npm - @btc-embedded/cdk-extensions - Versions diffs - 0.20.6 → 0.20.8 - Mend

@btc-embedded/cdk-extensions 0.20.6 → 0.20.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11057) hide show

package/API.md CHANGED Viewed

@@ -490,39 +490,49 @@ public readonly vpcLink: IVpcLink;
 ---
-### ApplicationLoadBalancer <a name="ApplicationLoadBalancer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer"></a>
+### ApiKeyClientAuthorization <a name="ApiKeyClientAuthorization" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorization"></a>
-#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer"></a>
+Construct that provides a custom OAuth URL for authorizing an API client by only passing a valid client id.
+It will add a new endpoint to an existing HttpApi as `/authorize/{id}`.
+#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.Initializer"></a>
 ```typescript
-import { ApplicationLoadBalancer } from '@btc-embedded/cdk-extensions'
+import { ApiKeyClientAuthorization } from '@btc-embedded/cdk-extensions'
-new ApplicationLoadBalancer(scope: Construct, id: string, props: ApplicationLoadBalancerProps)
+new ApiKeyClientAuthorization(scope: Construct, id: string, props: ApiKeyClientAuthorizationProps)
 ```
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.id">id</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps">ApplicationLoadBalancerProps</a></code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | The scope to be used. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.Initializer.parameter.id">id</a></code> | <code>string</code> | The ID used for the component instance. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps">ApiKeyClientAuthorizationProps</a></code> | The {@link ApiKeyClientAuthorizationProps} required for creating the instance. |
 ---
-##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.scope"></a>
+##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.Initializer.parameter.scope"></a>
 - *Type:* constructs.Construct
+The scope to be used.
 ---
-##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.id"></a>
+##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.Initializer.parameter.id"></a>
 - *Type:* string
+The ID used for the component instance.
 ---
-##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.props"></a>
+##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.Initializer.parameter.props"></a>
-- *Type:* <a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps">ApplicationLoadBalancerProps</a>
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps">ApiKeyClientAuthorizationProps</a>
+The {@link ApiKeyClientAuthorizationProps} required for creating the instance.
 ---
@@ -530,11 +540,11 @@ new ApplicationLoadBalancer(scope: Construct, id: string, props: ApplicationLoad
 | **Name** | **Description** |
 | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.toString">toString</a></code> | Returns a string representation of this construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.toString">toString</a></code> | Returns a string representation of this construct. |
 ---
-##### ~~`toString`~~ <a name="toString" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.toString"></a>
+##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.toString"></a>
 ```typescript
 public toString(): string
@@ -546,16 +556,16 @@ Returns a string representation of this construct.
 | **Name** | **Description** |
 | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
 ---
-##### ~~`isConstruct`~~ <a name="isConstruct" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.isConstruct"></a>
+##### `isConstruct` <a name="isConstruct" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.isConstruct"></a>
 ```typescript
-import { ApplicationLoadBalancer } from '@btc-embedded/cdk-extensions'
+import { ApiKeyClientAuthorization } from '@btc-embedded/cdk-extensions'
-ApplicationLoadBalancer.isConstruct(x: any)
+ApiKeyClientAuthorization.isConstruct(x: any)
 ```
 Checks if `x` is a construct.
@@ -574,7 +584,7 @@ library can be accidentally installed, and `instanceof` will behave
 unpredictably. It is safest to avoid using `instanceof`, and using
 this type-testing method instead.
-###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.isConstruct.parameter.x"></a>
+###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.isConstruct.parameter.x"></a>
 - *Type:* any
@@ -586,16 +596,12 @@ Any object.
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.listener">listener</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationListener</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.loadbalancer">loadbalancer</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.ApplicationLoadBalancer</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.loadBalancer">loadBalancer</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationLoadBalancer</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.property.tokenUrl">tokenUrl</a></code> | <code>string</code> | Get the authorization URL to be used to retrieve the token. |
 ---
-##### ~~`node`~~<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.node"></a>
-- *Deprecated:* Use {@link ApplicationLoadBalancerV2 } instead
+##### `node`<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.property.node"></a>
 ```typescript
 public readonly node: Node;
@@ -607,84 +613,60 @@ The tree node.
 ---
-##### ~~`listener`~~<sup>Required</sup> <a name="listener" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.listener"></a>
-- *Deprecated:* Use {@link ApplicationLoadBalancerV2 } instead
-```typescript
-public readonly listener: IApplicationListener;
-```
-- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationListener
----
-##### ~~`loadbalancer`~~<sup>Required</sup> <a name="loadbalancer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.loadbalancer"></a>
-- *Deprecated:* Use {@link ApplicationLoadBalancerV2 } instead
+##### `tokenUrl`<sup>Required</sup> <a name="tokenUrl" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorization.property.tokenUrl"></a>
 ```typescript
-public readonly loadbalancer: ApplicationLoadBalancer;
+public readonly tokenUrl: string;
 ```
-- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.ApplicationLoadBalancer
----
-##### ~~`loadBalancer`~~<sup>Required</sup> <a name="loadBalancer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.loadBalancer"></a>
-- *Deprecated:* Use {@link ApplicationLoadBalancerV2 } instead
-```typescript
-public readonly loadBalancer: IApplicationLoadBalancer;
-```
+- *Type:* string
-- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationLoadBalancer
+Get the authorization URL to be used to retrieve the token.
 ---
-### ApplicationLoadBalancerV2 <a name="ApplicationLoadBalancerV2" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2"></a>
-A construct that creates an Application Load Balancer (ALB) with Cognito authentication.
+### ApiKeyManagement <a name="ApiKeyManagement" id="@btc-embedded/cdk-extensions.ApiKeyManagement"></a>
-This construct:
-- Creates an ALB with an HTTPS listener and a Cognito authentication action.
-- Configures a target group with health checks.
-- Adds a Route 53 DNS record for the ALB.
-- Exports key ALB properties (listener ARN, target group ARN, security group ID) as CloudFormation outputs.
+Component that provides a REST API to manage (create, modify, delete) API keys.
-#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer"></a>
+#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApiKeyManagement.Initializer"></a>
 ```typescript
-import { ApplicationLoadBalancerV2 } from '@btc-embedded/cdk-extensions'
+import { ApiKeyManagement } from '@btc-embedded/cdk-extensions'
-new ApplicationLoadBalancerV2(scope: Construct, id: string, props: ApplicationLoadBalancerPropsV2)
+new ApiKeyManagement(scope: Construct, id: string, props: ApiKeyManagementProps)
 ```
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.id">id</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2">ApplicationLoadBalancerPropsV2</a></code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagement.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | The scope to be used. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagement.Initializer.parameter.id">id</a></code> | <code>string</code> | The ID used for the component instance. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagement.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagementProps">ApiKeyManagementProps</a></code> | The {@link ApiKeyManagementProps} required for creating the instance. |
 ---
-##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.scope"></a>
+##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApiKeyManagement.Initializer.parameter.scope"></a>
 - *Type:* constructs.Construct
+The scope to be used.
 ---
-##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.id"></a>
+##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApiKeyManagement.Initializer.parameter.id"></a>
 - *Type:* string
+The ID used for the component instance.
 ---
-##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.props"></a>
+##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.ApiKeyManagement.Initializer.parameter.props"></a>
-- *Type:* <a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2">ApplicationLoadBalancerPropsV2</a>
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApiKeyManagementProps">ApiKeyManagementProps</a>
+The {@link ApiKeyManagementProps} required for creating the instance.
 ---
@@ -692,12 +674,12 @@ new ApplicationLoadBalancerV2(scope: Construct, id: string, props: ApplicationLo
 | **Name** | **Description** |
 | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.toString">toString</a></code> | Returns a string representation of this construct. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.addTarget">addTarget</a></code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagement.toString">toString</a></code> | Returns a string representation of this construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagement.allowConnection">allowConnection</a></code> | Grant connection privileges to the passed role. |
 ---
-##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.toString"></a>
+##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.ApiKeyManagement.toString"></a>
 ```typescript
 public toString(): string
@@ -705,15 +687,19 @@ public toString(): string
 Returns a string representation of this construct.
-##### `addTarget` <a name="addTarget" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.addTarget"></a>
+##### `allowConnection` <a name="allowConnection" id="@btc-embedded/cdk-extensions.ApiKeyManagement.allowConnection"></a>
 ```typescript
-public addTarget(target: IApplicationLoadBalancerTarget): void
+public allowConnection(role: IRole): void
 ```
-###### `target`<sup>Required</sup> <a name="target" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.addTarget.parameter.target"></a>
+Grant connection privileges to the passed role.
-- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationLoadBalancerTarget
+###### `role`<sup>Required</sup> <a name="role" id="@btc-embedded/cdk-extensions.ApiKeyManagement.allowConnection.parameter.role"></a>
+- *Type:* aws-cdk-lib.aws_iam.IRole
+The role to allow access to the API.
 ---
@@ -721,17 +707,16 @@ public addTarget(target: IApplicationLoadBalancerTarget): void
 | **Name** | **Description** |
 | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.fromBasePlatform">fromBasePlatform</a></code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagement.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
 ---
-##### `isConstruct` <a name="isConstruct" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.isConstruct"></a>
+##### `isConstruct` <a name="isConstruct" id="@btc-embedded/cdk-extensions.ApiKeyManagement.isConstruct"></a>
 ```typescript
-import { ApplicationLoadBalancerV2 } from '@btc-embedded/cdk-extensions'
+import { ApiKeyManagement } from '@btc-embedded/cdk-extensions'
-ApplicationLoadBalancerV2.isConstruct(x: any)
+ApiKeyManagement.isConstruct(x: any)
 ```
 Checks if `x` is a construct.
@@ -750,7 +735,7 @@ library can be accidentally installed, and `instanceof` will behave
 unpredictably. It is safest to avoid using `instanceof`, and using
 this type-testing method instead.
-###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.isConstruct.parameter.x"></a>
+###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.ApiKeyManagement.isConstruct.parameter.x"></a>
 - *Type:* any
@@ -758,43 +743,18 @@ Any object.
 ---
-##### `fromBasePlatform` <a name="fromBasePlatform" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.fromBasePlatform"></a>
-```typescript
-import { ApplicationLoadBalancerV2 } from '@btc-embedded/cdk-extensions'
-ApplicationLoadBalancerV2.fromBasePlatform(scope: Construct, id: string, __2: ApplicationLoadBalancerV2LookupOptions)
-```
-###### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.fromBasePlatform.parameter.scope"></a>
-- *Type:* constructs.Construct
----
-###### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.fromBasePlatform.parameter.id"></a>
-- *Type:* string
----
-###### `__2`<sup>Required</sup> <a name="__2" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.fromBasePlatform.parameter.__2"></a>
-- *Type:* <a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2LookupOptions">ApplicationLoadBalancerV2LookupOptions</a>
----
 #### Properties <a name="Properties" id="Properties"></a>
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.domainName">domainName</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.targetGroup">targetGroup</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationTargetGroup</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagement.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagement.property.baseUrl">baseUrl</a></code> | <code>string</code> | Get the base URL to manage the keys. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagement.property.keyManagementPath">keyManagementPath</a></code> | <code>string</code> | Get the path relative to the base url to manage a single key. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagement.property.keysManagementPath">keysManagementPath</a></code> | <code>string</code> | Get the path relative to the base url to manage all keys. |
 ---
-##### `node`<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.node"></a>
+##### `node`<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.ApiKeyManagement.property.node"></a>
 ```typescript
 public readonly node: Node;
@@ -806,63 +766,87 @@ The tree node.
 ---
-##### `domainName`<sup>Required</sup> <a name="domainName" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.domainName"></a>
+##### `baseUrl`<sup>Required</sup> <a name="baseUrl" id="@btc-embedded/cdk-extensions.ApiKeyManagement.property.baseUrl"></a>
 ```typescript
-public readonly domainName: string;
+public readonly baseUrl: string;
 ```
 - *Type:* string
+Get the base URL to manage the keys.
 ---
-##### `targetGroup`<sup>Required</sup> <a name="targetGroup" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.targetGroup"></a>
+##### `keyManagementPath`<sup>Required</sup> <a name="keyManagementPath" id="@btc-embedded/cdk-extensions.ApiKeyManagement.property.keyManagementPath"></a>
 ```typescript
-public readonly targetGroup: IApplicationTargetGroup;
+public readonly keyManagementPath: string;
 ```
-- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationTargetGroup
+- *Type:* string
+Get the path relative to the base url to manage a single key.
+Contains
+a placeholder {id} that has to replaced by the ID of the element to be managed.
 ---
+##### `keysManagementPath`<sup>Required</sup> <a name="keysManagementPath" id="@btc-embedded/cdk-extensions.ApiKeyManagement.property.keysManagementPath"></a>
-### ApplicationLoadBalancerV2Base <a name="ApplicationLoadBalancerV2Base" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base"></a>
+```typescript
+public readonly keysManagementPath: string;
+```
-- *Implements:* <a href="#@btc-embedded/cdk-extensions.IApplicationLoadBalancerV2">IApplicationLoadBalancerV2</a>
+- *Type:* string
+Get the path relative to the base url to manage all keys.
+---
-#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.Initializer"></a>
+### ApiKeyPreTokenHandler <a name="ApiKeyPreTokenHandler" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler"></a>
+Component that provides pre-token lambda that enhances the Cognito access token.
+#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.Initializer"></a>
 ```typescript
-import { ApplicationLoadBalancerV2Base } from '@btc-embedded/cdk-extensions'
+import { ApiKeyPreTokenHandler } from '@btc-embedded/cdk-extensions'
-new ApplicationLoadBalancerV2Base(scope: Construct, id: string)
+new ApiKeyPreTokenHandler(scope: Construct, id: string, props: ApiKeyPreTokenHandlerProps)
 ```
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | The scope in which to define this construct. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.Initializer.parameter.id">id</a></code> | <code>string</code> | The scoped construct ID. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | The scope to be used. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.Initializer.parameter.id">id</a></code> | <code>string</code> | The ID used for the component instance. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApiKeyPreTokenHandlerProps">ApiKeyPreTokenHandlerProps</a></code> | The {@link ApiKeyPreTokenHandlerProps} required for creating the instance. |
 ---
-##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.Initializer.parameter.scope"></a>
+##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.Initializer.parameter.scope"></a>
 - *Type:* constructs.Construct
-The scope in which to define this construct.
+The scope to be used.
 ---
-##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.Initializer.parameter.id"></a>
+##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.Initializer.parameter.id"></a>
 - *Type:* string
-The scoped construct ID.
+The ID used for the component instance.
-Must be unique amongst siblings. If
-the ID includes a path separator (`/`), then it will be replaced by double
-dash `--`.
+---
+##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.Initializer.parameter.props"></a>
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApiKeyPreTokenHandlerProps">ApiKeyPreTokenHandlerProps</a>
+The {@link ApiKeyPreTokenHandlerProps} required for creating the instance.
 ---
@@ -870,12 +854,11 @@ dash `--`.
 | **Name** | **Description** |
 | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.toString">toString</a></code> | Returns a string representation of this construct. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.addTarget">addTarget</a></code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.toString">toString</a></code> | Returns a string representation of this construct. |
 ---
-##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.toString"></a>
+##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.toString"></a>
 ```typescript
 public toString(): string
@@ -883,32 +866,20 @@ public toString(): string
 Returns a string representation of this construct.
-##### `addTarget` <a name="addTarget" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.addTarget"></a>
-```typescript
-public addTarget(target: IApplicationLoadBalancerTarget): void
-```
-###### `target`<sup>Required</sup> <a name="target" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.addTarget.parameter.target"></a>
-- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationLoadBalancerTarget
----
 #### Static Functions <a name="Static Functions" id="Static Functions"></a>
 | **Name** | **Description** |
 | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
 ---
-##### `isConstruct` <a name="isConstruct" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.isConstruct"></a>
+##### `isConstruct` <a name="isConstruct" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.isConstruct"></a>
 ```typescript
-import { ApplicationLoadBalancerV2Base } from '@btc-embedded/cdk-extensions'
+import { ApiKeyPreTokenHandler } from '@btc-embedded/cdk-extensions'
-ApplicationLoadBalancerV2Base.isConstruct(x: any)
+ApiKeyPreTokenHandler.isConstruct(x: any)
 ```
 Checks if `x` is a construct.
@@ -927,7 +898,7 @@ library can be accidentally installed, and `instanceof` will behave
 unpredictably. It is safest to avoid using `instanceof`, and using
 this type-testing method instead.
-###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.isConstruct.parameter.x"></a>
+###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.isConstruct.parameter.x"></a>
 - *Type:* any
@@ -939,13 +910,11 @@ Any object.
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.domainName">domainName</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.targetGroup">targetGroup</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationTargetGroup</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
 ---
-##### `node`<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.node"></a>
+##### `node`<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler.property.node"></a>
 ```typescript
 public readonly node: Node;
@@ -957,62 +926,48 @@ The tree node.
 ---
-##### `domainName`<sup>Required</sup> <a name="domainName" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.domainName"></a>
-```typescript
-public readonly domainName: string;
-```
-- *Type:* string
----
-##### `targetGroup`<sup>Required</sup> <a name="targetGroup" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.targetGroup"></a>
-```typescript
-public readonly targetGroup: IApplicationTargetGroup;
-```
-- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationTargetGroup
----
-### BTCLogGroup <a name="BTCLogGroup" id="@btc-embedded/cdk-extensions.BTCLogGroup"></a>
+### ApiKeyStore <a name="ApiKeyStore" id="@btc-embedded/cdk-extensions.ApiKeyStore"></a>
-A log group with sensible defaults.
+Component that provides the base constructs required for API Key management, namely the required DynamoDB table.
-#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.BTCLogGroup.Initializer"></a>
+#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApiKeyStore.Initializer"></a>
 ```typescript
-import { BTCLogGroup } from '@btc-embedded/cdk-extensions'
+import { ApiKeyStore } from '@btc-embedded/cdk-extensions'
-new BTCLogGroup(scope: Construct, id: string, options: BTCUniqueLogGroupOptions | BTCLogGroupOptions)
+new ApiKeyStore(scope: Construct, id: string, props: ApiKeyStoreProps)
 ```
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.id">id</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.options">options</a></code> | <code><a href="#@btc-embedded/cdk-extensions.BTCUniqueLogGroupOptions">BTCUniqueLogGroupOptions</a> \| <a href="#@btc-embedded/cdk-extensions.BTCLogGroupOptions">BTCLogGroupOptions</a></code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStore.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | The scope to be used. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStore.Initializer.parameter.id">id</a></code> | <code>string</code> | The ID used for the component instance. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStore.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStoreProps">ApiKeyStoreProps</a></code> | The {@link ApiKeyStoreProps} required for creating the instance. |
 ---
-##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.scope"></a>
+##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApiKeyStore.Initializer.parameter.scope"></a>
 - *Type:* constructs.Construct
+The scope to be used.
 ---
-##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.id"></a>
+##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApiKeyStore.Initializer.parameter.id"></a>
 - *Type:* string
+The ID used for the component instance.
 ---
-##### `options`<sup>Required</sup> <a name="options" id="@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.options"></a>
+##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.ApiKeyStore.Initializer.parameter.props"></a>
-- *Type:* <a href="#@btc-embedded/cdk-extensions.BTCUniqueLogGroupOptions">BTCUniqueLogGroupOptions</a> | <a href="#@btc-embedded/cdk-extensions.BTCLogGroupOptions">BTCLogGroupOptions</a>
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApiKeyStoreProps">ApiKeyStoreProps</a>
+The {@link ApiKeyStoreProps} required for creating the instance.
 ---
@@ -1020,24 +975,11 @@ new BTCLogGroup(scope: Construct, id: string, options: BTCUniqueLogGroupOptions
 | **Name** | **Description** |
 | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.toString">toString</a></code> | Returns a string representation of this construct. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.applyRemovalPolicy">applyRemovalPolicy</a></code> | Apply the given removal policy to this resource. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.addMetricFilter">addMetricFilter</a></code> | Create a new Metric Filter on this Log Group. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.addStream">addStream</a></code> | Create a new Log Stream for this Log Group. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.addSubscriptionFilter">addSubscriptionFilter</a></code> | Create a new Subscription Filter on this Log Group. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.addToResourcePolicy">addToResourcePolicy</a></code> | Adds a statement to the resource policy associated with this log group. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.extractMetric">extractMetric</a></code> | Extract a metric from structured log events in the LogGroup. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.grant">grant</a></code> | Give the indicated permissions on this log group and all streams. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.grantRead">grantRead</a></code> | Give permissions to read and filter events from this log group. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.grantWrite">grantWrite</a></code> | Give permissions to create and write to streams in this log group. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.logGroupPhysicalName">logGroupPhysicalName</a></code> | Public method to get the physical name of this log group. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.metric">metric</a></code> | Creates a CloudWatch metric for this log group. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.metricIncomingBytes">metricIncomingBytes</a></code> | Creates a CloudWatch metric for the volume of incoming log data in bytes to this log group. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.metricIncomingLogEvents">metricIncomingLogEvents</a></code> | Creates a CloudWatch metric for the number of incoming log events to this log group. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStore.toString">toString</a></code> | Returns a string representation of this construct. |
 ---
-##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.BTCLogGroup.toString"></a>
+##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.ApiKeyStore.toString"></a>
 ```typescript
 public toString(): string
@@ -1045,25 +987,668 @@ public toString(): string
 Returns a string representation of this construct.
-##### `applyRemovalPolicy` <a name="applyRemovalPolicy" id="@btc-embedded/cdk-extensions.BTCLogGroup.applyRemovalPolicy"></a>
+#### Static Functions <a name="Static Functions" id="Static Functions"></a>
-```typescript
-public applyRemovalPolicy(policy: RemovalPolicy): void
-```
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStore.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
-Apply the given removal policy to this resource.
+---
-The Removal Policy controls what happens to this resource when it stops
-being managed by CloudFormation, either because you've removed it from the
-CDK application or because you've made a change that requires the resource
-to be replaced.
+##### `isConstruct` <a name="isConstruct" id="@btc-embedded/cdk-extensions.ApiKeyStore.isConstruct"></a>
-The resource can be deleted (`RemovalPolicy.DESTROY`), or left in your AWS
-account for data recovery and cleanup later (`RemovalPolicy.RETAIN`).
+```typescript
+import { ApiKeyStore } from '@btc-embedded/cdk-extensions'
-###### `policy`<sup>Required</sup> <a name="policy" id="@btc-embedded/cdk-extensions.BTCLogGroup.applyRemovalPolicy.parameter.policy"></a>
+ApiKeyStore.isConstruct(x: any)
+```
-- *Type:* aws-cdk-lib.RemovalPolicy
+Checks if `x` is a construct.
+Use this method instead of `instanceof` to properly detect `Construct`
+instances, even when the construct library is symlinked.
+Explanation: in JavaScript, multiple copies of the `constructs` library on
+disk are seen as independent, completely different libraries. As a
+consequence, the class `Construct` in each copy of the `constructs` library
+is seen as a different class, and an instance of one class will not test as
+`instanceof` the other class. `npm install` will not create installations
+like this, but users may manually symlink construct libraries together or
+use a monorepo tool: in those cases, multiple copies of the `constructs`
+library can be accidentally installed, and `instanceof` will behave
+unpredictably. It is safest to avoid using `instanceof`, and using
+this type-testing method instead.
+###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.ApiKeyStore.isConstruct.parameter.x"></a>
+- *Type:* any
+Any object.
+---
+#### Properties <a name="Properties" id="Properties"></a>
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStore.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStore.property.apiKeyTable">apiKeyTable</a></code> | <code>aws-cdk-lib.aws_dynamodb.ITable</code> | Get the table that is used to manage the API Keys. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStore.property.attributes">attributes</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApiKeyAttribute">ApiKeyAttribute</a>[]</code> | Get the field configuration of the component. |
+---
+##### `node`<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.ApiKeyStore.property.node"></a>
+```typescript
+public readonly node: Node;
+```
+- *Type:* constructs.Node
+The tree node.
+---
+##### `apiKeyTable`<sup>Required</sup> <a name="apiKeyTable" id="@btc-embedded/cdk-extensions.ApiKeyStore.property.apiKeyTable"></a>
+```typescript
+public readonly apiKeyTable: ITable;
+```
+- *Type:* aws-cdk-lib.aws_dynamodb.ITable
+Get the table that is used to manage the API Keys.
+---
+##### `attributes`<sup>Required</sup> <a name="attributes" id="@btc-embedded/cdk-extensions.ApiKeyStore.property.attributes"></a>
+```typescript
+public readonly attributes: ApiKeyAttribute[];
+```
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApiKeyAttribute">ApiKeyAttribute</a>[]
+Get the field configuration of the component.
+---
+### ApplicationLoadBalancer <a name="ApplicationLoadBalancer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer"></a>
+#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer"></a>
+```typescript
+import { ApplicationLoadBalancer } from '@btc-embedded/cdk-extensions'
+new ApplicationLoadBalancer(scope: Construct, id: string, props: ApplicationLoadBalancerProps)
+```
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.id">id</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps">ApplicationLoadBalancerProps</a></code> | *No description.* |
+---
+##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.scope"></a>
+- *Type:* constructs.Construct
+---
+##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.id"></a>
+- *Type:* string
+---
+##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.Initializer.parameter.props"></a>
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps">ApplicationLoadBalancerProps</a>
+---
+#### Methods <a name="Methods" id="Methods"></a>
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.toString">toString</a></code> | Returns a string representation of this construct. |
+---
+##### ~~`toString`~~ <a name="toString" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.toString"></a>
+```typescript
+public toString(): string
+```
+Returns a string representation of this construct.
+#### Static Functions <a name="Static Functions" id="Static Functions"></a>
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
+---
+##### ~~`isConstruct`~~ <a name="isConstruct" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.isConstruct"></a>
+```typescript
+import { ApplicationLoadBalancer } from '@btc-embedded/cdk-extensions'
+ApplicationLoadBalancer.isConstruct(x: any)
+```
+Checks if `x` is a construct.
+Use this method instead of `instanceof` to properly detect `Construct`
+instances, even when the construct library is symlinked.
+Explanation: in JavaScript, multiple copies of the `constructs` library on
+disk are seen as independent, completely different libraries. As a
+consequence, the class `Construct` in each copy of the `constructs` library
+is seen as a different class, and an instance of one class will not test as
+`instanceof` the other class. `npm install` will not create installations
+like this, but users may manually symlink construct libraries together or
+use a monorepo tool: in those cases, multiple copies of the `constructs`
+library can be accidentally installed, and `instanceof` will behave
+unpredictably. It is safest to avoid using `instanceof`, and using
+this type-testing method instead.
+###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.isConstruct.parameter.x"></a>
+- *Type:* any
+Any object.
+---
+#### Properties <a name="Properties" id="Properties"></a>
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.listener">listener</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationListener</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.loadbalancer">loadbalancer</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.ApplicationLoadBalancer</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.loadBalancer">loadBalancer</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationLoadBalancer</code> | *No description.* |
+---
+##### ~~`node`~~<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.node"></a>
+- *Deprecated:* Use {@link ApplicationLoadBalancerV2 } instead
+```typescript
+public readonly node: Node;
+```
+- *Type:* constructs.Node
+The tree node.
+---
+##### ~~`listener`~~<sup>Required</sup> <a name="listener" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.listener"></a>
+- *Deprecated:* Use {@link ApplicationLoadBalancerV2 } instead
+```typescript
+public readonly listener: IApplicationListener;
+```
+- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationListener
+---
+##### ~~`loadbalancer`~~<sup>Required</sup> <a name="loadbalancer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.loadbalancer"></a>
+- *Deprecated:* Use {@link ApplicationLoadBalancerV2 } instead
+```typescript
+public readonly loadbalancer: ApplicationLoadBalancer;
+```
+- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.ApplicationLoadBalancer
+---
+##### ~~`loadBalancer`~~<sup>Required</sup> <a name="loadBalancer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancer.property.loadBalancer"></a>
+- *Deprecated:* Use {@link ApplicationLoadBalancerV2 } instead
+```typescript
+public readonly loadBalancer: IApplicationLoadBalancer;
+```
+- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationLoadBalancer
+---
+### ApplicationLoadBalancerV2 <a name="ApplicationLoadBalancerV2" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2"></a>
+A construct that creates an Application Load Balancer (ALB) with Cognito authentication.
+This construct:
+- Creates an ALB with an HTTPS listener and a Cognito authentication action.
+- Configures a target group with health checks.
+- Adds a Route 53 DNS record for the ALB.
+- Exports key ALB properties (listener ARN, target group ARN, security group ID) as CloudFormation outputs.
+#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer"></a>
+```typescript
+import { ApplicationLoadBalancerV2 } from '@btc-embedded/cdk-extensions'
+new ApplicationLoadBalancerV2(scope: Construct, id: string, props: ApplicationLoadBalancerPropsV2)
+```
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.id">id</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2">ApplicationLoadBalancerPropsV2</a></code> | *No description.* |
+---
+##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.scope"></a>
+- *Type:* constructs.Construct
+---
+##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.id"></a>
+- *Type:* string
+---
+##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.Initializer.parameter.props"></a>
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2">ApplicationLoadBalancerPropsV2</a>
+---
+#### Methods <a name="Methods" id="Methods"></a>
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.toString">toString</a></code> | Returns a string representation of this construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.addTarget">addTarget</a></code> | *No description.* |
+---
+##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.toString"></a>
+```typescript
+public toString(): string
+```
+Returns a string representation of this construct.
+##### `addTarget` <a name="addTarget" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.addTarget"></a>
+```typescript
+public addTarget(target: IApplicationLoadBalancerTarget): void
+```
+###### `target`<sup>Required</sup> <a name="target" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.addTarget.parameter.target"></a>
+- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationLoadBalancerTarget
+---
+#### Static Functions <a name="Static Functions" id="Static Functions"></a>
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.fromBasePlatform">fromBasePlatform</a></code> | *No description.* |
+---
+##### `isConstruct` <a name="isConstruct" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.isConstruct"></a>
+```typescript
+import { ApplicationLoadBalancerV2 } from '@btc-embedded/cdk-extensions'
+ApplicationLoadBalancerV2.isConstruct(x: any)
+```
+Checks if `x` is a construct.
+Use this method instead of `instanceof` to properly detect `Construct`
+instances, even when the construct library is symlinked.
+Explanation: in JavaScript, multiple copies of the `constructs` library on
+disk are seen as independent, completely different libraries. As a
+consequence, the class `Construct` in each copy of the `constructs` library
+is seen as a different class, and an instance of one class will not test as
+`instanceof` the other class. `npm install` will not create installations
+like this, but users may manually symlink construct libraries together or
+use a monorepo tool: in those cases, multiple copies of the `constructs`
+library can be accidentally installed, and `instanceof` will behave
+unpredictably. It is safest to avoid using `instanceof`, and using
+this type-testing method instead.
+###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.isConstruct.parameter.x"></a>
+- *Type:* any
+Any object.
+---
+##### `fromBasePlatform` <a name="fromBasePlatform" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.fromBasePlatform"></a>
+```typescript
+import { ApplicationLoadBalancerV2 } from '@btc-embedded/cdk-extensions'
+ApplicationLoadBalancerV2.fromBasePlatform(scope: Construct, id: string, __2: ApplicationLoadBalancerV2LookupOptions)
+```
+###### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.fromBasePlatform.parameter.scope"></a>
+- *Type:* constructs.Construct
+---
+###### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.fromBasePlatform.parameter.id"></a>
+- *Type:* string
+---
+###### `__2`<sup>Required</sup> <a name="__2" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.fromBasePlatform.parameter.__2"></a>
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2LookupOptions">ApplicationLoadBalancerV2LookupOptions</a>
+---
+#### Properties <a name="Properties" id="Properties"></a>
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.domainName">domainName</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.targetGroup">targetGroup</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationTargetGroup</code> | *No description.* |
+---
+##### `node`<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.node"></a>
+```typescript
+public readonly node: Node;
+```
+- *Type:* constructs.Node
+The tree node.
+---
+##### `domainName`<sup>Required</sup> <a name="domainName" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.domainName"></a>
+```typescript
+public readonly domainName: string;
+```
+- *Type:* string
+---
+##### `targetGroup`<sup>Required</sup> <a name="targetGroup" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2.property.targetGroup"></a>
+```typescript
+public readonly targetGroup: IApplicationTargetGroup;
+```
+- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationTargetGroup
+---
+### ApplicationLoadBalancerV2Base <a name="ApplicationLoadBalancerV2Base" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base"></a>
+- *Implements:* <a href="#@btc-embedded/cdk-extensions.IApplicationLoadBalancerV2">IApplicationLoadBalancerV2</a>
+#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.Initializer"></a>
+```typescript
+import { ApplicationLoadBalancerV2Base } from '@btc-embedded/cdk-extensions'
+new ApplicationLoadBalancerV2Base(scope: Construct, id: string)
+```
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | The scope in which to define this construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.Initializer.parameter.id">id</a></code> | <code>string</code> | The scoped construct ID. |
+---
+##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.Initializer.parameter.scope"></a>
+- *Type:* constructs.Construct
+The scope in which to define this construct.
+---
+##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.Initializer.parameter.id"></a>
+- *Type:* string
+The scoped construct ID.
+Must be unique amongst siblings. If
+the ID includes a path separator (`/`), then it will be replaced by double
+dash `--`.
+---
+#### Methods <a name="Methods" id="Methods"></a>
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.toString">toString</a></code> | Returns a string representation of this construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.addTarget">addTarget</a></code> | *No description.* |
+---
+##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.toString"></a>
+```typescript
+public toString(): string
+```
+Returns a string representation of this construct.
+##### `addTarget` <a name="addTarget" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.addTarget"></a>
+```typescript
+public addTarget(target: IApplicationLoadBalancerTarget): void
+```
+###### `target`<sup>Required</sup> <a name="target" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.addTarget.parameter.target"></a>
+- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationLoadBalancerTarget
+---
+#### Static Functions <a name="Static Functions" id="Static Functions"></a>
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
+---
+##### `isConstruct` <a name="isConstruct" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.isConstruct"></a>
+```typescript
+import { ApplicationLoadBalancerV2Base } from '@btc-embedded/cdk-extensions'
+ApplicationLoadBalancerV2Base.isConstruct(x: any)
+```
+Checks if `x` is a construct.
+Use this method instead of `instanceof` to properly detect `Construct`
+instances, even when the construct library is symlinked.
+Explanation: in JavaScript, multiple copies of the `constructs` library on
+disk are seen as independent, completely different libraries. As a
+consequence, the class `Construct` in each copy of the `constructs` library
+is seen as a different class, and an instance of one class will not test as
+`instanceof` the other class. `npm install` will not create installations
+like this, but users may manually symlink construct libraries together or
+use a monorepo tool: in those cases, multiple copies of the `constructs`
+library can be accidentally installed, and `instanceof` will behave
+unpredictably. It is safest to avoid using `instanceof`, and using
+this type-testing method instead.
+###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.isConstruct.parameter.x"></a>
+- *Type:* any
+Any object.
+---
+#### Properties <a name="Properties" id="Properties"></a>
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.domainName">domainName</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.targetGroup">targetGroup</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationTargetGroup</code> | *No description.* |
+---
+##### `node`<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.node"></a>
+```typescript
+public readonly node: Node;
+```
+- *Type:* constructs.Node
+The tree node.
+---
+##### `domainName`<sup>Required</sup> <a name="domainName" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.domainName"></a>
+```typescript
+public readonly domainName: string;
+```
+- *Type:* string
+---
+##### `targetGroup`<sup>Required</sup> <a name="targetGroup" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2Base.property.targetGroup"></a>
+```typescript
+public readonly targetGroup: IApplicationTargetGroup;
+```
+- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationTargetGroup
+---
+### BTCLogGroup <a name="BTCLogGroup" id="@btc-embedded/cdk-extensions.BTCLogGroup"></a>
+A log group with sensible defaults.
+#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.BTCLogGroup.Initializer"></a>
+```typescript
+import { BTCLogGroup } from '@btc-embedded/cdk-extensions'
+new BTCLogGroup(scope: Construct, id: string, options: BTCUniqueLogGroupOptions | BTCLogGroupOptions)
+```
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.id">id</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.options">options</a></code> | <code><a href="#@btc-embedded/cdk-extensions.BTCUniqueLogGroupOptions">BTCUniqueLogGroupOptions</a> \| <a href="#@btc-embedded/cdk-extensions.BTCLogGroupOptions">BTCLogGroupOptions</a></code> | *No description.* |
+---
+##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.scope"></a>
+- *Type:* constructs.Construct
+---
+##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.id"></a>
+- *Type:* string
+---
+##### `options`<sup>Required</sup> <a name="options" id="@btc-embedded/cdk-extensions.BTCLogGroup.Initializer.parameter.options"></a>
+- *Type:* <a href="#@btc-embedded/cdk-extensions.BTCUniqueLogGroupOptions">BTCUniqueLogGroupOptions</a> | <a href="#@btc-embedded/cdk-extensions.BTCLogGroupOptions">BTCLogGroupOptions</a>
+---
+#### Methods <a name="Methods" id="Methods"></a>
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.toString">toString</a></code> | Returns a string representation of this construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.applyRemovalPolicy">applyRemovalPolicy</a></code> | Apply the given removal policy to this resource. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.addMetricFilter">addMetricFilter</a></code> | Create a new Metric Filter on this Log Group. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.addStream">addStream</a></code> | Create a new Log Stream for this Log Group. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.addSubscriptionFilter">addSubscriptionFilter</a></code> | Create a new Subscription Filter on this Log Group. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.addToResourcePolicy">addToResourcePolicy</a></code> | Adds a statement to the resource policy associated with this log group. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.addTransformer">addTransformer</a></code> | Create a new Transformer on this Log Group. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.extractMetric">extractMetric</a></code> | Extract a metric from structured log events in the LogGroup. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.grant">grant</a></code> | Give the indicated permissions on this log group and all streams. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.grantRead">grantRead</a></code> | Give permissions to read and filter events from this log group. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.grantWrite">grantWrite</a></code> | Give permissions to create and write to streams in this log group. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.logGroupPhysicalName">logGroupPhysicalName</a></code> | Public method to get the physical name of this log group. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.metric">metric</a></code> | Creates a CloudWatch metric for this log group. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.metricIncomingBytes">metricIncomingBytes</a></code> | Creates a CloudWatch metric for the volume of incoming log data in bytes to this log group. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.metricIncomingLogEvents">metricIncomingLogEvents</a></code> | Creates a CloudWatch metric for the number of incoming log events to this log group. |
+---
+##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.BTCLogGroup.toString"></a>
+```typescript
+public toString(): string
+```
+Returns a string representation of this construct.
+##### `applyRemovalPolicy` <a name="applyRemovalPolicy" id="@btc-embedded/cdk-extensions.BTCLogGroup.applyRemovalPolicy"></a>
+```typescript
+public applyRemovalPolicy(policy: RemovalPolicy): void
+```
+Apply the given removal policy to this resource.
+The Removal Policy controls what happens to this resource when it stops
+being managed by CloudFormation, either because you've removed it from the
+CDK application or because you've made a change that requires the resource
+to be replaced.
+The resource can be deleted (`RemovalPolicy.DESTROY`), or left in your AWS
+account for data recovery and cleanup later (`RemovalPolicy.RETAIN`).
+###### `policy`<sup>Required</sup> <a name="policy" id="@btc-embedded/cdk-extensions.BTCLogGroup.applyRemovalPolicy.parameter.policy"></a>
+- *Type:* aws-cdk-lib.RemovalPolicy
 ---
@@ -1160,6 +1745,30 @@ The policy statement to add.
 ---
+##### `addTransformer` <a name="addTransformer" id="@btc-embedded/cdk-extensions.BTCLogGroup.addTransformer"></a>
+```typescript
+public addTransformer(id: string, props: TransformerOptions): Transformer
+```
+Create a new Transformer on this Log Group.
+###### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.BTCLogGroup.addTransformer.parameter.id"></a>
+- *Type:* string
+Unique identifier for the construct in its parent.
+---
+###### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.BTCLogGroup.addTransformer.parameter.props"></a>
+- *Type:* aws-cdk-lib.aws_logs.TransformerOptions
+Properties for creating the Transformer.
+---
 ##### `extractMetric` <a name="extractMetric" id="@btc-embedded/cdk-extensions.BTCLogGroup.extractMetric"></a>
 ```typescript
@@ -1480,10 +2089,12 @@ BTCLogGroup.fromBasePlatform(scope: Construct, id: string, __2: BTCLogGroupLooku
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
 | <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
-| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.property.env">env</a></code> | <code>aws-cdk-lib.ResourceEnvironment</code> | The environment this resource belongs to. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.property.env">env</a></code> | <code>aws-cdk-lib.interfaces.ResourceEnvironment</code> | The environment this resource belongs to. |
 | <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.property.stack">stack</a></code> | <code>aws-cdk-lib.Stack</code> | The stack in which this resource is defined. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.property.grants">grants</a></code> | <code>aws-cdk-lib.aws_logs.LogGroupGrants</code> | Collection of grant methods for a LogGroup. |
 | <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.property.logGroupArn">logGroupArn</a></code> | <code>string</code> | The ARN of this log group. |
 | <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.property.logGroupName">logGroupName</a></code> | <code>string</code> | The name of this log group. |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.property.logGroupRef">logGroupRef</a></code> | <code>aws-cdk-lib.interfaces.aws_logs.LogGroupReference</code> | A reference to a LogGroup resource. |
 ---
@@ -1505,16 +2116,17 @@ The tree node.
 public readonly env: ResourceEnvironment;
 ```
-- *Type:* aws-cdk-lib.ResourceEnvironment
+- *Type:* aws-cdk-lib.interfaces.ResourceEnvironment
 The environment this resource belongs to.
-For resources that are created and managed by the CDK
-(generally, those created by creating new class instances like Role, Bucket, etc.),
-this is always the same as the environment of the stack they belong to;
-however, for imported resources
-(those obtained from static methods like fromRoleArn, fromBucketName, etc.),
-that might be different than the stack they were imported into.
+For resources that are created and managed in a Stack (those created by
+creating new class instances like `new Role()`, `new Bucket()`, etc.), this
+is always the same as the environment of the stack they belong to.
+For referenced resources (those obtained from referencing methods like
+`Role.fromRoleArn()`, `Bucket.fromBucketName()`, etc.), they might be
+different than the stack they were imported into.
 ---
@@ -1530,6 +2142,18 @@ The stack in which this resource is defined.
 ---
+##### `grants`<sup>Required</sup> <a name="grants" id="@btc-embedded/cdk-extensions.BTCLogGroup.property.grants"></a>
+```typescript
+public readonly grants: LogGroupGrants;
+```
+- *Type:* aws-cdk-lib.aws_logs.LogGroupGrants
+Collection of grant methods for a LogGroup.
+---
 ##### `logGroupArn`<sup>Required</sup> <a name="logGroupArn" id="@btc-embedded/cdk-extensions.BTCLogGroup.property.logGroupArn"></a>
 ```typescript
@@ -1554,6 +2178,37 @@ The name of this log group.
 ---
+##### `logGroupRef`<sup>Required</sup> <a name="logGroupRef" id="@btc-embedded/cdk-extensions.BTCLogGroup.property.logGroupRef"></a>
+```typescript
+public readonly logGroupRef: LogGroupReference;
+```
+- *Type:* aws-cdk-lib.interfaces.aws_logs.LogGroupReference
+A reference to a LogGroup resource.
+---
+#### Constants <a name="Constants" id="Constants"></a>
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.BTCLogGroup.property.PROPERTY_INJECTION_ID">PROPERTY_INJECTION_ID</a></code> | <code>string</code> | Uniquely identifies this class. |
+---
+##### `PROPERTY_INJECTION_ID`<sup>Required</sup> <a name="PROPERTY_INJECTION_ID" id="@btc-embedded/cdk-extensions.BTCLogGroup.property.PROPERTY_INJECTION_ID"></a>
+```typescript
+public readonly PROPERTY_INJECTION_ID: string;
+```
+- *Type:* string
+Uniquely identifies this class.
+---
 ### CognitoUserPool <a name="CognitoUserPool" id="@btc-embedded/cdk-extensions.CognitoUserPool"></a>
@@ -3485,15 +4140,18 @@ new S3Bucket(scope: Construct, id: string, props?: BucketProps)
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.addEventNotification">addEventNotification</a></code> | Adds a bucket notification event destination. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.addObjectCreatedNotification">addObjectCreatedNotification</a></code> | Subscribes a destination to receive notifications when an object is created in the bucket. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.addObjectRemovedNotification">addObjectRemovedNotification</a></code> | Subscribes a destination to receive notifications when an object is removed from the bucket. |
+| <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.addReplicationPolicy">addReplicationPolicy</a></code> | Function to add required permissions to the destination bucket for cross account replication. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.addToResourcePolicy">addToResourcePolicy</a></code> | Adds a statement to the resource policy for a principal (i.e. account/role/service) to perform actions on this bucket and/or its contents. Use `bucketArn` and `arnForObjects(keys)` to obtain ARNs for this bucket or objects. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.arnForObjects">arnForObjects</a></code> | Returns an ARN that represents all objects within the bucket that match the key pattern specified. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.enableEventBridgeNotification">enableEventBridgeNotification</a></code> | Enables event bridge notification, causing all events below to be sent to EventBridge:. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.grantDelete">grantDelete</a></code> | Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket. |
+| <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.grantOnKey">grantOnKey</a></code> | Gives permissions to a grantable entity to perform actions on the encryption key. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.grantPublicAccess">grantPublicAccess</a></code> | Allows unrestricted access to objects from this bucket. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.grantPut">grantPut</a></code> | Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.grantPutAcl">grantPutAcl</a></code> | Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.grantRead">grantRead</a></code> | Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User). |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.grantReadWrite">grantReadWrite</a></code> | Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User). |
+| <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.grantReplicationPermission">grantReplicationPermission</a></code> | Grant replication permission to a principal. This method allows the principal to perform replication operations on this bucket. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.grantWrite">grantWrite</a></code> | Grant write permissions to this bucket to an IAM principal. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.onCloudTrailEvent">onCloudTrailEvent</a></code> | Define a CloudWatch event that triggers when something happens to this repository. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.onCloudTrailPutObject">onCloudTrailPutObject</a></code> | Defines an AWS CloudWatch event that triggers when an object is uploaded to the specified paths (keys) in this bucket using the PutObject API call. |
@@ -3640,6 +4298,36 @@ Filters (see onEvent).
 ---
+##### `addReplicationPolicy` <a name="addReplicationPolicy" id="@btc-embedded/cdk-extensions.S3Bucket.addReplicationPolicy"></a>
+```typescript
+public addReplicationPolicy(roleArn: string, accessControlTransition?: boolean, account?: string): void
+```
+Function to add required permissions to the destination bucket for cross account replication.
+These permissions will be added as a resource based policy on the bucket
+> [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-accesscontroltranslation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-accesscontroltranslation.html)
+###### `roleArn`<sup>Required</sup> <a name="roleArn" id="@btc-embedded/cdk-extensions.S3Bucket.addReplicationPolicy.parameter.roleArn"></a>
+- *Type:* string
+---
+###### `accessControlTransition`<sup>Optional</sup> <a name="accessControlTransition" id="@btc-embedded/cdk-extensions.S3Bucket.addReplicationPolicy.parameter.accessControlTransition"></a>
+- *Type:* boolean
+---
+###### `account`<sup>Optional</sup> <a name="account" id="@btc-embedded/cdk-extensions.S3Bucket.addReplicationPolicy.parameter.account"></a>
+- *Type:* string
+---
 ##### `addToResourcePolicy` <a name="addToResourcePolicy" id="@btc-embedded/cdk-extensions.S3Bucket.addToResourcePolicy"></a>
 ```typescript
@@ -3727,6 +4415,26 @@ Parameter type is `any` but `string` should be passed in.
 ---
+##### `grantOnKey` <a name="grantOnKey" id="@btc-embedded/cdk-extensions.S3Bucket.grantOnKey"></a>
+```typescript
+public grantOnKey(grantee: IGrantable, actions: ...string[]): GrantOnKeyResult
+```
+Gives permissions to a grantable entity to perform actions on the encryption key.
+###### `grantee`<sup>Required</sup> <a name="grantee" id="@btc-embedded/cdk-extensions.S3Bucket.grantOnKey.parameter.grantee"></a>
+- *Type:* aws-cdk-lib.aws_iam.IGrantable
+---
+###### `actions`<sup>Required</sup> <a name="actions" id="@btc-embedded/cdk-extensions.S3Bucket.grantOnKey.parameter.actions"></a>
+- *Type:* ...string[]
+---
 ##### `grantPublicAccess` <a name="grantPublicAccess" id="@btc-embedded/cdk-extensions.S3Bucket.grantPublicAccess"></a>
 ```typescript
@@ -3885,6 +4593,33 @@ use the `grantPutAcl` method.
 ---
+##### `grantReplicationPermission` <a name="grantReplicationPermission" id="@btc-embedded/cdk-extensions.S3Bucket.grantReplicationPermission"></a>
+```typescript
+public grantReplicationPermission(identity: IGrantable, props: GrantReplicationPermissionProps): Grant
+```
+Grant replication permission to a principal. This method allows the principal to perform replication operations on this bucket.
+Note that when calling this function for source or destination buckets that support KMS encryption,
+you need to specify the KMS key for encryption and the KMS key for decryption, respectively.
+###### `identity`<sup>Required</sup> <a name="identity" id="@btc-embedded/cdk-extensions.S3Bucket.grantReplicationPermission.parameter.identity"></a>
+- *Type:* aws-cdk-lib.aws_iam.IGrantable
+The principal to grant replication permission to.
+---
+###### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.S3Bucket.grantReplicationPermission.parameter.props"></a>
+- *Type:* aws-cdk-lib.aws_s3.GrantReplicationPermissionProps
+The properties of the replication source and destination buckets.
+---
 ##### `grantWrite` <a name="grantWrite" id="@btc-embedded/cdk-extensions.S3Bucket.grantWrite"></a>
 ```typescript
@@ -4403,18 +5138,22 @@ allow legacy bucket naming style, default is false.
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
-| <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.env">env</a></code> | <code>aws-cdk-lib.ResourceEnvironment</code> | The environment this resource belongs to. |
+| <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.env">env</a></code> | <code>aws-cdk-lib.interfaces.ResourceEnvironment</code> | The environment this resource belongs to. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.stack">stack</a></code> | <code>aws-cdk-lib.Stack</code> | The stack in which this resource is defined. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.bucketArn">bucketArn</a></code> | <code>string</code> | The ARN of the bucket. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.bucketDomainName">bucketDomainName</a></code> | <code>string</code> | The IPv4 DNS name of the specified bucket. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.bucketDualStackDomainName">bucketDualStackDomainName</a></code> | <code>string</code> | The IPv6 DNS name of the specified bucket. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.bucketName">bucketName</a></code> | <code>string</code> | The name of the bucket. |
+| <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.bucketRef">bucketRef</a></code> | <code>aws-cdk-lib.interfaces.aws_s3.BucketReference</code> | A reference to a Bucket resource. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.bucketRegionalDomainName">bucketRegionalDomainName</a></code> | <code>string</code> | The regional domain name of the specified bucket. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.bucketWebsiteDomainName">bucketWebsiteDomainName</a></code> | <code>string</code> | The Domain name of the static website. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.bucketWebsiteUrl">bucketWebsiteUrl</a></code> | <code>string</code> | The URL of the static website. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.encryptionKey">encryptionKey</a></code> | <code>aws-cdk-lib.aws_kms.IKey</code> | Optional KMS encryption key associated with this bucket. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.isWebsite">isWebsite</a></code> | <code>boolean</code> | If this bucket has been configured for static website hosting. |
+| <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.grants">grants</a></code> | <code>aws-cdk-lib.aws_s3.BucketGrants</code> | Collection of grant methods for a Bucket. |
+| <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.disallowPublicAccess">disallowPublicAccess</a></code> | <code>boolean</code> | Whether to disallow public access. |
 | <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.policy">policy</a></code> | <code>aws-cdk-lib.aws_s3.BucketPolicy</code> | The resource policy associated with this bucket. |
+| <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.replicationRoleArn">replicationRoleArn</a></code> | <code>string</code> | Role used to set up permissions on this bucket for replication. |
 ---
@@ -4436,16 +5175,17 @@ The tree node.
 public readonly env: ResourceEnvironment;
 ```
-- *Type:* aws-cdk-lib.ResourceEnvironment
+- *Type:* aws-cdk-lib.interfaces.ResourceEnvironment
 The environment this resource belongs to.
-For resources that are created and managed by the CDK
-(generally, those created by creating new class instances like Role, Bucket, etc.),
-this is always the same as the environment of the stack they belong to;
-however, for imported resources
-(those obtained from static methods like fromRoleArn, fromBucketName, etc.),
-that might be different than the stack they were imported into.
+For resources that are created and managed in a Stack (those created by
+creating new class instances like `new Role()`, `new Bucket()`, etc.), this
+is always the same as the environment of the stack they belong to.
+For referenced resources (those obtained from referencing methods like
+`Role.fromRoleArn()`, `Bucket.fromBucketName()`, etc.), they might be
+different than the stack they were imported into.
 ---
@@ -4509,6 +5249,18 @@ The name of the bucket.
 ---
+##### `bucketRef`<sup>Required</sup> <a name="bucketRef" id="@btc-embedded/cdk-extensions.S3Bucket.property.bucketRef"></a>
+```typescript
+public readonly bucketRef: BucketReference;
+```
+- *Type:* aws-cdk-lib.interfaces.aws_s3.BucketReference
+A reference to a Bucket resource.
+---
 ##### `bucketRegionalDomainName`<sup>Required</sup> <a name="bucketRegionalDomainName" id="@btc-embedded/cdk-extensions.S3Bucket.property.bucketRegionalDomainName"></a>
 ```typescript
@@ -4569,6 +5321,30 @@ If this bucket has been configured for static website hosting.
 ---
+##### `grants`<sup>Required</sup> <a name="grants" id="@btc-embedded/cdk-extensions.S3Bucket.property.grants"></a>
+```typescript
+public readonly grants: BucketGrants;
+```
+- *Type:* aws-cdk-lib.aws_s3.BucketGrants
+Collection of grant methods for a Bucket.
+---
+##### `disallowPublicAccess`<sup>Optional</sup> <a name="disallowPublicAccess" id="@btc-embedded/cdk-extensions.S3Bucket.property.disallowPublicAccess"></a>
+```typescript
+public readonly disallowPublicAccess: boolean;
+```
+- *Type:* boolean
+Whether to disallow public access.
+---
 ##### `policy`<sup>Optional</sup> <a name="policy" id="@btc-embedded/cdk-extensions.S3Bucket.property.policy"></a>
 ```typescript
@@ -4584,6 +5360,37 @@ first call to addToResourcePolicy(s).
 ---
+##### `replicationRoleArn`<sup>Optional</sup> <a name="replicationRoleArn" id="@btc-embedded/cdk-extensions.S3Bucket.property.replicationRoleArn"></a>
+```typescript
+public readonly replicationRoleArn: string;
+```
+- *Type:* string
+Role used to set up permissions on this bucket for replication.
+---
+#### Constants <a name="Constants" id="Constants"></a>
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.S3Bucket.property.PROPERTY_INJECTION_ID">PROPERTY_INJECTION_ID</a></code> | <code>string</code> | Uniquely identifies this class. |
+---
+##### `PROPERTY_INJECTION_ID`<sup>Required</sup> <a name="PROPERTY_INJECTION_ID" id="@btc-embedded/cdk-extensions.S3Bucket.property.PROPERTY_INJECTION_ID"></a>
+```typescript
+public readonly PROPERTY_INJECTION_ID: string;
+```
+- *Type:* string
+Uniquely identifies this class.
+---
 ### SecureRestApi <a name="SecureRestApi" id="@btc-embedded/cdk-extensions.SecureRestApi"></a>
@@ -4884,43 +5691,243 @@ The tree node.
 #### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.Vpc.Initializer"></a>
 ```typescript
-import { Vpc } from '@btc-embedded/cdk-extensions'
+import { Vpc } from '@btc-embedded/cdk-extensions'
+new Vpc(scope: Construct, id: string, props: VpcProps)
+```
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | The parent construct this is part of. |
+| <code><a href="#@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.id">id</a></code> | <code>string</code> | Id of this construct for Cloudformation. |
+| <code><a href="#@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.VpcProps">VpcProps</a></code> | Properties allowing to set a predefined VPCName, IPAdressBlog, maxNumber of AZs and decision wether to create a KMSKey for usage with the Exec extension. |
+---
+##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.scope"></a>
+- *Type:* constructs.Construct
+The parent construct this is part of.
+---
+##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.id"></a>
+- *Type:* string
+Id of this construct for Cloudformation.
+---
+##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.props"></a>
+- *Type:* <a href="#@btc-embedded/cdk-extensions.VpcProps">VpcProps</a>
+Properties allowing to set a predefined VPCName, IPAdressBlog, maxNumber of AZs and decision wether to create a KMSKey for usage with the Exec extension.
+Defaults to an empty object creating a
+dedicated VPC, with max 2 AZS and NO Key for Exec
+---
+#### Methods <a name="Methods" id="Methods"></a>
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.Vpc.toString">toString</a></code> | Returns a string representation of this construct. |
+---
+##### ~~`toString`~~ <a name="toString" id="@btc-embedded/cdk-extensions.Vpc.toString"></a>
+```typescript
+public toString(): string
+```
+Returns a string representation of this construct.
+#### Static Functions <a name="Static Functions" id="Static Functions"></a>
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.Vpc.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.Vpc.fromBasePlatform">fromBasePlatform</a></code> | *No description.* |
+---
+##### ~~`isConstruct`~~ <a name="isConstruct" id="@btc-embedded/cdk-extensions.Vpc.isConstruct"></a>
+```typescript
+import { Vpc } from '@btc-embedded/cdk-extensions'
+Vpc.isConstruct(x: any)
+```
+Checks if `x` is a construct.
+Use this method instead of `instanceof` to properly detect `Construct`
+instances, even when the construct library is symlinked.
+Explanation: in JavaScript, multiple copies of the `constructs` library on
+disk are seen as independent, completely different libraries. As a
+consequence, the class `Construct` in each copy of the `constructs` library
+is seen as a different class, and an instance of one class will not test as
+`instanceof` the other class. `npm install` will not create installations
+like this, but users may manually symlink construct libraries together or
+use a monorepo tool: in those cases, multiple copies of the `constructs`
+library can be accidentally installed, and `instanceof` will behave
+unpredictably. It is safest to avoid using `instanceof`, and using
+this type-testing method instead.
+###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.Vpc.isConstruct.parameter.x"></a>
+- *Type:* any
+Any object.
+---
+##### ~~`fromBasePlatform`~~ <a name="fromBasePlatform" id="@btc-embedded/cdk-extensions.Vpc.fromBasePlatform"></a>
+```typescript
+import { Vpc } from '@btc-embedded/cdk-extensions'
+Vpc.fromBasePlatform(scope: Construct, id: string, stackName: string)
+```
+###### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.Vpc.fromBasePlatform.parameter.scope"></a>
+- *Type:* constructs.Construct
+---
+###### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.Vpc.fromBasePlatform.parameter.id"></a>
+- *Type:* string
+---
+###### `stackName`<sup>Required</sup> <a name="stackName" id="@btc-embedded/cdk-extensions.Vpc.fromBasePlatform.parameter.stackName"></a>
+- *Type:* string
+---
+#### Properties <a name="Properties" id="Properties"></a>
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.Vpc.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
+| <code><a href="#@btc-embedded/cdk-extensions.Vpc.property.clusterName">clusterName</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.Vpc.property.fqdn">fqdn</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.Vpc.property.cluster">cluster</a></code> | <code>aws-cdk-lib.aws_ecs.Cluster</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.Vpc.property.vpcInstance">vpcInstance</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | *No description.* |
+---
+##### ~~`node`~~<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.Vpc.property.node"></a>
+- *Deprecated:* This class is deprecated. Use {@link VpcV2 } and {@link EcsCluster } classes instead.
+```typescript
+public readonly node: Node;
+```
+- *Type:* constructs.Node
+The tree node.
+---
+##### ~~`clusterName`~~<sup>Required</sup> <a name="clusterName" id="@btc-embedded/cdk-extensions.Vpc.property.clusterName"></a>
+- *Deprecated:* This class is deprecated. Use {@link VpcV2 } and {@link EcsCluster } classes instead.
+```typescript
+public readonly clusterName: string;
+```
+- *Type:* string
+---
+##### ~~`fqdn`~~<sup>Required</sup> <a name="fqdn" id="@btc-embedded/cdk-extensions.Vpc.property.fqdn"></a>
+- *Deprecated:* This class is deprecated. Use {@link VpcV2 } and {@link EcsCluster } classes instead.
+```typescript
+public readonly fqdn: string;
+```
+- *Type:* string
+---
+##### ~~`cluster`~~<sup>Required</sup> <a name="cluster" id="@btc-embedded/cdk-extensions.Vpc.property.cluster"></a>
+- *Deprecated:* This class is deprecated. Use {@link VpcV2 } and {@link EcsCluster } classes instead.
+```typescript
+public readonly cluster: Cluster;
+```
+- *Type:* aws-cdk-lib.aws_ecs.Cluster
+---
+##### ~~`vpcInstance`~~<sup>Required</sup> <a name="vpcInstance" id="@btc-embedded/cdk-extensions.Vpc.property.vpcInstance"></a>
+- *Deprecated:* This class is deprecated. Use {@link VpcV2 } and {@link EcsCluster } classes instead.
+```typescript
+public readonly vpcInstance: IVpc;
+```
+- *Type:* aws-cdk-lib.aws_ec2.IVpc
+---
+### VpcV2 <a name="VpcV2" id="@btc-embedded/cdk-extensions.VpcV2"></a>
+- *Implements:* <a href="#@btc-embedded/cdk-extensions.IVpcV2">IVpcV2</a>
+A construct that creates or imports an existing VPC.
+Supports importing by VPC ID, VPC name, or creating a new VPC with a specified CIDR block.
+#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.VpcV2.Initializer"></a>
+```typescript
+import { VpcV2 } from '@btc-embedded/cdk-extensions'
-new Vpc(scope: Construct, id: string, props: VpcProps)
+new VpcV2(scope: Construct, id: string, props: VpcV2Props)
 ```
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | The parent construct this is part of. |
-| <code><a href="#@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.id">id</a></code> | <code>string</code> | Id of this construct for Cloudformation. |
-| <code><a href="#@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.VpcProps">VpcProps</a></code> | Properties allowing to set a predefined VPCName, IPAdressBlog, maxNumber of AZs and decision wether to create a KMSKey for usage with the Exec extension. |
+| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.id">id</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.VpcV2Props">VpcV2Props</a></code> | *No description.* |
 ---
-##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.scope"></a>
+##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.scope"></a>
 - *Type:* constructs.Construct
-The parent construct this is part of.
 ---
-##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.id"></a>
+##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.id"></a>
 - *Type:* string
-Id of this construct for Cloudformation.
 ---
-##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.Vpc.Initializer.parameter.props"></a>
-- *Type:* <a href="#@btc-embedded/cdk-extensions.VpcProps">VpcProps</a>
-Properties allowing to set a predefined VPCName, IPAdressBlog, maxNumber of AZs and decision wether to create a KMSKey for usage with the Exec extension.
+##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.props"></a>
-Defaults to an empty object creating a
-dedicated VPC, with max 2 AZS and NO Key for Exec
+- *Type:* <a href="#@btc-embedded/cdk-extensions.VpcV2Props">VpcV2Props</a>
 ---
@@ -4928,11 +5935,11 @@ dedicated VPC, with max 2 AZS and NO Key for Exec
 | **Name** | **Description** |
 | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.Vpc.toString">toString</a></code> | Returns a string representation of this construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.toString">toString</a></code> | Returns a string representation of this construct. |
 ---
-##### ~~`toString`~~ <a name="toString" id="@btc-embedded/cdk-extensions.Vpc.toString"></a>
+##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.VpcV2.toString"></a>
 ```typescript
 public toString(): string
@@ -4944,17 +5951,17 @@ Returns a string representation of this construct.
 | **Name** | **Description** |
 | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.Vpc.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
-| <code><a href="#@btc-embedded/cdk-extensions.Vpc.fromBasePlatform">fromBasePlatform</a></code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
+| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.fromBasePlatform">fromBasePlatform</a></code> | *No description.* |
 ---
-##### ~~`isConstruct`~~ <a name="isConstruct" id="@btc-embedded/cdk-extensions.Vpc.isConstruct"></a>
+##### `isConstruct` <a name="isConstruct" id="@btc-embedded/cdk-extensions.VpcV2.isConstruct"></a>
 ```typescript
-import { Vpc } from '@btc-embedded/cdk-extensions'
+import { VpcV2 } from '@btc-embedded/cdk-extensions'
-Vpc.isConstruct(x: any)
+VpcV2.isConstruct(x: any)
 ```
 Checks if `x` is a construct.
@@ -4973,7 +5980,7 @@ library can be accidentally installed, and `instanceof` will behave
 unpredictably. It is safest to avoid using `instanceof`, and using
 this type-testing method instead.
-###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.Vpc.isConstruct.parameter.x"></a>
+###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.VpcV2.isConstruct.parameter.x"></a>
 - *Type:* any
@@ -4981,27 +5988,27 @@ Any object.
 ---
-##### ~~`fromBasePlatform`~~ <a name="fromBasePlatform" id="@btc-embedded/cdk-extensions.Vpc.fromBasePlatform"></a>
+##### `fromBasePlatform` <a name="fromBasePlatform" id="@btc-embedded/cdk-extensions.VpcV2.fromBasePlatform"></a>
 ```typescript
-import { Vpc } from '@btc-embedded/cdk-extensions'
+import { VpcV2 } from '@btc-embedded/cdk-extensions'
-Vpc.fromBasePlatform(scope: Construct, id: string, stackName: string)
+VpcV2.fromBasePlatform(scope: Construct, id: string, stackName: string)
 ```
-###### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.Vpc.fromBasePlatform.parameter.scope"></a>
+###### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.VpcV2.fromBasePlatform.parameter.scope"></a>
 - *Type:* constructs.Construct
 ---
-###### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.Vpc.fromBasePlatform.parameter.id"></a>
+###### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.VpcV2.fromBasePlatform.parameter.id"></a>
 - *Type:* string
 ---
-###### `stackName`<sup>Required</sup> <a name="stackName" id="@btc-embedded/cdk-extensions.Vpc.fromBasePlatform.parameter.stackName"></a>
+###### `stackName`<sup>Required</sup> <a name="stackName" id="@btc-embedded/cdk-extensions.VpcV2.fromBasePlatform.parameter.stackName"></a>
 - *Type:* string
@@ -5011,17 +6018,12 @@ Vpc.fromBasePlatform(scope: Construct, id: string, stackName: string)
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.Vpc.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
-| <code><a href="#@btc-embedded/cdk-extensions.Vpc.property.clusterName">clusterName</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.Vpc.property.fqdn">fqdn</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.Vpc.property.cluster">cluster</a></code> | <code>aws-cdk-lib.aws_ecs.Cluster</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.Vpc.property.vpcInstance">vpcInstance</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
+| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.property.vpcInstance">vpcInstance</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | *No description.* |
 ---
-##### ~~`node`~~<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.Vpc.property.node"></a>
-- *Deprecated:* This class is deprecated. Use {@link VpcV2 } and {@link EcsCluster } classes instead.
+##### `node`<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.VpcV2.property.node"></a>
 ```typescript
 public readonly node: Node;
@@ -5033,470 +6035,604 @@ The tree node.
 ---
-##### ~~`clusterName`~~<sup>Required</sup> <a name="clusterName" id="@btc-embedded/cdk-extensions.Vpc.property.clusterName"></a>
+##### `vpcInstance`<sup>Required</sup> <a name="vpcInstance" id="@btc-embedded/cdk-extensions.VpcV2.property.vpcInstance"></a>
-- *Deprecated:* This class is deprecated. Use {@link VpcV2 } and {@link EcsCluster } classes instead.
+```typescript
+public readonly vpcInstance: IVpc;
+```
+- *Type:* aws-cdk-lib.aws_ec2.IVpc
+---
+## Structs <a name="Structs" id="Structs"></a>
+### AnythingButFilterRule <a name="AnythingButFilterRule" id="@btc-embedded/cdk-extensions.AnythingButFilterRule"></a>
+Rule that allows all values except the given ones.
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.AnythingButFilterRule.Initializer"></a>
 ```typescript
-public readonly clusterName: string;
+import { AnythingButFilterRule } from '@btc-embedded/cdk-extensions'
+const anythingButFilterRule: AnythingButFilterRule = { ... }
+```
+### ApiGatewayExtensionProps <a name="ApiGatewayExtensionProps" id="@btc-embedded/cdk-extensions.ApiGatewayExtensionProps"></a>
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.Initializer"></a>
+```typescript
+import { ApiGatewayExtensionProps } from '@btc-embedded/cdk-extensions'
+const apiGatewayExtensionProps: ApiGatewayExtensionProps = { ... }
+```
+#### Properties <a name="Properties" id="Properties"></a>
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.platformStackName">platformStackName</a></code> | <code>string</code> | The name of the base platform stack. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.prefix">prefix</a></code> | <code>string</code> | The prefix for the API Gateway endpoint. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.securityGroupId">securityGroupId</a></code> | <code>string</code> | The security group ID of the API Gateway which should be allowed to connect to the service. |
+---
+##### `platformStackName`<sup>Required</sup> <a name="platformStackName" id="@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.platformStackName"></a>
+```typescript
+public readonly platformStackName: string;
 ```
 - *Type:* string
+The name of the base platform stack.
 ---
-##### ~~`fqdn`~~<sup>Required</sup> <a name="fqdn" id="@btc-embedded/cdk-extensions.Vpc.property.fqdn"></a>
+##### `prefix`<sup>Required</sup> <a name="prefix" id="@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.prefix"></a>
-- *Deprecated:* This class is deprecated. Use {@link VpcV2 } and {@link EcsCluster } classes instead.
+```typescript
+public readonly prefix: string;
+```
+- *Type:* string
+The prefix for the API Gateway endpoint.
+---
+##### `securityGroupId`<sup>Required</sup> <a name="securityGroupId" id="@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.securityGroupId"></a>
 ```typescript
-public readonly fqdn: string;
+public readonly securityGroupId: string;
 ```
 - *Type:* string
+The security group ID of the API Gateway which should be allowed to connect to the service.
 ---
-##### ~~`cluster`~~<sup>Required</sup> <a name="cluster" id="@btc-embedded/cdk-extensions.Vpc.property.cluster"></a>
+### ApiGatewayProps <a name="ApiGatewayProps" id="@btc-embedded/cdk-extensions.ApiGatewayProps"></a>
-- *Deprecated:* This class is deprecated. Use {@link VpcV2 } and {@link EcsCluster } classes instead.
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiGatewayProps.Initializer"></a>
 ```typescript
-public readonly cluster: Cluster;
+import { ApiGatewayProps } from '@btc-embedded/cdk-extensions'
+const apiGatewayProps: ApiGatewayProps = { ... }
 ```
-- *Type:* aws-cdk-lib.aws_ecs.Cluster
+#### Properties <a name="Properties" id="Properties"></a>
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.domainPrefix">domainPrefix</a></code> | <code>string</code> | Domain prefix for the API Gateway endpoint. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.hostedZone">hostedZone</a></code> | <code>aws-cdk-lib.aws_route53.IHostedZone</code> | Hosted Zone to create the gateway domain A record. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.stackName">stackName</a></code> | <code>string</code> | The name of the stack, used for prefixing the output parameter names. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.userPool">userPool</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPool</code> | Specify the Cognito User Pool to be used for authorizing requests on the API Gateway. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.userPoolClients">userPoolClients</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPoolClient[]</code> | List of User Pool Clients that are allowed to access the API Gateway. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | VPC where the API GW Security group and VPC Link will be created. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.logGroup">logGroup</a></code> | <code>aws-cdk-lib.aws_logs.ILogGroup</code> | If provided then enable the access logs for the API Gateway. |
 ---
-##### ~~`vpcInstance`~~<sup>Required</sup> <a name="vpcInstance" id="@btc-embedded/cdk-extensions.Vpc.property.vpcInstance"></a>
+##### `domainPrefix`<sup>Required</sup> <a name="domainPrefix" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.domainPrefix"></a>
-- *Deprecated:* This class is deprecated. Use {@link VpcV2 } and {@link EcsCluster } classes instead.
+```typescript
+public readonly domainPrefix: string;
+```
+- *Type:* string
+Domain prefix for the API Gateway endpoint.
+---
+##### `hostedZone`<sup>Required</sup> <a name="hostedZone" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.hostedZone"></a>
 ```typescript
-public readonly vpcInstance: IVpc;
+public readonly hostedZone: IHostedZone;
 ```
-- *Type:* aws-cdk-lib.aws_ec2.IVpc
+- *Type:* aws-cdk-lib.aws_route53.IHostedZone
+Hosted Zone to create the gateway domain A record.
 ---
+##### `stackName`<sup>Required</sup> <a name="stackName" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.stackName"></a>
-### VpcV2 <a name="VpcV2" id="@btc-embedded/cdk-extensions.VpcV2"></a>
+```typescript
+public readonly stackName: string;
+```
-- *Implements:* <a href="#@btc-embedded/cdk-extensions.IVpcV2">IVpcV2</a>
+- *Type:* string
-A construct that creates or imports an existing VPC.
+The name of the stack, used for prefixing the output parameter names.
-Supports importing by VPC ID, VPC name, or creating a new VPC with a specified CIDR block.
+---
-#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.VpcV2.Initializer"></a>
+##### `userPool`<sup>Required</sup> <a name="userPool" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.userPool"></a>
 ```typescript
-import { VpcV2 } from '@btc-embedded/cdk-extensions'
+public readonly userPool: IUserPool;
+```
-new VpcV2(scope: Construct, id: string, props: VpcV2Props)
+- *Type:* aws-cdk-lib.aws_cognito.IUserPool
+Specify the Cognito User Pool to be used for authorizing requests on the API Gateway.
+---
+##### `userPoolClients`<sup>Required</sup> <a name="userPoolClients" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.userPoolClients"></a>
+```typescript
+public readonly userPoolClients: IUserPoolClient[];
 ```
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.scope">scope</a></code> | <code>constructs.Construct</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.id">id</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.VpcV2Props">VpcV2Props</a></code> | *No description.* |
+- *Type:* aws-cdk-lib.aws_cognito.IUserPoolClient[]
+List of User Pool Clients that are allowed to access the API Gateway.
 ---
-##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.scope"></a>
+##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.vpc"></a>
-- *Type:* constructs.Construct
+```typescript
+public readonly vpc: IVpc;
+```
+- *Type:* aws-cdk-lib.aws_ec2.IVpc
+VPC where the API GW Security group and VPC Link will be created.
 ---
-##### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.id"></a>
+##### `logGroup`<sup>Optional</sup> <a name="logGroup" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.logGroup"></a>
-- *Type:* string
+```typescript
+public readonly logGroup: ILogGroup;
+```
+- *Type:* aws-cdk-lib.aws_logs.ILogGroup
+If provided then enable the access logs for the API Gateway.
 ---
-##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.VpcV2.Initializer.parameter.props"></a>
+### ApiGatewayVpcLinkLookupOptions <a name="ApiGatewayVpcLinkLookupOptions" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions"></a>
-- *Type:* <a href="#@btc-embedded/cdk-extensions.VpcV2Props">VpcV2Props</a>
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions.Initializer"></a>
+```typescript
+import { ApiGatewayVpcLinkLookupOptions } from '@btc-embedded/cdk-extensions'
+const apiGatewayVpcLinkLookupOptions: ApiGatewayVpcLinkLookupOptions = { ... }
+```
+#### Properties <a name="Properties" id="Properties"></a>
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions.property.basePlatform">basePlatform</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | *No description.* |
 ---
-#### Methods <a name="Methods" id="Methods"></a>
+##### `basePlatform`<sup>Required</sup> <a name="basePlatform" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions.property.basePlatform"></a>
-| **Name** | **Description** |
-| --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.toString">toString</a></code> | Returns a string representation of this construct. |
+```typescript
+public readonly basePlatform: string;
+```
+- *Type:* string
 ---
-##### `toString` <a name="toString" id="@btc-embedded/cdk-extensions.VpcV2.toString"></a>
+##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions.property.vpc"></a>
 ```typescript
-public toString(): string
+public readonly vpc: IVpc;
 ```
-Returns a string representation of this construct.
-#### Static Functions <a name="Static Functions" id="Static Functions"></a>
-| **Name** | **Description** |
-| --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.isConstruct">isConstruct</a></code> | Checks if `x` is a construct. |
-| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.fromBasePlatform">fromBasePlatform</a></code> | *No description.* |
+- *Type:* aws-cdk-lib.aws_ec2.IVpc
 ---
-##### `isConstruct` <a name="isConstruct" id="@btc-embedded/cdk-extensions.VpcV2.isConstruct"></a>
+### ApiGatewayVpcLinkProps <a name="ApiGatewayVpcLinkProps" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps"></a>
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps.Initializer"></a>
 ```typescript
-import { VpcV2 } from '@btc-embedded/cdk-extensions'
+import { ApiGatewayVpcLinkProps } from '@btc-embedded/cdk-extensions'
-VpcV2.isConstruct(x: any)
+const apiGatewayVpcLinkProps: ApiGatewayVpcLinkProps = { ... }
 ```
-Checks if `x` is a construct.
+#### Properties <a name="Properties" id="Properties"></a>
-Use this method instead of `instanceof` to properly detect `Construct`
-instances, even when the construct library is symlinked.
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | VPC where the API GW Security group and VPC Link will be created. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps.property.vpcLinkName">vpcLinkName</a></code> | <code>string</code> | Optional name for the VPC Link. |
-Explanation: in JavaScript, multiple copies of the `constructs` library on
-disk are seen as independent, completely different libraries. As a
-consequence, the class `Construct` in each copy of the `constructs` library
-is seen as a different class, and an instance of one class will not test as
-`instanceof` the other class. `npm install` will not create installations
-like this, but users may manually symlink construct libraries together or
-use a monorepo tool: in those cases, multiple copies of the `constructs`
-library can be accidentally installed, and `instanceof` will behave
-unpredictably. It is safest to avoid using `instanceof`, and using
-this type-testing method instead.
+---
-###### `x`<sup>Required</sup> <a name="x" id="@btc-embedded/cdk-extensions.VpcV2.isConstruct.parameter.x"></a>
+##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps.property.vpc"></a>
-- *Type:* any
+```typescript
+public readonly vpc: IVpc;
+```
-Any object.
+- *Type:* aws-cdk-lib.aws_ec2.IVpc
+VPC where the API GW Security group and VPC Link will be created.
 ---
-##### `fromBasePlatform` <a name="fromBasePlatform" id="@btc-embedded/cdk-extensions.VpcV2.fromBasePlatform"></a>
+##### `vpcLinkName`<sup>Optional</sup> <a name="vpcLinkName" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps.property.vpcLinkName"></a>
 ```typescript
-import { VpcV2 } from '@btc-embedded/cdk-extensions'
-VpcV2.fromBasePlatform(scope: Construct, id: string, stackName: string)
+public readonly vpcLinkName: string;
 ```
-###### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.VpcV2.fromBasePlatform.parameter.scope"></a>
+- *Type:* string
-- *Type:* constructs.Construct
+Optional name for the VPC Link.
 ---
-###### `id`<sup>Required</sup> <a name="id" id="@btc-embedded/cdk-extensions.VpcV2.fromBasePlatform.parameter.id"></a>
-- *Type:* string
+### ApiKeyAttribute <a name="ApiKeyAttribute" id="@btc-embedded/cdk-extensions.ApiKeyAttribute"></a>
----
+Representation of an attribute of an API key.
-###### `stackName`<sup>Required</sup> <a name="stackName" id="@btc-embedded/cdk-extensions.VpcV2.fromBasePlatform.parameter.stackName"></a>
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiKeyAttribute.Initializer"></a>
-- *Type:* string
+```typescript
+import { ApiKeyAttribute } from '@btc-embedded/cdk-extensions'
----
+const apiKeyAttribute: ApiKeyAttribute = { ... }
+```
 #### Properties <a name="Properties" id="Properties"></a>
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.property.node">node</a></code> | <code>constructs.Node</code> | The tree node. |
-| <code><a href="#@btc-embedded/cdk-extensions.VpcV2.property.vpcInstance">vpcInstance</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyAttribute.property.apiName">apiName</a></code> | <code>string</code> | The internal name of the attribute for the API, i.e. the name used for the DynamoDB table that holds the attribute values. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyAttribute.property.cognitoName">cognitoName</a></code> | <code>string</code> | The internal name of the attribute for Cognito. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyAttribute.property.name">name</a></code> | <code>string</code> | The name of the attribute. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyAttribute.property.defaultValue">defaultValue</a></code> | <code>string</code> | The default value for the attribute, if no value is provided. |
 ---
-##### `node`<sup>Required</sup> <a name="node" id="@btc-embedded/cdk-extensions.VpcV2.property.node"></a>
+##### `apiName`<sup>Required</sup> <a name="apiName" id="@btc-embedded/cdk-extensions.ApiKeyAttribute.property.apiName"></a>
 ```typescript
-public readonly node: Node;
+public readonly apiName: string;
 ```
-- *Type:* constructs.Node
+- *Type:* string
-The tree node.
+The internal name of the attribute for the API, i.e. the name used for the DynamoDB table that holds the attribute values.
 ---
-##### `vpcInstance`<sup>Required</sup> <a name="vpcInstance" id="@btc-embedded/cdk-extensions.VpcV2.property.vpcInstance"></a>
+##### `cognitoName`<sup>Required</sup> <a name="cognitoName" id="@btc-embedded/cdk-extensions.ApiKeyAttribute.property.cognitoName"></a>
 ```typescript
-public readonly vpcInstance: IVpc;
+public readonly cognitoName: string;
 ```
-- *Type:* aws-cdk-lib.aws_ec2.IVpc
+- *Type:* string
+The internal name of the attribute for Cognito.
+If a custom attribute is used, it
+already has to exist in the user pool.
 ---
+##### `name`<sup>Required</sup> <a name="name" id="@btc-embedded/cdk-extensions.ApiKeyAttribute.property.name"></a>
-## Structs <a name="Structs" id="Structs"></a>
+```typescript
+public readonly name: string;
+```
-### AnythingButFilterRule <a name="AnythingButFilterRule" id="@btc-embedded/cdk-extensions.AnythingButFilterRule"></a>
+- *Type:* string
-Rule that allows all values except the given ones.
+The name of the attribute.
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.AnythingButFilterRule.Initializer"></a>
+---
-```typescript
-import { AnythingButFilterRule } from '@btc-embedded/cdk-extensions'
+##### `defaultValue`<sup>Optional</sup> <a name="defaultValue" id="@btc-embedded/cdk-extensions.ApiKeyAttribute.property.defaultValue"></a>
-const anythingButFilterRule: AnythingButFilterRule = { ... }
+```typescript
+public readonly defaultValue: string;
 ```
+- *Type:* string
-### ApiGatewayExtensionProps <a name="ApiGatewayExtensionProps" id="@btc-embedded/cdk-extensions.ApiGatewayExtensionProps"></a>
+The default value for the attribute, if no value is provided.
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.Initializer"></a>
+---
+### ApiKeyClientAuthorizationProps <a name="ApiKeyClientAuthorizationProps" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps"></a>
+Properties to instantiate the {@link ApiKeyClientAuthorization} component.
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.Initializer"></a>
 ```typescript
-import { ApiGatewayExtensionProps } from '@btc-embedded/cdk-extensions'
+import { ApiKeyClientAuthorizationProps } from '@btc-embedded/cdk-extensions'
-const apiGatewayExtensionProps: ApiGatewayExtensionProps = { ... }
+const apiKeyClientAuthorizationProps: ApiKeyClientAuthorizationProps = { ... }
 ```
 #### Properties <a name="Properties" id="Properties"></a>
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.platformStackName">platformStackName</a></code> | <code>string</code> | The name of the base platform stack. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.prefix">prefix</a></code> | <code>string</code> | The prefix for the API Gateway endpoint. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.securityGroupId">securityGroupId</a></code> | <code>string</code> | The security group ID of the API Gateway which should be allowed to connect to the service. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.authorizationHttpApi">authorizationHttpApi</a></code> | <code>aws-cdk-lib.aws_apigatewayv2.IHttpApi</code> | An existing HttpApi to attach the endpoint to. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.oidcIssuerUrl">oidcIssuerUrl</a></code> | <code>string</code> | The issuer URL for the user pool. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.scope">scope</a></code> | <code>string</code> | The scope to be used for retrieving the token. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.userPoolClientId">userPoolClientId</a></code> | <code>string</code> | The ID of the API client. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.userPoolClientSecret">userPoolClientSecret</a></code> | <code>aws-cdk-lib.aws_secretsmanager.ISecret</code> | The secret containing the user pool client secret. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.authorizationHttpApiUrl">authorizationHttpApiUrl</a></code> | <code>string</code> | An optional base URL for the {@link IHttpApi} in case it cannot be retrieved. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.authorizationPath">authorizationPath</a></code> | <code>string</code> | Path (without preceding and trailing slash) to be used to retrieve the token. |
 ---
-##### `platformStackName`<sup>Required</sup> <a name="platformStackName" id="@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.platformStackName"></a>
+##### `authorizationHttpApi`<sup>Required</sup> <a name="authorizationHttpApi" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.authorizationHttpApi"></a>
 ```typescript
-public readonly platformStackName: string;
+public readonly authorizationHttpApi: IHttpApi;
 ```
-- *Type:* string
+- *Type:* aws-cdk-lib.aws_apigatewayv2.IHttpApi
-The name of the base platform stack.
+An existing HttpApi to attach the endpoint to.
+The default authorizer will we ignored
+and no authorization will be required for the endpoint.
 ---
-##### `prefix`<sup>Required</sup> <a name="prefix" id="@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.prefix"></a>
+##### `oidcIssuerUrl`<sup>Required</sup> <a name="oidcIssuerUrl" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.oidcIssuerUrl"></a>
 ```typescript
-public readonly prefix: string;
+public readonly oidcIssuerUrl: string;
 ```
 - *Type:* string
-The prefix for the API Gateway endpoint.
+The issuer URL for the user pool.
+Used to extract the OAuth URL.
 ---
-##### `securityGroupId`<sup>Required</sup> <a name="securityGroupId" id="@btc-embedded/cdk-extensions.ApiGatewayExtensionProps.property.securityGroupId"></a>
+##### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.scope"></a>
 ```typescript
-public readonly securityGroupId: string;
+public readonly scope: string;
 ```
 - *Type:* string
-The security group ID of the API Gateway which should be allowed to connect to the service.
+The scope to be used for retrieving the token.
 ---
-### ApiGatewayProps <a name="ApiGatewayProps" id="@btc-embedded/cdk-extensions.ApiGatewayProps"></a>
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiGatewayProps.Initializer"></a>
+##### `userPoolClientId`<sup>Required</sup> <a name="userPoolClientId" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.userPoolClientId"></a>
 ```typescript
-import { ApiGatewayProps } from '@btc-embedded/cdk-extensions'
-const apiGatewayProps: ApiGatewayProps = { ... }
+public readonly userPoolClientId: string;
 ```
-#### Properties <a name="Properties" id="Properties"></a>
+- *Type:* string
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.domainPrefix">domainPrefix</a></code> | <code>string</code> | Domain prefix for the API Gateway endpoint. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.hostedZone">hostedZone</a></code> | <code>aws-cdk-lib.aws_route53.IHostedZone</code> | Hosted Zone to create the gateway domain A record. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.stackName">stackName</a></code> | <code>string</code> | The name of the stack, used for prefixing the output parameter names. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.userPool">userPool</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPool</code> | Specify the Cognito User Pool to be used for authorizing requests on the API Gateway. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.userPoolClients">userPoolClients</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPoolClient[]</code> | List of User Pool Clients that are allowed to access the API Gateway. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | VPC where the API GW Security group and VPC Link will be created. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayProps.property.logGroup">logGroup</a></code> | <code>aws-cdk-lib.aws_logs.ILogGroup</code> | If provided then enable the access logs for the API Gateway. |
+The ID of the API client.
+Credentials required for authorization will be fetched for
+this client.
 ---
-##### `domainPrefix`<sup>Required</sup> <a name="domainPrefix" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.domainPrefix"></a>
+##### `userPoolClientSecret`<sup>Required</sup> <a name="userPoolClientSecret" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.userPoolClientSecret"></a>
 ```typescript
-public readonly domainPrefix: string;
+public readonly userPoolClientSecret: ISecret;
 ```
-- *Type:* string
+- *Type:* aws-cdk-lib.aws_secretsmanager.ISecret
-Domain prefix for the API Gateway endpoint.
+The secret containing the user pool client secret.
 ---
-##### `hostedZone`<sup>Required</sup> <a name="hostedZone" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.hostedZone"></a>
+##### `authorizationHttpApiUrl`<sup>Optional</sup> <a name="authorizationHttpApiUrl" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.authorizationHttpApiUrl"></a>
 ```typescript
-public readonly hostedZone: IHostedZone;
+public readonly authorizationHttpApiUrl: string;
 ```
-- *Type:* aws-cdk-lib.aws_route53.IHostedZone
+- *Type:* string
-Hosted Zone to create the gateway domain A record.
+An optional base URL for the {@link IHttpApi} in case it cannot be retrieved.
 ---
-##### `stackName`<sup>Required</sup> <a name="stackName" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.stackName"></a>
+##### `authorizationPath`<sup>Optional</sup> <a name="authorizationPath" id="@btc-embedded/cdk-extensions.ApiKeyClientAuthorizationProps.property.authorizationPath"></a>
 ```typescript
-public readonly stackName: string;
+public readonly authorizationPath: string;
 ```
 - *Type:* string
-The name of the stack, used for prefixing the output parameter names.
----
-##### `userPool`<sup>Required</sup> <a name="userPool" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.userPool"></a>
+Path (without preceding and trailing slash) to be used to retrieve the token.
-```typescript
-public readonly userPool: IUserPool;
-```
+Will default to `token` if not set.
-- *Type:* aws-cdk-lib.aws_cognito.IUserPool
+---
-Specify the Cognito User Pool to be used for authorizing requests on the API Gateway.
+### ApiKeyManagementProps <a name="ApiKeyManagementProps" id="@btc-embedded/cdk-extensions.ApiKeyManagementProps"></a>
----
+Properties to instantiate the {@link ApiKeyManagement} component.
-##### `userPoolClients`<sup>Required</sup> <a name="userPoolClients" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.userPoolClients"></a>
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiKeyManagementProps.Initializer"></a>
 ```typescript
-public readonly userPoolClients: IUserPoolClient[];
+import { ApiKeyManagementProps } from '@btc-embedded/cdk-extensions'
+const apiKeyManagementProps: ApiKeyManagementProps = { ... }
 ```
-- *Type:* aws-cdk-lib.aws_cognito.IUserPoolClient[]
+#### Properties <a name="Properties" id="Properties"></a>
-List of User Pool Clients that are allowed to access the API Gateway.
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagementProps.property.apiKeys">apiKeys</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStore">ApiKeyStore</a></code> | The {@link ApiKeyStore} component. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyManagementProps.property.userPool">userPool</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPool</code> | The user pool to be used. |
 ---
-##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.vpc"></a>
+##### `apiKeys`<sup>Required</sup> <a name="apiKeys" id="@btc-embedded/cdk-extensions.ApiKeyManagementProps.property.apiKeys"></a>
 ```typescript
-public readonly vpc: IVpc;
+public readonly apiKeys: ApiKeyStore;
 ```
-- *Type:* aws-cdk-lib.aws_ec2.IVpc
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApiKeyStore">ApiKeyStore</a>
-VPC where the API GW Security group and VPC Link will be created.
+The {@link ApiKeyStore} component.
 ---
-##### `logGroup`<sup>Optional</sup> <a name="logGroup" id="@btc-embedded/cdk-extensions.ApiGatewayProps.property.logGroup"></a>
+##### `userPool`<sup>Required</sup> <a name="userPool" id="@btc-embedded/cdk-extensions.ApiKeyManagementProps.property.userPool"></a>
 ```typescript
-public readonly logGroup: ILogGroup;
+public readonly userPool: IUserPool;
 ```
-- *Type:* aws-cdk-lib.aws_logs.ILogGroup
+- *Type:* aws-cdk-lib.aws_cognito.IUserPool
-If provided then enable the access logs for the API Gateway.
+The user pool to be used.
 ---
-### ApiGatewayVpcLinkLookupOptions <a name="ApiGatewayVpcLinkLookupOptions" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions"></a>
+### ApiKeyPreTokenHandlerProps <a name="ApiKeyPreTokenHandlerProps" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandlerProps"></a>
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions.Initializer"></a>
+Properties to instantiate the {@link ApiKeyPreTokenHandler} component.
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandlerProps.Initializer"></a>
 ```typescript
-import { ApiGatewayVpcLinkLookupOptions } from '@btc-embedded/cdk-extensions'
+import { ApiKeyPreTokenHandlerProps } from '@btc-embedded/cdk-extensions'
-const apiGatewayVpcLinkLookupOptions: ApiGatewayVpcLinkLookupOptions = { ... }
+const apiKeyPreTokenHandlerProps: ApiKeyPreTokenHandlerProps = { ... }
 ```
 #### Properties <a name="Properties" id="Properties"></a>
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions.property.basePlatform">basePlatform</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyPreTokenHandlerProps.property.apiKeys">apiKeys</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStore">ApiKeyStore</a></code> | The {@link ApiKeyStore} component. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyPreTokenHandlerProps.property.userPool">userPool</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPool</code> | The user pool to be used. |
 ---
-##### `basePlatform`<sup>Required</sup> <a name="basePlatform" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions.property.basePlatform"></a>
+##### `apiKeys`<sup>Required</sup> <a name="apiKeys" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandlerProps.property.apiKeys"></a>
 ```typescript
-public readonly basePlatform: string;
+public readonly apiKeys: ApiKeyStore;
 ```
-- *Type:* string
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApiKeyStore">ApiKeyStore</a>
+The {@link ApiKeyStore} component.
 ---
-##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkLookupOptions.property.vpc"></a>
+##### `userPool`<sup>Required</sup> <a name="userPool" id="@btc-embedded/cdk-extensions.ApiKeyPreTokenHandlerProps.property.userPool"></a>
 ```typescript
-public readonly vpc: IVpc;
+public readonly userPool: IUserPool;
 ```
-- *Type:* aws-cdk-lib.aws_ec2.IVpc
+- *Type:* aws-cdk-lib.aws_cognito.IUserPool
+The user pool to be used.
 ---
-### ApiGatewayVpcLinkProps <a name="ApiGatewayVpcLinkProps" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps"></a>
+### ApiKeyStoreProps <a name="ApiKeyStoreProps" id="@btc-embedded/cdk-extensions.ApiKeyStoreProps"></a>
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps.Initializer"></a>
+Properties to instantiate the {@link ApiKeyStore} component.
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApiKeyStoreProps.Initializer"></a>
 ```typescript
-import { ApiGatewayVpcLinkProps } from '@btc-embedded/cdk-extensions'
+import { ApiKeyStoreProps } from '@btc-embedded/cdk-extensions'
-const apiGatewayVpcLinkProps: ApiGatewayVpcLinkProps = { ... }
+const apiKeyStoreProps: ApiKeyStoreProps = { ... }
 ```
 #### Properties <a name="Properties" id="Properties"></a>
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | VPC where the API GW Security group and VPC Link will be created. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps.property.vpcLinkName">vpcLinkName</a></code> | <code>string</code> | Optional name for the VPC Link. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStoreProps.property.attributes">attributes</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApiKeyAttribute">ApiKeyAttribute</a>[]</code> | The attributes that are managed by the component. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApiKeyStoreProps.property.tableOptions">tableOptions</a></code> | <code>aws-cdk-lib.aws_dynamodb.TableOptions</code> | Additional table options to overwrite the defaults for the created table. |
 ---
-##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps.property.vpc"></a>
+##### `attributes`<sup>Required</sup> <a name="attributes" id="@btc-embedded/cdk-extensions.ApiKeyStoreProps.property.attributes"></a>
 ```typescript
-public readonly vpc: IVpc;
+public readonly attributes: ApiKeyAttribute[];
 ```
-- *Type:* aws-cdk-lib.aws_ec2.IVpc
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApiKeyAttribute">ApiKeyAttribute</a>[]
-VPC where the API GW Security group and VPC Link will be created.
+The attributes that are managed by the component.
 ---
-##### `vpcLinkName`<sup>Optional</sup> <a name="vpcLinkName" id="@btc-embedded/cdk-extensions.ApiGatewayVpcLinkProps.property.vpcLinkName"></a>
+##### `tableOptions`<sup>Optional</sup> <a name="tableOptions" id="@btc-embedded/cdk-extensions.ApiKeyStoreProps.property.tableOptions"></a>
 ```typescript
-public readonly vpcLinkName: string;
+public readonly tableOptions: TableOptions;
 ```
-- *Type:* string
+- *Type:* aws-cdk-lib.aws_dynamodb.TableOptions
-Optional name for the VPC Link.
+Additional table options to overwrite the defaults for the created table.
 ---
@@ -6301,6 +7437,7 @@ const containerDefinitionExtensionProps: ContainerDefinitionExtensionProps = { .
 | <code><a href="#@btc-embedded/cdk-extensions.ContainerDefinitionExtensionProps.property.systemControls">systemControls</a></code> | <code>aws-cdk-lib.aws_ecs.SystemControl[]</code> | A list of namespaced kernel parameters to set in the container. |
 | <code><a href="#@btc-embedded/cdk-extensions.ContainerDefinitionExtensionProps.property.ulimits">ulimits</a></code> | <code>aws-cdk-lib.aws_ecs.Ulimit[]</code> | An array of ulimits to set in the container. |
 | <code><a href="#@btc-embedded/cdk-extensions.ContainerDefinitionExtensionProps.property.user">user</a></code> | <code>string</code> | The user to use inside the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ContainerDefinitionExtensionProps.property.versionConsistency">versionConsistency</a></code> | <code>aws-cdk-lib.aws_ecs.VersionConsistency</code> | Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. |
 | <code><a href="#@btc-embedded/cdk-extensions.ContainerDefinitionExtensionProps.property.workingDirectory">workingDirectory</a></code> | <code>string</code> | The working directory in which to run commands inside the container. |
 ---
@@ -6854,6 +7991,25 @@ This parameter maps to User in the Create a container section of the Docker Remo
 ---
+##### `versionConsistency`<sup>Optional</sup> <a name="versionConsistency" id="@btc-embedded/cdk-extensions.ContainerDefinitionExtensionProps.property.versionConsistency"></a>
+```typescript
+public readonly versionConsistency: VersionConsistency;
+```
+- *Type:* aws-cdk-lib.aws_ecs.VersionConsistency
+- *Default:* VersionConsistency.DISABLED if `image` is a CDK asset, VersionConsistency.ENABLED otherwise
+Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest.
+If you set the value for a container as disabled, Amazon ECS will
+not resolve the provided container image tag to a digest and will use the
+original image URI specified in the container definition for deployment.
+> [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-versionconsistency](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-versionconsistency)
+---
 ##### `workingDirectory`<sup>Optional</sup> <a name="workingDirectory" id="@btc-embedded/cdk-extensions.ContainerDefinitionExtensionProps.property.workingDirectory"></a>
 ```typescript
@@ -6969,6 +8125,7 @@ const containerProps: ContainerProps = { ... }
 | <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.systemControls">systemControls</a></code> | <code>aws-cdk-lib.aws_ecs.SystemControl[]</code> | A list of namespaced kernel parameters to set in the container. |
 | <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.ulimits">ulimits</a></code> | <code>aws-cdk-lib.aws_ecs.Ulimit[]</code> | An array of ulimits to set in the container. |
 | <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.user">user</a></code> | <code>string</code> | The user to use inside the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.versionConsistency">versionConsistency</a></code> | <code>aws-cdk-lib.aws_ecs.VersionConsistency</code> | Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. |
 | <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.workingDirectory">workingDirectory</a></code> | <code>string</code> | The working directory in which to run commands inside the container. |
 | <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.containerDependencies">containerDependencies</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ContainerDependency">ContainerDependency</a>[]</code> | Specify additional container dependencies which should be added after the container has been created in the task definition. |
 | <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.logGroup">logGroup</a></code> | <code>aws-cdk-lib.aws_logs.ILogGroup</code> | The log group into which application container logs should be routed. |
@@ -7524,6 +8681,25 @@ This parameter maps to User in the Create a container section of the Docker Remo
 ---
+##### `versionConsistency`<sup>Optional</sup> <a name="versionConsistency" id="@btc-embedded/cdk-extensions.ContainerProps.property.versionConsistency"></a>
+```typescript
+public readonly versionConsistency: VersionConsistency;
+```
+- *Type:* aws-cdk-lib.aws_ecs.VersionConsistency
+- *Default:* VersionConsistency.DISABLED if `image` is a CDK asset, VersionConsistency.ENABLED otherwise
+Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest.
+If you set the value for a container as disabled, Amazon ECS will
+not resolve the provided container image tag to a digest and will use the
+original image URI specified in the container definition for deployment.
+> [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-versionconsistency](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-versionconsistency)
+---
 ##### `workingDirectory`<sup>Optional</sup> <a name="workingDirectory" id="@btc-embedded/cdk-extensions.ContainerProps.property.workingDirectory"></a>
 ```typescript
@@ -7704,6 +8880,8 @@ const deploymentConfigExtensionProps: DeploymentConfigExtensionProps = { ... }
 | --- | --- | --- |
 | <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.capacityProviderBase">capacityProviderBase</a></code> | <code>number</code> | The base value for the FARGATE_SPOT capacity provider. |
 | <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.capacityProviderWeight">capacityProviderWeight</a></code> | <code>number</code> | The weight value for the FARGATE_SPOT capacity provider. |
+| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.circuitBreakerRollback">circuitBreakerRollback</a></code> | <code>boolean</code> | Whether the circuit breaker should automatically roll back failed deployments. |
+| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.enableCircuitBreaker">enableCircuitBreaker</a></code> | <code>boolean</code> | Whether to enable the ECS deployment circuit breaker. |
 | <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.maxHealthyPercent">maxHealthyPercent</a></code> | <code>number</code> | The maximum healthy percent for the service deployment. |
 | <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.minHealthyPercent">minHealthyPercent</a></code> | <code>number</code> | The minimum healthy percent for the service deployment. |
 | <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.useFargateSpotInstances">useFargateSpotInstances</a></code> | <code>boolean</code> | Whether to use the cluster's FARGATE_SPOT capacity provider strategy. |
@@ -7742,6 +8920,38 @@ Only used when useCapacityProvider is true.
 ---
+##### `circuitBreakerRollback`<sup>Optional</sup> <a name="circuitBreakerRollback" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.circuitBreakerRollback"></a>
+```typescript
+public readonly circuitBreakerRollback: boolean;
+```
+- *Type:* boolean
+- *Default:* true (if circuit breaker is enabled)
+Whether the circuit breaker should automatically roll back failed deployments.
+When enabled, ECS will automatically roll back to the previous task definition
+if the new deployment fails. Only applies when enableCircuitBreaker is true.
+---
+##### `enableCircuitBreaker`<sup>Optional</sup> <a name="enableCircuitBreaker" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.enableCircuitBreaker"></a>
+```typescript
+public readonly enableCircuitBreaker: boolean;
+```
+- *Type:* boolean
+- *Default:* true
+Whether to enable the ECS deployment circuit breaker.
+The circuit breaker monitors new deployments and automatically rolls back
+if tasks fail to start or become unhealthy.
+---
 ##### `maxHealthyPercent`<sup>Optional</sup> <a name="maxHealthyPercent" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.maxHealthyPercent"></a>
 ```typescript
@@ -11092,6 +12302,7 @@ Extension that configures ECS service deployment options and capacity provider s
 This extension allows you to:
 1. Configure deployment parameters for faster or safer deployments
 2. Enable the use of cluster's FARGATE_SPOT capacity provider strategy
+3. Enable ECS deployment circuit breaker with automatic rollback
 #### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.DeploymentConfigExtension.Initializer"></a>