aws-cdk-lib 2.95.1__py3-none-any.whl → 2.96.0__py3-none-any.whl

aws_cdk/aws_securityhub/__init__.py

@@ -920,41 +920,41 @@ class CfnAutomationRule(
         ) -> None:
             '''The criteria that determine which findings a rule applies to.
 
-            :param aws_account_id: The AWS account ID in which a finding was generated.
-            :param company_name: The name of the company for the product that generated the finding. For control-based findings, the company is AWS .
-            :param compliance_associated_standards_id: The unique identifier of a standard in which a control is enabled. This field consists of the resource portion of the Amazon Resource Name (ARN) returned for a standard in the `DescribeStandards <https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html>`_ API response.
-            :param compliance_security_control_id: The security control ID for which a finding was generated. Security control IDs are the same across standards.
-            :param compliance_status: The result of a security check. This field is only used for findings generated from controls.
-            :param confidence: The likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. ``Confidence`` is scored on a 0–100 basis using a ratio scale. A value of ``0`` means 0 percent confidence, and a value of ``100`` means 100 percent confidence. For example, a data exfiltration detection based on a statistical deviation of network traffic has low confidence because an actual exfiltration hasn't been verified. For more information, see `Confidence <https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-confidence>`_ in the *AWS Security Hub User Guide* .
-            :param created_at: A timestamp that indicates when this finding record was created. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
-            :param criticality: The level of importance that is assigned to the resources that are associated with a finding. ``Criticality`` is scored on a 0–100 basis, using a ratio scale that supports only full integers. A score of ``0`` means that the underlying resources have no criticality, and a score of ``100`` is reserved for the most critical resources. For more information, see `Criticality <https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-criticality>`_ in the *AWS Security Hub User Guide* .
-            :param description: A finding's description.
-            :param first_observed_at: A timestamp that indicates when the potential security issue captured by a finding was first observed by the security findings product. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
-            :param generator_id: The identifier for the solution-specific component that generated a finding.
-            :param id: The product-specific identifier for a finding.
-            :param last_observed_at: A timestamp that indicates when the potential security issue captured by a finding was most recently observed by the security findings product. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
-            :param note_text: The text of a user-defined note that's added to a finding.
-            :param note_updated_at: The timestamp of when the note was updated. Uses the date-time format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://www.rfc-editor.org/rfc/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
-            :param note_updated_by: The principal that created a note.
-            :param product_arn: The Amazon Resource Name (ARN) for a third-party product that generated a finding in Security Hub.
-            :param product_name: Provides the name of the product that generated the finding. For control-based findings, the product name is Security Hub.
-            :param record_state: Provides the current state of a finding.
-            :param related_findings_id: The product-generated identifier for a related finding.
-            :param related_findings_product_arn: The ARN for the product that generated a related finding.
-            :param resource_details_other: Custom fields and values about the resource that a finding pertains to.
-            :param resource_id: The identifier for the given resource type. For AWS resources that are identified by Amazon Resource Names (ARNs), this is the ARN. For AWS resources that lack ARNs, this is the identifier as defined by the AWS service that created the resource. For non- AWS resources, this is a unique identifier that is associated with the resource.
-            :param resource_partition: The partition in which the resource that the finding pertains to is located. A partition is a group of AWS Regions . Each AWS account is scoped to one partition.
-            :param resource_region: The AWS Region where the resource that a finding pertains to is located.
-            :param resource_tags: A list of AWS tags associated with a resource at the time the finding was processed.
-            :param resource_type: A finding's title.
-            :param severity_label: The severity value of the finding.
-            :param source_url: Provides a URL that links to a page about the current finding in the finding product.
-            :param title: A finding's title.
-            :param type: One or more finding types in the format of namespace/category/classifier that classify a finding. For a list of namespaces, classifiers, and categories, see `Types taxonomy for ASFF <https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-type-taxonomy.html>`_ in the *AWS Security Hub User Guide* .
-            :param updated_at: A timestamp that indicates when the finding record was most recently updated. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
-            :param user_defined_fields: A list of user-defined name and value string pairs added to a finding.
-            :param verification_state: Provides the veracity of a finding.
-            :param workflow_status: Provides information about the status of the investigation into a finding.
+            :param aws_account_id: The AWS account ID in which a finding was generated. Array Members: Minimum number of 1 item. Maximum number of 100 items.
+            :param company_name: The name of the company for the product that generated the finding. For control-based findings, the company is AWS . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param compliance_associated_standards_id: The unique identifier of a standard in which a control is enabled. This field consists of the resource portion of the Amazon Resource Name (ARN) returned for a standard in the `DescribeStandards <https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html>`_ API response. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param compliance_security_control_id: The security control ID for which a finding was generated. Security control IDs are the same across standards. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param compliance_status: The result of a security check. This field is only used for findings generated from controls. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param confidence: The likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. ``Confidence`` is scored on a 0–100 basis using a ratio scale. A value of ``0`` means 0 percent confidence, and a value of ``100`` means 100 percent confidence. For example, a data exfiltration detection based on a statistical deviation of network traffic has low confidence because an actual exfiltration hasn't been verified. For more information, see `Confidence <https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-confidence>`_ in the *AWS Security Hub User Guide* . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param created_at: A timestamp that indicates when this finding record was created. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param criticality: The level of importance that is assigned to the resources that are associated with a finding. ``Criticality`` is scored on a 0–100 basis, using a ratio scale that supports only full integers. A score of ``0`` means that the underlying resources have no criticality, and a score of ``100`` is reserved for the most critical resources. For more information, see `Criticality <https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-criticality>`_ in the *AWS Security Hub User Guide* . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param description: A finding's description. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param first_observed_at: A timestamp that indicates when the potential security issue captured by a finding was first observed by the security findings product. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param generator_id: The identifier for the solution-specific component that generated a finding. Array Members: Minimum number of 1 item. Maximum number of 100 items.
+            :param id: The product-specific identifier for a finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param last_observed_at: A timestamp that indicates when the potential security issue captured by a finding was most recently observed by the security findings product. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param note_text: The text of a user-defined note that's added to a finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param note_updated_at: The timestamp of when the note was updated. Uses the date-time format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://www.rfc-editor.org/rfc/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param note_updated_by: The principal that created a note. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param product_arn: The Amazon Resource Name (ARN) for a third-party product that generated a finding in Security Hub. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param product_name: Provides the name of the product that generated the finding. For control-based findings, the product name is Security Hub. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param record_state: Provides the current state of a finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param related_findings_id: The product-generated identifier for a related finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param related_findings_product_arn: The ARN for the product that generated a related finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param resource_details_other: Custom fields and values about the resource that a finding pertains to. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param resource_id: The identifier for the given resource type. For AWS resources that are identified by Amazon Resource Names (ARNs), this is the ARN. For AWS resources that lack ARNs, this is the identifier as defined by the AWS service that created the resource. For non- AWS resources, this is a unique identifier that is associated with the resource. Array Members: Minimum number of 1 item. Maximum number of 100 items.
+            :param resource_partition: The partition in which the resource that the finding pertains to is located. A partition is a group of AWS Regions . Each AWS account is scoped to one partition. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param resource_region: The AWS Region where the resource that a finding pertains to is located. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param resource_tags: A list of AWS tags associated with a resource at the time the finding was processed. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param resource_type: A finding's title. Array Members: Minimum number of 1 item. Maximum number of 100 items.
+            :param severity_label: The severity value of the finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param source_url: Provides a URL that links to a page about the current finding in the finding product. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param title: A finding's title. Array Members: Minimum number of 1 item. Maximum number of 100 items.
+            :param type: One or more finding types in the format of namespace/category/classifier that classify a finding. For a list of namespaces, classifiers, and categories, see `Types taxonomy for ASFF <https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-type-taxonomy.html>`_ in the *AWS Security Hub User Guide* . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param updated_at: A timestamp that indicates when the finding record was most recently updated. Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` . Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param user_defined_fields: A list of user-defined name and value string pairs added to a finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param verification_state: Provides the veracity of a finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
+            :param workflow_status: Provides information about the status of the investigation into a finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html
             :exampleMetadata: fixture=_generated
@@ -1248,6 +1248,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''The AWS account ID in which a finding was generated.
 
+            Array Members: Minimum number of 1 item. Maximum number of 100 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-awsaccountid
             '''
             result = self._values.get("aws_account_id")
@@ -1261,6 +1263,8 @@ class CfnAutomationRule(
 
             For control-based findings, the company is AWS .
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-companyname
             '''
             result = self._values.get("company_name")
@@ -1274,6 +1278,8 @@ class CfnAutomationRule(
 
             This field consists of the resource portion of the Amazon Resource Name (ARN) returned for a standard in the `DescribeStandards <https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html>`_ API response.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-complianceassociatedstandardsid
             '''
             result = self._values.get("compliance_associated_standards_id")
@@ -1283,9 +1289,9 @@ class CfnAutomationRule(
         def compliance_security_control_id(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
-            '''The security control ID for which a finding was generated.
+            '''The security control ID for which a finding was generated. Security control IDs are the same across standards.
 
-            Security control IDs are the same across standards.
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-compliancesecuritycontrolid
             '''
@@ -1296,9 +1302,9 @@ class CfnAutomationRule(
         def compliance_status(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
-            '''The result of a security check.
+            '''The result of a security check. This field is only used for findings generated from controls.
 
-            This field is only used for findings generated from controls.
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-compliancestatus
             '''
@@ -1313,6 +1319,8 @@ class CfnAutomationRule(
 
             ``Confidence`` is scored on a 0–100 basis using a ratio scale. A value of ``0`` means 0 percent confidence, and a value of ``100`` means 100 percent confidence. For example, a data exfiltration detection based on a statistical deviation of network traffic has low confidence because an actual exfiltration hasn't been verified. For more information, see `Confidence <https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-confidence>`_ in the *AWS Security Hub User Guide* .
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-confidence
             '''
             result = self._values.get("confidence")
@@ -1326,6 +1334,8 @@ class CfnAutomationRule(
 
             Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-createdat
             '''
             result = self._values.get("created_at")
@@ -1339,6 +1349,8 @@ class CfnAutomationRule(
 
             ``Criticality`` is scored on a 0–100 basis, using a ratio scale that supports only full integers. A score of ``0`` means that the underlying resources have no criticality, and a score of ``100`` is reserved for the most critical resources. For more information, see `Criticality <https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-criticality>`_ in the *AWS Security Hub User Guide* .
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-criticality
             '''
             result = self._values.get("criticality")
@@ -1350,6 +1362,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''A finding's description.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-description
             '''
             result = self._values.get("description")
@@ -1363,6 +1377,8 @@ class CfnAutomationRule(
 
             Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-firstobservedat
             '''
             result = self._values.get("first_observed_at")
@@ -1374,6 +1390,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''The identifier for the solution-specific component that generated a finding.
 
+            Array Members: Minimum number of 1 item. Maximum number of 100 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-generatorid
             '''
             result = self._values.get("generator_id")
@@ -1385,6 +1403,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''The product-specific identifier for a finding.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-id
             '''
             result = self._values.get("id")
@@ -1398,6 +1418,8 @@ class CfnAutomationRule(
 
             Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-lastobservedat
             '''
             result = self._values.get("last_observed_at")
@@ -1409,6 +1431,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''The text of a user-defined note that's added to a finding.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-notetext
             '''
             result = self._values.get("note_text")
@@ -1422,6 +1446,8 @@ class CfnAutomationRule(
 
             Uses the date-time format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://www.rfc-editor.org/rfc/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-noteupdatedat
             '''
             result = self._values.get("note_updated_at")
@@ -1433,6 +1459,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''The principal that created a note.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-noteupdatedby
             '''
             result = self._values.get("note_updated_by")
@@ -1444,6 +1472,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''The Amazon Resource Name (ARN) for a third-party product that generated a finding in Security Hub.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-productarn
             '''
             result = self._values.get("product_arn")
@@ -1453,9 +1483,9 @@ class CfnAutomationRule(
         def product_name(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
-            '''Provides the name of the product that generated the finding.
+            '''Provides the name of the product that generated the finding. For control-based findings, the product name is Security Hub.
 
-            For control-based findings, the product name is Security Hub.
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-productname
             '''
@@ -1468,6 +1498,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''Provides the current state of a finding.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-recordstate
             '''
             result = self._values.get("record_state")
@@ -1479,6 +1511,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''The product-generated identifier for a related finding.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-relatedfindingsid
             '''
             result = self._values.get("related_findings_id")
@@ -1490,6 +1524,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''The ARN for the product that generated a related finding.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-relatedfindingsproductarn
             '''
             result = self._values.get("related_findings_product_arn")
@@ -1501,6 +1537,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.MapFilterProperty"]]]]:
             '''Custom fields and values about the resource that a finding pertains to.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-resourcedetailsother
             '''
             result = self._values.get("resource_details_other")
@@ -1514,6 +1552,8 @@ class CfnAutomationRule(
 
             For AWS resources that are identified by Amazon Resource Names (ARNs), this is the ARN. For AWS resources that lack ARNs, this is the identifier as defined by the AWS service that created the resource. For non- AWS resources, this is a unique identifier that is associated with the resource.
 
+            Array Members: Minimum number of 1 item. Maximum number of 100 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-resourceid
             '''
             result = self._values.get("resource_id")
@@ -1527,6 +1567,8 @@ class CfnAutomationRule(
 
             A partition is a group of AWS Regions . Each AWS account is scoped to one partition.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-resourcepartition
             '''
             result = self._values.get("resource_partition")
@@ -1538,6 +1580,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''The AWS Region where the resource that a finding pertains to is located.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-resourceregion
             '''
             result = self._values.get("resource_region")
@@ -1549,6 +1593,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.MapFilterProperty"]]]]:
             '''A list of AWS tags associated with a resource at the time the finding was processed.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-resourcetags
             '''
             result = self._values.get("resource_tags")
@@ -1560,6 +1606,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''A finding's title.
 
+            Array Members: Minimum number of 1 item. Maximum number of 100 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-resourcetype
             '''
             result = self._values.get("resource_type")
@@ -1571,6 +1619,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''The severity value of the finding.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-severitylabel
             '''
             result = self._values.get("severity_label")
@@ -1582,6 +1632,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''Provides a URL that links to a page about the current finding in the finding product.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-sourceurl
             '''
             result = self._values.get("source_url")
@@ -1593,6 +1645,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''A finding's title.
 
+            Array Members: Minimum number of 1 item. Maximum number of 100 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-title
             '''
             result = self._values.get("title")
@@ -1606,6 +1660,8 @@ class CfnAutomationRule(
 
             For a list of namespaces, classifiers, and categories, see `Types taxonomy for ASFF <https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-type-taxonomy.html>`_ in the *AWS Security Hub User Guide* .
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-type
             '''
             result = self._values.get("type")
@@ -1619,6 +1675,8 @@ class CfnAutomationRule(
 
             Uses the ``date-time`` format specified in `RFC 3339 section 5.6, Internet Date/Time Format <https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6>`_ . The value cannot contain spaces. For example, ``2020-03-22T13:22:13.933Z`` .
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-updatedat
             '''
             result = self._values.get("updated_at")
@@ -1630,6 +1688,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.MapFilterProperty"]]]]:
             '''A list of user-defined name and value string pairs added to a finding.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-userdefinedfields
             '''
             result = self._values.get("user_defined_fields")
@@ -1641,6 +1701,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''Provides the veracity of a finding.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-verificationstate
             '''
             result = self._values.get("verification_state")
@@ -1652,6 +1714,8 @@ class CfnAutomationRule(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnAutomationRule.StringFilterProperty"]]]]:
             '''Provides information about the status of the investigation into a finding.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-workflowstatus
             '''
             result = self._values.get("workflow_status")
@@ -2102,7 +2166,7 @@ class CfnAutomationRule(
         def __init__(self, *, id: typing.Any, product_arn: builtins.str) -> None:
             '''Provides details about a list of findings that the current finding relates to.
 
-            :param id: The product-generated identifier for a related finding.
+            :param id: The product-generated identifier for a related finding. Array Members: Minimum number of 1 item. Maximum number of 20 items.
             :param product_arn: The Amazon Resource Name (ARN) for the product that generated a related finding.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-relatedfinding.html
@@ -2134,6 +2198,8 @@ class CfnAutomationRule(
         def id(self) -> typing.Any:
             '''The product-generated identifier for a related finding.
 
+            Array Members: Minimum number of 1 item. Maximum number of 20 items.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-relatedfinding.html#cfn-securityhub-automationrule-relatedfinding-id
             '''
             result = self._values.get("id")

aws_cdk/aws_sns/__init__.py

@@ -1225,7 +1225,7 @@ class CfnTopicInlinePolicy(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_sns.CfnTopicInlinePolicy",
 ):
-    '''The ``AWS::SNS::TopicInlinePolicy`` resource associates one Amazon SNS topic with one policy.
+    '''Schema for AWS::SNS::TopicInlinePolicy.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topicinlinepolicy.html
     :exampleMetadata: fixture=_generated
@@ -1255,7 +1255,7 @@ class CfnTopicInlinePolicy(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param policy_document: A policy document that contains permissions to add to the specified Amazon SNS topic.
+        :param policy_document: A policy document that contains permissions to add to the specified SNS topics.
         :param topic_arn: The Amazon Resource Name (ARN) of the topic to which you want to add the policy.
         '''
         if __debug__:
@@ -1306,7 +1306,7 @@ class CfnTopicInlinePolicy(
     @builtins.property
     @jsii.member(jsii_name="policyDocument")
     def policy_document(self) -> typing.Any:
-        '''A policy document that contains permissions to add to the specified Amazon SNS topic.'''
+        '''A policy document that contains permissions to add to the specified SNS topics.'''
         return typing.cast(typing.Any, jsii.get(self, "policyDocument"))
 
     @policy_document.setter
@@ -1339,7 +1339,7 @@ class CfnTopicInlinePolicyProps:
     def __init__(self, *, policy_document: typing.Any, topic_arn: builtins.str) -> None:
         '''Properties for defining a ``CfnTopicInlinePolicy``.
 
-        :param policy_document: A policy document that contains permissions to add to the specified Amazon SNS topic.
+        :param policy_document: A policy document that contains permissions to add to the specified SNS topics.
         :param topic_arn: The Amazon Resource Name (ARN) of the topic to which you want to add the policy.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topicinlinepolicy.html
@@ -1369,7 +1369,7 @@ class CfnTopicInlinePolicyProps:
 
     @builtins.property
     def policy_document(self) -> typing.Any:
-        '''A policy document that contains permissions to add to the specified Amazon SNS topic.
+        '''A policy document that contains permissions to add to the specified SNS topics.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topicinlinepolicy.html#cfn-sns-topicinlinepolicy-policydocument
         '''