localstack-core 4.6.1.dev60__py3-none-any.whl → 4.10.1.dev12__py3-none-any.whl

localstack/services/iam/resource_providers/aws_iam_servercertificate.py

@@ -2,7 +2,7 @@
 from __future__ import annotations
 
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -14,18 +14,18 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class IAMServerCertificateProperties(TypedDict):
-    Arn: Optional[str]
-    CertificateBody: Optional[str]
-    CertificateChain: Optional[str]
-    Path: Optional[str]
-    PrivateKey: Optional[str]
-    ServerCertificateName: Optional[str]
-    Tags: Optional[list[Tag]]
+    Arn: str | None
+    CertificateBody: str | None
+    CertificateChain: str | None
+    Path: str | None
+    PrivateKey: str | None
+    ServerCertificateName: str | None
+    Tags: list[Tag] | None
 
 
 class Tag(TypedDict):
-    Key: Optional[str]
-    Value: Optional[str]
+    Key: str | None
+    Value: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/iam/resource_providers/aws_iam_servercertificate_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class IAMServerCertificateProviderPlugin(CloudFormationResourceProviderPlugin):
     name = "AWS::IAM::ServerCertificate"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.iam.resource_providers.aws_iam_servercertificate import (

localstack/services/iam/resource_providers/aws_iam_servicelinkedrole.py

@@ -2,7 +2,7 @@
 from __future__ import annotations
 
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -14,10 +14,10 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class IAMServiceLinkedRoleProperties(TypedDict):
-    AWSServiceName: Optional[str]
-    CustomSuffix: Optional[str]
-    Description: Optional[str]
-    Id: Optional[str]
+    AWSServiceName: str | None
+    CustomSuffix: str | None
+    Description: str | None
+    Id: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/iam/resource_providers/aws_iam_servicelinkedrole_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class IAMServiceLinkedRoleProviderPlugin(CloudFormationResourceProviderPlugin):
     name = "AWS::IAM::ServiceLinkedRole"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.iam.resource_providers.aws_iam_servicelinkedrole import (

localstack/services/iam/resource_providers/aws_iam_user.py

@@ -2,7 +2,7 @@
 from __future__ import annotations
 
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -14,31 +14,31 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class IAMUserProperties(TypedDict):
-    Arn: Optional[str]
-    Groups: Optional[list[str]]
-    Id: Optional[str]
-    LoginProfile: Optional[LoginProfile]
-    ManagedPolicyArns: Optional[list[str]]
-    Path: Optional[str]
-    PermissionsBoundary: Optional[str]
-    Policies: Optional[list[Policy]]
-    Tags: Optional[list[Tag]]
-    UserName: Optional[str]
+    Arn: str | None
+    Groups: list[str] | None
+    Id: str | None
+    LoginProfile: LoginProfile | None
+    ManagedPolicyArns: list[str] | None
+    Path: str | None
+    PermissionsBoundary: str | None
+    Policies: list[Policy] | None
+    Tags: list[Tag] | None
+    UserName: str | None
 
 
 class Policy(TypedDict):
-    PolicyDocument: Optional[dict]
-    PolicyName: Optional[str]
+    PolicyDocument: dict | None
+    PolicyName: str | None
 
 
 class LoginProfile(TypedDict):
-    Password: Optional[str]
-    PasswordResetRequired: Optional[bool]
+    Password: str | None
+    PasswordResetRequired: bool | None
 
 
 class Tag(TypedDict):
-    Key: Optional[str]
-    Value: Optional[str]
+    Key: str | None
+    Value: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/iam/resource_providers/aws_iam_user_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class IAMUserProviderPlugin(CloudFormationResourceProviderPlugin):
     name = "AWS::IAM::User"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.iam.resource_providers.aws_iam_user import IAMUserProvider

localstack/services/iam/resources/policy_simulator.py

@@ -0,0 +1,133 @@
+import abc
+import json
+
+from moto.iam import iam_backends
+from moto.iam.models import IAMBackend
+
+from localstack.aws.api import RequestContext
+from localstack.aws.api.iam import (
+    ActionNameType,
+    EvaluationResult,
+    PolicyEvaluationDecisionType,
+    ResourceNameType,
+    SimulatePolicyResponse,
+    SimulatePrincipalPolicyRequest,
+)
+
+
+class IAMPolicySimulator(abc.ABC):
+    @abc.abstractmethod
+    def simulate_principal_policy(
+        self, context: RequestContext, request: SimulatePrincipalPolicyRequest
+    ) -> SimulatePolicyResponse:
+        """
+        Simulate principal policy
+        :param request: SimulatePrincipalPolicyRequest
+        :param context: RequestContext
+        :return: SimulatePrincipalResponse
+        """
+        pass
+
+
+class BasicIAMPolicySimulator(IAMPolicySimulator):
+    def simulate_principal_policy(
+        self,
+        context: RequestContext,
+        request: SimulatePrincipalPolicyRequest,
+    ) -> SimulatePolicyResponse:
+        backend = self.get_iam_backend(context)
+        policies = self.get_policies_from_principal(backend, request.get("PolicySourceArn"))
+
+        def _get_statements_from_policy_list(_policies: list[str]):
+            statements = []
+            for policy_str in _policies:
+                policy_dict = json.loads(policy_str)
+                if isinstance(policy_dict["Statement"], list):
+                    statements.extend(policy_dict["Statement"])
+                else:
+                    statements.append(policy_dict["Statement"])
+            return statements
+
+        policy_statements = _get_statements_from_policy_list(policies)
+
+        evaluations = [
+            self.build_evaluation_result(action_name, resource_arn, policy_statements)
+            for action_name in request.get("ActionNames")
+            for resource_arn in request.get("ResourceArns")
+        ]
+
+        response = SimulatePolicyResponse()
+        response["IsTruncated"] = False
+        response["EvaluationResults"] = evaluations
+
+        return response
+
+    @staticmethod
+    def build_evaluation_result(
+        action_name: ActionNameType, resource_name: ResourceNameType, policy_statements: list[dict]
+    ) -> EvaluationResult:
+        eval_res = EvaluationResult()
+        eval_res["EvalActionName"] = action_name
+        eval_res["EvalResourceName"] = resource_name
+        eval_res["EvalDecision"] = PolicyEvaluationDecisionType.explicitDeny
+        for statement in policy_statements:
+            # TODO Implement evaluation logic here
+            if (
+                action_name in statement["Action"]
+                and resource_name in statement["Resource"]
+                and statement["Effect"] == "Allow"
+            ):
+                eval_res["EvalDecision"] = PolicyEvaluationDecisionType.allowed
+                eval_res["MatchedStatements"] = []  # TODO: add support for statement compilation.
+        return eval_res
+
+    @staticmethod
+    def get_iam_backend(context: RequestContext) -> IAMBackend:
+        return iam_backends[context.account_id][context.partition]
+
+    @staticmethod
+    def get_policies_from_principal(backend: IAMBackend, principal_arn: str) -> list[dict]:
+        policies = []
+        if ":role" in principal_arn:
+            role_name = principal_arn.split("/")[-1]
+
+            policies.append(backend.get_role(role_name=role_name).assume_role_policy_document)
+
+            policy_names = backend.list_role_policies(role_name=role_name)
+            policies.extend(
+                [
+                    backend.get_role_policy(role_name=role_name, policy_name=policy_name)[1]
+                    for policy_name in policy_names
+                ]
+            )
+
+            attached_policies, _ = backend.list_attached_role_policies(role_name=role_name)
+            policies.extend([policy.document for policy in attached_policies])
+
+        if ":group" in principal_arn:
+            group_name = principal_arn.split("/")[-1]
+            policy_names = backend.list_group_policies(group_name=group_name)
+            policies.extend(
+                [
+                    backend.get_group_policy(group_name=group_name, policy_name=policy_name)[1]
+                    for policy_name in policy_names
+                ]
+            )
+
+            attached_policies, _ = backend.list_attached_group_policies(group_name=group_name)
+            policies.extend([policy.document for policy in attached_policies])
+
+        if ":user" in principal_arn:
+            user_name = principal_arn.split("/")[-1]
+            policy_names = backend.list_user_policies(user_name=user_name)
+            policies.extend(
+                [
+                    backend.get_user_policy(user_name=user_name, policy_name=policy_name)[1]
+                    for policy_name in policy_names
+                ]
+            )
+
+            attached_policies, _ = backend.list_attached_user_policies(user_name=user_name)
+            policies.extend([policy.document for policy in attached_policies])
+
+        return policies

localstack/services/kinesis/kinesis_mock_server.py

@@ -3,7 +3,6 @@ import os
 import threading
 from abc import abstractmethod
 from pathlib import Path
-from typing import Dict, List, Optional, Tuple
 
 from localstack import config
 from localstack.services.kinesis.packages import (
@@ -31,7 +30,7 @@ class KinesisMockServer(Server):
         account_id: str,
         host: str = "localhost",
         log_level: str = "INFO",
-        data_dir: Optional[str] = None,
+        data_dir: str | None = None,
     ) -> None:
         self._account_id = account_id
         self._latency = latency
@@ -57,7 +56,7 @@ class KinesisMockServer(Server):
         return t
 
     @property
-    def _environment_variables(self) -> Dict:
+    def _environment_variables(self) -> dict:
         env_vars = {
             "KINESIS_MOCK_PLAIN_PORT": self.port,
             # Each kinesis-mock instance listens to two ports - secure and insecure.
@@ -94,7 +93,7 @@ class KinesisMockServer(Server):
         return env_vars
 
     @abstractmethod
-    def _create_shell_command(self) -> Tuple[List, Dict]:
+    def _create_shell_command(self) -> tuple[list, dict]:
         """
         Helper method for creating kinesis mock invocation command
         :return: returns a tuple containing the command list and a dictionary with the environment variables
@@ -106,12 +105,12 @@ class KinesisMockServer(Server):
 
 
 class KinesisMockScalaServer(KinesisMockServer):
-    def _create_shell_command(self) -> Tuple[List, Dict]:
+    def _create_shell_command(self) -> tuple[list, dict]:
         cmd = ["java", "-jar", *self._get_java_vm_options(), str(self._exe_path)]
         return cmd, self._environment_variables
 
     @property
-    def _environment_variables(self) -> Dict:
+    def _environment_variables(self) -> dict:
         default_env_vars = super()._environment_variables
         kinesis_mock_installer = kinesismock_scala_package.get_installer()
         return {
@@ -130,7 +129,7 @@ class KinesisMockScalaServer(KinesisMockServer):
 
 class KinesisMockNodeServer(KinesisMockServer):
     @property
-    def _environment_variables(self) -> Dict:
+    def _environment_variables(self) -> dict:
         node_env_vars = {
             # Use the `server.json` packaged next to the main.js
             "KINESIS_MOCK_CERT_PATH": str((self._exe_path.parent / "server.json").absolute()),
@@ -139,7 +138,7 @@ class KinesisMockNodeServer(KinesisMockServer):
         default_env_vars = super()._environment_variables
         return {**node_env_vars, **default_env_vars}
 
-    def _create_shell_command(self) -> Tuple[List, Dict]:
+    def _create_shell_command(self) -> tuple[list, dict]:
         cmd = ["node", self._exe_path]
         return cmd, self._environment_variables
 

localstack/services/kinesis/models.py

@@ -1,18 +1,30 @@
 from collections import defaultdict
-from typing import Dict, List, Set
 
-from localstack.aws.api.kinesis import ConsumerDescription, MetricsName, StreamName
-from localstack.services.stores import AccountRegionBundle, BaseStore, LocalAttribute
+from localstack.aws.api.kinesis import (
+    ConsumerDescription,
+    MetricsName,
+    Policy,
+    ResourceARN,
+    StreamName,
+)
+from localstack.services.stores import (
+    AccountRegionBundle,
+    BaseStore,
+    CrossAccountAttribute,
+    LocalAttribute,
+)
 
 
 class KinesisStore(BaseStore):
     # list of stream consumer details
-    stream_consumers: List[ConsumerDescription] = LocalAttribute(default=list)
+    stream_consumers: list[ConsumerDescription] = LocalAttribute(default=list)
 
     # maps stream name to list of enhanced monitoring metrics
-    enhanced_metrics: Dict[StreamName, Set[MetricsName]] = LocalAttribute(
+    enhanced_metrics: dict[StreamName, set[MetricsName]] = LocalAttribute(
         default=lambda: defaultdict(set)
     )
 
+    resource_policies: dict[ResourceARN, Policy] = CrossAccountAttribute(default=dict)
+
 
 kinesis_stores = AccountRegionBundle("kinesis", KinesisStore)

localstack/services/kinesis/packages.py

@@ -1,7 +1,7 @@
 import os
 from enum import StrEnum
 from functools import lru_cache
-from typing import Any, List
+from typing import Any
 
 from localstack.packages import InstallTarget, Package
 from localstack.packages.core import GitHubReleaseInstaller, NodePackageInstaller
@@ -58,7 +58,7 @@ class KinesisMockScalaPackage(Package[KinesisMockScalaPackageInstaller]):
     def _get_installer(self, version: str) -> KinesisMockScalaPackageInstaller:
         return KinesisMockScalaPackageInstaller(version)
 
-    def get_versions(self) -> List[str]:
+    def get_versions(self) -> list[str]:
         return [_KINESIS_MOCK_VERSION]  # Only supported on v0.4.12+
 
 
@@ -73,7 +73,7 @@ class KinesisMockNodePackage(Package[KinesisMockNodePackageInstaller]):
     def _get_installer(self, version: str) -> KinesisMockNodePackageInstaller:
         return KinesisMockNodePackageInstaller(version)
 
-    def get_versions(self) -> List[str]:
+    def get_versions(self) -> list[str]:
         return [_KINESIS_MOCK_VERSION]
 
 

localstack/services/kinesis/provider.py

@@ -1,5 +1,7 @@
+import json
 import logging
 import os
+import re
 import time
 from random import random
 
@@ -8,14 +10,18 @@ from localstack.aws.api import RequestContext
 from localstack.aws.api.kinesis import (
     ConsumerARN,
     Data,
+    GetResourcePolicyOutput,
     HashKey,
     KinesisApi,
     PartitionKey,
+    Policy,
     ProvisionedThroughputExceededException,
     PutRecordOutput,
     PutRecordsOutput,
     PutRecordsRequestEntryList,
     PutRecordsResultEntry,
+    ResourceARN,
+    ResourceNotFoundException,
     SequenceNumber,
     ShardId,
     StartingPosition,
@@ -24,6 +30,7 @@ from localstack.aws.api.kinesis import (
     SubscribeToShardEvent,
     SubscribeToShardEventStream,
     SubscribeToShardOutput,
+    ValidationException,
 )
 from localstack.aws.connect import connect_to
 from localstack.constants import LOCALHOST
@@ -39,6 +46,13 @@ LOG = logging.getLogger(__name__)
 MAX_SUBSCRIPTION_SECONDS = 300
 SERVER_STARTUP_TIMEOUT = 120
 
+DATA_STREAM_ARN_REGEX = re.compile(
+    r"^arn:aws(?:-[a-z]+)*:kinesis:[a-z0-9-]+:\d{12}:stream\/[a-zA-Z0-9_.\-]+$"
+)
+CONSUMER_ARN_REGEX = re.compile(
+    r"^arn:aws(?:-[a-z]+)*:kinesis:[a-z0-9-]+:\d{12}:stream\/[a-zA-Z0-9_.\-]+\/consumer\/[a-zA-Z0-9_.\-]+:\d+$"
+)
+
 
 def find_stream_for_consumer(consumer_arn):
     account_id = extract_account_id_from_arn(consumer_arn)
@@ -49,7 +63,12 @@ def find_stream_for_consumer(consumer_arn):
         for cons in kinesis.list_stream_consumers(StreamARN=stream_arn)["Consumers"]:
             if cons["ConsumerARN"] == consumer_arn:
                 return stream_name
-    raise Exception("Unable to find stream for stream consumer %s" % consumer_arn)
+    raise Exception(f"Unable to find stream for stream consumer {consumer_arn}")
+
+
+def is_valid_kinesis_arn(resource_arn: ResourceARN) -> bool:
+    """Check if the provided ARN is a valid Kinesis ARN."""
+    return bool(CONSUMER_ARN_REGEX.match(resource_arn) or DATA_STREAM_ARN_REGEX.match(resource_arn))
 
 
 class KinesisProvider(KinesisApi, ServiceLifecycleHook):
@@ -81,6 +100,64 @@ class KinesisProvider(KinesisApi, ServiceLifecycleHook):
     def get_store(account_id: str, region_name: str) -> KinesisStore:
         return kinesis_stores[account_id][region_name]
 
+    def put_resource_policy(
+        self,
+        context: RequestContext,
+        resource_arn: ResourceARN,
+        policy: Policy,
+        **kwargs,
+    ) -> None:
+        if not is_valid_kinesis_arn(resource_arn):
+            raise ValidationException(f"invalid kinesis arn {resource_arn}")
+
+        kinesis = connect_to(
+            aws_access_key_id=context.account_id, region_name=context.region
+        ).kinesis
+        try:
+            kinesis.describe_stream_summary(StreamARN=resource_arn)
+        except kinesis.exceptions.ResourceNotFoundException:
+            raise ResourceNotFoundException(f"Stream with ARN {resource_arn} not found")
+
+        store = self.get_store(context.account_id, context.region)
+        store.resource_policies[resource_arn] = policy
+
+    def get_resource_policy(
+        self,
+        context: RequestContext,
+        resource_arn: ResourceARN,
+        **kwargs,
+    ) -> GetResourcePolicyOutput:
+        if not is_valid_kinesis_arn(resource_arn):
+            raise ValidationException(f"invalid kinesis arn {resource_arn}")
+
+        kinesis = connect_to(
+            aws_access_key_id=context.account_id, region_name=context.region
+        ).kinesis
+        try:
+            kinesis.describe_stream_summary(StreamARN=resource_arn)
+        except kinesis.exceptions.ResourceNotFoundException:
+            raise ResourceNotFoundException(f"Stream with ARN {resource_arn} not found")
+
+        store = self.get_store(context.account_id, context.region)
+        policy = store.resource_policies.get(resource_arn, json.dumps({}))
+        return GetResourcePolicyOutput(Policy=policy)
+
+    def delete_resource_policy(
+        self,
+        context: RequestContext,
+        resource_arn: ResourceARN,
+        **kwargs,
+    ) -> None:
+        if not is_valid_kinesis_arn(resource_arn):
+            raise ValidationException(f"invalid kinesis arn {resource_arn}")
+
+        store = self.get_store(context.account_id, context.region)
+        if resource_arn not in store.resource_policies:
+            raise ResourceNotFoundException(
+                f"No resource policy found for resource ARN {resource_arn}"
+            )
+        del store.resource_policies[resource_arn]
+
     def subscribe_to_shard(
         self,
         context: RequestContext,
@@ -125,7 +202,13 @@ class KinesisProvider(KinesisApi, ServiceLifecycleHook):
                     raise
                 shard_iterator = result.get("NextShardIterator")
                 records = result.get("Records", [])
-                if not records:
+                if records:
+                    # Update the last sequence number to the last record's sequence number
+                    # TODO: This will suffice for now but does not properly capture checkpointing when
+                    # no data is written to a shard. See AWS docs:
+                    # https://docs.aws.amazon.com/kinesis/latest/APIReference/API_SubscribeToShardEvent.html#API_SubscribeToShardEvent_Contents
+                    last_sequence_number = records[-1].get("SequenceNumber", last_sequence_number)
+                else:
                     # On AWS there is *at least* 1 event every 5 seconds
                     # but this is not possible in this structure.
                     # In order to avoid a 5-second blocking call, we make the compromise of 3 seconds.
@@ -136,7 +219,7 @@ class KinesisProvider(KinesisApi, ServiceLifecycleHook):
                         Records=records,
                         ContinuationSequenceNumber=str(last_sequence_number),
                         MillisBehindLatest=0,
-                        ChildShards=[],
+                        ChildShards=None,  # TODO: Include shard children info
                     )
                 )
 

localstack/services/kinesis/resource_providers/aws_kinesis_stream.py

@@ -2,7 +2,7 @@
 from __future__ import annotations
 
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -14,27 +14,27 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class KinesisStreamProperties(TypedDict):
-    Arn: Optional[str]
-    Name: Optional[str]
-    RetentionPeriodHours: Optional[int]
-    ShardCount: Optional[int]
-    StreamEncryption: Optional[StreamEncryption]
-    StreamModeDetails: Optional[StreamModeDetails]
-    Tags: Optional[list[Tag]]
+    Arn: str | None
+    Name: str | None
+    RetentionPeriodHours: int | None
+    ShardCount: int | None
+    StreamEncryption: StreamEncryption | None
+    StreamModeDetails: StreamModeDetails | None
+    Tags: list[Tag] | None
 
 
 class StreamModeDetails(TypedDict):
-    StreamMode: Optional[str]
+    StreamMode: str | None
 
 
 class StreamEncryption(TypedDict):
-    EncryptionType: Optional[str]
-    KeyId: Optional[str]
+    EncryptionType: str | None
+    KeyId: str | None
 
 
 class Tag(TypedDict):
-    Key: Optional[str]
-    Value: Optional[str]
+    Key: str | None
+    Value: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/kinesis/resource_providers/aws_kinesis_stream_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class KinesisStreamProviderPlugin(CloudFormationResourceProviderPlugin):
     name = "AWS::Kinesis::Stream"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.kinesis.resource_providers.aws_kinesis_stream import (

localstack/services/kinesis/resource_providers/aws_kinesis_streamconsumer.py

@@ -2,7 +2,7 @@
 from __future__ import annotations
 
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -14,12 +14,12 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class KinesisStreamConsumerProperties(TypedDict):
-    ConsumerName: Optional[str]
-    StreamARN: Optional[str]
-    ConsumerARN: Optional[str]
-    ConsumerCreationTimestamp: Optional[str]
-    ConsumerStatus: Optional[str]
-    Id: Optional[str]
+    ConsumerName: str | None
+    StreamARN: str | None
+    ConsumerARN: str | None
+    ConsumerCreationTimestamp: str | None
+    ConsumerStatus: str | None
+    Id: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"