aws-cdk-lib 2.216.0__py3-none-any.whl → 2.217.0__py3-none-any.whl

aws_cdk/aws_opensearchserverless/__init__.py

@@ -432,10 +432,10 @@ class CfnIndexProps:
                             dimension=123,
                             index=False,
                             method=opensearchserverless.CfnIndex.MethodProperty(
-                                engine="engine",
                                 name="name",
             
                                 # the properties below are optional
+                                engine="engine",
                                 parameters=opensearchserverless.CfnIndex.ParametersProperty(
                                     ef_construction=123,
                                     m=123
@@ -641,6 +641,7 @@ class CfnLifecyclePolicyProps:
     jsii_struct_bases=[],
     name_mapping={
         "description": "description",
+        "iam_federation_options": "iamFederationOptions",
         "iam_identity_center_options": "iamIdentityCenterOptions",
         "name": "name",
         "saml_options": "samlOptions",
@@ -652,6 +653,7 @@ class CfnSecurityConfigProps:
         self,
         *,
         description: typing.Optional[builtins.str] = None,
+        iam_federation_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSecurityConfig.IamFederationConfigOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         iam_identity_center_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
         saml_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSecurityConfig.SamlConfigOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -660,6 +662,7 @@ class CfnSecurityConfigProps:
         '''Properties for defining a ``CfnSecurityConfig``.
 
         :param description: The description of the security configuration.
+        :param iam_federation_options: Describes IAM federation options in the form of a key-value map. Contains configuration details about how OpenSearch Serverless integrates with external identity providers through federation.
         :param iam_identity_center_options: Describes IAM Identity Center options in the form of a key-value map.
         :param name: The name of the security configuration.
         :param saml_options: SAML options for the security configuration in the form of a key-value map.
@@ -676,6 +679,10 @@ class CfnSecurityConfigProps:
             
             cfn_security_config_props = opensearchserverless.CfnSecurityConfigProps(
                 description="description",
+                iam_federation_options=opensearchserverless.CfnSecurityConfig.IamFederationConfigOptionsProperty(
+                    group_attribute="groupAttribute",
+                    user_attribute="userAttribute"
+                ),
                 iam_identity_center_options=opensearchserverless.CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty(
                     instance_arn="instanceArn",
             
@@ -702,6 +709,7 @@ class CfnSecurityConfigProps:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__83172f8fcf5e40df2e2a8ddc136c744969aad86c37d45de37b6d75f0dc154be4)
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument iam_federation_options", value=iam_federation_options, expected_type=type_hints["iam_federation_options"])
             check_type(argname="argument iam_identity_center_options", value=iam_identity_center_options, expected_type=type_hints["iam_identity_center_options"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
             check_type(argname="argument saml_options", value=saml_options, expected_type=type_hints["saml_options"])
@@ -709,6 +717,8 @@ class CfnSecurityConfigProps:
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if description is not None:
             self._values["description"] = description
+        if iam_federation_options is not None:
+            self._values["iam_federation_options"] = iam_federation_options
         if iam_identity_center_options is not None:
             self._values["iam_identity_center_options"] = iam_identity_center_options
         if name is not None:
@@ -727,6 +737,19 @@ class CfnSecurityConfigProps:
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def iam_federation_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSecurityConfig.IamFederationConfigOptionsProperty"]]:
+        '''Describes IAM federation options in the form of a key-value map.
+
+        Contains configuration details about how OpenSearch Serverless integrates with external identity providers through federation.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-securityconfig.html#cfn-opensearchserverless-securityconfig-iamfederationoptions
+        '''
+        result = self._values.get("iam_federation_options")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSecurityConfig.IamFederationConfigOptionsProperty"]], result)
+
     @builtins.property
     def iam_identity_center_options(
         self,
@@ -2056,10 +2079,10 @@ class CfnIndex(
                         dimension=123,
                         index=False,
                         method=opensearchserverless.CfnIndex.MethodProperty(
-                            engine="engine",
                             name="name",
         
                             # the properties below are optional
+                            engine="engine",
                             parameters=opensearchserverless.CfnIndex.ParametersProperty(
                                 ef_construction=123,
                                 m=123
@@ -2415,10 +2438,10 @@ class CfnIndex(
                             dimension=123,
                             index=False,
                             method=opensearchserverless.CfnIndex.MethodProperty(
-                                engine="engine",
                                 name="name",
                 
                                 # the properties below are optional
+                                engine="engine",
                                 parameters=opensearchserverless.CfnIndex.ParametersProperty(
                                     ef_construction=123,
                                     m=123
@@ -2466,8 +2489,8 @@ class CfnIndex(
         jsii_type="aws-cdk-lib.aws_opensearchserverless.CfnIndex.MethodProperty",
         jsii_struct_bases=[],
         name_mapping={
-            "engine": "engine",
             "name": "name",
+            "engine": "engine",
             "parameters": "parameters",
             "space_type": "spaceType",
         },
@@ -2476,15 +2499,15 @@ class CfnIndex(
         def __init__(
             self,
             *,
-            engine: builtins.str,
             name: builtins.str,
+            engine: typing.Optional[builtins.str] = None,
             parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnIndex.ParametersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             space_type: typing.Optional[builtins.str] = None,
         ) -> None:
             '''Configuration for k-NN search method.
 
-            :param engine: The k-NN search engine to use.
             :param name: The algorithm name for k-NN search.
+            :param engine: The k-NN search engine to use.
             :param parameters: Additional parameters for the k-NN algorithm.
             :param space_type: The distance function used for k-NN search.
 
@@ -2498,10 +2521,10 @@ class CfnIndex(
                 from aws_cdk import aws_opensearchserverless as opensearchserverless
                 
                 method_property = opensearchserverless.CfnIndex.MethodProperty(
-                    engine="engine",
                     name="name",
                 
                     # the properties below are optional
+                    engine="engine",
                     parameters=opensearchserverless.CfnIndex.ParametersProperty(
                         ef_construction=123,
                         m=123
@@ -2511,29 +2534,20 @@ class CfnIndex(
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__1f32a7c2cc9cc53a405856608b840b3cd657cad90afeb4b25d6577b3e1573b35)
-                check_type(argname="argument engine", value=engine, expected_type=type_hints["engine"])
                 check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+                check_type(argname="argument engine", value=engine, expected_type=type_hints["engine"])
                 check_type(argname="argument parameters", value=parameters, expected_type=type_hints["parameters"])
                 check_type(argname="argument space_type", value=space_type, expected_type=type_hints["space_type"])
             self._values: typing.Dict[builtins.str, typing.Any] = {
-                "engine": engine,
                 "name": name,
             }
+            if engine is not None:
+                self._values["engine"] = engine
             if parameters is not None:
                 self._values["parameters"] = parameters
             if space_type is not None:
                 self._values["space_type"] = space_type
 
-        @builtins.property
-        def engine(self) -> builtins.str:
-            '''The k-NN search engine to use.
-
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-index-method.html#cfn-opensearchserverless-index-method-engine
-            '''
-            result = self._values.get("engine")
-            assert result is not None, "Required property 'engine' is missing"
-            return typing.cast(builtins.str, result)
-
         @builtins.property
         def name(self) -> builtins.str:
             '''The algorithm name for k-NN search.
@@ -2544,6 +2558,15 @@ class CfnIndex(
             assert result is not None, "Required property 'name' is missing"
             return typing.cast(builtins.str, result)
 
+        @builtins.property
+        def engine(self) -> typing.Optional[builtins.str]:
+            '''The k-NN search engine to use.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-index-method.html#cfn-opensearchserverless-index-method-engine
+            '''
+            result = self._values.get("engine")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         @builtins.property
         def parameters(
             self,
@@ -2695,10 +2718,10 @@ class CfnIndex(
                     dimension=123,
                     index=False,
                     method=opensearchserverless.CfnIndex.MethodProperty(
-                        engine="engine",
                         name="name",
                 
                         # the properties below are optional
+                        engine="engine",
                         parameters=opensearchserverless.CfnIndex.ParametersProperty(
                             ef_construction=123,
                             m=123
@@ -2982,6 +3005,10 @@ class CfnSecurityConfig(
         
         cfn_security_config = opensearchserverless.CfnSecurityConfig(self, "MyCfnSecurityConfig",
             description="description",
+            iam_federation_options=opensearchserverless.CfnSecurityConfig.IamFederationConfigOptionsProperty(
+                group_attribute="groupAttribute",
+                user_attribute="userAttribute"
+            ),
             iam_identity_center_options=opensearchserverless.CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty(
                 instance_arn="instanceArn",
         
@@ -3012,6 +3039,7 @@ class CfnSecurityConfig(
         id: builtins.str,
         *,
         description: typing.Optional[builtins.str] = None,
+        iam_federation_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSecurityConfig.IamFederationConfigOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         iam_identity_center_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         name: typing.Optional[builtins.str] = None,
         saml_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnSecurityConfig.SamlConfigOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -3021,6 +3049,7 @@ class CfnSecurityConfig(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param description: The description of the security configuration.
+        :param iam_federation_options: Describes IAM federation options in the form of a key-value map. Contains configuration details about how OpenSearch Serverless integrates with external identity providers through federation.
         :param iam_identity_center_options: Describes IAM Identity Center options in the form of a key-value map.
         :param name: The name of the security configuration.
         :param saml_options: SAML options for the security configuration in the form of a key-value map.
@@ -3032,6 +3061,7 @@ class CfnSecurityConfig(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnSecurityConfigProps(
             description=description,
+            iam_federation_options=iam_federation_options,
             iam_identity_center_options=iam_identity_center_options,
             name=name,
             saml_options=saml_options,
@@ -3132,6 +3162,24 @@ class CfnSecurityConfig(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="iamFederationOptions")
+    def iam_federation_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSecurityConfig.IamFederationConfigOptionsProperty"]]:
+        '''Describes IAM federation options in the form of a key-value map.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSecurityConfig.IamFederationConfigOptionsProperty"]], jsii.get(self, "iamFederationOptions"))
+
+    @iam_federation_options.setter
+    def iam_federation_options(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnSecurityConfig.IamFederationConfigOptionsProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ccfa7fa0cc51cc5944f3e224a02320990df0f8ebafce43a7009528585ae23975)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "iamFederationOptions", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="iamIdentityCenterOptions")
     def iam_identity_center_options(
@@ -3194,6 +3242,85 @@ class CfnSecurityConfig(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "type", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_opensearchserverless.CfnSecurityConfig.IamFederationConfigOptionsProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "group_attribute": "groupAttribute",
+            "user_attribute": "userAttribute",
+        },
+    )
+    class IamFederationConfigOptionsProperty:
+        def __init__(
+            self,
+            *,
+            group_attribute: typing.Optional[builtins.str] = None,
+            user_attribute: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Describes IAM federation options for an OpenSearch Serverless security configuration in the form of a key-value map.
+
+            These options define how OpenSearch Serverless integrates with external identity providers using federation.
+
+            :param group_attribute: The group attribute for this IAM federation integration. This attribute is used to map identity provider groups to OpenSearch Serverless permissions.
+            :param user_attribute: The user attribute for this IAM federation integration. This attribute is used to identify users in the federated authentication process.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-securityconfig-iamfederationconfigoptions.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_opensearchserverless as opensearchserverless
+                
+                iam_federation_config_options_property = opensearchserverless.CfnSecurityConfig.IamFederationConfigOptionsProperty(
+                    group_attribute="groupAttribute",
+                    user_attribute="userAttribute"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__ce8f26dda3a935772ecc5546e8017fcfdc1c87fe45685294d9860d147cf53040)
+                check_type(argname="argument group_attribute", value=group_attribute, expected_type=type_hints["group_attribute"])
+                check_type(argname="argument user_attribute", value=user_attribute, expected_type=type_hints["user_attribute"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if group_attribute is not None:
+                self._values["group_attribute"] = group_attribute
+            if user_attribute is not None:
+                self._values["user_attribute"] = user_attribute
+
+        @builtins.property
+        def group_attribute(self) -> typing.Optional[builtins.str]:
+            '''The group attribute for this IAM federation integration.
+
+            This attribute is used to map identity provider groups to OpenSearch Serverless permissions.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-securityconfig-iamfederationconfigoptions.html#cfn-opensearchserverless-securityconfig-iamfederationconfigoptions-groupattribute
+            '''
+            result = self._values.get("group_attribute")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def user_attribute(self) -> typing.Optional[builtins.str]:
+            '''The user attribute for this IAM federation integration.
+
+            This attribute is used to identify users in the federated authentication process.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchserverless-securityconfig-iamfederationconfigoptions.html#cfn-opensearchserverless-securityconfig-iamfederationconfigoptions-userattribute
+            '''
+            result = self._values.get("user_attribute")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "IamFederationConfigOptionsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_opensearchserverless.CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty",
         jsii_struct_bases=[],
@@ -3873,6 +4000,7 @@ def _typecheckingstub__e73912f69bcf372f36058fe91d3360e53142205e8eb7f06190c7963ad
 def _typecheckingstub__83172f8fcf5e40df2e2a8ddc136c744969aad86c37d45de37b6d75f0dc154be4(
     *,
     description: typing.Optional[builtins.str] = None,
+    iam_federation_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.IamFederationConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     iam_identity_center_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
     saml_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.SamlConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -4123,8 +4251,8 @@ def _typecheckingstub__a5bb392b8c065f198a0fe7fd6e0fa2156f493990b76e0fee04edb9297
 
 def _typecheckingstub__1f32a7c2cc9cc53a405856608b840b3cd657cad90afeb4b25d6577b3e1573b35(
     *,
-    engine: builtins.str,
     name: builtins.str,
+    engine: typing.Optional[builtins.str] = None,
     parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnIndex.ParametersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     space_type: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -4204,6 +4332,7 @@ def _typecheckingstub__ed9d460597a09f666d8e08c01fd366ec5026a44848df01fe64ec8aa93
     id: builtins.str,
     *,
     description: typing.Optional[builtins.str] = None,
+    iam_federation_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.IamFederationConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     iam_identity_center_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     name: typing.Optional[builtins.str] = None,
     saml_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnSecurityConfig.SamlConfigOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -4230,6 +4359,12 @@ def _typecheckingstub__a7b44e920b0f0e4d138dcb200c4536168d3965f24eed3226a4574e927
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__ccfa7fa0cc51cc5944f3e224a02320990df0f8ebafce43a7009528585ae23975(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnSecurityConfig.IamFederationConfigOptionsProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__1158fc0f587cad32843a157af521fc2d669a0bc1f7c84c5e1dcd753237a9ca9a(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnSecurityConfig.IamIdentityCenterConfigOptionsProperty]],
 ) -> None:
@@ -4254,6 +4389,14 @@ def _typecheckingstub__80701c5b69899d2a5416bba637f7adf26445dcef6c813c58399037cc3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__ce8f26dda3a935772ecc5546e8017fcfdc1c87fe45685294d9860d147cf53040(
+    *,
+    group_attribute: typing.Optional[builtins.str] = None,
+    user_attribute: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7013bb6fc78d2c057c35211835fafe79d7d06fc41bdb98c07e46a37fd20caff9(
     *,
     instance_arn: builtins.str,

aws_cdk/aws_opensearchservice/__init__.py

@@ -6899,7 +6899,7 @@ class CfnDomain(
             :param anonymous_auth_disable_date: Date and time when the migration period will be disabled. Only necessary when `enabling fine-grained access control on an existing domain <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html#fgac-enabling-existing>`_ .
             :param anonymous_auth_enabled: True to enable a 30-day migration period during which administrators can create role mappings. Only necessary when `enabling fine-grained access control on an existing domain <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html#fgac-enabling-existing>`_ .
             :param enabled: True to enable fine-grained access control. You must also enable encryption of data at rest and node-to-node encryption. See `Fine-grained access control in Amazon OpenSearch Service <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html>`_ .
-            :param iam_federation_options: 
+            :param iam_federation_options: Input configuration for IAM identity federation within advanced security options.
             :param internal_user_database_enabled: True to enable the internal user database.
             :param jwt_options: Container for information about the JWT configuration of the Amazon OpenSearch Service.
             :param master_user_options: Specifies information about the master user.
@@ -7018,7 +7018,8 @@ class CfnDomain(
         def iam_federation_options(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomain.IAMFederationOptionsProperty"]]:
-            '''
+            '''Input configuration for IAM identity federation within advanced security options.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html#cfn-opensearchservice-domain-advancedsecurityoptionsinput-iamfederationoptions
             '''
             result = self._values.get("iam_federation_options")
@@ -7567,7 +7568,7 @@ class CfnDomain(
             '''Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.
 
             :param custom_endpoint: The fully qualified URL for your custom endpoint. Required if you enabled a custom endpoint for the domain.
-            :param custom_endpoint_certificate_arn: The AWS Certificate Manager ARN for your domain's SSL/TLS certificate. Required if you enabled a custom endpoint for the domain.
+            :param custom_endpoint_certificate_arn: The Certificate Manager ARN for your domain's SSL/TLS certificate. Required if you enabled a custom endpoint for the domain.
             :param custom_endpoint_enabled: True to enable a custom endpoint for the domain. If enabled, you must also provide values for ``CustomEndpoint`` and ``CustomEndpointCertificateArn`` .
             :param enforce_https: True to require that all traffic to the domain arrive over HTTPS. Required if you enable fine-grained access control in `AdvancedSecurityOptions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html>`_ .
             :param tls_security_policy: The minimum TLS version required for traffic to the domain. The policy can be one of the following values:. - *Policy-Min-TLS-1-0-2019-07:* TLS security policy that supports TLS version 1.0 to TLS version 1.2 - *Policy-Min-TLS-1-2-2019-07:* TLS security policy that supports only TLS version 1.2 - *Policy-Min-TLS-1-2-PFS-2023-10:* TLS security policy that supports TLS version 1.2 to TLS version 1.3 with perfect forward secrecy cipher suites
@@ -7621,7 +7622,7 @@ class CfnDomain(
 
         @builtins.property
         def custom_endpoint_certificate_arn(self) -> typing.Optional[builtins.str]:
-            '''The AWS Certificate Manager ARN for your domain's SSL/TLS certificate.
+            '''The Certificate Manager ARN for your domain's SSL/TLS certificate.
 
             Required if you enabled a custom endpoint for the domain.
 

aws_cdk/aws_pcs/__init__.py

@@ -296,7 +296,7 @@ class CfnComputeNodeGroupProps:
         :param cluster_id: The ID of the cluster of the compute node group.
         :param custom_launch_template: An Amazon EC2 launch template AWS PCS uses to launch compute nodes.
         :param iam_instance_profile_arn: The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have the ``pcs:RegisterComputeNodeGroupInstance`` permission and the role name must start with ``AWSPCS`` or must have the path ``/aws-pcs/`` . For more information, see `IAM instance profiles for AWS PCS <https://docs.aws.amazon.com//pcs/latest/userguide/security-instance-profiles.html>`_ in the *AWS PCS User Guide* .
-        :param instance_configs: A list of EC2 instance configurations that AWS AWS PCS can provision in the compute node group.
+        :param instance_configs: A list of EC2 instance configurations that AWS PCS can provision in the compute node group.
         :param scaling_configuration: Specifies the boundaries of the compute node group auto scaling.
         :param subnet_ids: The list of subnet IDs where instances are provisioned by the compute node group. The subnets must be in the same VPC as the cluster.
         :param ami_id: The ID of the Amazon Machine Image (AMI) that AWS PCS uses to launch instances. If not provided, AWS PCS uses the AMI ID specified in the custom launch template.
@@ -424,7 +424,7 @@ class CfnComputeNodeGroupProps:
     def instance_configs(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnComputeNodeGroup.InstanceConfigProperty"]]]:
-        '''A list of EC2 instance configurations that AWS AWS PCS can provision in the compute node group.
+        '''A list of EC2 instance configurations that AWS PCS can provision in the compute node group.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcs-computenodegroup.html#cfn-pcs-computenodegroup-instanceconfigs
         '''
@@ -1307,7 +1307,7 @@ class CfnCluster(
         ) -> None:
             '''The shared Slurm key for authentication, also known as the *cluster secret* .
 
-            :param secret_arn: The Amazon Resource Name (ARN) of the the shared Slurm key.
+            :param secret_arn: The Amazon Resource Name (ARN) of the shared Slurm key.
             :param secret_version: The version of the shared Slurm key.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcs-cluster-authkey.html
@@ -1335,7 +1335,7 @@ class CfnCluster(
 
         @builtins.property
         def secret_arn(self) -> builtins.str:
-            '''The Amazon Resource Name (ARN) of the the shared Slurm key.
+            '''The Amazon Resource Name (ARN) of the shared Slurm key.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcs-cluster-authkey.html#cfn-pcs-cluster-authkey-secretarn
             '''
@@ -2042,7 +2042,7 @@ class CfnComputeNodeGroup(
         :param cluster_id: The ID of the cluster of the compute node group.
         :param custom_launch_template: An Amazon EC2 launch template AWS PCS uses to launch compute nodes.
         :param iam_instance_profile_arn: The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have the ``pcs:RegisterComputeNodeGroupInstance`` permission and the role name must start with ``AWSPCS`` or must have the path ``/aws-pcs/`` . For more information, see `IAM instance profiles for AWS PCS <https://docs.aws.amazon.com//pcs/latest/userguide/security-instance-profiles.html>`_ in the *AWS PCS User Guide* .
-        :param instance_configs: A list of EC2 instance configurations that AWS AWS PCS can provision in the compute node group.
+        :param instance_configs: A list of EC2 instance configurations that AWS PCS can provision in the compute node group.
         :param scaling_configuration: Specifies the boundaries of the compute node group auto scaling.
         :param subnet_ids: The list of subnet IDs where instances are provisioned by the compute node group. The subnets must be in the same VPC as the cluster.
         :param ami_id: The ID of the Amazon Machine Image (AMI) that AWS PCS uses to launch instances. If not provided, AWS PCS uses the AMI ID specified in the custom launch template.
@@ -2209,7 +2209,7 @@ class CfnComputeNodeGroup(
     def instance_configs(
         self,
     ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnComputeNodeGroup.InstanceConfigProperty"]]]:
-        '''A list of EC2 instance configurations that AWS AWS PCS can provision in the compute node group.'''
+        '''A list of EC2 instance configurations that AWS PCS can provision in the compute node group.'''
         return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnComputeNodeGroup.InstanceConfigProperty"]]], jsii.get(self, "instanceConfigs"))
 
     @instance_configs.setter
@@ -2779,7 +2779,7 @@ class CfnComputeNodeGroup(
         ) -> None:
             '''Additional configuration when you specify ``SPOT`` as the ``purchaseOption`` for the ``CreateComputeNodeGroup`` API action.
 
-            :param allocation_strategy: The Amazon EC2 allocation strategy AWS AWS PCS uses to provision EC2 instances. AWS AWS PCS supports *lowest price* , *capacity optimized* , and *price capacity optimized* . For more information, see `Use allocation strategies to determine how EC2 Fleet or Spot Fleet fulfills Spot and On-Demand capacity <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-allocation-strategy.html>`_ in the *Amazon Elastic Compute Cloud User Guide* . If you don't provide this option, it defaults to *price capacity optimized* .
+            :param allocation_strategy: The Amazon EC2 allocation strategy AWS PCS uses to provision EC2 instances. AWS PCS supports *lowest price* , *capacity optimized* , and *price capacity optimized* . For more information, see `Use allocation strategies to determine how EC2 Fleet or Spot Fleet fulfills Spot and On-Demand capacity <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-allocation-strategy.html>`_ in the *Amazon Elastic Compute Cloud User Guide* . If you don't provide this option, it defaults to *price capacity optimized* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcs-computenodegroup-spotoptions.html
             :exampleMetadata: fixture=_generated
@@ -2803,9 +2803,9 @@ class CfnComputeNodeGroup(
 
         @builtins.property
         def allocation_strategy(self) -> typing.Optional[builtins.str]:
-            '''The Amazon EC2 allocation strategy AWS AWS PCS uses to provision EC2 instances.
+            '''The Amazon EC2 allocation strategy AWS PCS uses to provision EC2 instances.
 
-            AWS AWS PCS supports *lowest price* , *capacity optimized* , and *price capacity optimized* . For more information, see `Use allocation strategies to determine how EC2 Fleet or Spot Fleet fulfills Spot and On-Demand capacity <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-allocation-strategy.html>`_ in the *Amazon Elastic Compute Cloud User Guide* . If you don't provide this option, it defaults to *price capacity optimized* .
+            AWS PCS supports *lowest price* , *capacity optimized* , and *price capacity optimized* . For more information, see `Use allocation strategies to determine how EC2 Fleet or Spot Fleet fulfills Spot and On-Demand capacity <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-allocation-strategy.html>`_ in the *Amazon Elastic Compute Cloud User Guide* . If you don't provide this option, it defaults to *price capacity optimized* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcs-computenodegroup-spotoptions.html#cfn-pcs-computenodegroup-spotoptions-allocationstrategy
             '''