aws-cdk-lib 2.216.0__py3-none-any.whl → 2.218.0__py3-none-any.whl

aws_cdk/aws_cassandra/__init__.py

@@ -1087,6 +1087,27 @@ class CfnKeyspace(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromKeyspaceName")
+    @builtins.classmethod
+    def from_keyspace_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        keyspace_name: builtins.str,
+    ) -> IKeyspaceRef:
+        '''Creates a new IKeyspaceRef from a keyspaceName.
+
+        :param scope: -
+        :param id: -
+        :param keyspace_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__743e1034e46d26ab8163a3c5674d58e54e9eb96e60318971126ffea77dcb90d0)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument keyspace_name", value=keyspace_name, expected_type=type_hints["keyspace_name"])
+        return typing.cast(IKeyspaceRef, jsii.sinvoke(cls, "fromKeyspaceName", [scope, id, keyspace_name]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -3197,6 +3218,14 @@ def _typecheckingstub__9cd64888a8d1139f7fef90a6f2cad1bf287a6d09115cfa1d1147c1afd
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__743e1034e46d26ab8163a3c5674d58e54e9eb96e60318971126ffea77dcb90d0(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    keyspace_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__6ecbad4543180c6cf4913924c148b210c77e3da9a878ec77916ea568a560458b(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:

aws_cdk/aws_certificatemanager/__init__.py

@@ -871,7 +871,7 @@ class CfnCertificateProps:
         :param domain_name: The fully qualified domain name (FQDN), such as www.example.com, with which you want to secure an ACM certificate. Use an asterisk (*) to create a wildcard certificate that protects several sites in the same domain. For example, ``*.example.com`` protects ``www.example.com`` , ``site.example.com`` , and ``images.example.com.``.
         :param certificate_authority_arn: The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate. If you do not provide an ARN and you are trying to request a private certificate, ACM will attempt to issue a public certificate. For more information about private CAs, see the `AWS Private Certificate Authority <https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html>`_ user guide. The ARN must have the following form: ``arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012``
         :param certificate_export: You can opt out of allowing export of your certificate by specifying the ``DISABLED`` option. Allow export of your certificate by specifying the ``ENABLED`` option. If you do not specify an export preference in a new CloudFormation template, it is the same as explicitly denying export of your certificate.
-        :param certificate_transparency_logging_preference: You can opt out of certificate transparency logging by specifying the ``DISABLED`` option. Opt in by specifying ``ENABLED`` . If you do not specify a certificate transparency logging preference on a new CloudFormation template, or if you remove the logging preference from an existing template, this is the same as explicitly enabling the preference. Changing the certificate transparency logging preference will update the existing resource by calling ``UpdateCertificateOptions`` on the certificate. This action will not create a new resource.
+        :param certificate_transparency_logging_preference: You can opt out of certificate transparency logging by specifying the ``DISABLED`` option. Opt in by specifying ``ENABLED`` . This setting doces not apply to private certificates. If you do not specify a certificate transparency logging preference on a new CloudFormation template, or if you remove the logging preference from an existing template, this is the same as explicitly enabling the preference. Changing the certificate transparency logging preference will update the existing resource by calling ``UpdateCertificateOptions`` on the certificate. This action will not create a new resource.
         :param domain_validation_options: Domain information that domain name registrars use to verify your identity. .. epigraph:: In order for a AWS::CertificateManager::Certificate to be provisioned and validated in CloudFormation automatically, the ``DomainName`` property needs to be identical to one of the ``DomainName`` property supplied in DomainValidationOptions, if the ValidationMethod is **DNS**. Failing to keep them like-for-like will result in failure to create the domain validation records in Route53.
         :param key_algorithm: Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data. RSA is the default key algorithm for ACM certificates. Elliptic Curve Digital Signature Algorithm (ECDSA) keys are smaller, offering security comparable to RSA keys but with greater computing efficiency. However, ECDSA is not supported by all network clients. Some AWS services may require RSA keys, or only support ECDSA keys of a particular size, while others allow the use of either RSA and ECDSA keys to ensure that compatibility is not broken. Check the requirements for the AWS service where you plan to deploy your certificate. For more information about selecting an algorithm, see `Key algorithms <https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate-characteristics.html#algorithms-term>`_ . .. epigraph:: Algorithms supported for an ACM certificate request include: - ``RSA_2048`` - ``EC_prime256v1`` - ``EC_secp384r1`` Other listed algorithms are for imported certificates only. > When you request a private PKI certificate signed by a CA from AWS Private CA, the specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key. Default: RSA_2048
         :param subject_alternative_names: Additional FQDNs to be included in the Subject Alternative Name extension of the ACM certificate. For example, you can add www.example.net to a certificate for which the ``DomainName`` field is www.example.com if users can reach your site by using either name.
@@ -981,7 +981,9 @@ class CfnCertificateProps:
     def certificate_transparency_logging_preference(
         self,
     ) -> typing.Optional[builtins.str]:
-        '''You can opt out of certificate transparency logging by specifying the ``DISABLED`` option. Opt in by specifying ``ENABLED`` .
+        '''You can opt out of certificate transparency logging by specifying the ``DISABLED`` option.
+
+        Opt in by specifying ``ENABLED`` . This setting doces not apply to private certificates.
 
         If you do not specify a certificate transparency logging preference on a new CloudFormation template, or if you remove the logging preference from an existing template, this is the same as explicitly enabling the preference.
 
@@ -2274,9 +2276,9 @@ class CfnCertificate(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_certificatemanager.CfnCertificate",
 ):
-    '''The ``AWS::CertificateManager::Certificate`` resource requests an AWS Certificate Manager ( ACM ) certificate that you can use to enable secure connections.
+    '''The ``AWS::CertificateManager::Certificate`` resource requests an Certificate Manager ( ACM ) certificate that you can use to enable secure connections.
 
-    For example, you can deploy an ACM certificate to an Elastic Load Balancer to enable HTTPS support. For more information, see `RequestCertificate <https://docs.aws.amazon.com/acm/latest/APIReference/API_RequestCertificate.html>`_ in the AWS Certificate Manager API Reference.
+    For example, you can deploy an ACM certificate to an Elastic Load Balancer to enable HTTPS support. For more information, see `RequestCertificate <https://docs.aws.amazon.com/acm/latest/APIReference/API_RequestCertificate.html>`_ in the Certificate Manager API Reference.
     .. epigraph::
 
        When you use the ``AWS::CertificateManager::Certificate`` resource in a CloudFormation stack, domain validation is handled automatically if all three of the following are true: The certificate domain is hosted in Amazon Route 53, the domain resides in your AWS account , and you are using DNS validation.
@@ -2338,7 +2340,7 @@ class CfnCertificate(
         :param domain_name: The fully qualified domain name (FQDN), such as www.example.com, with which you want to secure an ACM certificate. Use an asterisk (*) to create a wildcard certificate that protects several sites in the same domain. For example, ``*.example.com`` protects ``www.example.com`` , ``site.example.com`` , and ``images.example.com.``.
         :param certificate_authority_arn: The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate. If you do not provide an ARN and you are trying to request a private certificate, ACM will attempt to issue a public certificate. For more information about private CAs, see the `AWS Private Certificate Authority <https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html>`_ user guide. The ARN must have the following form: ``arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012``
         :param certificate_export: You can opt out of allowing export of your certificate by specifying the ``DISABLED`` option. Allow export of your certificate by specifying the ``ENABLED`` option. If you do not specify an export preference in a new CloudFormation template, it is the same as explicitly denying export of your certificate.
-        :param certificate_transparency_logging_preference: You can opt out of certificate transparency logging by specifying the ``DISABLED`` option. Opt in by specifying ``ENABLED`` . If you do not specify a certificate transparency logging preference on a new CloudFormation template, or if you remove the logging preference from an existing template, this is the same as explicitly enabling the preference. Changing the certificate transparency logging preference will update the existing resource by calling ``UpdateCertificateOptions`` on the certificate. This action will not create a new resource.
+        :param certificate_transparency_logging_preference: You can opt out of certificate transparency logging by specifying the ``DISABLED`` option. Opt in by specifying ``ENABLED`` . This setting doces not apply to private certificates. If you do not specify a certificate transparency logging preference on a new CloudFormation template, or if you remove the logging preference from an existing template, this is the same as explicitly enabling the preference. Changing the certificate transparency logging preference will update the existing resource by calling ``UpdateCertificateOptions`` on the certificate. This action will not create a new resource.
         :param domain_validation_options: Domain information that domain name registrars use to verify your identity. .. epigraph:: In order for a AWS::CertificateManager::Certificate to be provisioned and validated in CloudFormation automatically, the ``DomainName`` property needs to be identical to one of the ``DomainName`` property supplied in DomainValidationOptions, if the ValidationMethod is **DNS**. Failing to keep them like-for-like will result in failure to create the domain validation records in Route53.
         :param key_algorithm: Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data. RSA is the default key algorithm for ACM certificates. Elliptic Curve Digital Signature Algorithm (ECDSA) keys are smaller, offering security comparable to RSA keys but with greater computing efficiency. However, ECDSA is not supported by all network clients. Some AWS services may require RSA keys, or only support ECDSA keys of a particular size, while others allow the use of either RSA and ECDSA keys to ensure that compatibility is not broken. Check the requirements for the AWS service where you plan to deploy your certificate. For more information about selecting an algorithm, see `Key algorithms <https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate-characteristics.html#algorithms-term>`_ . .. epigraph:: Algorithms supported for an ACM certificate request include: - ``RSA_2048`` - ``EC_prime256v1`` - ``EC_secp384r1`` Other listed algorithms are for imported certificates only. > When you request a private PKI certificate signed by a CA from AWS Private CA, the specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key. Default: RSA_2048
         :param subject_alternative_names: Additional FQDNs to be included in the Subject Alternative Name extension of the ACM certificate. For example, you can add www.example.net to a certificate for which the ``DomainName`` field is www.example.com if users can reach your site by using either name.
@@ -2363,6 +2365,27 @@ class CfnCertificate(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromCertificateId")
+    @builtins.classmethod
+    def from_certificate_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        certificate_id: builtins.str,
+    ) -> ICertificateRef:
+        '''Creates a new ICertificateRef from a certificateId.
+
+        :param scope: -
+        :param id: -
+        :param certificate_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__74ad5174285b28bb947e64c6319be4642c1bb37681ea5d0d736a58181c45689e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument certificate_id", value=certificate_id, expected_type=type_hints["certificate_id"])
+        return typing.cast(ICertificateRef, jsii.sinvoke(cls, "fromCertificateId", [scope, id, certificate_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -2462,10 +2485,7 @@ class CfnCertificate(
     def certificate_transparency_logging_preference(
         self,
     ) -> typing.Optional[builtins.str]:
-        '''You can opt out of certificate transparency logging by specifying the ``DISABLED`` option.
-
-        Opt in by specifying ``ENABLED`` .
-        '''
+        '''You can opt out of certificate transparency logging by specifying the ``DISABLED`` option.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "certificateTransparencyLoggingPreference"))
 
     @certificate_transparency_logging_preference.setter
@@ -2568,7 +2588,7 @@ class CfnCertificate(
             hosted_zone_id: typing.Optional[builtins.str] = None,
             validation_domain: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''``DomainValidationOption`` is a property of the `AWS::CertificateManager::Certificate <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-certificatemanager-certificate.html>`_ resource that specifies the AWS Certificate Manager ( ACM ) certificate domain to validate. Depending on the chosen validation method, ACM checks the domain's DNS record for a validation CNAME, or it attempts to send a validation email message to the domain owner.
+            '''``DomainValidationOption`` is a property of the `AWS::CertificateManager::Certificate <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-certificatemanager-certificate.html>`_ resource that specifies the Certificate Manager ( ACM ) certificate domain to validate. Depending on the chosen validation method, ACM checks the domain's DNS record for a validation CNAME, or it attempts to send a validation email message to the domain owner.
 
             :param domain_name: A fully qualified domain name (FQDN) in the certificate request.
             :param hosted_zone_id: The ``HostedZoneId`` option, which is available if you are using Route 53 as your domain registrar, causes ACM to add your CNAME to the domain record. Your list of ``DomainValidationOptions`` must contain one and only one of the domain-validation options, and the ``HostedZoneId`` can be used only when ``DNS`` is specified as your validation method. Use the Route 53 ``ListHostedZones`` API to discover IDs for available hosted zones. This option is required for publicly trusted certificates. .. epigraph:: The ``ListHostedZones`` API returns IDs in the format "/hostedzone/Z111111QQQQQQQ", but CloudFormation requires the IDs to be in the format "Z111111QQQQQQQ". When you change your ``DomainValidationOptions`` , a new resource is created.
@@ -3113,6 +3133,14 @@ def _typecheckingstub__6f094b3f6a318b9501162c46d45eaf42466c16a9c333dd4021dc90258
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__74ad5174285b28bb947e64c6319be4642c1bb37681ea5d0d736a58181c45689e(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    certificate_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__6cc2233ca7729f72437c57a4d626536c7b9150faa120045db48045a6b05d1e2a(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:

aws_cdk/aws_cleanrooms/__init__.py

@@ -170,6 +170,7 @@ class AnalysisTemplateReference:
         "source": "source",
         "analysis_parameters": "analysisParameters",
         "description": "description",
+        "error_message_configuration": "errorMessageConfiguration",
         "schema": "schema",
         "source_metadata": "sourceMetadata",
         "tags": "tags",
@@ -185,6 +186,7 @@ class CfnAnalysisTemplateProps:
         source: typing.Union[_IResolvable_da3f097b, typing.Union["CfnAnalysisTemplate.AnalysisSourceProperty", typing.Dict[builtins.str, typing.Any]]],
         analysis_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAnalysisTemplate.AnalysisParameterProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         description: typing.Optional[builtins.str] = None,
+        error_message_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAnalysisTemplate.ErrorMessageConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         schema: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAnalysisTemplate.AnalysisSchemaProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         source_metadata: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAnalysisTemplate.AnalysisSourceMetadataProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -197,6 +199,7 @@ class CfnAnalysisTemplateProps:
         :param source: The source of the analysis template.
         :param analysis_parameters: The parameters of the analysis template.
         :param description: The description of the analysis template.
+        :param error_message_configuration: The configuration that specifies the level of detail in error messages returned by analyses using this template. When set to ``DETAILED`` , error messages include more information to help troubleshoot issues with PySpark jobs. Detailed error messages may expose underlying data, including sensitive information. Recommended for faster troubleshooting in development and testing environments.
         :param schema: The entire schema object.
         :param source_metadata: The source metadata for the analysis template.
         :param tags: An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource.
@@ -244,6 +247,9 @@ class CfnAnalysisTemplateProps:
                     default_value="defaultValue"
                 )],
                 description="description",
+                error_message_configuration=cleanrooms.CfnAnalysisTemplate.ErrorMessageConfigurationProperty(
+                    type="type"
+                ),
                 schema=cleanrooms.CfnAnalysisTemplate.AnalysisSchemaProperty(
                     referenced_tables=["referencedTables"]
                 ),
@@ -273,6 +279,7 @@ class CfnAnalysisTemplateProps:
             check_type(argname="argument source", value=source, expected_type=type_hints["source"])
             check_type(argname="argument analysis_parameters", value=analysis_parameters, expected_type=type_hints["analysis_parameters"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument error_message_configuration", value=error_message_configuration, expected_type=type_hints["error_message_configuration"])
             check_type(argname="argument schema", value=schema, expected_type=type_hints["schema"])
             check_type(argname="argument source_metadata", value=source_metadata, expected_type=type_hints["source_metadata"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
@@ -286,6 +293,8 @@ class CfnAnalysisTemplateProps:
             self._values["analysis_parameters"] = analysis_parameters
         if description is not None:
             self._values["description"] = description
+        if error_message_configuration is not None:
+            self._values["error_message_configuration"] = error_message_configuration
         if schema is not None:
             self._values["schema"] = schema
         if source_metadata is not None:
@@ -355,6 +364,19 @@ class CfnAnalysisTemplateProps:
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def error_message_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAnalysisTemplate.ErrorMessageConfigurationProperty"]]:
+        '''The configuration that specifies the level of detail in error messages returned by analyses using this template.
+
+        When set to ``DETAILED`` , error messages include more information to help troubleshoot issues with PySpark jobs. Detailed error messages may expose underlying data, including sensitive information. Recommended for faster troubleshooting in development and testing environments.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-analysistemplate.html#cfn-cleanrooms-analysistemplate-errormessageconfiguration
+        '''
+        result = self._values.get("error_message_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAnalysisTemplate.ErrorMessageConfigurationProperty"]], result)
+
     @builtins.property
     def schema(
         self,
@@ -409,6 +431,7 @@ class CfnAnalysisTemplateProps:
         "name": "name",
         "query_log_status": "queryLogStatus",
         "analytics_engine": "analyticsEngine",
+        "auto_approved_change_types": "autoApprovedChangeTypes",
         "creator_member_abilities": "creatorMemberAbilities",
         "creator_ml_member_abilities": "creatorMlMemberAbilities",
         "creator_payment_configuration": "creatorPaymentConfiguration",
@@ -427,6 +450,7 @@ class CfnCollaborationProps:
         name: builtins.str,
         query_log_status: builtins.str,
         analytics_engine: typing.Optional[builtins.str] = None,
+        auto_approved_change_types: typing.Optional[typing.Sequence[builtins.str]] = None,
         creator_member_abilities: typing.Optional[typing.Sequence[builtins.str]] = None,
         creator_ml_member_abilities: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCollaboration.MLMemberAbilitiesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         creator_payment_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCollaboration.PaymentConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -442,6 +466,7 @@ class CfnCollaborationProps:
         :param name: A human-readable identifier provided by the collaboration owner. Display names are not unique.
         :param query_log_status: An indicator as to whether query logging has been enabled or disabled for the collaboration. When ``ENABLED`` , AWS Clean Rooms logs details about queries run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is ``DISABLED`` .
         :param analytics_engine: The analytics engine for the collaboration. .. epigraph:: After July 16, 2025, the ``CLEAN_ROOMS_SQL`` parameter will no longer be available.
+        :param auto_approved_change_types: The types of change requests that are automatically approved for this collaboration.
         :param creator_member_abilities: The abilities granted to the collaboration creator. *Allowed values* ``CAN_QUERY`` | ``CAN_RECEIVE_RESULTS`` | ``CAN_RUN_JOB``
         :param creator_ml_member_abilities: The ML member abilities for a collaboration member.
         :param creator_payment_configuration: An object representing the collaboration member's payment responsibilities set by the collaboration creator.
@@ -467,6 +492,7 @@ class CfnCollaborationProps:
             
                 # the properties below are optional
                 analytics_engine="analyticsEngine",
+                auto_approved_change_types=["autoApprovedChangeTypes"],
                 creator_member_abilities=["creatorMemberAbilities"],
                 creator_ml_member_abilities=cleanrooms.CfnCollaboration.MLMemberAbilitiesProperty(
                     custom_ml_member_abilities=["customMlMemberAbilities"]
@@ -537,6 +563,7 @@ class CfnCollaborationProps:
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
             check_type(argname="argument query_log_status", value=query_log_status, expected_type=type_hints["query_log_status"])
             check_type(argname="argument analytics_engine", value=analytics_engine, expected_type=type_hints["analytics_engine"])
+            check_type(argname="argument auto_approved_change_types", value=auto_approved_change_types, expected_type=type_hints["auto_approved_change_types"])
             check_type(argname="argument creator_member_abilities", value=creator_member_abilities, expected_type=type_hints["creator_member_abilities"])
             check_type(argname="argument creator_ml_member_abilities", value=creator_ml_member_abilities, expected_type=type_hints["creator_ml_member_abilities"])
             check_type(argname="argument creator_payment_configuration", value=creator_payment_configuration, expected_type=type_hints["creator_payment_configuration"])
@@ -552,6 +579,8 @@ class CfnCollaborationProps:
         }
         if analytics_engine is not None:
             self._values["analytics_engine"] = analytics_engine
+        if auto_approved_change_types is not None:
+            self._values["auto_approved_change_types"] = auto_approved_change_types
         if creator_member_abilities is not None:
             self._values["creator_member_abilities"] = creator_member_abilities
         if creator_ml_member_abilities is not None:
@@ -624,6 +653,15 @@ class CfnCollaborationProps:
         result = self._values.get("analytics_engine")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def auto_approved_change_types(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''The types of change requests that are automatically approved for this collaboration.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-collaboration.html#cfn-cleanrooms-collaboration-autoapprovedchangetypes
+        '''
+        result = self._values.get("auto_approved_change_types")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
     @builtins.property
     def creator_member_abilities(self) -> typing.Optional[typing.List[builtins.str]]:
         '''The abilities granted to the collaboration creator.
@@ -2730,6 +2768,9 @@ class CfnAnalysisTemplate(
                 default_value="defaultValue"
             )],
             description="description",
+            error_message_configuration=cleanrooms.CfnAnalysisTemplate.ErrorMessageConfigurationProperty(
+                type="type"
+            ),
             schema=cleanrooms.CfnAnalysisTemplate.AnalysisSchemaProperty(
                 referenced_tables=["referencedTables"]
             ),
@@ -2763,6 +2804,7 @@ class CfnAnalysisTemplate(
         source: typing.Union[_IResolvable_da3f097b, typing.Union["CfnAnalysisTemplate.AnalysisSourceProperty", typing.Dict[builtins.str, typing.Any]]],
         analysis_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAnalysisTemplate.AnalysisParameterProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         description: typing.Optional[builtins.str] = None,
+        error_message_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAnalysisTemplate.ErrorMessageConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         schema: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAnalysisTemplate.AnalysisSchemaProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         source_metadata: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnAnalysisTemplate.AnalysisSourceMetadataProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -2776,6 +2818,7 @@ class CfnAnalysisTemplate(
         :param source: The source of the analysis template.
         :param analysis_parameters: The parameters of the analysis template.
         :param description: The description of the analysis template.
+        :param error_message_configuration: The configuration that specifies the level of detail in error messages returned by analyses using this template. When set to ``DETAILED`` , error messages include more information to help troubleshoot issues with PySpark jobs. Detailed error messages may expose underlying data, including sensitive information. Recommended for faster troubleshooting in development and testing environments.
         :param schema: The entire schema object.
         :param source_metadata: The source metadata for the analysis template.
         :param tags: An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource.
@@ -2791,6 +2834,7 @@ class CfnAnalysisTemplate(
             source=source,
             analysis_parameters=analysis_parameters,
             description=description,
+            error_message_configuration=error_message_configuration,
             schema=schema,
             source_metadata=source_metadata,
             tags=tags,
@@ -3004,6 +3048,24 @@ class CfnAnalysisTemplate(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="errorMessageConfiguration")
+    def error_message_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAnalysisTemplate.ErrorMessageConfigurationProperty"]]:
+        '''The configuration that specifies the level of detail in error messages returned by analyses using this template.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAnalysisTemplate.ErrorMessageConfigurationProperty"]], jsii.get(self, "errorMessageConfiguration"))
+
+    @error_message_configuration.setter
+    def error_message_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnAnalysisTemplate.ErrorMessageConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__34831cf7179b15aa74fb46a0ab1a549fbfe4b6acc73cf2a5eabf79947604e497)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "errorMessageConfiguration", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="schema")
     def schema(
@@ -3605,6 +3667,64 @@ class CfnAnalysisTemplate(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cleanrooms.CfnAnalysisTemplate.ErrorMessageConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"type": "type"},
+    )
+    class ErrorMessageConfigurationProperty:
+        def __init__(self, *, type: builtins.str) -> None:
+            '''A structure that defines the level of detail included in error messages returned by PySpark jobs.
+
+            This configuration allows you to control the verbosity of error messages to help with troubleshooting PySpark jobs while maintaining appropriate security controls.
+
+            :param type: The level of detail for error messages returned by the PySpark job. When set to DETAILED, error messages include more information to help troubleshoot issues with your PySpark job. Because this setting may expose sensitive data, it is recommended for development and testing environments.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-analysistemplate-errormessageconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cleanrooms as cleanrooms
+                
+                error_message_configuration_property = cleanrooms.CfnAnalysisTemplate.ErrorMessageConfigurationProperty(
+                    type="type"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__99300f4ea5e5ce616768e3b03748c2f91f6e99c88a31ea4331c5d105bb2a1544)
+                check_type(argname="argument type", value=type, expected_type=type_hints["type"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "type": type,
+            }
+
+        @builtins.property
+        def type(self) -> builtins.str:
+            '''The level of detail for error messages returned by the PySpark job.
+
+            When set to DETAILED, error messages include more information to help troubleshoot issues with your PySpark job.
+
+            Because this setting may expose sensitive data, it is recommended for development and testing environments.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-analysistemplate-errormessageconfiguration.html#cfn-cleanrooms-analysistemplate-errormessageconfiguration-type
+            '''
+            result = self._values.get("type")
+            assert result is not None, "Required property 'type' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "ErrorMessageConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cleanrooms.CfnAnalysisTemplate.HashProperty",
         jsii_struct_bases=[],
@@ -3749,6 +3869,7 @@ class CfnCollaboration(
         
             # the properties below are optional
             analytics_engine="analyticsEngine",
+            auto_approved_change_types=["autoApprovedChangeTypes"],
             creator_member_abilities=["creatorMemberAbilities"],
             creator_ml_member_abilities=cleanrooms.CfnCollaboration.MLMemberAbilitiesProperty(
                 custom_ml_member_abilities=["customMlMemberAbilities"]
@@ -3823,6 +3944,7 @@ class CfnCollaboration(
         name: builtins.str,
         query_log_status: builtins.str,
         analytics_engine: typing.Optional[builtins.str] = None,
+        auto_approved_change_types: typing.Optional[typing.Sequence[builtins.str]] = None,
         creator_member_abilities: typing.Optional[typing.Sequence[builtins.str]] = None,
         creator_ml_member_abilities: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCollaboration.MLMemberAbilitiesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         creator_payment_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCollaboration.PaymentConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -3839,6 +3961,7 @@ class CfnCollaboration(
         :param name: A human-readable identifier provided by the collaboration owner. Display names are not unique.
         :param query_log_status: An indicator as to whether query logging has been enabled or disabled for the collaboration. When ``ENABLED`` , AWS Clean Rooms logs details about queries run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is ``DISABLED`` .
         :param analytics_engine: The analytics engine for the collaboration. .. epigraph:: After July 16, 2025, the ``CLEAN_ROOMS_SQL`` parameter will no longer be available.
+        :param auto_approved_change_types: The types of change requests that are automatically approved for this collaboration.
         :param creator_member_abilities: The abilities granted to the collaboration creator. *Allowed values* ``CAN_QUERY`` | ``CAN_RECEIVE_RESULTS`` | ``CAN_RUN_JOB``
         :param creator_ml_member_abilities: The ML member abilities for a collaboration member.
         :param creator_payment_configuration: An object representing the collaboration member's payment responsibilities set by the collaboration creator.
@@ -3857,6 +3980,7 @@ class CfnCollaboration(
             name=name,
             query_log_status=query_log_status,
             analytics_engine=analytics_engine,
+            auto_approved_change_types=auto_approved_change_types,
             creator_member_abilities=creator_member_abilities,
             creator_ml_member_abilities=creator_ml_member_abilities,
             creator_payment_configuration=creator_payment_configuration,
@@ -4002,6 +4126,22 @@ class CfnCollaboration(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "analyticsEngine", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="autoApprovedChangeTypes")
+    def auto_approved_change_types(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''The types of change requests that are automatically approved for this collaboration.'''
+        return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "autoApprovedChangeTypes"))
+
+    @auto_approved_change_types.setter
+    def auto_approved_change_types(
+        self,
+        value: typing.Optional[typing.List[builtins.str]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__bae84907df1f2d3ba640faa4bdd3ba5349c36d0d41a201d71e35e6741dacf1ee)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "autoApprovedChangeTypes", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="creatorMemberAbilities")
     def creator_member_abilities(self) -> typing.Optional[typing.List[builtins.str]]:
@@ -10160,6 +10300,7 @@ def _typecheckingstub__e1c797e3fa5f8683aa0eb66424f00b6b29c5014d5c45e7771fe0c5b1e
     source: typing.Union[_IResolvable_da3f097b, typing.Union[CfnAnalysisTemplate.AnalysisSourceProperty, typing.Dict[builtins.str, typing.Any]]],
     analysis_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAnalysisTemplate.AnalysisParameterProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     description: typing.Optional[builtins.str] = None,
+    error_message_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAnalysisTemplate.ErrorMessageConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     schema: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAnalysisTemplate.AnalysisSchemaProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     source_metadata: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAnalysisTemplate.AnalysisSourceMetadataProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -10174,6 +10315,7 @@ def _typecheckingstub__2049291a9933df94c4258b33838a3aa8100d0214a4519c3d84e6d70ed
     name: builtins.str,
     query_log_status: builtins.str,
     analytics_engine: typing.Optional[builtins.str] = None,
+    auto_approved_change_types: typing.Optional[typing.Sequence[builtins.str]] = None,
     creator_member_abilities: typing.Optional[typing.Sequence[builtins.str]] = None,
     creator_ml_member_abilities: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCollaboration.MLMemberAbilitiesProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     creator_payment_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCollaboration.PaymentConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -10330,6 +10472,7 @@ def _typecheckingstub__0e650aead4f74afeaf90193249293bee92f9a4eb687f4f9678e1a1368
     source: typing.Union[_IResolvable_da3f097b, typing.Union[CfnAnalysisTemplate.AnalysisSourceProperty, typing.Dict[builtins.str, typing.Any]]],
     analysis_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAnalysisTemplate.AnalysisParameterProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     description: typing.Optional[builtins.str] = None,
+    error_message_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAnalysisTemplate.ErrorMessageConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     schema: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAnalysisTemplate.AnalysisSchemaProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     source_metadata: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnAnalysisTemplate.AnalysisSourceMetadataProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -10385,6 +10528,12 @@ def _typecheckingstub__a8ea0f1530d49d0cf3ea112be450d6887b42e42d18ffdc9233aac3656
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__34831cf7179b15aa74fb46a0ab1a549fbfe4b6acc73cf2a5eabf79947604e497(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAnalysisTemplate.ErrorMessageConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__b08707b577f4e2e4847fc726614c034787b0608c33e3b6db3ed058d8262f49f5(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnAnalysisTemplate.AnalysisSchemaProperty]],
 ) -> None:
@@ -10458,6 +10607,13 @@ def _typecheckingstub__de78ae9ecad686157204e702611c0cf015331e3aa099f1e87ab18d5cd
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__99300f4ea5e5ce616768e3b03748c2f91f6e99c88a31ea4331c5d105bb2a1544(
+    *,
+    type: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__43be85fff22ad377febb791857a9bfd90b262e37e83d363df6adfb5783ea6cb5(
     *,
     sha256: typing.Optional[builtins.str] = None,
@@ -10482,6 +10638,7 @@ def _typecheckingstub__a8995527da9ce4212caf3c1fdf601e4947c02ff1e364e92811ac8635b
     name: builtins.str,
     query_log_status: builtins.str,
     analytics_engine: typing.Optional[builtins.str] = None,
+    auto_approved_change_types: typing.Optional[typing.Sequence[builtins.str]] = None,
     creator_member_abilities: typing.Optional[typing.Sequence[builtins.str]] = None,
     creator_ml_member_abilities: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCollaboration.MLMemberAbilitiesProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     creator_payment_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnCollaboration.PaymentConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -10535,6 +10692,12 @@ def _typecheckingstub__1052deb6a86709adcf30bca5621af3b50e52d20c54f6e014b8baeaa99
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__bae84907df1f2d3ba640faa4bdd3ba5349c36d0d41a201d71e35e6741dacf1ee(
+    value: typing.Optional[typing.List[builtins.str]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__1ee81f8b64fd681cae1a860e0339dfa0ddeb287c4e709f0b34cc3c8bcf9bc6bd(
     value: typing.Optional[typing.List[builtins.str]],
 ) -> None: