aws-cdk-lib 2.219.0__py3-none-any.whl → 2.221.0__py3-none-any.whl

aws_cdk/aws_ram/__init__.py

@@ -1156,3 +1156,6 @@ def _typecheckingstub__2e8df76745e5c0758e8b5233e879c50ee5a6f6f817a0850af55da2744
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IPermissionRef, IResourceShareRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_rbin/__init__.py

@@ -1035,3 +1035,6 @@ def _typecheckingstub__d5cb70d54df5cb782865dd65947c16d9455e200989ec0b11ea250d281
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IRuleRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_rds/__init__.py

@@ -712,7 +712,7 @@ cloudwatch.Alarm(self, "HighCPU",
 fn = lambda_.Function(self, "Function",
     code=lambda_.Code.from_inline("exports.handler = (event) => console.log(event);"),
     handler="index.handler",
-    runtime=lambda_.Runtime.NODEJS_18_X
+    runtime=lambda_.Runtime.NODEJS_20_X
 )
 
 availability_rule = instance.on_event("Availability", target=targets.LambdaFunction(fn))
@@ -790,7 +790,7 @@ cloudwatch.Alarm(self, "HighCPU",
 fn = lambda_.Function(self, "Function",
     code=lambda_.Code.from_inline("exports.handler = (event) => console.log(event);"),
     handler="index.handler",
-    runtime=lambda_.Runtime.NODEJS_18_X
+    runtime=lambda_.Runtime.NODEJS_20_X
 )
 
 availability_rule = instance.on_event("Availability", target=targets.LambdaFunction(fn))
@@ -3272,6 +3272,12 @@ class AuroraMysqlEngineVersion(
         '''Version "8.0.mysql_aurora.3.10.0".'''
         return typing.cast("AuroraMysqlEngineVersion", jsii.sget(cls, "VER_3_10_0"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_3_10_1")
+    def VER_3_10_1(cls) -> "AuroraMysqlEngineVersion":
+        '''Version "8.0.mysql_aurora.3.10.1".'''
+        return typing.cast("AuroraMysqlEngineVersion", jsii.sget(cls, "VER_3_10_1"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_5_7_12")
     def VER_5_7_12(cls) -> "AuroraMysqlEngineVersion":
@@ -5416,7 +5422,7 @@ class CfnDBClusterProps:
         :param port: The port number on which the DB instances in the DB cluster accept connections. Default: - When ``EngineMode`` is ``provisioned`` , ``3306`` (for both Aurora MySQL and Aurora PostgreSQL) - When ``EngineMode`` is ``serverless`` : - ``3306`` when ``Engine`` is ``aurora`` or ``aurora-mysql`` - ``5432`` when ``Engine`` is ``aurora-postgresql`` .. epigraph:: The ``No interruption`` on update behavior only applies to DB clusters. If you are updating a DB instance, see `Port <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-port>`_ for the AWS::RDS::DBInstance resource. Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param preferred_backup_window: The daily time range during which automated backups are created. For more information, see `Backup Window <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html#Aurora.Managing.Backups.BackupWindow>`_ in the *Amazon Aurora User Guide.* Constraints: - Must be in the format ``hh24:mi-hh24:mi`` . - Must be in Universal Coordinated Time (UTC). - Must not conflict with the preferred maintenance window. - Must be at least 30 minutes. Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param preferred_maintenance_window: The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC). Format: ``ddd:hh24:mi-ddd:hh24:mi`` The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see `Maintaining an Amazon Aurora DB cluster <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow.Aurora>`_ in the *Amazon Aurora User Guide.* Valid Days: Mon, Tue, Wed, Thu, Fri, Sat, Sun. Constraints: Minimum 30-minute window. Valid for: Aurora DB clusters and Multi-AZ DB clusters
-        :param publicly_accessible: Specifies whether the DB cluster is publicly accessible. When the DB cluster is publicly accessible and you connect from outside of the DB cluster's virtual private cloud (VPC), its Domain Name System (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB cluster, the endpoint resolves to the private IP address. Access to the DB cluster is ultimately controlled by the security group it uses. That public access isn't permitted if the security group assigned to the DB cluster doesn't permit it. When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address. Valid for Cluster Type: Multi-AZ DB clusters only Default: The default behavior varies depending on whether ``DBSubnetGroupName`` is specified. If ``DBSubnetGroupName`` isn't specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the default VPC in the target Region doesn’t have an internet gateway attached to it, the DB cluster is private. - If the default VPC in the target Region has an internet gateway attached to it, the DB cluster is public. If ``DBSubnetGroupName`` is specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the subnets are part of a VPC that doesn’t have an internet gateway attached to it, the DB cluster is private. - If the subnets are part of a VPC that has an internet gateway attached to it, the DB cluster is public.
+        :param publicly_accessible: Specifies whether the DB cluster is publicly accessible. Valid for Cluster Type: Multi-AZ DB clusters only When the DB cluster is publicly accessible and you connect from outside of the DB cluster's virtual private cloud (VPC), its domain name system (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB cluster, the endpoint resolves to the private IP address. Access to the DB cluster is controlled by its security group settings. When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address. The default behavior when ``PubliclyAccessible`` is not specified depends on whether a ``DBSubnetGroup`` is specified. If ``DBSubnetGroup`` isn't specified, ``PubliclyAccessible`` defaults to ``true`` . If ``DBSubnetGroup`` is specified, ``PubliclyAccessible`` defaults to ``false`` unless the value of ``DBSubnetGroup`` is ``default`` , in which case ``PubliclyAccessible`` defaults to ``true`` . If ``PubliclyAccessible`` is true and the VPC that the ``DBSubnetGroup`` is in doesn't have an internet gateway attached to it, Amazon RDS returns an error.
         :param replication_source_identifier: The Amazon Resource Name (ARN) of the source DB instance or DB cluster if this DB cluster is created as a read replica. Valid for: Aurora DB clusters only
         :param restore_to_time: The date and time to restore the DB cluster to. Valid Values: Value must be a time in Universal Coordinated Time (UTC) format Constraints: - Must be before the latest restorable time for the DB instance - Must be specified if ``UseLatestRestorableTime`` parameter isn't provided - Can't be specified if the ``UseLatestRestorableTime`` parameter is enabled - Can't be specified if the ``RestoreType`` parameter is ``copy-on-write`` This property must be used with ``SourceDBClusterIdentifier`` property. The resulting cluster will have the identifier that matches the value of the ``DBclusterIdentifier`` property. Example: ``2015-03-07T23:45:00Z`` Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param restore_type: The type of restore to be performed. You can specify one of the following values:. - ``full-copy`` - The new DB cluster is restored as a full copy of the source DB cluster. - ``copy-on-write`` - The new DB cluster is restored as a clone of the source DB cluster. If you don't specify a ``RestoreType`` value, then the new DB cluster is restored as a full copy of the source DB cluster. Valid for: Aurora DB clusters and Multi-AZ DB clusters
@@ -6525,23 +6531,19 @@ class CfnDBClusterProps:
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
         '''Specifies whether the DB cluster is publicly accessible.
 
-        When the DB cluster is publicly accessible and you connect from outside of the DB cluster's virtual private cloud (VPC), its Domain Name System (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB cluster, the endpoint resolves to the private IP address. Access to the DB cluster is ultimately controlled by the security group it uses. That public access isn't permitted if the security group assigned to the DB cluster doesn't permit it.
-
-        When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address.
-
         Valid for Cluster Type: Multi-AZ DB clusters only
 
-        Default: The default behavior varies depending on whether ``DBSubnetGroupName`` is specified.
+        When the DB cluster is publicly accessible and you connect from outside of the DB cluster's virtual private cloud (VPC), its domain name system (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB cluster, the endpoint resolves to the private IP address. Access to the DB cluster is controlled by its security group settings.
 
-        If ``DBSubnetGroupName`` isn't specified, and ``PubliclyAccessible`` isn't specified, the following applies:
+        When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address.
 
-        - If the default VPC in the target Region doesn’t have an internet gateway attached to it, the DB cluster is private.
-        - If the default VPC in the target Region has an internet gateway attached to it, the DB cluster is public.
+        The default behavior when ``PubliclyAccessible`` is not specified depends on whether a ``DBSubnetGroup`` is specified.
 
-        If ``DBSubnetGroupName`` is specified, and ``PubliclyAccessible`` isn't specified, the following applies:
+        If ``DBSubnetGroup`` isn't specified, ``PubliclyAccessible`` defaults to ``true`` .
 
-        - If the subnets are part of a VPC that doesn’t have an internet gateway attached to it, the DB cluster is private.
-        - If the subnets are part of a VPC that has an internet gateway attached to it, the DB cluster is public.
+        If ``DBSubnetGroup`` is specified, ``PubliclyAccessible`` defaults to ``false`` unless the value of ``DBSubnetGroup`` is ``default`` , in which case ``PubliclyAccessible`` defaults to ``true`` .
+
+        If ``PubliclyAccessible`` is true and the VPC that the ``DBSubnetGroup`` is in doesn't have an internet gateway attached to it, Amazon RDS returns an error.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#cfn-rds-dbcluster-publiclyaccessible
         '''
@@ -17009,7 +17011,7 @@ class DatabaseInstanceNewProps:
         :param s3_import_role: Role that will be associated with this DB instance to enable S3 import. This feature is only supported by the Microsoft SQL Server, Oracle, and PostgreSQL engines. This property must not be used if ``s3ImportBuckets`` is used. For Microsoft SQL Server: Default: - New role is created if ``s3ImportBuckets`` is set, no role is defined otherwise
         :param security_groups: The security groups to assign to the DB instance. Default: - a new security group is created
         :param storage_throughput: The storage throughput, specified in mebibytes per second (MiBps). Only applicable for GP3. Default: - 125 MiBps if allocated storage is less than 400 GiB for MariaDB, MySQL, and PostgreSQL, less than 200 GiB for Oracle and less than 20 GiB for SQL Server. 500 MiBps otherwise (except for SQL Server where the default is always 125 MiBps).
-        :param storage_type: The storage type. Storage types supported are gp2, io1, standard. Default: GP2
+        :param storage_type: The storage type to associate with the DB instance. Storage types supported are gp2, gp3, io1, io2, and standard. Default: StorageType.GP2
         :param subnet_group: Existing subnet group for the instance. Default: - a new subnet group will be created.
         :param vpc_subnets: The type of subnets to add to the created DB subnet group. Default: - private subnets
 
@@ -17717,11 +17719,11 @@ class DatabaseInstanceNewProps:
 
     @builtins.property
     def storage_type(self) -> typing.Optional["StorageType"]:
-        '''The storage type.
+        '''The storage type to associate with the DB instance.
 
-        Storage types supported are gp2, io1, standard.
+        Storage types supported are gp2, gp3, io1, io2, and standard.
 
-        :default: GP2
+        :default: StorageType.GP2
 
         :see: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html#Concepts.Storage.GeneralSSD
         '''
@@ -17910,7 +17912,7 @@ class DatabaseInstanceReadReplicaProps(DatabaseInstanceNewProps):
         :param s3_import_role: Role that will be associated with this DB instance to enable S3 import. This feature is only supported by the Microsoft SQL Server, Oracle, and PostgreSQL engines. This property must not be used if ``s3ImportBuckets`` is used. For Microsoft SQL Server: Default: - New role is created if ``s3ImportBuckets`` is set, no role is defined otherwise
         :param security_groups: The security groups to assign to the DB instance. Default: - a new security group is created
         :param storage_throughput: The storage throughput, specified in mebibytes per second (MiBps). Only applicable for GP3. Default: - 125 MiBps if allocated storage is less than 400 GiB for MariaDB, MySQL, and PostgreSQL, less than 200 GiB for Oracle and less than 20 GiB for SQL Server. 500 MiBps otherwise (except for SQL Server where the default is always 125 MiBps).
-        :param storage_type: The storage type. Storage types supported are gp2, io1, standard. Default: GP2
+        :param storage_type: The storage type to associate with the DB instance. Storage types supported are gp2, gp3, io1, io2, and standard. Default: StorageType.GP2
         :param subnet_group: Existing subnet group for the instance. Default: - a new subnet group will be created.
         :param vpc_subnets: The type of subnets to add to the created DB subnet group. Default: - private subnets
         :param instance_type: The name of the compute and memory capacity classes.
@@ -18571,11 +18573,11 @@ class DatabaseInstanceReadReplicaProps(DatabaseInstanceNewProps):
 
     @builtins.property
     def storage_type(self) -> typing.Optional["StorageType"]:
-        '''The storage type.
+        '''The storage type to associate with the DB instance.
 
-        Storage types supported are gp2, io1, standard.
+        Storage types supported are gp2, gp3, io1, io2, and standard.
 
-        :default: GP2
+        :default: StorageType.GP2
 
         :see: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html#Concepts.Storage.GeneralSSD
         '''
@@ -18815,7 +18817,7 @@ class DatabaseInstanceSourceProps(DatabaseInstanceNewProps):
         :param s3_import_role: Role that will be associated with this DB instance to enable S3 import. This feature is only supported by the Microsoft SQL Server, Oracle, and PostgreSQL engines. This property must not be used if ``s3ImportBuckets`` is used. For Microsoft SQL Server: Default: - New role is created if ``s3ImportBuckets`` is set, no role is defined otherwise
         :param security_groups: The security groups to assign to the DB instance. Default: - a new security group is created
         :param storage_throughput: The storage throughput, specified in mebibytes per second (MiBps). Only applicable for GP3. Default: - 125 MiBps if allocated storage is less than 400 GiB for MariaDB, MySQL, and PostgreSQL, less than 200 GiB for Oracle and less than 20 GiB for SQL Server. 500 MiBps otherwise (except for SQL Server where the default is always 125 MiBps).
-        :param storage_type: The storage type. Storage types supported are gp2, io1, standard. Default: GP2
+        :param storage_type: The storage type to associate with the DB instance. Storage types supported are gp2, gp3, io1, io2, and standard. Default: StorageType.GP2
         :param subnet_group: Existing subnet group for the instance. Default: - a new subnet group will be created.
         :param vpc_subnets: The type of subnets to add to the created DB subnet group. Default: - private subnets
         :param engine: The database engine.
@@ -19566,11 +19568,11 @@ class DatabaseInstanceSourceProps(DatabaseInstanceNewProps):
 
     @builtins.property
     def storage_type(self) -> typing.Optional["StorageType"]:
-        '''The storage type.
+        '''The storage type to associate with the DB instance.
 
-        Storage types supported are gp2, io1, standard.
+        Storage types supported are gp2, gp3, io1, io2, and standard.
 
-        :default: GP2
+        :default: StorageType.GP2
 
         :see: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html#Concepts.Storage.GeneralSSD
         '''
@@ -26289,7 +26291,7 @@ class LicenseModel(enum.Enum):
         fn = lambda_.Function(self, "Function",
             code=lambda_.Code.from_inline("exports.handler = (event) => console.log(event);"),
             handler="index.handler",
-            runtime=lambda_.Runtime.NODEJS_18_X
+            runtime=lambda_.Runtime.NODEJS_20_X
         )
         
         availability_rule = instance.on_event("Availability", target=targets.LambdaFunction(fn))
@@ -28221,7 +28223,7 @@ class OptionGroup(
         fn = lambda_.Function(self, "Function",
             code=lambda_.Code.from_inline("exports.handler = (event) => console.log(event);"),
             handler="index.handler",
-            runtime=lambda_.Runtime.NODEJS_18_X
+            runtime=lambda_.Runtime.NODEJS_20_X
         )
         
         availability_rule = instance.on_event("Availability", target=targets.LambdaFunction(fn))
@@ -28422,7 +28424,7 @@ class OptionGroupProps:
             fn = lambda_.Function(self, "Function",
                 code=lambda_.Code.from_inline("exports.handler = (event) => console.log(event);"),
                 handler="index.handler",
-                runtime=lambda_.Runtime.NODEJS_18_X
+                runtime=lambda_.Runtime.NODEJS_20_X
             )
             
             availability_rule = instance.on_event("Availability", target=targets.LambdaFunction(fn))
@@ -30057,7 +30059,7 @@ class ParameterGroupProps:
             fn = lambda_.Function(self, "Function",
                 code=lambda_.Code.from_inline("exports.handler = (event) => console.log(event);"),
                 handler="index.handler",
-                runtime=lambda_.Runtime.NODEJS_18_X
+                runtime=lambda_.Runtime.NODEJS_20_X
             )
             
             availability_rule = instance.on_event("Availability", target=targets.LambdaFunction(fn))
@@ -35494,6 +35496,12 @@ class SqlServerEngineVersion(
         '''Version "13.00.6465.1.v1".'''
         return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_13_00_6465_1_V1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_13_00_6470_1_V1")
+    def VER_13_00_6470_1_V1(cls) -> "SqlServerEngineVersion":
+        '''Version "13.00.6470.1.v1".'''
+        return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_13_00_6470_1_V1"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_14")
     def VER_14(cls) -> "SqlServerEngineVersion":
@@ -35656,6 +35664,12 @@ class SqlServerEngineVersion(
         '''Version "14.00.3500.1.v1".'''
         return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_14_00_3500_1_V1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_14_00_3505_1_V1")
+    def VER_14_00_3505_1_V1(cls) -> "SqlServerEngineVersion":
+        '''Version "14.00.3505.1.v1".'''
+        return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_14_00_3505_1_V1"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_15")
     def VER_15(cls) -> "SqlServerEngineVersion":
@@ -35800,6 +35814,12 @@ class SqlServerEngineVersion(
         '''Version "15.00.4440.1.v1".'''
         return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_15_00_4440_1_V1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_15_00_4445_1_V1")
+    def VER_15_00_4445_1_V1(cls) -> "SqlServerEngineVersion":
+        '''Version "15.00.4445.1.v1".'''
+        return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_15_00_4445_1_V1"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_16")
     def VER_16(cls) -> "SqlServerEngineVersion":
@@ -35902,6 +35922,12 @@ class SqlServerEngineVersion(
         '''Version "16.00.4210.1.v1".'''
         return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_16_00_4210_1_V1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_16_00_4215_2_V1")
+    def VER_16_00_4215_2_V1(cls) -> "SqlServerEngineVersion":
+        '''Version "16.00.4215.2.v1".'''
+        return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_16_00_4215_2_V1"))
+
     @builtins.property
     @jsii.member(jsii_name="sqlServerFullVersion")
     def sql_server_full_version(self) -> builtins.str:
@@ -36994,7 +37020,7 @@ class CfnDBCluster(
         :param port: The port number on which the DB instances in the DB cluster accept connections. Default: - When ``EngineMode`` is ``provisioned`` , ``3306`` (for both Aurora MySQL and Aurora PostgreSQL) - When ``EngineMode`` is ``serverless`` : - ``3306`` when ``Engine`` is ``aurora`` or ``aurora-mysql`` - ``5432`` when ``Engine`` is ``aurora-postgresql`` .. epigraph:: The ``No interruption`` on update behavior only applies to DB clusters. If you are updating a DB instance, see `Port <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-port>`_ for the AWS::RDS::DBInstance resource. Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param preferred_backup_window: The daily time range during which automated backups are created. For more information, see `Backup Window <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html#Aurora.Managing.Backups.BackupWindow>`_ in the *Amazon Aurora User Guide.* Constraints: - Must be in the format ``hh24:mi-hh24:mi`` . - Must be in Universal Coordinated Time (UTC). - Must not conflict with the preferred maintenance window. - Must be at least 30 minutes. Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param preferred_maintenance_window: The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC). Format: ``ddd:hh24:mi-ddd:hh24:mi`` The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see `Maintaining an Amazon Aurora DB cluster <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow.Aurora>`_ in the *Amazon Aurora User Guide.* Valid Days: Mon, Tue, Wed, Thu, Fri, Sat, Sun. Constraints: Minimum 30-minute window. Valid for: Aurora DB clusters and Multi-AZ DB clusters
-        :param publicly_accessible: Specifies whether the DB cluster is publicly accessible. When the DB cluster is publicly accessible and you connect from outside of the DB cluster's virtual private cloud (VPC), its Domain Name System (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB cluster, the endpoint resolves to the private IP address. Access to the DB cluster is ultimately controlled by the security group it uses. That public access isn't permitted if the security group assigned to the DB cluster doesn't permit it. When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address. Valid for Cluster Type: Multi-AZ DB clusters only Default: The default behavior varies depending on whether ``DBSubnetGroupName`` is specified. If ``DBSubnetGroupName`` isn't specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the default VPC in the target Region doesn’t have an internet gateway attached to it, the DB cluster is private. - If the default VPC in the target Region has an internet gateway attached to it, the DB cluster is public. If ``DBSubnetGroupName`` is specified, and ``PubliclyAccessible`` isn't specified, the following applies: - If the subnets are part of a VPC that doesn’t have an internet gateway attached to it, the DB cluster is private. - If the subnets are part of a VPC that has an internet gateway attached to it, the DB cluster is public.
+        :param publicly_accessible: Specifies whether the DB cluster is publicly accessible. Valid for Cluster Type: Multi-AZ DB clusters only When the DB cluster is publicly accessible and you connect from outside of the DB cluster's virtual private cloud (VPC), its domain name system (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB cluster, the endpoint resolves to the private IP address. Access to the DB cluster is controlled by its security group settings. When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address. The default behavior when ``PubliclyAccessible`` is not specified depends on whether a ``DBSubnetGroup`` is specified. If ``DBSubnetGroup`` isn't specified, ``PubliclyAccessible`` defaults to ``true`` . If ``DBSubnetGroup`` is specified, ``PubliclyAccessible`` defaults to ``false`` unless the value of ``DBSubnetGroup`` is ``default`` , in which case ``PubliclyAccessible`` defaults to ``true`` . If ``PubliclyAccessible`` is true and the VPC that the ``DBSubnetGroup`` is in doesn't have an internet gateway attached to it, Amazon RDS returns an error.
         :param replication_source_identifier: The Amazon Resource Name (ARN) of the source DB instance or DB cluster if this DB cluster is created as a read replica. Valid for: Aurora DB clusters only
         :param restore_to_time: The date and time to restore the DB cluster to. Valid Values: Value must be a time in Universal Coordinated Time (UTC) format Constraints: - Must be before the latest restorable time for the DB instance - Must be specified if ``UseLatestRestorableTime`` parameter isn't provided - Can't be specified if the ``UseLatestRestorableTime`` parameter is enabled - Can't be specified if the ``RestoreType`` parameter is ``copy-on-write`` This property must be used with ``SourceDBClusterIdentifier`` property. The resulting cluster will have the identifier that matches the value of the ``DBclusterIdentifier`` property. Example: ``2015-03-07T23:45:00Z`` Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param restore_type: The type of restore to be performed. You can specify one of the following values:. - ``full-copy`` - The new DB cluster is restored as a full copy of the source DB cluster. - ``copy-on-write`` - The new DB cluster is restored as a clone of the source DB cluster. If you don't specify a ``RestoreType`` value, then the new DB cluster is restored as a full copy of the source DB cluster. Valid for: Aurora DB clusters and Multi-AZ DB clusters
@@ -47714,7 +47740,7 @@ class DatabaseInstanceFromSnapshot(
         :param s3_import_role: Role that will be associated with this DB instance to enable S3 import. This feature is only supported by the Microsoft SQL Server, Oracle, and PostgreSQL engines. This property must not be used if ``s3ImportBuckets`` is used. For Microsoft SQL Server: Default: - New role is created if ``s3ImportBuckets`` is set, no role is defined otherwise
         :param security_groups: The security groups to assign to the DB instance. Default: - a new security group is created
         :param storage_throughput: The storage throughput, specified in mebibytes per second (MiBps). Only applicable for GP3. Default: - 125 MiBps if allocated storage is less than 400 GiB for MariaDB, MySQL, and PostgreSQL, less than 200 GiB for Oracle and less than 20 GiB for SQL Server. 500 MiBps otherwise (except for SQL Server where the default is always 125 MiBps).
-        :param storage_type: The storage type. Storage types supported are gp2, io1, standard. Default: GP2
+        :param storage_type: The storage type to associate with the DB instance. Storage types supported are gp2, gp3, io1, io2, and standard. Default: StorageType.GP2
         :param subnet_group: Existing subnet group for the instance. Default: - a new subnet group will be created.
         :param vpc_subnets: The type of subnets to add to the created DB subnet group. Default: - private subnets
         '''
@@ -48148,7 +48174,7 @@ class DatabaseInstanceFromSnapshotProps(DatabaseInstanceSourceProps):
         :param s3_import_role: Role that will be associated with this DB instance to enable S3 import. This feature is only supported by the Microsoft SQL Server, Oracle, and PostgreSQL engines. This property must not be used if ``s3ImportBuckets`` is used. For Microsoft SQL Server: Default: - New role is created if ``s3ImportBuckets`` is set, no role is defined otherwise
         :param security_groups: The security groups to assign to the DB instance. Default: - a new security group is created
         :param storage_throughput: The storage throughput, specified in mebibytes per second (MiBps). Only applicable for GP3. Default: - 125 MiBps if allocated storage is less than 400 GiB for MariaDB, MySQL, and PostgreSQL, less than 200 GiB for Oracle and less than 20 GiB for SQL Server. 500 MiBps otherwise (except for SQL Server where the default is always 125 MiBps).
-        :param storage_type: The storage type. Storage types supported are gp2, io1, standard. Default: GP2
+        :param storage_type: The storage type to associate with the DB instance. Storage types supported are gp2, gp3, io1, io2, and standard. Default: StorageType.GP2
         :param subnet_group: Existing subnet group for the instance. Default: - a new subnet group will be created.
         :param vpc_subnets: The type of subnets to add to the created DB subnet group. Default: - private subnets
         :param engine: The database engine.
@@ -48833,11 +48859,11 @@ class DatabaseInstanceFromSnapshotProps(DatabaseInstanceSourceProps):
 
     @builtins.property
     def storage_type(self) -> typing.Optional[StorageType]:
-        '''The storage type.
+        '''The storage type to associate with the DB instance.
 
-        Storage types supported are gp2, io1, standard.
+        Storage types supported are gp2, gp3, io1, io2, and standard.
 
-        :default: GP2
+        :default: StorageType.GP2
 
         :see: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html#Concepts.Storage.GeneralSSD
         '''
@@ -49163,7 +49189,7 @@ class DatabaseInstanceProps(DatabaseInstanceSourceProps):
         :param s3_import_role: Role that will be associated with this DB instance to enable S3 import. This feature is only supported by the Microsoft SQL Server, Oracle, and PostgreSQL engines. This property must not be used if ``s3ImportBuckets`` is used. For Microsoft SQL Server: Default: - New role is created if ``s3ImportBuckets`` is set, no role is defined otherwise
         :param security_groups: The security groups to assign to the DB instance. Default: - a new security group is created
         :param storage_throughput: The storage throughput, specified in mebibytes per second (MiBps). Only applicable for GP3. Default: - 125 MiBps if allocated storage is less than 400 GiB for MariaDB, MySQL, and PostgreSQL, less than 200 GiB for Oracle and less than 20 GiB for SQL Server. 500 MiBps otherwise (except for SQL Server where the default is always 125 MiBps).
-        :param storage_type: The storage type. Storage types supported are gp2, io1, standard. Default: GP2
+        :param storage_type: The storage type to associate with the DB instance. Storage types supported are gp2, gp3, io1, io2, and standard. Default: StorageType.GP2
         :param subnet_group: Existing subnet group for the instance. Default: - a new subnet group will be created.
         :param vpc_subnets: The type of subnets to add to the created DB subnet group. Default: - private subnets
         :param engine: The database engine.
@@ -49854,11 +49880,11 @@ class DatabaseInstanceProps(DatabaseInstanceSourceProps):
 
     @builtins.property
     def storage_type(self) -> typing.Optional[StorageType]:
-        '''The storage type.
+        '''The storage type to associate with the DB instance.
 
-        Storage types supported are gp2, io1, standard.
+        Storage types supported are gp2, gp3, io1, io2, and standard.
 
-        :default: GP2
+        :default: StorageType.GP2
 
         :see: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html#Concepts.Storage.GeneralSSD
         '''
@@ -50141,7 +50167,7 @@ class DatabaseInstanceReadReplica(
         :param s3_import_role: Role that will be associated with this DB instance to enable S3 import. This feature is only supported by the Microsoft SQL Server, Oracle, and PostgreSQL engines. This property must not be used if ``s3ImportBuckets`` is used. For Microsoft SQL Server: Default: - New role is created if ``s3ImportBuckets`` is set, no role is defined otherwise
         :param security_groups: The security groups to assign to the DB instance. Default: - a new security group is created
         :param storage_throughput: The storage throughput, specified in mebibytes per second (MiBps). Only applicable for GP3. Default: - 125 MiBps if allocated storage is less than 400 GiB for MariaDB, MySQL, and PostgreSQL, less than 200 GiB for Oracle and less than 20 GiB for SQL Server. 500 MiBps otherwise (except for SQL Server where the default is always 125 MiBps).
-        :param storage_type: The storage type. Storage types supported are gp2, io1, standard. Default: GP2
+        :param storage_type: The storage type to associate with the DB instance. Storage types supported are gp2, gp3, io1, io2, and standard. Default: StorageType.GP2
         :param subnet_group: Existing subnet group for the instance. Default: - a new subnet group will be created.
         :param vpc_subnets: The type of subnets to add to the created DB subnet group. Default: - private subnets
         '''
@@ -51607,7 +51633,7 @@ class DatabaseInstance(
         :param s3_import_role: Role that will be associated with this DB instance to enable S3 import. This feature is only supported by the Microsoft SQL Server, Oracle, and PostgreSQL engines. This property must not be used if ``s3ImportBuckets`` is used. For Microsoft SQL Server: Default: - New role is created if ``s3ImportBuckets`` is set, no role is defined otherwise
         :param security_groups: The security groups to assign to the DB instance. Default: - a new security group is created
         :param storage_throughput: The storage throughput, specified in mebibytes per second (MiBps). Only applicable for GP3. Default: - 125 MiBps if allocated storage is less than 400 GiB for MariaDB, MySQL, and PostgreSQL, less than 200 GiB for Oracle and less than 20 GiB for SQL Server. 500 MiBps otherwise (except for SQL Server where the default is always 125 MiBps).
-        :param storage_type: The storage type. Storage types supported are gp2, io1, standard. Default: GP2
+        :param storage_type: The storage type to associate with the DB instance. Storage types supported are gp2, gp3, io1, io2, and standard. Default: StorageType.GP2
         :param subnet_group: Existing subnet group for the instance. Default: - a new subnet group will be created.
         :param vpc_subnets: The type of subnets to add to the created DB subnet group. Default: - private subnets
         '''
@@ -57078,3 +57104,6 @@ def _typecheckingstub__84d6de235f7d15c552af4bc77a663d18a20524641c0cf9a49a093c712
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IAuroraClusterInstance, IClusterEngine, IClusterInstance, ICustomDBEngineVersionRef, IDBClusterParameterGroupRef, IDBClusterRef, IDBInstanceRef, IDBParameterGroupRef, IDBProxyEndpointRef, IDBProxyRef, IDBProxyTargetGroupRef, IDBSecurityGroupIngressRef, IDBSecurityGroupRef, IDBShardGroupRef, IDBSubnetGroupRef, IDatabaseCluster, IDatabaseInstance, IDatabaseProxy, IDatabaseProxyEndpoint, IEngine, IEventSubscriptionRef, IGlobalClusterRef, IInstanceEngine, IIntegrationRef, IOptionGroup, IOptionGroupRef, IParameterGroup, IServerlessCluster, ISubnetGroup]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_redshift/__init__.py

@@ -8564,3 +8564,6 @@ def _typecheckingstub__d636da52cf59446f020e242a88d41b50e55ef8273a113c78f968a7fe2
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IClusterParameterGroupRef, IClusterRef, IClusterSecurityGroupIngressRef, IClusterSecurityGroupRef, IClusterSubnetGroupRef, IEndpointAccessRef, IEndpointAuthorizationRef, IEventSubscriptionRef, IIntegrationRef, IScheduledActionRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_redshiftserverless/__init__.py

@@ -4448,3 +4448,6 @@ def _typecheckingstub__b7cad236eecd67272da075e88f17a1dbdae4ee5083553d6443dcc19b3
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [INamespaceRef, ISnapshotRef, IWorkgroupRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_refactorspaces/__init__.py

@@ -1207,9 +1207,13 @@ class CfnApplication(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_refactorspaces.CfnApplication",
 ):
-    '''Creates an AWS Migration Hub Refactor Spaces application.
+    '''.. epigraph::
 
-    The account that owns the environment also owns the applications created inside the environment, regardless of the account that creates the application. Refactor Spaces provisions an Amazon API Gateway, API Gateway VPC link, and Network Load Balancer for the application proxy inside your account.
+   AWS Migration Hub will no longer be open to new customers starting November 7, 2025.
+
+    To continue using the service, sign up prior to November 7, 2025. For capabilities similar to AWS Migration Hub , explore `AWS Migration Hub <https://docs.aws.amazon.com/https://aws.amazon.com/transform>`_ .
+
+    Creates an AWS Migration Hub Refactor Spaces application. The account that owns the environment also owns the applications created inside the environment, regardless of the account that creates the application. Refactor Spaces provisions an Amazon API Gateway, API Gateway VPC link, and Network Load Balancer for the application proxy inside your account.
 
     In environments created with a `CreateEnvironment:NetworkFabricType <https://docs.aws.amazon.com/migrationhub-refactor-spaces/latest/APIReference/API_CreateEnvironment.html#migrationhubrefactorspaces-CreateEnvironment-request-NetworkFabricType>`_ of ``NONE`` you need to configure `VPC to VPC connectivity <https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/amazon-vpc-to-amazon-vpc-connectivity-options.html>`_ between your service VPC and the application proxy VPC to route traffic through the application proxy to a service with a private URL endpoint. For more information, see `Create an application <https://docs.aws.amazon.com/migrationhub-refactor-spaces/latest/userguide/getting-started-create-application.html>`_ in the *Refactor Spaces User Guide* .
 
@@ -1565,9 +1569,13 @@ class CfnEnvironment(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_refactorspaces.CfnEnvironment",
 ):
-    '''Creates an AWS Migration Hub Refactor Spaces environment.
+    '''.. epigraph::
+
+   AWS Migration Hub will no longer be open to new customers starting November 7, 2025.
+
+    To continue using the service, sign up prior to November 7, 2025. For capabilities similar to AWS Migration Hub , explore `AWS Migration Hub <https://docs.aws.amazon.com/https://aws.amazon.com/transform>`_ .
 
-    The caller owns the environment resource, and all Refactor Spaces applications, services, and routes created within the environment. They are referred to as the *environment owner* . The environment owner has cross-account visibility and control of Refactor Spaces resources that are added to the environment by other accounts that the environment is shared with.
+    Creates an AWS Migration Hub Refactor Spaces environment. The caller owns the environment resource, and all Refactor Spaces applications, services, and routes created within the environment. They are referred to as the *environment owner* . The environment owner has cross-account visibility and control of Refactor Spaces resources that are added to the environment by other accounts that the environment is shared with.
 
     When creating an environment with a `CreateEnvironment:NetworkFabricType <https://docs.aws.amazon.com/migrationhub-refactor-spaces/latest/APIReference/API_CreateEnvironment.html#migrationhubrefactorspaces-CreateEnvironment-request-NetworkFabricType>`_ of ``TRANSIT_GATEWAY`` , Refactor Spaces provisions a transit gateway to enable services in VPCs to communicate directly across accounts. If `CreateEnvironment:NetworkFabricType <https://docs.aws.amazon.com/migrationhub-refactor-spaces/latest/APIReference/API_CreateEnvironment.html#migrationhubrefactorspaces-CreateEnvironment-request-NetworkFabricType>`_ is ``NONE`` , Refactor Spaces does not create a transit gateway and you must use your network infrastructure to route traffic to services with private URL endpoints.
 
@@ -2235,9 +2243,13 @@ class CfnService(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_refactorspaces.CfnService",
 ):
-    '''Creates an AWS Migration Hub Refactor Spaces service.
+    '''.. epigraph::
 
-    The account owner of the service is always the environment owner, regardless of which account in the environment creates the service. Services have either a URL endpoint in a virtual private cloud (VPC), or a Lambda function endpoint.
+   AWS Migration Hub will no longer be open to new customers starting November 7, 2025.
+
+    To continue using the service, sign up prior to November 7, 2025. For capabilities similar to AWS Migration Hub , explore `AWS Migration Hub <https://docs.aws.amazon.com/https://aws.amazon.com/transform>`_ .
+
+    Creates an AWS Migration Hub Refactor Spaces service. The account owner of the service is always the environment owner, regardless of which account in the environment creates the service. Services have either a URL endpoint in a virtual private cloud (VPC), or a Lambda function endpoint.
     .. epigraph::
 
        If an AWS resource is launched in a service VPC, and you want it to be accessible to all of an environment’s services with VPCs and routes, apply the ``RefactorSpacesSecurityGroup`` to the resource. Alternatively, to add more cross-account constraints, apply your own security group.
@@ -3055,3 +3067,6 @@ def _typecheckingstub__7d86383e689f1caa847c77d7b82f3353251e619448c701919f0bc57ed
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IApplicationRef, IEnvironmentRef, IRouteRef, IServiceRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_rekognition/__init__.py

@@ -1064,27 +1064,6 @@ class CfnProject(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
-    @jsii.member(jsii_name="fromProjectArn")
-    @builtins.classmethod
-    def from_project_arn(
-        cls,
-        scope: _constructs_77d1e7e8.Construct,
-        id: builtins.str,
-        arn: builtins.str,
-    ) -> IProjectRef:
-        '''Creates a new IProjectRef from an ARN.
-
-        :param scope: -
-        :param id: -
-        :param arn: -
-        '''
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__47ff058de186dbda01a49e6a1edc4d38fbfae207c99297e978eec7bfb197497d)
-            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
-            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
-        return typing.cast(IProjectRef, jsii.sinvoke(cls, "fromProjectArn", [scope, id, arn]))
-
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -2347,14 +2326,6 @@ def _typecheckingstub__14434bd621070d38889fc701fc289b3379981bee9c73fd7502773f1ee
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__47ff058de186dbda01a49e6a1edc4d38fbfae207c99297e978eec7bfb197497d(
-    scope: _constructs_77d1e7e8.Construct,
-    id: builtins.str,
-    arn: builtins.str,
-) -> None:
-    """Type checking stubs"""
-    pass
-
 def _typecheckingstub__0172e641847a31da5e6877581313d2ece51b9650bcb74b1b80ba13e563323cc0(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -2553,3 +2524,6 @@ def _typecheckingstub__e523487c02bfde11953c715444eddb9f2ed729eec0aa81767c2868bf9
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [ICollectionRef, IProjectRef, IStreamProcessorRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_resiliencehub/__init__.py

@@ -2162,3 +2162,6 @@ def _typecheckingstub__1b31c880d8724506ba4025d50fede62d462b847c02406fe66ed0c1b34
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IAppRef, IResiliencyPolicyRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_resourceexplorer2/__init__.py

@@ -1454,3 +1454,6 @@ def _typecheckingstub__bd724c6b685500a7e2e21d499880a01c7a397039f097a6228c73a6e01
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IDefaultViewAssociationRef, IIndexRef, IViewRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_resourcegroups/__init__.py

@@ -1680,3 +1680,6 @@ def _typecheckingstub__66392dc23dc3e7ed8bf3c5d524bd90c2953712bb7e49a797537fda8d8
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IGroupRef, ITagSyncTaskRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_robomaker/__init__.py

@@ -3422,3 +3422,6 @@ def _typecheckingstub__b4436c869d1e97db1310a07c8709c1c39527703571128932c8cdb4b5b
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IFleetRef, IRobotApplicationRef, IRobotApplicationVersionRef, IRobotRef, ISimulationApplicationRef, ISimulationApplicationVersionRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_rolesanywhere/__init__.py

@@ -2460,3 +2460,6 @@ def _typecheckingstub__d423be7ff47fcc8761e7797ad37aac03811962bc633d561f5c9c8721d
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [ICRLRef, IProfileRef, ITrustAnchorRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])