@aws-cdk/aws-ec2-alpha 2.245.0-alpha.0 → 2.247.0-alpha.0

package/.jsii

@@ -8,7 +8,7 @@
     "url": "https://aws.amazon.com"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.245.0",
+    "aws-cdk-lib": "^2.247.0",
     "constructs": "^10.5.0"
   },
   "dependencyClosure": {
@@ -2027,6 +2027,19 @@
             }
           }
         },
+        "aws-cdk-lib.aws_interconnect": {
+          "targets": {
+            "dotnet": {
+              "namespace": "Amazon.CDK.AWS.Interconnect"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.services.interconnect"
+            },
+            "python": {
+              "module": "aws_cdk.aws_interconnect"
+            }
+          }
+        },
         "aws-cdk-lib.aws_internetmonitor": {
           "targets": {
             "dotnet": {
@@ -3954,6 +3967,19 @@
             }
           }
         },
+        "aws-cdk-lib.aws_uxc": {
+          "targets": {
+            "dotnet": {
+              "namespace": "Amazon.CDK.AWS.UXC"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.services.uxc"
+            },
+            "python": {
+              "module": "aws_cdk.aws_uxc"
+            }
+          }
+        },
         "aws-cdk-lib.aws_verifiedpermissions": {
           "targets": {
             "dotnet": {
@@ -6246,6 +6272,22 @@
             }
           }
         },
+        "aws-cdk-lib.interfaces.aws_interconnect": {
+          "targets": {
+            "dotnet": {
+              "namespace": "Amazon.CDK.Interfaces.Interconnect"
+            },
+            "go": {
+              "packageName": "interfacesawsinterconnect"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.interfaces.interconnect"
+            },
+            "python": {
+              "module": "aws_cdk.interfaces.aws_interconnect"
+            }
+          }
+        },
         "aws-cdk-lib.interfaces.aws_internetmonitor": {
           "targets": {
             "dotnet": {
@@ -8390,6 +8432,22 @@
             }
           }
         },
+        "aws-cdk-lib.interfaces.aws_uxc": {
+          "targets": {
+            "dotnet": {
+              "namespace": "Amazon.CDK.Interfaces.UXC"
+            },
+            "go": {
+              "packageName": "interfacesawsuxc"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.interfaces.uxc"
+            },
+            "python": {
+              "module": "aws_cdk.interfaces.aws_uxc"
+            }
+          }
+        },
         "aws-cdk-lib.interfaces.aws_verifiedpermissions": {
           "targets": {
             "dotnet": {
@@ -8727,7 +8785,7 @@
   },
   "name": "@aws-cdk/aws-ec2-alpha",
   "readme": {
-    "markdown": "# Amazon VpcV2 Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Developer Preview](https://img.shields.io/badge/cdk--constructs-developer--preview-informational.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are in **developer preview** before they\n> become stable. We will only make breaking changes to address unforeseen API issues. Therefore,\n> these APIs are not subject to [Semantic Versioning](https://semver.org/), and breaking changes\n> will be announced in release notes. This means that while you may use them, you may need to\n> update your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\n## VpcV2\n\n`VpcV2` is a re-write of the [`ec2.Vpc`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.Vpc.html) construct. This new construct enables higher level of customization\non the VPC being created. `VpcV2` implements the existing [`IVpc`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.IVpc.html), therefore,\n`VpcV2` is compatible with other constructs that accepts `IVpc` (e.g. [`ApplicationLoadBalancer`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_elasticloadbalancingv2.ApplicationLoadBalancer.html#construct-props)).\n\n`VpcV2` supports the addition of both primary and secondary addresses. The primary address must be an IPv4 address, which can be specified as a CIDR string or assigned from an IPAM pool. Secondary addresses can be either IPv4 or IPv6.\nBy default, `VpcV2` assigns `10.0.0.0/16` as the primary CIDR if no other CIDR is specified.\n\nBelow is an example of creating a VPC with both IPv4 and IPv6 support:\n\n```ts\nconst stack = new Stack();\nnew VpcV2(this, 'Vpc', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/24'),\n  secondaryAddressBlocks: [\n    IpAddresses.amazonProvidedIpv6({cidrBlockName: 'AmazonProvidedIpv6'}),\n  ],\n});\n```\n\n`VpcV2` does not automatically create subnets or allocate IP addresses, which is different from the `Vpc` construct.\n\n## SubnetV2\n\n`SubnetV2` is a re-write of the [`ec2.Subnet`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.Subnet.html) construct.\nThis new construct can be used to add subnets to a `VpcV2` instance:\nNote: When defining a subnet with `SubnetV2`, CDK automatically creates a new route table, unless a route table is explicitly provided as an input to the construct.\nTo enable the `mapPublicIpOnLaunch` feature (which is `false` by default), set the property to `true` when creating the subnet.\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc', {\n  secondaryAddressBlocks: [\n    IpAddresses.amazonProvidedIpv6({ cidrBlockName: 'AmazonProvidedIp'}),\n  ],\n});\n\nnew SubnetV2(this, 'subnetA', {\n  vpc: myVpc,\n  availabilityZone: 'us-east-1a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  ipv6CidrBlock: new IpCidr('2a05:d02c:25:4000::/60'),\n  subnetType: SubnetType.PUBLIC,\n  mapPublicIpOnLaunch: true,\n})\n```\n\nSince `VpcV2` does not create subnets automatically, users have full control over IP addresses allocation across subnets.\n\n## IP Addresses Management\n\nAdditional CIDRs can be added to the VPC via the `secondaryAddressBlocks` property.\nThe following example illustrates the options of defining these secondary address blocks using `IPAM`:\n\nNote: There’s currently an issue with IPAM pool deletion that may affect the `cdk --destroy` command. This is because IPAM takes time to detect when the IP address pool has been deallocated after the VPC is deleted. The current workaround is to wait until the IP address is fully deallocated from the pool before retrying the deletion. Below command can be used to check allocations for a pool using CLI\n\n```shell\naws ec2 get-ipam-pool-allocations --ipam-pool-id <ipam-pool-id>\n```\n\nRef: https://docs.aws.amazon.com/cli/latest/reference/ec2/get-ipam-pool-allocations.html\n\n```ts\nconst stack = new Stack();\nconst ipam = new Ipam(this, 'Ipam', {\n  operatingRegions: ['us-west-1']\n});\nconst ipamPublicPool = ipam.publicScope.addPool('PublicPoolA', {\n  addressFamily: AddressFamily.IP_V6,\n  awsService: AwsServiceName.EC2,\n  locale: 'us-west-1',\n  publicIpSource: IpamPoolPublicIpSource.AMAZON,\n});\nipamPublicPool.provisionCidr('PublicPoolACidrA', { netmaskLength: 52 } );\n\nconst ipamPrivatePool = ipam.privateScope.addPool('PrivatePoolA', {\n  addressFamily: AddressFamily.IP_V4,\n});\nipamPrivatePool.provisionCidr('PrivatePoolACidrA', { netmaskLength: 8 } );\n\nnew VpcV2(this, 'Vpc', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/24'),\n  secondaryAddressBlocks: [\n    IpAddresses.amazonProvidedIpv6({ cidrBlockName: 'AmazonIpv6' }),\n    IpAddresses.ipv6Ipam({\n      ipamPool: ipamPublicPool,\n      netmaskLength: 52,\n      cidrBlockName: 'ipv6Ipam',\n    }),\n    IpAddresses.ipv4Ipam({\n      ipamPool: ipamPrivatePool,\n      netmaskLength: 8,\n      cidrBlockName: 'ipv4Ipam',\n    }),\n  ],\n});\n```\n\n### Bring your own IPv6 addresses (BYOIP)\n\nIf you have your own IP address that you would like to use with EC2, you can set up an IPv6 pool via the AWS CLI, and use that pool ID in your application.\n\nOnce you have certified your IP address block with an ROA and have obtained an X-509 certificate, you can run the following command to provision your CIDR block in your AWS account:\n\n```shell\naws ec2 provision-byoip-cidr --region <region> --cidr <your CIDR block> --cidr-authorization-context Message=\"1|aws|<account>|<your CIDR block>|<expiration date>|SHA256\".Signature=\"<signature>\"\n```\n\nWhen your BYOIP CIDR is provisioned, you can run the following command to retrieve your IPv6 pool ID, which will be used in your VPC declaration:\n\n```shell\naws ec2 describe-byoip-cidr --region <region>\n```\n\nFor more help on setting up your IPv6 address, please review the [EC2 Documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html).\n\nOnce you have provisioned your address block, you can use the IPv6 in your VPC as follows:\n\n```ts\nconst myVpc = new VpcV2(this, 'Vpc', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n  secondaryAddressBlocks: [IpAddresses.ipv6ByoipPool({\n    cidrBlockName: 'MyByoipCidrBlock',\n    ipv6PoolId: 'ipv6pool-ec2-someHashValue',\n    ipv6CidrBlock: '2001:db8::/32'\n  })],\n  enableDnsHostnames: true,\n  enableDnsSupport: true,\n});\n```\n\n## Routing\n\n`RouteTable` is a new construct that allows for route tables to be customized in a variety of ways. Using this construct, a customized route table can be added to the subnets defined using `SubnetV2`.\nFor instance, the following example shows how a custom route table can be created and appended to a `SubnetV2`:\n\n```ts\nconst myVpc = new VpcV2(this, 'Vpc');\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  routeTable,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PRIVATE_ISOLATED,\n});\n```\n\n`Routes` can be created to link subnets to various different AWS services via gateways and endpoints. Each unique route target has its own dedicated construct that can be routed to a given subnet via the `Route` construct. An example using the `InternetGateway` construct can be seen below:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PRIVATE_ISOLATED });\n\nconst igw = new InternetGateway(this, 'IGW', {\n  vpc: myVpc,\n});\nnew Route(this, 'IgwRoute', {\n  routeTable,\n  destination: '0.0.0.0/0',\n  target:  { gateway: igw },\n});\n```\n\nAlternatively, `Routes` can also be created via method `addRoute` in the `RouteTable` class. An example using the `EgressOnlyInternetGateway` construct can be seen below:\nNote: `EgressOnlyInternetGateway` can only be used to set up outbound IPv6 routing.\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc',{\n      primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n      secondaryAddressBlocks: [IpAddresses.amazonProvidedIpv6({\n      cidrBlockName: 'AmazonProvided',\n    })]\n    });\n\nconst eigw = new EgressOnlyInternetGateway(this, 'EIGW', {\n  vpc: myVpc,\n});\n\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\n\nrouteTable.addRoute('EIGW', '::/0', { gateway: eigw });\n```\n\nOther route targets may require a deeper set of parameters to set up properly. For instance, the example below illustrates how to set up a `NatGateway`:\n\n```ts\nconst myVpc = new VpcV2(this, 'Vpc');\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PRIVATE_ISOLATED });\n\nconst natgw = new NatGateway(this, 'NatGW', {\n  subnet: subnet,\n  vpc: myVpc,\n  connectivityType: NatConnectivityType.PRIVATE,\n  privateIpAddress: '10.0.0.42',\n});\nnew Route(this, 'NatGwRoute', {\n  routeTable,\n  destination: '0.0.0.0/0',\n  target: { gateway: natgw },\n});\n```\n\nIt is also possible to set up endpoints connecting other AWS services. For instance, the example below illustrates the linking of a Dynamo DB endpoint via the existing `ec2.GatewayVpcEndpoint` construct as a route target:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PRIVATE });\n\nconst dynamoEndpoint = new ec2.GatewayVpcEndpoint(this, 'DynamoEndpoint', {\n  service: ec2.GatewayVpcEndpointAwsService.DYNAMODB,\n  vpc: myVpc,\n  subnets: [subnet],\n});\nnew Route(this, 'DynamoDBRoute', {\n  routeTable,\n  destination: '0.0.0.0/0',\n  target: { endpoint: dynamoEndpoint },\n});\n```\n\n## VPC Peering Connection\n\nVPC peering connection allows you to connect two VPCs and route traffic between them using private IP addresses. The VpcV2 construct supports creating VPC peering connections through the `VPCPeeringConnection` construct from the `route` module.\n\nPeering Connection cannot be established between two VPCs with overlapping CIDR ranges. Please make sure the two VPC CIDRs do not overlap with each other else it will throw an error.\n\nFor more information, see [What is VPC peering?](https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html).\n\nThe following show examples of how to create a peering connection between two VPCs for all possible combinations of same-account or cross-account, and same-region or cross-region configurations.\n\nNote: You cannot create a VPC peering connection between VPCs that have matching or overlapping CIDR blocks\n\n**Case 1: Same Account and Same Region Peering Connection**\n\n```ts\nconst stack = new Stack();\n\nconst vpcA = new VpcV2(this, 'VpcA', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/16'),\n});\n\nconst vpcB = new VpcV2(this, 'VpcB', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n});\n\nconst peeringConnection = vpcA.createPeeringConnection('sameAccountSameRegionPeering', {\n  acceptorVpc: vpcB,\n});\n```\n\n**Case 2: Same Account and Cross Region Peering Connection**\n\nThere is no difference from Case 1 when calling `createPeeringConnection`. The only change is that one of the VPCs are created in another stack with a different region. To establish cross region VPC peering connection, acceptorVpc needs to be imported to the requestor VPC stack using `fromVpcV2Attributes` method.\n\n```ts\nconst app = new App();\n\nconst stackA = new Stack(app, 'VpcStackA', { env: { account: '000000000000', region: 'us-east-1' } });\nconst stackB = new Stack(app, 'VpcStackB', { env: { account: '000000000000', region: 'us-west-2' } });\n\nconst vpcA = new VpcV2(stackA, 'VpcA', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/16'),\n});\n\nnew VpcV2(stackB, 'VpcB', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n});\n\nconst vpcB = VpcV2.fromVpcV2Attributes(stackA, 'ImportedVpcB', {\n      vpcId: 'MockVpcBid',\n      vpcCidrBlock: '10.1.0.0/16',\n      region: 'us-west-2',\n      ownerAccountId: '000000000000',\n    });\n\n\nconst peeringConnection = vpcA.createPeeringConnection('sameAccountCrossRegionPeering', {\n  acceptorVpc: vpcB,\n});\n```\n\n**Case 3: Cross Account Peering Connection**\n\nFor cross-account connections, the acceptor account needs an IAM role that grants the requestor account permission to initiate the connection. Create a new IAM role in the acceptor account using method `createAcceptorVpcRole` to provide the necessary permissions.\n\nOnce role is created in account, provide role arn for field `peerRoleArn` under method `createPeeringConnection`\n\n```ts\nconst stack = new Stack();\n\nconst acceptorVpc = new VpcV2(this, 'VpcA', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/16'),\n});\n\nconst acceptorRoleArn = acceptorVpc.createAcceptorVpcRole('000000000000'); // Requestor account ID\n```\n\nAfter creating an IAM role in the acceptor account, we can initiate the peering connection request from the requestor VPC. Import acceptorVpc to the stack using `fromVpcV2Attributes` method, it is recommended to specify owner account id of the acceptor VPC in case of cross account peering connection, if acceptor VPC is hosted in different region provide region value for import as well.\nThe following code snippet demonstrates how to set up VPC peering between two VPCs in different AWS accounts using CDK:\n\n```ts\nconst stack = new Stack();\n\nconst acceptorVpc = VpcV2.fromVpcV2Attributes(this, 'acceptorVpc', {\n      vpcId: 'vpc-XXXX',\n      vpcCidrBlock: '10.0.0.0/16',\n      region: 'us-east-2',\n      ownerAccountId: '111111111111',\n    });\n\nconst acceptorRoleArn = 'arn:aws:iam::111111111111:role/VpcPeeringRole';\n\nconst requestorVpc = new VpcV2(this, 'VpcB', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n});\n\nconst peeringConnection = requestorVpc.createPeeringConnection('crossAccountCrossRegionPeering', {\n  acceptorVpc: acceptorVpc,\n  peerRoleArn: acceptorRoleArn,\n});\n```\n\n### Route Table Configuration\n\nAfter establishing the VPC peering connection, routes must be added to the respective route tables in the VPCs to enable traffic flow. If a route is added to the requestor stack, information will be able to flow from the requestor VPC to the acceptor VPC, but not in the reverse direction. For bi-directional communication, routes need to be added in both VPCs from their respective stacks.\n\nFor more information, see [Update your route tables for a VPC peering connection](https://docs.aws.amazon.com/vpc/latest/peering/vpc-peering-routing.html).\n\n```ts\nconst stack = new Stack();\n\nconst acceptorVpc = new VpcV2(this, 'VpcA', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/16'),\n});\n\nconst requestorVpc = new VpcV2(this, 'VpcB', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n});\n\nconst peeringConnection = requestorVpc.createPeeringConnection('peeringConnection', {\n  acceptorVpc: acceptorVpc,\n});\n\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: requestorVpc,\n});\n\nrouteTable.addRoute('vpcPeeringRoute', '10.0.0.0/16', { gateway: peeringConnection });\n```\n\nThis can also be done using AWS CLI. For more information, see [create-route](https://docs.aws.amazon.com/cli/latest/reference/ec2/create-route.html).\n\n```bash\n# Add a route to the requestor VPC route table\naws ec2 create-route --route-table-id rtb-requestor --destination-cidr-block 10.0.0.0/16 --vpc-peering-connection-id pcx-xxxxxxxx\n\n# For bi-directional add a route in the acceptor vpc account as well\naws ec2 create-route --route-table-id rtb-acceptor --destination-cidr-block 10.1.0.0/16 --vpc-peering-connection-id pcx-xxxxxxxx\n```\n\n### Deleting the Peering Connection\n\nTo delete a VPC peering connection, use the following command:\n\n```bash\naws ec2 delete-vpc-peering-connection --vpc-peering-connection-id pcx-xxxxxxxx\n```\n\nFor more information, see [Delete a VPC peering connection](https://docs.aws.amazon.com/vpc/latest/peering/create-vpc-peering-connection.html#delete-vpc-peering-connection).\n\n## Adding Egress-Only Internet Gateway to VPC\n\nAn egress-only internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows outbound communication over IPv6 from instances in your VPC to the internet, and prevents the internet from initiating an IPv6 connection with your instances.\n\nFor more information see [Enable outbound IPv6 traffic using an egress-only internet gateway](https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html).\n\nVpcV2 supports adding an egress only internet gateway to VPC using the `addEgressOnlyInternetGateway` method.\n\nBy default, this method sets up a route to all outbound IPv6 address ranges, unless a specific destination is provided by the user. It can only be configured for IPv6-enabled VPCs.\nThe `Subnets` parameter accepts a `SubnetFilter`, which can be based on a `SubnetType` in VpcV2. A new route will be added to the route tables of all subnets that match this filter.\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc',{\n      primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n      secondaryAddressBlocks: [IpAddresses.amazonProvidedIpv6({\n      cidrBlockName: 'AmazonProvided',\n    })]\n    });\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  ipv6CidrBlock: new IpCidr('2001:db8:1::/64'),\n  subnetType: SubnetType.PRIVATE });\n\nmyVpc.addEgressOnlyInternetGateway({\n  subnets: [{subnetType: SubnetType.PRIVATE}],\n  destination: '::/60',\n})\n```\n\n## Adding NATGateway to the VPC\n\nA NAT gateway is a Network Address Translation (NAT) service.You can use a NAT gateway so that instances in a private subnet can connect to services outside your VPC but external services cannot initiate a connection with those instances.\n\nFor more information, see [NAT gateway basics](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html).\n\nWhen you create a NAT gateway, you specify one of the following connectivity types:\n\n**Public – (Default)**: Instances in private subnets can connect to the internet through a public NAT gateway, but cannot receive unsolicited inbound connections from the internet\n\n**Private**: Instances in private subnets can connect to other VPCs or your on-premises network through a private NAT gateway.\n\nTo define the NAT gateway connectivity type as `ConnectivityType.Public`, you need to ensure that there is an IGW(Internet Gateway) attached to the subnet's VPC.\nSince a NATGW is associated with a particular subnet, providing `subnet` field in the input props is mandatory.\n\nAdditionally, you can set up a route in any route table with the target set to the NAT Gateway. The function `addNatGateway` returns a `NATGateway` object that you can reference later.\n\nThe code example below provides the definition for adding a NAT gateway to your subnet:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC });\n\nmyVpc.addInternetGateway();\nmyVpc.addNatGateway({\n  subnet: subnet,\n  connectivityType: NatConnectivityType.PUBLIC,\n});\n```\n\n## Enable VPNGateway for the VPC\n\nA virtual private gateway is the endpoint on the VPC side of your VPN connection.\n\nFor more information, see [What is AWS Site-to-Site VPN?](https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html).\n\nVPN route propagation is a feature in Amazon Web Services (AWS) that automatically updates route tables in your Virtual Private Cloud (VPC) with routes learned from a VPN connection.\n\nTo enable VPN route propagation, use the `vpnRoutePropagation` property to specify the subnets as an input to the function. VPN route propagation will then be enabled for each subnet with the corresponding route table IDs.\n\nAdditionally, you can set up a route in any route table with the target set to the VPN Gateway. The function `enableVpnGatewayV2` returns a `VPNGatewayV2` object that you can reference later.\n\nThe code example below provides the definition for setting up a VPN gateway with `vpnRoutePropagation` enabled:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\nconst vpnGateway = myVpc.enableVpnGatewayV2({\n  vpnRoutePropagation: [{ subnetType: SubnetType.PUBLIC }],\n  type: VpnConnectionType.IPSEC_1,\n});\n\nconst routeTable = new RouteTable(stack, 'routeTable', {\n  vpc: myVpc\n  } );\n\nnew Route(stack, 'route', {\n  destination: '172.31.0.0/24',\n  target: { gateway: vpnGateway },\n  routeTable: routeTable,\n});\n```\n\n## Adding InternetGateway to the VPC\n\nAn internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet. It supports both IPv4 and IPv6 traffic.\n\nFor more information, see [Enable VPC internet access using internet gateways](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-igw-internet-access.html).\n\nYou can add an internet gateway to a VPC using `addInternetGateway` method. By default, this method creates a route in all Public Subnets with outbound destination set to `0.0.0.0` for IPv4 and `::0` for IPv6 enabled VPC.\nInstead of using the default settings, you can configure a custom destination range by providing an optional input `destination` to the method.\nIn addition to the custom IP range, you can also choose to filter subnets where default routes should be created.\n\nThe code example below shows how to add an internet gateway with a custom outbound destination IP range:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\n\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC });\n\nmyVpc.addInternetGateway({\n  ipv4Destination: '192.168.0.0/16',\n});\n```\n\nThe following code examples demonstrates how to add an internet gateway with a custom outbound destination IP range for specific subnets:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\n\nconst mySubnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC });\n\nmyVpc.addInternetGateway({\n  ipv4Destination: '192.168.0.0/16',\n  subnets: [mySubnet],\n});\n```\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\n\nmyVpc.addInternetGateway({\n  ipv4Destination: '192.168.0.0/16',\n  subnets: [{subnetType: SubnetType.PRIVATE_WITH_EGRESS}],\n});\n```\n\n## Importing an existing VPC\n\nYou can import an existing VPC and its subnets using the `VpcV2.fromVpcV2Attributes()` method or an individual subnet using `SubnetV2.fromSubnetV2Attributes()` method.\n\n### Importing a VPC\n\nTo import an existing VPC, use the `VpcV2.fromVpcV2Attributes()` method. You'll need to provide the VPC ID, primary CIDR block, and information about the subnets. You can import secondary address as well created through IPAM, BYOIP(IPv4) or enabled through Amazon Provided IPv6. You must provide VPC Id and its primary CIDR block for importing it.\n\nIf you wish to add a new subnet to imported VPC, new subnet's IP range(IPv4) will be validated against provided secondary and primary address block to confirm that it is within the the range of VPC.\n\nHere's an example of importing a VPC with only the required parameters\n\n``` ts\nconst stack = new Stack();\n\nconst importedVpc = VpcV2.fromVpcV2Attributes(stack, 'ImportedVpc', {\n      vpcId: 'mockVpcID',\n      vpcCidrBlock: '10.0.0.0/16',\n});\n```\n\nIn case of cross account or cross region VPC, its recommended to provide region and ownerAccountId so that these values for the VPC can be used to populate correct arn value for the VPC. If a VPC region and account ID is not provided, then region and account configured in the stack will be used. Furthermore, these fields will be referenced later while setting up VPC peering connection, so its necessary to set these fields to a correct value.\n\nBelow is an example of importing a cross region and cross account VPC, VPC arn for this case would be 'arn:aws:ec2:us-west-2:123456789012:vpc/mockVpcID'\n\n``` ts\nconst stack = new Stack();\n\n//Importing a cross account or cross region VPC\nconst importedVpc = VpcV2.fromVpcV2Attributes(stack, 'ImportedVpc', {\n      vpcId: 'mockVpcID',\n      vpcCidrBlock: '10.0.0.0/16',\n      ownerAccountId: '123456789012',\n      region: 'us-west-2',\n});\n```\n\nHere's an example of how to import a VPC with multiple CIDR blocks, IPv6 support, and different subnet types:\n\nIn this example, we're importing a VPC with:\n\n - A primary CIDR block (10.1.0.0/16)\n - One secondary IPv4 CIDR block (10.2.0.0/16)\n - Two secondary address using IPAM pool (IPv4 and IPv6)\n - VPC has Amazon-provided IPv6 CIDR enabled\n - An isolated subnet in us-west-2a\n - A public subnet in us-west-2b\n\n```ts\nconst stack = new Stack();\n\nconst importedVpc = VpcV2.fromVpcV2Attributes(this, 'ImportedVPC', {\n  vpcId: 'vpc-XXX',\n  vpcCidrBlock: '10.1.0.0/16',\n  secondaryCidrBlocks: [\n    {\n      cidrBlock: '10.2.0.0/16',\n      cidrBlockName: 'ImportedBlock1',\n    },\n    {\n      ipv6IpamPoolId: 'ipam-pool-XXX',\n      ipv6NetmaskLength: 52,\n      cidrBlockName: 'ImportedIpamIpv6',\n    },\n    {\n      ipv4IpamPoolId: 'ipam-pool-XXX',\n      ipv4IpamProvisionedCidrs: ['10.2.0.0/16'],\n      cidrBlockName: 'ImportedIpamIpv4',\n    },\n    {\n      amazonProvidedIpv6CidrBlock: true,\n    }\n  ],\n  subnets: [{\n    subnetName: 'IsolatedSubnet2',\n    subnetId: 'subnet-03cd773c0fe08ed26',\n    subnetType: SubnetType.PRIVATE_ISOLATED,\n    availabilityZone: 'us-west-2a',\n    ipv4CidrBlock: '10.2.0.0/24',\n    routeTableId: 'rtb-0871c310f98da2cbb',\n  },\n  {\n    subnetId: 'subnet-0fa477e01db27d820',\n    subnetType: SubnetType.PUBLIC,\n    availabilityZone: 'us-west-2b',\n    ipv4CidrBlock: '10.3.0.0/24',\n    routeTableId: 'rtb-014f3043098fe4b96',\n  }],\n});\n\n// You can now use the imported VPC in your stack\n\n// Adding a new subnet to the imported VPC\nconst importedSubnet = new SubnetV2(this, 'NewSubnet', {\n  availabilityZone: 'us-west-2a',\n  ipv4CidrBlock: new IpCidr('10.2.2.0/24'),\n  vpc: importedVpc,\n  subnetType: SubnetType.PUBLIC,\n});\n\n// Adding gateways to the imported VPC\nimportedVpc.addInternetGateway();\nimportedVpc.addNatGateway({ subnet: importedSubnet });\nimportedVpc.addEgressOnlyInternetGateway();\n```\n\nYou can add more subnets as needed by including additional entries in the `isolatedSubnets`, `publicSubnets`, or other subnet type arrays (e.g., `privateSubnets`).\n\n### Importing Subnets\n\nYou can also import individual subnets using the `SubnetV2.fromSubnetV2Attributes()` method. This is useful when you need to work with specific subnets independently of a VPC.\n\nHere's an example of how to import a subnet:\n\n```ts\nSubnetV2.fromSubnetV2Attributes(this, 'ImportedSubnet', {\n  subnetId: 'subnet-0123456789abcdef0',\n  availabilityZone: 'us-west-2a',\n  ipv4CidrBlock: '10.2.0.0/24',\n  routeTableId: 'rtb-0871c310f98da2cbb',\n  subnetType: SubnetType.PRIVATE_ISOLATED,\n});\n```\n\nBy importing existing VPCs and subnets, you can easily integrate your existing AWS infrastructure with new resources created through CDK. This is particularly useful when you need to work with pre-existing network configurations or when you're migrating existing infrastructure to CDK.\n\n### Tagging VPC and its components\n\nBy default, when a resource name is given to the construct, it automatically adds a tag with the key `Name` and the value set to the provided resource name. To add additional custom tags, use the Tag Manager, like this: `Tags.of(myConstruct).add('key', 'value');`.\n\nFor example, if the `vpcName` is set to `TestVpc`, the following code will add a tag to the VPC with `key: Name` and `value: TestVpc`.\n\n```ts\nconst vpc = new VpcV2(this, 'VPC-integ-test-tag', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n  enableDnsHostnames: true,\n  enableDnsSupport: true,\n  vpcName: 'CDKintegTestVPC',\n});\n\n// Add custom tags if needed\nTags.of(vpc).add('Environment', 'Production');\n```\n\n## Transit Gateway\n\nThe AWS Transit Gateway construct library allows you to create and configure Transit Gateway resources using AWS CDK.\n\nSee [AWS Transit Gateway Docs](docs.aws.amazon.com/vpc/latest/tgw/what-is-transit-gateway.html) for more info.\n\n### Overview\n\nThe Transit Gateway construct (`TransitGateway`) is the main entry point for creating and managing your Transit Gateway infrastructure. It provides methods to create route tables, attach VPCs, and configure cross-account access.\n\nThe Transit Gateway construct library provides four main constructs:\n\n- `TransitGateway`: The central hub for your network connections\n- `TransitGatewayRouteTable`: Manages routing between attached networks\n- `TransitGatewayVpcAttachment`: Connects VPCs to the Transit Gateway\n- `TransitGatewayRoute`: Defines routing rules within your Transit Gateway\n\n### Basic Usage\n\nTo create a minimal deployable `TransitGateway`:\n\n```ts\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\n```\n\n### Default Transit Gateway Route Table\n\nBy default, `TransitGateway` is created with a default `TransitGatewayRouteTable`, for which automatic Associations and automatic Propagations are enabled.\n\n> Note: When you create a default Transit Gateway in AWS Console, a default Transit Gateway Route Table is automatically created by AWS. However, when using the CDK Transit Gateway L2 construct, the underlying L1 construct is configured with `defaultRouteTableAssociation` and `defaultRouteTablePropagation` explicitly disabled. This ensures that AWS does not create the default route table, allowing the CDK to define a custom default route table instead.\n>\n> As a result, in the AWS Console, the **Default association route table** and **Default propagation route table** settings will appear as disabled. Despite this, the CDK still provides automatic association and propagation functionality through its internal implementation, which can be controlled using the `defaultRouteTableAssociation` and `defaultRouteTablePropagation` properties within the CDK.\n\n\nYou can disable the automatic Association/Propagation on the default `TransitGatewayRouteTable` via the `TransitGateway` properties. This will still create a default route table for you:\n\n```ts\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway', {\n  defaultRouteTableAssociation: false,\n  defaultRouteTablePropagation: false,\n});\n```\n\n### Transit Gateway Route Table Management\n\nAdd additional Transit Gateway Route Tables using the `addRouteTable()` method:\n\n```ts\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\n\nconst routeTable = transitGateway.addRouteTable('CustomRouteTable');\n```\n\n### Attaching VPCs to the Transit Gateway\n\nCurrently only VPC to Transit Gateway attachments are supported.\n\nCreate an attachment from a VPC to the Transit Gateway using the `attachVpc()` method:\n\n```ts\nconst myVpc = new VpcV2(this, 'Vpc');\nconst subnet1 = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\n\nconst subnet2 = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.1.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\n\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\n\n// Create a basic attachment\nconst attachment = transitGateway.attachVpc('VpcAttachment', {\n  vpc: myVpc,\n  subnets: [subnet1, subnet2]\n});\n\n// Create an attachment with optional parameters\nconst attachmentWithOptions = transitGateway.attachVpc('VpcAttachmentWithOptions', {\n  vpc: myVpc,\n  subnets: [subnet1],\n  vpcAttachmentOptions: {\n    dnsSupport: true,\n    applianceModeSupport: true,\n    ipv6Support: true,\n    securityGroupReferencingSupport: true,\n  }\n});\n```\n\nIf you want to automatically associate and propagate routes with transit gateway route tables, you can pass the `associationRouteTable` and `propagationRouteTables` parameters. This will automatically create the necessary associations and propagations based on the provided route tables.\n\n```ts\nconst myVpc = new VpcV2(this, 'Vpc');\nconst subnet1 = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\n\nconst subnet2 = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.1.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\n\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\nconst associationRouteTable = transitGateway.addRouteTable('AssociationRouteTable');\nconst propagationRouteTable1 = transitGateway.addRouteTable('PropagationRouteTable1');\nconst propagationRouteTable2 = transitGateway.addRouteTable('PropagationRouteTable2');\n\n// Create an attachment with automatically created association + propagations\nconst attachmentWithRoutes = transitGateway.attachVpc('VpcAttachment', {\n  vpc: myVpc,\n  subnets: [subnet1, subnet2],\n  associationRouteTable: associationRouteTable,\n  propagationRouteTables: [propagationRouteTable1, propagationRouteTable2],\n});\n```\n\nIn this example, the `associationRouteTable` is set to `associationRouteTable`, and `propagationRouteTables` is set to an array containing `propagationRouteTable1` and `propagationRouteTable2`. This triggers the automatic creation of route table associations and route propagations between the Transit Gateway and the specified route tables.\n\n### Adding static routes to the route table\n\nAdd static routes using either the `addRoute()` method to add an active route or `addBlackholeRoute()` to add a blackhole route:\n\n```ts\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\nconst routeTable = transitGateway.addRouteTable('CustomRouteTable');\n\nconst myVpc = new VpcV2(this, 'Vpc');\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\n\nconst attachment = transitGateway.attachVpc('VpcAttachment', {\n  vpc: myVpc,\n  subnets: [subnet]\n});\n\n// Add a static route to direct traffic\nrouteTable.addRoute('StaticRoute', attachment, '10.0.0.0/16');\n\n// Block unwanted traffic with a blackhole route\nrouteTable.addBlackholeRoute('BlackholeRoute', '172.16.0.0/16');\n```\n\n### Route Table Associations and Propagations\n\nConfigure route table associations and enable route propagation:\n\n```ts\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\nconst routeTable = transitGateway.addRouteTable('CustomRouteTable');\nconst myVpc = new VpcV2(this, 'Vpc');\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\nconst attachment = transitGateway.attachVpc('VpcAttachment', {\n  vpc: myVpc,\n  subnets: [subnet]\n});\n\n// Associate an attachment with a route table\nrouteTable.addAssociation('Association', attachment);\n\n// Enable route propagation for an attachment\nrouteTable.enablePropagation('Propagation', attachment);\n```\n\n**Associations** — The linking of a Transit Gateway attachment to a specific route table, which determines which routes that attachment will use for routing decisions.\n\n**Propagation** — The automatic advertisement of routes from an attachment to a route table, allowing the route table to learn about available network destinations.\n"
+    "markdown": "# Amazon VpcV2 Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Developer Preview](https://img.shields.io/badge/cdk--constructs-developer--preview-informational.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are in **developer preview** before they\n> become stable. We will only make breaking changes to address unforeseen API issues. Therefore,\n> these APIs are not subject to [Semantic Versioning](https://semver.org/), and breaking changes\n> will be announced in release notes. This means that while you may use them, you may need to\n> update your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\n## VpcV2\n\n`VpcV2` is a re-write of the [`ec2.Vpc`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.Vpc.html) construct. This new construct enables higher level of customization\non the VPC being created. `VpcV2` implements the existing [`IVpc`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.IVpc.html), therefore,\n`VpcV2` is compatible with other constructs that accepts `IVpc` (e.g. [`ApplicationLoadBalancer`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_elasticloadbalancingv2.ApplicationLoadBalancer.html#construct-props)).\n\n`VpcV2` supports the addition of both primary and secondary addresses. The primary address must be an IPv4 address, which can be specified as a CIDR string or assigned from an IPAM pool. Secondary addresses can be either IPv4 or IPv6.\nBy default, `VpcV2` assigns `10.0.0.0/16` as the primary CIDR if no other CIDR is specified.\n\nBelow is an example of creating a VPC with both IPv4 and IPv6 support:\n\n```ts\nconst stack = new Stack();\nnew VpcV2(this, 'Vpc', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/24'),\n  secondaryAddressBlocks: [\n    IpAddresses.amazonProvidedIpv6({cidrBlockName: 'AmazonProvidedIpv6'}),\n  ],\n});\n```\n\n`VpcV2` does not automatically create subnets or allocate IP addresses, which is different from the `Vpc` construct.\n\n## SubnetV2\n\n`SubnetV2` is a re-write of the [`ec2.Subnet`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.Subnet.html) construct.\nThis new construct can be used to add subnets to a `VpcV2` instance:\nNote: When defining a subnet with `SubnetV2`, CDK automatically creates a new route table, unless a route table is explicitly provided as an input to the construct.\nTo enable the `mapPublicIpOnLaunch` feature (which is `false` by default), set the property to `true` when creating the subnet.\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc', {\n  secondaryAddressBlocks: [\n    IpAddresses.amazonProvidedIpv6({ cidrBlockName: 'AmazonProvidedIp'}),\n  ],\n});\n\nnew SubnetV2(this, 'subnetA', {\n  vpc: myVpc,\n  availabilityZone: 'us-east-1a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  ipv6CidrBlock: new IpCidr('2a05:d02c:25:4000::/60'),\n  subnetType: SubnetType.PUBLIC,\n  mapPublicIpOnLaunch: true,\n})\n```\n\nSince `VpcV2` does not create subnets automatically, users have full control over IP addresses allocation across subnets.\n\n## IP Addresses Management\n\nAdditional CIDRs can be added to the VPC via the `secondaryAddressBlocks` property.\nThe following example illustrates the options of defining these secondary address blocks using `IPAM`:\n\nNote: There’s currently an issue with IPAM pool deletion that may affect the `cdk --destroy` command. This is because IPAM takes time to detect when the IP address pool has been deallocated after the VPC is deleted. The current workaround is to wait until the IP address is fully deallocated from the pool before retrying the deletion. Below command can be used to check allocations for a pool using CLI\n\n```shell\naws ec2 get-ipam-pool-allocations --ipam-pool-id <ipam-pool-id>\n```\n\nRef: https://docs.aws.amazon.com/cli/latest/reference/ec2/get-ipam-pool-allocations.html\n\n```ts\nconst stack = new Stack();\nconst ipam = new Ipam(this, 'Ipam', {\n  operatingRegions: ['us-west-1']\n});\nconst ipamPublicPool = ipam.publicScope.addPool('PublicPoolA', {\n  addressFamily: AddressFamily.IP_V6,\n  awsService: AwsServiceName.EC2,\n  locale: 'us-west-1',\n  publicIpSource: IpamPoolPublicIpSource.AMAZON,\n});\nipamPublicPool.provisionCidr('PublicPoolACidrA', { netmaskLength: 52 } );\n\nconst ipamPrivatePool = ipam.privateScope.addPool('PrivatePoolA', {\n  addressFamily: AddressFamily.IP_V4,\n});\nipamPrivatePool.provisionCidr('PrivatePoolACidrA', { netmaskLength: 8 } );\n\nnew VpcV2(this, 'Vpc', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/24'),\n  secondaryAddressBlocks: [\n    IpAddresses.amazonProvidedIpv6({ cidrBlockName: 'AmazonIpv6' }),\n    IpAddresses.ipv6Ipam({\n      ipamPool: ipamPublicPool,\n      netmaskLength: 52,\n      cidrBlockName: 'ipv6Ipam',\n    }),\n    IpAddresses.ipv4Ipam({\n      ipamPool: ipamPrivatePool,\n      netmaskLength: 8,\n      cidrBlockName: 'ipv4Ipam',\n    }),\n  ],\n});\n```\n\n### Bring your own IPv6 addresses (BYOIP)\n\nIf you have your own IP address that you would like to use with EC2, you can set up an IPv6 pool via the AWS CLI, and use that pool ID in your application.\n\nOnce you have certified your IP address block with an ROA and have obtained an X-509 certificate, you can run the following command to provision your CIDR block in your AWS account:\n\n```shell\naws ec2 provision-byoip-cidr --region <region> --cidr <your CIDR block> --cidr-authorization-context Message=\"1|aws|<account>|<your CIDR block>|<expiration date>|SHA256\".Signature=\"<signature>\"\n```\n\nWhen your BYOIP CIDR is provisioned, you can run the following command to retrieve your IPv6 pool ID, which will be used in your VPC declaration:\n\n```shell\naws ec2 describe-byoip-cidr --region <region>\n```\n\nFor more help on setting up your IPv6 address, please review the [EC2 Documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html).\n\nOnce you have provisioned your address block, you can use the IPv6 in your VPC as follows:\n\n```ts\nconst myVpc = new VpcV2(this, 'Vpc', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n  secondaryAddressBlocks: [IpAddresses.ipv6ByoipPool({\n    cidrBlockName: 'MyByoipCidrBlock',\n    ipv6PoolId: 'ipv6pool-ec2-someHashValue',\n    ipv6CidrBlock: '2001:db8::/32'\n  })],\n  enableDnsHostnames: true,\n  enableDnsSupport: true,\n});\n```\n\n## Routing\n\n`RouteTable` is a new construct that allows for route tables to be customized in a variety of ways. Using this construct, a customized route table can be added to the subnets defined using `SubnetV2`.\nFor instance, the following example shows how a custom route table can be created and appended to a `SubnetV2`:\n\n```ts\nconst myVpc = new VpcV2(this, 'Vpc');\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  routeTable,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PRIVATE_ISOLATED,\n});\n```\n\n`Routes` can be created to link subnets to various different AWS services via gateways and endpoints. Each unique route target has its own dedicated construct that can be routed to a given subnet via the `Route` construct. An example using the `InternetGateway` construct can be seen below:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PRIVATE_ISOLATED });\n\nconst igw = new InternetGateway(this, 'IGW', {\n  vpc: myVpc,\n});\nnew Route(this, 'IgwRoute', {\n  routeTable,\n  destination: '0.0.0.0/0',\n  target:  { gateway: igw },\n});\n```\n\nAlternatively, `Routes` can also be created via method `addRoute` in the `RouteTable` class. An example using the `EgressOnlyInternetGateway` construct can be seen below:\nNote: `EgressOnlyInternetGateway` can only be used to set up outbound IPv6 routing.\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc',{\n      primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n      secondaryAddressBlocks: [IpAddresses.amazonProvidedIpv6({\n      cidrBlockName: 'AmazonProvided',\n    })]\n    });\n\nconst eigw = new EgressOnlyInternetGateway(this, 'EIGW', {\n  vpc: myVpc,\n});\n\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\n\nrouteTable.addRoute('EIGW', '::/0', { gateway: eigw });\n```\n\nOther route targets may require a deeper set of parameters to set up properly. For instance, the example below illustrates how to set up a `NatGateway`:\n\n```ts\nconst myVpc = new VpcV2(this, 'Vpc');\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PRIVATE_ISOLATED });\n\nconst natgw = new NatGateway(this, 'NatGW', {\n  subnet: subnet,\n  vpc: myVpc,\n  connectivityType: NatConnectivityType.PRIVATE,\n  privateIpAddress: '10.0.0.42',\n});\nnew Route(this, 'NatGwRoute', {\n  routeTable,\n  destination: '0.0.0.0/0',\n  target: { gateway: natgw },\n});\n```\n\nIt is also possible to set up endpoints connecting other AWS services. For instance, the example below illustrates the linking of a Dynamo DB endpoint via the existing `ec2.GatewayVpcEndpoint` construct as a route target:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PRIVATE });\n\nconst dynamoEndpoint = new ec2.GatewayVpcEndpoint(this, 'DynamoEndpoint', {\n  service: ec2.GatewayVpcEndpointAwsService.DYNAMODB,\n  vpc: myVpc,\n  subnets: [subnet],\n});\nnew Route(this, 'DynamoDBRoute', {\n  routeTable,\n  destination: '0.0.0.0/0',\n  target: { endpoint: dynamoEndpoint },\n});\n```\n\n## VPC Peering Connection\n\nVPC peering connection allows you to connect two VPCs and route traffic between them using private IP addresses. The VpcV2 construct supports creating VPC peering connections through the `VPCPeeringConnection` construct from the `route` module.\n\nPeering Connection cannot be established between two VPCs with overlapping CIDR ranges. Please make sure the two VPC CIDRs do not overlap with each other else it will throw an error.\n\nFor more information, see [What is VPC peering?](https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html).\n\nThe following show examples of how to create a peering connection between two VPCs for all possible combinations of same-account or cross-account, and same-region or cross-region configurations.\n\nNote: You cannot create a VPC peering connection between VPCs that have matching or overlapping CIDR blocks\n\n**Case 1: Same Account and Same Region Peering Connection**\n\n```ts\nconst stack = new Stack();\n\nconst vpcA = new VpcV2(this, 'VpcA', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/16'),\n});\n\nconst vpcB = new VpcV2(this, 'VpcB', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n});\n\nconst peeringConnection = vpcA.createPeeringConnection('sameAccountSameRegionPeering', {\n  acceptorVpc: vpcB,\n});\n```\n\n**Case 2: Same Account and Cross Region Peering Connection**\n\nThere is no difference from Case 1 when calling `createPeeringConnection`. The only change is that one of the VPCs are created in another stack with a different region. To establish cross region VPC peering connection, acceptorVpc needs to be imported to the requestor VPC stack using `fromVpcV2Attributes` method.\n\n```ts\nconst app = new App();\n\nconst stackA = new Stack(app, 'VpcStackA', { env: { account: '000000000000', region: 'us-east-1' } });\nconst stackB = new Stack(app, 'VpcStackB', { env: { account: '000000000000', region: 'us-west-2' } });\n\nconst vpcA = new VpcV2(stackA, 'VpcA', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/16'),\n});\n\nnew VpcV2(stackB, 'VpcB', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n});\n\nconst vpcB = VpcV2.fromVpcV2Attributes(stackA, 'ImportedVpcB', {\n      vpcId: 'MockVpcBid',\n      vpcCidrBlock: '10.1.0.0/16',\n      region: 'us-west-2',\n      ownerAccountId: '000000000000',\n    });\n\n\nconst peeringConnection = vpcA.createPeeringConnection('sameAccountCrossRegionPeering', {\n  acceptorVpc: vpcB,\n});\n```\n\n**Case 3: Cross Account Peering Connection**\n\nFor cross-account connections, the acceptor account needs an IAM role that grants the requestor account permission to initiate the connection. Create a new IAM role in the acceptor account using method `createAcceptorVpcRole` to provide the necessary permissions.\n\nOnce role is created in account, provide role arn for field `peerRoleArn` under method `createPeeringConnection`\n\n```ts\nconst stack = new Stack();\n\nconst acceptorVpc = new VpcV2(this, 'VpcA', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/16'),\n});\n\nconst acceptorRoleArn = acceptorVpc.createAcceptorVpcRole('000000000000'); // Requestor account ID\n```\n\nAfter creating an IAM role in the acceptor account, we can initiate the peering connection request from the requestor VPC. Import acceptorVpc to the stack using `fromVpcV2Attributes` method, it is recommended to specify owner account id of the acceptor VPC in case of cross account peering connection, if acceptor VPC is hosted in different region provide region value for import as well.\nThe following code snippet demonstrates how to set up VPC peering between two VPCs in different AWS accounts using CDK:\n\n```ts\nconst stack = new Stack();\n\nconst acceptorVpc = VpcV2.fromVpcV2Attributes(this, 'acceptorVpc', {\n      vpcId: 'vpc-XXXX',\n      vpcCidrBlock: '10.0.0.0/16',\n      region: 'us-east-2',\n      ownerAccountId: '111111111111',\n    });\n\nconst acceptorRoleArn = 'arn:aws:iam::111111111111:role/VpcPeeringRole';\n\nconst requestorVpc = new VpcV2(this, 'VpcB', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n});\n\nconst peeringConnection = requestorVpc.createPeeringConnection('crossAccountCrossRegionPeering', {\n  acceptorVpc: acceptorVpc,\n  peerRoleArn: acceptorRoleArn,\n});\n```\n\n### Route Table Configuration\n\nAfter establishing the VPC peering connection, routes must be added to the respective route tables in the VPCs to enable traffic flow. If a route is added to the requestor stack, information will be able to flow from the requestor VPC to the acceptor VPC, but not in the reverse direction. For bi-directional communication, routes need to be added in both VPCs from their respective stacks.\n\nFor more information, see [Update your route tables for a VPC peering connection](https://docs.aws.amazon.com/vpc/latest/peering/vpc-peering-routing.html).\n\n```ts\nconst stack = new Stack();\n\nconst acceptorVpc = new VpcV2(this, 'VpcA', {\n  primaryAddressBlock: IpAddresses.ipv4('10.0.0.0/16'),\n});\n\nconst requestorVpc = new VpcV2(this, 'VpcB', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n});\n\nconst peeringConnection = requestorVpc.createPeeringConnection('peeringConnection', {\n  acceptorVpc: acceptorVpc,\n});\n\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: requestorVpc,\n});\n\nrouteTable.addRoute('vpcPeeringRoute', '10.0.0.0/16', { gateway: peeringConnection });\n```\n\nThis can also be done using AWS CLI. For more information, see [create-route](https://docs.aws.amazon.com/cli/latest/reference/ec2/create-route.html).\n\n```bash\n# Add a route to the requestor VPC route table\naws ec2 create-route --route-table-id rtb-requestor --destination-cidr-block 10.0.0.0/16 --vpc-peering-connection-id pcx-xxxxxxxx\n\n# For bi-directional add a route in the acceptor vpc account as well\naws ec2 create-route --route-table-id rtb-acceptor --destination-cidr-block 10.1.0.0/16 --vpc-peering-connection-id pcx-xxxxxxxx\n```\n\n### Deleting the Peering Connection\n\nTo delete a VPC peering connection, use the following command:\n\n```bash\naws ec2 delete-vpc-peering-connection --vpc-peering-connection-id pcx-xxxxxxxx\n```\n\nFor more information, see [Delete a VPC peering connection](https://docs.aws.amazon.com/vpc/latest/peering/create-vpc-peering-connection.html#delete-vpc-peering-connection).\n\n## Adding Egress-Only Internet Gateway to VPC\n\nAn egress-only internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows outbound communication over IPv6 from instances in your VPC to the internet, and prevents the internet from initiating an IPv6 connection with your instances.\n\nFor more information see [Enable outbound IPv6 traffic using an egress-only internet gateway](https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html).\n\nVpcV2 supports adding an egress only internet gateway to VPC using the `addEgressOnlyInternetGateway` method.\n\nBy default, this method sets up a route to all outbound IPv6 address ranges, unless a specific destination is provided by the user. It can only be configured for IPv6-enabled VPCs.\nThe `Subnets` parameter accepts a `SubnetFilter`, which can be based on a `SubnetType` in VpcV2. A new route will be added to the route tables of all subnets that match this filter.\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc',{\n      primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n      secondaryAddressBlocks: [IpAddresses.amazonProvidedIpv6({\n      cidrBlockName: 'AmazonProvided',\n    })]\n    });\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  ipv6CidrBlock: new IpCidr('2001:db8:1::/64'),\n  subnetType: SubnetType.PRIVATE });\n\nmyVpc.addEgressOnlyInternetGateway({\n  subnets: [{subnetType: SubnetType.PRIVATE}],\n  destination: '::/60',\n})\n```\n\n## Adding NATGateway to the VPC\n\nA NAT gateway is a Network Address Translation (NAT) service.You can use a NAT gateway so that instances in a private subnet can connect to services outside your VPC but external services cannot initiate a connection with those instances.\n\nFor more information, see [NAT gateway basics](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html).\n\nWhen you create a NAT gateway, you specify one of the following connectivity types:\n\n**Public – (Default)**: Instances in private subnets can connect to the internet through a public NAT gateway, but cannot receive unsolicited inbound connections from the internet\n\n**Private**: Instances in private subnets can connect to other VPCs or your on-premises network through a private NAT gateway.\n\nTo define the NAT gateway connectivity type as `ConnectivityType.Public`, you need to ensure that there is an IGW(Internet Gateway) attached to the subnet's VPC.\nSince a NATGW is associated with a particular subnet, providing `subnet` field in the input props is mandatory.\n\nAdditionally, you can set up a route in any route table with the target set to the NAT Gateway. The function `addNatGateway` returns a `NATGateway` object that you can reference later.\n\nThe code example below provides the definition for adding a NAT gateway to your subnet:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\nconst routeTable = new RouteTable(this, 'RouteTable', {\n  vpc: myVpc,\n});\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC });\n\nmyVpc.addInternetGateway();\nmyVpc.addNatGateway({\n  subnet: subnet,\n  connectivityType: NatConnectivityType.PUBLIC,\n});\n```\n\n## Enable VPNGateway for the VPC\n\nA virtual private gateway is the endpoint on the VPC side of your VPN connection.\n\nFor more information, see [What is AWS Site-to-Site VPN?](https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html).\n\nVPN route propagation is a feature in Amazon Web Services (AWS) that automatically updates route tables in your Virtual Private Cloud (VPC) with routes learned from a VPN connection.\n\nTo enable VPN route propagation, use the `vpnRoutePropagation` property to specify the subnets as an input to the function. VPN route propagation will then be enabled for each subnet with the corresponding route table IDs.\n\nAdditionally, you can set up a route in any route table with the target set to the VPN Gateway. The function `enableVpnGatewayV2` returns a `VPNGatewayV2` object that you can reference later.\n\nThe code example below provides the definition for setting up a VPN gateway with `vpnRoutePropagation` enabled:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\nconst vpnGateway = myVpc.enableVpnGatewayV2({\n  vpnRoutePropagation: [{ subnetType: SubnetType.PUBLIC }],\n  type: VpnConnectionType.IPSEC_1,\n});\n\nconst routeTable = new RouteTable(stack, 'routeTable', {\n  vpc: myVpc\n  } );\n\nnew Route(stack, 'route', {\n  destination: '172.31.0.0/24',\n  target: { gateway: vpnGateway },\n  routeTable: routeTable,\n});\n```\n\n## Adding InternetGateway to the VPC\n\nAn internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet. It supports both IPv4 and IPv6 traffic.\n\nFor more information, see [Enable VPC internet access using internet gateways](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-igw-internet-access.html).\n\nYou can add an internet gateway to a VPC using `addInternetGateway` method. By default, this method creates a route in all Public Subnets with outbound destination set to `0.0.0.0` for IPv4 and `::0` for IPv6 enabled VPC.\nInstead of using the default settings, you can configure a custom destination range by providing an optional input `destination` to the method.\nIn addition to the custom IP range, you can also choose to filter subnets where default routes should be created.\n\nThe code example below shows how to add an internet gateway with a custom outbound destination IP range:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\n\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC });\n\nmyVpc.addInternetGateway({\n  ipv4Destination: '192.168.0.0/16',\n});\n```\n\nThe following code examples demonstrates how to add an internet gateway with a custom outbound destination IP range for specific subnets:\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\n\nconst mySubnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC });\n\nmyVpc.addInternetGateway({\n  ipv4Destination: '192.168.0.0/16',\n  subnets: [mySubnet],\n});\n```\n\n```ts\nconst stack = new Stack();\nconst myVpc = new VpcV2(this, 'Vpc');\n\nmyVpc.addInternetGateway({\n  ipv4Destination: '192.168.0.0/16',\n  subnets: [{subnetType: SubnetType.PRIVATE_WITH_EGRESS}],\n});\n```\n\n## Importing an existing VPC\n\nYou can import an existing VPC and its subnets using the `VpcV2.fromVpcV2Attributes()` method or an individual subnet using `SubnetV2.fromSubnetV2Attributes()` method.\n\n### Importing a VPC\n\nTo import an existing VPC, use the `VpcV2.fromVpcV2Attributes()` method. You'll need to provide the VPC ID, primary CIDR block, and information about the subnets. You can import secondary address as well created through IPAM, BYOIP(IPv4) or enabled through Amazon Provided IPv6. You must provide VPC Id and its primary CIDR block for importing it.\n\nIf you wish to add a new subnet to imported VPC, new subnet's IP range(IPv4) will be validated against provided secondary and primary address block to confirm that it is within the range of VPC.\n\nHere's an example of importing a VPC with only the required parameters\n\n``` ts\nconst stack = new Stack();\n\nconst importedVpc = VpcV2.fromVpcV2Attributes(stack, 'ImportedVpc', {\n      vpcId: 'mockVpcID',\n      vpcCidrBlock: '10.0.0.0/16',\n});\n```\n\nIn case of cross account or cross region VPC, its recommended to provide region and ownerAccountId so that these values for the VPC can be used to populate correct arn value for the VPC. If a VPC region and account ID is not provided, then region and account configured in the stack will be used. Furthermore, these fields will be referenced later while setting up VPC peering connection, so its necessary to set these fields to a correct value.\n\nBelow is an example of importing a cross region and cross account VPC, VPC arn for this case would be 'arn:aws:ec2:us-west-2:123456789012:vpc/mockVpcID'\n\n``` ts\nconst stack = new Stack();\n\n//Importing a cross account or cross region VPC\nconst importedVpc = VpcV2.fromVpcV2Attributes(stack, 'ImportedVpc', {\n      vpcId: 'mockVpcID',\n      vpcCidrBlock: '10.0.0.0/16',\n      ownerAccountId: '123456789012',\n      region: 'us-west-2',\n});\n```\n\nHere's an example of how to import a VPC with multiple CIDR blocks, IPv6 support, and different subnet types:\n\nIn this example, we're importing a VPC with:\n\n - A primary CIDR block (10.1.0.0/16)\n - One secondary IPv4 CIDR block (10.2.0.0/16)\n - Two secondary address using IPAM pool (IPv4 and IPv6)\n - VPC has Amazon-provided IPv6 CIDR enabled\n - An isolated subnet in us-west-2a\n - A public subnet in us-west-2b\n\n```ts\nconst stack = new Stack();\n\nconst importedVpc = VpcV2.fromVpcV2Attributes(this, 'ImportedVPC', {\n  vpcId: 'vpc-XXX',\n  vpcCidrBlock: '10.1.0.0/16',\n  secondaryCidrBlocks: [\n    {\n      cidrBlock: '10.2.0.0/16',\n      cidrBlockName: 'ImportedBlock1',\n    },\n    {\n      ipv6IpamPoolId: 'ipam-pool-XXX',\n      ipv6NetmaskLength: 52,\n      cidrBlockName: 'ImportedIpamIpv6',\n    },\n    {\n      ipv4IpamPoolId: 'ipam-pool-XXX',\n      ipv4IpamProvisionedCidrs: ['10.2.0.0/16'],\n      cidrBlockName: 'ImportedIpamIpv4',\n    },\n    {\n      amazonProvidedIpv6CidrBlock: true,\n    }\n  ],\n  subnets: [{\n    subnetName: 'IsolatedSubnet2',\n    subnetId: 'subnet-03cd773c0fe08ed26',\n    subnetType: SubnetType.PRIVATE_ISOLATED,\n    availabilityZone: 'us-west-2a',\n    ipv4CidrBlock: '10.2.0.0/24',\n    routeTableId: 'rtb-0871c310f98da2cbb',\n  },\n  {\n    subnetId: 'subnet-0fa477e01db27d820',\n    subnetType: SubnetType.PUBLIC,\n    availabilityZone: 'us-west-2b',\n    ipv4CidrBlock: '10.3.0.0/24',\n    routeTableId: 'rtb-014f3043098fe4b96',\n  }],\n});\n\n// You can now use the imported VPC in your stack\n\n// Adding a new subnet to the imported VPC\nconst importedSubnet = new SubnetV2(this, 'NewSubnet', {\n  availabilityZone: 'us-west-2a',\n  ipv4CidrBlock: new IpCidr('10.2.2.0/24'),\n  vpc: importedVpc,\n  subnetType: SubnetType.PUBLIC,\n});\n\n// Adding gateways to the imported VPC\nimportedVpc.addInternetGateway();\nimportedVpc.addNatGateway({ subnet: importedSubnet });\nimportedVpc.addEgressOnlyInternetGateway();\n```\n\nYou can add more subnets as needed by including additional entries in the `isolatedSubnets`, `publicSubnets`, or other subnet type arrays (e.g., `privateSubnets`).\n\n### Importing Subnets\n\nYou can also import individual subnets using the `SubnetV2.fromSubnetV2Attributes()` method. This is useful when you need to work with specific subnets independently of a VPC.\n\nHere's an example of how to import a subnet:\n\n```ts\nSubnetV2.fromSubnetV2Attributes(this, 'ImportedSubnet', {\n  subnetId: 'subnet-0123456789abcdef0',\n  availabilityZone: 'us-west-2a',\n  ipv4CidrBlock: '10.2.0.0/24',\n  routeTableId: 'rtb-0871c310f98da2cbb',\n  subnetType: SubnetType.PRIVATE_ISOLATED,\n});\n```\n\nBy importing existing VPCs and subnets, you can easily integrate your existing AWS infrastructure with new resources created through CDK. This is particularly useful when you need to work with pre-existing network configurations or when you're migrating existing infrastructure to CDK.\n\n### Tagging VPC and its components\n\nBy default, when a resource name is given to the construct, it automatically adds a tag with the key `Name` and the value set to the provided resource name. To add additional custom tags, use the Tag Manager, like this: `Tags.of(myConstruct).add('key', 'value');`.\n\nFor example, if the `vpcName` is set to `TestVpc`, the following code will add a tag to the VPC with `key: Name` and `value: TestVpc`.\n\n```ts\nconst vpc = new VpcV2(this, 'VPC-integ-test-tag', {\n  primaryAddressBlock: IpAddresses.ipv4('10.1.0.0/16'),\n  enableDnsHostnames: true,\n  enableDnsSupport: true,\n  vpcName: 'CDKintegTestVPC',\n});\n\n// Add custom tags if needed\nTags.of(vpc).add('Environment', 'Production');\n```\n\n## Transit Gateway\n\nThe AWS Transit Gateway construct library allows you to create and configure Transit Gateway resources using AWS CDK.\n\nSee [AWS Transit Gateway Docs](docs.aws.amazon.com/vpc/latest/tgw/what-is-transit-gateway.html) for more info.\n\n### Overview\n\nThe Transit Gateway construct (`TransitGateway`) is the main entry point for creating and managing your Transit Gateway infrastructure. It provides methods to create route tables, attach VPCs, and configure cross-account access.\n\nThe Transit Gateway construct library provides four main constructs:\n\n- `TransitGateway`: The central hub for your network connections\n- `TransitGatewayRouteTable`: Manages routing between attached networks\n- `TransitGatewayVpcAttachment`: Connects VPCs to the Transit Gateway\n- `TransitGatewayRoute`: Defines routing rules within your Transit Gateway\n\n### Basic Usage\n\nTo create a minimal deployable `TransitGateway`:\n\n```ts\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\n```\n\n### Default Transit Gateway Route Table\n\nBy default, `TransitGateway` is created with a default `TransitGatewayRouteTable`, for which automatic Associations and automatic Propagations are enabled.\n\n> Note: When you create a default Transit Gateway in AWS Console, a default Transit Gateway Route Table is automatically created by AWS. However, when using the CDK Transit Gateway L2 construct, the underlying L1 construct is configured with `defaultRouteTableAssociation` and `defaultRouteTablePropagation` explicitly disabled. This ensures that AWS does not create the default route table, allowing the CDK to define a custom default route table instead.\n>\n> As a result, in the AWS Console, the **Default association route table** and **Default propagation route table** settings will appear as disabled. Despite this, the CDK still provides automatic association and propagation functionality through its internal implementation, which can be controlled using the `defaultRouteTableAssociation` and `defaultRouteTablePropagation` properties within the CDK.\n\n\nYou can disable the automatic Association/Propagation on the default `TransitGatewayRouteTable` via the `TransitGateway` properties. This will still create a default route table for you:\n\n```ts\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway', {\n  defaultRouteTableAssociation: false,\n  defaultRouteTablePropagation: false,\n});\n```\n\n### Transit Gateway Route Table Management\n\nAdd additional Transit Gateway Route Tables using the `addRouteTable()` method:\n\n```ts\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\n\nconst routeTable = transitGateway.addRouteTable('CustomRouteTable');\n```\n\n### Attaching VPCs to the Transit Gateway\n\nCurrently only VPC to Transit Gateway attachments are supported.\n\nCreate an attachment from a VPC to the Transit Gateway using the `attachVpc()` method:\n\n```ts\nconst myVpc = new VpcV2(this, 'Vpc');\nconst subnet1 = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\n\nconst subnet2 = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.1.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\n\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\n\n// Create a basic attachment\nconst attachment = transitGateway.attachVpc('VpcAttachment', {\n  vpc: myVpc,\n  subnets: [subnet1, subnet2]\n});\n\n// Create an attachment with optional parameters\nconst attachmentWithOptions = transitGateway.attachVpc('VpcAttachmentWithOptions', {\n  vpc: myVpc,\n  subnets: [subnet1],\n  vpcAttachmentOptions: {\n    dnsSupport: true,\n    applianceModeSupport: true,\n    ipv6Support: true,\n    securityGroupReferencingSupport: true,\n  }\n});\n```\n\nIf you want to automatically associate and propagate routes with transit gateway route tables, you can pass the `associationRouteTable` and `propagationRouteTables` parameters. This will automatically create the necessary associations and propagations based on the provided route tables.\n\n```ts\nconst myVpc = new VpcV2(this, 'Vpc');\nconst subnet1 = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\n\nconst subnet2 = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.1.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\n\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\nconst associationRouteTable = transitGateway.addRouteTable('AssociationRouteTable');\nconst propagationRouteTable1 = transitGateway.addRouteTable('PropagationRouteTable1');\nconst propagationRouteTable2 = transitGateway.addRouteTable('PropagationRouteTable2');\n\n// Create an attachment with automatically created association + propagations\nconst attachmentWithRoutes = transitGateway.attachVpc('VpcAttachment', {\n  vpc: myVpc,\n  subnets: [subnet1, subnet2],\n  associationRouteTable: associationRouteTable,\n  propagationRouteTables: [propagationRouteTable1, propagationRouteTable2],\n});\n```\n\nIn this example, the `associationRouteTable` is set to `associationRouteTable`, and `propagationRouteTables` is set to an array containing `propagationRouteTable1` and `propagationRouteTable2`. This triggers the automatic creation of route table associations and route propagations between the Transit Gateway and the specified route tables.\n\n### Adding static routes to the route table\n\nAdd static routes using either the `addRoute()` method to add an active route or `addBlackholeRoute()` to add a blackhole route:\n\n```ts\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\nconst routeTable = transitGateway.addRouteTable('CustomRouteTable');\n\nconst myVpc = new VpcV2(this, 'Vpc');\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\n\nconst attachment = transitGateway.attachVpc('VpcAttachment', {\n  vpc: myVpc,\n  subnets: [subnet]\n});\n\n// Add a static route to direct traffic\nrouteTable.addRoute('StaticRoute', attachment, '10.0.0.0/16');\n\n// Block unwanted traffic with a blackhole route\nrouteTable.addBlackholeRoute('BlackholeRoute', '172.16.0.0/16');\n```\n\n### Route Table Associations and Propagations\n\nConfigure route table associations and enable route propagation:\n\n```ts\nconst transitGateway = new TransitGateway(this, 'MyTransitGateway');\nconst routeTable = transitGateway.addRouteTable('CustomRouteTable');\nconst myVpc = new VpcV2(this, 'Vpc');\nconst subnet = new SubnetV2(this, 'Subnet', {\n  vpc: myVpc,\n  availabilityZone: 'eu-west-2a',\n  ipv4CidrBlock: new IpCidr('10.0.0.0/24'),\n  subnetType: SubnetType.PUBLIC\n});\nconst attachment = transitGateway.attachVpc('VpcAttachment', {\n  vpc: myVpc,\n  subnets: [subnet]\n});\n\n// Associate an attachment with a route table\nrouteTable.addAssociation('Association', attachment);\n\n// Enable route propagation for an attachment\nrouteTable.enablePropagation('Propagation', attachment);\n```\n\n**Associations** — The linking of a Transit Gateway attachment to a specific route table, which determines which routes that attachment will use for routing decisions.\n\n**Propagation** — The automatic advertisement of routes from an attachment to a route table, allowing the route table to learn about available network destinations.\n"
   },
   "repository": {
     "directory": "packages/@aws-cdk/aws-ec2-alpha",
@@ -9057,7 +9115,7 @@
         },
         "locationInModule": {
           "filename": "lib/route.ts",
-          "line": 245
+          "line": 246
         },
         "parameters": [
           {
@@ -9086,7 +9144,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 226
+        "line": 227
       },
       "name": "EgressOnlyInternetGateway",
       "properties": [
@@ -9099,7 +9157,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 229
+            "line": 230
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -9115,7 +9173,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 243
+            "line": 244
           },
           "name": "resource",
           "type": {
@@ -9130,7 +9188,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 238
+            "line": 239
           },
           "name": "routerTargetId",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteTarget",
@@ -9146,7 +9204,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 233
+            "line": 234
           },
           "name": "routerType",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteTarget",
@@ -9172,7 +9230,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/vpc-v2-base.ts",
-        "line": 52
+        "line": 53
       },
       "name": "EgressOnlyInternetGatewayOptions",
       "properties": [
@@ -9186,7 +9244,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 65
+            "line": 66
           },
           "name": "destination",
           "optional": true,
@@ -9205,7 +9263,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 73
+            "line": 74
           },
           "name": "egressOnlyInternetGatewayName",
           "optional": true,
@@ -9223,7 +9281,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 58
+            "line": 59
           },
           "name": "subnets",
           "optional": true,
@@ -9254,7 +9312,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 48
+        "line": 49
       },
       "name": "EgressOnlyInternetGatewayProps",
       "properties": [
@@ -9267,7 +9325,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 52
+            "line": 53
           },
           "name": "vpc",
           "type": {
@@ -9284,7 +9342,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 59
+            "line": 60
           },
           "name": "egressOnlyInternetGatewayName",
           "optional": true,
@@ -9553,7 +9611,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 33
+        "line": 34
       },
       "name": "IRouteTarget",
       "properties": [
@@ -9566,7 +9624,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 42
+            "line": 43
           },
           "name": "routerTargetId",
           "type": {
@@ -9582,7 +9640,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 37
+            "line": 38
           },
           "name": "routerType",
           "type": {
@@ -9605,7 +9663,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 658
+        "line": 659
       },
       "name": "IRouteV2",
       "properties": [
@@ -9619,7 +9677,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 671
+            "line": 672
           },
           "name": "destination",
           "type": {
@@ -9638,7 +9696,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 663
+            "line": 664
           },
           "name": "routeTable",
           "type": {
@@ -9654,7 +9712,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 676
+            "line": 677
           },
           "name": "target",
           "type": {
@@ -9677,7 +9735,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/subnet-v2.ts",
-        "line": 133
+        "line": 134
       },
       "name": "ISubnetV2",
       "properties": [
@@ -9690,7 +9748,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 138
+            "line": 139
           },
           "name": "ipv6CidrBlock",
           "optional": true,
@@ -9710,7 +9768,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 145
+            "line": 146
           },
           "name": "subnetType",
           "optional": true,
@@ -10500,7 +10558,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/vpc-v2-base.ts",
-        "line": 147
+        "line": 148
       },
       "methods": [
         {
@@ -10512,7 +10570,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 195
+            "line": 196
           },
           "name": "addEgressOnlyInternetGateway",
           "parameters": [
@@ -10540,7 +10598,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 203
+            "line": 204
           },
           "name": "addInternetGateway",
           "parameters": [
@@ -10568,7 +10626,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 220
+            "line": 221
           },
           "name": "addNatGateway",
           "parameters": [
@@ -10594,7 +10652,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 227
+            "line": 228
           },
           "name": "createAcceptorVpcRole",
           "parameters": [
@@ -10620,7 +10678,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 234
+            "line": 235
           },
           "name": "createPeeringConnection",
           "parameters": [
@@ -10646,14 +10704,14 @@
         {
           "abstract": true,
           "docs": {
-            "default": "- no route propogation",
+            "default": "- no route propagation",
             "remarks": "For more information, see the {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpngateway.html}.",
             "stability": "experimental",
-            "summary": "Adds VPN Gateway to VPC and set route propogation."
+            "summary": "Adds VPN Gateway to VPC and set route propagation."
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 211
+            "line": 212
           },
           "name": "enableVpnGatewayV2",
           "parameters": [
@@ -10683,7 +10741,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 161
+            "line": 162
           },
           "name": "ipv4CidrBlock",
           "type": {
@@ -10700,7 +10758,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 175
+            "line": 176
           },
           "name": "ownerAccountId",
           "type": {
@@ -10717,7 +10775,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 168
+            "line": 169
           },
           "name": "region",
           "type": {
@@ -10733,7 +10791,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 182
+            "line": 183
           },
           "name": "ipv4IpamProvisionedCidrs",
           "optional": true,
@@ -10756,7 +10814,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 153
+            "line": 154
           },
           "name": "secondaryCidrBlock",
           "optional": true,
@@ -10781,7 +10839,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 188
+            "line": 189
           },
           "name": "vpcName",
           "optional": true,
@@ -10811,7 +10869,7 @@
         },
         "locationInModule": {
           "filename": "lib/route.ts",
-          "line": 292
+          "line": 293
         },
         "parameters": [
           {
@@ -10840,7 +10898,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 268
+        "line": 269
       },
       "name": "InternetGateway",
       "properties": [
@@ -10853,7 +10911,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 271
+            "line": 272
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -10869,7 +10927,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 290
+            "line": 291
           },
           "name": "resource",
           "type": {
@@ -10884,7 +10942,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 280
+            "line": 281
           },
           "name": "routerTargetId",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteTarget",
@@ -10900,7 +10958,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 275
+            "line": 276
           },
           "name": "routerType",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteTarget",
@@ -10916,7 +10974,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 285
+            "line": 286
           },
           "name": "vpcId",
           "type": {
@@ -10941,7 +10999,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/vpc-v2-base.ts",
-        "line": 79
+        "line": 80
       },
       "name": "InternetGatewayOptions",
       "properties": [
@@ -10956,7 +11014,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 101
+            "line": 102
           },
           "name": "internetGatewayName",
           "optional": true,
@@ -10974,7 +11032,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 86
+            "line": 87
           },
           "name": "ipv4Destination",
           "optional": true,
@@ -10992,7 +11050,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 93
+            "line": 94
           },
           "name": "ipv6Destination",
           "optional": true,
@@ -11010,7 +11068,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 108
+            "line": 109
           },
           "name": "subnets",
           "optional": true,
@@ -11041,7 +11099,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 65
+        "line": 66
       },
       "name": "InternetGatewayProps",
       "properties": [
@@ -11054,7 +11112,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 69
+            "line": 70
           },
           "name": "vpc",
           "type": {
@@ -11071,7 +11129,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 76
+            "line": 77
           },
           "name": "internetGatewayName",
           "optional": true,
@@ -11257,7 +11315,7 @@
         },
         "locationInModule": {
           "filename": "lib/subnet-v2.ts",
-          "line": 39
+          "line": 40
         },
         "parameters": [
           {
@@ -11271,7 +11329,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/subnet-v2.ts",
-        "line": 33
+        "line": 34
       },
       "name": "IpCidr",
       "properties": [
@@ -11283,7 +11341,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 38
+            "line": 39
           },
           "name": "cidr",
           "type": {
@@ -11728,7 +11786,7 @@
           "docs": {
             "default": "- Stack.region if defined in the stack",
             "remarks": "Operating Regions are AWS Regions where the IPAM is allowed to manage IP address CIDRs\nFor more information about operating Regions, see [Create an IPAM](https://docs.aws.amazon.com//vpc/latest/ipam/create-ipam.html) in the *Amazon VPC IPAM User Guide* .",
-            "see": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipam.html#cfn-ec2-ipam-operatingregions",
+            "see": "https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipam.html#cfn-ec2-ipam-operatingregions",
             "stability": "experimental",
             "summary": "The operating Regions for an IPAM."
           },
@@ -11898,7 +11956,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 18
+        "line": 19
       },
       "members": [
         {
@@ -11938,7 +11996,7 @@
         },
         "locationInModule": {
           "filename": "lib/route.ts",
-          "line": 455
+          "line": 456
         },
         "parameters": [
           {
@@ -11967,7 +12025,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 410
+        "line": 411
       },
       "name": "NatGateway",
       "properties": [
@@ -11980,7 +12038,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 413
+            "line": 414
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -11999,7 +12057,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 418
+            "line": 419
           },
           "name": "natGatewayId",
           "type": {
@@ -12014,7 +12072,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 448
+            "line": 449
           },
           "name": "resource",
           "type": {
@@ -12029,7 +12087,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 428
+            "line": 429
           },
           "name": "routerTargetId",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteTarget",
@@ -12045,7 +12103,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 423
+            "line": 424
           },
           "name": "routerType",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteTarget",
@@ -12062,7 +12120,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 435
+            "line": 436
           },
           "name": "connectivityType",
           "optional": true,
@@ -12078,7 +12136,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 453
+            "line": 454
           },
           "name": "eip",
           "optional": true,
@@ -12095,7 +12153,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 443
+            "line": 444
           },
           "name": "maxDrainDuration",
           "optional": true,
@@ -12121,7 +12179,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 94
+        "line": 95
       },
       "name": "NatGatewayOptions",
       "properties": [
@@ -12134,7 +12192,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 98
+            "line": 99
           },
           "name": "subnet",
           "type": {
@@ -12152,7 +12210,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 107
+            "line": 108
           },
           "name": "allocationId",
           "optional": true,
@@ -12170,7 +12228,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 114
+            "line": 115
           },
           "name": "connectivityType",
           "optional": true,
@@ -12188,7 +12246,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 122
+            "line": 123
           },
           "name": "maxDrainDuration",
           "optional": true,
@@ -12206,7 +12264,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 168
+            "line": 169
           },
           "name": "natGatewayName",
           "optional": true,
@@ -12224,7 +12282,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 129
+            "line": 130
           },
           "name": "privateIpAddress",
           "optional": true,
@@ -12243,7 +12301,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 138
+            "line": 139
           },
           "name": "secondaryAllocationIds",
           "optional": true,
@@ -12268,7 +12326,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 150
+            "line": 151
           },
           "name": "secondaryPrivateIpAddressCount",
           "optional": true,
@@ -12288,7 +12346,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 161
+            "line": 162
           },
           "name": "secondaryPrivateIpAddresses",
           "optional": true,
@@ -12322,7 +12380,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 174
+        "line": 175
       },
       "name": "NatGatewayProps",
       "properties": [
@@ -12336,7 +12394,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 180
+            "line": 181
           },
           "name": "vpc",
           "optional": true,
@@ -12388,7 +12446,7 @@
           "docs": {
             "default": "- required in case of an IPv6, throws an error if not provided.",
             "remarks": "\"ec2\", for example, allows users to use space for Elastic IP addresses and VPCs.",
-            "see": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipampool.html#cfn-ec2-ipampool-awsservice",
+            "see": "https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipampool.html#cfn-ec2-ipampool-awsservice",
             "stability": "experimental",
             "summary": "Limits which service in AWS that the pool can be used in."
           },
@@ -12449,7 +12507,7 @@
           "docs": {
             "default": "- Current operating region of IPAM",
             "remarks": "Should be one of the IPAM operating region.\n Only resources in the same Region as the locale of the pool can get IP address allocations from the pool.\nYou can only allocate a CIDR for a VPC, for example, from an IPAM pool that shares a locale with the VPC’s Region.\nNote that once you choose a Locale for a pool, you cannot modify it. If you choose an AWS Region for locale that has not been configured as an operating Region for the IPAM, you'll get an error.",
-            "see": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipampool.html#cfn-ec2-ipampool-locale",
+            "see": "https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipampool.html#cfn-ec2-ipampool-locale",
             "stability": "experimental",
             "summary": "The locale (AWS Region) of the pool."
           },
@@ -12505,7 +12563,7 @@
         },
         "locationInModule": {
           "filename": "lib/route.ts",
-          "line": 756
+          "line": 757
         },
         "parameters": [
           {
@@ -12534,7 +12592,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 714
+        "line": 715
       },
       "name": "Route",
       "properties": [
@@ -12547,7 +12605,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 717
+            "line": 718
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -12564,7 +12622,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 723
+            "line": 724
           },
           "name": "destination",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteV2",
@@ -12583,7 +12641,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 734
+            "line": 735
           },
           "name": "routeTable",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteV2",
@@ -12599,7 +12657,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 728
+            "line": 729
           },
           "name": "target",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteV2",
@@ -12615,7 +12673,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 739
+            "line": 740
           },
           "name": "targetRouterType",
           "type": {
@@ -12630,7 +12688,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 744
+            "line": 745
           },
           "name": "resource",
           "optional": true,
@@ -12656,7 +12714,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 682
+        "line": 683
       },
       "name": "RouteProps",
       "properties": [
@@ -12670,7 +12728,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 695
+            "line": 696
           },
           "name": "destination",
           "type": {
@@ -12689,7 +12747,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 688
+            "line": 689
           },
           "name": "routeTable",
           "type": {
@@ -12705,7 +12763,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 700
+            "line": 701
           },
           "name": "target",
           "type": {
@@ -12722,7 +12780,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 707
+            "line": 708
           },
           "name": "routeName",
           "optional": true,
@@ -12752,7 +12810,7 @@
         },
         "locationInModule": {
           "filename": "lib/route.ts",
-          "line": 837
+          "line": 838
         },
         "parameters": [
           {
@@ -12781,7 +12839,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 823
+        "line": 824
       },
       "methods": [
         {
@@ -12791,7 +12849,7 @@
           },
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 861
+            "line": 862
           },
           "name": "addRoute",
           "parameters": [
@@ -12843,7 +12901,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 826
+            "line": 827
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -12859,7 +12917,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 835
+            "line": 836
           },
           "name": "resource",
           "type": {
@@ -12874,7 +12932,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 830
+            "line": 831
           },
           "name": "routeTableId",
           "overrides": "aws-cdk-lib.aws_ec2.IRouteTable",
@@ -12900,7 +12958,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 805
+        "line": 806
       },
       "name": "RouteTableProps",
       "properties": [
@@ -12913,7 +12971,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 809
+            "line": 810
           },
           "name": "vpc",
           "type": {
@@ -12930,7 +12988,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 816
+            "line": 817
           },
           "name": "routeTableName",
           "optional": true,
@@ -12956,7 +13014,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 611
+        "line": 612
       },
       "name": "RouteTargetProps",
       "properties": [
@@ -12971,7 +13029,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 626
+            "line": 627
           },
           "name": "endpoint",
           "optional": true,
@@ -12990,7 +13048,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 618
+            "line": 619
           },
           "name": "gateway",
           "optional": true,
@@ -13018,7 +13076,7 @@
         },
         "locationInModule": {
           "filename": "lib/route.ts",
-          "line": 649
+          "line": 650
         },
         "parameters": [
           {
@@ -13032,7 +13090,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 632
+        "line": 633
       },
       "name": "RouteTargetType",
       "properties": [
@@ -13046,7 +13104,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 647
+            "line": 648
           },
           "name": "endpoint",
           "optional": true,
@@ -13064,7 +13122,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 639
+            "line": 640
           },
           "name": "gateway",
           "optional": true,
@@ -13134,7 +13192,7 @@
         },
         "locationInModule": {
           "filename": "lib/subnet-v2.ts",
-          "line": 289
+          "line": 290
         },
         "parameters": [
           {
@@ -13172,7 +13230,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/subnet-v2.ts",
-        "line": 160
+        "line": 161
       },
       "methods": [
         {
@@ -13182,7 +13240,7 @@
           },
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 168
+            "line": 169
           },
           "name": "fromSubnetV2Attributes",
           "parameters": [
@@ -13219,7 +13277,7 @@
           },
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 384
+            "line": 385
           },
           "name": "associateNetworkAcl",
           "overrides": "aws-cdk-lib.aws_ec2.ISubnet",
@@ -13257,7 +13315,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 163
+            "line": 164
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -13273,7 +13331,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 235
+            "line": 236
           },
           "name": "availabilityZone",
           "overrides": "aws-cdk-lib.aws_ec2.ISubnet",
@@ -13289,7 +13347,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 247
+            "line": 248
           },
           "name": "internetConnectivityEstablished",
           "overrides": "aws-cdk-lib.aws_ec2.ISubnet",
@@ -13305,7 +13363,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 260
+            "line": 261
           },
           "name": "ipv4CidrBlock",
           "overrides": "aws-cdk-lib.aws_ec2.ISubnet",
@@ -13321,7 +13379,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 407
+            "line": 408
           },
           "name": "networkAcl",
           "type": {
@@ -13336,7 +13394,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 399
+            "line": 400
           },
           "name": "routeTable",
           "overrides": "aws-cdk-lib.aws_ec2.ISubnet",
@@ -13355,7 +13413,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 241
+            "line": 242
           },
           "name": "subnetId",
           "overrides": "aws-cdk-lib.aws_ec2.ISubnet",
@@ -13371,7 +13429,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 267
+            "line": 268
           },
           "name": "subnetRef",
           "overrides": "aws-cdk-lib.interfaces.aws_ec2.ISubnetRef",
@@ -13387,7 +13445,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 265
+            "line": 266
           },
           "name": "ipv6CidrBlock",
           "optional": true,
@@ -13407,7 +13465,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 277
+            "line": 278
           },
           "name": "subnetType",
           "optional": true,
@@ -13434,7 +13492,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/subnet-v2.ts",
-        "line": 415
+        "line": 416
       },
       "name": "SubnetV2Attributes",
       "properties": [
@@ -13448,7 +13506,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 421
+            "line": 422
           },
           "name": "availabilityZone",
           "type": {
@@ -13465,7 +13523,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 428
+            "line": 429
           },
           "name": "ipv4CidrBlock",
           "type": {
@@ -13481,7 +13539,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 447
+            "line": 448
           },
           "name": "subnetId",
           "type": {
@@ -13497,7 +13555,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 452
+            "line": 453
           },
           "name": "subnetType",
           "type": {
@@ -13514,7 +13572,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 435
+            "line": 436
           },
           "name": "ipv6CidrBlock",
           "optional": true,
@@ -13532,7 +13590,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 442
+            "line": 443
           },
           "name": "routeTableId",
           "optional": true,
@@ -13550,7 +13608,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 459
+            "line": 460
           },
           "name": "subnetName",
           "optional": true,
@@ -13576,7 +13634,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/subnet-v2.ts",
-        "line": 57
+        "line": 58
       },
       "name": "SubnetV2Props",
       "properties": [
@@ -13589,7 +13647,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 79
+            "line": 80
           },
           "name": "availabilityZone",
           "type": {
@@ -13606,7 +13664,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 67
+            "line": 68
           },
           "name": "ipv4CidrBlock",
           "type": {
@@ -13623,7 +13681,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 103
+            "line": 104
           },
           "name": "subnetType",
           "type": {
@@ -13639,7 +13697,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 61
+            "line": 62
           },
           "name": "vpc",
           "type": {
@@ -13657,7 +13715,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 118
+            "line": 119
           },
           "name": "assignIpv6AddressOnCreation",
           "optional": true,
@@ -13675,7 +13733,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 93
+            "line": 94
           },
           "name": "defaultRouteTableName",
           "optional": true,
@@ -13693,7 +13751,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 74
+            "line": 75
           },
           "name": "ipv6CidrBlock",
           "optional": true,
@@ -13712,7 +13770,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 126
+            "line": 127
           },
           "name": "mapPublicIpOnLaunch",
           "optional": true,
@@ -13730,7 +13788,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 86
+            "line": 87
           },
           "name": "routeTable",
           "optional": true,
@@ -13748,7 +13806,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/subnet-v2.ts",
-            "line": 110
+            "line": 111
           },
           "name": "subnetName",
           "optional": true,
@@ -15612,7 +15670,7 @@
         },
         "locationInModule": {
           "filename": "lib/route.ts",
-          "line": 529
+          "line": 530
         },
         "parameters": [
           {
@@ -15641,7 +15699,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 510
+        "line": 511
       },
       "name": "VPCPeeringConnection",
       "properties": [
@@ -15654,7 +15712,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 513
+            "line": 514
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -15670,7 +15728,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 527
+            "line": 528
           },
           "name": "resource",
           "type": {
@@ -15685,7 +15743,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 522
+            "line": 523
           },
           "name": "routerTargetId",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteTarget",
@@ -15701,7 +15759,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 517
+            "line": 518
           },
           "name": "routerType",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteTarget",
@@ -15727,7 +15785,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 186
+        "line": 187
       },
       "name": "VPCPeeringConnectionOptions",
       "properties": [
@@ -15740,7 +15798,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 190
+            "line": 191
           },
           "name": "acceptorVpc",
           "type": {
@@ -15757,7 +15815,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 197
+            "line": 198
           },
           "name": "peerRoleArn",
           "optional": true,
@@ -15775,7 +15833,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 204
+            "line": 205
           },
           "name": "vpcPeeringConnectionName",
           "optional": true,
@@ -15804,7 +15862,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 210
+        "line": 211
       },
       "name": "VPCPeeringConnectionProps",
       "properties": [
@@ -15817,7 +15875,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 214
+            "line": 215
           },
           "name": "requestorVpc",
           "type": {
@@ -15846,7 +15904,7 @@
         },
         "locationInModule": {
           "filename": "lib/route.ts",
-          "line": 359
+          "line": 360
         },
         "parameters": [
           {
@@ -15875,7 +15933,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 325
+        "line": 326
       },
       "name": "VPNGatewayV2",
       "properties": [
@@ -15888,7 +15946,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 328
+            "line": 329
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -15904,7 +15962,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 347
+            "line": 348
           },
           "name": "resource",
           "type": {
@@ -15919,7 +15977,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 337
+            "line": 338
           },
           "name": "routerTargetId",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteTarget",
@@ -15935,7 +15993,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 332
+            "line": 333
           },
           "name": "routerType",
           "overrides": "@aws-cdk/aws-ec2-alpha.IRouteTarget",
@@ -15951,7 +16009,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 342
+            "line": 343
           },
           "name": "vpcId",
           "type": {
@@ -15976,21 +16034,21 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/vpc-v2-base.ts",
-        "line": 114
+        "line": 115
       },
       "name": "VPNGatewayV2Options",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "see": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpngateway.html#cfn-ec2-vpngateway-type",
+            "see": "https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpngateway.html#cfn-ec2-vpngateway-type",
             "stability": "experimental",
             "summary": "The type of VPN connection the virtual private gateway supports."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 119
+            "line": 120
           },
           "name": "type",
           "type": {
@@ -16007,7 +16065,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 126
+            "line": 127
           },
           "name": "amazonSideAsn",
           "optional": true,
@@ -16025,7 +16083,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 133
+            "line": 134
           },
           "name": "vpnGatewayName",
           "optional": true,
@@ -16036,14 +16094,14 @@
         {
           "abstract": true,
           "docs": {
-            "default": "- no propogation for routes",
+            "default": "- no propagation for routes",
             "stability": "experimental",
             "summary": "Subnets where the route propagation should be added."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 140
+            "line": 141
           },
           "name": "vpnRoutePropagation",
           "optional": true,
@@ -16077,7 +16135,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/route.ts",
-        "line": 83
+        "line": 84
       },
       "name": "VPNGatewayV2Props",
       "properties": [
@@ -16090,7 +16148,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/route.ts",
-            "line": 88
+            "line": 89
           },
           "name": "vpc",
           "type": {
@@ -16953,7 +17011,7 @@
         },
         "locationInModule": {
           "filename": "core/lib/resource.ts",
-          "line": 120
+          "line": 121
         },
         "parameters": [
           {
@@ -16983,7 +17041,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/vpc-v2-base.ts",
-        "line": 242
+        "line": 243
       },
       "methods": [
         {
@@ -16993,7 +17051,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 446
+            "line": 447
           },
           "name": "addClientVpnEndpoint",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17025,7 +17083,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 479
+            "line": 480
           },
           "name": "addEgressOnlyInternetGateway",
           "overrides": "@aws-cdk/aws-ec2-alpha.IVpcV2",
@@ -17051,7 +17109,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 618
+            "line": 619
           },
           "name": "addFlowLog",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17083,7 +17141,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 466
+            "line": 467
           },
           "name": "addGatewayEndpoint",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17114,7 +17172,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 456
+            "line": 457
           },
           "name": "addInterfaceEndpoint",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17146,7 +17204,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 525
+            "line": 526
           },
           "name": "addInternetGateway",
           "overrides": "@aws-cdk/aws-ec2-alpha.IVpcV2",
@@ -17172,7 +17230,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 605
+            "line": 606
           },
           "name": "addNatGateway",
           "overrides": "@aws-cdk/aws-ec2-alpha.IVpcV2",
@@ -17197,7 +17255,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 436
+            "line": 437
           },
           "name": "addVpnConnection",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17228,7 +17286,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 628
+            "line": 629
           },
           "name": "createAcceptorVpcRole",
           "overrides": "@aws-cdk/aws-ec2-alpha.IVpcV2",
@@ -17253,7 +17311,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 658
+            "line": 659
           },
           "name": "createPeeringConnection",
           "overrides": "@aws-cdk/aws-ec2-alpha.IVpcV2",
@@ -17285,7 +17343,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 379
+            "line": 380
           },
           "name": "enableVpnGateway",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17305,7 +17363,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 417
+            "line": 418
           },
           "name": "enableVpnGatewayV2",
           "overrides": "@aws-cdk/aws-ec2-alpha.IVpcV2",
@@ -17330,7 +17388,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 689
+            "line": 690
           },
           "name": "selectSubnetObjects",
           "parameters": [
@@ -17362,7 +17420,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 355
+            "line": 356
           },
           "name": "selectSubnets",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17392,7 +17450,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 276
+            "line": 277
           },
           "name": "availabilityZones",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17414,7 +17472,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 281
+            "line": 282
           },
           "name": "internetConnectivityEstablished",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17432,7 +17490,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 302
+            "line": 303
           },
           "name": "ipv4CidrBlock",
           "overrides": "@aws-cdk/aws-ec2-alpha.IVpcV2",
@@ -17449,7 +17507,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 271
+            "line": 272
           },
           "name": "isolatedSubnets",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17471,7 +17529,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 317
+            "line": 318
           },
           "name": "ownerAccountId",
           "overrides": "@aws-cdk/aws-ec2-alpha.IVpcV2",
@@ -17487,7 +17545,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 266
+            "line": 267
           },
           "name": "privateSubnets",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17508,7 +17566,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 261
+            "line": 262
           },
           "name": "publicSubnets",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17530,7 +17588,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 312
+            "line": 313
           },
           "name": "region",
           "overrides": "@aws-cdk/aws-ec2-alpha.IVpcV2",
@@ -17547,7 +17605,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 251
+            "line": 252
           },
           "name": "vpcArn",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17564,7 +17622,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 256
+            "line": 257
           },
           "name": "vpcCidrBlock",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17581,7 +17639,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 246
+            "line": 247
           },
           "name": "vpcId",
           "overrides": "aws-cdk-lib.aws_ec2.IVpc",
@@ -17597,7 +17655,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 369
+            "line": 370
           },
           "name": "vpcRef",
           "overrides": "aws-cdk-lib.interfaces.aws_ec2.IVPCRef",
@@ -17613,7 +17671,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 682
+            "line": 683
           },
           "name": "egressOnlyInternetGatewayId",
           "optional": true,
@@ -17629,7 +17687,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 675
+            "line": 676
           },
           "name": "internetGatewayId",
           "optional": true,
@@ -17646,7 +17704,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 324
+            "line": 325
           },
           "name": "ipv4IpamProvisionedCidrs",
           "optional": true,
@@ -17669,7 +17727,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 294
+            "line": 295
           },
           "name": "secondaryCidrBlock",
           "optional": true,
@@ -17692,7 +17750,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 307
+            "line": 308
           },
           "name": "vpcName",
           "optional": true,
@@ -17709,7 +17767,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 668
+            "line": 669
           },
           "name": "vpnGatewayId",
           "optional": true,
@@ -17725,7 +17783,7 @@
           },
           "locationInModule": {
             "filename": "lib/vpc-v2-base.ts",
-            "line": 329
+            "line": 330
           },
           "name": "incompleteSubnetDefinition",
           "protected": true,
@@ -17876,6 +17934,6 @@
       "symbolId": "lib/vpc-v2:VpcV2Props"
     }
   },
-  "version": "2.245.0-alpha.0",
+  "version": "2.247.0-alpha.0",
   "fingerprint": "**********"
 }