Optional ReadonlybucketS3 bucket name for Airflow artifacts (DAGs, plugins, requirements, scripts).
Auto-resolved from project when projectName is set. Artifacts are placed under
deployment/airflow/<environment-name>/ in this bucket.
Use cases: Shared project bucket; DAG storage; Plugin distribution
AWS: S3 bucket name
Validation: Optional; auto-wired from project if projectName provided
Optional ReadonlycreateFlag controlling CloudFormation output and stack export creation for construct resources
Optional ReadonlycreateFlag controlling SSM parameter creation for construct resource references enabling
Optional ReadonlycrossOptional ReadonlydataData admin roles granted Airflow access for ALL environments.
Use cases: Platform admin access; Cross-environment administration
AWS: IAM roles with Airflow access managed policies attached
Validation: Optional; array of valid MdaaRoleRef
Optional ReadonlydeploymentIAM role ARN for deploying DAG files to S3. Auto-resolved from project
when projectName is set. Used by BucketDeployment to upload DAGs to the
deployment/airflow/<env-name>/dags/ prefix.
Use cases: DAG deployment; CI/CD artifact upload; Project deployment coordination
AWS: IAM role ARN with S3 write access to the project bucket
Validation: Optional; valid IAM role ARN; auto-wired from project if projectName provided
ReadonlyenvironmentsMap of named MWAA environment configurations. Each key becomes the environment identifier processed through MDAA naming conventions.
Use cases: Multi-environment deployment; Named environment management
AWS: MWAA environments
Validation: Required; at least one environment entry
Optional ReadonlykmsKMS key ARN for encrypting all MWAA resources. Auto-resolved from project when projectName is set. When not provided and no project is configured, a dedicated KMS key is created.
Use cases: Shared encryption key; Project-level key management
AWS: KMS key ARN
Validation: Optional; valid KMS key ARN; auto-wired from project if projectName provided
ReadonlynamingMDAA naming implementation for consistent resource naming across all MDAA constructs
ReadonlyroleOptional Readonlytags
Props for the DataOps MWAA L3 Construct.