pulumi-aws 7.15.0__py3-none-any.whl → 7.16.0__py3-none-any.whl

pulumi_aws/kms/grant.py

@@ -35,8 +35,8 @@ class GrantArgs:
         :param pulumi.Input[_builtins.str] grantee_principal: The principal that is given permission to perform the operations that the grant permits in ARN format. Note that due to eventual consistency issues around IAM principals, the providers's state may not always be refreshed to reflect what is true in AWS.
         :param pulumi.Input[_builtins.str] key_id: The unique identifier for the customer master key (CMK) that the grant applies to. Specify the key ID or the Amazon Resource Name (ARN) of the CMK. To specify a CMK in a different AWS account, you must use the key ARN.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] operations: A list of operations that the grant permits. The permitted values are: `Decrypt`, `Encrypt`, `GenerateDataKey`, `GenerateDataKeyWithoutPlaintext`, `ReEncryptFrom`, `ReEncryptTo`, `Sign`, `Verify`, `GetPublicKey`, `CreateGrant`, `RetireGrant`, `DescribeKey`, `GenerateDataKeyPair`, or `GenerateDataKeyPairWithoutPlaintext`.
-        :param pulumi.Input[Sequence[pulumi.Input['GrantConstraintArgs']]] constraints: A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](http://docs.aws.amazon.com/kms/latest/developerguide/encryption-context.html).
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] grant_creation_tokens: A list of grant tokens to be used when creating the grant. See [Grant Tokens](http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#grant_token) for more information about grant tokens.
+        :param pulumi.Input[Sequence[pulumi.Input['GrantConstraintArgs']]] constraints: A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html).
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] grant_creation_tokens: A list of grant tokens to be used when creating the grant. See [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token) for more information about grant tokens.
         :param pulumi.Input[_builtins.str] name: A friendly name for identifying the grant.
         :param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
         :param pulumi.Input[_builtins.bool] retire_on_delete: If set to false (the default) the grants will be revoked upon deletion, and if set to true the grants will try to be retired upon deletion. Note that retiring grants requires special permissions, hence why we default to revoking grants.
@@ -99,7 +99,7 @@ class GrantArgs:
     @pulumi.getter
     def constraints(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['GrantConstraintArgs']]]]:
         """
-        A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](http://docs.aws.amazon.com/kms/latest/developerguide/encryption-context.html).
+        A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html).
         """
         return pulumi.get(self, "constraints")
 
@@ -111,7 +111,7 @@ class GrantArgs:
     @pulumi.getter(name="grantCreationTokens")
     def grant_creation_tokens(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
         """
-        A list of grant tokens to be used when creating the grant. See [Grant Tokens](http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#grant_token) for more information about grant tokens.
+        A list of grant tokens to be used when creating the grant. See [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token) for more information about grant tokens.
         """
         return pulumi.get(self, "grant_creation_tokens")
 
@@ -185,10 +185,10 @@ class _GrantState:
                  retiring_principal: Optional[pulumi.Input[_builtins.str]] = None):
         """
         Input properties used for looking up and filtering Grant resources.
-        :param pulumi.Input[Sequence[pulumi.Input['GrantConstraintArgs']]] constraints: A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](http://docs.aws.amazon.com/kms/latest/developerguide/encryption-context.html).
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] grant_creation_tokens: A list of grant tokens to be used when creating the grant. See [Grant Tokens](http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#grant_token) for more information about grant tokens.
+        :param pulumi.Input[Sequence[pulumi.Input['GrantConstraintArgs']]] constraints: A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html).
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] grant_creation_tokens: A list of grant tokens to be used when creating the grant. See [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token) for more information about grant tokens.
         :param pulumi.Input[_builtins.str] grant_id: The unique identifier for the grant.
-        :param pulumi.Input[_builtins.str] grant_token: The grant token for the created grant. For more information, see [Grant Tokens](http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#grant_token).
+        :param pulumi.Input[_builtins.str] grant_token: The grant token for the created grant. For more information, see [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token).
         :param pulumi.Input[_builtins.str] grantee_principal: The principal that is given permission to perform the operations that the grant permits in ARN format. Note that due to eventual consistency issues around IAM principals, the providers's state may not always be refreshed to reflect what is true in AWS.
         :param pulumi.Input[_builtins.str] key_id: The unique identifier for the customer master key (CMK) that the grant applies to. Specify the key ID or the Amazon Resource Name (ARN) of the CMK. To specify a CMK in a different AWS account, you must use the key ARN.
         :param pulumi.Input[_builtins.str] name: A friendly name for identifying the grant.
@@ -225,7 +225,7 @@ class _GrantState:
     @pulumi.getter
     def constraints(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['GrantConstraintArgs']]]]:
         """
-        A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](http://docs.aws.amazon.com/kms/latest/developerguide/encryption-context.html).
+        A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html).
         """
         return pulumi.get(self, "constraints")
 
@@ -237,7 +237,7 @@ class _GrantState:
     @pulumi.getter(name="grantCreationTokens")
     def grant_creation_tokens(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
         """
-        A list of grant tokens to be used when creating the grant. See [Grant Tokens](http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#grant_token) for more information about grant tokens.
+        A list of grant tokens to be used when creating the grant. See [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token) for more information about grant tokens.
         """
         return pulumi.get(self, "grant_creation_tokens")
 
@@ -261,7 +261,7 @@ class _GrantState:
     @pulumi.getter(name="grantToken")
     def grant_token(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        The grant token for the created grant. For more information, see [Grant Tokens](http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#grant_token).
+        The grant token for the created grant. For more information, see [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token).
         """
         return pulumi.get(self, "grant_token")
 
@@ -385,8 +385,8 @@ class Grant(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['GrantConstraintArgs', 'GrantConstraintArgsDict']]]] constraints: A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](http://docs.aws.amazon.com/kms/latest/developerguide/encryption-context.html).
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] grant_creation_tokens: A list of grant tokens to be used when creating the grant. See [Grant Tokens](http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#grant_token) for more information about grant tokens.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['GrantConstraintArgs', 'GrantConstraintArgsDict']]]] constraints: A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html).
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] grant_creation_tokens: A list of grant tokens to be used when creating the grant. See [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token) for more information about grant tokens.
         :param pulumi.Input[_builtins.str] grantee_principal: The principal that is given permission to perform the operations that the grant permits in ARN format. Note that due to eventual consistency issues around IAM principals, the providers's state may not always be refreshed to reflect what is true in AWS.
         :param pulumi.Input[_builtins.str] key_id: The unique identifier for the customer master key (CMK) that the grant applies to. Specify the key ID or the Amazon Resource Name (ARN) of the CMK. To specify a CMK in a different AWS account, you must use the key ARN.
         :param pulumi.Input[_builtins.str] name: A friendly name for identifying the grant.
@@ -494,10 +494,10 @@ class Grant(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['GrantConstraintArgs', 'GrantConstraintArgsDict']]]] constraints: A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](http://docs.aws.amazon.com/kms/latest/developerguide/encryption-context.html).
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] grant_creation_tokens: A list of grant tokens to be used when creating the grant. See [Grant Tokens](http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#grant_token) for more information about grant tokens.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['GrantConstraintArgs', 'GrantConstraintArgsDict']]]] constraints: A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html).
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] grant_creation_tokens: A list of grant tokens to be used when creating the grant. See [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token) for more information about grant tokens.
         :param pulumi.Input[_builtins.str] grant_id: The unique identifier for the grant.
-        :param pulumi.Input[_builtins.str] grant_token: The grant token for the created grant. For more information, see [Grant Tokens](http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#grant_token).
+        :param pulumi.Input[_builtins.str] grant_token: The grant token for the created grant. For more information, see [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token).
         :param pulumi.Input[_builtins.str] grantee_principal: The principal that is given permission to perform the operations that the grant permits in ARN format. Note that due to eventual consistency issues around IAM principals, the providers's state may not always be refreshed to reflect what is true in AWS.
         :param pulumi.Input[_builtins.str] key_id: The unique identifier for the customer master key (CMK) that the grant applies to. Specify the key ID or the Amazon Resource Name (ARN) of the CMK. To specify a CMK in a different AWS account, you must use the key ARN.
         :param pulumi.Input[_builtins.str] name: A friendly name for identifying the grant.
@@ -528,7 +528,7 @@ class Grant(pulumi.CustomResource):
     @pulumi.getter
     def constraints(self) -> pulumi.Output[Optional[Sequence['outputs.GrantConstraint']]]:
         """
-        A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](http://docs.aws.amazon.com/kms/latest/developerguide/encryption-context.html).
+        A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see [Encryption Context](https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html).
         """
         return pulumi.get(self, "constraints")
 
@@ -536,7 +536,7 @@ class Grant(pulumi.CustomResource):
     @pulumi.getter(name="grantCreationTokens")
     def grant_creation_tokens(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
         """
-        A list of grant tokens to be used when creating the grant. See [Grant Tokens](http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#grant_token) for more information about grant tokens.
+        A list of grant tokens to be used when creating the grant. See [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token) for more information about grant tokens.
         """
         return pulumi.get(self, "grant_creation_tokens")
 
@@ -552,7 +552,7 @@ class Grant(pulumi.CustomResource):
     @pulumi.getter(name="grantToken")
     def grant_token(self) -> pulumi.Output[_builtins.str]:
         """
-        The grant token for the created grant. For more information, see [Grant Tokens](http://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#grant_token).
+        The grant token for the created grant. For more information, see [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token).
         """
         return pulumi.get(self, "grant_token")
 

pulumi_aws/lambda_/_inputs.py

@@ -800,7 +800,7 @@ if not MYPY:
     class EventSourceMappingDestinationConfigOnFailureArgsDict(TypedDict):
         destination_arn: pulumi.Input[_builtins.str]
         """
-        ARN of the destination resource.
+        ARN of the destination resource, or `kafka://your-topic-name` for Amazon MSK and self-managed Apache Kafka destinations.
         """
 elif False:
     EventSourceMappingDestinationConfigOnFailureArgsDict: TypeAlias = Mapping[str, Any]
@@ -810,7 +810,7 @@ class EventSourceMappingDestinationConfigOnFailureArgs:
     def __init__(__self__, *,
                  destination_arn: pulumi.Input[_builtins.str]):
         """
-        :param pulumi.Input[_builtins.str] destination_arn: ARN of the destination resource.
+        :param pulumi.Input[_builtins.str] destination_arn: ARN of the destination resource, or `kafka://your-topic-name` for Amazon MSK and self-managed Apache Kafka destinations.
         """
         pulumi.set(__self__, "destination_arn", destination_arn)
 
@@ -818,7 +818,7 @@ class EventSourceMappingDestinationConfigOnFailureArgs:
     @pulumi.getter(name="destinationArn")
     def destination_arn(self) -> pulumi.Input[_builtins.str]:
         """
-        ARN of the destination resource.
+        ARN of the destination resource, or `kafka://your-topic-name` for Amazon MSK and self-managed Apache Kafka destinations.
         """
         return pulumi.get(self, "destination_arn")
 
@@ -1003,6 +1003,10 @@ if not MYPY:
         """
         Minimum number of event pollers this event source can scale down to. The range is between 1 and 200.
         """
+        poller_group_name: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The name of the provisioned poller group used to group multiple ESMs within the event source's VPC to share Event Poller Unit (EPU) capacity. You can use this option to optimize Provisioned mode costs for your ESMs. You can group up to 100 ESMs per poller group and aggregate maximum pollers across all ESMs in a group cannot exceed 2000.
+        """
 elif False:
     EventSourceMappingProvisionedPollerConfigArgsDict: TypeAlias = Mapping[str, Any]
 
@@ -1010,15 +1014,19 @@ elif False:
 class EventSourceMappingProvisionedPollerConfigArgs:
     def __init__(__self__, *,
                  maximum_pollers: Optional[pulumi.Input[_builtins.int]] = None,
-                 minimum_pollers: Optional[pulumi.Input[_builtins.int]] = None):
+                 minimum_pollers: Optional[pulumi.Input[_builtins.int]] = None,
+                 poller_group_name: Optional[pulumi.Input[_builtins.str]] = None):
         """
         :param pulumi.Input[_builtins.int] maximum_pollers: Maximum number of event pollers this event source can scale up to. The range is between 1 and 2000.
         :param pulumi.Input[_builtins.int] minimum_pollers: Minimum number of event pollers this event source can scale down to. The range is between 1 and 200.
+        :param pulumi.Input[_builtins.str] poller_group_name: The name of the provisioned poller group used to group multiple ESMs within the event source's VPC to share Event Poller Unit (EPU) capacity. You can use this option to optimize Provisioned mode costs for your ESMs. You can group up to 100 ESMs per poller group and aggregate maximum pollers across all ESMs in a group cannot exceed 2000.
         """
         if maximum_pollers is not None:
             pulumi.set(__self__, "maximum_pollers", maximum_pollers)
         if minimum_pollers is not None:
             pulumi.set(__self__, "minimum_pollers", minimum_pollers)
+        if poller_group_name is not None:
+            pulumi.set(__self__, "poller_group_name", poller_group_name)
 
     @_builtins.property
     @pulumi.getter(name="maximumPollers")
@@ -1044,6 +1052,18 @@ class EventSourceMappingProvisionedPollerConfigArgs:
     def minimum_pollers(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "minimum_pollers", value)
 
+    @_builtins.property
+    @pulumi.getter(name="pollerGroupName")
+    def poller_group_name(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The name of the provisioned poller group used to group multiple ESMs within the event source's VPC to share Event Poller Unit (EPU) capacity. You can use this option to optimize Provisioned mode costs for your ESMs. You can group up to 100 ESMs per poller group and aggregate maximum pollers across all ESMs in a group cannot exceed 2000.
+        """
+        return pulumi.get(self, "poller_group_name")
+
+    @poller_group_name.setter
+    def poller_group_name(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "poller_group_name", value)
+
 
 if not MYPY:
     class EventSourceMappingScalingConfigArgsDict(TypedDict):

pulumi_aws/lambda_/event_source_mapping.py

@@ -1241,6 +1241,7 @@ class EventSourceMapping(pulumi.CustomResource):
             provisioned_poller_config={
                 "maximum_pollers": 100,
                 "minimum_pollers": 10,
+                "poller_group_name": "group-123",
             })
         ```
 
@@ -1493,6 +1494,7 @@ class EventSourceMapping(pulumi.CustomResource):
             provisioned_poller_config={
                 "maximum_pollers": 100,
                 "minimum_pollers": 10,
+                "poller_group_name": "group-123",
             })
         ```
 

pulumi_aws/lambda_/function.py

@@ -704,6 +704,7 @@ class _FunctionState:
                  replace_security_groups_on_destroy: Optional[pulumi.Input[_builtins.bool]] = None,
                  replacement_security_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  reserved_concurrent_executions: Optional[pulumi.Input[_builtins.int]] = None,
+                 response_streaming_invoke_arn: Optional[pulumi.Input[_builtins.str]] = None,
                  role: Optional[pulumi.Input[_builtins.str]] = None,
                  runtime: Optional[pulumi.Input[Union[_builtins.str, 'Runtime']]] = None,
                  s3_bucket: Optional[pulumi.Input[_builtins.str]] = None,
@@ -756,6 +757,7 @@ class _FunctionState:
         :param pulumi.Input[_builtins.bool] replace_security_groups_on_destroy: Whether to replace the security groups on the function's VPC configuration prior to destruction. Default is `false`.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] replacement_security_group_ids: List of security group IDs to assign to the function's VPC configuration prior to destruction. Required if `replace_security_groups_on_destroy` is `true`.
         :param pulumi.Input[_builtins.int] reserved_concurrent_executions: Amount of reserved concurrent executions for this lambda function. A value of `0` disables lambda from being triggered and `-1` removes any concurrency limitations. Defaults to Unreserved Concurrency Limits `-1`.
+        :param pulumi.Input[_builtins.str] response_streaming_invoke_arn: ARN to be used for invoking Lambda Function from API Gateway with response streaming - to be used in `apigateway.Integration`'s `uri`.
         :param pulumi.Input[_builtins.str] role: ARN of the function's execution role. The role provides the function's identity and access to AWS services and resources.
                
                The following arguments are optional:
@@ -840,6 +842,8 @@ class _FunctionState:
             pulumi.set(__self__, "replacement_security_group_ids", replacement_security_group_ids)
         if reserved_concurrent_executions is not None:
             pulumi.set(__self__, "reserved_concurrent_executions", reserved_concurrent_executions)
+        if response_streaming_invoke_arn is not None:
+            pulumi.set(__self__, "response_streaming_invoke_arn", response_streaming_invoke_arn)
         if role is not None:
             pulumi.set(__self__, "role", role)
         if runtime is not None:
@@ -1251,6 +1255,18 @@ class _FunctionState:
     def reserved_concurrent_executions(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "reserved_concurrent_executions", value)
 
+    @_builtins.property
+    @pulumi.getter(name="responseStreamingInvokeArn")
+    def response_streaming_invoke_arn(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        ARN to be used for invoking Lambda Function from API Gateway with response streaming - to be used in `apigateway.Integration`'s `uri`.
+        """
+        return pulumi.get(self, "response_streaming_invoke_arn")
+
+    @response_streaming_invoke_arn.setter
+    def response_streaming_invoke_arn(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "response_streaming_invoke_arn", value)
+
     @_builtins.property
     @pulumi.getter
     def role(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -2581,6 +2597,7 @@ class Function(pulumi.CustomResource):
             __props__.__dict__["last_modified"] = None
             __props__.__dict__["qualified_arn"] = None
             __props__.__dict__["qualified_invoke_arn"] = None
+            __props__.__dict__["response_streaming_invoke_arn"] = None
             __props__.__dict__["signing_job_arn"] = None
             __props__.__dict__["signing_profile_version_arn"] = None
             __props__.__dict__["source_code_size"] = None
@@ -2627,6 +2644,7 @@ class Function(pulumi.CustomResource):
             replace_security_groups_on_destroy: Optional[pulumi.Input[_builtins.bool]] = None,
             replacement_security_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
             reserved_concurrent_executions: Optional[pulumi.Input[_builtins.int]] = None,
+            response_streaming_invoke_arn: Optional[pulumi.Input[_builtins.str]] = None,
             role: Optional[pulumi.Input[_builtins.str]] = None,
             runtime: Optional[pulumi.Input[Union[_builtins.str, 'Runtime']]] = None,
             s3_bucket: Optional[pulumi.Input[_builtins.str]] = None,
@@ -2684,6 +2702,7 @@ class Function(pulumi.CustomResource):
         :param pulumi.Input[_builtins.bool] replace_security_groups_on_destroy: Whether to replace the security groups on the function's VPC configuration prior to destruction. Default is `false`.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] replacement_security_group_ids: List of security group IDs to assign to the function's VPC configuration prior to destruction. Required if `replace_security_groups_on_destroy` is `true`.
         :param pulumi.Input[_builtins.int] reserved_concurrent_executions: Amount of reserved concurrent executions for this lambda function. A value of `0` disables lambda from being triggered and `-1` removes any concurrency limitations. Defaults to Unreserved Concurrency Limits `-1`.
+        :param pulumi.Input[_builtins.str] response_streaming_invoke_arn: ARN to be used for invoking Lambda Function from API Gateway with response streaming - to be used in `apigateway.Integration`'s `uri`.
         :param pulumi.Input[_builtins.str] role: ARN of the function's execution role. The role provides the function's identity and access to AWS services and resources.
                
                The following arguments are optional:
@@ -2741,6 +2760,7 @@ class Function(pulumi.CustomResource):
         __props__.__dict__["replace_security_groups_on_destroy"] = replace_security_groups_on_destroy
         __props__.__dict__["replacement_security_group_ids"] = replacement_security_group_ids
         __props__.__dict__["reserved_concurrent_executions"] = reserved_concurrent_executions
+        __props__.__dict__["response_streaming_invoke_arn"] = response_streaming_invoke_arn
         __props__.__dict__["role"] = role
         __props__.__dict__["runtime"] = runtime
         __props__.__dict__["s3_bucket"] = s3_bucket
@@ -3010,6 +3030,14 @@ class Function(pulumi.CustomResource):
         """
         return pulumi.get(self, "reserved_concurrent_executions")
 
+    @_builtins.property
+    @pulumi.getter(name="responseStreamingInvokeArn")
+    def response_streaming_invoke_arn(self) -> pulumi.Output[_builtins.str]:
+        """
+        ARN to be used for invoking Lambda Function from API Gateway with response streaming - to be used in `apigateway.Integration`'s `uri`.
+        """
+        return pulumi.get(self, "response_streaming_invoke_arn")
+
     @_builtins.property
     @pulumi.getter
     def role(self) -> pulumi.Output[_builtins.str]:

pulumi_aws/lambda_/function_url.py

@@ -296,6 +296,8 @@ class FunctionUrl(pulumi.CustomResource):
         """
         Manages a Lambda function URL. Creates a dedicated HTTP(S) endpoint for a Lambda function to enable direct invocation via HTTP requests.
 
+        > **NOTE:** When [`authorization_type` is `"NONE"`](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html#urls-auth-none) the `lambda:InvokeFunctionUrl` permission allowing a public endpoint and `lambda:InvokeFunction` permission with the `InvokedViaFunctionUrl` flag set to `true` are automatically added to the Lambda function on creation. These policies are NOT removed from AWS when the resource is destroyed.
+
         ## Example Usage
 
         ### Basic Function URL with No Authentication
@@ -367,6 +369,8 @@ class FunctionUrl(pulumi.CustomResource):
         """
         Manages a Lambda function URL. Creates a dedicated HTTP(S) endpoint for a Lambda function to enable direct invocation via HTTP requests.
 
+        > **NOTE:** When [`authorization_type` is `"NONE"`](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html#urls-auth-none) the `lambda:InvokeFunctionUrl` permission allowing a public endpoint and `lambda:InvokeFunction` permission with the `InvokedViaFunctionUrl` flag set to `true` are automatically added to the Lambda function on creation. These policies are NOT removed from AWS when the resource is destroyed.
+
         ## Example Usage
 
         ### Basic Function URL with No Authentication

pulumi_aws/lambda_/get_function.py

@@ -27,7 +27,7 @@ class GetFunctionResult:
     """
     A collection of values returned by getFunction.
     """
-    def __init__(__self__, architectures=None, arn=None, capacity_provider_configs=None, code_sha256=None, code_signing_config_arn=None, dead_letter_config=None, description=None, durable_configs=None, environment=None, ephemeral_storages=None, file_system_configs=None, function_name=None, handler=None, id=None, image_uri=None, invoke_arn=None, kms_key_arn=None, last_modified=None, layers=None, logging_configs=None, memory_size=None, qualified_arn=None, qualified_invoke_arn=None, qualifier=None, region=None, reserved_concurrent_executions=None, role=None, runtime=None, signing_job_arn=None, signing_profile_version_arn=None, source_code_hash=None, source_code_size=None, source_kms_key_arn=None, tags=None, tenancy_configs=None, timeout=None, tracing_config=None, version=None, vpc_config=None):
+    def __init__(__self__, architectures=None, arn=None, capacity_provider_configs=None, code_sha256=None, code_signing_config_arn=None, dead_letter_config=None, description=None, durable_configs=None, environment=None, ephemeral_storages=None, file_system_configs=None, function_name=None, handler=None, id=None, image_uri=None, invoke_arn=None, kms_key_arn=None, last_modified=None, layers=None, logging_configs=None, memory_size=None, qualified_arn=None, qualified_invoke_arn=None, qualifier=None, region=None, reserved_concurrent_executions=None, response_streaming_invoke_arn=None, role=None, runtime=None, signing_job_arn=None, signing_profile_version_arn=None, source_code_hash=None, source_code_size=None, source_kms_key_arn=None, tags=None, tenancy_configs=None, timeout=None, tracing_config=None, version=None, vpc_config=None):
         if architectures and not isinstance(architectures, list):
             raise TypeError("Expected argument 'architectures' to be a list")
         pulumi.set(__self__, "architectures", architectures)
@@ -106,6 +106,9 @@ class GetFunctionResult:
         if reserved_concurrent_executions and not isinstance(reserved_concurrent_executions, int):
             raise TypeError("Expected argument 'reserved_concurrent_executions' to be a int")
         pulumi.set(__self__, "reserved_concurrent_executions", reserved_concurrent_executions)
+        if response_streaming_invoke_arn and not isinstance(response_streaming_invoke_arn, str):
+            raise TypeError("Expected argument 'response_streaming_invoke_arn' to be a str")
+        pulumi.set(__self__, "response_streaming_invoke_arn", response_streaming_invoke_arn)
         if role and not isinstance(role, str):
             raise TypeError("Expected argument 'role' to be a str")
         pulumi.set(__self__, "role", role)
@@ -345,6 +348,14 @@ class GetFunctionResult:
         """
         return pulumi.get(self, "reserved_concurrent_executions")
 
+    @_builtins.property
+    @pulumi.getter(name="responseStreamingInvokeArn")
+    def response_streaming_invoke_arn(self) -> _builtins.str:
+        """
+        ARN to be used for invoking Lambda Function from API Gateway with response streaming.
+        """
+        return pulumi.get(self, "response_streaming_invoke_arn")
+
     @_builtins.property
     @pulumi.getter
     def role(self) -> _builtins.str:
@@ -483,6 +494,7 @@ class AwaitableGetFunctionResult(GetFunctionResult):
             qualifier=self.qualifier,
             region=self.region,
             reserved_concurrent_executions=self.reserved_concurrent_executions,
+            response_streaming_invoke_arn=self.response_streaming_invoke_arn,
             role=self.role,
             runtime=self.runtime,
             signing_job_arn=self.signing_job_arn,
@@ -651,6 +663,7 @@ def get_function(function_name: Optional[_builtins.str] = None,
         qualifier=pulumi.get(__ret__, 'qualifier'),
         region=pulumi.get(__ret__, 'region'),
         reserved_concurrent_executions=pulumi.get(__ret__, 'reserved_concurrent_executions'),
+        response_streaming_invoke_arn=pulumi.get(__ret__, 'response_streaming_invoke_arn'),
         role=pulumi.get(__ret__, 'role'),
         runtime=pulumi.get(__ret__, 'runtime'),
         signing_job_arn=pulumi.get(__ret__, 'signing_job_arn'),
@@ -816,6 +829,7 @@ def get_function_output(function_name: Optional[pulumi.Input[_builtins.str]] = N
         qualifier=pulumi.get(__response__, 'qualifier'),
         region=pulumi.get(__response__, 'region'),
         reserved_concurrent_executions=pulumi.get(__response__, 'reserved_concurrent_executions'),
+        response_streaming_invoke_arn=pulumi.get(__response__, 'response_streaming_invoke_arn'),
         role=pulumi.get(__response__, 'role'),
         runtime=pulumi.get(__response__, 'runtime'),
         signing_job_arn=pulumi.get(__response__, 'signing_job_arn'),

pulumi_aws/lambda_/outputs.py

@@ -709,7 +709,7 @@ class EventSourceMappingDestinationConfigOnFailure(dict):
     def __init__(__self__, *,
                  destination_arn: _builtins.str):
         """
-        :param _builtins.str destination_arn: ARN of the destination resource.
+        :param _builtins.str destination_arn: ARN of the destination resource, or `kafka://your-topic-name` for Amazon MSK and self-managed Apache Kafka destinations.
         """
         pulumi.set(__self__, "destination_arn", destination_arn)
 
@@ -717,7 +717,7 @@ class EventSourceMappingDestinationConfigOnFailure(dict):
     @pulumi.getter(name="destinationArn")
     def destination_arn(self) -> _builtins.str:
         """
-        ARN of the destination resource.
+        ARN of the destination resource, or `kafka://your-topic-name` for Amazon MSK and self-managed Apache Kafka destinations.
         """
         return pulumi.get(self, "destination_arn")
 
@@ -850,6 +850,8 @@ class EventSourceMappingProvisionedPollerConfig(dict):
             suggest = "maximum_pollers"
         elif key == "minimumPollers":
             suggest = "minimum_pollers"
+        elif key == "pollerGroupName":
+            suggest = "poller_group_name"
 
         if suggest:
             pulumi.log.warn(f"Key '{key}' not found in EventSourceMappingProvisionedPollerConfig. Access the value via the '{suggest}' property getter instead.")
@@ -864,15 +866,19 @@ class EventSourceMappingProvisionedPollerConfig(dict):
 
     def __init__(__self__, *,
                  maximum_pollers: Optional[_builtins.int] = None,
-                 minimum_pollers: Optional[_builtins.int] = None):
+                 minimum_pollers: Optional[_builtins.int] = None,
+                 poller_group_name: Optional[_builtins.str] = None):
         """
         :param _builtins.int maximum_pollers: Maximum number of event pollers this event source can scale up to. The range is between 1 and 2000.
         :param _builtins.int minimum_pollers: Minimum number of event pollers this event source can scale down to. The range is between 1 and 200.
+        :param _builtins.str poller_group_name: The name of the provisioned poller group used to group multiple ESMs within the event source's VPC to share Event Poller Unit (EPU) capacity. You can use this option to optimize Provisioned mode costs for your ESMs. You can group up to 100 ESMs per poller group and aggregate maximum pollers across all ESMs in a group cannot exceed 2000.
         """
         if maximum_pollers is not None:
             pulumi.set(__self__, "maximum_pollers", maximum_pollers)
         if minimum_pollers is not None:
             pulumi.set(__self__, "minimum_pollers", minimum_pollers)
+        if poller_group_name is not None:
+            pulumi.set(__self__, "poller_group_name", poller_group_name)
 
     @_builtins.property
     @pulumi.getter(name="maximumPollers")
@@ -890,6 +896,14 @@ class EventSourceMappingProvisionedPollerConfig(dict):
         """
         return pulumi.get(self, "minimum_pollers")
 
+    @_builtins.property
+    @pulumi.getter(name="pollerGroupName")
+    def poller_group_name(self) -> Optional[_builtins.str]:
+        """
+        The name of the provisioned poller group used to group multiple ESMs within the event source's VPC to share Event Poller Unit (EPU) capacity. You can use this option to optimize Provisioned mode costs for your ESMs. You can group up to 100 ESMs per poller group and aggregate maximum pollers across all ESMs in a group cannot exceed 2000.
+        """
+        return pulumi.get(self, "poller_group_name")
+
 
 @pulumi.output_type
 class EventSourceMappingScalingConfig(dict):

pulumi_aws/lambda_/permission.py

@@ -24,6 +24,7 @@ class PermissionArgs:
                  principal: pulumi.Input[_builtins.str],
                  event_source_token: Optional[pulumi.Input[_builtins.str]] = None,
                  function_url_auth_type: Optional[pulumi.Input[_builtins.str]] = None,
+                 invoked_via_function_url: Optional[pulumi.Input[_builtins.bool]] = None,
                  principal_org_id: Optional[pulumi.Input[_builtins.str]] = None,
                  qualifier: Optional[pulumi.Input[_builtins.str]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
@@ -40,6 +41,7 @@ class PermissionArgs:
                The following arguments are optional:
         :param pulumi.Input[_builtins.str] event_source_token: Event Source Token for Alexa Skills
         :param pulumi.Input[_builtins.str] function_url_auth_type: Lambda Function URL authentication type. Valid values: `AWS_IAM` or `NONE`. Only valid with `lambda:InvokeFunctionUrl` action
+        :param pulumi.Input[_builtins.bool] invoked_via_function_url: Lambda Function URL invoke permission. Only valid with `lambda:InvokeFunction` action
         :param pulumi.Input[_builtins.str] principal_org_id: AWS Organizations ID to grant permission to all accounts under this organization
         :param pulumi.Input[_builtins.str] qualifier: Lambda function version or alias name
         :param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration
@@ -55,6 +57,8 @@ class PermissionArgs:
             pulumi.set(__self__, "event_source_token", event_source_token)
         if function_url_auth_type is not None:
             pulumi.set(__self__, "function_url_auth_type", function_url_auth_type)
+        if invoked_via_function_url is not None:
+            pulumi.set(__self__, "invoked_via_function_url", invoked_via_function_url)
         if principal_org_id is not None:
             pulumi.set(__self__, "principal_org_id", principal_org_id)
         if qualifier is not None:
@@ -132,6 +136,18 @@ class PermissionArgs:
     def function_url_auth_type(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "function_url_auth_type", value)
 
+    @_builtins.property
+    @pulumi.getter(name="invokedViaFunctionUrl")
+    def invoked_via_function_url(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Lambda Function URL invoke permission. Only valid with `lambda:InvokeFunction` action
+        """
+        return pulumi.get(self, "invoked_via_function_url")
+
+    @invoked_via_function_url.setter
+    def invoked_via_function_url(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "invoked_via_function_url", value)
+
     @_builtins.property
     @pulumi.getter(name="principalOrgId")
     def principal_org_id(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -224,6 +240,7 @@ class _PermissionState:
                  event_source_token: Optional[pulumi.Input[_builtins.str]] = None,
                  function: Optional[pulumi.Input[_builtins.str]] = None,
                  function_url_auth_type: Optional[pulumi.Input[_builtins.str]] = None,
+                 invoked_via_function_url: Optional[pulumi.Input[_builtins.bool]] = None,
                  principal: Optional[pulumi.Input[_builtins.str]] = None,
                  principal_org_id: Optional[pulumi.Input[_builtins.str]] = None,
                  qualifier: Optional[pulumi.Input[_builtins.str]] = None,
@@ -238,6 +255,7 @@ class _PermissionState:
         :param pulumi.Input[_builtins.str] event_source_token: Event Source Token for Alexa Skills
         :param pulumi.Input[_builtins.str] function: Name or ARN of the Lambda function
         :param pulumi.Input[_builtins.str] function_url_auth_type: Lambda Function URL authentication type. Valid values: `AWS_IAM` or `NONE`. Only valid with `lambda:InvokeFunctionUrl` action
+        :param pulumi.Input[_builtins.bool] invoked_via_function_url: Lambda Function URL invoke permission. Only valid with `lambda:InvokeFunction` action
         :param pulumi.Input[_builtins.str] principal: AWS service or account that invokes the function (e.g., `s3.amazonaws.com`, `sns.amazonaws.com`, AWS account ID, or AWS IAM principal)
                
                The following arguments are optional:
@@ -257,6 +275,8 @@ class _PermissionState:
             pulumi.set(__self__, "function", function)
         if function_url_auth_type is not None:
             pulumi.set(__self__, "function_url_auth_type", function_url_auth_type)
+        if invoked_via_function_url is not None:
+            pulumi.set(__self__, "invoked_via_function_url", invoked_via_function_url)
         if principal is not None:
             pulumi.set(__self__, "principal", principal)
         if principal_org_id is not None:
@@ -322,6 +342,18 @@ class _PermissionState:
     def function_url_auth_type(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "function_url_auth_type", value)
 
+    @_builtins.property
+    @pulumi.getter(name="invokedViaFunctionUrl")
+    def invoked_via_function_url(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Lambda Function URL invoke permission. Only valid with `lambda:InvokeFunction` action
+        """
+        return pulumi.get(self, "invoked_via_function_url")
+
+    @invoked_via_function_url.setter
+    def invoked_via_function_url(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "invoked_via_function_url", value)
+
     @_builtins.property
     @pulumi.getter
     def principal(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -431,6 +463,7 @@ class Permission(pulumi.CustomResource):
                  event_source_token: Optional[pulumi.Input[_builtins.str]] = None,
                  function: Optional[pulumi.Input[_builtins.str]] = None,
                  function_url_auth_type: Optional[pulumi.Input[_builtins.str]] = None,
+                 invoked_via_function_url: Optional[pulumi.Input[_builtins.bool]] = None,
                  principal: Optional[pulumi.Input[_builtins.str]] = None,
                  principal_org_id: Optional[pulumi.Input[_builtins.str]] = None,
                  qualifier: Optional[pulumi.Input[_builtins.str]] = None,
@@ -601,6 +634,7 @@ class Permission(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] event_source_token: Event Source Token for Alexa Skills
         :param pulumi.Input[_builtins.str] function: Name or ARN of the Lambda function
         :param pulumi.Input[_builtins.str] function_url_auth_type: Lambda Function URL authentication type. Valid values: `AWS_IAM` or `NONE`. Only valid with `lambda:InvokeFunctionUrl` action
+        :param pulumi.Input[_builtins.bool] invoked_via_function_url: Lambda Function URL invoke permission. Only valid with `lambda:InvokeFunction` action
         :param pulumi.Input[_builtins.str] principal: AWS service or account that invokes the function (e.g., `s3.amazonaws.com`, `sns.amazonaws.com`, AWS account ID, or AWS IAM principal)
                
                The following arguments are optional:
@@ -792,6 +826,7 @@ class Permission(pulumi.CustomResource):
                  event_source_token: Optional[pulumi.Input[_builtins.str]] = None,
                  function: Optional[pulumi.Input[_builtins.str]] = None,
                  function_url_auth_type: Optional[pulumi.Input[_builtins.str]] = None,
+                 invoked_via_function_url: Optional[pulumi.Input[_builtins.bool]] = None,
                  principal: Optional[pulumi.Input[_builtins.str]] = None,
                  principal_org_id: Optional[pulumi.Input[_builtins.str]] = None,
                  qualifier: Optional[pulumi.Input[_builtins.str]] = None,
@@ -817,6 +852,7 @@ class Permission(pulumi.CustomResource):
                 raise TypeError("Missing required property 'function'")
             __props__.__dict__["function"] = function
             __props__.__dict__["function_url_auth_type"] = function_url_auth_type
+            __props__.__dict__["invoked_via_function_url"] = invoked_via_function_url
             if principal is None and not opts.urn:
                 raise TypeError("Missing required property 'principal'")
             __props__.__dict__["principal"] = principal
@@ -841,6 +877,7 @@ class Permission(pulumi.CustomResource):
             event_source_token: Optional[pulumi.Input[_builtins.str]] = None,
             function: Optional[pulumi.Input[_builtins.str]] = None,
             function_url_auth_type: Optional[pulumi.Input[_builtins.str]] = None,
+            invoked_via_function_url: Optional[pulumi.Input[_builtins.bool]] = None,
             principal: Optional[pulumi.Input[_builtins.str]] = None,
             principal_org_id: Optional[pulumi.Input[_builtins.str]] = None,
             qualifier: Optional[pulumi.Input[_builtins.str]] = None,
@@ -860,6 +897,7 @@ class Permission(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] event_source_token: Event Source Token for Alexa Skills
         :param pulumi.Input[_builtins.str] function: Name or ARN of the Lambda function
         :param pulumi.Input[_builtins.str] function_url_auth_type: Lambda Function URL authentication type. Valid values: `AWS_IAM` or `NONE`. Only valid with `lambda:InvokeFunctionUrl` action
+        :param pulumi.Input[_builtins.bool] invoked_via_function_url: Lambda Function URL invoke permission. Only valid with `lambda:InvokeFunction` action
         :param pulumi.Input[_builtins.str] principal: AWS service or account that invokes the function (e.g., `s3.amazonaws.com`, `sns.amazonaws.com`, AWS account ID, or AWS IAM principal)
                
                The following arguments are optional:
@@ -879,6 +917,7 @@ class Permission(pulumi.CustomResource):
         __props__.__dict__["event_source_token"] = event_source_token
         __props__.__dict__["function"] = function
         __props__.__dict__["function_url_auth_type"] = function_url_auth_type
+        __props__.__dict__["invoked_via_function_url"] = invoked_via_function_url
         __props__.__dict__["principal"] = principal
         __props__.__dict__["principal_org_id"] = principal_org_id
         __props__.__dict__["qualifier"] = qualifier
@@ -921,6 +960,14 @@ class Permission(pulumi.CustomResource):
         """
         return pulumi.get(self, "function_url_auth_type")
 
+    @_builtins.property
+    @pulumi.getter(name="invokedViaFunctionUrl")
+    def invoked_via_function_url(self) -> pulumi.Output[Optional[_builtins.bool]]:
+        """
+        Lambda Function URL invoke permission. Only valid with `lambda:InvokeFunction` action
+        """
+        return pulumi.get(self, "invoked_via_function_url")
+
     @_builtins.property
     @pulumi.getter
     def principal(self) -> pulumi.Output[_builtins.str]: