localstack-core 4.7.1.dev22__py3-none-any.whl → 4.7.1.dev24__py3-none-any.whl

localstack/services/s3/utils.py

@@ -9,7 +9,7 @@ import time
 import zlib
 from enum import StrEnum
 from secrets import token_bytes
-from typing import Any, Dict, Literal, NamedTuple, Optional, Protocol, Tuple, Union
+from typing import Any, Literal, NamedTuple, Protocol
 from urllib import parse as urlparser
 from zoneinfo import ZoneInfo
 
@@ -143,7 +143,7 @@ def get_owner_for_account_id(account_id: str):
 
 def extract_bucket_key_version_id_from_copy_source(
     copy_source: CopySource,
-) -> tuple[BucketName, ObjectKey, Optional[ObjectVersionId]]:
+) -> tuple[BucketName, ObjectKey, ObjectVersionId | None]:
     """
     Utility to parse bucket name, object key and optionally its versionId. It accepts the CopySource format:
     - <bucket-name/<object-key>?versionId=<version-id>, used for example in CopySource for CopyObject
@@ -482,7 +482,7 @@ def is_valid_canonical_id(canonical_id: str) -> bool:
         return False
 
 
-def uses_host_addressing(headers: Dict[str, str]) -> str | None:
+def uses_host_addressing(headers: dict[str, str]) -> str | None:
     """
     Determines if the request is targeting S3 with virtual host addressing
     :param headers: the request headers
@@ -522,7 +522,7 @@ def forwarded_from_virtual_host_addressed_request(headers: dict[str, str]) -> bo
 
 def extract_bucket_name_and_key_from_headers_and_path(
     headers: dict[str, str], path: str
-) -> tuple[Optional[str], Optional[str]]:
+) -> tuple[str | None, str | None]:
     """
     Extract the bucket name and the object key from a request headers and path. This works with both virtual host
     and path style requests.
@@ -556,7 +556,7 @@ def normalize_bucket_name(bucket_name):
     return bucket_name
 
 
-def get_bucket_and_key_from_s3_uri(s3_uri: str) -> Tuple[str, str]:
+def get_bucket_and_key_from_s3_uri(s3_uri: str) -> tuple[str, str]:
     """
     Extracts the bucket name and key from s3 uri
     """
@@ -564,7 +564,7 @@ def get_bucket_and_key_from_s3_uri(s3_uri: str) -> Tuple[str, str]:
     return output_bucket, output_key
 
 
-def get_bucket_and_key_from_presign_url(presign_url: str) -> Tuple[str, str]:
+def get_bucket_and_key_from_presign_url(presign_url: str) -> tuple[str, str]:
     """
     Extracts the bucket name and key from s3 presign url
     """
@@ -575,7 +575,7 @@ def get_bucket_and_key_from_presign_url(presign_url: str) -> Tuple[str, str]:
 
 
 def _create_invalid_argument_exc(
-    message: Union[str, None], name: str, value: str, host_id: str = None
+    message: str | None, name: str, value: str, host_id: str = None
 ) -> InvalidArgument:
     ex = InvalidArgument(message)
     ex.ArgumentName = name
@@ -589,7 +589,7 @@ def capitalize_header_name_from_snake_case(header_name: str) -> str:
     return "-".join([part.capitalize() for part in header_name.split("-")])
 
 
-def get_kms_key_arn(kms_key: str, account_id: str, bucket_region: str) -> Optional[str]:
+def get_kms_key_arn(kms_key: str, account_id: str, bucket_region: str) -> str | None:
     """
     In S3, the KMS key can be passed as a KeyId or a KeyArn. This method allows to always get the KeyArn from either.
     It can also validate if the key is in the same region, and raise an exception.
@@ -762,7 +762,7 @@ def _match_lifecycle_filter(
 
 def parse_expiration_header(
     expiration_header: str,
-) -> tuple[Optional[datetime.datetime], Optional[str]]:
+) -> tuple[datetime.datetime | None, str | None]:
     try:
         header_values = dict(
             (p.strip('"') for p in v.split("=")) for v in expiration_header.split('", ')
@@ -878,7 +878,7 @@ def get_retention_from_now(days: int = None, years: int = None) -> datetime.date
 
 def get_failed_precondition_copy_source(
     request: CopyObjectRequest, last_modified: datetime.datetime, etag: ETag
-) -> Optional[str]:
+) -> str | None:
     """
     Validate if the source object LastModified and ETag matches a precondition, and if it does, return the failed
     precondition
@@ -1019,7 +1019,7 @@ def create_redirect_for_post_request(
     return urlparser.urlunparse(newparts)
 
 
-def parse_post_object_tagging_xml(tagging: str) -> Optional[dict]:
+def parse_post_object_tagging_xml(tagging: str) -> dict | None:
     try:
         tag_set = {}
         tags = xmltodict.parse(tagging)

localstack/services/s3/validation.py

@@ -173,7 +173,7 @@ def validate_acl_acp(acp: AccessControlPolicy) -> None:
             continue
 
         elif grant_type == GranteeType.CanonicalUser and not is_valid_canonical_id(
-            (grantee_id := grantee.get("ID", ""))
+            grantee_id := grantee.get("ID", "")
         ):
             ex = _create_invalid_argument_exc("Invalid id", "CanonicalUser/ID", grantee_id)
             raise ex

localstack/services/s3/website_hosting.py

@@ -1,7 +1,7 @@
 import logging
 import re
+from collections.abc import Callable
 from functools import wraps
-from typing import Callable, Dict, Optional, Union
 from urllib.parse import urlparse
 
 from werkzeug.datastructures import Headers
@@ -32,8 +32,8 @@ class NoSuchKeyFromErrorDocument(NoSuchKey):
     code: str = "NoSuchKey"
     sender_fault: bool = False
     status_code: int = 404
-    Key: Optional[ObjectKey]
-    ErrorDocumentKey: Optional[ObjectKey]
+    Key: ObjectKey | None
+    ErrorDocumentKey: ObjectKey | None
 
 
 class S3WebsiteHostingHandler:
@@ -223,7 +223,7 @@ class S3WebsiteHostingHandler:
             )
 
     @staticmethod
-    def _get_response_headers_from_object(get_object_response: GetObjectOutput) -> Dict[str, str]:
+    def _get_response_headers_from_object(get_object_response: GetObjectOutput) -> dict[str, str]:
         """
         Only return some headers from the S3 Object
         :param get_object_response: the response from S3.GetObject
@@ -248,7 +248,7 @@ class S3WebsiteHostingHandler:
     @staticmethod
     def _find_matching_rule(
         routing_rules: RoutingRules, object_key: ObjectKey, error_code: int = None
-    ) -> Union[RoutingRule, None]:
+    ) -> RoutingRule | None:
         """
         Iterate over the routing rules set in the configuration, and return the first that match the key name and/or the
         error code (in the 4XX range).

localstack/services/scheduler/resource_providers/aws_scheduler_schedule.py

@@ -2,7 +2,7 @@
 from __future__ import annotations
 
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -14,110 +14,110 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class SchedulerScheduleProperties(TypedDict):
-    FlexibleTimeWindow: Optional[FlexibleTimeWindow]
-    ScheduleExpression: Optional[str]
-    Target: Optional[Target]
-    Arn: Optional[str]
-    Description: Optional[str]
-    EndDate: Optional[str]
-    GroupName: Optional[str]
-    KmsKeyArn: Optional[str]
-    Name: Optional[str]
-    ScheduleExpressionTimezone: Optional[str]
-    StartDate: Optional[str]
-    State: Optional[str]
+    FlexibleTimeWindow: FlexibleTimeWindow | None
+    ScheduleExpression: str | None
+    Target: Target | None
+    Arn: str | None
+    Description: str | None
+    EndDate: str | None
+    GroupName: str | None
+    KmsKeyArn: str | None
+    Name: str | None
+    ScheduleExpressionTimezone: str | None
+    StartDate: str | None
+    State: str | None
 
 
 class FlexibleTimeWindow(TypedDict):
-    Mode: Optional[str]
-    MaximumWindowInMinutes: Optional[float]
+    Mode: str | None
+    MaximumWindowInMinutes: float | None
 
 
 class DeadLetterConfig(TypedDict):
-    Arn: Optional[str]
+    Arn: str | None
 
 
 class RetryPolicy(TypedDict):
-    MaximumEventAgeInSeconds: Optional[float]
-    MaximumRetryAttempts: Optional[float]
+    MaximumEventAgeInSeconds: float | None
+    MaximumRetryAttempts: float | None
 
 
 class AwsVpcConfiguration(TypedDict):
-    Subnets: Optional[list[str]]
-    AssignPublicIp: Optional[str]
-    SecurityGroups: Optional[list[str]]
+    Subnets: list[str] | None
+    AssignPublicIp: str | None
+    SecurityGroups: list[str] | None
 
 
 class NetworkConfiguration(TypedDict):
-    AwsvpcConfiguration: Optional[AwsVpcConfiguration]
+    AwsvpcConfiguration: AwsVpcConfiguration | None
 
 
 class CapacityProviderStrategyItem(TypedDict):
-    CapacityProvider: Optional[str]
-    Base: Optional[float]
-    Weight: Optional[float]
+    CapacityProvider: str | None
+    Base: float | None
+    Weight: float | None
 
 
 class PlacementConstraint(TypedDict):
-    Expression: Optional[str]
-    Type: Optional[str]
+    Expression: str | None
+    Type: str | None
 
 
 class PlacementStrategy(TypedDict):
-    Field: Optional[str]
-    Type: Optional[str]
+    Field: str | None
+    Type: str | None
 
 
 class EcsParameters(TypedDict):
-    TaskDefinitionArn: Optional[str]
-    CapacityProviderStrategy: Optional[list[CapacityProviderStrategyItem]]
-    EnableECSManagedTags: Optional[bool]
-    EnableExecuteCommand: Optional[bool]
-    Group: Optional[str]
-    LaunchType: Optional[str]
-    NetworkConfiguration: Optional[NetworkConfiguration]
-    PlacementConstraints: Optional[list[PlacementConstraint]]
-    PlacementStrategy: Optional[list[PlacementStrategy]]
-    PlatformVersion: Optional[str]
-    PropagateTags: Optional[str]
-    ReferenceId: Optional[str]
-    Tags: Optional[list[dict]]
-    TaskCount: Optional[float]
+    TaskDefinitionArn: str | None
+    CapacityProviderStrategy: list[CapacityProviderStrategyItem] | None
+    EnableECSManagedTags: bool | None
+    EnableExecuteCommand: bool | None
+    Group: str | None
+    LaunchType: str | None
+    NetworkConfiguration: NetworkConfiguration | None
+    PlacementConstraints: list[PlacementConstraint] | None
+    PlacementStrategy: list[PlacementStrategy] | None
+    PlatformVersion: str | None
+    PropagateTags: str | None
+    ReferenceId: str | None
+    Tags: list[dict] | None
+    TaskCount: float | None
 
 
 class EventBridgeParameters(TypedDict):
-    DetailType: Optional[str]
-    Source: Optional[str]
+    DetailType: str | None
+    Source: str | None
 
 
 class KinesisParameters(TypedDict):
-    PartitionKey: Optional[str]
+    PartitionKey: str | None
 
 
 class SageMakerPipelineParameter(TypedDict):
-    Name: Optional[str]
-    Value: Optional[str]
+    Name: str | None
+    Value: str | None
 
 
 class SageMakerPipelineParameters(TypedDict):
-    PipelineParameterList: Optional[list[SageMakerPipelineParameter]]
+    PipelineParameterList: list[SageMakerPipelineParameter] | None
 
 
 class SqsParameters(TypedDict):
-    MessageGroupId: Optional[str]
+    MessageGroupId: str | None
 
 
 class Target(TypedDict):
-    Arn: Optional[str]
-    RoleArn: Optional[str]
-    DeadLetterConfig: Optional[DeadLetterConfig]
-    EcsParameters: Optional[EcsParameters]
-    EventBridgeParameters: Optional[EventBridgeParameters]
-    Input: Optional[str]
-    KinesisParameters: Optional[KinesisParameters]
-    RetryPolicy: Optional[RetryPolicy]
-    SageMakerPipelineParameters: Optional[SageMakerPipelineParameters]
-    SqsParameters: Optional[SqsParameters]
+    Arn: str | None
+    RoleArn: str | None
+    DeadLetterConfig: DeadLetterConfig | None
+    EcsParameters: EcsParameters | None
+    EventBridgeParameters: EventBridgeParameters | None
+    Input: str | None
+    KinesisParameters: KinesisParameters | None
+    RetryPolicy: RetryPolicy | None
+    SageMakerPipelineParameters: SageMakerPipelineParameters | None
+    SqsParameters: SqsParameters | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/scheduler/resource_providers/aws_scheduler_schedule_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class SchedulerScheduleProviderPlugin(CloudFormationResourceProviderPlugin):
     name = "AWS::Scheduler::Schedule"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.scheduler.resource_providers.aws_scheduler_schedule import (

localstack/services/scheduler/resource_providers/aws_scheduler_schedulegroup.py

@@ -2,7 +2,7 @@
 from __future__ import annotations
 
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -14,17 +14,17 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class SchedulerScheduleGroupProperties(TypedDict):
-    Arn: Optional[str]
-    CreationDate: Optional[str]
-    LastModificationDate: Optional[str]
-    Name: Optional[str]
-    State: Optional[str]
-    Tags: Optional[list[Tag]]
+    Arn: str | None
+    CreationDate: str | None
+    LastModificationDate: str | None
+    Name: str | None
+    State: str | None
+    Tags: list[Tag] | None
 
 
 class Tag(TypedDict):
-    Key: Optional[str]
-    Value: Optional[str]
+    Key: str | None
+    Value: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/scheduler/resource_providers/aws_scheduler_schedulegroup_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class SchedulerScheduleGroupProviderPlugin(CloudFormationResourceProviderPlugin)
     name = "AWS::Scheduler::ScheduleGroup"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.scheduler.resource_providers.aws_scheduler_schedulegroup import (

localstack/services/secretsmanager/provider.py

@@ -5,7 +5,7 @@ import json
 import logging
 import re
 import time
-from typing import Any, Final, Optional, Union
+from typing import Any, Final
 
 import moto.secretsmanager.exceptions as moto_exception
 from botocore.utils import InvalidArnException
@@ -135,7 +135,7 @@ class SecretsmanagerProvider(SecretsmanagerApi):
         return bool(re.match(r"^[A-Za-z0-9/_+=.@-]+\Z", secret_id))
 
     @staticmethod
-    def _raise_if_invalid_secret_id(secret_id: Union[SecretIdType, NameType]):
+    def _raise_if_invalid_secret_id(secret_id: SecretIdType | NameType):
         # Patches moto's implementation for which secret_ids are not validated, by raising a ValidationException.
         # Skips this check if the secret_id provided appears to be an arn (starting with 'arn:').
         if not re.match(
@@ -149,12 +149,10 @@ class SecretsmanagerProvider(SecretsmanagerApi):
 
     @staticmethod
     def _raise_if_missing_client_req_token(
-        request: Union[
-            CreateSecretRequest,
-            PutSecretValueRequest,
-            RotateSecretRequest,
-            UpdateSecretRequest,
-        ],
+        request: CreateSecretRequest
+        | PutSecretValueRequest
+        | RotateSecretRequest
+        | UpdateSecretRequest,
     ):
         if "ClientRequestToken" not in request:
             raise InvalidRequestException(
@@ -201,8 +199,8 @@ class SecretsmanagerProvider(SecretsmanagerApi):
     ) -> DeleteSecretResponse:
         secret_id: str = request["SecretId"]
         self._raise_if_invalid_secret_id(secret_id)
-        recovery_window_in_days: Optional[int] = request.get("RecoveryWindowInDays")
-        force_delete_without_recovery: Optional[bool] = request.get("ForceDeleteWithoutRecovery")
+        recovery_window_in_days: int | None = request.get("RecoveryWindowInDays")
+        force_delete_without_recovery: bool | None = request.get("ForceDeleteWithoutRecovery")
 
         backend = SecretsmanagerProvider.get_moto_backend_for_resource(secret_id, context)
         try:
@@ -495,7 +493,7 @@ def moto_smb_get_secret_value(fn, self, secret_id, version_id, version_stage):
 def moto_smb_create_secret(fn, self, name, *args, **kwargs):
     # Creating a secret with a SecretId equal to one that is scheduled for
     # deletion should raise an 'InvalidRequestException'.
-    secret: Optional[FakeSecret] = self.secrets.get(name)
+    secret: FakeSecret | None = self.secrets.get(name)
     if secret is not None and secret.deleted_date is not None:
         raise InvalidRequestException(AWS_INVALID_REQUEST_MESSAGE_CREATE_WITH_SCHEDULED_DELETION)
 

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_resourcepolicy.py

@@ -3,7 +3,7 @@ from __future__ import annotations
 
 import json
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -15,10 +15,10 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class SecretsManagerResourcePolicyProperties(TypedDict):
-    ResourcePolicy: Optional[dict]
-    SecretId: Optional[str]
-    BlockPublicPolicy: Optional[bool]
-    Id: Optional[str]
+    ResourcePolicy: dict | None
+    SecretId: str | None
+    BlockPublicPolicy: bool | None
+    Id: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_resourcepolicy_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class SecretsManagerResourcePolicyProviderPlugin(CloudFormationResourceProviderP
     name = "AWS::SecretsManager::ResourcePolicy"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.secretsmanager.resource_providers.aws_secretsmanager_resourcepolicy import (

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_rotationschedule.py

@@ -2,7 +2,7 @@
 from __future__ import annotations
 
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -14,32 +14,32 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class SecretsManagerRotationScheduleProperties(TypedDict):
-    SecretId: Optional[str]
-    HostedRotationLambda: Optional[HostedRotationLambda]
-    Id: Optional[str]
-    RotateImmediatelyOnUpdate: Optional[bool]
-    RotationLambdaARN: Optional[str]
-    RotationRules: Optional[RotationRules]
+    SecretId: str | None
+    HostedRotationLambda: HostedRotationLambda | None
+    Id: str | None
+    RotateImmediatelyOnUpdate: bool | None
+    RotationLambdaARN: str | None
+    RotationRules: RotationRules | None
 
 
 class RotationRules(TypedDict):
-    AutomaticallyAfterDays: Optional[int]
-    Duration: Optional[str]
-    ScheduleExpression: Optional[str]
+    AutomaticallyAfterDays: int | None
+    Duration: str | None
+    ScheduleExpression: str | None
 
 
 class HostedRotationLambda(TypedDict):
-    RotationType: Optional[str]
-    ExcludeCharacters: Optional[str]
-    KmsKeyArn: Optional[str]
-    MasterSecretArn: Optional[str]
-    MasterSecretKmsKeyArn: Optional[str]
-    RotationLambdaName: Optional[str]
-    Runtime: Optional[str]
-    SuperuserSecretArn: Optional[str]
-    SuperuserSecretKmsKeyArn: Optional[str]
-    VpcSecurityGroupIds: Optional[str]
-    VpcSubnetIds: Optional[str]
+    RotationType: str | None
+    ExcludeCharacters: str | None
+    KmsKeyArn: str | None
+    MasterSecretArn: str | None
+    MasterSecretKmsKeyArn: str | None
+    RotationLambdaName: str | None
+    Runtime: str | None
+    SuperuserSecretArn: str | None
+    SuperuserSecretKmsKeyArn: str | None
+    VpcSecurityGroupIds: str | None
+    VpcSubnetIds: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_rotationschedule_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class SecretsManagerRotationScheduleProviderPlugin(CloudFormationResourceProvide
     name = "AWS::SecretsManager::RotationSchedule"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.secretsmanager.resource_providers.aws_secretsmanager_rotationschedule import (

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_secret.py

@@ -6,7 +6,7 @@ import logging
 import random
 import string
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -20,37 +20,37 @@ LOG = logging.getLogger(__name__)
 
 
 class SecretsManagerSecretProperties(TypedDict):
-    Description: Optional[str]
-    GenerateSecretString: Optional[GenerateSecretString]
-    Id: Optional[str]
-    KmsKeyId: Optional[str]
-    Name: Optional[str]
-    ReplicaRegions: Optional[list[ReplicaRegion]]
-    SecretString: Optional[str]
-    Tags: Optional[list[Tag]]
+    Description: str | None
+    GenerateSecretString: GenerateSecretString | None
+    Id: str | None
+    KmsKeyId: str | None
+    Name: str | None
+    ReplicaRegions: list[ReplicaRegion] | None
+    SecretString: str | None
+    Tags: list[Tag] | None
 
 
 class GenerateSecretString(TypedDict):
-    ExcludeCharacters: Optional[str]
-    ExcludeLowercase: Optional[bool]
-    ExcludeNumbers: Optional[bool]
-    ExcludePunctuation: Optional[bool]
-    ExcludeUppercase: Optional[bool]
-    GenerateStringKey: Optional[str]
-    IncludeSpace: Optional[bool]
-    PasswordLength: Optional[int]
-    RequireEachIncludedType: Optional[bool]
-    SecretStringTemplate: Optional[str]
+    ExcludeCharacters: str | None
+    ExcludeLowercase: bool | None
+    ExcludeNumbers: bool | None
+    ExcludePunctuation: bool | None
+    ExcludeUppercase: bool | None
+    GenerateStringKey: str | None
+    IncludeSpace: bool | None
+    PasswordLength: int | None
+    RequireEachIncludedType: bool | None
+    SecretStringTemplate: str | None
 
 
 class ReplicaRegion(TypedDict):
-    Region: Optional[str]
-    KmsKeyId: Optional[str]
+    Region: str | None
+    KmsKeyId: str | None
 
 
 class Tag(TypedDict):
-    Key: Optional[str]
-    Value: Optional[str]
+    Key: str | None
+    Value: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_secret_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class SecretsManagerSecretProviderPlugin(CloudFormationResourceProviderPlugin):
     name = "AWS::SecretsManager::Secret"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.secretsmanager.resource_providers.aws_secretsmanager_secret import (