two spaces after ``my`` , you must URL encode this value to ``my%20%20file.txt`` .
         :param object_lock_enabled: Indicates whether this bucket has an Object Lock configuration enabled. Enable ``ObjectLockEnabled`` when you apply ``ObjectLockConfiguration`` to a bucket.
         :param ownership_controls: Configuration that defines how Amazon S3 handles Object Ownership rules.
         :param public_access_block_configuration: Configuration that defines how Amazon S3 handles public access.
@@ -12278,7 +12278,7 @@ class CfnBucketProps:
 
            - The ``DefaultRetention`` settings require both a mode and a period.
            - The ``DefaultRetention`` period can be either ``Days`` or ``Years`` but you must select one. You cannot specify ``Days`` and ``Years`` at the same time.
-           - You can enable Object Lock for new or existing buckets. For more information, see `Configuring Object Lock <https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html>`_ .
+           - You can enable Object Lock for new or existing buckets. For more information, see `Configuring Object Lock <https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html>`_ . > You must URL encode any signed header values that contain spaces. For example, if your header value is ``my file.txt`` , containing two spaces after ``my`` , you must URL encode this value to ``my%20%20file.txt`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3-bucket.html#cfn-s3-bucket-objectlockconfiguration
         '''