@aws-cdk/aws-ec2-alpha 2.157.0-alpha.0 → 2.159.0-alpha.0

package/.warnings.jsii.js

@@ -88,6 +88,36 @@ function _aws_cdk_aws_ec2_alpha_IIpamScopeBase(p) {
 }
 function _aws_cdk_aws_ec2_alpha_Ipam(p) {
 }
+function _aws_cdk_aws_ec2_alpha_EgressOnlyInternetGatewayOptions(p) {
+    if (p == null)
+        return;
+    visitedObjects.add(p);
+    try {
+        if (p.subnets != null)
+            for (const o of p.subnets)
+                if (!visitedObjects.has(o))
+                    require("aws-cdk-lib/.warnings.jsii.js").aws_cdk_lib_aws_ec2_SubnetSelection(o);
+    }
+    finally {
+        visitedObjects.delete(p);
+    }
+}
+function _aws_cdk_aws_ec2_alpha_InternetGatewayOptions(p) {
+}
+function _aws_cdk_aws_ec2_alpha_VPNGatewayV2Options(p) {
+    if (p == null)
+        return;
+    visitedObjects.add(p);
+    try {
+        if (p.vpnRoutePropagation != null)
+            for (const o of p.vpnRoutePropagation)
+                if (!visitedObjects.has(o))
+                    require("aws-cdk-lib/.warnings.jsii.js").aws_cdk_lib_aws_ec2_SubnetSelection(o);
+    }
+    finally {
+        visitedObjects.delete(p);
+    }
+}
 function _aws_cdk_aws_ec2_alpha_IVpcV2(p) {
 }
 function _aws_cdk_aws_ec2_alpha_VpcV2Base(p) {
@@ -142,27 +172,47 @@ function _aws_cdk_aws_ec2_alpha_InternetGatewayProps(p) {
         visitedObjects.delete(p);
     }
 }
-function _aws_cdk_aws_ec2_alpha_VPNGatewayProps(p) {
+function _aws_cdk_aws_ec2_alpha_VPNGatewayV2Props(p) {
     if (p == null)
         return;
     visitedObjects.add(p);
     try {
         if (!visitedObjects.has(p.vpc))
             _aws_cdk_aws_ec2_alpha_IVpcV2(p.vpc);
+        if (p.vpnRoutePropagation != null)
+            for (const o of p.vpnRoutePropagation)
+                if (!visitedObjects.has(o))
+                    require("aws-cdk-lib/.warnings.jsii.js").aws_cdk_lib_aws_ec2_SubnetSelection(o);
     }
     finally {
         visitedObjects.delete(p);
     }
 }
-function _aws_cdk_aws_ec2_alpha_NatGatewayProps(p) {
+function _aws_cdk_aws_ec2_alpha_NatGatewayOptions(p) {
     if (p == null)
         return;
     visitedObjects.add(p);
     try {
+        if (!visitedObjects.has(p.subnet))
+            _aws_cdk_aws_ec2_alpha_ISubnetV2(p.subnet);
         if (!visitedObjects.has(p.connectivityType))
             _aws_cdk_aws_ec2_alpha_NatConnectivityType(p.connectivityType);
+    }
+    finally {
+        visitedObjects.delete(p);
+    }
+}
+function _aws_cdk_aws_ec2_alpha_NatGatewayProps(p) {
+    if (p == null)
+        return;
+    visitedObjects.add(p);
+    try {
         if (!visitedObjects.has(p.vpc))
             _aws_cdk_aws_ec2_alpha_IVpcV2(p.vpc);
+        if (!visitedObjects.has(p.subnet))
+            _aws_cdk_aws_ec2_alpha_ISubnetV2(p.subnet);
+        if (!visitedObjects.has(p.connectivityType))
+            _aws_cdk_aws_ec2_alpha_NatConnectivityType(p.connectivityType);
     }
     finally {
         visitedObjects.delete(p);
@@ -172,7 +222,7 @@ function _aws_cdk_aws_ec2_alpha_EgressOnlyInternetGateway(p) {
 }
 function _aws_cdk_aws_ec2_alpha_InternetGateway(p) {
 }
-function _aws_cdk_aws_ec2_alpha_VPNGateway(p) {
+function _aws_cdk_aws_ec2_alpha_VPNGatewayV2(p) {
 }
 function _aws_cdk_aws_ec2_alpha_NatGateway(p) {
 }
@@ -256,4 +306,4 @@ class DeprecationError extends Error {
         });
     }
 }
-module.exports = { print, getPropertyDescriptor, DeprecationError, _aws_cdk_aws_ec2_alpha_SecondaryAddressProps, _aws_cdk_aws_ec2_alpha_IpAddresses, _aws_cdk_aws_ec2_alpha_VpcCidrOptions, _aws_cdk_aws_ec2_alpha_IIpAddresses, _aws_cdk_aws_ec2_alpha_VpcV2Props, _aws_cdk_aws_ec2_alpha_VpcV2, _aws_cdk_aws_ec2_alpha_AddressFamily, _aws_cdk_aws_ec2_alpha_IpamPoolPublicIpSource, _aws_cdk_aws_ec2_alpha_AwsServiceName, _aws_cdk_aws_ec2_alpha_IpamProps, _aws_cdk_aws_ec2_alpha_IpamScopeType, _aws_cdk_aws_ec2_alpha_PoolOptions, _aws_cdk_aws_ec2_alpha_IpamPoolCidrProvisioningOptions, _aws_cdk_aws_ec2_alpha_IIpamPool, _aws_cdk_aws_ec2_alpha_IpamScopeOptions, _aws_cdk_aws_ec2_alpha_IpamOptions, _aws_cdk_aws_ec2_alpha_IIpamScopeBase, _aws_cdk_aws_ec2_alpha_Ipam, _aws_cdk_aws_ec2_alpha_IVpcV2, _aws_cdk_aws_ec2_alpha_VpcV2Base, _aws_cdk_aws_ec2_alpha_IpCidr, _aws_cdk_aws_ec2_alpha_SubnetV2Props, _aws_cdk_aws_ec2_alpha_ISubnetV2, _aws_cdk_aws_ec2_alpha_SubnetV2, _aws_cdk_aws_ec2_alpha_NatConnectivityType, _aws_cdk_aws_ec2_alpha_IRouteTarget, _aws_cdk_aws_ec2_alpha_EgressOnlyInternetGatewayProps, _aws_cdk_aws_ec2_alpha_InternetGatewayProps, _aws_cdk_aws_ec2_alpha_VPNGatewayProps, _aws_cdk_aws_ec2_alpha_NatGatewayProps, _aws_cdk_aws_ec2_alpha_EgressOnlyInternetGateway, _aws_cdk_aws_ec2_alpha_InternetGateway, _aws_cdk_aws_ec2_alpha_VPNGateway, _aws_cdk_aws_ec2_alpha_NatGateway, _aws_cdk_aws_ec2_alpha_RouteTargetProps, _aws_cdk_aws_ec2_alpha_RouteTargetType, _aws_cdk_aws_ec2_alpha_IRouteV2, _aws_cdk_aws_ec2_alpha_RouteProps, _aws_cdk_aws_ec2_alpha_Route, _aws_cdk_aws_ec2_alpha_RouteTableProps, _aws_cdk_aws_ec2_alpha_RouteTable };
+module.exports = { print, getPropertyDescriptor, DeprecationError, _aws_cdk_aws_ec2_alpha_SecondaryAddressProps, _aws_cdk_aws_ec2_alpha_IpAddresses, _aws_cdk_aws_ec2_alpha_VpcCidrOptions, _aws_cdk_aws_ec2_alpha_IIpAddresses, _aws_cdk_aws_ec2_alpha_VpcV2Props, _aws_cdk_aws_ec2_alpha_VpcV2, _aws_cdk_aws_ec2_alpha_AddressFamily, _aws_cdk_aws_ec2_alpha_IpamPoolPublicIpSource, _aws_cdk_aws_ec2_alpha_AwsServiceName, _aws_cdk_aws_ec2_alpha_IpamProps, _aws_cdk_aws_ec2_alpha_IpamScopeType, _aws_cdk_aws_ec2_alpha_PoolOptions, _aws_cdk_aws_ec2_alpha_IpamPoolCidrProvisioningOptions, _aws_cdk_aws_ec2_alpha_IIpamPool, _aws_cdk_aws_ec2_alpha_IpamScopeOptions, _aws_cdk_aws_ec2_alpha_IpamOptions, _aws_cdk_aws_ec2_alpha_IIpamScopeBase, _aws_cdk_aws_ec2_alpha_Ipam, _aws_cdk_aws_ec2_alpha_EgressOnlyInternetGatewayOptions, _aws_cdk_aws_ec2_alpha_InternetGatewayOptions, _aws_cdk_aws_ec2_alpha_VPNGatewayV2Options, _aws_cdk_aws_ec2_alpha_IVpcV2, _aws_cdk_aws_ec2_alpha_VpcV2Base, _aws_cdk_aws_ec2_alpha_IpCidr, _aws_cdk_aws_ec2_alpha_SubnetV2Props, _aws_cdk_aws_ec2_alpha_ISubnetV2, _aws_cdk_aws_ec2_alpha_SubnetV2, _aws_cdk_aws_ec2_alpha_NatConnectivityType, _aws_cdk_aws_ec2_alpha_IRouteTarget, _aws_cdk_aws_ec2_alpha_EgressOnlyInternetGatewayProps, _aws_cdk_aws_ec2_alpha_InternetGatewayProps, _aws_cdk_aws_ec2_alpha_VPNGatewayV2Props, _aws_cdk_aws_ec2_alpha_NatGatewayOptions, _aws_cdk_aws_ec2_alpha_NatGatewayProps, _aws_cdk_aws_ec2_alpha_EgressOnlyInternetGateway, _aws_cdk_aws_ec2_alpha_InternetGateway, _aws_cdk_aws_ec2_alpha_VPNGatewayV2, _aws_cdk_aws_ec2_alpha_NatGateway, _aws_cdk_aws_ec2_alpha_RouteTargetProps, _aws_cdk_aws_ec2_alpha_RouteTargetType, _aws_cdk_aws_ec2_alpha_IRouteV2, _aws_cdk_aws_ec2_alpha_RouteProps, _aws_cdk_aws_ec2_alpha_Route, _aws_cdk_aws_ec2_alpha_RouteTableProps, _aws_cdk_aws_ec2_alpha_RouteTable };

package/README.md

@@ -27,10 +27,10 @@ To create a VPC with both IPv4 and IPv6 support:
 ```ts
 
 const stack = new Stack();
-new vpc_v2.VpcV2(this, 'Vpc', {
-  primaryAddressBlock: vpc_v2.IpAddresses.ipv4('10.0.0.0/24'),
+new VpcV2(this, 'Vpc', {
+  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/24'),
   secondaryAddressBlocks: [
-    vpc_v2.IpAddresses.amazonProvidedIpv6({cidrBlockName: 'AmazonProvidedIpv6'}),
+    IpAddresses.amazonProvidedIpv6({cidrBlockName: 'AmazonProvidedIpv6'}),
   ],
 });
 ```
@@ -47,18 +47,18 @@ This new construct can be used to add subnets to a `VpcV2` instance:
 ```ts
 
 const stack = new Stack();
-const myVpc = new vpc_v2.VpcV2(this, 'Vpc', {
+const myVpc = new VpcV2(this, 'Vpc', {
   secondaryAddressBlocks: [
-    vpc_v2.IpAddresses.amazonProvidedIpv6({ cidrBlockName: 'AmazonProvidedIp'}),
+    IpAddresses.amazonProvidedIpv6({ cidrBlockName: 'AmazonProvidedIp'}),
   ],
 });
 
-new vpc_v2.SubnetV2(this, 'subnetA', {
+new SubnetV2(this, 'subnetA', {
   vpc: myVpc,
   availabilityZone: 'us-east-1a',
-  ipv4CidrBlock: new vpc_v2.IpCidr('10.0.0.0/24'),
-  ipv6CidrBlock: new vpc_v2.IpCidr('2a05:d02c:25:4000::/60'),
-  subnetType: ec2.SubnetType.PRIVATE_ISOLATED,
+  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),
+  ipv6CidrBlock: new IpCidr('2a05:d02c:25:4000::/60'),
+  subnetType: SubnetType.PRIVATE_ISOLATED,
 })
 ```
 
@@ -77,28 +77,28 @@ const ipam = new Ipam(this, 'Ipam', {
   operatingRegion: ['us-west-1']
 });
 const ipamPublicPool = ipam.publicScope.addPool('PublicPoolA', {
-  addressFamily: vpc_v2.AddressFamily.IP_V6,
+  addressFamily: AddressFamily.IP_V6,
   awsService: AwsServiceName.EC2,
   locale: 'us-west-1',
-  publicIpSource: vpc_v2.IpamPoolPublicIpSource.AMAZON,
+  publicIpSource: IpamPoolPublicIpSource.AMAZON,
 });
 ipamPublicPool.provisionCidr('PublicPoolACidrA', { netmaskLength: 52 } );
 
 const ipamPrivatePool = ipam.privateScope.addPool('PrivatePoolA', {
-  addressFamily: vpc_v2.AddressFamily.IP_V4,
+  addressFamily: AddressFamily.IP_V4,
 });
 ipamPrivatePool.provisionCidr('PrivatePoolACidrA', { netmaskLength: 8 } );
 
-new vpc_v2.VpcV2(this, 'Vpc', {
-  primaryAddressBlock: vpc_v2.IpAddresses.ipv4('10.0.0.0/24'),
+new VpcV2(this, 'Vpc', {
+  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/24'),
   secondaryAddressBlocks: [
-    vpc_v2.IpAddresses.amazonProvidedIpv6({ cidrBlockName: 'AmazonIpv6' }),
-    vpc_v2.IpAddresses.ipv6Ipam({
+    IpAddresses.amazonProvidedIpv6({ cidrBlockName: 'AmazonIpv6' }),
+    IpAddresses.ipv6Ipam({
       ipamPool: ipamPublicPool,
       netmaskLength: 52,
       cidrBlockName: 'ipv6Ipam',
     }),
-    vpc_v2.IpAddresses.ipv4Ipam({
+    IpAddresses.ipv4Ipam({
       ipamPool: ipamPrivatePool,
       netmaskLength: 8,
       cidrBlockName: 'ipv4Ipam',
@@ -116,64 +116,88 @@ Since `VpcV2` does not create subnets automatically, users have full control ove
 
 ```ts
 
-const myVpc = new vpc_v2.VpcV2(this, 'Vpc');
-const routeTable = new vpc_v2.RouteTable(this, 'RouteTable', {
+const myVpc = new VpcV2(this, 'Vpc');
+const routeTable = new RouteTable(this, 'RouteTable', {
   vpc: myVpc,
 });
-const subnet = new vpc_v2.SubnetV2(this, 'Subnet', {
+const subnet = new SubnetV2(this, 'Subnet', {
   vpc: myVpc,
   routeTable,
   availabilityZone: 'eu-west-2a',
   ipv4CidrBlock: new IpCidr('10.0.0.0/24'),
-  subnetType: ec2.SubnetType.PRIVATE_ISOLATED,
+  subnetType: SubnetType.PRIVATE_ISOLATED,
 });
 ```
 
-`Route`s can be created to link subnets to various different AWS services via gateways and endpoints. Each unique route target has its own dedicated construct that can be routed to a given subnet via the `Route` construct. An example using the `InternetGateway` construct can be seen below:
+`Routes` can be created to link subnets to various different AWS services via gateways and endpoints. Each unique route target has its own dedicated construct that can be routed to a given subnet via the `Route` construct. An example using the `InternetGateway` construct can be seen below:
 
 ```ts
 const stack = new Stack();
-const myVpc = new vpc_v2.VpcV2(this, 'Vpc');
-const routeTable = new vpc_v2.RouteTable(this, 'RouteTable', {
+const myVpc = new VpcV2(this, 'Vpc');
+const routeTable = new RouteTable(this, 'RouteTable', {
   vpc: myVpc,
 });
-const subnet = new vpc_v2.SubnetV2(this, 'Subnet', {
+const subnet = new SubnetV2(this, 'Subnet', {
   vpc: myVpc,
   availabilityZone: 'eu-west-2a',
   ipv4CidrBlock: new IpCidr('10.0.0.0/24'),
-  subnetType: ec2.SubnetType.PRIVATE_ISOLATED });
+  subnetType: SubnetType.PRIVATE_ISOLATED });
 
-const igw = new vpc_v2.InternetGateway(this, 'IGW', {
+const igw = new InternetGateway(this, 'IGW', {
   vpc: myVpc,
 });
-new vpc_v2.Route(this, 'IgwRoute', {
+new Route(this, 'IgwRoute', {
   routeTable,
   destination: '0.0.0.0/0',
   target:  { gateway: igw },
 });
 ```
 
+Alternatively, `Routes` can also be created via method `addRoute` in the `RouteTable` class. An example using the `EgressOnlyInternetGateway` construct can be seen below:
+Note: `EgressOnlyInternetGateway` can only be used to set up outbound IPv6 routing.
+
+```ts
+
+const stack = new Stack();
+const myVpc = new VpcV2(this, 'Vpc',{
+      primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),
+      secondaryAddressBlocks: [IpAddresses.amazonProvidedIpv6({
+      cidrBlockName: 'AmazonProvided',
+    })]
+    });
+
+const eigw = new EgressOnlyInternetGateway(this, 'EIGW', {
+  vpc: myVpc,
+});
+
+const routeTable = new RouteTable(this, 'RouteTable', {
+  vpc: myVpc,
+});
+
+routeTable.addRoute('EIGW', '::/0', { gateway: eigw });
+```
+
 Other route targets may require a deeper set of parameters to set up properly. For instance, the example below illustrates how to set up a `NatGateway`:
 
 ```ts
 
-const myVpc = new vpc_v2.VpcV2(this, 'Vpc');
-const routeTable = new vpc_v2.RouteTable(this, 'RouteTable', {
+const myVpc = new VpcV2(this, 'Vpc');
+const routeTable = new RouteTable(this, 'RouteTable', {
   vpc: myVpc,
 });
-const subnet = new vpc_v2.SubnetV2(this, 'Subnet', {
+const subnet = new SubnetV2(this, 'Subnet', {
   vpc: myVpc,
   availabilityZone: 'eu-west-2a',
   ipv4CidrBlock: new IpCidr('10.0.0.0/24'),
-  subnetType: ec2.SubnetType.PRIVATE_ISOLATED });
+  subnetType: SubnetType.PRIVATE_ISOLATED });
 
-const natgw = new vpc_v2.NatGateway(this, 'NatGW', {
+const natgw = new NatGateway(this, 'NatGW', {
   subnet: subnet,
   vpc: myVpc,
   connectivityType: NatConnectivityType.PRIVATE,
   privateIpAddress: '10.0.0.42',
 });
-new vpc_v2.Route(this, 'NatGwRoute', {
+new Route(this, 'NatGwRoute', {
   routeTable,
   destination: '0.0.0.0/0',
   target: { gateway: natgw },
@@ -184,24 +208,161 @@ It is also possible to set up endpoints connecting other AWS services. For insta
 
 ```ts
 
-const myVpc = new vpc_v2.VpcV2(this, 'Vpc');
-const routeTable = new vpc_v2.RouteTable(this, 'RouteTable', {
+const stack = new Stack();
+const myVpc = new VpcV2(this, 'Vpc');
+const routeTable = new RouteTable(this, 'RouteTable', {
   vpc: myVpc,
 });
-const subnet = new vpc_v2.SubnetV2(this, 'Subnet', {  
+const subnet = new SubnetV2(this, 'Subnet', {  
   vpc: myVpc,
   availabilityZone: 'eu-west-2a',
   ipv4CidrBlock: new IpCidr('10.0.0.0/24'),
-  subnetType: ec2.SubnetType.PRIVATE });
+  subnetType: SubnetType.PRIVATE });
 
 const dynamoEndpoint = new ec2.GatewayVpcEndpoint(this, 'DynamoEndpoint', {
   service: ec2.GatewayVpcEndpointAwsService.DYNAMODB,
   vpc: myVpc,
   subnets: [subnet],
 });
-new vpc_v2.Route(this, 'DynamoDBRoute', {
+new Route(this, 'DynamoDBRoute', {
   routeTable,
   destination: '0.0.0.0/0',
   target: { endpoint: dynamoEndpoint },
 });
 ```
+
+## Adding Egress-Only Internet Gateway to VPC
+
+An egress-only internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows outbound communication over IPv6 from instances in your VPC to the internet, and prevents the internet from initiating an IPv6 connection with your instances.
+
+For more information see [Enable outbound IPv6 traffic using an egress-only internet gateway](https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html).
+
+VpcV2 supports adding an egress only internet gateway to VPC using the `addEgressOnlyInternetGateway` method.
+
+By default, this method sets up a route to all outbound IPv6 address ranges, unless a specific destination is provided by the user. It can only be configured for IPv6-enabled VPCs.
+The `Subnets` parameter accepts a `SubnetFilter`, which can be based on a `SubnetType` in VpcV2. A new route will be added to the route tables of all subnets that match this filter.
+
+```ts
+
+const stack = new Stack();
+const myVpc = new VpcV2(this, 'Vpc',{
+      primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),
+      secondaryAddressBlocks: [IpAddresses.amazonProvidedIpv6({
+      cidrBlockName: 'AmazonProvided',
+    })]
+    });
+const routeTable = new RouteTable(this, 'RouteTable', {
+  vpc: myVpc,
+});
+const subnet = new SubnetV2(this, 'Subnet', {  
+  vpc: myVpc,
+  availabilityZone: 'eu-west-2a',
+  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),
+  ipv6CidrBlock: new IpCidr('2001:db8:1::/64'),
+  subnetType: SubnetType.PRIVATE });
+
+myVpc.addEgressOnlyInternetGateway({
+  subnets: [{subnetType: SubnetType.PRIVATE}],
+  destination: '::/60',
+})
+```
+
+## Adding NATGateway to the VPC
+
+A NAT gateway is a Network Address Translation (NAT) service.You can use a NAT gateway so that instances in a private subnet can connect to services outside your VPC but external services cannot initiate a connection with those instances.
+
+For more information, see [NAT gateway basics](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html).
+
+When you create a NAT gateway, you specify one of the following connectivity types:
+
+**Public – (Default)**: Instances in private subnets can connect to the internet through a public NAT gateway, but cannot receive unsolicited inbound connections from the internet
+
+**Private**: Instances in private subnets can connect to other VPCs or your on-premises network through a private NAT gateway. 
+
+To define the NAT gateway connectivity type as `ConnectivityType.Public`, you need to ensure that there is an IGW(Internet Gateway) attached to the subnet's VPC.
+Since a NATGW is associated with a particular subnet, providing `subnet` field in the input props is mandatory.
+
+Additionally, you can set up a route in any route table with the target set to the NAT Gateway. The function `addNatGateway` returns a `NATGateway` object that you can reference later.
+
+The code example below provides the definition for adding a NAT gateway to your subnet:
+
+```ts
+
+const stack = new Stack();
+const myVpc = new VpcV2(this, 'Vpc');
+const routeTable = new RouteTable(this, 'RouteTable', {
+  vpc: myVpc,
+});
+const subnet = new SubnetV2(this, 'Subnet', {  
+  vpc: myVpc,
+  availabilityZone: 'eu-west-2a',
+  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),
+  subnetType: SubnetType.PUBLIC });
+
+myVpc.addInternetGateway();
+myVpc.addNatGateway({
+  subnet: subnet,
+  connectivityType: NatConnectivityType.PUBLIC,
+});
+```
+
+## Enable VPNGateway for the VPC
+
+A virtual private gateway is the endpoint on the VPC side of your VPN connection.
+
+For more information, see [What is AWS Site-to-Site VPN?](https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html).
+
+VPN route propagation is a feature in Amazon Web Services (AWS) that automatically updates route tables in your Virtual Private Cloud (VPC) with routes learned from a VPN connection.
+
+To enable VPN route propogation, use the `vpnRoutePropagation` property to specify the subnets as an input to the function. VPN route propagation will then be enabled for each subnet with the corresponding route table IDs.
+
+Additionally, you can set up a route in any route table with the target set to the VPN Gateway. The function `enableVpnGatewayV2` returns a `VPNGatewayV2` object that you can reference later.
+
+The code example below provides the definition for setting up a VPN gateway with `vpnRoutePropogation` enabled:
+
+```ts
+
+const stack = new Stack();
+const myVpc = new VpcV2(this, 'Vpc');
+const vpnGateway = myVpc.enableVpnGatewayV2({
+  vpnRoutePropagation: [{ subnetType: SubnetType.PUBLIC }],
+  type: VpnConnectionType.IPSEC_1,
+});
+
+const routeTable = new RouteTable(stack, 'routeTable', { 
+  vpc: myVpc 
+  } );
+
+new Route(stack, 'route', {
+  destination: '172.31.0.0/24',
+  target: { gateway: vpnGateway },
+  routeTable: routeTable,
+});
+```
+
+## Adding InternetGateway to the VPC
+
+An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet. It supports both IPv4 and IPv6 traffic.
+
+For more information, see [Enable VPC internet access using internet gateways](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-igw-internet-access.html).
+
+You can add an internet gateway to a VPC using `addInternetGateway` method. By default, this method creates a route in all Public Subnets with outbound destination set to `0.0.0.0` for IPv4 and `::0` for IPv6 enabled VPC. 
+Instead of using the default settings, you can configure a custom destinatation range by providing an optional input `destination` to the method.
+
+The code example below shows how to add an internet gateway with a custom outbound destination IP range:
+
+```ts
+
+const stack = new Stack();
+const myVpc = new VpcV2(this, 'Vpc');
+
+const subnet = new SubnetV2(this, 'Subnet', {  
+  vpc: myVpc,
+  availabilityZone: 'eu-west-2a',
+  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),
+  subnetType: SubnetType.PUBLIC });
+
+myVpc.addInternetGateway({
+  ipv4Destination: '192.168.0.0/16',
+});
+```

package/awslint.json

@@ -2,6 +2,7 @@
     "exclude": [
       "from-method:@aws-cdk/aws-ec2-alpha.VpcV2",
       "attribute-tag:@aws-cdk/aws-ec2-alpha.RouteTable.routeTableId",
-      "from-method:@aws-cdk/aws-ec2-alpha.SubnetV2"
+      "from-method:@aws-cdk/aws-ec2-alpha.SubnetV2",
+      "from-method:@aws-cdk/aws-ec2-alpha.Route"
     ]
 }

package/lib/ipam.d.ts

@@ -52,12 +52,14 @@ export interface IpamProps {
      * Operating Regions are AWS Regions where the IPAM is allowed to manage IP address CIDRs
      * For more information about operating Regions, see [Create an IPAM](https://docs.aws.amazon.com//vpc/latest/ipam/create-ipam.html) in the *Amazon VPC IPAM User Guide* .
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipam.html#cfn-ec2-ipam-operatingregions
-     * @default Stack.region if defined else []
+     *
+     * @default - Stack.region if defined in the stack
      */
     readonly operatingRegion?: string[];
     /**
      * Name of IPAM that can be used for tagging resource
-     * @default none
+     *
+     * @default - If no name provided, no tags will be added to the IPAM
      */
     readonly ipamName?: string;
 }
@@ -86,6 +88,7 @@ export interface PoolOptions {
     readonly addressFamily: AddressFamily;
     /**
      * Information about the CIDRs provisioned to the pool.
+     *
      * @default - No CIDRs are provisioned
      */
     readonly ipv4ProvisionedCidrs?: string[];
@@ -95,13 +98,15 @@ export interface PoolOptions {
      * You can only allocate a CIDR for a VPC, for example, from an IPAM pool that shares a locale with the VPC’s Region.
      * Note that once you choose a Locale for a pool, you cannot modify it. If you choose an AWS Region for locale that has not been configured as an operating Region for the IPAM, you'll get an error.
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipampool.html#cfn-ec2-ipampool-locale
-     * @default - Current operating region
+     *
+     * @default - Current operating region of IPAM
      */
     readonly locale?: string;
     /**
      * The IP address source for pools in the public scope.
      * Only used for IPv6 address
      * Only allowed values to this are 'byoip' or 'amazon'
+     *
      * @default amazon
      */
     readonly publicIpSource?: IpamPoolPublicIpSource;
@@ -112,7 +117,7 @@ export interface PoolOptions {
     *
     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipampool.html#cfn-ec2-ipampool-awsservice
     *
-    * @default - No service
+    * @default - required in case of an IPv6, throws an error if not provided.
     */
     readonly awsService?: AwsServiceName;
 }
@@ -124,12 +129,14 @@ export interface PoolOptions {
 export interface IpamPoolCidrProvisioningOptions {
     /**
      * Ipv6 Netmask length for the CIDR
-     * @default none
+     *
+     * @default - pool provisioned without netmask length, need cidr range in this case
      */
     readonly netmaskLength?: number;
     /**
      * Ipv6 CIDR block for the IPAM pool
-     * @default none
+     *
+     * @default - pool provisioned without netmask length, need netmask length in this case
      */
     readonly cidr?: string;
 }
@@ -157,7 +164,8 @@ export interface IIpamPool {
 export interface IpamScopeOptions {
     /**
      * IPAM scope name that will be used for tagging
-     * @default none
+     *
+     * @default - no tags will be added to the scope
      */
     readonly ipamScopeName?: string;
 }
@@ -171,14 +179,14 @@ export interface IpamOptions {
      * CIDR Mask for Vpc
      * Only required when using AWS Ipam
      *
-     * @default - None
+     * @default - no netmask length for IPAM attached to VPC secondary address
      */
     readonly netmaskLength?: number;
     /**
      * Ipv4 or an Ipv6 IPAM pool
      * Only required when using AWS Ipam
      *
-     * @default - None
+     * @default - no pool attached to VPC secondary address
      */
     readonly ipamPool?: IIpamPool;
     /**