pulumi-aws 7.11.1__py3-none-any.whl → 7.12.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (122) hide show
  1. pulumi_aws/__init__.py +57 -0
  2. pulumi_aws/acm/certificate.py +20 -20
  3. pulumi_aws/acmpca/certificate.py +8 -8
  4. pulumi_aws/apigateway/account.py +0 -4
  5. pulumi_aws/appflow/_inputs.py +33 -0
  6. pulumi_aws/appflow/outputs.py +22 -0
  7. pulumi_aws/appsync/graph_ql_api.py +84 -0
  8. pulumi_aws/bedrock/_inputs.py +97 -21
  9. pulumi_aws/bedrock/agent_agent_alias.py +94 -0
  10. pulumi_aws/bedrock/agentcore_agent_runtime.py +4 -4
  11. pulumi_aws/bedrock/agentcore_browser.py +42 -0
  12. pulumi_aws/bedrock/agentcore_gateway_target.py +217 -7
  13. pulumi_aws/bedrock/agentcore_memory.py +37 -9
  14. pulumi_aws/bedrock/agentcore_oauth2_credential_provider.py +38 -0
  15. pulumi_aws/bedrock/outputs.py +64 -17
  16. pulumi_aws/cloudfront/_inputs.py +15 -14
  17. pulumi_aws/cloudfront/distribution.py +28 -0
  18. pulumi_aws/cloudfront/outputs.py +10 -9
  19. pulumi_aws/cloudhsmv2/cluster.py +64 -0
  20. pulumi_aws/cloudwatch/_inputs.py +9 -8
  21. pulumi_aws/cloudwatch/contributor_managed_insight_rule.py +20 -0
  22. pulumi_aws/cloudwatch/log_delivery_destination.py +53 -12
  23. pulumi_aws/cloudwatch/outputs.py +6 -5
  24. pulumi_aws/codebuild/webhook.py +16 -16
  25. pulumi_aws/codepipeline/webhook.py +16 -16
  26. pulumi_aws/connect/_inputs.py +50 -4
  27. pulumi_aws/connect/outputs.py +95 -4
  28. pulumi_aws/connect/routing_profile.py +42 -18
  29. pulumi_aws/datasync/location_fsx_ontap_file_system.py +34 -0
  30. pulumi_aws/datazone/project.py +24 -0
  31. pulumi_aws/detective/organization_configuration.py +20 -0
  32. pulumi_aws/dms/_inputs.py +3 -3
  33. pulumi_aws/dms/outputs.py +2 -2
  34. pulumi_aws/ec2/__init__.py +1 -0
  35. pulumi_aws/ec2/_inputs.py +182 -0
  36. pulumi_aws/ec2/allowed_images_settings.py +338 -0
  37. pulumi_aws/ec2/get_coip_pools.py +24 -0
  38. pulumi_aws/ec2/image_block_public_access.py +48 -1
  39. pulumi_aws/ec2/outputs.py +167 -0
  40. pulumi_aws/ec2/security_group.py +6 -6
  41. pulumi_aws/ec2/serial_console_access.py +50 -3
  42. pulumi_aws/ec2/vpc_endpoint.py +92 -0
  43. pulumi_aws/ec2clientvpn/authorization_rule.py +7 -7
  44. pulumi_aws/ec2clientvpn/route.py +7 -7
  45. pulumi_aws/ec2transitgateway/instance_connect_endpoint.py +47 -0
  46. pulumi_aws/ecrpublic/get_images.py +24 -0
  47. pulumi_aws/ecs/_inputs.py +172 -33
  48. pulumi_aws/ecs/get_service.py +318 -7
  49. pulumi_aws/ecs/outputs.py +957 -86
  50. pulumi_aws/ecs/service.py +76 -0
  51. pulumi_aws/eks/_inputs.py +195 -5
  52. pulumi_aws/eks/outputs.py +164 -4
  53. pulumi_aws/elasticache/_inputs.py +154 -0
  54. pulumi_aws/elasticache/get_replication_group.py +23 -9
  55. pulumi_aws/elasticache/outputs.py +204 -0
  56. pulumi_aws/elasticache/replication_group.py +115 -0
  57. pulumi_aws/elasticache/reserved_cache_node.py +28 -0
  58. pulumi_aws/finspace/kx_cluster.py +76 -0
  59. pulumi_aws/fis/__init__.py +1 -0
  60. pulumi_aws/fis/target_account_configuration.py +401 -0
  61. pulumi_aws/glue/job.py +7 -7
  62. pulumi_aws/guardduty/malware_protection_plan.py +50 -0
  63. pulumi_aws/guardduty/member_detector_feature.py +42 -0
  64. pulumi_aws/invoicing/__init__.py +11 -0
  65. pulumi_aws/invoicing/_inputs.py +128 -0
  66. pulumi_aws/invoicing/invoice_unit.py +620 -0
  67. pulumi_aws/invoicing/outputs.py +99 -0
  68. pulumi_aws/iot/ca_certificate.py +32 -32
  69. pulumi_aws/iot/get_registration_code.py +8 -8
  70. pulumi_aws/ivschat/logging_configuration.py +28 -0
  71. pulumi_aws/kinesis/get_stream.py +15 -1
  72. pulumi_aws/kinesis/stream.py +47 -0
  73. pulumi_aws/kms/key.py +7 -7
  74. pulumi_aws/licensemanager/license_grant.py +36 -0
  75. pulumi_aws/m2/environment.py +150 -0
  76. pulumi_aws/networkfirewall/tls_inspection_configuration.py +84 -0
  77. pulumi_aws/networkflowmonitor/__init__.py +12 -0
  78. pulumi_aws/networkflowmonitor/_inputs.py +412 -0
  79. pulumi_aws/networkflowmonitor/monitor.py +568 -0
  80. pulumi_aws/networkflowmonitor/outputs.py +302 -0
  81. pulumi_aws/networkflowmonitor/scope.py +443 -0
  82. pulumi_aws/observabilityadmin/__init__.py +11 -0
  83. pulumi_aws/observabilityadmin/_inputs.py +506 -0
  84. pulumi_aws/observabilityadmin/centralization_rule_for_organization.py +637 -0
  85. pulumi_aws/observabilityadmin/outputs.py +415 -0
  86. pulumi_aws/opensearch/_inputs.py +92 -133
  87. pulumi_aws/opensearch/authorize_vpc_endpoint_access.py +4 -4
  88. pulumi_aws/opensearch/domain.py +60 -0
  89. pulumi_aws/opensearch/get_domain.py +16 -9
  90. pulumi_aws/opensearch/outputs.py +131 -2
  91. pulumi_aws/organizations/get_policies.py +2 -2
  92. pulumi_aws/organizations/get_policies_for_target.py +2 -2
  93. pulumi_aws/organizations/get_policy.py +1 -1
  94. pulumi_aws/organizations/organization.py +7 -7
  95. pulumi_aws/organizations/policy.py +35 -7
  96. pulumi_aws/pulumi-plugin.json +1 -1
  97. pulumi_aws/quicksight/analysis.py +108 -0
  98. pulumi_aws/quicksight/dashboard.py +110 -0
  99. pulumi_aws/quicksight/template.py +126 -0
  100. pulumi_aws/redshift/cluster_snapshot.py +28 -0
  101. pulumi_aws/redshift/get_cluster.py +52 -0
  102. pulumi_aws/redshift/snapshot_copy_grant.py +22 -0
  103. pulumi_aws/route53/profiles_association.py +30 -0
  104. pulumi_aws/route53/profiles_resource_association.py +34 -0
  105. pulumi_aws/s3control/multi_region_access_point_policy.py +76 -0
  106. pulumi_aws/s3tables/table.py +76 -1
  107. pulumi_aws/s3tables/table_bucket.py +78 -3
  108. pulumi_aws/sagemaker/_inputs.py +225 -232
  109. pulumi_aws/sagemaker/endpoint_configuration.py +111 -64
  110. pulumi_aws/sagemaker/outputs.py +154 -158
  111. pulumi_aws/ssmincidents/get_response_plan.py +14 -0
  112. pulumi_aws/ssoadmin/account_assignment.py +4 -4
  113. pulumi_aws/transfer/profile.py +20 -0
  114. pulumi_aws/transfer/server.py +7 -0
  115. pulumi_aws/transfer/ssh_key.py +6 -6
  116. pulumi_aws/wafv2/rule_group.py +440 -0
  117. pulumi_aws/workspacesweb/session_logger_association.py +80 -0
  118. pulumi_aws/workspacesweb/trust_store_association.py +24 -0
  119. {pulumi_aws-7.11.1.dist-info → pulumi_aws-7.12.0.dist-info}/METADATA +1 -1
  120. {pulumi_aws-7.11.1.dist-info → pulumi_aws-7.12.0.dist-info}/RECORD +122 -107
  121. {pulumi_aws-7.11.1.dist-info → pulumi_aws-7.12.0.dist-info}/WHEEL +0 -0
  122. {pulumi_aws-7.11.1.dist-info → pulumi_aws-7.12.0.dist-info}/top_level.txt +0 -0
@@ -0,0 +1,99 @@
1
+ # coding=utf-8
2
+ # *** WARNING: this file was generated by pulumi-language-python. ***
3
+ # *** Do not edit by hand unless you're certain you know what you are doing! ***
4
+
5
+ import builtins as _builtins
6
+ import warnings
7
+ import sys
8
+ import pulumi
9
+ import pulumi.runtime
10
+ from typing import Any, Mapping, Optional, Sequence, Union, overload
11
+ if sys.version_info >= (3, 11):
12
+ from typing import NotRequired, TypedDict, TypeAlias
13
+ else:
14
+ from typing_extensions import NotRequired, TypedDict, TypeAlias
15
+ from .. import _utilities
16
+
17
+ __all__ = [
18
+ 'InvoiceUnitRule',
19
+ 'InvoiceUnitTimeouts',
20
+ ]
21
+
22
+ @pulumi.output_type
23
+ class InvoiceUnitRule(dict):
24
+ @staticmethod
25
+ def __key_warning(key: str):
26
+ suggest = None
27
+ if key == "linkedAccounts":
28
+ suggest = "linked_accounts"
29
+
30
+ if suggest:
31
+ pulumi.log.warn(f"Key '{key}' not found in InvoiceUnitRule. Access the value via the '{suggest}' property getter instead.")
32
+
33
+ def __getitem__(self, key: str) -> Any:
34
+ InvoiceUnitRule.__key_warning(key)
35
+ return super().__getitem__(key)
36
+
37
+ def get(self, key: str, default = None) -> Any:
38
+ InvoiceUnitRule.__key_warning(key)
39
+ return super().get(key, default)
40
+
41
+ def __init__(__self__, *,
42
+ linked_accounts: Sequence[_builtins.str]):
43
+ """
44
+ :param Sequence[_builtins.str] linked_accounts: Set of AWS account IDs included in this invoice unit.
45
+ """
46
+ pulumi.set(__self__, "linked_accounts", linked_accounts)
47
+
48
+ @_builtins.property
49
+ @pulumi.getter(name="linkedAccounts")
50
+ def linked_accounts(self) -> Sequence[_builtins.str]:
51
+ """
52
+ Set of AWS account IDs included in this invoice unit.
53
+ """
54
+ return pulumi.get(self, "linked_accounts")
55
+
56
+
57
+ @pulumi.output_type
58
+ class InvoiceUnitTimeouts(dict):
59
+ def __init__(__self__, *,
60
+ create: Optional[_builtins.str] = None,
61
+ delete: Optional[_builtins.str] = None,
62
+ update: Optional[_builtins.str] = None):
63
+ """
64
+ :param _builtins.str create: A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
65
+ :param _builtins.str delete: A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
66
+ :param _builtins.str update: A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
67
+ """
68
+ if create is not None:
69
+ pulumi.set(__self__, "create", create)
70
+ if delete is not None:
71
+ pulumi.set(__self__, "delete", delete)
72
+ if update is not None:
73
+ pulumi.set(__self__, "update", update)
74
+
75
+ @_builtins.property
76
+ @pulumi.getter
77
+ def create(self) -> Optional[_builtins.str]:
78
+ """
79
+ A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
80
+ """
81
+ return pulumi.get(self, "create")
82
+
83
+ @_builtins.property
84
+ @pulumi.getter
85
+ def delete(self) -> Optional[_builtins.str]:
86
+ """
87
+ A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
88
+ """
89
+ return pulumi.get(self, "delete")
90
+
91
+ @_builtins.property
92
+ @pulumi.getter
93
+ def update(self) -> Optional[_builtins.str]:
94
+ """
95
+ A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
96
+ """
97
+ return pulumi.get(self, "update")
98
+
99
+
@@ -396,41 +396,41 @@ class CaCertificate(pulumi.CustomResource):
396
396
  import pulumi_aws as aws
397
397
  import pulumi_tls as tls
398
398
 
399
- ca_private_key = tls.index.PrivateKey("ca", algorithm=RSA)
400
- ca = tls.index.SelfSignedCert("ca",
399
+ ca_private_key = tls.PrivateKey("ca", algorithm="RSA")
400
+ ca = tls.SelfSignedCert("ca",
401
401
  private_key_pem=ca_private_key.private_key_pem,
402
402
  subject=[{
403
- commonName: example.com,
404
- organization: ACME Examples, Inc,
403
+ "commonName": "example.com",
404
+ "organization": "ACME Examples, Inc",
405
405
  }],
406
406
  validity_period_hours=12,
407
407
  allowed_uses=[
408
- key_encipherment,
409
- digital_signature,
410
- server_auth,
408
+ "key_encipherment",
409
+ "digital_signature",
410
+ "server_auth",
411
411
  ],
412
412
  is_ca_certificate=True)
413
- verification_private_key = tls.index.PrivateKey("verification", algorithm=RSA)
413
+ verification_private_key = tls.PrivateKey("verification", algorithm="RSA")
414
414
  example = aws.iot.get_registration_code()
415
- verification = tls.index.CertRequest("verification",
415
+ verification = tls.CertRequest("verification",
416
416
  private_key_pem=verification_private_key.private_key_pem,
417
417
  subject=[{
418
- commonName: example.registration_code,
418
+ "commonName": example.registration_code,
419
419
  }])
420
- verification_locally_signed_cert = tls.index.LocallySignedCert("verification",
420
+ verification_locally_signed_cert = tls.LocallySignedCert("verification",
421
421
  cert_request_pem=verification.cert_request_pem,
422
422
  ca_private_key_pem=ca_private_key.private_key_pem,
423
423
  ca_cert_pem=ca.cert_pem,
424
424
  validity_period_hours=12,
425
425
  allowed_uses=[
426
- key_encipherment,
427
- digital_signature,
428
- server_auth,
426
+ "key_encipherment",
427
+ "digital_signature",
428
+ "server_auth",
429
429
  ])
430
430
  example_ca_certificate = aws.iot.CaCertificate("example",
431
431
  active=True,
432
- ca_certificate_pem=ca["certPem"],
433
- verification_certificate_pem=verification_locally_signed_cert["certPem"],
432
+ ca_certificate_pem=ca.cert_pem,
433
+ verification_certificate_pem=verification_locally_signed_cert.cert_pem,
434
434
  allow_auto_registration=True)
435
435
  ```
436
436
 
@@ -462,41 +462,41 @@ class CaCertificate(pulumi.CustomResource):
462
462
  import pulumi_aws as aws
463
463
  import pulumi_tls as tls
464
464
 
465
- ca_private_key = tls.index.PrivateKey("ca", algorithm=RSA)
466
- ca = tls.index.SelfSignedCert("ca",
465
+ ca_private_key = tls.PrivateKey("ca", algorithm="RSA")
466
+ ca = tls.SelfSignedCert("ca",
467
467
  private_key_pem=ca_private_key.private_key_pem,
468
468
  subject=[{
469
- commonName: example.com,
470
- organization: ACME Examples, Inc,
469
+ "commonName": "example.com",
470
+ "organization": "ACME Examples, Inc",
471
471
  }],
472
472
  validity_period_hours=12,
473
473
  allowed_uses=[
474
- key_encipherment,
475
- digital_signature,
476
- server_auth,
474
+ "key_encipherment",
475
+ "digital_signature",
476
+ "server_auth",
477
477
  ],
478
478
  is_ca_certificate=True)
479
- verification_private_key = tls.index.PrivateKey("verification", algorithm=RSA)
479
+ verification_private_key = tls.PrivateKey("verification", algorithm="RSA")
480
480
  example = aws.iot.get_registration_code()
481
- verification = tls.index.CertRequest("verification",
481
+ verification = tls.CertRequest("verification",
482
482
  private_key_pem=verification_private_key.private_key_pem,
483
483
  subject=[{
484
- commonName: example.registration_code,
484
+ "commonName": example.registration_code,
485
485
  }])
486
- verification_locally_signed_cert = tls.index.LocallySignedCert("verification",
486
+ verification_locally_signed_cert = tls.LocallySignedCert("verification",
487
487
  cert_request_pem=verification.cert_request_pem,
488
488
  ca_private_key_pem=ca_private_key.private_key_pem,
489
489
  ca_cert_pem=ca.cert_pem,
490
490
  validity_period_hours=12,
491
491
  allowed_uses=[
492
- key_encipherment,
493
- digital_signature,
494
- server_auth,
492
+ "key_encipherment",
493
+ "digital_signature",
494
+ "server_auth",
495
495
  ])
496
496
  example_ca_certificate = aws.iot.CaCertificate("example",
497
497
  active=True,
498
- ca_certificate_pem=ca["certPem"],
499
- verification_certificate_pem=verification_locally_signed_cert["certPem"],
498
+ ca_certificate_pem=ca.cert_pem,
499
+ verification_certificate_pem=verification_locally_signed_cert.cert_pem,
500
500
  allow_auto_registration=True)
501
501
  ```
502
502
 
@@ -83,12 +83,12 @@ def get_registration_code(region: Optional[_builtins.str] = None,
83
83
  import pulumi_tls as tls
84
84
 
85
85
  example = aws.iot.get_registration_code()
86
- verification = tls.index.PrivateKey("verification", algorithm=RSA)
87
- verification_cert_request = tls.index.CertRequest("verification",
88
- key_algorithm=RSA,
86
+ verification = tls.PrivateKey("verification", algorithm="RSA")
87
+ verification_cert_request = tls.CertRequest("verification",
88
+ key_algorithm="RSA",
89
89
  private_key_pem=verification.private_key_pem,
90
90
  subject=[{
91
- commonName: example.registration_code,
91
+ "commonName": example.registration_code,
92
92
  }])
93
93
  ```
94
94
 
@@ -117,12 +117,12 @@ def get_registration_code_output(region: Optional[pulumi.Input[Optional[_builtin
117
117
  import pulumi_tls as tls
118
118
 
119
119
  example = aws.iot.get_registration_code()
120
- verification = tls.index.PrivateKey("verification", algorithm=RSA)
121
- verification_cert_request = tls.index.CertRequest("verification",
122
- key_algorithm=RSA,
120
+ verification = tls.PrivateKey("verification", algorithm="RSA")
121
+ verification_cert_request = tls.CertRequest("verification",
122
+ key_algorithm="RSA",
123
123
  private_key_pem=verification.private_key_pem,
124
124
  subject=[{
125
- commonName: example.registration_code,
125
+ "commonName": example.registration_code,
126
126
  }])
127
127
  ```
128
128
 
@@ -280,6 +280,20 @@ class LoggingConfiguration(pulumi.CustomResource):
280
280
 
281
281
  ### Basic Usage - Logging to S3
282
282
 
283
+ ```python
284
+ import pulumi
285
+ import pulumi_aws as aws
286
+
287
+ example = aws.s3.Bucket("example",
288
+ bucket_name="tf-ivschat-logging",
289
+ force_destroy=True)
290
+ example_logging_configuration = aws.ivschat.LoggingConfiguration("example", destination_configuration={
291
+ "s3": {
292
+ "bucket_name": example.id,
293
+ },
294
+ })
295
+ ```
296
+
283
297
  ## Import
284
298
 
285
299
  ### Identity Schema
@@ -366,6 +380,20 @@ class LoggingConfiguration(pulumi.CustomResource):
366
380
 
367
381
  ### Basic Usage - Logging to S3
368
382
 
383
+ ```python
384
+ import pulumi
385
+ import pulumi_aws as aws
386
+
387
+ example = aws.s3.Bucket("example",
388
+ bucket_name="tf-ivschat-logging",
389
+ force_destroy=True)
390
+ example_logging_configuration = aws.ivschat.LoggingConfiguration("example", destination_configuration={
391
+ "s3": {
392
+ "bucket_name": example.id,
393
+ },
394
+ })
395
+ ```
396
+
369
397
  ## Import
370
398
 
371
399
  ### Identity Schema
@@ -27,7 +27,7 @@ class GetStreamResult:
27
27
  """
28
28
  A collection of values returned by getStream.
29
29
  """
30
- def __init__(__self__, arn=None, closed_shards=None, creation_timestamp=None, encryption_type=None, id=None, kms_key_id=None, name=None, open_shards=None, region=None, retention_period=None, shard_level_metrics=None, status=None, stream_mode_details=None, tags=None):
30
+ def __init__(__self__, arn=None, closed_shards=None, creation_timestamp=None, encryption_type=None, id=None, kms_key_id=None, max_record_size_in_kib=None, name=None, open_shards=None, region=None, retention_period=None, shard_level_metrics=None, status=None, stream_mode_details=None, tags=None):
31
31
  if arn and not isinstance(arn, str):
32
32
  raise TypeError("Expected argument 'arn' to be a str")
33
33
  pulumi.set(__self__, "arn", arn)
@@ -46,6 +46,9 @@ class GetStreamResult:
46
46
  if kms_key_id and not isinstance(kms_key_id, str):
47
47
  raise TypeError("Expected argument 'kms_key_id' to be a str")
48
48
  pulumi.set(__self__, "kms_key_id", kms_key_id)
49
+ if max_record_size_in_kib and not isinstance(max_record_size_in_kib, int):
50
+ raise TypeError("Expected argument 'max_record_size_in_kib' to be a int")
51
+ pulumi.set(__self__, "max_record_size_in_kib", max_record_size_in_kib)
49
52
  if name and not isinstance(name, str):
50
53
  raise TypeError("Expected argument 'name' to be a str")
51
54
  pulumi.set(__self__, "name", name)
@@ -119,6 +122,14 @@ class GetStreamResult:
119
122
  """
120
123
  return pulumi.get(self, "kms_key_id")
121
124
 
125
+ @_builtins.property
126
+ @pulumi.getter(name="maxRecordSizeInKib")
127
+ def max_record_size_in_kib(self) -> _builtins.int:
128
+ """
129
+ The maximum size for a single data record in KiB.
130
+ """
131
+ return pulumi.get(self, "max_record_size_in_kib")
132
+
122
133
  @_builtins.property
123
134
  @pulumi.getter
124
135
  def name(self) -> _builtins.str:
@@ -193,6 +204,7 @@ class AwaitableGetStreamResult(GetStreamResult):
193
204
  encryption_type=self.encryption_type,
194
205
  id=self.id,
195
206
  kms_key_id=self.kms_key_id,
207
+ max_record_size_in_kib=self.max_record_size_in_kib,
196
208
  name=self.name,
197
209
  open_shards=self.open_shards,
198
210
  region=self.region,
@@ -241,6 +253,7 @@ def get_stream(name: Optional[_builtins.str] = None,
241
253
  encryption_type=pulumi.get(__ret__, 'encryption_type'),
242
254
  id=pulumi.get(__ret__, 'id'),
243
255
  kms_key_id=pulumi.get(__ret__, 'kms_key_id'),
256
+ max_record_size_in_kib=pulumi.get(__ret__, 'max_record_size_in_kib'),
244
257
  name=pulumi.get(__ret__, 'name'),
245
258
  open_shards=pulumi.get(__ret__, 'open_shards'),
246
259
  region=pulumi.get(__ret__, 'region'),
@@ -286,6 +299,7 @@ def get_stream_output(name: Optional[pulumi.Input[_builtins.str]] = None,
286
299
  encryption_type=pulumi.get(__response__, 'encryption_type'),
287
300
  id=pulumi.get(__response__, 'id'),
288
301
  kms_key_id=pulumi.get(__response__, 'kms_key_id'),
302
+ max_record_size_in_kib=pulumi.get(__response__, 'max_record_size_in_kib'),
289
303
  name=pulumi.get(__response__, 'name'),
290
304
  open_shards=pulumi.get(__response__, 'open_shards'),
291
305
  region=pulumi.get(__response__, 'region'),
@@ -25,6 +25,7 @@ class StreamArgs:
25
25
  encryption_type: Optional[pulumi.Input[_builtins.str]] = None,
26
26
  enforce_consumer_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
27
27
  kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
28
+ max_record_size_in_kib: Optional[pulumi.Input[_builtins.int]] = None,
28
29
  name: Optional[pulumi.Input[_builtins.str]] = None,
29
30
  region: Optional[pulumi.Input[_builtins.str]] = None,
30
31
  retention_period: Optional[pulumi.Input[_builtins.int]] = None,
@@ -38,6 +39,7 @@ class StreamArgs:
38
39
  :param pulumi.Input[_builtins.str] encryption_type: The encryption type to use. The only acceptable values are `NONE` or `KMS`. The default value is `NONE`.
39
40
  :param pulumi.Input[_builtins.bool] enforce_consumer_deletion: A boolean that indicates all registered consumers should be deregistered from the stream so that the stream can be destroyed without error. The default value is `false`.
40
41
  :param pulumi.Input[_builtins.str] kms_key_id: The GUID for the customer-managed KMS key to use for encryption. You can also use a Kinesis-owned master key by specifying the alias `alias/aws/kinesis`.
42
+ :param pulumi.Input[_builtins.int] max_record_size_in_kib: The maximum size for a single data record in KiB. The minimum value is 1024. The maximum value is 10240.
41
43
  :param pulumi.Input[_builtins.str] name: A name to identify the stream. This is unique to the AWS account and region the Stream is created in.
42
44
  :param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
43
45
  :param pulumi.Input[_builtins.int] retention_period: Length of time data records are accessible after they are added to the stream. The maximum value of a stream's retention period is 8760 hours. Minimum value is 24. Default is 24.
@@ -55,6 +57,8 @@ class StreamArgs:
55
57
  pulumi.set(__self__, "enforce_consumer_deletion", enforce_consumer_deletion)
56
58
  if kms_key_id is not None:
57
59
  pulumi.set(__self__, "kms_key_id", kms_key_id)
60
+ if max_record_size_in_kib is not None:
61
+ pulumi.set(__self__, "max_record_size_in_kib", max_record_size_in_kib)
58
62
  if name is not None:
59
63
  pulumi.set(__self__, "name", name)
60
64
  if region is not None:
@@ -118,6 +122,18 @@ class StreamArgs:
118
122
  def kms_key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
119
123
  pulumi.set(self, "kms_key_id", value)
120
124
 
125
+ @_builtins.property
126
+ @pulumi.getter(name="maxRecordSizeInKib")
127
+ def max_record_size_in_kib(self) -> Optional[pulumi.Input[_builtins.int]]:
128
+ """
129
+ The maximum size for a single data record in KiB. The minimum value is 1024. The maximum value is 10240.
130
+ """
131
+ return pulumi.get(self, "max_record_size_in_kib")
132
+
133
+ @max_record_size_in_kib.setter
134
+ def max_record_size_in_kib(self, value: Optional[pulumi.Input[_builtins.int]]):
135
+ pulumi.set(self, "max_record_size_in_kib", value)
136
+
121
137
  @_builtins.property
122
138
  @pulumi.getter
123
139
  def name(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -211,6 +227,7 @@ class _StreamState:
211
227
  encryption_type: Optional[pulumi.Input[_builtins.str]] = None,
212
228
  enforce_consumer_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
213
229
  kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
230
+ max_record_size_in_kib: Optional[pulumi.Input[_builtins.int]] = None,
214
231
  name: Optional[pulumi.Input[_builtins.str]] = None,
215
232
  region: Optional[pulumi.Input[_builtins.str]] = None,
216
233
  retention_period: Optional[pulumi.Input[_builtins.int]] = None,
@@ -225,6 +242,7 @@ class _StreamState:
225
242
  :param pulumi.Input[_builtins.str] encryption_type: The encryption type to use. The only acceptable values are `NONE` or `KMS`. The default value is `NONE`.
226
243
  :param pulumi.Input[_builtins.bool] enforce_consumer_deletion: A boolean that indicates all registered consumers should be deregistered from the stream so that the stream can be destroyed without error. The default value is `false`.
227
244
  :param pulumi.Input[_builtins.str] kms_key_id: The GUID for the customer-managed KMS key to use for encryption. You can also use a Kinesis-owned master key by specifying the alias `alias/aws/kinesis`.
245
+ :param pulumi.Input[_builtins.int] max_record_size_in_kib: The maximum size for a single data record in KiB. The minimum value is 1024. The maximum value is 10240.
228
246
  :param pulumi.Input[_builtins.str] name: A name to identify the stream. This is unique to the AWS account and region the Stream is created in.
229
247
  :param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
230
248
  :param pulumi.Input[_builtins.int] retention_period: Length of time data records are accessible after they are added to the stream. The maximum value of a stream's retention period is 8760 hours. Minimum value is 24. Default is 24.
@@ -243,6 +261,8 @@ class _StreamState:
243
261
  pulumi.set(__self__, "enforce_consumer_deletion", enforce_consumer_deletion)
244
262
  if kms_key_id is not None:
245
263
  pulumi.set(__self__, "kms_key_id", kms_key_id)
264
+ if max_record_size_in_kib is not None:
265
+ pulumi.set(__self__, "max_record_size_in_kib", max_record_size_in_kib)
246
266
  if name is not None:
247
267
  pulumi.set(__self__, "name", name)
248
268
  if region is not None:
@@ -308,6 +328,18 @@ class _StreamState:
308
328
  def kms_key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
309
329
  pulumi.set(self, "kms_key_id", value)
310
330
 
331
+ @_builtins.property
332
+ @pulumi.getter(name="maxRecordSizeInKib")
333
+ def max_record_size_in_kib(self) -> Optional[pulumi.Input[_builtins.int]]:
334
+ """
335
+ The maximum size for a single data record in KiB. The minimum value is 1024. The maximum value is 10240.
336
+ """
337
+ return pulumi.get(self, "max_record_size_in_kib")
338
+
339
+ @max_record_size_in_kib.setter
340
+ def max_record_size_in_kib(self, value: Optional[pulumi.Input[_builtins.int]]):
341
+ pulumi.set(self, "max_record_size_in_kib", value)
342
+
311
343
  @_builtins.property
312
344
  @pulumi.getter
313
345
  def name(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -416,6 +448,7 @@ class Stream(pulumi.CustomResource):
416
448
  encryption_type: Optional[pulumi.Input[_builtins.str]] = None,
417
449
  enforce_consumer_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
418
450
  kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
451
+ max_record_size_in_kib: Optional[pulumi.Input[_builtins.int]] = None,
419
452
  name: Optional[pulumi.Input[_builtins.str]] = None,
420
453
  region: Optional[pulumi.Input[_builtins.str]] = None,
421
454
  retention_period: Optional[pulumi.Input[_builtins.int]] = None,
@@ -466,6 +499,7 @@ class Stream(pulumi.CustomResource):
466
499
  :param pulumi.Input[_builtins.str] encryption_type: The encryption type to use. The only acceptable values are `NONE` or `KMS`. The default value is `NONE`.
467
500
  :param pulumi.Input[_builtins.bool] enforce_consumer_deletion: A boolean that indicates all registered consumers should be deregistered from the stream so that the stream can be destroyed without error. The default value is `false`.
468
501
  :param pulumi.Input[_builtins.str] kms_key_id: The GUID for the customer-managed KMS key to use for encryption. You can also use a Kinesis-owned master key by specifying the alias `alias/aws/kinesis`.
502
+ :param pulumi.Input[_builtins.int] max_record_size_in_kib: The maximum size for a single data record in KiB. The minimum value is 1024. The maximum value is 10240.
469
503
  :param pulumi.Input[_builtins.str] name: A name to identify the stream. This is unique to the AWS account and region the Stream is created in.
470
504
  :param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
471
505
  :param pulumi.Input[_builtins.int] retention_period: Length of time data records are accessible after they are added to the stream. The maximum value of a stream's retention period is 8760 hours. Minimum value is 24. Default is 24.
@@ -536,6 +570,7 @@ class Stream(pulumi.CustomResource):
536
570
  encryption_type: Optional[pulumi.Input[_builtins.str]] = None,
537
571
  enforce_consumer_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
538
572
  kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
573
+ max_record_size_in_kib: Optional[pulumi.Input[_builtins.int]] = None,
539
574
  name: Optional[pulumi.Input[_builtins.str]] = None,
540
575
  region: Optional[pulumi.Input[_builtins.str]] = None,
541
576
  retention_period: Optional[pulumi.Input[_builtins.int]] = None,
@@ -556,6 +591,7 @@ class Stream(pulumi.CustomResource):
556
591
  __props__.__dict__["encryption_type"] = encryption_type
557
592
  __props__.__dict__["enforce_consumer_deletion"] = enforce_consumer_deletion
558
593
  __props__.__dict__["kms_key_id"] = kms_key_id
594
+ __props__.__dict__["max_record_size_in_kib"] = max_record_size_in_kib
559
595
  __props__.__dict__["name"] = name
560
596
  __props__.__dict__["region"] = region
561
597
  __props__.__dict__["retention_period"] = retention_period
@@ -578,6 +614,7 @@ class Stream(pulumi.CustomResource):
578
614
  encryption_type: Optional[pulumi.Input[_builtins.str]] = None,
579
615
  enforce_consumer_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
580
616
  kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
617
+ max_record_size_in_kib: Optional[pulumi.Input[_builtins.int]] = None,
581
618
  name: Optional[pulumi.Input[_builtins.str]] = None,
582
619
  region: Optional[pulumi.Input[_builtins.str]] = None,
583
620
  retention_period: Optional[pulumi.Input[_builtins.int]] = None,
@@ -597,6 +634,7 @@ class Stream(pulumi.CustomResource):
597
634
  :param pulumi.Input[_builtins.str] encryption_type: The encryption type to use. The only acceptable values are `NONE` or `KMS`. The default value is `NONE`.
598
635
  :param pulumi.Input[_builtins.bool] enforce_consumer_deletion: A boolean that indicates all registered consumers should be deregistered from the stream so that the stream can be destroyed without error. The default value is `false`.
599
636
  :param pulumi.Input[_builtins.str] kms_key_id: The GUID for the customer-managed KMS key to use for encryption. You can also use a Kinesis-owned master key by specifying the alias `alias/aws/kinesis`.
637
+ :param pulumi.Input[_builtins.int] max_record_size_in_kib: The maximum size for a single data record in KiB. The minimum value is 1024. The maximum value is 10240.
600
638
  :param pulumi.Input[_builtins.str] name: A name to identify the stream. This is unique to the AWS account and region the Stream is created in.
601
639
  :param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
602
640
  :param pulumi.Input[_builtins.int] retention_period: Length of time data records are accessible after they are added to the stream. The maximum value of a stream's retention period is 8760 hours. Minimum value is 24. Default is 24.
@@ -615,6 +653,7 @@ class Stream(pulumi.CustomResource):
615
653
  __props__.__dict__["encryption_type"] = encryption_type
616
654
  __props__.__dict__["enforce_consumer_deletion"] = enforce_consumer_deletion
617
655
  __props__.__dict__["kms_key_id"] = kms_key_id
656
+ __props__.__dict__["max_record_size_in_kib"] = max_record_size_in_kib
618
657
  __props__.__dict__["name"] = name
619
658
  __props__.__dict__["region"] = region
620
659
  __props__.__dict__["retention_period"] = retention_period
@@ -657,6 +696,14 @@ class Stream(pulumi.CustomResource):
657
696
  """
658
697
  return pulumi.get(self, "kms_key_id")
659
698
 
699
+ @_builtins.property
700
+ @pulumi.getter(name="maxRecordSizeInKib")
701
+ def max_record_size_in_kib(self) -> pulumi.Output[_builtins.int]:
702
+ """
703
+ The maximum size for a single data record in KiB. The minimum value is 1024. The maximum value is 10240.
704
+ """
705
+ return pulumi.get(self, "max_record_size_in_kib")
706
+
660
707
  @_builtins.property
661
708
  @pulumi.getter
662
709
  def name(self) -> pulumi.Output[_builtins.str]:
pulumi_aws/kms/key.py CHANGED
@@ -41,7 +41,7 @@ class KeyArgs:
41
41
  The default value is `false`.
42
42
  :param pulumi.Input[_builtins.str] custom_key_store_id: ID of the KMS [Custom Key Store](https://docs.aws.amazon.com/kms/latest/developerguide/create-cmk-keystore.html) where the key will be stored instead of KMS (eg CloudHSM).
43
43
  :param pulumi.Input[_builtins.str] customer_master_key_spec: Specifies whether the key contains a symmetric key or an asymmetric key pair and the encryption algorithms or signing algorithms that the key supports.
44
- Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, or `SM2` (China Regions only). Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
44
+ Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, `SM2` (China Regions only), or `ECC_NIST_EDWARDS25519`. Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
45
45
  :param pulumi.Input[_builtins.int] deletion_window_in_days: The waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key.
46
46
  If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
47
47
  If the KMS key is a multi-Region primary key with replicas, the waiting period begins when the last of its replica keys is deleted. Otherwise, the waiting period begins immediately.
@@ -120,7 +120,7 @@ class KeyArgs:
120
120
  def customer_master_key_spec(self) -> Optional[pulumi.Input[_builtins.str]]:
121
121
  """
122
122
  Specifies whether the key contains a symmetric key or an asymmetric key pair and the encryption algorithms or signing algorithms that the key supports.
123
- Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, or `SM2` (China Regions only). Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
123
+ Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, `SM2` (China Regions only), or `ECC_NIST_EDWARDS25519`. Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
124
124
  """
125
125
  return pulumi.get(self, "customer_master_key_spec")
126
126
 
@@ -295,7 +295,7 @@ class _KeyState:
295
295
  The default value is `false`.
296
296
  :param pulumi.Input[_builtins.str] custom_key_store_id: ID of the KMS [Custom Key Store](https://docs.aws.amazon.com/kms/latest/developerguide/create-cmk-keystore.html) where the key will be stored instead of KMS (eg CloudHSM).
297
297
  :param pulumi.Input[_builtins.str] customer_master_key_spec: Specifies whether the key contains a symmetric key or an asymmetric key pair and the encryption algorithms or signing algorithms that the key supports.
298
- Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, or `SM2` (China Regions only). Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
298
+ Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, `SM2` (China Regions only), or `ECC_NIST_EDWARDS25519`. Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
299
299
  :param pulumi.Input[_builtins.int] deletion_window_in_days: The waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key.
300
300
  If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
301
301
  If the KMS key is a multi-Region primary key with replicas, the waiting period begins when the last of its replica keys is deleted. Otherwise, the waiting period begins immediately.
@@ -394,7 +394,7 @@ class _KeyState:
394
394
  def customer_master_key_spec(self) -> Optional[pulumi.Input[_builtins.str]]:
395
395
  """
396
396
  Specifies whether the key contains a symmetric key or an asymmetric key pair and the encryption algorithms or signing algorithms that the key supports.
397
- Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, or `SM2` (China Regions only). Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
397
+ Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, `SM2` (China Regions only), or `ECC_NIST_EDWARDS25519`. Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
398
398
  """
399
399
  return pulumi.get(self, "customer_master_key_spec")
400
400
 
@@ -918,7 +918,7 @@ class Key(pulumi.CustomResource):
918
918
  The default value is `false`.
919
919
  :param pulumi.Input[_builtins.str] custom_key_store_id: ID of the KMS [Custom Key Store](https://docs.aws.amazon.com/kms/latest/developerguide/create-cmk-keystore.html) where the key will be stored instead of KMS (eg CloudHSM).
920
920
  :param pulumi.Input[_builtins.str] customer_master_key_spec: Specifies whether the key contains a symmetric key or an asymmetric key pair and the encryption algorithms or signing algorithms that the key supports.
921
- Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, or `SM2` (China Regions only). Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
921
+ Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, `SM2` (China Regions only), or `ECC_NIST_EDWARDS25519`. Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
922
922
  :param pulumi.Input[_builtins.int] deletion_window_in_days: The waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key.
923
923
  If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
924
924
  If the KMS key is a multi-Region primary key with replicas, the waiting period begins when the last of its replica keys is deleted. Otherwise, the waiting period begins immediately.
@@ -1363,7 +1363,7 @@ class Key(pulumi.CustomResource):
1363
1363
  The default value is `false`.
1364
1364
  :param pulumi.Input[_builtins.str] custom_key_store_id: ID of the KMS [Custom Key Store](https://docs.aws.amazon.com/kms/latest/developerguide/create-cmk-keystore.html) where the key will be stored instead of KMS (eg CloudHSM).
1365
1365
  :param pulumi.Input[_builtins.str] customer_master_key_spec: Specifies whether the key contains a symmetric key or an asymmetric key pair and the encryption algorithms or signing algorithms that the key supports.
1366
- Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, or `SM2` (China Regions only). Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
1366
+ Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, `SM2` (China Regions only), or `ECC_NIST_EDWARDS25519`. Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
1367
1367
  :param pulumi.Input[_builtins.int] deletion_window_in_days: The waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key.
1368
1368
  If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
1369
1369
  If the KMS key is a multi-Region primary key with replicas, the waiting period begins when the last of its replica keys is deleted. Otherwise, the waiting period begins immediately.
@@ -1438,7 +1438,7 @@ class Key(pulumi.CustomResource):
1438
1438
  def customer_master_key_spec(self) -> pulumi.Output[Optional[_builtins.str]]:
1439
1439
  """
1440
1440
  Specifies whether the key contains a symmetric key or an asymmetric key pair and the encryption algorithms or signing algorithms that the key supports.
1441
- Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, or `SM2` (China Regions only). Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
1441
+ Valid values: `SYMMETRIC_DEFAULT`, `RSA_2048`, `RSA_3072`, `RSA_4096`, `HMAC_224`, `HMAC_256`, `HMAC_384`, `HMAC_512`, `ECC_NIST_P256`, `ECC_NIST_P384`, `ECC_NIST_P521`, `ECC_SECG_P256K1`, `ML_DSA_44`, `ML_DSA_65`, `ML_DSA_87`, `SM2` (China Regions only), or `ECC_NIST_EDWARDS25519`. Defaults to `SYMMETRIC_DEFAULT`. For help with choosing a key spec, see the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html).
1442
1442
  """
1443
1443
  return pulumi.get(self, "customer_master_key_spec")
1444
1444
 
@@ -286,6 +286,24 @@ class LicenseGrant(pulumi.CustomResource):
286
286
 
287
287
  ## Example Usage
288
288
 
289
+ ```python
290
+ import pulumi
291
+ import pulumi_aws as aws
292
+
293
+ test = aws.licensemanager.LicenseGrant("test",
294
+ name="share-license-with-account",
295
+ allowed_operations=[
296
+ "ListPurchasedLicenses",
297
+ "CheckoutLicense",
298
+ "CheckInLicense",
299
+ "ExtendConsumptionLicense",
300
+ "CreateToken",
301
+ ],
302
+ license_arn="arn:aws:license-manager::111111111111:license:l-exampleARN",
303
+ principal="arn:aws:iam::111111111112:root",
304
+ home_region="us-east-1")
305
+ ```
306
+
289
307
  ## Import
290
308
 
291
309
  Using `pulumi import`, import `aws_licensemanager_grant` using the grant arn. For example:
@@ -313,6 +331,24 @@ class LicenseGrant(pulumi.CustomResource):
313
331
 
314
332
  ## Example Usage
315
333
 
334
+ ```python
335
+ import pulumi
336
+ import pulumi_aws as aws
337
+
338
+ test = aws.licensemanager.LicenseGrant("test",
339
+ name="share-license-with-account",
340
+ allowed_operations=[
341
+ "ListPurchasedLicenses",
342
+ "CheckoutLicense",
343
+ "CheckInLicense",
344
+ "ExtendConsumptionLicense",
345
+ "CreateToken",
346
+ ],
347
+ license_arn="arn:aws:license-manager::111111111111:license:l-exampleARN",
348
+ principal="arn:aws:iam::111111111112:root",
349
+ home_region="us-east-1")
350
+ ```
351
+
316
352
  ## Import
317
353
 
318
354
  Using `pulumi import`, import `aws_licensemanager_grant` using the grant arn. For example: