aws-cdk-lib 2.218.0__py3-none-any.whl → 2.220.0__py3-none-any.whl

aws_cdk/aws_cognito/__init__.py

@@ -5114,7 +5114,7 @@ class CfnUserPoolUserProps:
         '''Properties for defining a ``CfnUserPoolUser``.
 
         :param user_pool_id: The ID of the user pool where you want to create a user.
-        :param client_metadata: A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers. You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a ``ClientMetadata`` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the ``clientMetadata`` value to enhance your workflow for your specific needs. For more information, see `Using Lambda triggers <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html>`_ in the *Amazon Cognito Developer Guide* . .. epigraph:: When you use the ``ClientMetadata`` parameter, note that Amazon Cognito won't do the following: - Store the ``ClientMetadata`` value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the ``ClientMetadata`` parameter serves no purpose. - Validate the ``ClientMetadata`` value. - Encrypt the ``ClientMetadata`` value. Don't send sensitive information in this parameter.
+        :param client_metadata: A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers. You create custom workflows by assigning AWS Lambda functions to user pool triggers. When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the function receives as input. This payload contains a ``clientMetadata`` attribute that provides the data that you assigned to the ClientMetadata parameter in your request. In your function code, you can process the ``clientMetadata`` value to enhance your workflow for your specific needs. To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see `Connecting API actions to Lambda triggers <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event>`_ in the *Amazon Cognito Developer Guide* . .. epigraph:: When you use the ``ClientMetadata`` parameter, note that Amazon Cognito won't do the following: - Store the ``ClientMetadata`` value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the ``ClientMetadata`` parameter serves no purpose. - Validate the ``ClientMetadata`` value. - Encrypt the ``ClientMetadata`` value. Don't send sensitive information in this parameter.
         :param desired_delivery_mediums: Specify ``EMAIL`` if email will be used to send the welcome message. Specify ``SMS`` if the phone number will be used. The default value is ``SMS`` . You can specify more than one value.
         :param force_alias_creation: This parameter is used only if the ``phone_number_verified`` or ``email_verified`` attribute is set to ``True`` . Otherwise, it is ignored. If this parameter is set to ``True`` and the phone number or email address specified in the ``UserAttributes`` parameter already exists as an alias with a different user, this request migrates the alias from the previous user to the newly-created user. The previous user will no longer be able to log in using that alias. If this parameter is set to ``False`` , the API throws an ``AliasExistsException`` error if the alias already exists. The default value is ``False`` .
         :param message_action: Set to ``RESEND`` to resend the invitation message to a user that already exists, and to reset the temporary-password duration with a new temporary password. Set to ``SUPPRESS`` to suppress sending the message. You can specify only one value.
@@ -5196,9 +5196,11 @@ class CfnUserPoolUserProps:
     ) -> typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]]:
         '''A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
 
-        You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a ``ClientMetadata`` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the ``clientMetadata`` value to enhance your workflow for your specific needs.
+        You create custom workflows by assigning AWS Lambda functions to user pool triggers.
 
-        For more information, see `Using Lambda triggers <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html>`_ in the *Amazon Cognito Developer Guide* .
+        When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the function receives as input. This payload contains a ``clientMetadata`` attribute that provides the data that you assigned to the ClientMetadata parameter in your request. In your function code, you can process the ``clientMetadata`` value to enhance your workflow for your specific needs.
+
+        To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see `Connecting API actions to Lambda triggers <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event>`_ in the *Amazon Cognito Developer Guide* .
         .. epigraph::
 
            When you use the ``ClientMetadata`` parameter, note that Amazon Cognito won't do the following:
@@ -24285,7 +24287,7 @@ class CfnUserPoolUser(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param user_pool_id: The ID of the user pool where you want to create a user.
-        :param client_metadata: A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers. You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a ``ClientMetadata`` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the ``clientMetadata`` value to enhance your workflow for your specific needs. For more information, see `Using Lambda triggers <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html>`_ in the *Amazon Cognito Developer Guide* . .. epigraph:: When you use the ``ClientMetadata`` parameter, note that Amazon Cognito won't do the following: - Store the ``ClientMetadata`` value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the ``ClientMetadata`` parameter serves no purpose. - Validate the ``ClientMetadata`` value. - Encrypt the ``ClientMetadata`` value. Don't send sensitive information in this parameter.
+        :param client_metadata: A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers. You create custom workflows by assigning AWS Lambda functions to user pool triggers. When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the function receives as input. This payload contains a ``clientMetadata`` attribute that provides the data that you assigned to the ClientMetadata parameter in your request. In your function code, you can process the ``clientMetadata`` value to enhance your workflow for your specific needs. To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see `Connecting API actions to Lambda triggers <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event>`_ in the *Amazon Cognito Developer Guide* . .. epigraph:: When you use the ``ClientMetadata`` parameter, note that Amazon Cognito won't do the following: - Store the ``ClientMetadata`` value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the ``ClientMetadata`` parameter serves no purpose. - Validate the ``ClientMetadata`` value. - Encrypt the ``ClientMetadata`` value. Don't send sensitive information in this parameter.
         :param desired_delivery_mediums: Specify ``EMAIL`` if email will be used to send the welcome message. Specify ``SMS`` if the phone number will be used. The default value is ``SMS`` . You can specify more than one value.
         :param force_alias_creation: This parameter is used only if the ``phone_number_verified`` or ``email_verified`` attribute is set to ``True`` . Otherwise, it is ignored. If this parameter is set to ``True`` and the phone number or email address specified in the ``UserAttributes`` parameter already exists as an alias with a different user, this request migrates the alias from the previous user to the newly-created user. The previous user will no longer be able to log in using that alias. If this parameter is set to ``False`` , the API throws an ``AliasExistsException`` error if the alias already exists. The default value is ``False`` .
         :param message_action: Set to ``RESEND`` to resend the invitation message to a user that already exists, and to reset the temporary-password duration with a new temporary password. Set to ``SUPPRESS`` to suppress sending the message. You can specify only one value.

aws_cdk/aws_connect/__init__.py

@@ -2684,7 +2684,7 @@ class CfnRoutingProfileProps:
         :param media_concurrencies: The channels agents can handle in the Contact Control Panel (CCP) for this routing profile.
         :param name: The name of the routing profile.
         :param agent_availability_timer: Whether agents with this routing profile will have their routing order calculated based on *time since their last inbound contact* or *longest idle time* .
-        :param manual_assignment_queue_configs: The manual assignment queues to associate with this routing profile.
+        :param manual_assignment_queue_configs: Contains information about the queue and channel for manual assignment behaviour can be enabled.
         :param queue_configs: The inbound queues associated with the routing profile. If no queue is added, the agent can make only outbound calls.
         :param tags: The tags used to organize, track, or control access for this resource. For example, { "Tags": {"key1":"value1", "key2":"value2"} }.
 
@@ -2826,7 +2826,7 @@ class CfnRoutingProfileProps:
     def manual_assignment_queue_configs(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingProfile.RoutingProfileManualAssignmentQueueConfigProperty"]]]]:
-        '''The manual assignment queues to associate with this routing profile.
+        '''Contains information about the queue and channel for manual assignment behaviour can be enabled.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-routingprofile.html#cfn-connect-routingprofile-manualassignmentqueueconfigs
         '''
@@ -14021,7 +14021,7 @@ class CfnRoutingProfile(
         :param media_concurrencies: The channels agents can handle in the Contact Control Panel (CCP) for this routing profile.
         :param name: The name of the routing profile.
         :param agent_availability_timer: Whether agents with this routing profile will have their routing order calculated based on *time since their last inbound contact* or *longest idle time* .
-        :param manual_assignment_queue_configs: The manual assignment queues to associate with this routing profile.
+        :param manual_assignment_queue_configs: Contains information about the queue and channel for manual assignment behaviour can be enabled.
         :param queue_configs: The inbound queues associated with the routing profile. If no queue is added, the agent can make only outbound calls.
         :param tags: The tags used to organize, track, or control access for this resource. For example, { "Tags": {"key1":"value1", "key2":"value2"} }.
         '''
@@ -14187,7 +14187,7 @@ class CfnRoutingProfile(
     def manual_assignment_queue_configs(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingProfile.RoutingProfileManualAssignmentQueueConfigProperty"]]]]:
-        '''The manual assignment queues to associate with this routing profile.'''
+        '''Contains information about the queue and channel for manual assignment behaviour can be enabled.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnRoutingProfile.RoutingProfileManualAssignmentQueueConfigProperty"]]]], jsii.get(self, "manualAssignmentQueueConfigs"))
 
     @manual_assignment_queue_configs.setter
@@ -14398,9 +14398,9 @@ class CfnRoutingProfile(
             *,
             queue_reference: typing.Union[_IResolvable_da3f097b, typing.Union["CfnRoutingProfile.RoutingProfileQueueReferenceProperty", typing.Dict[builtins.str, typing.Any]]],
         ) -> None:
-            '''Contains information about the manual assignment queue and channel.
+            '''Contains information about the queue and channel for manual assignment behaviour can be enabled.
 
-            :param queue_reference: Contains the channel and queue identifier for a routing profile.
+            :param queue_reference: Contains information about a queue resource.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-routingprofile-routingprofilemanualassignmentqueueconfig.html
             :exampleMetadata: fixture=_generated
@@ -14429,7 +14429,7 @@ class CfnRoutingProfile(
         def queue_reference(
             self,
         ) -> typing.Union[_IResolvable_da3f097b, "CfnRoutingProfile.RoutingProfileQueueReferenceProperty"]:
-            '''Contains the channel and queue identifier for a routing profile.
+            '''Contains information about a queue resource.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-routingprofile-routingprofilemanualassignmentqueueconfig.html#cfn-connect-routingprofile-routingprofilemanualassignmentqueueconfig-queuereference
             '''
@@ -18125,7 +18125,7 @@ class CfnUser(
             :param after_contact_work_time_limit: The After Call Work (ACW) timeout setting, in seconds. This parameter has a minimum value of 0 and a maximum value of 2,000,000 seconds (24 days). Enter 0 if you don't want to allocate a specific amount of ACW time. It essentially means an indefinite amount of time. When the conversation ends, ACW starts; the agent must choose Close contact to end ACW. .. epigraph:: When returned by a ``SearchUsers`` call, ``AfterContactWorkTimeLimit`` is returned in milliseconds.
             :param auto_accept: The Auto accept setting.
             :param desk_phone_number: The phone number for the user's desk phone.
-            :param persistent_connection: The Persistent Connection setting.
+            :param persistent_connection: The persistent connection setting for the user.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-user-userphoneconfig.html
             :exampleMetadata: fixture=_generated
@@ -18213,7 +18213,7 @@ class CfnUser(
         def persistent_connection(
             self,
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''The Persistent Connection setting.
+            '''The persistent connection setting for the user.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-user-userphoneconfig.html#cfn-connect-user-userphoneconfig-persistentconnection
             '''

aws_cdk/aws_cur/__init__.py

@@ -120,7 +120,7 @@ class CfnReportDefinitionProps:
         :param additional_artifacts: A list of manifests that you want AWS to create for this report.
         :param additional_schema_elements: A list of strings that indicate additional content that AWS includes in the report, such as individual resource IDs.
         :param billing_view_arn: The Amazon Resource Name (ARN) of the billing view. You can get this value by using the billing view service public APIs.
-        :param tags: 
+        :param tags: The tags to be assigned to the report definition resource.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cur-reportdefinition.html
         :exampleMetadata: fixture=_generated
@@ -316,7 +316,8 @@ class CfnReportDefinitionProps:
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''
+        '''The tags to be assigned to the report definition resource.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cur-reportdefinition.html#cfn-cur-reportdefinition-tags
         '''
         result = self._values.get("tags")
@@ -499,7 +500,7 @@ class CfnReportDefinition(
         :param additional_artifacts: A list of manifests that you want AWS to create for this report.
         :param additional_schema_elements: A list of strings that indicate additional content that AWS includes in the report, such as individual resource IDs.
         :param billing_view_arn: The Amazon Resource Name (ARN) of the billing view. You can get this value by using the billing view service public APIs.
-        :param tags: 
+        :param tags: The tags to be assigned to the report definition resource.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__fa6a90098f39859b607fa8b8453bf94b62703cdf41682ff1f90c565abdedbb57)
@@ -761,6 +762,7 @@ class CfnReportDefinition(
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags to be assigned to the report definition resource.'''
         return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
 
     @tags.setter

aws_cdk/aws_datasync/__init__.py

@@ -2223,8 +2223,8 @@ class CfnLocationSMBProps:
 
         :param agent_arns: Specifies the DataSync agent (or agents) that can connect to your SMB file server. You specify an agent by using its Amazon Resource Name (ARN).
         :param authentication_type: The authentication mode used to determine identity of user.
-        :param cmk_secret_config: Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
-        :param custom_secret_config: Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+        :param cmk_secret_config: Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key . .. epigraph:: You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
+        :param custom_secret_config: Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret. .. epigraph:: You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
         :param dns_ip_addresses: Specifies the IPv4 addresses for the DNS servers that your SMB file server belongs to. This parameter applies only if AuthenticationType is set to KERBEROS. If you have multiple domains in your environment, configuring this parameter makes sure that DataSync connects to the right SMB file server.
         :param domain: Specifies the Windows domain name that your SMB file server belongs to. This parameter applies only if ``AuthenticationType`` is set to ``NTLM`` . If you have multiple domains in your environment, configuring this parameter makes sure that DataSync connects to the right file server.
         :param kerberos_keytab: The Base64 string representation of the Keytab file. Specifies your Kerberos key table (keytab) file, which includes mappings between your service principal name (SPN) and encryption keys. To avoid task execution errors, make sure that the SPN in the keytab file matches exactly what you specify for KerberosPrincipal and in your krb5.conf file.
@@ -2351,7 +2351,11 @@ class CfnLocationSMBProps:
     def cmk_secret_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CmkSecretConfigProperty"]]:
-        '''Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+        '''Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .
+
+        .. epigraph::
+
+           You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationsmb.html#cfn-datasync-locationsmb-cmksecretconfig
         '''
@@ -2362,7 +2366,12 @@ class CfnLocationSMBProps:
     def custom_secret_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CustomSecretConfigProperty"]]:
-        '''Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+        '''Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text.
+
+        This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.
+        .. epigraph::
+
+           You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationsmb.html#cfn-datasync-locationsmb-customsecretconfig
         '''
@@ -8287,8 +8296,8 @@ class CfnLocationSMB(
         :param id: Construct identifier for this resource (unique in its scope).
         :param agent_arns: Specifies the DataSync agent (or agents) that can connect to your SMB file server. You specify an agent by using its Amazon Resource Name (ARN).
         :param authentication_type: The authentication mode used to determine identity of user.
-        :param cmk_secret_config: Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
-        :param custom_secret_config: Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+        :param cmk_secret_config: Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key . .. epigraph:: You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
+        :param custom_secret_config: Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret. .. epigraph:: You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
         :param dns_ip_addresses: Specifies the IPv4 addresses for the DNS servers that your SMB file server belongs to. This parameter applies only if AuthenticationType is set to KERBEROS. If you have multiple domains in your environment, configuring this parameter makes sure that DataSync connects to the right SMB file server.
         :param domain: Specifies the Windows domain name that your SMB file server belongs to. This parameter applies only if ``AuthenticationType`` is set to ``NTLM`` . If you have multiple domains in your environment, configuring this parameter makes sure that DataSync connects to the right file server.
         :param kerberos_keytab: The Base64 string representation of the Keytab file. Specifies your Kerberos key table (keytab) file, which includes mappings between your service principal name (SPN) and encryption keys. To avoid task execution errors, make sure that the SPN in the keytab file matches exactly what you specify for KerberosPrincipal and in your krb5.conf file.
@@ -8358,7 +8367,9 @@ class CfnLocationSMB(
     @builtins.property
     @jsii.member(jsii_name="attrCmkSecretConfigSecretArn")
     def attr_cmk_secret_config_secret_arn(self) -> builtins.str:
-        '''Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync.
+        '''Specifies the ARN for the DataSync-managed AWS Secrets Manager secret that that is used to access a specific storage location.
+
+        This property is generated by DataSync and is read-only. DataSync encrypts this secret with the KMS key that you specify for ``KmsKeyArn`` .
 
         :cloudformationAttribute: CmkSecretConfig.SecretArn
         '''
@@ -8441,7 +8452,7 @@ class CfnLocationSMB(
     def cmk_secret_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CmkSecretConfigProperty"]]:
-        '''Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.'''
+        '''Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CmkSecretConfigProperty"]], jsii.get(self, "cmkSecretConfig"))
 
     @cmk_secret_config.setter
@@ -8459,7 +8470,7 @@ class CfnLocationSMB(
     def custom_secret_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CustomSecretConfigProperty"]]:
-        '''Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.'''
+        '''Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLocationSMB.CustomSecretConfigProperty"]], jsii.get(self, "customSecretConfig"))
 
     @custom_secret_config.setter
@@ -8635,10 +8646,14 @@ class CfnLocationSMB(
             kms_key_arn: typing.Optional[builtins.str] = None,
             secret_arn: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+            '''Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .
+
+            .. epigraph::
+
+               You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
 
-            :param kms_key_arn: Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn. DataSync provides this key to AWS Secrets Manager.
-            :param secret_arn: Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync.
+            :param kms_key_arn: Specifies the ARN for the customer-managed AWS KMS key that DataSync uses to encrypt the DataSync-managed secret stored for ``SecretArn`` . DataSync provides this key to AWS Secrets Manager .
+            :param secret_arn: Specifies the ARN for the DataSync-managed AWS Secrets Manager secret that that is used to access a specific storage location. This property is generated by DataSync and is read-only. DataSync encrypts this secret with the KMS key that you specify for ``KmsKeyArn`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-cmksecretconfig.html
             :exampleMetadata: fixture=_generated
@@ -8666,9 +8681,9 @@ class CfnLocationSMB(
 
         @builtins.property
         def kms_key_arn(self) -> typing.Optional[builtins.str]:
-            '''Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn.
+            '''Specifies the ARN for the customer-managed AWS KMS key that DataSync uses to encrypt the DataSync-managed secret stored for ``SecretArn`` .
 
-            DataSync provides this key to AWS Secrets Manager.
+            DataSync provides this key to AWS Secrets Manager .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-cmksecretconfig.html#cfn-datasync-locationsmb-cmksecretconfig-kmskeyarn
             '''
@@ -8677,7 +8692,9 @@ class CfnLocationSMB(
 
         @builtins.property
         def secret_arn(self) -> typing.Optional[builtins.str]:
-            '''Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync.
+            '''Specifies the ARN for the DataSync-managed AWS Secrets Manager secret that that is used to access a specific storage location.
+
+            This property is generated by DataSync and is read-only. DataSync encrypts this secret with the KMS key that you specify for ``KmsKeyArn`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-cmksecretconfig.html#cfn-datasync-locationsmb-cmksecretconfig-secretarn
             '''
@@ -8710,10 +8727,15 @@ class CfnLocationSMB(
             secret_access_role_arn: builtins.str,
             secret_arn: builtins.str,
         ) -> None:
-            '''Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+            '''Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text.
 
-            :param secret_access_role_arn: Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn.
-            :param secret_arn: Specifies the ARN for a customer created AWS Secrets Manager secret.
+            This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.
+            .. epigraph::
+
+               You can use either ``CmkSecretConfig`` or ``CustomSecretConfig`` to provide credentials for a ``CreateLocation`` request. Do not provide both parameters for the same request.
+
+            :param secret_access_role_arn: Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for ``SecretArn`` .
+            :param secret_arn: Specifies the ARN for an AWS Secrets Manager secret.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-customsecretconfig.html
             :exampleMetadata: fixture=_generated
@@ -8740,7 +8762,7 @@ class CfnLocationSMB(
 
         @builtins.property
         def secret_access_role_arn(self) -> builtins.str:
-            '''Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn.
+            '''Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for ``SecretArn`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-customsecretconfig.html#cfn-datasync-locationsmb-customsecretconfig-secretaccessrolearn
             '''
@@ -8750,7 +8772,7 @@ class CfnLocationSMB(
 
         @builtins.property
         def secret_arn(self) -> builtins.str:
-            '''Specifies the ARN for a customer created AWS Secrets Manager secret.
+            '''Specifies the ARN for an AWS Secrets Manager secret.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-locationsmb-customsecretconfig.html#cfn-datasync-locationsmb-customsecretconfig-secretarn
             '''
@@ -8776,9 +8798,9 @@ class CfnLocationSMB(
     )
     class ManagedSecretConfigProperty:
         def __init__(self, *, secret_arn: builtins.str) -> None:
-            '''Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location.
+            '''Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location.
 
-            DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.
+            DataSync uses the default AWS -managed KMS key to encrypt this secret in AWS Secrets Manager .
 
             :param secret_arn: Specifies the ARN for an AWS Secrets Manager secret.
 

aws_cdk/aws_datazone/__init__.py

@@ -1709,12 +1709,12 @@ class CfnFormTypeProps:
     ) -> None:
         '''Properties for defining a ``CfnFormType``.
 
-        :param domain_identifier: The ID of the Amazon DataZone domain in which this metadata form type is created.
-        :param model: Indicates the smithy model of the API.
-        :param name: The name of this Amazon DataZone metadata form type.
-        :param owning_project_identifier: The ID of the Amazon DataZone project that owns this metadata form type.
-        :param description: The description of this Amazon DataZone metadata form type.
-        :param status: The status of this Amazon DataZone metadata form type.
+        :param domain_identifier: The identifier of the Amazon DataZone domain in which the form type exists.
+        :param model: The model of the form type.
+        :param name: The name of the form type.
+        :param owning_project_identifier: The identifier of the project that owns the form type.
+        :param description: The description of the metadata form type.
+        :param status: The status of the form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html
         :exampleMetadata: fixture=_generated
@@ -1759,7 +1759,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def domain_identifier(self) -> builtins.str:
-        '''The ID of the Amazon DataZone domain in which this metadata form type is created.
+        '''The identifier of the Amazon DataZone domain in which the form type exists.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-domainidentifier
         '''
@@ -1769,7 +1769,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def model(self) -> typing.Union[_IResolvable_da3f097b, "CfnFormType.ModelProperty"]:
-        '''Indicates the smithy model of the API.
+        '''The model of the form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-model
         '''
@@ -1779,7 +1779,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def name(self) -> builtins.str:
-        '''The name of this Amazon DataZone metadata form type.
+        '''The name of the form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-name
         '''
@@ -1789,7 +1789,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def owning_project_identifier(self) -> builtins.str:
-        '''The ID of the Amazon DataZone project that owns this metadata form type.
+        '''The identifier of the project that owns the form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-owningprojectidentifier
         '''
@@ -1799,7 +1799,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def description(self) -> typing.Optional[builtins.str]:
-        '''The description of this Amazon DataZone metadata form type.
+        '''The description of the metadata form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-description
         '''
@@ -1808,7 +1808,7 @@ class CfnFormTypeProps:
 
     @builtins.property
     def status(self) -> typing.Optional[builtins.str]:
-        '''The status of this Amazon DataZone metadata form type.
+        '''The status of the form type.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html#cfn-datazone-formtype-status
         '''
@@ -11744,7 +11744,7 @@ class CfnFormType(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_datazone.CfnFormType",
 ):
-    '''Create and manage form types in Amazon Datazone.
+    '''The details of the metadata form type.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datazone-formtype.html
     :cloudformationResource: AWS::DataZone::FormType
@@ -11785,12 +11785,12 @@ class CfnFormType(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param domain_identifier: The ID of the Amazon DataZone domain in which this metadata form type is created.
-        :param model: Indicates the smithy model of the API.
-        :param name: The name of this Amazon DataZone metadata form type.
-        :param owning_project_identifier: The ID of the Amazon DataZone project that owns this metadata form type.
-        :param description: The description of this Amazon DataZone metadata form type.
-        :param status: The status of this Amazon DataZone metadata form type.
+        :param domain_identifier: The identifier of the Amazon DataZone domain in which the form type exists.
+        :param model: The model of the form type.
+        :param name: The name of the form type.
+        :param owning_project_identifier: The identifier of the project that owns the form type.
+        :param description: The description of the metadata form type.
+        :param status: The status of the form type.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f81071a1a99e5415d6626de96c93bf3bae9973b224056b0dd081b7dea58b9c42)
@@ -11840,7 +11840,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrCreatedAt")
     def attr_created_at(self) -> builtins.str:
-        '''The timestamp of when this Amazon DataZone metadata form type was created.
+        '''The timestamp of when the metadata form type was created.
 
         :cloudformationAttribute: CreatedAt
         '''
@@ -11849,7 +11849,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrCreatedBy")
     def attr_created_by(self) -> builtins.str:
-        '''The user who created this Amazon DataZone metadata form type.
+        '''The Amazon DataZone user who created teh metadata form type.
 
         :cloudformationAttribute: CreatedBy
         '''
@@ -11858,7 +11858,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrDomainId")
     def attr_domain_id(self) -> builtins.str:
-        '''The ID of the Amazon DataZone domain in which this metadata form type is created.
+        '''The identifier of the Amazon DataZone domain in which the form type exists.
 
         :cloudformationAttribute: DomainId
         '''
@@ -11867,7 +11867,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrFormTypeIdentifier")
     def attr_form_type_identifier(self) -> builtins.str:
-        '''The ID of this Amazon DataZone metadata form type.
+        '''The ID of the metadata form type.
 
         :cloudformationAttribute: FormTypeIdentifier
         '''
@@ -11876,7 +11876,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrOwningProjectId")
     def attr_owning_project_id(self) -> builtins.str:
-        '''The ID of the project that owns this Amazon DataZone metadata form type.
+        '''The identifier of the project that owns the form type.
 
         :cloudformationAttribute: OwningProjectId
         '''
@@ -11885,7 +11885,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="attrRevision")
     def attr_revision(self) -> builtins.str:
-        '''The revision of this Amazon DataZone metadata form type.
+        '''The revision of the form type.
 
         :cloudformationAttribute: Revision
         '''
@@ -11905,7 +11905,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="domainIdentifier")
     def domain_identifier(self) -> builtins.str:
-        '''The ID of the Amazon DataZone domain in which this metadata form type is created.'''
+        '''The identifier of the Amazon DataZone domain in which the form type exists.'''
         return typing.cast(builtins.str, jsii.get(self, "domainIdentifier"))
 
     @domain_identifier.setter
@@ -11918,7 +11918,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="model")
     def model(self) -> typing.Union[_IResolvable_da3f097b, "CfnFormType.ModelProperty"]:
-        '''Indicates the smithy model of the API.'''
+        '''The model of the form type.'''
         return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnFormType.ModelProperty"], jsii.get(self, "model"))
 
     @model.setter
@@ -11934,7 +11934,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
-        '''The name of this Amazon DataZone metadata form type.'''
+        '''The name of the form type.'''
         return typing.cast(builtins.str, jsii.get(self, "name"))
 
     @name.setter
@@ -11947,7 +11947,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="owningProjectIdentifier")
     def owning_project_identifier(self) -> builtins.str:
-        '''The ID of the Amazon DataZone project that owns this metadata form type.'''
+        '''The identifier of the project that owns the form type.'''
         return typing.cast(builtins.str, jsii.get(self, "owningProjectIdentifier"))
 
     @owning_project_identifier.setter
@@ -11960,7 +11960,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="description")
     def description(self) -> typing.Optional[builtins.str]:
-        '''The description of this Amazon DataZone metadata form type.'''
+        '''The description of the metadata form type.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "description"))
 
     @description.setter
@@ -11973,7 +11973,7 @@ class CfnFormType(
     @builtins.property
     @jsii.member(jsii_name="status")
     def status(self) -> typing.Optional[builtins.str]:
-        '''The status of this Amazon DataZone metadata form type.'''
+        '''The status of the form type.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "status"))
 
     @status.setter
@@ -12294,7 +12294,8 @@ class CfnOwner(
     @builtins.property
     @jsii.member(jsii_name="attrOwnerIdentifier")
     def attr_owner_identifier(self) -> builtins.str:
-        '''
+        '''The ID of the entity to which you want to add an owner.
+
         :cloudformationAttribute: OwnerIdentifier
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrOwnerIdentifier"))
@@ -12302,7 +12303,8 @@ class CfnOwner(
     @builtins.property
     @jsii.member(jsii_name="attrOwnerType")
     def attr_owner_type(self) -> builtins.str:
-        '''
+        '''The owner that you want to add to the entity.
+
         :cloudformationAttribute: OwnerType
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrOwnerType"))

aws_cdk/aws_dax/__init__.py

@@ -118,7 +118,7 @@ class CfnClusterProps:
         :param cluster_endpoint_encryption_type: The encryption type of the cluster's endpoint. Available values are:. - ``NONE`` - The cluster's endpoint will be unencrypted. - ``TLS`` - The cluster's endpoint will be encrypted with Transport Layer Security, and will provide an x509 certificate for authentication. The default value is ``NONE`` .
         :param cluster_name: The name of the DAX cluster.
         :param description: The description of the cluster.
-        :param network_type: 
+        :param network_type: The IP address type of the cluster. Values are:. - ``ipv4`` - IPv4 addresses only - ``ipv6`` - IPv6 addresses only - ``dual_stack`` - Both IPv4 and IPv6 addresses
         :param notification_topic_arn: The Amazon Resource Name (ARN) of the Amazon SNS topic to which notifications will be sent. .. epigraph:: The Amazon SNS topic owner must be same as the DAX cluster owner.
         :param parameter_group_name: The parameter group to be associated with the DAX cluster.
         :param preferred_maintenance_window: A range of time when maintenance of DAX cluster software will be performed. For example: ``sun:01:00-sun:09:00`` . Cluster maintenance normally takes less than 30 minutes, and is performed automatically within the maintenance window.
@@ -291,7 +291,12 @@ class CfnClusterProps:
 
     @builtins.property
     def network_type(self) -> typing.Optional[builtins.str]:
-        '''
+        '''The IP address type of the cluster. Values are:.
+
+        - ``ipv4`` - IPv4 addresses only
+        - ``ipv6`` - IPv6 addresses only
+        - ``dual_stack`` - Both IPv4 and IPv6 addresses
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dax-cluster.html#cfn-dax-cluster-networktype
         '''
         result = self._values.get("network_type")
@@ -932,7 +937,7 @@ class CfnCluster(
         :param cluster_endpoint_encryption_type: The encryption type of the cluster's endpoint. Available values are:. - ``NONE`` - The cluster's endpoint will be unencrypted. - ``TLS`` - The cluster's endpoint will be encrypted with Transport Layer Security, and will provide an x509 certificate for authentication. The default value is ``NONE`` .
         :param cluster_name: The name of the DAX cluster.
         :param description: The description of the cluster.
-        :param network_type: 
+        :param network_type: The IP address type of the cluster. Values are:. - ``ipv4`` - IPv4 addresses only - ``ipv6`` - IPv6 addresses only - ``dual_stack`` - Both IPv4 and IPv6 addresses
         :param notification_topic_arn: The Amazon Resource Name (ARN) of the Amazon SNS topic to which notifications will be sent. .. epigraph:: The Amazon SNS topic owner must be same as the DAX cluster owner.
         :param parameter_group_name: The parameter group to be associated with the DAX cluster.
         :param preferred_maintenance_window: A range of time when maintenance of DAX cluster software will be performed. For example: ``sun:01:00-sun:09:00`` . Cluster maintenance normally takes less than 30 minutes, and is performed automatically within the maintenance window.
@@ -1162,6 +1167,10 @@ class CfnCluster(
     @builtins.property
     @jsii.member(jsii_name="networkType")
     def network_type(self) -> typing.Optional[builtins.str]:
+        '''The IP address type of the cluster.
+
+        Values are:.
+        '''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "networkType"))
 
     @network_type.setter