aws-cdk-lib 2.75.1__py3-none-any.whl → 2.76.0__py3-none-any.whl

aws_cdk/aws_apprunner/__init__.py

@@ -1058,7 +1058,7 @@ class CfnService(
             :param runtime: A runtime environment type for building and running an App Runner service. It represents a programming language runtime.
             :param build_command: The command App Runner runs to build your application.
             :param port: The port that your application listens to in the container. Default: ``8080``
-            :param runtime_environment_secrets: An array of key-value pairs representing the secrets and parameters that get referenced to your service as an environment variable. The supported values are either the full Amazon Resource Name (ARN) of the AWS Secrets Manager secret or the full ARN of the parameter in the AWS Systems Manager Parameter Store. .. epigraph:: - If the AWS Systems Manager Parameter Store parameter exists in the same AWS Region as the service that you're launching, you can use either the full ARN or name of the secret. If the parameter exists in a different Region, then the full ARN must be specified. - Currently, cross account referencing of AWS Systems Manager Parameter Store parameter is not supported.
+            :param runtime_environment_secrets: ``CfnService.CodeConfigurationValuesProperty.RuntimeEnvironmentSecrets``.
             :param runtime_environment_variables: The environment variables that are available to your running AWS App Runner service. An array of key-value pairs.
             :param start_command: The command App Runner runs to start your application.
 
@@ -1146,13 +1146,7 @@ class CfnService(
         def runtime_environment_secrets(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnService.KeyValuePairProperty"]]]]:
-            '''An array of key-value pairs representing the secrets and parameters that get referenced to your service as an environment variable.
-
-            The supported values are either the full Amazon Resource Name (ARN) of the AWS Secrets Manager secret or the full ARN of the parameter in the AWS Systems Manager Parameter Store.
-            .. epigraph::
-
-               - If the AWS Systems Manager Parameter Store parameter exists in the same AWS Region as the service that you're launching, you can use either the full ARN or name of the secret. If the parameter exists in a different Region, then the full ARN must be specified.
-               - Currently, cross account referencing of AWS Systems Manager Parameter Store parameter is not supported.
+            '''``CfnService.CodeConfigurationValuesProperty.RuntimeEnvironmentSecrets``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-service-codeconfigurationvalues.html#cfn-apprunner-service-codeconfigurationvalues-runtimeenvironmentsecrets
             '''
@@ -1624,7 +1618,7 @@ class CfnService(
             '''Describes the configuration that AWS App Runner uses to run an App Runner service using an image pulled from a source image repository.
 
             :param port: The port that your application listens to in the container. Default: ``8080``
-            :param runtime_environment_secrets: An array of key-value pairs representing the secrets and parameters that get referenced to your service as an environment variable. The supported values are either the full Amazon Resource Name (ARN) of the AWS Secrets Manager secret or the full ARN of the parameter in the AWS Systems Manager Parameter Store. .. epigraph:: - If the AWS Systems Manager Parameter Store parameter exists in the same AWS Region as the service that you're launching, you can use either the full ARN or name of the secret. If the parameter exists in a different Region, then the full ARN must be specified. - Currently, cross account referencing of AWS Systems Manager Parameter Store parameter is not supported.
+            :param runtime_environment_secrets: ``CfnService.ImageConfigurationProperty.RuntimeEnvironmentSecrets``.
             :param runtime_environment_variables: Environment variables that are available to your running App Runner service. An array of key-value pairs.
             :param start_command: An optional command that App Runner runs to start the application in the source image. If specified, this command overrides the Docker image’s default start command.
 
@@ -1681,13 +1675,7 @@ class CfnService(
         def runtime_environment_secrets(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnService.KeyValuePairProperty"]]]]:
-            '''An array of key-value pairs representing the secrets and parameters that get referenced to your service as an environment variable.
-
-            The supported values are either the full Amazon Resource Name (ARN) of the AWS Secrets Manager secret or the full ARN of the parameter in the AWS Systems Manager Parameter Store.
-            .. epigraph::
-
-               - If the AWS Systems Manager Parameter Store parameter exists in the same AWS Region as the service that you're launching, you can use either the full ARN or name of the secret. If the parameter exists in a different Region, then the full ARN must be specified.
-               - Currently, cross account referencing of AWS Systems Manager Parameter Store parameter is not supported.
+            '''``CfnService.ImageConfigurationProperty.RuntimeEnvironmentSecrets``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-service-imageconfiguration.html#cfn-apprunner-service-imageconfiguration-runtimeenvironmentsecrets
             '''

aws_cdk/aws_appstream/__init__.py

@@ -2616,52 +2616,20 @@ class CfnFleet(
 
     :cloudformationResource: AWS::AppStream::Fleet
     :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-fleet.html
-    :exampleMetadata: fixture=_generated
+    :exampleMetadata: infused
 
     Example::
 
-        # The code below shows an example of how to instantiate this type.
-        # The values are placeholders you should change.
-        from aws_cdk import aws_appstream as appstream
-        
-        cfn_fleet = appstream.CfnFleet(self, "MyCfnFleet",
-            instance_type="instanceType",
-            name="name",
-        
-            # the properties below are optional
+        fleet = appstream.CfnFleet(self, "Fleet",
+            instance_type="stream.standard.small",
+            name="Fleet",
             compute_capacity=appstream.CfnFleet.ComputeCapacityProperty(
-                desired_instances=123
-            ),
-            description="description",
-            disconnect_timeout_in_seconds=123,
-            display_name="displayName",
-            domain_join_info=appstream.CfnFleet.DomainJoinInfoProperty(
-                directory_name="directoryName",
-                organizational_unit_distinguished_name="organizationalUnitDistinguishedName"
-            ),
-            enable_default_internet_access=False,
-            fleet_type="fleetType",
-            iam_role_arn="iamRoleArn",
-            idle_disconnect_timeout_in_seconds=123,
-            image_arn="imageArn",
-            image_name="imageName",
-            max_concurrent_sessions=123,
-            max_user_duration_in_seconds=123,
-            platform="platform",
-            session_script_s3_location=appstream.CfnFleet.S3LocationProperty(
-                s3_bucket="s3Bucket",
-                s3_key="s3Key"
+                desired_instances=1
             ),
-            stream_view="streamView",
-            tags=[CfnTag(
-                key="key",
-                value="value"
-            )],
-            usb_device_filter_strings=["usbDeviceFilterStrings"],
-            vpc_config=appstream.CfnFleet.VpcConfigProperty(
-                security_group_ids=["securityGroupIds"],
-                subnet_ids=["subnetIds"]
-            )
+            image_name="AppStream-AmazonLinux2-09-21-2022"
+        )
+        fleet.cfn_options.creation_policy = CfnCreationPolicy(
+            start_fleet=True
         )
     '''
 
@@ -3574,52 +3542,20 @@ class CfnFleetProps:
         :param vpc_config: The VPC configuration for the fleet. This is required for Elastic fleets, but not required for other fleet types.
 
         :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-fleet.html
-        :exampleMetadata: fixture=_generated
+        :exampleMetadata: infused
 
         Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            from aws_cdk import aws_appstream as appstream
-            
-            cfn_fleet_props = appstream.CfnFleetProps(
-                instance_type="instanceType",
-                name="name",
-            
-                # the properties below are optional
+            fleet = appstream.CfnFleet(self, "Fleet",
+                instance_type="stream.standard.small",
+                name="Fleet",
                 compute_capacity=appstream.CfnFleet.ComputeCapacityProperty(
-                    desired_instances=123
+                    desired_instances=1
                 ),
-                description="description",
-                disconnect_timeout_in_seconds=123,
-                display_name="displayName",
-                domain_join_info=appstream.CfnFleet.DomainJoinInfoProperty(
-                    directory_name="directoryName",
-                    organizational_unit_distinguished_name="organizationalUnitDistinguishedName"
-                ),
-                enable_default_internet_access=False,
-                fleet_type="fleetType",
-                iam_role_arn="iamRoleArn",
-                idle_disconnect_timeout_in_seconds=123,
-                image_arn="imageArn",
-                image_name="imageName",
-                max_concurrent_sessions=123,
-                max_user_duration_in_seconds=123,
-                platform="platform",
-                session_script_s3_location=appstream.CfnFleet.S3LocationProperty(
-                    s3_bucket="s3Bucket",
-                    s3_key="s3Key"
-                ),
-                stream_view="streamView",
-                tags=[CfnTag(
-                    key="key",
-                    value="value"
-                )],
-                usb_device_filter_strings=["usbDeviceFilterStrings"],
-                vpc_config=appstream.CfnFleet.VpcConfigProperty(
-                    security_group_ids=["securityGroupIds"],
-                    subnet_ids=["subnetIds"]
-                )
+                image_name="AppStream-AmazonLinux2-09-21-2022"
+            )
+            fleet.cfn_options.creation_policy = CfnCreationPolicy(
+                start_fleet=True
             )
         '''
         if __debug__:

aws_cdk/aws_athena/__init__.py

@@ -1270,11 +1270,8 @@ class CfnWorkGroup(
     )
     class AclConfigurationProperty:
         def __init__(self, *, s3_acl_option: builtins.str) -> None:
-            '''Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results.
-
-            When Athena stores query results in Amazon S3, the canned ACL is set with the ``x-amz-acl`` request header. For more information about S3 Object Ownership, see `Object Ownership settings <https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html#object-ownership-overview>`_ in the *Amazon S3 User Guide* .
-
-            :param s3_acl_option: The Amazon S3 canned ACL that Athena should specify when storing query results. Currently the only supported canned ACL is ``BUCKET_OWNER_FULL_CONTROL`` . If a query runs in a workgroup and the workgroup overrides client-side settings, then the Amazon S3 canned ACL specified in the workgroup's settings is used for all queries that run in the workgroup. For more information about Amazon S3 canned ACLs, see `Canned ACL <https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#canned-acl>`_ in the *Amazon S3 User Guide* .
+            '''
+            :param s3_acl_option: ``CfnWorkGroup.AclConfigurationProperty.S3AclOption``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-aclconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -1298,9 +1295,7 @@ class CfnWorkGroup(
 
         @builtins.property
         def s3_acl_option(self) -> builtins.str:
-            '''The Amazon S3 canned ACL that Athena should specify when storing query results.
-
-            Currently the only supported canned ACL is ``BUCKET_OWNER_FULL_CONTROL`` . If a query runs in a workgroup and the workgroup overrides client-side settings, then the Amazon S3 canned ACL specified in the workgroup's settings is used for all queries that run in the workgroup. For more information about Amazon S3 canned ACLs, see `Canned ACL <https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#canned-acl>`_ in the *Amazon S3 User Guide* .
+            '''``CfnWorkGroup.AclConfigurationProperty.S3AclOption``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-aclconfiguration.html#cfn-athena-workgroup-aclconfiguration-s3acloption
             '''
@@ -1326,9 +1321,8 @@ class CfnWorkGroup(
     )
     class CustomerContentEncryptionConfigurationProperty:
         def __init__(self, *, kms_key: builtins.str) -> None:
-            '''Specifies the KMS key that is used to encrypt the user's data stores in Athena.
-
-            :param kms_key: The KMS key that is used to encrypt the user's data stores in Athena.
+            '''
+            :param kms_key: ``CfnWorkGroup.CustomerContentEncryptionConfigurationProperty.KmsKey``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-customercontentencryptionconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -1352,7 +1346,7 @@ class CfnWorkGroup(
 
         @builtins.property
         def kms_key(self) -> builtins.str:
-            '''The KMS key that is used to encrypt the user's data stores in Athena.
+            '''``CfnWorkGroup.CustomerContentEncryptionConfigurationProperty.KmsKey``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-customercontentencryptionconfiguration.html#cfn-athena-workgroup-customercontentencryptionconfiguration-kmskey
             '''
@@ -1546,9 +1540,9 @@ class CfnWorkGroup(
 
             These are known as "client-side settings". If workgroup settings override client-side settings, then the query uses the workgroup settings.
 
-            :param acl_configuration: Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results. Currently the only supported canned ACL is ``BUCKET_OWNER_FULL_CONTROL`` . This is a client-side setting. If workgroup settings override client-side settings, then the query uses the ACL configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. For more information, see ``WorkGroupConfiguration$EnforceWorkGroupConfiguration`` and `Workgroup Settings Override Client-Side Settings <https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html>`_ .
+            :param acl_configuration: ``CfnWorkGroup.ResultConfigurationProperty.AclConfiguration``.
             :param encryption_configuration: If query results are encrypted in Amazon S3, indicates the encryption option used (for example, ``SSE_KMS`` or ``CSE_KMS`` ) and key information. This is a client-side setting. If workgroup settings override client-side settings, then the query uses the encryption configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See ``EnforceWorkGroupConfiguration`` and `Workgroup Settings Override Client-Side Settings <https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html>`_ .
-            :param expected_bucket_owner: The AWS account ID that you expect to be the owner of the Amazon S3 bucket specified by ``ResultConfiguration$OutputLocation`` . If set, Athena uses the value for ``ExpectedBucketOwner`` when it makes Amazon S3 calls to your specified output location. If the ``ExpectedBucketOwner`` AWS account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error. This is a client-side setting. If workgroup settings override client-side settings, then the query uses the ``ExpectedBucketOwner`` setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See ``WorkGroupConfiguration$EnforceWorkGroupConfiguration`` and `Workgroup Settings Override Client-Side Settings <https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html>`_ .
+            :param expected_bucket_owner: ``CfnWorkGroup.ResultConfigurationProperty.ExpectedBucketOwner``.
             :param output_location: The location in Amazon S3 where your query results are stored, such as ``s3://path/to/query/bucket/`` . To run a query, you must specify the query results location using either a client-side setting for individual queries or a location specified by the workgroup. If workgroup settings override client-side settings, then the query uses the location specified for the workgroup. If no query location is set, Athena issues an error. For more information, see `Working with Query Results, Output Files, and Query History <https://docs.aws.amazon.com/athena/latest/ug/querying.html>`_ and ``EnforceWorkGroupConfiguration`` .
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfiguration.html
@@ -1594,9 +1588,7 @@ class CfnWorkGroup(
         def acl_configuration(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWorkGroup.AclConfigurationProperty"]]:
-            '''Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results.
-
-            Currently the only supported canned ACL is ``BUCKET_OWNER_FULL_CONTROL`` . This is a client-side setting. If workgroup settings override client-side settings, then the query uses the ACL configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. For more information, see ``WorkGroupConfiguration$EnforceWorkGroupConfiguration`` and `Workgroup Settings Override Client-Side Settings <https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html>`_ .
+            '''``CfnWorkGroup.ResultConfigurationProperty.AclConfiguration``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-aclconfiguration
             '''
@@ -1618,11 +1610,7 @@ class CfnWorkGroup(
 
         @builtins.property
         def expected_bucket_owner(self) -> typing.Optional[builtins.str]:
-            '''The AWS account ID that you expect to be the owner of the Amazon S3 bucket specified by ``ResultConfiguration$OutputLocation`` .
-
-            If set, Athena uses the value for ``ExpectedBucketOwner`` when it makes Amazon S3 calls to your specified output location. If the ``ExpectedBucketOwner`` AWS account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error.
-
-            This is a client-side setting. If workgroup settings override client-side settings, then the query uses the ``ExpectedBucketOwner`` setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See ``WorkGroupConfiguration$EnforceWorkGroupConfiguration`` and `Workgroup Settings Override Client-Side Settings <https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html>`_ .
+            '''``CfnWorkGroup.ResultConfigurationProperty.ExpectedBucketOwner``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-expectedbucketowner
             '''
@@ -1684,12 +1672,12 @@ class CfnWorkGroup(
 
             The ``EnforceWorkGroupConfiguration`` option determines whether workgroup settings override client-side query settings.
 
-            :param additional_configuration: Specifies a user defined JSON string that is passed to the notebook engine.
+            :param additional_configuration: ``CfnWorkGroup.WorkGroupConfigurationProperty.AdditionalConfiguration``.
             :param bytes_scanned_cutoff_per_query: The upper limit (cutoff) for the amount of bytes a single query in a workgroup is allowed to scan. No default is defined. .. epigraph:: This property currently supports integer types. Support for long values is planned.
-            :param customer_content_encryption_configuration: Specifies the KMS key that is used to encrypt the user's data stores in Athena.
+            :param customer_content_encryption_configuration: ``CfnWorkGroup.WorkGroupConfigurationProperty.CustomerContentEncryptionConfiguration``.
             :param enforce_work_group_configuration: If set to "true", the settings for the workgroup override client-side settings. If set to "false", client-side settings are used. For more information, see `Workgroup Settings Override Client-Side Settings <https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html>`_ .
-            :param engine_version: The engine version that all queries running on the workgroup use. Queries on the ``AmazonAthenaPreviewFunctionality`` workgroup run on the preview engine regardless of this setting.
-            :param execution_role: Role used in a session for accessing the user's resources.
+            :param engine_version: ``CfnWorkGroup.WorkGroupConfigurationProperty.EngineVersion``.
+            :param execution_role: ``CfnWorkGroup.WorkGroupConfigurationProperty.ExecutionRole``.
             :param publish_cloud_watch_metrics_enabled: Indicates that the Amazon CloudWatch metrics are enabled for the workgroup.
             :param requester_pays_enabled: If set to ``true`` , allows members assigned to a workgroup to reference Amazon S3 Requester Pays buckets in queries. If set to ``false`` , workgroup members cannot query data from Requester Pays buckets, and queries that retrieve data from Requester Pays buckets cause an error. The default is ``false`` . For more information about Requester Pays buckets, see `Requester Pays Buckets <https://docs.aws.amazon.com/AmazonS3/latest/dev/RequesterPaysBuckets.html>`_ in the *Amazon Simple Storage Service Developer Guide* .
             :param result_configuration: Specifies the location in Amazon S3 where query results are stored and the encryption option, if any, used for query results. For more information, see `Working with Query Results, Output Files, and Query History <https://docs.aws.amazon.com/athena/latest/ug/querying.html>`_ .
@@ -1765,7 +1753,7 @@ class CfnWorkGroup(
 
         @builtins.property
         def additional_configuration(self) -> typing.Optional[builtins.str]:
-            '''Specifies a user defined JSON string that is passed to the notebook engine.
+            '''``CfnWorkGroup.WorkGroupConfigurationProperty.AdditionalConfiguration``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-additionalconfiguration
             '''
@@ -1790,7 +1778,7 @@ class CfnWorkGroup(
         def customer_content_encryption_configuration(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWorkGroup.CustomerContentEncryptionConfigurationProperty"]]:
-            '''Specifies the KMS key that is used to encrypt the user's data stores in Athena.
+            '''``CfnWorkGroup.WorkGroupConfigurationProperty.CustomerContentEncryptionConfiguration``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-customercontentencryptionconfiguration
             '''
@@ -1814,9 +1802,7 @@ class CfnWorkGroup(
         def engine_version(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnWorkGroup.EngineVersionProperty"]]:
-            '''The engine version that all queries running on the workgroup use.
-
-            Queries on the ``AmazonAthenaPreviewFunctionality`` workgroup run on the preview engine regardless of this setting.
+            '''``CfnWorkGroup.WorkGroupConfigurationProperty.EngineVersion``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-engineversion
             '''
@@ -1825,7 +1811,7 @@ class CfnWorkGroup(
 
         @builtins.property
         def execution_role(self) -> typing.Optional[builtins.str]:
-            '''Role used in a session for accessing the user's resources.
+            '''``CfnWorkGroup.WorkGroupConfigurationProperty.ExecutionRole``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-executionrole
             '''

aws_cdk/aws_backup/__init__.py

@@ -205,11 +205,10 @@ By default access is not restricted.
 Use the `lockConfiguration` property to enable [AWS Backup Vault Lock](https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html):
 
 ```python
-# Example automatically generated from non-compiling source. May contain errors.
-BackupVault(stack, "Vault",
-    lock_configuration={
-        "min_retention": Duration.days(30)
-    }
+backup.BackupVault(self, "Vault",
+    lock_configuration=backup.LockConfiguration(
+        min_retention=Duration.days(30)
+    )
 )
 ```
 
@@ -2853,10 +2852,9 @@ class CfnBackupSelection(
             condition_key: typing.Optional[builtins.str] = None,
             condition_value: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Includes information about tags you define to assign tagged resources to a backup plan.
-
-            :param condition_key: The key in a key-value pair. For example, in the tag ``Department: Accounting`` , ``Department`` is the key.
-            :param condition_value: The value in a key-value pair. For example, in the tag ``Department: Accounting`` , ``Accounting`` is the value.
+            '''
+            :param condition_key: ``CfnBackupSelection.ConditionParameterProperty.ConditionKey``.
+            :param condition_value: ``CfnBackupSelection.ConditionParameterProperty.ConditionValue``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-backupselection-conditionparameter.html
             :exampleMetadata: fixture=_generated
@@ -2884,9 +2882,7 @@ class CfnBackupSelection(
 
         @builtins.property
         def condition_key(self) -> typing.Optional[builtins.str]:
-            '''The key in a key-value pair.
-
-            For example, in the tag ``Department: Accounting`` , ``Department`` is the key.
+            '''``CfnBackupSelection.ConditionParameterProperty.ConditionKey``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-backupselection-conditionparameter.html#cfn-backup-backupselection-conditionparameter-conditionkey
             '''
@@ -2895,9 +2891,7 @@ class CfnBackupSelection(
 
         @builtins.property
         def condition_value(self) -> typing.Optional[builtins.str]:
-            '''The value in a key-value pair.
-
-            For example, in the tag ``Department: Accounting`` , ``Accounting`` is the value.
+            '''``CfnBackupSelection.ConditionParameterProperty.ConditionValue``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-backupselection-conditionparameter.html#cfn-backup-backupselection-conditionparameter-conditionvalue
             '''
@@ -3030,14 +3024,11 @@ class CfnBackupSelection(
             string_not_equals: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnBackupSelection.ConditionParameterProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
             string_not_like: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnBackupSelection.ConditionParameterProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
         ) -> None:
-            '''Contains information about which resources to include or exclude from a backup plan using their tags.
-
-            Conditions are case sensitive.
-
-            :param string_equals: Filters the values of your tagged resources for only those resources that you tagged with the same value. Also called "exact matching."
-            :param string_like: Filters the values of your tagged resources for matching tag values with the use of a wildcard character (*) anywhere in the string. For example, "prod*" or "*rod*" matches the tag value "production".
-            :param string_not_equals: Filters the values of your tagged resources for only those resources that you tagged that do not have the same value. Also called "negated matching."
-            :param string_not_like: Filters the values of your tagged resources for non-matching tag values with the use of a wildcard character (*) anywhere in the string.
+            '''
+            :param string_equals: ``CfnBackupSelection.ConditionsProperty.StringEquals``.
+            :param string_like: ``CfnBackupSelection.ConditionsProperty.StringLike``.
+            :param string_not_equals: ``CfnBackupSelection.ConditionsProperty.StringNotEquals``.
+            :param string_not_like: ``CfnBackupSelection.ConditionsProperty.StringNotLike``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-backupselection-conditions.html
             :exampleMetadata: fixture=_generated
@@ -3087,9 +3078,7 @@ class CfnBackupSelection(
         def string_equals(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnBackupSelection.ConditionParameterProperty"]]]]:
-            '''Filters the values of your tagged resources for only those resources that you tagged with the same value.
-
-            Also called "exact matching."
+            '''``CfnBackupSelection.ConditionsProperty.StringEquals``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-backupselection-conditions.html#cfn-backup-backupselection-conditions-stringequals
             '''
@@ -3100,9 +3089,7 @@ class CfnBackupSelection(
         def string_like(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnBackupSelection.ConditionParameterProperty"]]]]:
-            '''Filters the values of your tagged resources for matching tag values with the use of a wildcard character (*) anywhere in the string.
-
-            For example, "prod*" or "*rod*" matches the tag value "production".
+            '''``CfnBackupSelection.ConditionsProperty.StringLike``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-backupselection-conditions.html#cfn-backup-backupselection-conditions-stringlike
             '''
@@ -3113,9 +3100,7 @@ class CfnBackupSelection(
         def string_not_equals(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnBackupSelection.ConditionParameterProperty"]]]]:
-            '''Filters the values of your tagged resources for only those resources that you tagged that do not have the same value.
-
-            Also called "negated matching."
+            '''``CfnBackupSelection.ConditionsProperty.StringNotEquals``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-backupselection-conditions.html#cfn-backup-backupselection-conditions-stringnotequals
             '''
@@ -3126,7 +3111,7 @@ class CfnBackupSelection(
         def string_not_like(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnBackupSelection.ConditionParameterProperty"]]]]:
-            '''Filters the values of your tagged resources for non-matching tag values with the use of a wildcard character (*) anywhere in the string.
+            '''``CfnBackupSelection.ConditionsProperty.StringNotLike``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-backupselection-conditions.html#cfn-backup-backupselection-conditions-stringnotlike
             '''
@@ -4185,16 +4170,10 @@ class CfnFramework(
             compliance_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
             tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
-            '''A framework consists of one or more controls.
-
-            Each control has its own control scope. The control scope can include one or more resource types, a combination of a tag key and value, or a combination of one resource type and one resource ID. If no scope is specified, evaluations for the rule are triggered when any resource in your recording group changes in configuration.
-            .. epigraph::
-
-               To set a control scope that includes all of a particular resource, leave the ``ControlScope`` empty or do not pass it when calling ``CreateFramework`` .
-
-            :param compliance_resource_ids: The ID of the only AWS resource that you want your control scope to contain.
-            :param compliance_resource_types: Describes whether the control scope includes one or more types of resources, such as ``EFS`` or ``RDS`` .
-            :param tags: The tag key-value pair applied to those AWS resources that you want to trigger an evaluation for a rule. A maximum of one key-value pair can be provided. The tag value is optional, but it cannot be an empty string. The structure to assign a tag is: ``[{"Key":"string","Value":"string"}]`` .
+            '''
+            :param compliance_resource_ids: ``CfnFramework.ControlScopeProperty.ComplianceResourceIds``.
+            :param compliance_resource_types: ``CfnFramework.ControlScopeProperty.ComplianceResourceTypes``.
+            :param tags: ``CfnFramework.ControlScopeProperty.Tags``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-framework-controlscope.html
             :exampleMetadata: fixture=_generated
@@ -4229,7 +4208,7 @@ class CfnFramework(
 
         @builtins.property
         def compliance_resource_ids(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''The ID of the only AWS resource that you want your control scope to contain.
+            '''``CfnFramework.ControlScopeProperty.ComplianceResourceIds``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-framework-controlscope.html#cfn-backup-framework-controlscope-complianceresourceids
             '''
@@ -4240,7 +4219,7 @@ class CfnFramework(
         def compliance_resource_types(
             self,
         ) -> typing.Optional[typing.List[builtins.str]]:
-            '''Describes whether the control scope includes one or more types of resources, such as ``EFS`` or ``RDS`` .
+            '''``CfnFramework.ControlScopeProperty.ComplianceResourceTypes``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-framework-controlscope.html#cfn-backup-framework-controlscope-complianceresourcetypes
             '''
@@ -4249,9 +4228,7 @@ class CfnFramework(
 
         @builtins.property
         def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-            '''The tag key-value pair applied to those AWS resources that you want to trigger an evaluation for a rule.
-
-            A maximum of one key-value pair can be provided. The tag value is optional, but it cannot be an empty string. The structure to assign a tag is: ``[{"Key":"string","Value":"string"}]`` .
+            '''``CfnFramework.ControlScopeProperty.Tags``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-framework-controlscope.html#cfn-backup-framework-controlscope-tags
             '''
@@ -4734,11 +4711,10 @@ class CfnReportPlan(
             formats: typing.Optional[typing.Sequence[builtins.str]] = None,
             s3_key_prefix: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Contains information from your report plan about where to deliver your reports, specifically your Amazon S3 bucket name, S3 key prefix, and the formats of your reports.
-
-            :param s3_bucket_name: The unique name of the S3 bucket that receives your reports.
-            :param formats: A list of the format of your reports: ``CSV`` , ``JSON`` , or both. If not specified, the default format is ``CSV`` .
-            :param s3_key_prefix: The prefix for where AWS Backup Audit Manager delivers your reports to Amazon S3. The prefix is this part of the following path: s3://your-bucket-name/ ``prefix`` /Backup/us-west-2/year/month/day/report-name. If not specified, there is no prefix.
+            '''
+            :param s3_bucket_name: ``CfnReportPlan.ReportDeliveryChannelProperty.S3BucketName``.
+            :param formats: ``CfnReportPlan.ReportDeliveryChannelProperty.Formats``.
+            :param s3_key_prefix: ``CfnReportPlan.ReportDeliveryChannelProperty.S3KeyPrefix``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-reportplan-reportdeliverychannel.html
             :exampleMetadata: fixture=_generated
@@ -4772,7 +4748,7 @@ class CfnReportPlan(
 
         @builtins.property
         def s3_bucket_name(self) -> builtins.str:
-            '''The unique name of the S3 bucket that receives your reports.
+            '''``CfnReportPlan.ReportDeliveryChannelProperty.S3BucketName``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-reportplan-reportdeliverychannel.html#cfn-backup-reportplan-reportdeliverychannel-s3bucketname
             '''
@@ -4782,9 +4758,7 @@ class CfnReportPlan(
 
         @builtins.property
         def formats(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''A list of the format of your reports: ``CSV`` , ``JSON`` , or both.
-
-            If not specified, the default format is ``CSV`` .
+            '''``CfnReportPlan.ReportDeliveryChannelProperty.Formats``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-reportplan-reportdeliverychannel.html#cfn-backup-reportplan-reportdeliverychannel-formats
             '''
@@ -4793,9 +4767,7 @@ class CfnReportPlan(
 
         @builtins.property
         def s3_key_prefix(self) -> typing.Optional[builtins.str]:
-            '''The prefix for where AWS Backup Audit Manager delivers your reports to Amazon S3.
-
-            The prefix is this part of the following path: s3://your-bucket-name/ ``prefix`` /Backup/us-west-2/year/month/day/report-name. If not specified, there is no prefix.
+            '''``CfnReportPlan.ReportDeliveryChannelProperty.S3KeyPrefix``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-reportplan-reportdeliverychannel.html#cfn-backup-reportplan-reportdeliverychannel-s3keyprefix
             '''
@@ -4834,13 +4806,12 @@ class CfnReportPlan(
             organization_units: typing.Optional[typing.Sequence[builtins.str]] = None,
             regions: typing.Optional[typing.Sequence[builtins.str]] = None,
         ) -> None:
-            '''Contains detailed information about a report setting.
-
-            :param report_template: Identifies the report template for the report. Reports are built using a report template. The report templates are:. ``RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT``
-            :param accounts: These are the accounts to be included in the report.
-            :param framework_arns: The Amazon Resource Names (ARNs) of the frameworks a report covers.
-            :param organization_units: These are the Organizational Units to be included in the report.
-            :param regions: These are the Regions to be included in the report.
+            '''
+            :param report_template: ``CfnReportPlan.ReportSettingProperty.ReportTemplate``.
+            :param accounts: ``CfnReportPlan.ReportSettingProperty.Accounts``.
+            :param framework_arns: ``CfnReportPlan.ReportSettingProperty.FrameworkArns``.
+            :param organization_units: ``CfnReportPlan.ReportSettingProperty.OrganizationUnits``.
+            :param regions: ``CfnReportPlan.ReportSettingProperty.Regions``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-reportplan-reportsetting.html
             :exampleMetadata: fixture=_generated
@@ -4882,9 +4853,7 @@ class CfnReportPlan(
 
         @builtins.property
         def report_template(self) -> builtins.str:
-            '''Identifies the report template for the report. Reports are built using a report template. The report templates are:.
-
-            ``RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT``
+            '''``CfnReportPlan.ReportSettingProperty.ReportTemplate``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-reportplan-reportsetting.html#cfn-backup-reportplan-reportsetting-reporttemplate
             '''
@@ -4894,7 +4863,7 @@ class CfnReportPlan(
 
         @builtins.property
         def accounts(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''These are the accounts to be included in the report.
+            '''``CfnReportPlan.ReportSettingProperty.Accounts``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-reportplan-reportsetting.html#cfn-backup-reportplan-reportsetting-accounts
             '''
@@ -4903,7 +4872,7 @@ class CfnReportPlan(
 
         @builtins.property
         def framework_arns(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''The Amazon Resource Names (ARNs) of the frameworks a report covers.
+            '''``CfnReportPlan.ReportSettingProperty.FrameworkArns``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-reportplan-reportsetting.html#cfn-backup-reportplan-reportsetting-frameworkarns
             '''
@@ -4912,7 +4881,7 @@ class CfnReportPlan(
 
         @builtins.property
         def organization_units(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''These are the Organizational Units to be included in the report.
+            '''``CfnReportPlan.ReportSettingProperty.OrganizationUnits``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-reportplan-reportsetting.html#cfn-backup-reportplan-reportsetting-organizationunits
             '''
@@ -4921,7 +4890,7 @@ class CfnReportPlan(
 
         @builtins.property
         def regions(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''These are the Regions to be included in the report.
+            '''``CfnReportPlan.ReportSettingProperty.Regions``.
 
             :link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-reportplan-reportsetting.html#cfn-backup-reportplan-reportsetting-regions
             '''
@@ -5219,21 +5188,14 @@ class LockConfiguration:
         :param max_retention: The maximum retention period that the vault retains its recovery points. If this parameter is specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or shorter than the maximum retention period. If the job's retention period is longer than that maximum retention period, then the vault fails the backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already saved in the vault prior to Vault Lock are not affected. Default: - Vault Lock does not enforce a maximum retention period
 
         :see: https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html
-        :exampleMetadata: fixture=_generated
+        :exampleMetadata: infused
 
         Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            import aws_cdk as cdk
-            from aws_cdk import aws_backup as backup
-            
-            lock_configuration = backup.LockConfiguration(
-                min_retention=cdk.Duration.minutes(30),
-            
-                # the properties below are optional
-                changeable_for=cdk.Duration.minutes(30),
-                max_retention=cdk.Duration.minutes(30)
+            backup.BackupVault(self, "Vault",
+                lock_configuration=backup.LockConfiguration(
+                    min_retention=Duration.days(30)
+                )
             )
         '''
         if __debug__: