aws-cdk-lib 2.216.0__py3-none-any.whl → 2.217.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of aws-cdk-lib might be problematic. Click here for more details.

Files changed (58) hide show
  1. aws_cdk/__init__.py +60 -28
  2. aws_cdk/_jsii/__init__.py +1 -1
  3. aws_cdk/_jsii/{aws-cdk-lib@2.216.0.jsii.tgz → aws-cdk-lib@2.217.0.jsii.tgz} +0 -0
  4. aws_cdk/aws_acmpca/__init__.py +1 -1
  5. aws_cdk/aws_amplify/__init__.py +8 -8
  6. aws_cdk/aws_apigateway/__init__.py +26 -6
  7. aws_cdk/aws_apigatewayv2/__init__.py +2 -2
  8. aws_cdk/aws_appmesh/__init__.py +12 -12
  9. aws_cdk/aws_appstream/__init__.py +14 -4
  10. aws_cdk/aws_appsync/__init__.py +3 -3
  11. aws_cdk/aws_aps/__init__.py +459 -0
  12. aws_cdk/aws_batch/__init__.py +6 -2
  13. aws_cdk/aws_bedrock/__init__.py +132 -0
  14. aws_cdk/aws_bedrockagentcore/__init__.py +3178 -0
  15. aws_cdk/aws_certificatemanager/__init__.py +9 -10
  16. aws_cdk/aws_cleanrooms/__init__.py +163 -0
  17. aws_cdk/aws_cloudformation/__init__.py +14 -14
  18. aws_cdk/aws_cloudfront/__init__.py +12 -8
  19. aws_cdk/aws_cognito/__init__.py +2 -2
  20. aws_cdk/aws_connect/__init__.py +138 -10
  21. aws_cdk/aws_cur/__init__.py +57 -3
  22. aws_cdk/aws_datasync/__init__.py +351 -0
  23. aws_cdk/aws_datazone/__init__.py +675 -2
  24. aws_cdk/aws_dynamodb/__init__.py +123 -0
  25. aws_cdk/aws_ec2/__init__.py +55 -10
  26. aws_cdk/aws_ecs/__init__.py +55 -12
  27. aws_cdk/aws_elasticloadbalancingv2/__init__.py +48 -0
  28. aws_cdk/aws_elasticsearch/__init__.py +2 -2
  29. aws_cdk/aws_evs/__init__.py +58 -4
  30. aws_cdk/aws_gamelift/__init__.py +72 -56
  31. aws_cdk/aws_iam/__init__.py +1 -1
  32. aws_cdk/aws_iotcoredeviceadvisor/__init__.py +35 -38
  33. aws_cdk/aws_iotsitewise/__init__.py +75 -111
  34. aws_cdk/aws_kms/__init__.py +10 -2
  35. aws_cdk/aws_lambda/__init__.py +46 -0
  36. aws_cdk/aws_medialive/__init__.py +127 -0
  37. aws_cdk/aws_mediapackage/__init__.py +2 -2
  38. aws_cdk/aws_networkfirewall/__init__.py +10 -10
  39. aws_cdk/aws_networkmanager/__init__.py +63 -0
  40. aws_cdk/aws_odb/__init__.py +2082 -195
  41. aws_cdk/aws_omics/__init__.py +1414 -171
  42. aws_cdk/aws_opensearchserverless/__init__.py +164 -21
  43. aws_cdk/aws_opensearchservice/__init__.py +5 -4
  44. aws_cdk/aws_pcs/__init__.py +9 -9
  45. aws_cdk/aws_quicksight/__init__.py +295 -3
  46. aws_cdk/aws_rds/__init__.py +338 -58
  47. aws_cdk/aws_sagemaker/__init__.py +251 -1
  48. aws_cdk/aws_servicecatalog/__init__.py +162 -154
  49. aws_cdk/aws_smsvoice/__init__.py +5218 -0
  50. aws_cdk/aws_transfer/__init__.py +13 -12
  51. aws_cdk/aws_verifiedpermissions/__init__.py +1 -1
  52. aws_cdk/aws_workspacesinstances/__init__.py +641 -2
  53. {aws_cdk_lib-2.216.0.dist-info → aws_cdk_lib-2.217.0.dist-info}/METADATA +1 -1
  54. {aws_cdk_lib-2.216.0.dist-info → aws_cdk_lib-2.217.0.dist-info}/RECORD +58 -56
  55. {aws_cdk_lib-2.216.0.dist-info → aws_cdk_lib-2.217.0.dist-info}/LICENSE +0 -0
  56. {aws_cdk_lib-2.216.0.dist-info → aws_cdk_lib-2.217.0.dist-info}/NOTICE +0 -0
  57. {aws_cdk_lib-2.216.0.dist-info → aws_cdk_lib-2.217.0.dist-info}/WHEEL +0 -0
  58. {aws_cdk_lib-2.216.0.dist-info → aws_cdk_lib-2.217.0.dist-info}/top_level.txt +0 -0
@@ -5317,6 +5317,7 @@ class CfnParametersCodeProps:
5317
5317
  "principal": "principal",
5318
5318
  "event_source_token": "eventSourceToken",
5319
5319
  "function_url_auth_type": "functionUrlAuthType",
5320
+ "invoked_via_function_url": "invokedViaFunctionUrl",
5320
5321
  "principal_org_id": "principalOrgId",
5321
5322
  "source_account": "sourceAccount",
5322
5323
  "source_arn": "sourceArn",
@@ -5331,6 +5332,7 @@ class CfnPermissionProps:
5331
5332
  principal: builtins.str,
5332
5333
  event_source_token: typing.Optional[builtins.str] = None,
5333
5334
  function_url_auth_type: typing.Optional[builtins.str] = None,
5335
+ invoked_via_function_url: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
5334
5336
  principal_org_id: typing.Optional[builtins.str] = None,
5335
5337
  source_account: typing.Optional[builtins.str] = None,
5336
5338
  source_arn: typing.Optional[builtins.str] = None,
@@ -5342,6 +5344,7 @@ class CfnPermissionProps:
5342
5344
  :param principal: The AWS service , AWS account , IAM user, or IAM role that invokes the function. If you specify a service, use ``SourceArn`` or ``SourceAccount`` to limit who can invoke the function through that service.
5343
5345
  :param event_source_token: For Alexa Smart Home functions, a token that the invoker must supply.
5344
5346
  :param function_url_auth_type: The type of authentication that your function URL uses. Set to ``AWS_IAM`` if you want to restrict access to authenticated users only. Set to ``NONE`` if you want to bypass IAM authentication to create a public endpoint. For more information, see `Security and auth model for Lambda function URLs <https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html>`_ .
5347
+ :param invoked_via_function_url:
5345
5348
  :param principal_org_id: The identifier for your organization in AWS Organizations . Use this to grant permissions to all the AWS accounts under this organization.
5346
5349
  :param source_account: For AWS service , the ID of the AWS account that owns the resource. Use this together with ``SourceArn`` to ensure that the specified account owns the resource. It is possible for an Amazon S3 bucket to be deleted by its owner and recreated by another account.
5347
5350
  :param source_arn: For AWS services , the ARN of the AWS resource that invokes the function. For example, an Amazon S3 bucket or Amazon SNS topic. Note that Lambda configures the comparison using the ``StringLike`` operator.
@@ -5363,6 +5366,7 @@ class CfnPermissionProps:
5363
5366
  # the properties below are optional
5364
5367
  event_source_token="eventSourceToken",
5365
5368
  function_url_auth_type="functionUrlAuthType",
5369
+ invoked_via_function_url=False,
5366
5370
  principal_org_id="principalOrgId",
5367
5371
  source_account="sourceAccount",
5368
5372
  source_arn="sourceArn"
@@ -5375,6 +5379,7 @@ class CfnPermissionProps:
5375
5379
  check_type(argname="argument principal", value=principal, expected_type=type_hints["principal"])
5376
5380
  check_type(argname="argument event_source_token", value=event_source_token, expected_type=type_hints["event_source_token"])
5377
5381
  check_type(argname="argument function_url_auth_type", value=function_url_auth_type, expected_type=type_hints["function_url_auth_type"])
5382
+ check_type(argname="argument invoked_via_function_url", value=invoked_via_function_url, expected_type=type_hints["invoked_via_function_url"])
5378
5383
  check_type(argname="argument principal_org_id", value=principal_org_id, expected_type=type_hints["principal_org_id"])
5379
5384
  check_type(argname="argument source_account", value=source_account, expected_type=type_hints["source_account"])
5380
5385
  check_type(argname="argument source_arn", value=source_arn, expected_type=type_hints["source_arn"])
@@ -5387,6 +5392,8 @@ class CfnPermissionProps:
5387
5392
  self._values["event_source_token"] = event_source_token
5388
5393
  if function_url_auth_type is not None:
5389
5394
  self._values["function_url_auth_type"] = function_url_auth_type
5395
+ if invoked_via_function_url is not None:
5396
+ self._values["invoked_via_function_url"] = invoked_via_function_url
5390
5397
  if principal_org_id is not None:
5391
5398
  self._values["principal_org_id"] = principal_org_id
5392
5399
  if source_account is not None:
@@ -5455,6 +5462,16 @@ class CfnPermissionProps:
5455
5462
  result = self._values.get("function_url_auth_type")
5456
5463
  return typing.cast(typing.Optional[builtins.str], result)
5457
5464
 
5465
+ @builtins.property
5466
+ def invoked_via_function_url(
5467
+ self,
5468
+ ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
5469
+ '''
5470
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html#cfn-lambda-permission-invokedviafunctionurl
5471
+ '''
5472
+ result = self._values.get("invoked_via_function_url")
5473
+ return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
5474
+
5458
5475
  @builtins.property
5459
5476
  def principal_org_id(self) -> typing.Optional[builtins.str]:
5460
5477
  '''The identifier for your organization in AWS Organizations .
@@ -24663,6 +24680,7 @@ class CfnPermission(
24663
24680
  # the properties below are optional
24664
24681
  event_source_token="eventSourceToken",
24665
24682
  function_url_auth_type="functionUrlAuthType",
24683
+ invoked_via_function_url=False,
24666
24684
  principal_org_id="principalOrgId",
24667
24685
  source_account="sourceAccount",
24668
24686
  source_arn="sourceArn"
@@ -24679,6 +24697,7 @@ class CfnPermission(
24679
24697
  principal: builtins.str,
24680
24698
  event_source_token: typing.Optional[builtins.str] = None,
24681
24699
  function_url_auth_type: typing.Optional[builtins.str] = None,
24700
+ invoked_via_function_url: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
24682
24701
  principal_org_id: typing.Optional[builtins.str] = None,
24683
24702
  source_account: typing.Optional[builtins.str] = None,
24684
24703
  source_arn: typing.Optional[builtins.str] = None,
@@ -24691,6 +24710,7 @@ class CfnPermission(
24691
24710
  :param principal: The AWS service , AWS account , IAM user, or IAM role that invokes the function. If you specify a service, use ``SourceArn`` or ``SourceAccount`` to limit who can invoke the function through that service.
24692
24711
  :param event_source_token: For Alexa Smart Home functions, a token that the invoker must supply.
24693
24712
  :param function_url_auth_type: The type of authentication that your function URL uses. Set to ``AWS_IAM`` if you want to restrict access to authenticated users only. Set to ``NONE`` if you want to bypass IAM authentication to create a public endpoint. For more information, see `Security and auth model for Lambda function URLs <https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html>`_ .
24713
+ :param invoked_via_function_url:
24694
24714
  :param principal_org_id: The identifier for your organization in AWS Organizations . Use this to grant permissions to all the AWS accounts under this organization.
24695
24715
  :param source_account: For AWS service , the ID of the AWS account that owns the resource. Use this together with ``SourceArn`` to ensure that the specified account owns the resource. It is possible for an Amazon S3 bucket to be deleted by its owner and recreated by another account.
24696
24716
  :param source_arn: For AWS services , the ARN of the AWS resource that invokes the function. For example, an Amazon S3 bucket or Amazon SNS topic. Note that Lambda configures the comparison using the ``StringLike`` operator.
@@ -24705,6 +24725,7 @@ class CfnPermission(
24705
24725
  principal=principal,
24706
24726
  event_source_token=event_source_token,
24707
24727
  function_url_auth_type=function_url_auth_type,
24728
+ invoked_via_function_url=invoked_via_function_url,
24708
24729
  principal_org_id=principal_org_id,
24709
24730
  source_account=source_account,
24710
24731
  source_arn=source_arn,
@@ -24826,6 +24847,23 @@ class CfnPermission(
24826
24847
  check_type(argname="argument value", value=value, expected_type=type_hints["value"])
24827
24848
  jsii.set(self, "functionUrlAuthType", value) # pyright: ignore[reportArgumentType]
24828
24849
 
24850
+ @builtins.property
24851
+ @jsii.member(jsii_name="invokedViaFunctionUrl")
24852
+ def invoked_via_function_url(
24853
+ self,
24854
+ ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
24855
+ return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "invokedViaFunctionUrl"))
24856
+
24857
+ @invoked_via_function_url.setter
24858
+ def invoked_via_function_url(
24859
+ self,
24860
+ value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
24861
+ ) -> None:
24862
+ if __debug__:
24863
+ type_hints = typing.get_type_hints(_typecheckingstub__27448921eb884e35f652e485f1520f21a151aabd99f5cd26586c6fbaaf7385ab)
24864
+ check_type(argname="argument value", value=value, expected_type=type_hints["value"])
24865
+ jsii.set(self, "invokedViaFunctionUrl", value) # pyright: ignore[reportArgumentType]
24866
+
24829
24867
  @builtins.property
24830
24868
  @jsii.member(jsii_name="principalOrgId")
24831
24869
  def principal_org_id(self) -> typing.Optional[builtins.str]:
@@ -32120,6 +32158,7 @@ def _typecheckingstub__b0c90e5a512dc08c54978bc1f6bf13992ad2d1d5c793f2b05fc82eef3
32120
32158
  principal: builtins.str,
32121
32159
  event_source_token: typing.Optional[builtins.str] = None,
32122
32160
  function_url_auth_type: typing.Optional[builtins.str] = None,
32161
+ invoked_via_function_url: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
32123
32162
  principal_org_id: typing.Optional[builtins.str] = None,
32124
32163
  source_account: typing.Optional[builtins.str] = None,
32125
32164
  source_arn: typing.Optional[builtins.str] = None,
@@ -34376,6 +34415,7 @@ def _typecheckingstub__c457a277b84dbba5bd94a2c0135335b8d7dbb3d409b1fa988b4f5a219
34376
34415
  principal: builtins.str,
34377
34416
  event_source_token: typing.Optional[builtins.str] = None,
34378
34417
  function_url_auth_type: typing.Optional[builtins.str] = None,
34418
+ invoked_via_function_url: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
34379
34419
  principal_org_id: typing.Optional[builtins.str] = None,
34380
34420
  source_account: typing.Optional[builtins.str] = None,
34381
34421
  source_arn: typing.Optional[builtins.str] = None,
@@ -34425,6 +34465,12 @@ def _typecheckingstub__c85fd263b0dc67595e83c426e4f8a064ea18d154ec013099a2ff44bb1
34425
34465
  """Type checking stubs"""
34426
34466
  pass
34427
34467
 
34468
+ def _typecheckingstub__27448921eb884e35f652e485f1520f21a151aabd99f5cd26586c6fbaaf7385ab(
34469
+ value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
34470
+ ) -> None:
34471
+ """Type checking stubs"""
34472
+ pass
34473
+
34428
34474
  def _typecheckingstub__15afcc0405054080f46df62ed10831279de0524bf06aeea4268901393a2625c3(
34429
34475
  value: typing.Optional[builtins.str],
34430
34476
  ) -> None:
@@ -4655,6 +4655,63 @@ class CfnChannel(
4655
4655
  k + "=" + repr(v) for k, v in self._values.items()
4656
4656
  )
4657
4657
 
4658
+ @jsii.data_type(
4659
+ jsii_type="aws-cdk-lib.aws_medialive.CfnChannel.AdditionalDestinationsProperty",
4660
+ jsii_struct_bases=[],
4661
+ name_mapping={"destination": "destination"},
4662
+ )
4663
+ class AdditionalDestinationsProperty:
4664
+ def __init__(
4665
+ self,
4666
+ *,
4667
+ destination: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnChannel.OutputLocationRefProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
4668
+ ) -> None:
4669
+ '''
4670
+ :param destination:
4671
+
4672
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-medialive-channel-additionaldestinations.html
4673
+ :exampleMetadata: fixture=_generated
4674
+
4675
+ Example::
4676
+
4677
+ # The code below shows an example of how to instantiate this type.
4678
+ # The values are placeholders you should change.
4679
+ from aws_cdk import aws_medialive as medialive
4680
+
4681
+ additional_destinations_property = medialive.CfnChannel.AdditionalDestinationsProperty(
4682
+ destination=medialive.CfnChannel.OutputLocationRefProperty(
4683
+ destination_ref_id="destinationRefId"
4684
+ )
4685
+ )
4686
+ '''
4687
+ if __debug__:
4688
+ type_hints = typing.get_type_hints(_typecheckingstub__f35ce75f1f33941348d85275d7dc5d6c728631bea4d0fc0ad49a7bc029ddce29)
4689
+ check_type(argname="argument destination", value=destination, expected_type=type_hints["destination"])
4690
+ self._values: typing.Dict[builtins.str, typing.Any] = {}
4691
+ if destination is not None:
4692
+ self._values["destination"] = destination
4693
+
4694
+ @builtins.property
4695
+ def destination(
4696
+ self,
4697
+ ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnChannel.OutputLocationRefProperty"]]:
4698
+ '''
4699
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-medialive-channel-additionaldestinations.html#cfn-medialive-channel-additionaldestinations-destination
4700
+ '''
4701
+ result = self._values.get("destination")
4702
+ return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnChannel.OutputLocationRefProperty"]], result)
4703
+
4704
+ def __eq__(self, rhs: typing.Any) -> builtins.bool:
4705
+ return isinstance(rhs, self.__class__) and rhs._values == self._values
4706
+
4707
+ def __ne__(self, rhs: typing.Any) -> builtins.bool:
4708
+ return not (rhs == self)
4709
+
4710
+ def __repr__(self) -> str:
4711
+ return "AdditionalDestinationsProperty(%s)" % ", ".join(
4712
+ k + "=" + repr(v) for k, v in self._values.items()
4713
+ )
4714
+
4658
4715
  @jsii.data_type(
4659
4716
  jsii_type="aws-cdk-lib.aws_medialive.CfnChannel.AncillarySourceSettingsProperty",
4660
4717
  jsii_struct_bases=[],
@@ -8099,6 +8156,7 @@ class CfnChannel(
8099
8156
  "shadow_opacity": "shadowOpacity",
8100
8157
  "shadow_x_offset": "shadowXOffset",
8101
8158
  "shadow_y_offset": "shadowYOffset",
8159
+ "subtitle_rows": "subtitleRows",
8102
8160
  "teletext_grid_control": "teletextGridControl",
8103
8161
  "x_position": "xPosition",
8104
8162
  "y_position": "yPosition",
@@ -8122,6 +8180,7 @@ class CfnChannel(
8122
8180
  shadow_opacity: typing.Optional[jsii.Number] = None,
8123
8181
  shadow_x_offset: typing.Optional[jsii.Number] = None,
8124
8182
  shadow_y_offset: typing.Optional[jsii.Number] = None,
8183
+ subtitle_rows: typing.Optional[builtins.str] = None,
8125
8184
  teletext_grid_control: typing.Optional[builtins.str] = None,
8126
8185
  x_position: typing.Optional[jsii.Number] = None,
8127
8186
  y_position: typing.Optional[jsii.Number] = None,
@@ -8144,6 +8203,7 @@ class CfnChannel(
8144
8203
  :param shadow_opacity: Specifies the opacity of the shadow. 255 is opaque; 0 is transparent. Keeping this parameter blank is equivalent to setting it to 0 (transparent). All burn-in and DVB-Sub font settings must match.
8145
8204
  :param shadow_x_offset: Specifies the horizontal offset of the shadow that is relative to the captions in pixels. A value of -2 would result in a shadow offset 2 pixels to the left. All burn-in and DVB-Sub font settings must match.
8146
8205
  :param shadow_y_offset: Specifies the vertical offset of the shadow that is relative to the captions in pixels. A value of -2 would result in a shadow offset 2 pixels above the text. All burn-in and DVB-Sub font settings must match.
8206
+ :param subtitle_rows:
8147
8207
  :param teletext_grid_control: Controls whether a fixed grid size is used to generate the output subtitles bitmap. This applies only to Teletext inputs and DVB-Sub/Burn-in outputs.
8148
8208
  :param x_position: Specifies the horizontal position of the captions relative to the left side of the output in pixels. A value of 10 would result in the captions starting 10 pixels from the left of the output. If no explicit xPosition is provided, the horizontal captions position is determined by the alignment parameter. All burn-in and DVB-Sub font settings must match.
8149
8209
  :param y_position: Specifies the vertical position of the captions relative to the top of the output in pixels. A value of 10 would result in the captions starting 10 pixels from the top of the output. If no explicit yPosition is provided, the captions are positioned towards the bottom of the output. All burn-in and DVB-Sub font settings must match.
@@ -8176,6 +8236,7 @@ class CfnChannel(
8176
8236
  shadow_opacity=123,
8177
8237
  shadow_xOffset=123,
8178
8238
  shadow_yOffset=123,
8239
+ subtitle_rows="subtitleRows",
8179
8240
  teletext_grid_control="teletextGridControl",
8180
8241
  x_position=123,
8181
8242
  y_position=123
@@ -8197,6 +8258,7 @@ class CfnChannel(
8197
8258
  check_type(argname="argument shadow_opacity", value=shadow_opacity, expected_type=type_hints["shadow_opacity"])
8198
8259
  check_type(argname="argument shadow_x_offset", value=shadow_x_offset, expected_type=type_hints["shadow_x_offset"])
8199
8260
  check_type(argname="argument shadow_y_offset", value=shadow_y_offset, expected_type=type_hints["shadow_y_offset"])
8261
+ check_type(argname="argument subtitle_rows", value=subtitle_rows, expected_type=type_hints["subtitle_rows"])
8200
8262
  check_type(argname="argument teletext_grid_control", value=teletext_grid_control, expected_type=type_hints["teletext_grid_control"])
8201
8263
  check_type(argname="argument x_position", value=x_position, expected_type=type_hints["x_position"])
8202
8264
  check_type(argname="argument y_position", value=y_position, expected_type=type_hints["y_position"])
@@ -8229,6 +8291,8 @@ class CfnChannel(
8229
8291
  self._values["shadow_x_offset"] = shadow_x_offset
8230
8292
  if shadow_y_offset is not None:
8231
8293
  self._values["shadow_y_offset"] = shadow_y_offset
8294
+ if subtitle_rows is not None:
8295
+ self._values["subtitle_rows"] = subtitle_rows
8232
8296
  if teletext_grid_control is not None:
8233
8297
  self._values["teletext_grid_control"] = teletext_grid_control
8234
8298
  if x_position is not None:
@@ -8392,6 +8456,14 @@ class CfnChannel(
8392
8456
  result = self._values.get("shadow_y_offset")
8393
8457
  return typing.cast(typing.Optional[jsii.Number], result)
8394
8458
 
8459
+ @builtins.property
8460
+ def subtitle_rows(self) -> typing.Optional[builtins.str]:
8461
+ '''
8462
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-medialive-channel-burnindestinationsettings.html#cfn-medialive-channel-burnindestinationsettings-subtitlerows
8463
+ '''
8464
+ result = self._values.get("subtitle_rows")
8465
+ return typing.cast(typing.Optional[builtins.str], result)
8466
+
8395
8467
  @builtins.property
8396
8468
  def teletext_grid_control(self) -> typing.Optional[builtins.str]:
8397
8469
  '''Controls whether a fixed grid size is used to generate the output subtitles bitmap.
@@ -8510,6 +8582,7 @@ class CfnChannel(
8510
8582
  shadow_opacity=123,
8511
8583
  shadow_xOffset=123,
8512
8584
  shadow_yOffset=123,
8585
+ subtitle_rows="subtitleRows",
8513
8586
  teletext_grid_control="teletextGridControl",
8514
8587
  x_position=123,
8515
8588
  y_position=123
@@ -8533,6 +8606,7 @@ class CfnChannel(
8533
8606
  shadow_opacity=123,
8534
8607
  shadow_xOffset=123,
8535
8608
  shadow_yOffset=123,
8609
+ subtitle_rows="subtitleRows",
8536
8610
  teletext_grid_control="teletextGridControl",
8537
8611
  x_position=123,
8538
8612
  y_position=123
@@ -8766,6 +8840,7 @@ class CfnChannel(
8766
8840
  shadow_opacity=123,
8767
8841
  shadow_xOffset=123,
8768
8842
  shadow_yOffset=123,
8843
+ subtitle_rows="subtitleRows",
8769
8844
  teletext_grid_control="teletextGridControl",
8770
8845
  x_position=123,
8771
8846
  y_position=123
@@ -8789,6 +8864,7 @@ class CfnChannel(
8789
8864
  shadow_opacity=123,
8790
8865
  shadow_xOffset=123,
8791
8866
  shadow_yOffset=123,
8867
+ subtitle_rows="subtitleRows",
8792
8868
  teletext_grid_control="teletextGridControl",
8793
8869
  x_position=123,
8794
8870
  y_position=123
@@ -9721,6 +9797,7 @@ class CfnChannel(
9721
9797
  jsii_type="aws-cdk-lib.aws_medialive.CfnChannel.CmafIngestGroupSettingsProperty",
9722
9798
  jsii_struct_bases=[],
9723
9799
  name_mapping={
9800
+ "additional_destinations": "additionalDestinations",
9724
9801
  "caption_language_mappings": "captionLanguageMappings",
9725
9802
  "destination": "destination",
9726
9803
  "id3_behavior": "id3Behavior",
@@ -9743,6 +9820,7 @@ class CfnChannel(
9743
9820
  def __init__(
9744
9821
  self,
9745
9822
  *,
9823
+ additional_destinations: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnChannel.AdditionalDestinationsProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
9746
9824
  caption_language_mappings: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnChannel.CmafIngestCaptionLanguageMappingProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
9747
9825
  destination: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnChannel.OutputLocationRefProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
9748
9826
  id3_behavior: typing.Optional[builtins.str] = None,
@@ -9761,6 +9839,7 @@ class CfnChannel(
9761
9839
  timed_metadata_passthrough: typing.Optional[builtins.str] = None,
9762
9840
  ) -> None:
9763
9841
  '''
9842
+ :param additional_destinations:
9764
9843
  :param caption_language_mappings:
9765
9844
  :param destination:
9766
9845
  :param id3_behavior:
@@ -9788,6 +9867,11 @@ class CfnChannel(
9788
9867
  from aws_cdk import aws_medialive as medialive
9789
9868
 
9790
9869
  cmaf_ingest_group_settings_property = medialive.CfnChannel.CmafIngestGroupSettingsProperty(
9870
+ additional_destinations=[medialive.CfnChannel.AdditionalDestinationsProperty(
9871
+ destination=medialive.CfnChannel.OutputLocationRefProperty(
9872
+ destination_ref_id="destinationRefId"
9873
+ )
9874
+ )],
9791
9875
  caption_language_mappings=[medialive.CfnChannel.CmafIngestCaptionLanguageMappingProperty(
9792
9876
  caption_channel=123,
9793
9877
  language_code="languageCode"
@@ -9813,6 +9897,7 @@ class CfnChannel(
9813
9897
  '''
9814
9898
  if __debug__:
9815
9899
  type_hints = typing.get_type_hints(_typecheckingstub__6fe9142b6885e8776c3e51af0733250a73fcd8e45bb4ec5f866206680352c7eb)
9900
+ check_type(argname="argument additional_destinations", value=additional_destinations, expected_type=type_hints["additional_destinations"])
9816
9901
  check_type(argname="argument caption_language_mappings", value=caption_language_mappings, expected_type=type_hints["caption_language_mappings"])
9817
9902
  check_type(argname="argument destination", value=destination, expected_type=type_hints["destination"])
9818
9903
  check_type(argname="argument id3_behavior", value=id3_behavior, expected_type=type_hints["id3_behavior"])
@@ -9830,6 +9915,8 @@ class CfnChannel(
9830
9915
  check_type(argname="argument timed_metadata_id3_period", value=timed_metadata_id3_period, expected_type=type_hints["timed_metadata_id3_period"])
9831
9916
  check_type(argname="argument timed_metadata_passthrough", value=timed_metadata_passthrough, expected_type=type_hints["timed_metadata_passthrough"])
9832
9917
  self._values: typing.Dict[builtins.str, typing.Any] = {}
9918
+ if additional_destinations is not None:
9919
+ self._values["additional_destinations"] = additional_destinations
9833
9920
  if caption_language_mappings is not None:
9834
9921
  self._values["caption_language_mappings"] = caption_language_mappings
9835
9922
  if destination is not None:
@@ -9863,6 +9950,16 @@ class CfnChannel(
9863
9950
  if timed_metadata_passthrough is not None:
9864
9951
  self._values["timed_metadata_passthrough"] = timed_metadata_passthrough
9865
9952
 
9953
+ @builtins.property
9954
+ def additional_destinations(
9955
+ self,
9956
+ ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannel.AdditionalDestinationsProperty"]]]]:
9957
+ '''
9958
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-medialive-channel-cmafingestgroupsettings.html#cfn-medialive-channel-cmafingestgroupsettings-additionaldestinations
9959
+ '''
9960
+ result = self._values.get("additional_destinations")
9961
+ return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannel.AdditionalDestinationsProperty"]]]], result)
9962
+
9866
9963
  @builtins.property
9867
9964
  def caption_language_mappings(
9868
9965
  self,
@@ -10491,6 +10588,7 @@ class CfnChannel(
10491
10588
  "shadow_opacity": "shadowOpacity",
10492
10589
  "shadow_x_offset": "shadowXOffset",
10493
10590
  "shadow_y_offset": "shadowYOffset",
10591
+ "subtitle_rows": "subtitleRows",
10494
10592
  "teletext_grid_control": "teletextGridControl",
10495
10593
  "x_position": "xPosition",
10496
10594
  "y_position": "yPosition",
@@ -10514,6 +10612,7 @@ class CfnChannel(
10514
10612
  shadow_opacity: typing.Optional[jsii.Number] = None,
10515
10613
  shadow_x_offset: typing.Optional[jsii.Number] = None,
10516
10614
  shadow_y_offset: typing.Optional[jsii.Number] = None,
10615
+ subtitle_rows: typing.Optional[builtins.str] = None,
10517
10616
  teletext_grid_control: typing.Optional[builtins.str] = None,
10518
10617
  x_position: typing.Optional[jsii.Number] = None,
10519
10618
  y_position: typing.Optional[jsii.Number] = None,
@@ -10536,6 +10635,7 @@ class CfnChannel(
10536
10635
  :param shadow_opacity: Specifies the opacity of the shadow. 255 is opaque; 0 is transparent. Keeping this parameter blank is equivalent to setting it to 0 (transparent). All burn-in and DVB-Sub font settings must match.
10537
10636
  :param shadow_x_offset: Specifies the horizontal offset of the shadow relative to the captions in pixels. A value of -2 would result in a shadow offset 2 pixels to the left. All burn-in and DVB-Sub font settings must match.
10538
10637
  :param shadow_y_offset: Specifies the vertical offset of the shadow relative to the captions in pixels. A value of -2 would result in a shadow offset 2 pixels above the text. All burn-in and DVB-Sub font settings must match.
10638
+ :param subtitle_rows:
10539
10639
  :param teletext_grid_control: Controls whether a fixed grid size is used to generate the output subtitles bitmap. This applies to only Teletext inputs and DVB-Sub/Burn-in outputs.
10540
10640
  :param x_position: Specifies the horizontal position of the captions relative to the left side of the output in pixels. A value of 10 would result in the captions starting 10 pixels from the left of the output. If no explicit xPosition is provided, the horizontal captions position is determined by the alignment parameter. This option is not valid for source captions that are STL, 608/embedded, or Teletext. These source settings are already pre-defined by the captions stream. All burn-in and DVB-Sub font settings must match.
10541
10641
  :param y_position: Specifies the vertical position of the captions relative to the top of the output in pixels. A value of 10 would result in the captions starting 10 pixels from the top of the output. If no explicit yPosition is provided, the captions are positioned towards the bottom of the output. This option is not valid for source captions that are STL, 608/embedded, or Teletext. These source settings are already pre-defined by the captions stream. All burn-in and DVB-Sub font settings must match.
@@ -10568,6 +10668,7 @@ class CfnChannel(
10568
10668
  shadow_opacity=123,
10569
10669
  shadow_xOffset=123,
10570
10670
  shadow_yOffset=123,
10671
+ subtitle_rows="subtitleRows",
10571
10672
  teletext_grid_control="teletextGridControl",
10572
10673
  x_position=123,
10573
10674
  y_position=123
@@ -10589,6 +10690,7 @@ class CfnChannel(
10589
10690
  check_type(argname="argument shadow_opacity", value=shadow_opacity, expected_type=type_hints["shadow_opacity"])
10590
10691
  check_type(argname="argument shadow_x_offset", value=shadow_x_offset, expected_type=type_hints["shadow_x_offset"])
10591
10692
  check_type(argname="argument shadow_y_offset", value=shadow_y_offset, expected_type=type_hints["shadow_y_offset"])
10693
+ check_type(argname="argument subtitle_rows", value=subtitle_rows, expected_type=type_hints["subtitle_rows"])
10592
10694
  check_type(argname="argument teletext_grid_control", value=teletext_grid_control, expected_type=type_hints["teletext_grid_control"])
10593
10695
  check_type(argname="argument x_position", value=x_position, expected_type=type_hints["x_position"])
10594
10696
  check_type(argname="argument y_position", value=y_position, expected_type=type_hints["y_position"])
@@ -10621,6 +10723,8 @@ class CfnChannel(
10621
10723
  self._values["shadow_x_offset"] = shadow_x_offset
10622
10724
  if shadow_y_offset is not None:
10623
10725
  self._values["shadow_y_offset"] = shadow_y_offset
10726
+ if subtitle_rows is not None:
10727
+ self._values["subtitle_rows"] = subtitle_rows
10624
10728
  if teletext_grid_control is not None:
10625
10729
  self._values["teletext_grid_control"] = teletext_grid_control
10626
10730
  if x_position is not None:
@@ -10784,6 +10888,14 @@ class CfnChannel(
10784
10888
  result = self._values.get("shadow_y_offset")
10785
10889
  return typing.cast(typing.Optional[jsii.Number], result)
10786
10890
 
10891
+ @builtins.property
10892
+ def subtitle_rows(self) -> typing.Optional[builtins.str]:
10893
+ '''
10894
+ :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-medialive-channel-dvbsubdestinationsettings.html#cfn-medialive-channel-dvbsubdestinationsettings-subtitlerows
10895
+ '''
10896
+ result = self._values.get("subtitle_rows")
10897
+ return typing.cast(typing.Optional[builtins.str], result)
10898
+
10787
10899
  @builtins.property
10788
10900
  def teletext_grid_control(self) -> typing.Optional[builtins.str]:
10789
10901
  '''Controls whether a fixed grid size is used to generate the output subtitles bitmap.
@@ -22807,6 +22919,11 @@ class CfnChannel(
22807
22919
  rollover_interval=123
22808
22920
  ),
22809
22921
  cmaf_ingest_group_settings=medialive.CfnChannel.CmafIngestGroupSettingsProperty(
22922
+ additional_destinations=[medialive.CfnChannel.AdditionalDestinationsProperty(
22923
+ destination=medialive.CfnChannel.OutputLocationRefProperty(
22924
+ destination_ref_id="destinationRefId"
22925
+ )
22926
+ )],
22810
22927
  caption_language_mappings=[medialive.CfnChannel.CmafIngestCaptionLanguageMappingProperty(
22811
22928
  caption_channel=123,
22812
22929
  language_code="languageCode"
@@ -34628,6 +34745,13 @@ def _typecheckingstub__3438fa867f11ff502b4fa54f1dd5270220ccbbc83de4185add8ae06b3
34628
34745
  """Type checking stubs"""
34629
34746
  pass
34630
34747
 
34748
+ def _typecheckingstub__f35ce75f1f33941348d85275d7dc5d6c728631bea4d0fc0ad49a7bc029ddce29(
34749
+ *,
34750
+ destination: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannel.OutputLocationRefProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
34751
+ ) -> None:
34752
+ """Type checking stubs"""
34753
+ pass
34754
+
34631
34755
  def _typecheckingstub__8192630f40f6883538117cc4351df30d49295a7620ea561657270b4feacaf984(
34632
34756
  *,
34633
34757
  source_ancillary_channel_number: typing.Optional[jsii.Number] = None,
@@ -34925,6 +35049,7 @@ def _typecheckingstub__33dec7d6f1bff74983258afde73011d8330c6183129c52e7873c9573a
34925
35049
  shadow_opacity: typing.Optional[jsii.Number] = None,
34926
35050
  shadow_x_offset: typing.Optional[jsii.Number] = None,
34927
35051
  shadow_y_offset: typing.Optional[jsii.Number] = None,
35052
+ subtitle_rows: typing.Optional[builtins.str] = None,
34928
35053
  teletext_grid_control: typing.Optional[builtins.str] = None,
34929
35054
  x_position: typing.Optional[jsii.Number] = None,
34930
35055
  y_position: typing.Optional[jsii.Number] = None,
@@ -35030,6 +35155,7 @@ def _typecheckingstub__a833a02632a589afb5026143cbf8803b2228e0f422ab4c5a2dbf59314
35030
35155
 
35031
35156
  def _typecheckingstub__6fe9142b6885e8776c3e51af0733250a73fcd8e45bb4ec5f866206680352c7eb(
35032
35157
  *,
35158
+ additional_destinations: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannel.AdditionalDestinationsProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
35033
35159
  caption_language_mappings: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannel.CmafIngestCaptionLanguageMappingProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
35034
35160
  destination: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannel.OutputLocationRefProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
35035
35161
  id3_behavior: typing.Optional[builtins.str] = None,
@@ -35108,6 +35234,7 @@ def _typecheckingstub__8d5d2ee13f6699d87c134941e50183ecf466b424e0dbd1cc71d92035d
35108
35234
  shadow_opacity: typing.Optional[jsii.Number] = None,
35109
35235
  shadow_x_offset: typing.Optional[jsii.Number] = None,
35110
35236
  shadow_y_offset: typing.Optional[jsii.Number] = None,
35237
+ subtitle_rows: typing.Optional[builtins.str] = None,
35111
35238
  teletext_grid_control: typing.Optional[builtins.str] = None,
35112
35239
  x_position: typing.Optional[jsii.Number] = None,
35113
35240
  y_position: typing.Optional[jsii.Number] = None,
@@ -4902,7 +4902,7 @@ class CfnOriginEndpoint(
4902
4902
  :param role_arn: The ARN for the IAM role that's granted by the key provider to provide access to the key provider API. This role must have a trust policy that allows AWS Elemental MediaPackage to assume the role, and it must have a sufficient permissions policy to allow access to the specific key retrieval URL. Valid format: arn:aws:iam::{accountID}:role/{name}
4903
4903
  :param system_ids: List of unique identifiers for the DRM systems to use, as defined in the CPIX specification.
4904
4904
  :param url: URL for the key provider’s key retrieval API endpoint. Must start with https://.
4905
- :param certificate_arn: The Amazon Resource Name (ARN) for the certificate that you imported to AWS Certificate Manager to add content key encryption to this endpoint. For this feature to work, your DRM key provider must support content key encryption.
4905
+ :param certificate_arn: The Amazon Resource Name (ARN) for the certificate that you imported to Certificate Manager to add content key encryption to this endpoint. For this feature to work, your DRM key provider must support content key encryption.
4906
4906
  :param encryption_contract_configuration: Use ``encryptionContractConfiguration`` to configure one or more content encryption keys for your endpoints that use SPEKE Version 2.0. The encryption contract defines which content keys are used to encrypt the audio and video tracks in your stream. To configure the encryption contract, specify which audio and video encryption presets to use.
4907
4907
 
4908
4908
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackage-originendpoint-spekekeyprovider.html
@@ -4993,7 +4993,7 @@ class CfnOriginEndpoint(
4993
4993
 
4994
4994
  @builtins.property
4995
4995
  def certificate_arn(self) -> typing.Optional[builtins.str]:
4996
- '''The Amazon Resource Name (ARN) for the certificate that you imported to AWS Certificate Manager to add content key encryption to this endpoint.
4996
+ '''The Amazon Resource Name (ARN) for the certificate that you imported to Certificate Manager to add content key encryption to this endpoint.
4997
4997
 
4998
4998
  For this feature to work, your DRM key provider must support content key encryption.
4999
4999
 
@@ -950,7 +950,7 @@ class CfnTLSInspectionConfigurationProps:
950
950
  ) -> None:
951
951
  '''Properties for defining a ``CfnTLSInspectionConfiguration``.
952
952
 
953
- :param tls_inspection_configuration: The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using AWS Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see `Inspecting SSL/TLS traffic with TLS inspection configurations <https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html>`_ in the *AWS Network Firewall Developer Guide* .
953
+ :param tls_inspection_configuration: The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see `Inspecting SSL/TLS traffic with TLS inspection configurations <https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html>`_ in the *AWS Network Firewall Developer Guide* .
954
954
  :param tls_inspection_configuration_name: The descriptive name of the TLS inspection configuration. You can't change the name of a TLS inspection configuration after you create it.
955
955
  :param description: A description of the TLS inspection configuration.
956
956
  :param tags: The key:value pairs to associate with the resource.
@@ -1025,7 +1025,7 @@ class CfnTLSInspectionConfigurationProps:
1025
1025
  ) -> typing.Union[_IResolvable_da3f097b, "CfnTLSInspectionConfiguration.TLSInspectionConfigurationProperty"]:
1026
1026
  '''The object that defines a TLS inspection configuration.
1027
1027
 
1028
- AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using AWS Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see `Inspecting SSL/TLS traffic with TLS inspection configurations <https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html>`_ in the *AWS Network Firewall Developer Guide* .
1028
+ AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see `Inspecting SSL/TLS traffic with TLS inspection configurations <https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html>`_ in the *AWS Network Firewall Developer Guide* .
1029
1029
 
1030
1030
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-tlsinspectionconfiguration.html#cfn-networkfirewall-tlsinspectionconfiguration-tlsinspectionconfiguration
1031
1031
  '''
@@ -6682,7 +6682,7 @@ class CfnTLSInspectionConfiguration(
6682
6682
  '''
6683
6683
  :param scope: Scope in which this resource is defined.
6684
6684
  :param id: Construct identifier for this resource (unique in its scope).
6685
- :param tls_inspection_configuration: The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using AWS Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see `Inspecting SSL/TLS traffic with TLS inspection configurations <https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html>`_ in the *AWS Network Firewall Developer Guide* .
6685
+ :param tls_inspection_configuration: The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see `Inspecting SSL/TLS traffic with TLS inspection configurations <https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html>`_ in the *AWS Network Firewall Developer Guide* .
6686
6686
  :param tls_inspection_configuration_name: The descriptive name of the TLS inspection configuration. You can't change the name of a TLS inspection configuration after you create it.
6687
6687
  :param description: A description of the TLS inspection configuration.
6688
6688
  :param tags: The key:value pairs to associate with the resource.
@@ -7063,13 +7063,13 @@ class CfnTLSInspectionConfiguration(
7063
7063
  scopes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnTLSInspectionConfiguration.ServerCertificateScopeProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
7064
7064
  server_certificates: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnTLSInspectionConfiguration.ServerCertificateProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
7065
7065
  ) -> None:
7066
- '''Configures the AWS Certificate Manager certificates and scope that Network Firewall uses to decrypt and re-encrypt traffic using a `TLSInspectionConfiguration <https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-tlsinspectionconfiguration.html>`_ . You can configure ``ServerCertificates`` for inbound SSL/TLS inspection, a ``CertificateAuthorityArn`` for outbound SSL/TLS inspection, or both. For information about working with certificates for TLS inspection, see `Using SSL/TLS server certficiates with TLS inspection configurations <https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html>`_ in the *AWS Network Firewall Developer Guide* .
7066
+ '''Configures the Certificate Manager certificates and scope that Network Firewall uses to decrypt and re-encrypt traffic using a `TLSInspectionConfiguration <https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-tlsinspectionconfiguration.html>`_ . You can configure ``ServerCertificates`` for inbound SSL/TLS inspection, a ``CertificateAuthorityArn`` for outbound SSL/TLS inspection, or both. For information about working with certificates for TLS inspection, see `Using SSL/TLS server certficiates with TLS inspection configurations <https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html>`_ in the *AWS Network Firewall Developer Guide* .
7067
7067
 
7068
7068
  .. epigraph::
7069
7069
 
7070
7070
  If a server certificate that's associated with your `TLSInspectionConfiguration <https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-tlsinspectionconfiguration.html>`_ is revoked, deleted, or expired it can result in client-side TLS errors.
7071
7071
 
7072
- :param certificate_authority_arn: The Amazon Resource Name (ARN) of the imported certificate authority (CA) certificate within AWS Certificate Manager (ACM) to use for outbound SSL/TLS inspection. The following limitations apply: - You can use CA certificates that you imported into ACM, but you can't generate CA certificates with ACM. - You can't use certificates issued by AWS Private Certificate Authority . For more information about configuring certificates for outbound inspection, see `Using SSL/TLS certificates with TLS inspection configurations <https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html>`_ in the *AWS Network Firewall Developer Guide* . For information about working with certificates in ACM, see `Importing certificates <https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html>`_ in the *AWS Certificate Manager User Guide* .
7072
+ :param certificate_authority_arn: The Amazon Resource Name (ARN) of the imported certificate authority (CA) certificate within Certificate Manager (ACM) to use for outbound SSL/TLS inspection. The following limitations apply: - You can use CA certificates that you imported into ACM, but you can't generate CA certificates with ACM. - You can't use certificates issued by AWS Private Certificate Authority . For more information about configuring certificates for outbound inspection, see `Using SSL/TLS certificates with TLS inspection configurations <https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html>`_ in the *AWS Network Firewall Developer Guide* . For information about working with certificates in ACM, see `Importing certificates <https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html>`_ in the *Certificate Manager User Guide* .
7073
7073
  :param check_certificate_revocation_status: When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a ``CertificateAuthorityArn`` in `ServerCertificateConfiguration <https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-servercertificateconfiguration.html>`_ .
7074
7074
  :param scopes: A list of scopes.
7075
7075
  :param server_certificates: The list of server certificates to use for inbound SSL/TLS inspection.
@@ -7129,7 +7129,7 @@ class CfnTLSInspectionConfiguration(
7129
7129
 
7130
7130
  @builtins.property
7131
7131
  def certificate_authority_arn(self) -> typing.Optional[builtins.str]:
7132
- '''The Amazon Resource Name (ARN) of the imported certificate authority (CA) certificate within AWS Certificate Manager (ACM) to use for outbound SSL/TLS inspection.
7132
+ '''The Amazon Resource Name (ARN) of the imported certificate authority (CA) certificate within Certificate Manager (ACM) to use for outbound SSL/TLS inspection.
7133
7133
 
7134
7134
  The following limitations apply:
7135
7135
 
@@ -7138,7 +7138,7 @@ class CfnTLSInspectionConfiguration(
7138
7138
 
7139
7139
  For more information about configuring certificates for outbound inspection, see `Using SSL/TLS certificates with TLS inspection configurations <https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html>`_ in the *AWS Network Firewall Developer Guide* .
7140
7140
 
7141
- For information about working with certificates in ACM, see `Importing certificates <https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html>`_ in the *AWS Certificate Manager User Guide* .
7141
+ For information about working with certificates in ACM, see `Importing certificates <https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html>`_ in the *Certificate Manager User Guide* .
7142
7142
 
7143
7143
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificateconfiguration.html#cfn-networkfirewall-tlsinspectionconfiguration-servercertificateconfiguration-certificateauthorityarn
7144
7144
  '''
@@ -7202,9 +7202,9 @@ class CfnTLSInspectionConfiguration(
7202
7202
  *,
7203
7203
  resource_arn: typing.Optional[builtins.str] = None,
7204
7204
  ) -> None:
7205
- '''Any AWS Certificate Manager (ACM) Secure Sockets Layer/Transport Layer Security (SSL/TLS) server certificate that's associated with a `ServerCertificateConfiguration <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificateconfiguration.html>`_ . Used in a `TLSInspectionConfiguration <https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-tlsinspectionconfiguration.html>`_ for inspection of inbound traffic to your firewall. You must request or import a SSL/TLS certificate into ACM for each domain Network Firewall needs to decrypt and inspect. AWS Network Firewall uses the SSL/TLS certificates to decrypt specified inbound SSL/TLS traffic going to your firewall. For information about working with certificates in AWS Certificate Manager , see `Request a public certificate <https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.html>`_ or `Importing certificates <https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html>`_ in the *AWS Certificate Manager User Guide* .
7205
+ '''Any Certificate Manager (ACM) Secure Sockets Layer/Transport Layer Security (SSL/TLS) server certificate that's associated with a `ServerCertificateConfiguration <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificateconfiguration.html>`_ . Used in a `TLSInspectionConfiguration <https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-tlsinspectionconfiguration.html>`_ for inspection of inbound traffic to your firewall. You must request or import a SSL/TLS certificate into ACM for each domain Network Firewall needs to decrypt and inspect. AWS Network Firewall uses the SSL/TLS certificates to decrypt specified inbound SSL/TLS traffic going to your firewall. For information about working with certificates in Certificate Manager , see `Request a public certificate <https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.html>`_ or `Importing certificates <https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html>`_ in the *Certificate Manager User Guide* .
7206
7206
 
7207
- :param resource_arn: The Amazon Resource Name (ARN) of the AWS Certificate Manager SSL/TLS server certificate that's used for inbound SSL/TLS inspection.
7207
+ :param resource_arn: The Amazon Resource Name (ARN) of the Certificate Manager SSL/TLS server certificate that's used for inbound SSL/TLS inspection.
7208
7208
 
7209
7209
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificate.html
7210
7210
  :exampleMetadata: fixture=_generated
@@ -7228,7 +7228,7 @@ class CfnTLSInspectionConfiguration(
7228
7228
 
7229
7229
  @builtins.property
7230
7230
  def resource_arn(self) -> typing.Optional[builtins.str]:
7231
- '''The Amazon Resource Name (ARN) of the AWS Certificate Manager SSL/TLS server certificate that's used for inbound SSL/TLS inspection.
7231
+ '''The Amazon Resource Name (ARN) of the Certificate Manager SSL/TLS server certificate that's used for inbound SSL/TLS inspection.
7232
7232
 
7233
7233
  :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificate.html#cfn-networkfirewall-tlsinspectionconfiguration-servercertificate-resourcearn
7234
7234
  '''