aws-cdk-lib 2.73.0__py3-none-any.whl → 2.76.0__py3-none-any.whl

aws_cdk/aws_apigateway/__init__.py

@@ -854,47 +854,41 @@ books.add_method("GET", apigateway.HttpIntegration("http://amazon.com"),
 A full working example is shown below.
 
 ```python
-# Example automatically generated from non-compiling source. May contain errors.
-import path as path
-import aws_cdk.aws_lambda as lambda_
-from aws_cdk import App, Stack
-from ......lib import MockIntegration, PassthroughBehavior, RestApi, TokenAuthorizer, Cors
+class MyStack(Stack):
+    def __init__(self, scope, id):
+        super().__init__(scope, id)
 
+        authorizer_fn = lambda_.Function(self, "MyAuthorizerFunction",
+            runtime=lambda_.Runtime.NODEJS_14_X,
+            handler="index.handler",
+            code=lambda_.AssetCode.from_asset(path.join(__dirname, "integ.token-authorizer.handler"))
+        )
 
-app = App()
-stack = Stack(app, "TokenAuthorizerInteg")
-
-authorizer_fn = lambda_.Function(stack, "MyAuthorizerFunction",
-    runtime=lambda_.Runtime.NODEJS_14_X,
-    handler="index.handler",
-    code=lambda_.AssetCode.from_asset(path.join(__dirname, "integ.token-authorizer.handler"))
-)
-
-authorizer = TokenAuthorizer(stack, "MyAuthorizer",
-    handler=authorizer_fn
-)
+        authorizer = TokenAuthorizer(self, "MyAuthorizer",
+            handler=authorizer_fn
+        )
 
-restapi = RestApi(stack, "MyRestApi",
-    cloud_watch_role=True,
-    default_method_options={
-        "authorizer": authorizer
-    },
-    default_cors_preflight_options={
-        "allow_origins": Cors.ALL_ORIGINS
-    }
-)
+        restapi = RestApi(self, "MyRestApi",
+            cloud_watch_role=True,
+            default_method_options=MethodOptions(
+                authorizer=authorizer
+            ),
+            default_cors_preflight_options=CorsOptions(
+                allow_origins=Cors.ALL_ORIGINS
+            )
+        )
 
-restapi.root.add_method("ANY", MockIntegration(
-    integration_responses=[{"status_code": "200"}
-    ],
-    passthrough_behavior=PassthroughBehavior.NEVER,
-    request_templates={
-        "application/json": "{ \"statusCode\": 200 }"
-    }
-),
-    method_responses=[{"status_code": "200"}
-    ]
-)
+        restapi.root.add_method("ANY", MockIntegration(
+            integration_responses=[IntegrationResponse(status_code="200")
+            ],
+            passthrough_behavior=PassthroughBehavior.NEVER,
+            request_templates={
+                "application/json": "{ \"statusCode\": 200 }"
+            }
+        ),
+            method_responses=[MethodResponse(status_code="200")
+            ]
+        )
 ```
 
 By default, the `TokenAuthorizer` looks for the authorization token in the request header with the key 'Authorization'. This can,
@@ -10556,7 +10550,7 @@ class CfnRestApi(
         :param endpoint_configuration: A list of the endpoint types of the API. Use this property when creating an API. When importing an existing API, specify the endpoint configuration types using the ``Parameters`` property.
         :param fail_on_warnings: A query parameter to indicate whether to rollback the API update ( ``true`` ) or not ( ``false`` ) when a warning is encountered. The default value is ``false`` .
         :param minimum_compression_size: A nullable integer that is used to enable compression (with non-negative between 0 and 10485760 (10M) bytes, inclusive) or disable compression (with a null value) on an API. When compression is enabled, compression or decompression is not applied on the payload if the payload size is smaller than this value. Setting it to zero allows compression for any payload size.
-        :param mode: This property applies only when you use OpenAPI to define your REST API. The ``Mode`` determines how API Gateway handles resource updates. Valid values are ``overwrite`` or ``merge`` . For ``overwrite`` , the new API definition replaces the existing one. The existing API identifier remains unchanged. For ``merge`` , the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. Use ``merge`` to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties. If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite`` . Otherwise, the default value is ``merge`` .
+        :param mode: This property applies only when you use OpenAPI to define your REST API. The ``Mode`` determines how API Gateway handles resource updates. Valid values are ``overwrite`` or ``merge`` . For ``overwrite`` , the new API definition replaces the existing one. The existing API identifier remains unchanged. For ``merge`` , the new API definition is merged with the existing API. If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite`` . For REST APIs created after March 29, 2021, the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. Use the default mode to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties.
         :param name: The name of the RestApi.
         :param parameters: Custom header parameters as part of the request. For example, to exclude DocumentationParts from an imported API, set ``ignore=documentation`` as a ``parameters`` value, as in the AWS CLI command of ``aws apigateway import-rest-api --parameters ignore=documentation --body 'file:///path/to/imported-api-body.json'`` .
         :param policy: A policy document that contains the permissions for the ``RestApi`` resource. To set the ARN for the policy, use the ``!Join`` intrinsic function with ``""`` as delimiter and values of ``"execute-api:/"`` and ``"*"`` .
@@ -10876,9 +10870,11 @@ class CfnRestApi(
 
         For ``overwrite`` , the new API definition replaces the existing one. The existing API identifier remains unchanged.
 
-        For ``merge`` , the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. Use ``merge`` to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties.
+        For ``merge`` , the new API definition is merged with the existing API.
+
+        If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite`` . For REST APIs created after March 29, 2021, the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API.
 
-        If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite`` . Otherwise, the default value is ``merge`` .
+        Use the default mode to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties.
 
         :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html#cfn-apigateway-restapi-mode
         '''
@@ -11171,7 +11167,7 @@ class CfnRestApiProps:
         :param endpoint_configuration: A list of the endpoint types of the API. Use this property when creating an API. When importing an existing API, specify the endpoint configuration types using the ``Parameters`` property.
         :param fail_on_warnings: A query parameter to indicate whether to rollback the API update ( ``true`` ) or not ( ``false`` ) when a warning is encountered. The default value is ``false`` .
         :param minimum_compression_size: A nullable integer that is used to enable compression (with non-negative between 0 and 10485760 (10M) bytes, inclusive) or disable compression (with a null value) on an API. When compression is enabled, compression or decompression is not applied on the payload if the payload size is smaller than this value. Setting it to zero allows compression for any payload size.
-        :param mode: This property applies only when you use OpenAPI to define your REST API. The ``Mode`` determines how API Gateway handles resource updates. Valid values are ``overwrite`` or ``merge`` . For ``overwrite`` , the new API definition replaces the existing one. The existing API identifier remains unchanged. For ``merge`` , the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. Use ``merge`` to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties. If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite`` . Otherwise, the default value is ``merge`` .
+        :param mode: This property applies only when you use OpenAPI to define your REST API. The ``Mode`` determines how API Gateway handles resource updates. Valid values are ``overwrite`` or ``merge`` . For ``overwrite`` , the new API definition replaces the existing one. The existing API identifier remains unchanged. For ``merge`` , the new API definition is merged with the existing API. If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite`` . For REST APIs created after March 29, 2021, the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. Use the default mode to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties.
         :param name: The name of the RestApi.
         :param parameters: Custom header parameters as part of the request. For example, to exclude DocumentationParts from an imported API, set ``ignore=documentation`` as a ``parameters`` value, as in the AWS CLI command of ``aws apigateway import-rest-api --parameters ignore=documentation --body 'file:///path/to/imported-api-body.json'`` .
         :param policy: A policy document that contains the permissions for the ``RestApi`` resource. To set the ARN for the policy, use the ``!Join`` intrinsic function with ``""`` as delimiter and values of ``"execute-api:/"`` and ``"*"`` .
@@ -11391,9 +11387,11 @@ class CfnRestApiProps:
 
         For ``overwrite`` , the new API definition replaces the existing one. The existing API identifier remains unchanged.
 
-        For ``merge`` , the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. Use ``merge`` to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties.
+        For ``merge`` , the new API definition is merged with the existing API.
 
-        If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite`` . Otherwise, the default value is ``merge`` .
+        If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite`` . For REST APIs created after March 29, 2021, the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API.
+
+        Use the default mode to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties.
 
         :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html#cfn-apigateway-restapi-mode
         '''
@@ -14024,12 +14022,11 @@ class CorsOptions:
 
         Example::
 
-            # my_resource: apigateway.Resource
-            
-            
-            my_resource.add_cors_preflight(
-                allow_origins=["https://amazon.com"],
-                allow_methods=["GET", "PUT"]
+            apigateway.RestApi(self, "api",
+                default_cors_preflight_options=apigateway.CorsOptions(
+                    allow_origins=apigateway.Cors.ALL_ORIGINS,
+                    allow_methods=apigateway.Cors.ALL_METHODS
+                )
             )
         '''
         if __debug__:
@@ -19857,117 +19854,67 @@ class MockIntegration(
     integrates the OPTIONS method to support CORS with a mock integration.
     Gateway responses are other examples of mock integrations.
 
-    :exampleMetadata: lit=aws-apigateway/test/integ.restapi-import.lit.ts infused
+    :exampleMetadata: lit=aws-apigateway/test/authorizers/integ.request-authorizer.lit.ts infused
 
     Example::
 
         from aws_cdk.aws_apigateway import IntegrationResponse, MethodResponse, IntegrationResponse, MethodResponse
-        from aws_cdk import App, CfnOutput, NestedStack, NestedStackProps, Stack
-        from constructs import Construct
-        from aws_cdk.aws_apigateway import Deployment, Method, MockIntegration, PassthroughBehavior, RestApi, Stage
-        
-        #
-        # This file showcases how to split up a RestApi's Resources and Methods across nested stacks.
-        #
-        # The root stack 'RootStack' first defines a RestApi.
-        # Two nested stacks BooksStack and PetsStack, create corresponding Resources '/books' and '/pets'.
-        # They are then deployed to a 'prod' Stage via a third nested stack - DeployStack.
-        #
-        # To verify this worked, go to the APIGateway
-        #
-        
-        class RootStack(Stack):
-            def __init__(self, scope):
-                super().__init__(scope, "integ-restapi-import-RootStack")
-        
-                rest_api = RestApi(self, "RestApi",
-                    cloud_watch_role=True,
-                    deploy=False
-                )
-                rest_api.root.add_method("ANY")
-        
-                pets_stack = PetsStack(self,
-                    rest_api_id=rest_api.rest_api_id,
-                    root_resource_id=rest_api.rest_api_root_resource_id
-                )
-                books_stack = BooksStack(self,
-                    rest_api_id=rest_api.rest_api_id,
-                    root_resource_id=rest_api.rest_api_root_resource_id
-                )
-                DeployStack(self,
-                    rest_api_id=rest_api.rest_api_id,
-                    methods=pets_stack.methods.concat(books_stack.methods)
-                )
-        
-                CfnOutput(self, "PetsURL",
-                    value=f"https://{restApi.restApiId}.execute-api.{this.region}.amazonaws.com/prod/pets"
-                )
-        
-                CfnOutput(self, "BooksURL",
-                    value=f"https://{restApi.restApiId}.execute-api.{this.region}.amazonaws.com/prod/books"
-                )
-        
-        class PetsStack(NestedStack):
-        
-            def __init__(self, scope, *, restApiId, rootResourceId, parameters=None, timeout=None, notificationArns=None, removalPolicy=None, description=None):
-                super().__init__(scope, "integ-restapi-import-PetsStack", restApiId=restApiId, rootResourceId=rootResourceId, parameters=parameters, timeout=timeout, notificationArns=notificationArns, removalPolicy=removalPolicy, description=description)
-        
-                api = RestApi.from_rest_api_attributes(self, "RestApi",
-                    rest_api_id=rest_api_id,
-                    root_resource_id=root_resource_id
-                )
-        
-                method = api.root.add_resource("pets").add_method("GET", MockIntegration(
-                    integration_responses=[IntegrationResponse(
-                        status_code="200"
-                    )],
-                    passthrough_behavior=PassthroughBehavior.NEVER,
-                    request_templates={
-                        "application/json": "{ \"statusCode\": 200 }"
-                    }
-                ),
-                    method_responses=[MethodResponse(status_code="200")]
-                )
-        
-                self.methods.push(method)
+        import path as path
+        import aws_cdk.aws_lambda as lambda_
+        from aws_cdk import App, Stack
+        from aws_cdk.aws_apigateway import MockIntegration, PassthroughBehavior, RestApi, RequestAuthorizer, IdentitySource
         
-        class BooksStack(NestedStack):
+        # Against the RestApi endpoint from the stack output, run
+        # `curl -s -o /dev/null -w "%{http_code}" <url>` should return 401
+        # `curl -s -o /dev/null -w "%{http_code}" -H 'Authorization: deny' <url>?allow=yes` should return 403
+        # `curl -s -o /dev/null -w "%{http_code}" -H 'Authorization: allow' <url>?allow=yes` should return 200
         
-            def __init__(self, scope, *, restApiId, rootResourceId, parameters=None, timeout=None, notificationArns=None, removalPolicy=None, description=None):
-                super().__init__(scope, "integ-restapi-import-BooksStack", restApiId=restApiId, rootResourceId=rootResourceId, parameters=parameters, timeout=timeout, notificationArns=notificationArns, removalPolicy=removalPolicy, description=description)
+        app = App()
+        stack = Stack(app, "RequestAuthorizerInteg")
         
-                api = RestApi.from_rest_api_attributes(self, "RestApi",
-                    rest_api_id=rest_api_id,
-                    root_resource_id=root_resource_id
-                )
+        authorizer_fn = lambda_.Function(stack, "MyAuthorizerFunction",
+            runtime=lambda_.Runtime.NODEJS_14_X,
+            handler="index.handler",
+            code=lambda_.AssetCode.from_asset(path.join(__dirname, "integ.request-authorizer.handler"))
+        )
         
-                method = api.root.add_resource("books").add_method("GET", MockIntegration(
-                    integration_responses=[IntegrationResponse(
-                        status_code="200"
-                    )],
-                    passthrough_behavior=PassthroughBehavior.NEVER,
-                    request_templates={
-                        "application/json": "{ \"statusCode\": 200 }"
-                    }
-                ),
-                    method_responses=[MethodResponse(status_code="200")]
-                )
+        restapi = RestApi(stack, "MyRestApi", cloud_watch_role=True)
         
-                self.methods.push(method)
+        authorizer = RequestAuthorizer(stack, "MyAuthorizer",
+            handler=authorizer_fn,
+            identity_sources=[IdentitySource.header("Authorization"), IdentitySource.query_string("allow")]
+        )
         
-        class DeployStack(NestedStack):
-            def __init__(self, scope, *, restApiId, methods=None, parameters=None, timeout=None, notificationArns=None, removalPolicy=None, description=None):
-                super().__init__(scope, "integ-restapi-import-DeployStack", restApiId=restApiId, methods=methods, parameters=parameters, timeout=timeout, notificationArns=notificationArns, removalPolicy=removalPolicy, description=description)
+        second_authorizer = RequestAuthorizer(stack, "MySecondAuthorizer",
+            handler=authorizer_fn,
+            identity_sources=[IdentitySource.header("Authorization"), IdentitySource.query_string("allow")]
+        )
         
-                deployment = Deployment(self, "Deployment",
-                    api=RestApi.from_rest_api_id(self, "RestApi", rest_api_id)
-                )
-                if methods:
-                    for method in methods:
-                        deployment.node.add_dependency(method)
-                Stage(self, "Stage", deployment=deployment)
+        restapi.root.add_method("ANY", MockIntegration(
+            integration_responses=[IntegrationResponse(status_code="200")
+            ],
+            passthrough_behavior=PassthroughBehavior.NEVER,
+            request_templates={
+                "application/json": "{ \"statusCode\": 200 }"
+            }
+        ),
+            method_responses=[MethodResponse(status_code="200")
+            ],
+            authorizer=authorizer
+        )
         
-        RootStack(App())
+        restapi.root.resource_for_path("auth").add_method("ANY", MockIntegration(
+            integration_responses=[IntegrationResponse(status_code="200")
+            ],
+            passthrough_behavior=PassthroughBehavior.NEVER,
+            request_templates={
+                "application/json": "{ \"statusCode\": 200 }"
+            }
+        ),
+            method_responses=[MethodResponse(status_code="200")
+            ],
+            authorizer=second_authorizer
+        )
     '''
 
     def __init__(

aws_cdk/aws_appconfig/__init__.py

@@ -1084,7 +1084,7 @@ class CfnDeployment(
         :param deployment_strategy_id: The deployment strategy ID.
         :param environment_id: The environment ID.
         :param description: A description of the deployment.
-        :param kms_key_identifier: ``AWS::AppConfig::Deployment.KmsKeyIdentifier``.
+        :param kms_key_identifier: The AWS KMS key identifier (key ID, key alias, or key ARN). AWS AppConfig uses this ID to encrypt the configuration data using a customer managed key.
         :param tags: Metadata to assign to the deployment. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.
         '''
         if __debug__:
@@ -1240,7 +1240,9 @@ class CfnDeployment(
     @builtins.property
     @jsii.member(jsii_name="kmsKeyIdentifier")
     def kms_key_identifier(self) -> typing.Optional[builtins.str]:
-        '''``AWS::AppConfig::Deployment.KmsKeyIdentifier``.
+        '''The AWS KMS key identifier (key ID, key alias, or key ARN).
+
+        AWS AppConfig uses this ID to encrypt the configuration data using a customer managed key.
 
         :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appconfig-deployment.html#cfn-appconfig-deployment-kmskeyidentifier
         '''
@@ -1384,7 +1386,7 @@ class CfnDeploymentProps:
         :param deployment_strategy_id: The deployment strategy ID.
         :param environment_id: The environment ID.
         :param description: A description of the deployment.
-        :param kms_key_identifier: ``AWS::AppConfig::Deployment.KmsKeyIdentifier``.
+        :param kms_key_identifier: The AWS KMS key identifier (key ID, key alias, or key ARN). AWS AppConfig uses this ID to encrypt the configuration data using a customer managed key.
         :param tags: Metadata to assign to the deployment. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.
 
         :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appconfig-deployment.html
@@ -1499,7 +1501,9 @@ class CfnDeploymentProps:
 
     @builtins.property
     def kms_key_identifier(self) -> typing.Optional[builtins.str]:
-        '''``AWS::AppConfig::Deployment.KmsKeyIdentifier``.
+        '''The AWS KMS key identifier (key ID, key alias, or key ARN).
+
+        AWS AppConfig uses this ID to encrypt the configuration data using a customer managed key.
 
         :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appconfig-deployment.html#cfn-appconfig-deployment-kmskeyidentifier
         '''

aws_cdk/aws_appflow/__init__.py

@@ -1458,7 +1458,7 @@ class CfnConnectorProfile(
             :param google_analytics: The connector-specific credentials required when using Google Analytics.
             :param infor_nexus: The connector-specific credentials required when using Infor Nexus.
             :param marketo: The connector-specific credentials required when using Marketo.
-            :param pardot: The connector-specific credentials required when using Salesforce Pardot.
+            :param pardot: ``CfnConnectorProfile.ConnectorProfileCredentialsProperty.Pardot``.
             :param redshift: The connector-specific credentials required when using Amazon Redshift.
             :param salesforce: The connector-specific credentials required when using Salesforce.
             :param sapo_data: The connector-specific profile credentials required when using SAPOData.
@@ -1772,7 +1772,7 @@ class CfnConnectorProfile(
         def pardot(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnConnectorProfile.PardotConnectorProfileCredentialsProperty"]]:
-            '''The connector-specific credentials required when using Salesforce Pardot.
+            '''``CfnConnectorProfile.ConnectorProfileCredentialsProperty.Pardot``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-connectorprofilecredentials.html#cfn-appflow-connectorprofile-connectorprofilecredentials-pardot
             '''
@@ -1946,7 +1946,7 @@ class CfnConnectorProfile(
             :param dynatrace: The connector-specific properties required by Dynatrace.
             :param infor_nexus: The connector-specific properties required by Infor Nexus.
             :param marketo: The connector-specific properties required by Marketo.
-            :param pardot: The connector-specific properties required by Salesforce Pardot.
+            :param pardot: ``CfnConnectorProfile.ConnectorProfilePropertiesProperty.Pardot``.
             :param redshift: The connector-specific properties required by Amazon Redshift.
             :param salesforce: The connector-specific properties required by Salesforce.
             :param sapo_data: The connector-specific profile properties required when using SAPOData.
@@ -2158,7 +2158,7 @@ class CfnConnectorProfile(
         def pardot(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnConnectorProfile.PardotConnectorProfilePropertiesProperty"]]:
-            '''The connector-specific properties required by Salesforce Pardot.
+            '''``CfnConnectorProfile.ConnectorProfilePropertiesProperty.Pardot``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-connectorprofileproperties.html#cfn-appflow-connectorprofile-connectorprofileproperties-pardot
             '''
@@ -3723,12 +3723,11 @@ class CfnConnectorProfile(
             connector_o_auth_request: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnConnectorProfile.ConnectorOAuthRequestProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             refresh_token: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''The connector-specific profile credentials required when using Salesforce Pardot.
-
-            :param access_token: The credentials used to access protected Salesforce Pardot resources.
-            :param client_credentials_arn: The secret manager ARN, which contains the client ID and client secret of the connected app.
+            '''
+            :param access_token: ``CfnConnectorProfile.PardotConnectorProfileCredentialsProperty.AccessToken``.
+            :param client_credentials_arn: ``CfnConnectorProfile.PardotConnectorProfileCredentialsProperty.ClientCredentialsArn``.
             :param connector_o_auth_request: ``CfnConnectorProfile.PardotConnectorProfileCredentialsProperty.ConnectorOAuthRequest``.
-            :param refresh_token: The credentials used to acquire new access tokens.
+            :param refresh_token: ``CfnConnectorProfile.PardotConnectorProfileCredentialsProperty.RefreshToken``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-pardotconnectorprofilecredentials.html
             :exampleMetadata: fixture=_generated
@@ -3767,7 +3766,7 @@ class CfnConnectorProfile(
 
         @builtins.property
         def access_token(self) -> typing.Optional[builtins.str]:
-            '''The credentials used to access protected Salesforce Pardot resources.
+            '''``CfnConnectorProfile.PardotConnectorProfileCredentialsProperty.AccessToken``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-pardotconnectorprofilecredentials.html#cfn-appflow-connectorprofile-pardotconnectorprofilecredentials-accesstoken
             '''
@@ -3776,7 +3775,7 @@ class CfnConnectorProfile(
 
         @builtins.property
         def client_credentials_arn(self) -> typing.Optional[builtins.str]:
-            '''The secret manager ARN, which contains the client ID and client secret of the connected app.
+            '''``CfnConnectorProfile.PardotConnectorProfileCredentialsProperty.ClientCredentialsArn``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-pardotconnectorprofilecredentials.html#cfn-appflow-connectorprofile-pardotconnectorprofilecredentials-clientcredentialsarn
             '''
@@ -3796,7 +3795,7 @@ class CfnConnectorProfile(
 
         @builtins.property
         def refresh_token(self) -> typing.Optional[builtins.str]:
-            '''The credentials used to acquire new access tokens.
+            '''``CfnConnectorProfile.PardotConnectorProfileCredentialsProperty.RefreshToken``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-pardotconnectorprofilecredentials.html#cfn-appflow-connectorprofile-pardotconnectorprofilecredentials-refreshtoken
             '''
@@ -3831,11 +3830,10 @@ class CfnConnectorProfile(
             instance_url: typing.Optional[builtins.str] = None,
             is_sandbox_environment: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         ) -> None:
-            '''The connector-specific profile properties required when using Salesforce Pardot.
-
-            :param business_unit_id: The business unit id of Salesforce Pardot instance.
-            :param instance_url: The location of the Salesforce Pardot resource.
-            :param is_sandbox_environment: Indicates whether the connector profile applies to a sandbox or production environment.
+            '''
+            :param business_unit_id: ``CfnConnectorProfile.PardotConnectorProfilePropertiesProperty.BusinessUnitId``.
+            :param instance_url: ``CfnConnectorProfile.PardotConnectorProfilePropertiesProperty.InstanceUrl``.
+            :param is_sandbox_environment: ``CfnConnectorProfile.PardotConnectorProfilePropertiesProperty.IsSandboxEnvironment``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-pardotconnectorprofileproperties.html
             :exampleMetadata: fixture=_generated
@@ -3869,7 +3867,7 @@ class CfnConnectorProfile(
 
         @builtins.property
         def business_unit_id(self) -> builtins.str:
-            '''The business unit id of Salesforce Pardot instance.
+            '''``CfnConnectorProfile.PardotConnectorProfilePropertiesProperty.BusinessUnitId``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-pardotconnectorprofileproperties.html#cfn-appflow-connectorprofile-pardotconnectorprofileproperties-businessunitid
             '''
@@ -3879,7 +3877,7 @@ class CfnConnectorProfile(
 
         @builtins.property
         def instance_url(self) -> typing.Optional[builtins.str]:
-            '''The location of the Salesforce Pardot resource.
+            '''``CfnConnectorProfile.PardotConnectorProfilePropertiesProperty.InstanceUrl``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-pardotconnectorprofileproperties.html#cfn-appflow-connectorprofile-pardotconnectorprofileproperties-instanceurl
             '''
@@ -3890,7 +3888,7 @@ class CfnConnectorProfile(
         def is_sandbox_environment(
             self,
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''Indicates whether the connector profile applies to a sandbox or production environment.
+            '''``CfnConnectorProfile.PardotConnectorProfilePropertiesProperty.IsSandboxEnvironment``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-pardotconnectorprofileproperties.html#cfn-appflow-connectorprofile-pardotconnectorprofileproperties-issandboxenvironment
             '''
@@ -4549,7 +4547,7 @@ class CfnConnectorProfile(
 
             :param instance_url: The location of the Salesforce resource.
             :param is_sandbox_environment: Indicates whether the connector profile applies to a sandbox or production environment.
-            :param use_private_link_for_metadata_and_authorization: If the connection mode for the connector profile is private, this parameter sets whether Amazon AppFlow uses the private network to send metadata and authorization calls to Salesforce. Amazon AppFlow sends private calls through AWS PrivateLink . These calls travel through AWS infrastructure without being exposed to the public internet. Set either of the following values: - **true** - Amazon AppFlow sends all calls to Salesforce over the private network. These private calls are: - Calls to get metadata about your Salesforce records. This metadata describes your Salesforce objects and their fields. - Calls to get or refresh access tokens that allow Amazon AppFlow to access your Salesforce records. - Calls to transfer your Salesforce records as part of a flow run. - **false** - The default value. Amazon AppFlow sends some calls to Salesforce privately and other calls over the public internet. The public calls are: - Calls to get metadata about your Salesforce records. - Calls to get or refresh access tokens. The private calls are: - Calls to transfer your Salesforce records as part of a flow run.
+            :param use_private_link_for_metadata_and_authorization: ``CfnConnectorProfile.SalesforceConnectorProfilePropertiesProperty.usePrivateLinkForMetadataAndAuthorization``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-salesforceconnectorprofileproperties.html
             :exampleMetadata: fixture=_generated
@@ -4603,29 +4601,7 @@ class CfnConnectorProfile(
         def use_private_link_for_metadata_and_authorization(
             self,
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''If the connection mode for the connector profile is private, this parameter sets whether Amazon AppFlow uses the private network to send metadata and authorization calls to Salesforce.
-
-            Amazon AppFlow sends private calls through AWS PrivateLink . These calls travel through AWS infrastructure without being exposed to the public internet.
-
-            Set either of the following values:
-
-            - **true** - Amazon AppFlow sends all calls to Salesforce over the private network.
-
-            These private calls are:
-
-            - Calls to get metadata about your Salesforce records. This metadata describes your Salesforce objects and their fields.
-            - Calls to get or refresh access tokens that allow Amazon AppFlow to access your Salesforce records.
-            - Calls to transfer your Salesforce records as part of a flow run.
-            - **false** - The default value. Amazon AppFlow sends some calls to Salesforce privately and other calls over the public internet.
-
-            The public calls are:
-
-            - Calls to get metadata about your Salesforce records.
-            - Calls to get or refresh access tokens.
-
-            The private calls are:
-
-            - Calls to transfer your Salesforce records as part of a flow run.
+            '''``CfnConnectorProfile.SalesforceConnectorProfilePropertiesProperty.usePrivateLinkForMetadataAndAuthorization``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-connectorprofile-salesforceconnectorprofileproperties.html#cfn-appflow-connectorprofile-salesforceconnectorprofileproperties-useprivatelinkformetadataandauthorization
             '''
@@ -6804,7 +6780,7 @@ class CfnFlow(
             :param google_analytics: The operation to be performed on the provided Google Analytics source fields.
             :param infor_nexus: The operation to be performed on the provided Infor Nexus source fields.
             :param marketo: The operation to be performed on the provided Marketo source fields.
-            :param pardot: The operation to be performed on the provided Salesforce Pardot source fields.
+            :param pardot: ``CfnFlow.ConnectorOperatorProperty.Pardot``.
             :param s3: The operation to be performed on the provided Amazon S3 source fields.
             :param salesforce: The operation to be performed on the provided Salesforce source fields.
             :param sapo_data: The operation to be performed on the provided SAPOData source fields.
@@ -6964,7 +6940,7 @@ class CfnFlow(
 
         @builtins.property
         def pardot(self) -> typing.Optional[builtins.str]:
-            '''The operation to be performed on the provided Salesforce Pardot source fields.
+            '''``CfnFlow.ConnectorOperatorProperty.Pardot``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-flow-connectoroperator.html#cfn-appflow-flow-connectoroperator-pardot
             '''
@@ -8685,9 +8661,8 @@ class CfnFlow(
     )
     class PardotSourcePropertiesProperty:
         def __init__(self, *, object: builtins.str) -> None:
-            '''The properties that are applied when Salesforce Pardot is being used as a source.
-
-            :param object: The object specified in the Salesforce Pardot flow source.
+            '''
+            :param object: ``CfnFlow.PardotSourcePropertiesProperty.Object``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-flow-pardotsourceproperties.html
             :exampleMetadata: fixture=_generated
@@ -8711,7 +8686,7 @@ class CfnFlow(
 
         @builtins.property
         def object(self) -> builtins.str:
-            '''The object specified in the Salesforce Pardot flow source.
+            '''``CfnFlow.PardotSourcePropertiesProperty.Object``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-flow-pardotsourceproperties.html#cfn-appflow-flow-pardotsourceproperties-object
             '''
@@ -10283,7 +10258,7 @@ class CfnFlow(
             :param google_analytics: Specifies the information that is required for querying Google Analytics.
             :param infor_nexus: Specifies the information that is required for querying Infor Nexus.
             :param marketo: Specifies the information that is required for querying Marketo.
-            :param pardot: Specifies the information that is required for querying Salesforce Pardot.
+            :param pardot: ``CfnFlow.SourceConnectorPropertiesProperty.Pardot``.
             :param s3: Specifies the information that is required for querying Amazon S3.
             :param salesforce: Specifies the information that is required for querying Salesforce.
             :param sapo_data: The properties that are applied when using SAPOData as a flow source.
@@ -10515,7 +10490,7 @@ class CfnFlow(
         def pardot(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFlow.PardotSourcePropertiesProperty"]]:
-            '''Specifies the information that is required for querying Salesforce Pardot.
+            '''``CfnFlow.SourceConnectorPropertiesProperty.Pardot``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appflow-flow-sourceconnectorproperties.html#cfn-appflow-flow-sourceconnectorproperties-pardot
             '''