aws-cdk-lib 2.217.0__py3-none-any.whl → 2.219.0__py3-none-any.whl

aws_cdk/aws_datasync/__init__.py

@@ -2223,8 +2223,8 @@ class CfnLocationSMBProps:
 
         :param agent_arns: Specifies the DataSync agent (or agents) that can connect to your SMB file server. You specify an agent by using its Amazon Resource Name (ARN).
         :param authentication_type: The authentication mode used to determine identity of user.
-        :param cmk_secret_config: Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
-        :param custom_secret_config: Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+        :param cmk_secret_config: Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key . .. epigraph:: You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
+        :param custom_secret_config: Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret. .. epigraph:: You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
         :param dns_ip_addresses: Specifies the IPv4 addresses for the DNS servers that your SMB file server belongs to. This parameter applies only if AuthenticationType is set to KERBEROS. If you have multiple domains in your environment, configuring this parameter makes sure that DataSync connects to the right SMB file server.
         :param domain: Specifies the Windows domain name that your SMB file server belongs to. This parameter applies only if ``AuthenticationType`` is set to ``NTLM`` . If you have multiple domains in your environment, configuring this parameter makes sure that DataSync connects to the right file server.
         :param kerberos_keytab: The Base64 string representation of the Keytab file. Specifies your Kerberos key table (keytab) file, which includes mappings between your service principal name (SPN) and encryption keys. To avoid task execution errors, make sure that the SPN in the keytab file matches exactly what you specify for KerberosPrincipal and in your krb5.conf file.
@@ -2351,7 +2351,11 @@ class CfnLocationSMBProps:
     def cmk_secret_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CmkSecretConfigProperty"]]:
-        '''Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+        '''Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .
+
+        .. epigraph::
+
+           You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationsmb.html#cfn-datasync-locationsmb-cmksecretconfig
         '''
@@ -2362,7 +2366,12 @@ class CfnLocationSMBProps:
     def custom_secret_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CustomSecretConfigProperty"]]:
-        '''Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+        '''Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text.
+
+        This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.
+        .. epigraph::
+
+           You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationsmb.html#cfn-datasync-locationsmb-customsecretconfig
         '''
@@ -8287,8 +8296,8 @@ class CfnLocationSMB(
         :param id: Construct identifier for this resource (unique in its scope).
         :param agent_arns: Specifies the DataSync agent (or agents) that can connect to your SMB file server. You specify an agent by using its Amazon Resource Name (ARN).
         :param authentication_type: The authentication mode used to determine identity of user.
-        :param cmk_secret_config: Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
-        :param custom_secret_config: Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+        :param cmk_secret_config: Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key . .. epigraph:: You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
+        :param custom_secret_config: Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret. .. epigraph:: You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
         :param dns_ip_addresses: Specifies the IPv4 addresses for the DNS servers that your SMB file server belongs to. This parameter applies only if AuthenticationType is set to KERBEROS. If you have multiple domains in your environment, configuring this parameter makes sure that DataSync connects to the right SMB file server.
         :param domain: Specifies the Windows domain name that your SMB file server belongs to. This parameter applies only if ``AuthenticationType`` is set to ``NTLM`` . If you have multiple domains in your environment, configuring this parameter makes sure that DataSync connects to the right file server.
         :param kerberos_keytab: The Base64 string representation of the Keytab file. Specifies your Kerberos key table (keytab) file, which includes mappings between your service principal name (SPN) and encryption keys. To avoid task execution errors, make sure that the SPN in the keytab file matches exactly what you specify for KerberosPrincipal and in your krb5.conf file.
@@ -8358,7 +8367,9 @@ class CfnLocationSMB(
     @builtins.property
     @jsii.member(jsii_name="attrCmkSecretConfigSecretArn")
     def attr_cmk_secret_config_secret_arn(self) -> builtins.str:
-        '''Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync.
+        '''Specifies the ARN for the DataSync-managed AWS Secrets Manager secret that that is used to access a specific storage location.
+
+        This property is generated by DataSync and is read-only. DataSync encrypts this secret with the KMS key that you specify for ``KmsKeyArn`` .
 
         :cloudformationAttribute: CmkSecretConfig.SecretArn
         '''
@@ -8441,7 +8452,7 @@ class CfnLocationSMB(
     def cmk_secret_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CmkSecretConfigProperty"]]:
-        '''Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.'''
+        '''Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CmkSecretConfigProperty"]], jsii.get(self, "cmkSecretConfig"))
 
     @cmk_secret_config.setter
@@ -8459,7 +8470,7 @@ class CfnLocationSMB(
     def custom_secret_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CustomSecretConfigProperty"]]:
-        '''Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.'''
+        '''Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CustomSecretConfigProperty"]], jsii.get(self, "customSecretConfig"))
 
     @custom_secret_config.setter
@@ -8635,10 +8646,14 @@ class CfnLocationSMB(
             kms_key_arn: typing.Optional[builtins.str] = None,
             secret_arn: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+            '''Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .
+
+            .. epigraph::
+
+               You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
 
-            :param kms_key_arn: Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn. DataSync provides this key to AWS Secrets Manager.
-            :param secret_arn: Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync.
+            :param kms_key_arn: Specifies the ARN for the customer-managed AWS KMS key that DataSync uses to encrypt the DataSync-managed secret stored for ``SecretArn`` . DataSync provides this key to AWS Secrets Manager .
+            :param secret_arn: Specifies the ARN for the DataSync-managed AWS Secrets Manager secret that that is used to access a specific storage location. This property is generated by DataSync and is read-only. DataSync encrypts this secret with the KMS key that you specify for ``KmsKeyArn`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-cmksecretconfig.html
             :exampleMetadata: fixture=_generated
@@ -8666,9 +8681,9 @@ class CfnLocationSMB(
 
         @builtins.property
         def kms_key_arn(self) -> typing.Optional[builtins.str]:
-            '''Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn.
+            '''Specifies the ARN for the customer-managed AWS KMS key that DataSync uses to encrypt the DataSync-managed secret stored for ``SecretArn`` .
 
-            DataSync provides this key to AWS Secrets Manager.
+            DataSync provides this key to AWS Secrets Manager .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-cmksecretconfig.html#cfn-datasync-locationsmb-cmksecretconfig-kmskeyarn
             '''
@@ -8677,7 +8692,9 @@ class CfnLocationSMB(
 
         @builtins.property
         def secret_arn(self) -> typing.Optional[builtins.str]:
-            '''Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync.
+            '''Specifies the ARN for the DataSync-managed AWS Secrets Manager secret that that is used to access a specific storage location.
+
+            This property is generated by DataSync and is read-only. DataSync encrypts this secret with the KMS key that you specify for ``KmsKeyArn`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-cmksecretconfig.html#cfn-datasync-locationsmb-cmksecretconfig-secretarn
             '''
@@ -8710,10 +8727,15 @@ class CfnLocationSMB(
             secret_access_role_arn: builtins.str,
             secret_arn: builtins.str,
         ) -> None:
-            '''Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+            '''Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text.
 
-            :param secret_access_role_arn: Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn.
-            :param secret_arn: Specifies the ARN for a customer created AWS Secrets Manager secret.
+            This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.
+            .. epigraph::
+
+               You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
+
+            :param secret_access_role_arn: Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for ``SecretArn`` .
+            :param secret_arn: Specifies the ARN for an AWS Secrets Manager secret.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-customsecretconfig.html
             :exampleMetadata: fixture=_generated
@@ -8740,7 +8762,7 @@ class CfnLocationSMB(
 
         @builtins.property
         def secret_access_role_arn(self) -> builtins.str:
-            '''Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn.
+            '''Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for ``SecretArn`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-customsecretconfig.html#cfn-datasync-locationsmb-customsecretconfig-secretaccessrolearn
             '''
@@ -8750,7 +8772,7 @@ class CfnLocationSMB(
 
         @builtins.property
         def secret_arn(self) -> builtins.str:
-            '''Specifies the ARN for a customer created AWS Secrets Manager secret.
+            '''Specifies the ARN for an AWS Secrets Manager secret.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-customsecretconfig.html#cfn-datasync-locationsmb-customsecretconfig-secretarn
             '''
@@ -8776,9 +8798,9 @@ class CfnLocationSMB(
     )
     class ManagedSecretConfigProperty:
         def __init__(self, *, secret_arn: builtins.str) -> None:
-            '''Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location.
+            '''Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location.
 
-            DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.
+            DataSync uses the default AWS -managed KMS key to encrypt this secret in AWS Secrets Manager .
 
             :param secret_arn: Specifies the ARN for an AWS Secrets Manager secret.
 

aws_cdk/aws_datazone/__init__.py

@@ -1709,12 +1709,12 @@ class CfnFormTypeProps:
     ) -> None:
         '''Properties for defining a ``CfnFormType``.
 
-        :param domain_identifier: The ID of the Amazon DataZone domain in which this metadata form type is created.
-        :param model: Indicates the smithy model of the API.
-        :param name: The name of this Amazon DataZone metadata form type.
-        :param owning_project_identifier: The ID of the Amazon DataZone project that owns this metadata form type.
-        :param description: The description of this Amazon DataZone metadata form type.
-        :param status: The status of this Amazon DataZone metadata form type.
+        :param domain_identifier: The identifier of the Amazon DataZone domain in which the form type exists.
+        :param model: The model of the form type.
+        :param name: The name of the form type.
+        :param owning_project_identifier: The identifier of the project that owns the form type.
+        :param description: The description of the metadata form type.
+        :param status: The status of the form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html
         :exampleMetadata: fixture=_generated
@@ -1759,7 +1759,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def domain_identifier(self) -> builtins.str:
-        '''The ID of the Amazon DataZone domain in which this metadata form type is created.
+        '''The identifier of the Amazon DataZone domain in which the form type exists.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-domainidentifier
         '''
@@ -1769,7 +1769,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def model(self) -> typing.Union[_IResolvable_da3f097b, "CfnFormType.ModelProperty"]:
-        '''Indicates the smithy model of the API.
+        '''The model of the form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-model
         '''
@@ -1779,7 +1779,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def name(self) -> builtins.str:
-        '''The name of this Amazon DataZone metadata form type.
+        '''The name of the form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-name
         '''
@@ -1789,7 +1789,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def owning_project_identifier(self) -> builtins.str:
-        '''The ID of the Amazon DataZone project that owns this metadata form type.
+        '''The identifier of the project that owns the form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-owningprojectidentifier
         '''
@@ -1799,7 +1799,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def description(self) -> typing.Optional[builtins.str]:
-        '''The description of this Amazon DataZone metadata form type.
+        '''The description of the metadata form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-description
         '''
@@ -1808,7 +1808,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def status(self) -> typing.Optional[builtins.str]:
-        '''The status of this Amazon DataZone metadata form type.
+        '''The status of the form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-status
         '''
@@ -9594,6 +9594,48 @@ class CfnDomain(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromDomainArn")
+    @builtins.classmethod
+    def from_domain_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> IDomainRef:
+        '''Creates a new IDomainRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__184266697bd0b40b6137c37aa81e137c2d331c0790dbbb08061a3d04dcf83f9c)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(IDomainRef, jsii.sinvoke(cls, "fromDomainArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromDomainId")
+    @builtins.classmethod
+    def from_domain_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        domain_id: builtins.str,
+    ) -> IDomainRef:
+        '''Creates a new IDomainRef from a domainId.
+
+        :param scope: -
+        :param id: -
+        :param domain_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__980a13437d77898f5d34721718082a5f116a6033aaf35aa8e2f76cb08c6ae77c)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument domain_id", value=domain_id, expected_type=type_hints["domain_id"])
+        return typing.cast(IDomainRef, jsii.sinvoke(cls, "fromDomainId", [scope, id, domain_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -11702,7 +11744,7 @@ class CfnFormType(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_datazone.CfnFormType",
 ):
-    '''Create and manage form types in Amazon Datazone.
+    '''The details of the metadata form type.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html
     :cloudformationResource: AWS::DataZone::FormType
@@ -11743,12 +11785,12 @@ class CfnFormType(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param domain_identifier: The ID of the Amazon DataZone domain in which this metadata form type is created.
-        :param model: Indicates the smithy model of the API.
-        :param name: The name of this Amazon DataZone metadata form type.
-        :param owning_project_identifier: The ID of the Amazon DataZone project that owns this metadata form type.
-        :param description: The description of this Amazon DataZone metadata form type.
-        :param status: The status of this Amazon DataZone metadata form type.
+        :param domain_identifier: The identifier of the Amazon DataZone domain in which the form type exists.
+        :param model: The model of the form type.
+        :param name: The name of the form type.
+        :param owning_project_identifier: The identifier of the project that owns the form type.
+        :param description: The description of the metadata form type.
+        :param status: The status of the form type.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f81071a1a99e5415d6626de96c93bf3bae9973b224056b0dd081b7dea58b9c42)
@@ -11798,7 +11840,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrCreatedAt")
     def attr_created_at(self) -> builtins.str:
-        '''The timestamp of when this Amazon DataZone metadata form type was created.
+        '''The timestamp of when the metadata form type was created.
 
         :cloudformationAttribute: CreatedAt
         '''
@@ -11807,7 +11849,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrCreatedBy")
     def attr_created_by(self) -> builtins.str:
-        '''The user who created this Amazon DataZone metadata form type.
+        '''The Amazon DataZone user who created teh metadata form type.
 
         :cloudformationAttribute: CreatedBy
         '''
@@ -11816,7 +11858,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrDomainId")
     def attr_domain_id(self) -> builtins.str:
-        '''The ID of the Amazon DataZone domain in which this metadata form type is created.
+        '''The identifier of the Amazon DataZone domain in which the form type exists.
 
         :cloudformationAttribute: DomainId
         '''
@@ -11825,7 +11867,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrFormTypeIdentifier")
     def attr_form_type_identifier(self) -> builtins.str:
-        '''The ID of this Amazon DataZone metadata form type.
+        '''The ID of the metadata form type.
 
         :cloudformationAttribute: FormTypeIdentifier
         '''
@@ -11834,7 +11876,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrOwningProjectId")
     def attr_owning_project_id(self) -> builtins.str:
-        '''The ID of the project that owns this Amazon DataZone metadata form type.
+        '''The identifier of the project that owns the form type.
 
         :cloudformationAttribute: OwningProjectId
         '''
@@ -11843,7 +11885,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrRevision")
     def attr_revision(self) -> builtins.str:
-        '''The revision of this Amazon DataZone metadata form type.
+        '''The revision of the form type.
 
         :cloudformationAttribute: Revision
         '''
@@ -11863,7 +11905,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="domainIdentifier")
     def domain_identifier(self) -> builtins.str:
-        '''The ID of the Amazon DataZone domain in which this metadata form type is created.'''
+        '''The identifier of the Amazon DataZone domain in which the form type exists.'''
         return typing.cast(builtins.str, jsii.get(self, "domainIdentifier"))
 
     @domain_identifier.setter
@@ -11876,7 +11918,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="model")
     def model(self) -> typing.Union[_IResolvable_da3f097b, "CfnFormType.ModelProperty"]:
-        '''Indicates the smithy model of the API.'''
+        '''The model of the form type.'''
         return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnFormType.ModelProperty"], jsii.get(self, "model"))
 
     @model.setter
@@ -11892,7 +11934,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
-        '''The name of this Amazon DataZone metadata form type.'''
+        '''The name of the form type.'''
         return typing.cast(builtins.str, jsii.get(self, "name"))
 
     @name.setter
@@ -11905,7 +11947,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="owningProjectIdentifier")
     def owning_project_identifier(self) -> builtins.str:
-        '''The ID of the Amazon DataZone project that owns this metadata form type.'''
+        '''The identifier of the project that owns the form type.'''
         return typing.cast(builtins.str, jsii.get(self, "owningProjectIdentifier"))
 
     @owning_project_identifier.setter
@@ -11918,7 +11960,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="description")
     def description(self) -> typing.Optional[builtins.str]:
-        '''The description of this Amazon DataZone metadata form type.'''
+        '''The description of the metadata form type.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "description"))
 
     @description.setter
@@ -11931,7 +11973,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="status")
     def status(self) -> typing.Optional[builtins.str]:
-        '''The status of this Amazon DataZone metadata form type.'''
+        '''The status of the form type.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "status"))
 
     @status.setter
@@ -12252,7 +12294,8 @@ class CfnOwner(
     @builtins.property
     @jsii.member(jsii_name="attrOwnerIdentifier")
     def attr_owner_identifier(self) -> builtins.str:
-        '''
+        '''The ID of the entity to which you want to add an owner.
+
         :cloudformationAttribute: OwnerIdentifier
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrOwnerIdentifier"))
@@ -12260,7 +12303,8 @@ class CfnOwner(
     @builtins.property
     @jsii.member(jsii_name="attrOwnerType")
     def attr_owner_type(self) -> builtins.str:
-        '''
+        '''The owner that you want to add to the entity.
+
         :cloudformationAttribute: OwnerType
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrOwnerType"))
@@ -17587,6 +17631,22 @@ def _typecheckingstub__047efef40bc572d080b2e64b8f32c1db40e40ba16fc7d29d887073e9c
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__184266697bd0b40b6137c37aa81e137c2d331c0790dbbb08061a3d04dcf83f9c(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__980a13437d77898f5d34721718082a5f116a6033aaf35aa8e2f76cb08c6ae77c(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    domain_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__44ac286b6a265a7b8c549e9f75d607cdf3e71f300523940763c96adb368c15ac(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:

aws_cdk/aws_dms/__init__.py

@@ -1768,7 +1768,7 @@ class CfnInstanceProfileProps:
         :param description: A description of the instance profile. Descriptions can have up to 31 characters. A description can contain only ASCII letters, digits, and hyphens ('-'). Also, it can't end with a hyphen or contain two consecutive hyphens, and can only begin with a letter.
         :param instance_profile_identifier: The identifier of the instance profile. Identifiers must begin with a letter and must contain only ASCII letters, digits, and hyphens. They can't end with a hyphen, or contain two consecutive hyphens.
         :param instance_profile_name: The user-friendly name for the instance profile.
-        :param kms_key_arn: The Amazon Resource Name (ARN) of the AWS KMS key that is used to encrypt the connection parameters for the instance profile. If you don't specify a value for the ``KmsKeyArn`` parameter, then AWS DMS uses your default encryption key. AWS KMS creates the default encryption key for your AWS account . Your AWS account has a different default encryption key for each AWS Region .
+        :param kms_key_arn: The Amazon Resource Name (ARN) of the AWS KMS key that is used to encrypt the connection parameters for the instance profile. If you don't specify a value for the ``KmsKeyArn`` parameter, then AWS DMS uses an AWS owned encryption key to encrypt your resources.
         :param network_type: Specifies the network type for the instance profile. A value of ``IPV4`` represents an instance profile with IPv4 network type and only supports IPv4 addressing. A value of ``IPV6`` represents an instance profile with IPv6 network type and only supports IPv6 addressing. A value of ``DUAL`` represents an instance profile with dual network type that supports IPv4 and IPv6 addressing.
         :param publicly_accessible: Specifies the accessibility options for the instance profile. A value of ``true`` represents an instance profile with a public IP address. A value of ``false`` represents an instance profile with a private IP address. The default value is ``true`` . Default: - false
         :param subnet_group_identifier: The identifier of the subnet group that is associated with the instance profile.
@@ -1878,9 +1878,7 @@ class CfnInstanceProfileProps:
     def kms_key_arn(self) -> typing.Optional[builtins.str]:
         '''The Amazon Resource Name (ARN) of the AWS KMS key that is used to encrypt the connection parameters for the instance profile.
 
-        If you don't specify a value for the ``KmsKeyArn`` parameter, then AWS DMS uses your default encryption key.
-
-        AWS KMS creates the default encryption key for your AWS account . Your AWS account has a different default encryption key for each AWS Region .
+        If you don't specify a value for the ``KmsKeyArn`` parameter, then AWS DMS uses an AWS owned encryption key to encrypt your resources.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dms-instanceprofile.html#cfn-dms-instanceprofile-kmskeyarn
         '''
@@ -4239,6 +4237,27 @@ class CfnCertificate(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromCertificateId")
+    @builtins.classmethod
+    def from_certificate_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        certificate_id: builtins.str,
+    ) -> ICertificateRef:
+        '''Creates a new ICertificateRef from a certificateId.
+
+        :param scope: -
+        :param id: -
+        :param certificate_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__54c58e4c61ec8f4fec86aeebbf242c64f4df21097435a1de2fa86d057deacae4)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument certificate_id", value=certificate_id, expected_type=type_hints["certificate_id"])
+        return typing.cast(ICertificateRef, jsii.sinvoke(cls, "fromCertificateId", [scope, id, certificate_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -7166,6 +7185,27 @@ class CfnEndpoint(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromEndpointId")
+    @builtins.classmethod
+    def from_endpoint_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        endpoint_id: builtins.str,
+    ) -> IEndpointRef:
+        '''Creates a new IEndpointRef from a endpointId.
+
+        :param scope: -
+        :param id: -
+        :param endpoint_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__cc7544659847cebf1010859beefe92e136eed06aeede14a54bb30e07bc5741a0)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument endpoint_id", value=endpoint_id, expected_type=type_hints["endpoint_id"])
+        return typing.cast(IEndpointRef, jsii.sinvoke(cls, "fromEndpointId", [scope, id, endpoint_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -13180,7 +13220,7 @@ class CfnInstanceProfile(
         :param description: A description of the instance profile. Descriptions can have up to 31 characters. A description can contain only ASCII letters, digits, and hyphens ('-'). Also, it can't end with a hyphen or contain two consecutive hyphens, and can only begin with a letter.
         :param instance_profile_identifier: The identifier of the instance profile. Identifiers must begin with a letter and must contain only ASCII letters, digits, and hyphens. They can't end with a hyphen, or contain two consecutive hyphens.
         :param instance_profile_name: The user-friendly name for the instance profile.
-        :param kms_key_arn: The Amazon Resource Name (ARN) of the AWS KMS key that is used to encrypt the connection parameters for the instance profile. If you don't specify a value for the ``KmsKeyArn`` parameter, then AWS DMS uses your default encryption key. AWS KMS creates the default encryption key for your AWS account . Your AWS account has a different default encryption key for each AWS Region .
+        :param kms_key_arn: The Amazon Resource Name (ARN) of the AWS KMS key that is used to encrypt the connection parameters for the instance profile. If you don't specify a value for the ``KmsKeyArn`` parameter, then AWS DMS uses an AWS owned encryption key to encrypt your resources.
         :param network_type: Specifies the network type for the instance profile. A value of ``IPV4`` represents an instance profile with IPv4 network type and only supports IPv4 addressing. A value of ``IPV6`` represents an instance profile with IPv6 network type and only supports IPv6 addressing. A value of ``DUAL`` represents an instance profile with dual network type that supports IPv4 and IPv6 addressing.
         :param publicly_accessible: Specifies the accessibility options for the instance profile. A value of ``true`` represents an instance profile with a public IP address. A value of ``false`` represents an instance profile with a private IP address. The default value is ``true`` . Default: - false
         :param subnet_group_identifier: The identifier of the subnet group that is associated with the instance profile.
@@ -15725,6 +15765,14 @@ def _typecheckingstub__f7c4a44b8a3c02f3f6ada86310479fa26dc0b32d4fba95316eb3faa44
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__54c58e4c61ec8f4fec86aeebbf242c64f4df21097435a1de2fa86d057deacae4(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    certificate_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__ec185f31d9affa5fa834d99f40ff8a27fcf34f84f01e6395782727e60768851f(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -16088,6 +16136,14 @@ def _typecheckingstub__738d71cd2300575c2c6537801f3dede195e2179cefcdceb9d0410340f
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__cc7544659847cebf1010859beefe92e136eed06aeede14a54bb30e07bc5741a0(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    endpoint_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__f057bd27ac6280cd130ed12f9511a5cdfb108a079b1bda778b1eafc415ee366d(
     inspector: _TreeInspector_488e0dd5,
 ) -> None: