terraconstructs 0.1.10 → 0.2.0

package/.jsii

@@ -2562,7 +2562,7 @@
     "terraconstructs.aws.cloudwatch": {
       "locationInModule": {
         "filename": "src/aws/index.ts",
-        "line": 24
+        "line": 25
       },
       "symbolId": "src/aws/cloudwatch/index:"
     },
@@ -2583,7 +2583,7 @@
     "terraconstructs.aws.compute": {
       "locationInModule": {
         "filename": "src/aws/index.ts",
-        "line": 19
+        "line": 20
       },
       "symbolId": "src/aws/compute/index:"
     },
@@ -2632,56 +2632,56 @@
     "terraconstructs.aws.edge": {
       "locationInModule": {
         "filename": "src/aws/index.ts",
-        "line": 23
+        "line": 24
       },
       "symbolId": "src/aws/edge/index:"
     },
     "terraconstructs.aws.encryption": {
       "locationInModule": {
         "filename": "src/aws/index.ts",
-        "line": 18
+        "line": 19
       },
       "symbolId": "src/aws/encryption/index:"
     },
     "terraconstructs.aws.iam": {
       "locationInModule": {
         "filename": "src/aws/index.ts",
-        "line": 17
+        "line": 18
       },
       "symbolId": "src/aws/iam/index:"
     },
     "terraconstructs.aws.network": {
       "locationInModule": {
         "filename": "src/aws/index.ts",
-        "line": 20
+        "line": 21
       },
       "symbolId": "src/aws/network/index:"
     },
     "terraconstructs.aws.notify": {
       "locationInModule": {
         "filename": "src/aws/index.ts",
-        "line": 22
+        "line": 23
       },
       "symbolId": "src/aws/notify/index:"
     },
     "terraconstructs.aws.notify.subscriptions": {
       "locationInModule": {
         "filename": "src/aws/notify/index.ts",
-        "line": 33
+        "line": 39
       },
       "symbolId": "src/aws/notify/subscriptions/index:"
     },
     "terraconstructs.aws.notify.targets": {
       "locationInModule": {
         "filename": "src/aws/notify/index.ts",
-        "line": 31
+        "line": 37
       },
       "symbolId": "src/aws/notify/targets/index:"
     },
     "terraconstructs.aws.storage": {
       "locationInModule": {
         "filename": "src/aws/index.ts",
-        "line": 21
+        "line": 22
       },
       "symbolId": "src/aws/storage/index:"
     },
@@ -15577,7 +15577,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/aws/arn.ts",
-        "line": 117
+        "line": 118
       },
       "methods": [
         {
@@ -15588,7 +15588,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 344
+            "line": 345
           },
           "name": "extractResourceName",
           "parameters": [
@@ -15620,7 +15620,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 135
+            "line": 136
           },
           "name": "format",
           "parameters": [
@@ -15655,7 +15655,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 222
+            "line": 223
           },
           "name": "parse",
           "parameters": [
@@ -15705,7 +15705,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 249
+            "line": 250
           },
           "name": "split",
           "parameters": [
@@ -15750,7 +15750,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/arn.ts",
-        "line": 52
+        "line": 53
       },
       "name": "ArnComponents",
       "namespace": "aws",
@@ -15764,7 +15764,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 90
+            "line": 91
           },
           "name": "resource",
           "type": {
@@ -15780,7 +15780,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 67
+            "line": 68
           },
           "name": "service",
           "type": {
@@ -15798,7 +15798,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 84
+            "line": 85
           },
           "name": "account",
           "optional": true,
@@ -15816,7 +15816,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 114
+            "line": 115
           },
           "name": "arnFormat",
           "optional": true,
@@ -15835,7 +15835,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 61
+            "line": 62
           },
           "name": "partition",
           "optional": true,
@@ -15854,7 +15854,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 75
+            "line": 76
           },
           "name": "region",
           "optional": true,
@@ -15871,7 +15871,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 106
+            "line": 107
           },
           "name": "resourceName",
           "optional": true,
@@ -15891,7 +15891,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/arn.ts",
-            "line": 100
+            "line": 101
           },
           "name": "sep",
           "optional": true,
@@ -15912,7 +15912,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "src/aws/arn.ts",
-        "line": 11
+        "line": 12
       },
       "members": [
         {
@@ -18084,6 +18084,95 @@
       ],
       "symbolId": "src/aws/aws-stack:IAwsStack"
     },
+    "terraconstructs.aws.IEnvironmentAware": {
+      "assembly": "terraconstructs",
+      "docs": {
+        "stability": "stable",
+        "summary": "Used to indicate that a particular construct has an resource environment."
+      },
+      "fqn": "terraconstructs.aws.IEnvironmentAware",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/aws/environment-aware.ts",
+        "line": 4
+      },
+      "name": "IEnvironmentAware",
+      "namespace": "aws",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "For resources that are created and managed in a Stack (those created by\ncreating new class instances like `new Role()`, `new Bucket()`, etc.), this\nis always the same as the environment of the stack they belong to.\n\nFor referenced resources (those obtained from referencing methods like\n`Role.fromRoleArn()`, `Bucket.fromBucketName()`, etc.), they might be\ndifferent than the stack they were imported into.",
+            "stability": "stable",
+            "summary": "The environment this resource belongs to."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/environment-aware.ts",
+            "line": 16
+          },
+          "name": "env",
+          "type": {
+            "fqn": "terraconstructs.aws.ResourceEnvironment"
+          }
+        }
+      ],
+      "symbolId": "src/aws/environment-aware:IEnvironmentAware"
+    },
+    "terraconstructs.aws.ResourceEnvironment": {
+      "assembly": "terraconstructs",
+      "datatype": true,
+      "docs": {
+        "remarks": "Used as the return value for the `IEnvironmentAware.env` property.",
+        "stability": "stable",
+        "summary": "Represents the environment a given resource lives in."
+      },
+      "fqn": "terraconstructs.aws.ResourceEnvironment",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/aws/environment-aware.ts",
+        "line": 24
+      },
+      "name": "ResourceEnvironment",
+      "namespace": "aws",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Since this can be a Token (for example, when the account is\nCloudFormation's `AWS::AccountId` intrinsic), make sure to use\n`Token.compareStrings()` instead of comparing the values with direct\nstring equality.",
+            "stability": "stable",
+            "summary": "The AWS Account ID that this resource belongs to."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/environment-aware.ts",
+            "line": 33
+          },
+          "name": "account",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Since this can be a Token (for example, when the region is CloudFormation's\n`AWS::Region` intrinsic), make sure to use `Token.compareStrings()` instead\nof comparing the values with direct string equality.",
+            "stability": "stable",
+            "summary": "The AWS Region that this resource belongs to."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/environment-aware.ts",
+            "line": 42
+          },
+          "name": "region",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/aws/environment-aware:ResourceEnvironment"
+    },
     "terraconstructs.aws.RetentionDays": {
       "assembly": "terraconstructs",
       "docs": {
@@ -59355,7 +59444,7 @@
         },
         "locationInModule": {
           "filename": "src/aws/compute/event-source-mapping.ts",
-          "line": 321
+          "line": 319
         },
         "parameters": [
           {
@@ -59384,7 +59473,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/aws/compute/event-source-mapping.ts",
-        "line": 272
+        "line": 270
       },
       "methods": [
         {
@@ -59394,7 +59483,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 279
+            "line": 277
           },
           "name": "fromEventSourceMappingId",
           "parameters": [
@@ -59436,7 +59525,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 315
+            "line": 313
           },
           "name": "eventSourceMappingArn",
           "overrides": "terraconstructs.aws.compute.IEventSourceMapping",
@@ -59452,7 +59541,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 314
+            "line": 312
           },
           "name": "eventSourceMappingId",
           "overrides": "terraconstructs.aws.compute.IEventSourceMapping",
@@ -59468,7 +59557,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 316
+            "line": 314
           },
           "name": "eventSourceMappingOutputs",
           "overrides": "terraconstructs.aws.compute.IEventSourceMapping",
@@ -59484,7 +59573,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 317
+            "line": 315
           },
           "name": "outputs",
           "overrides": "terraconstructs.TerraConstructBase",
@@ -59513,7 +59602,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/compute/event-source-mapping.ts",
-        "line": 19
+        "line": 18
       },
       "name": "EventSourceMappingOptions",
       "namespace": "aws.compute",
@@ -59529,7 +59618,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 38
+            "line": 37
           },
           "name": "batchSize",
           "optional": true,
@@ -59547,7 +59636,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 45
+            "line": 44
           },
           "name": "bisectBatchOnError",
           "optional": true,
@@ -59565,7 +59654,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 59
+            "line": 58
           },
           "name": "enabled",
           "optional": true,
@@ -59584,7 +59673,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 26
+            "line": 25
           },
           "name": "eventSourceArn",
           "optional": true,
@@ -59592,6 +59681,25 @@
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- none",
+            "see": "https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk",
+            "stability": "stable",
+            "summary": "Add Customer managed KMS key to encrypt Filter Criteria."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/compute/event-source-mapping.ts",
+            "line": 200
+          },
+          "name": "filterEncryption",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.aws.encryption.IKey"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -59604,7 +59712,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 191
+            "line": 190
           },
           "name": "filters",
           "optional": true,
@@ -59633,7 +59741,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 164
+            "line": 163
           },
           "name": "kafkaBootstrapServers",
           "optional": true,
@@ -59658,7 +59766,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 173
+            "line": 172
           },
           "name": "kafkaConsumerGroupId",
           "optional": true,
@@ -59676,7 +59784,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 144
+            "line": 143
           },
           "name": "kafkaTopic",
           "optional": true,
@@ -59695,7 +59803,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 93
+            "line": 92
           },
           "name": "maxBatchingWindow",
           "optional": true,
@@ -59714,7 +59822,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 104
+            "line": 103
           },
           "name": "maxConcurrency",
           "optional": true,
@@ -59733,7 +59841,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 114
+            "line": 113
           },
           "name": "maxRecordAge",
           "optional": true,
@@ -59751,7 +59859,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 52
+            "line": 51
           },
           "name": "onFailure",
           "optional": true,
@@ -59770,7 +59878,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 137
+            "line": 136
           },
           "name": "parallelizationFactor",
           "optional": true,
@@ -59789,7 +59897,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 85
+            "line": 84
           },
           "name": "reportBatchItemFailures",
           "optional": true,
@@ -59808,7 +59916,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 127
+            "line": 126
           },
           "name": "retryAttempts",
           "optional": true,
@@ -59827,7 +59935,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 181
+            "line": 180
           },
           "name": "sourceAccessConfigurations",
           "optional": true,
@@ -59851,7 +59959,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 69
+            "line": 68
           },
           "name": "startingPosition",
           "optional": true,
@@ -59869,7 +59977,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 76
+            "line": 75
           },
           "name": "startingPositionTimestamp",
           "optional": true,
@@ -59888,7 +59996,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 209
+            "line": 207
           },
           "name": "supportS3OnFailureDestination",
           "optional": true,
@@ -59907,7 +60015,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 155
+            "line": 154
           },
           "name": "tumblingWindow",
           "optional": true,
@@ -59929,7 +60037,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/compute/event-source-mapping.ts",
-        "line": 225
+        "line": 223
       },
       "name": "EventSourceMappingOutputs",
       "namespace": "aws.compute",
@@ -59943,7 +60051,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 229
+            "line": 227
           },
           "name": "uuid",
           "type": {
@@ -59967,7 +60075,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/compute/event-source-mapping.ts",
-        "line": 215
+        "line": 213
       },
       "name": "EventSourceMappingProps",
       "namespace": "aws.compute",
@@ -59981,7 +60089,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 219
+            "line": 217
           },
           "name": "target",
           "type": {
@@ -67477,7 +67585,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/compute/event-source-mapping.ts",
-        "line": 236
+        "line": 234
       },
       "name": "IEventSourceMapping",
       "namespace": "aws.compute",
@@ -67491,7 +67599,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 251
+            "line": 249
           },
           "name": "eventSourceMappingArn",
           "type": {
@@ -67510,7 +67618,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 246
+            "line": 244
           },
           "name": "eventSourceMappingId",
           "type": {
@@ -67526,7 +67634,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 240
+            "line": 238
           },
           "name": "eventSourceMappingOutputs",
           "type": {
@@ -116727,7 +116835,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/compute/event-source-mapping.ts",
-        "line": 583
+        "line": 580
       },
       "name": "SourceAccessConfiguration",
       "namespace": "aws.compute",
@@ -116742,7 +116850,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 587
+            "line": 584
           },
           "name": "type",
           "type": {
@@ -116760,7 +116868,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-source-mapping.ts",
-            "line": 594
+            "line": 591
           },
           "name": "uri",
           "type": {
@@ -116781,7 +116889,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "src/aws/compute/event-source-mapping.ts",
-        "line": 542
+        "line": 539
       },
       "members": [
         {
@@ -118315,7 +118423,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "src/aws/compute/event-source-mapping.ts",
-        "line": 600
+        "line": 597
       },
       "members": [
         {
@@ -144324,7 +144432,7 @@
         },
         "locationInModule": {
           "filename": "src/aws/compute/event-sources/sqs.ts",
-          "line": 85
+          "line": 84
         },
         "parameters": [
           {
@@ -144348,7 +144456,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/aws/compute/event-sources/sqs.ts",
-        "line": 81
+        "line": 80
       },
       "methods": [
         {
@@ -144358,7 +144466,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/compute/event-sources/sqs.ts",
-            "line": 125
+            "line": 124
           },
           "name": "bind",
           "overrides": "terraconstructs.aws.compute.IEventSource",
@@ -144383,7 +144491,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-sources/sqs.ts",
-            "line": 170
+            "line": 169
           },
           "name": "eventSourceMappingArn",
           "type": {
@@ -144398,7 +144506,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-sources/sqs.ts",
-            "line": 158
+            "line": 157
           },
           "name": "eventSourceMappingId",
           "type": {
@@ -144412,7 +144520,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-sources/sqs.ts",
-            "line": 86
+            "line": 85
           },
           "name": "queue",
           "type": {
@@ -144474,6 +144582,25 @@
             "primitive": "boolean"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- none",
+            "see": "https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk",
+            "stability": "stable",
+            "summary": "Add Customer managed KMS key to encrypt Filter Criteria."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/compute/event-sources/sqs.ts",
+            "line": 63
+          },
+          "name": "filterEncryption",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.aws.encryption.IKey"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -144532,7 +144659,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/compute/event-sources/sqs.ts",
-            "line": 75
+            "line": 74
           },
           "name": "maxConcurrency",
           "optional": true,
@@ -157167,7 +157294,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/iam/grant.ts",
-        "line": 409
+        "line": 458
       },
       "name": "AddToResourcePolicyResult",
       "namespace": "aws.iam",
@@ -157181,7 +157308,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 413
+            "line": 462
           },
           "name": "statementAdded",
           "type": {
@@ -157198,7 +157325,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 421
+            "line": 470
           },
           "name": "policyDependable",
           "optional": true,
@@ -157536,7 +157663,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/iam/grant.ts",
-        "line": 11
+        "line": 12
       },
       "name": "CommonGrantOptions",
       "namespace": "aws.iam",
@@ -157550,7 +157677,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 22
+            "line": 23
           },
           "name": "actions",
           "type": {
@@ -157572,7 +157699,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 17
+            "line": 18
           },
           "name": "grantee",
           "type": {
@@ -157588,7 +157715,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 27
+            "line": 28
           },
           "name": "resourceArns",
           "type": {
@@ -157610,7 +157737,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 34
+            "line": 35
           },
           "name": "conditions",
           "optional": true,
@@ -157714,7 +157841,7 @@
         },
         "locationInModule": {
           "filename": "src/aws/iam/grant.ts",
-          "line": 432
+          "line": 481
         },
         "parameters": [
           {
@@ -157733,7 +157860,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/aws/iam/grant.ts",
-        "line": 431
+        "line": 480
       },
       "name": "CompositeDependable",
       "namespace": "aws.iam",
@@ -158231,7 +158358,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/aws/iam/grant.ts",
-        "line": 108
+        "line": 109
       },
       "methods": [
         {
@@ -158242,7 +158369,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 176
+            "line": 177
           },
           "name": "addToPrincipal",
           "parameters": [
@@ -158268,7 +158395,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 211
+            "line": 212
           },
           "name": "addToPrincipalAndResource",
           "parameters": [
@@ -158294,7 +158421,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 123
+            "line": 124
           },
           "name": "addToPrincipalOrResource",
           "parameters": [
@@ -158320,7 +158447,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 251
+            "line": 252
           },
           "name": "drop",
           "parameters": [
@@ -158358,7 +158485,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 343
+            "line": 344
           },
           "name": "applyBefore",
           "parameters": [
@@ -158379,7 +158506,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 330
+            "line": 331
           },
           "name": "assertSuccess"
         },
@@ -158390,7 +158517,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 352
+            "line": 353
           },
           "name": "combine",
           "parameters": [
@@ -158419,7 +158546,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 267
+            "line": 268
           },
           "name": "principalStatements",
           "type": {
@@ -158439,7 +158566,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 279
+            "line": 280
           },
           "name": "resourceStatements",
           "type": {
@@ -158459,7 +158586,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 320
+            "line": 321
           },
           "name": "success",
           "type": {
@@ -158475,7 +158602,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 262
+            "line": 263
           },
           "name": "principalStatement",
           "optional": true,
@@ -158492,7 +158619,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 274
+            "line": 275
           },
           "name": "resourceStatement",
           "optional": true,
@@ -158503,6 +158630,43 @@
       ],
       "symbolId": "src/aws/iam/grant:Grant"
     },
+    "terraconstructs.aws.iam.GrantOnKeyResult": {
+      "assembly": "terraconstructs",
+      "datatype": true,
+      "docs": {
+        "stability": "stable",
+        "summary": "Result of a call to grantOnKey()."
+      },
+      "fqn": "terraconstructs.aws.iam.GrantOnKeyResult",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/aws/iam/grant.ts",
+        "line": 400
+      },
+      "name": "GrantOnKeyResult",
+      "namespace": "aws.iam",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "No grant",
+            "stability": "stable",
+            "summary": "The Grant object, if a grant was created."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/iam/grant.ts",
+            "line": 406
+          },
+          "name": "grant",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.aws.iam.Grant"
+          }
+        }
+      ],
+      "symbolId": "src/aws/iam/grant:GrantOnKeyResult"
+    },
     "terraconstructs.aws.iam.GrantOnPrincipalAndResourceOptions": {
       "assembly": "terraconstructs",
       "datatype": true,
@@ -158517,7 +158681,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/iam/grant.ts",
-        "line": 77
+        "line": 78
       },
       "name": "GrantOnPrincipalAndResourceOptions",
       "namespace": "aws.iam",
@@ -158532,7 +158696,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 83
+            "line": 84
           },
           "name": "resource",
           "type": {
@@ -158549,7 +158713,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 99
+            "line": 100
           },
           "name": "resourcePolicyPrincipal",
           "optional": true,
@@ -158568,7 +158732,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 92
+            "line": 93
           },
           "name": "resourceSelfArns",
           "optional": true,
@@ -158598,7 +158762,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/iam/grant.ts",
-        "line": 64
+        "line": 65
       },
       "name": "GrantOnPrincipalOptions",
       "namespace": "aws.iam",
@@ -158613,7 +158777,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 70
+            "line": 71
           },
           "name": "scope",
           "optional": true,
@@ -158638,7 +158802,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/iam/grant.ts",
-        "line": 41
+        "line": 42
       },
       "name": "GrantWithResourceOptions",
       "namespace": "aws.iam",
@@ -158653,7 +158817,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 48
+            "line": 49
           },
           "name": "resource",
           "type": {
@@ -158671,7 +158835,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 57
+            "line": 58
           },
           "name": "resourceSelfArns",
           "optional": true,
@@ -158687,6 +158851,79 @@
       ],
       "symbolId": "src/aws/iam/grant:GrantWithResourceOptions"
     },
+    "terraconstructs.aws.iam.GrantableResources": {
+      "assembly": "terraconstructs",
+      "docs": {
+        "stability": "stable",
+        "summary": "Utility methods to check for specific types of grantable resources."
+      },
+      "fqn": "terraconstructs.aws.iam.GrantableResources",
+      "initializer": {
+        "docs": {
+          "stability": "stable"
+        }
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/aws/iam/grant.ts",
+        "line": 422
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Whether this resource holds data that can be encrypted using a KMS key."
+          },
+          "locationInModule": {
+            "filename": "src/aws/iam/grant.ts",
+            "line": 438
+          },
+          "name": "isEncryptedResource",
+          "parameters": [
+            {
+              "name": "resource",
+              "type": {
+                "fqn": "constructs.IConstruct"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "primitive": "boolean"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Whether this resource admits a resource policy."
+          },
+          "locationInModule": {
+            "filename": "src/aws/iam/grant.ts",
+            "line": 426
+          },
+          "name": "isResourceWithPolicy",
+          "parameters": [
+            {
+              "name": "resource",
+              "type": {
+                "fqn": "terraconstructs.aws.IEnvironmentAware"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "primitive": "boolean"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "GrantableResources",
+      "namespace": "aws.iam",
+      "symbolId": "src/aws/iam/grant:GrantableResources"
+    },
     "terraconstructs.aws.iam.Group": {
       "assembly": "terraconstructs",
       "base": "terraconstructs.aws.AwsConstructBase",
@@ -159292,7 +159529,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/iam/grant.ts",
-        "line": 399
+        "line": 448
       },
       "methods": [
         {
@@ -159303,7 +159540,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/iam/grant.ts",
-            "line": 403
+            "line": 452
           },
           "name": "addToResourcePolicy",
           "parameters": [
@@ -159365,6 +159602,60 @@
       "namespace": "aws.iam",
       "symbolId": "src/aws/iam/principals:IComparablePrincipal"
     },
+    "terraconstructs.aws.iam.IEncryptedResource": {
+      "assembly": "terraconstructs",
+      "docs": {
+        "stability": "stable",
+        "summary": "A resource that contains data that can be encrypted, using a KMS key."
+      },
+      "fqn": "terraconstructs.aws.iam.IEncryptedResource",
+      "interfaces": [
+        "terraconstructs.aws.IAwsConstruct"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/aws/iam/grant.ts",
+        "line": 412
+      },
+      "methods": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Gives permissions to a grantable entity to perform actions on the encryption key."
+          },
+          "locationInModule": {
+            "filename": "src/aws/iam/grant.ts",
+            "line": 416
+          },
+          "name": "grantOnKey",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "terraconstructs.aws.iam.IGrantable"
+              }
+            },
+            {
+              "name": "actions",
+              "type": {
+                "primitive": "string"
+              },
+              "variadic": true
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "terraconstructs.aws.iam.GrantOnKeyResult"
+            }
+          },
+          "variadic": true
+        }
+      ],
+      "name": "IEncryptedResource",
+      "namespace": "aws.iam",
+      "symbolId": "src/aws/iam/grant:IEncryptedResource"
+    },
     "terraconstructs.aws.iam.IGrantable": {
       "assembly": "terraconstructs",
       "docs": {
@@ -171402,7 +171693,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/notify/queue.ts",
-        "line": 517
+        "line": 565
       },
       "name": "DeadLetterQueue",
       "namespace": "aws.notify",
@@ -171416,7 +171707,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/notify/queue.ts",
-            "line": 526
+            "line": 574
           },
           "name": "maxReceiveCount",
           "type": {
@@ -171432,7 +171723,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/notify/queue.ts",
-            "line": 521
+            "line": 569
           },
           "name": "queue",
           "type": {
@@ -171452,7 +171743,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "src/aws/notify/queue.ts",
-        "line": 578
+        "line": 608
       },
       "members": [
         {
@@ -173217,7 +173508,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "src/aws/notify/queue.ts",
-        "line": 592
+        "line": 622
       },
       "members": [
         {
@@ -174149,16 +174440,17 @@
       "assembly": "terraconstructs",
       "docs": {
         "stability": "stable",
-        "summary": "Imported or created Queue attributes."
+        "summary": "Represents an SQS queue."
       },
       "fqn": "terraconstructs.aws.notify.IQueue",
       "interfaces": [
-        "terraconstructs.aws.iam.IAwsConstructWithPolicy"
+        "terraconstructs.aws.iam.IAwsConstructWithPolicy",
+        "terraconstructs.aws.IAwsConstruct"
       ],
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/aws/notify/queue.ts",
-        "line": 106
+        "filename": "src/aws/notify/queue-base.ts",
+        "line": 38
       },
       "methods": [
         {
@@ -174168,8 +174460,8 @@
             "summary": "Grant the actions defined in queueActions to the identity Principal given on this SQS queue resource."
           },
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 188
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 123
           },
           "name": "grant",
           "parameters": [
@@ -174208,8 +174500,8 @@
             "summary": "Grant permissions to consume messages from a queue."
           },
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 153
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 88
           },
           "name": "grantConsumeMessages",
           "parameters": [
@@ -174237,8 +174529,8 @@
             "summary": "Grant an IAM principal permissions to purge all messages from the queue."
           },
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 179
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 114
           },
           "name": "grantPurge",
           "parameters": [
@@ -174266,8 +174558,8 @@
             "summary": "Grant access to send messages to a queue to the given identity."
           },
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 166
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 101
           },
           "name": "grantSendMessages",
           "parameters": [
@@ -174295,7 +174587,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 14
+            "line": 11
           },
           "name": "metric",
           "parameters": [
@@ -174328,7 +174620,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 21
+            "line": 18
           },
           "name": "metricApproximateAgeOfOldestMessage",
           "parameters": [
@@ -174355,7 +174647,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 28
+            "line": 25
           },
           "name": "metricApproximateNumberOfMessagesDelayed",
           "parameters": [
@@ -174382,7 +174674,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 35
+            "line": 32
           },
           "name": "metricApproximateNumberOfMessagesNotVisible",
           "parameters": [
@@ -174409,7 +174701,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 42
+            "line": 39
           },
           "name": "metricApproximateNumberOfMessagesVisible",
           "parameters": [
@@ -174436,7 +174728,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 49
+            "line": 46
           },
           "name": "metricNumberOfEmptyReceives",
           "parameters": [
@@ -174463,7 +174755,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 56
+            "line": 53
           },
           "name": "metricNumberOfMessagesDeleted",
           "parameters": [
@@ -174490,7 +174782,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 63
+            "line": 60
           },
           "name": "metricNumberOfMessagesReceived",
           "parameters": [
@@ -174517,7 +174809,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 70
+            "line": 67
           },
           "name": "metricNumberOfMessagesSent",
           "parameters": [
@@ -174544,7 +174836,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 77
+            "line": 74
           },
           "name": "metricSentMessageSize",
           "parameters": [
@@ -174575,8 +174867,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 138
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 68
           },
           "name": "fifo",
           "type": {
@@ -174594,8 +174886,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 113
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 46
           },
           "name": "queueArn",
           "type": {
@@ -174613,8 +174905,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 123
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 58
           },
           "name": "queueName",
           "type": {
@@ -174629,8 +174921,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 108
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 40
           },
           "name": "queueOutputs",
           "type": {
@@ -174648,8 +174940,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 118
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 52
           },
           "name": "queueUrl",
           "type": {
@@ -174660,21 +174952,38 @@
           "abstract": true,
           "docs": {
             "stability": "stable",
-            "summary": "If this queue is configured with a dead-letter queue, this is the dead-letter queue settings."
+            "summary": "If this queue is server-side encrypted, this is the KMS encryption key."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 127
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 63
           },
-          "name": "deadLetterQueue",
+          "name": "encryptionMasterKey",
           "optional": true,
           "type": {
-            "fqn": "terraconstructs.aws.notify.DeadLetterQueue"
+            "fqn": "terraconstructs.aws.encryption.IKey"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Whether the contents of the queue are encrypted, and by what type of key."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 73
+          },
+          "name": "encryptionType",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.aws.notify.QueueEncryption"
           }
         }
       ],
-      "symbolId": "src/aws/notify/queue:IQueue"
+      "symbolId": "src/aws/notify/queue-base:IQueue"
     },
     "terraconstructs.aws.notify.IRule": {
       "assembly": "terraconstructs",
@@ -178103,15 +178412,10 @@
     },
     "terraconstructs.aws.notify.Queue": {
       "assembly": "terraconstructs",
-      "base": "terraconstructs.aws.AwsConstructBase",
+      "base": "terraconstructs.aws.notify.QueueBase",
       "docs": {
-        "custom": {
-          "beacon-class": "notify.IQueue",
-          "resource": "aws_sqs_queue"
-        },
-        "remarks": "```ts\nnew notify.Queue(stack, \"Queue\", {\n  namePrefix: \"queue.fifo\",\n  messageRetentionSeconds: Duration.days(14).toSeconds(),\n  visibilityTimeoutSeconds: Duration.minutes(15).toSeconds(),\n});\n```",
         "stability": "stable",
-        "summary": "The `Queue` beacon provides an [AWS SQS Queue](https://aws.amazon.com/sqs/)."
+        "summary": "A new Amazon SQS queue."
       },
       "fqn": "terraconstructs.aws.notify.Queue",
       "initializer": {
@@ -178120,7 +178424,7 @@
         },
         "locationInModule": {
           "filename": "src/aws/notify/queue.ts",
-          "line": 234
+          "line": 304
         },
         "parameters": [
           {
@@ -178130,7 +178434,7 @@
             }
           },
           {
-            "name": "name",
+            "name": "id",
             "type": {
               "primitive": "string"
             }
@@ -178144,13 +178448,276 @@
           }
         ]
       },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/aws/notify/queue.ts",
+        "line": 212
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Import an existing SQS queue provided an ARN."
+          },
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 226
+          },
+          "name": "fromQueueArn",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The parent creating construct."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The construct's name."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "queue ARN (i.e. arn:aws:sqs:us-east-2:444455556666:queue1)."
+              },
+              "name": "queueArn",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "terraconstructs.aws.notify.IQueue"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "Queue",
+      "namespace": "aws.notify",
+      "properties": [
+        {
+          "const": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Uniquely identifies this class."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 216
+          },
+          "name": "PROPERTY_INJECTION_ID",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Set by subclasses.",
+            "stability": "stable",
+            "summary": "Controls automatic creation of policy objects."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 300
+          },
+          "name": "autoCreatePolicy",
+          "overrides": "terraconstructs.aws.notify.QueueBase",
+          "protected": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "docs": {
+            "remarks": "If false, this is a standard queue.",
+            "stability": "stable",
+            "summary": "Whether this queue is an Amazon SQS FIFO queue."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 288
+          },
+          "name": "fifo",
+          "overrides": "terraconstructs.aws.notify.QueueBase",
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The ARN of this queue."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 268
+          },
+          "name": "queueArn",
+          "overrides": "terraconstructs.aws.notify.QueueBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The name of this queue."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 273
+          },
+          "name": "queueName",
+          "overrides": "terraconstructs.aws.notify.QueueBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "The URL of this queue."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 278
+          },
+          "name": "queueUrl",
+          "overrides": "terraconstructs.aws.notify.QueueBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 263
+          },
+          "name": "resource",
+          "type": {
+            "fqn": "@cdktf/provider-aws.sqsQueue.SqsQueue"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "If this queue is configured with a dead-letter queue, this is the dead-letter queue settings."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 298
+          },
+          "name": "deadLetterQueue",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.aws.notify.DeadLetterQueue"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "If this queue is encrypted, this is the KMS key."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 283
+          },
+          "name": "encryptionMasterKey",
+          "optional": true,
+          "overrides": "terraconstructs.aws.notify.QueueBase",
+          "type": {
+            "fqn": "terraconstructs.aws.encryption.IKey"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Whether the contents of the queue are encrypted, and by what type of key."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 293
+          },
+          "name": "encryptionType",
+          "optional": true,
+          "overrides": "terraconstructs.aws.notify.QueueBase",
+          "type": {
+            "fqn": "terraconstructs.aws.notify.QueueEncryption"
+          }
+        }
+      ],
+      "symbolId": "src/aws/notify/queue:Queue"
+    },
+    "terraconstructs.aws.notify.QueueBase": {
+      "abstract": true,
+      "assembly": "terraconstructs",
+      "base": "terraconstructs.aws.AwsConstructBase",
+      "docs": {
+        "stability": "stable",
+        "summary": "Reference to a new or existing Amazon SQS queue."
+      },
+      "fqn": "terraconstructs.aws.notify.QueueBase",
+      "initializer": {
+        "docs": {
+          "stability": "stable"
+        },
+        "locationInModule": {
+          "filename": "src/aws/notify/queue-base.ts",
+          "line": 189
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "optional": true,
+            "type": {
+              "fqn": "terraconstructs.aws.AwsConstructProps"
+            }
+          }
+        ]
+      },
       "interfaces": [
-        "terraconstructs.aws.notify.IQueue"
+        "terraconstructs.aws.notify.IQueue",
+        "terraconstructs.aws.iam.IEncryptedResource"
       ],
       "kind": "class",
       "locationInModule": {
-        "filename": "src/aws/notify/queue.ts",
-        "line": 205
+        "filename": "src/aws/notify/queue-base.ts",
+        "line": 129
       },
       "methods": [
         {
@@ -178160,8 +178727,8 @@
             "summary": "Adds a statement to the IAM resource policy associated with this queue."
           },
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 321
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 213
           },
           "name": "addToResourcePolicy",
           "overrides": "terraconstructs.aws.iam.IAwsConstructWithPolicy",
@@ -178185,8 +178752,8 @@
             "summary": "Grant the actions defined in queueActions to the identity Principal given on this SQS queue resource."
           },
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 436
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 297
           },
           "name": "grant",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178225,8 +178792,8 @@
             "summary": "Grant permissions to consume messages from a queue."
           },
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 355
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 247
           },
           "name": "grantConsumeMessages",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178247,6 +178814,39 @@
             }
           }
         },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Gives permissions to a grantable entity to perform actions on the encryption key."
+          },
+          "locationInModule": {
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 197
+          },
+          "name": "grantOnKey",
+          "overrides": "terraconstructs.aws.iam.IEncryptedResource",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "terraconstructs.aws.iam.IGrantable"
+              }
+            },
+            {
+              "name": "actions",
+              "type": {
+                "primitive": "string"
+              },
+              "variadic": true
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "terraconstructs.aws.iam.GrantOnKeyResult"
+            }
+          },
+          "variadic": true
+        },
         {
           "docs": {
             "remarks": "This will grant the following permissions:\n\n - sqs:PurgeQueue\n - sqs:GetQueueAttributes\n - sqs:GetQueueUrl",
@@ -178254,8 +178854,8 @@
             "summary": "Grant an IAM principal permissions to purge all messages from the queue."
           },
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 420
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 286
           },
           "name": "grantPurge",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178283,8 +178883,8 @@
             "summary": "Grant access to send messages to a queue to the given identity."
           },
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 393
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 271
           },
           "name": "grantSendMessages",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178312,7 +178912,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 88
+            "line": 83
           },
           "name": "metric",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178345,7 +178945,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 95
+            "line": 90
           },
           "name": "metricApproximateAgeOfOldestMessage",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178372,7 +178972,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 102
+            "line": 97
           },
           "name": "metricApproximateNumberOfMessagesDelayed",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178399,7 +178999,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 109
+            "line": 104
           },
           "name": "metricApproximateNumberOfMessagesNotVisible",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178426,7 +179026,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 116
+            "line": 111
           },
           "name": "metricApproximateNumberOfMessagesVisible",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178453,7 +179053,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 123
+            "line": 118
           },
           "name": "metricNumberOfEmptyReceives",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178480,7 +179080,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 130
+            "line": 125
           },
           "name": "metricNumberOfMessagesDeleted",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178507,7 +179107,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 137
+            "line": 132
           },
           "name": "metricNumberOfMessagesReceived",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178534,7 +179134,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 144
+            "line": 139
           },
           "name": "metricNumberOfMessagesSent",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178561,7 +179161,7 @@
           },
           "locationInModule": {
             "filename": "src/aws/notify/sqs-augmentations.generated.ts",
-            "line": 151
+            "line": 146
           },
           "name": "metricSentMessageSize",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178581,10 +179181,29 @@
           }
         }
       ],
-      "name": "Queue",
+      "name": "QueueBase",
       "namespace": "aws.notify",
       "properties": [
         {
+          "abstract": true,
+          "docs": {
+            "remarks": "Set by subclasses.",
+            "stability": "stable",
+            "summary": "Controls automatic creation of policy objects."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 185
+          },
+          "name": "autoCreatePolicy",
+          "protected": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
           "docs": {
             "remarks": "If false, this is a standard queue.",
             "stability": "stable",
@@ -178592,8 +179211,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 232
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 168
           },
           "name": "fifo",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178601,6 +179220,21 @@
             "primitive": "boolean"
           }
         },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Collection of grant methods for a Queue."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 178
+          },
+          "name": "grants",
+          "type": {
+            "fqn": "terraconstructs.aws.notify.QueueGrants"
+          }
+        },
         {
           "docs": {
             "stability": "stable",
@@ -178608,8 +179242,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 213
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 141
           },
           "name": "outputs",
           "overrides": "terraconstructs.TerraConstructBase",
@@ -178623,14 +179257,15 @@
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
             "summary": "The ARN of this queue."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 218
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 148
           },
           "name": "queueArn",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178639,14 +179274,15 @@
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
             "summary": "The name of this queue."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 224
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 158
           },
           "name": "queueName",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178661,8 +179297,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 210
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 133
           },
           "name": "queueOutputs",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178671,14 +179307,15 @@
           }
         },
         {
+          "abstract": true,
           "docs": {
             "stability": "stable",
             "summary": "The URL of this queue."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 221
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 153
           },
           "name": "queueUrl",
           "overrides": "terraconstructs.aws.notify.IQueue",
@@ -178686,39 +179323,295 @@
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "If this queue is server-side encrypted, this is the KMS encryption key."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 163
+          },
+          "name": "encryptionMasterKey",
+          "optional": true,
+          "overrides": "terraconstructs.aws.notify.IQueue",
+          "type": {
+            "fqn": "terraconstructs.aws.encryption.IKey"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Whether the contents of the queue are encrypted, and by what type of key."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 173
+          },
+          "name": "encryptionType",
+          "optional": true,
+          "overrides": "terraconstructs.aws.notify.IQueue",
+          "type": {
+            "fqn": "terraconstructs.aws.notify.QueueEncryption"
+          }
+        }
+      ],
+      "symbolId": "src/aws/notify/queue-base:QueueBase"
+    },
+    "terraconstructs.aws.notify.QueueEncryption": {
+      "assembly": "terraconstructs",
+      "docs": {
+        "stability": "stable",
+        "summary": "What kind of encryption to apply to this queue."
+      },
+      "fqn": "terraconstructs.aws.notify.QueueEncryption",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "src/aws/notify/queue-base.ts",
+        "line": 310
+      },
+      "members": [
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Messages in the queue are not encrypted."
+          },
+          "name": "UNENCRYPTED"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Server-side KMS encryption with a KMS key managed by SQS."
+          },
+          "name": "KMS_MANAGED"
+        },
+        {
+          "docs": {
+            "remarks": "If `encryptionKey` is specified, this key will be used, otherwise, one will be defined.",
+            "stability": "stable",
+            "summary": "Server-side encryption with a KMS key managed by the user."
+          },
+          "name": "KMS"
+        },
+        {
+          "docs": {
+            "remarks": "To learn more about SSE-SQS on Amazon SQS, please visit the\n[Amazon SQS documentation](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html).",
+            "stability": "stable",
+            "summary": "Server-side encryption key managed by SQS (SSE-SQS)."
+          },
+          "name": "SQS_MANAGED"
+        }
+      ],
+      "name": "QueueEncryption",
+      "namespace": "aws.notify",
+      "symbolId": "src/aws/notify/queue-base:QueueEncryption"
+    },
+    "terraconstructs.aws.notify.QueueGrants": {
+      "assembly": "terraconstructs",
+      "docs": {
+        "stability": "stable",
+        "summary": "Collection of grant methods for a IQueue."
+      },
+      "fqn": "terraconstructs.aws.notify.QueueGrants",
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/aws/notify/sqs-grants.generated.ts",
+        "line": 27
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Creates grants for QueueGrants."
+          },
+          "locationInModule": {
+            "filename": "src/aws/notify/sqs-grants.generated.ts",
+            "line": 31
+          },
+          "name": "fromQueue",
+          "parameters": [
+            {
+              "name": "resource",
+              "type": {
+                "fqn": "terraconstructs.aws.notify.IQueue"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "terraconstructs.aws.notify.QueueGrants"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "remarks": "This will grant the following permissions:\n\n  - sqs:ChangeMessageVisibility\n  - sqs:DeleteMessage\n  - sqs:ReceiveMessage\n  - sqs:GetQueueAttributes\n  - sqs:GetQueueUrl\n\nIf encryption is used, permission to use the key to decrypt the contents of the queue will also be granted to the same principal.\n\nThis will grant the following KMS permissions:\n\n  - kms:Decrypt",
+            "stability": "stable",
+            "summary": "Grant permissions to consume messages from a queue."
+          },
+          "locationInModule": {
+            "filename": "src/aws/notify/sqs-grants.generated.ts",
+            "line": 75
+          },
+          "name": "consumeMessages",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "terraconstructs.aws.iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "terraconstructs.aws.iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Grants purge permissions."
+          },
+          "locationInModule": {
+            "filename": "src/aws/notify/sqs-grants.generated.ts",
+            "line": 160
+          },
+          "name": "purge",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "terraconstructs.aws.iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "terraconstructs.aws.iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "This will grant the following permissions:\n\n - sqs:SendMessage\n - sqs:GetQueueAttributes\n - sqs:GetQueueUrl\n\nIf encryption is used, permission to use the key to encrypt/decrypt the contents of the queue will also be granted to the same principal.\n\nThis will grant the following KMS permissions:\n\n - kms:Decrypt\n - kms:Encrypt\n - kms:ReEncrypt*\n - kms:GenerateDataKey*",
+            "stability": "stable",
+            "summary": "Grant access to send messages to a queue to the given identity."
+          },
+          "locationInModule": {
+            "filename": "src/aws/notify/sqs-grants.generated.ts",
+            "line": 123
+          },
+          "name": "sendMessages",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "terraconstructs.aws.iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "terraconstructs.aws.iam.Grant"
+            }
+          }
+        }
+      ],
+      "name": "QueueGrants",
+      "namespace": "aws.notify",
+      "properties": [
         {
           "docs": {
             "stability": "stable"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 207
+            "filename": "src/aws/notify/sqs-grants.generated.ts",
+            "line": 48
           },
           "name": "resource",
           "type": {
-            "fqn": "@cdktf/provider-aws.sqsQueue.SqsQueue"
+            "fqn": "terraconstructs.aws.notify.IQueue"
+          }
+        }
+      ],
+      "symbolId": "src/aws/notify/sqs-grants.generated:QueueGrants"
+    },
+    "terraconstructs.aws.notify.QueueGrantsProps": {
+      "assembly": "terraconstructs",
+      "datatype": true,
+      "docs": {
+        "stability": "stable"
+      },
+      "fqn": "terraconstructs.aws.notify.QueueGrantsProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/aws/notify/sqs-grants.generated.ts",
+        "line": 5
+      },
+      "name": "QueueGrantsProps",
+      "namespace": "aws.notify",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "The SQS queue interface (IQueue) this helper will operate on."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/sqs-grants.generated.ts",
+            "line": 9
+          },
+          "name": "resource",
+          "type": {
+            "fqn": "terraconstructs.aws.notify.IQueue"
           }
         },
         {
+          "abstract": true,
           "docs": {
+            "remarks": "Typically present if the resource implements iam.IEncryptedResource.",
             "stability": "stable",
-            "summary": "If this queue is configured with a dead-letter queue, this is the dead-letter queue settings."
+            "summary": "If the queue is an encrypted resource, provides access to grant KMS key permissions."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 227
+            "filename": "src/aws/notify/sqs-grants.generated.ts",
+            "line": 15
           },
-          "name": "deadLetterQueue",
+          "name": "encryptedResource",
           "optional": true,
-          "overrides": "terraconstructs.aws.notify.IQueue",
           "type": {
-            "fqn": "terraconstructs.aws.notify.DeadLetterQueue"
+            "fqn": "terraconstructs.aws.iam.IEncryptedResource"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Typically present if the resource implements iam.IResourceWithPolicy.",
+            "stability": "stable",
+            "summary": "If the queue supports a resource policy, this enables addToPrincipalOrResource grants."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/sqs-grants.generated.ts",
+            "line": 21
+          },
+          "name": "policyResource",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.aws.iam.IAwsConstructWithPolicy"
           }
         }
       ],
-      "symbolId": "src/aws/notify/queue:Queue"
+      "symbolId": "src/aws/notify/sqs-grants.generated:QueueGrantsProps"
     },
     "terraconstructs.aws.notify.QueueOutputs": {
       "assembly": "terraconstructs",
@@ -178730,8 +179623,8 @@
       "fqn": "terraconstructs.aws.notify.QueueOutputs",
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/aws/notify/queue.ts",
-        "line": 86
+        "filename": "src/aws/notify/queue-base.ts",
+        "line": 18
       },
       "name": "QueueOutputs",
       "namespace": "aws.notify",
@@ -178744,8 +179637,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 95
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 27
           },
           "name": "arn",
           "type": {
@@ -178760,8 +179653,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 90
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 22
           },
           "name": "name",
           "type": {
@@ -178776,8 +179669,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/aws/notify/queue.ts",
-            "line": 100
+            "filename": "src/aws/notify/queue-base.ts",
+            "line": 32
           },
           "name": "url",
           "type": {
@@ -178785,7 +179678,7 @@
           }
         }
       ],
-      "symbolId": "src/aws/notify/queue:QueueOutputs"
+      "symbolId": "src/aws/notify/queue-base:QueueOutputs"
     },
     "terraconstructs.aws.notify.QueuePolicy": {
       "assembly": "terraconstructs",
@@ -178914,17 +179807,17 @@
       "assembly": "terraconstructs",
       "datatype": true,
       "docs": {
-        "stability": "stable"
+        "stability": "stable",
+        "summary": "Properties for creating a new Queue."
       },
       "fqn": "terraconstructs.aws.notify.QueueProps",
       "interfaces": [
-        "terraconstructs.aws.AwsConstructProps",
-        "terraconstructs.aws.notify.SqsQueueConfig"
+        "terraconstructs.aws.AwsConstructProps"
       ],
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/notify/queue.ts",
-        "line": 8
+        "line": 19
       },
       "name": "QueueProps",
       "namespace": "aws.notify",
@@ -178940,7 +179833,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/notify/queue.ts",
-            "line": 62
+            "line": 156
           },
           "name": "contentBasedDeduplication",
           "optional": true,
@@ -178948,6 +179841,25 @@
             "primitive": "boolean"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.minutes(5)",
+            "remarks": "The value must be an integer between 60 (1 minute) and 86,400 (24\nhours). The default is 300 (5 minutes).",
+            "stability": "stable",
+            "summary": "The length of time that Amazon SQS reuses a data key before calling KMS again."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 133
+          },
+          "name": "dataKeyReuse",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.Duration"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -178959,7 +179871,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/notify/queue.ts",
-            "line": 32
+            "line": 99
           },
           "name": "deadLetterQueue",
           "optional": true,
@@ -178978,7 +179890,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/notify/queue.ts",
-            "line": 71
+            "line": 166
           },
           "name": "deduplicationScope",
           "optional": true,
@@ -178989,14 +179901,90 @@
         {
           "abstract": true,
           "docs": {
-            "default": "false, unless nameSuffix ends in '.fifo' or 'contentBasedDeduplication' is true.",
+            "default": "0",
+            "remarks": "You can specify an integer value of 0 to 900 (15 minutes). The default\nvalue is 0.",
+            "stability": "stable",
+            "summary": "The time in seconds that the delivery of all messages in the queue is delayed."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 52
+          },
+          "name": "deliveryDelay",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.Duration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "SQS_MANAGED (SSE-SQS) for newly created queues",
+            "remarks": "Be aware that encryption is not available in all regions, please see the docs\nfor current availability details.",
+            "stability": "stable",
+            "summary": "Whether the contents of the queue are encrypted, and by what type of key."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 109
+          },
+          "name": "encryption",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.aws.notify.QueueEncryption"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "If encryption is set to KMS and not specified, a key will be created.",
+            "remarks": "Individual messages will be encrypted using data keys. The data keys in\nturn will be encrypted using this key, and reused for a maximum of\n`dataKeyReuseSecs` seconds.\n\nIf the 'encryptionMasterKey' property is set, 'encryption' type will be\nimplicitly set to \"KMS\".",
+            "stability": "stable",
+            "summary": "External KMS key to use for queue encryption."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 123
+          },
+          "name": "encryptionMasterKey",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.aws.encryption.IKey"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "false",
+            "see": "https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-security-best-practices.html#enforce-encryption-data-in-transit",
+            "stability": "stable",
+            "summary": "Enforce encryption of data in transit."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 196
+          },
+          "name": "enforceSSL",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "false, unless queueName ends in '.fifo' or 'contentBasedDeduplication' is true.",
             "stability": "stable",
             "summary": "Whether this a first-in-first-out (FIFO) queue."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/notify/queue.ts",
-            "line": 47
+            "line": 140
           },
           "name": "fifo",
           "optional": true,
@@ -179015,7 +180003,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/notify/queue.ts",
-            "line": 80
+            "line": 176
           },
           "name": "fifoThroughputLimit",
           "optional": true,
@@ -179023,6 +180011,25 @@
             "fqn": "terraconstructs.aws.notify.FifoThroughputLimit"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "1MiB",
+            "remarks": "You can specify an integer value from 1024 bytes (1 KiB) to 1048576 bytes\n(1 MiB). The default value is 1048576 (1 MiB).",
+            "stability": "stable",
+            "summary": "The limit of how many bytes that a message can contain before Amazon SQS rejects it."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 62
+          },
+          "name": "maxMessageSizeBytes",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -179034,14 +180041,33 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/notify/queue.ts",
-            "line": 21
+            "line": 32
           },
-          "name": "namePrefix",
+          "name": "queueName",
           "optional": true,
           "type": {
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "0",
+            "remarks": "Does not wait if set to 0, otherwise waits this amount of seconds\nby default for messages to arrive.\n\nFor more information, see Amazon SQS Long Poll.",
+            "stability": "stable",
+            "summary": "Default wait time for ReceiveMessage calls."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 74
+          },
+          "name": "receiveMessageWaitTime",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.Duration"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -179052,13 +180078,51 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/notify/queue.ts",
-            "line": 41
+            "line": 206
           },
           "name": "redriveAllowPolicy",
           "optional": true,
           "type": {
             "fqn": "terraconstructs.aws.notify.RedriveAllowPolicy"
           }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.days(4)",
+            "remarks": "You can specify an integer value from 60 seconds (1 minute) to 1209600\nseconds (14 days). The default value is 345600 seconds (4 days).",
+            "stability": "stable",
+            "summary": "The number of seconds that Amazon SQS retains a message."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 42
+          },
+          "name": "retentionPeriod",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.Duration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.seconds(30)",
+            "remarks": "After dequeuing, the processor has this much time to handle the message\nand delete it from the queue before it becomes visible again for dequeueing\nby another processor.\n\nValues must be from 0 to 43200 seconds (12 hours). If you don't specify\na value, AWS CloudFormation uses the default value of 30 seconds.",
+            "stability": "stable",
+            "summary": "Timeout of processing a single message."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/aws/notify/queue.ts",
+            "line": 88
+          },
+          "name": "visibilityTimeout",
+          "optional": true,
+          "type": {
+            "fqn": "terraconstructs.Duration"
+          }
         }
       ],
       "symbolId": "src/aws/notify/queue:QueueProps"
@@ -179074,7 +180138,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/aws/notify/queue.ts",
-        "line": 532
+        "line": 580
       },
       "name": "RedriveAllowPolicy",
       "namespace": "aws.notify",
@@ -179089,7 +180153,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/notify/queue.ts",
-            "line": 538
+            "line": 586
           },
           "name": "redrivePermission",
           "optional": true,
@@ -179108,7 +180172,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/aws/notify/queue.ts",
-            "line": 554
+            "line": 602
           },
           "name": "sourceQueues",
           "optional": true,
@@ -179134,7 +180198,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "src/aws/notify/queue.ts",
-        "line": 560
+        "line": 636
       },
       "members": [
         {
@@ -180441,402 +181505,6 @@
       ],
       "symbolId": "src/aws/notify/schedule:Schedule"
     },
-    "terraconstructs.aws.notify.SqsQueueConfig": {
-      "assembly": "terraconstructs",
-      "datatype": true,
-      "docs": {
-        "stability": "stable",
-        "summary": "Config for external source (like an EventBridge Rule, SNS, or S3) permission to access the Lambda function."
-      },
-      "fqn": "terraconstructs.aws.notify.SqsQueueConfig",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/aws/notify/queue-config.generated.ts",
-        "line": 8
-      },
-      "name": "SqsQueueConfig",
-      "namespace": "aws.notify",
-      "properties": [
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "experimental"
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 99
-          },
-          "name": "connection",
-          "optional": true,
-          "type": {
-            "union": {
-              "types": [
-                {
-                  "fqn": "cdktf.SSHProvisionerConnection"
-                },
-                {
-                  "fqn": "cdktf.WinrmProvisionerConnection"
-                }
-              ]
-            }
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "experimental"
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 95
-          },
-          "name": "count",
-          "optional": true,
-          "type": {
-            "union": {
-              "types": [
-                {
-                  "primitive": "number"
-                },
-                {
-                  "fqn": "cdktf.TerraformCount"
-                }
-              ]
-            }
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#delay_seconds SqsQueue#delay_seconds}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 75
-          },
-          "name": "delaySeconds",
-          "optional": true,
-          "type": {
-            "primitive": "number"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "experimental"
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 91
-          },
-          "name": "dependsOn",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "fqn": "cdktf.ITerraformDependable"
-              },
-              "kind": "array"
-            }
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "experimental"
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 87
-          },
-          "name": "forEach",
-          "optional": true,
-          "type": {
-            "fqn": "cdktf.ITerraformIterator"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#kms_data_key_reuse_period_seconds SqsQueue#kms_data_key_reuse_period_seconds}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 70
-          },
-          "name": "kmsDataKeyReusePeriodSeconds",
-          "optional": true,
-          "type": {
-            "primitive": "number"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#kms_master_key_id SqsQueue#kms_master_key_id}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 65
-          },
-          "name": "kmsMasterKeyId",
-          "optional": true,
-          "type": {
-            "primitive": "string"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "experimental"
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 83
-          },
-          "name": "lifecycle",
-          "optional": true,
-          "type": {
-            "fqn": "cdktf.TerraformResourceLifecycle"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#max_message_size SqsQueue#max_message_size}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 60
-          },
-          "name": "maxMessageSize",
-          "optional": true,
-          "type": {
-            "primitive": "number"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#message_retention_seconds SqsQueue#message_retention_seconds}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 55
-          },
-          "name": "messageRetentionSeconds",
-          "optional": true,
-          "type": {
-            "primitive": "number"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#policy SqsQueue#policy}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 50
-          },
-          "name": "policy",
-          "optional": true,
-          "type": {
-            "primitive": "string"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "experimental"
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 79
-          },
-          "name": "provisioners",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "union": {
-                  "types": [
-                    {
-                      "fqn": "cdktf.FileProvisioner"
-                    },
-                    {
-                      "fqn": "cdktf.LocalExecProvisioner"
-                    },
-                    {
-                      "fqn": "cdktf.RemoteExecProvisioner"
-                    }
-                  ]
-                }
-              },
-              "kind": "array"
-            }
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#receive_wait_time_seconds SqsQueue#receive_wait_time_seconds}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 45
-          },
-          "name": "receiveWaitTimeSeconds",
-          "optional": true,
-          "type": {
-            "primitive": "number"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the [provider configuration](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#aws-configuration-reference). Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#region SqsQueue#region}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 40
-          },
-          "name": "region",
-          "optional": true,
-          "type": {
-            "primitive": "string"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#sqs_managed_sse_enabled SqsQueue#sqs_managed_sse_enabled}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 34
-          },
-          "name": "sqsManagedSseEnabled",
-          "optional": true,
-          "type": {
-            "union": {
-              "types": [
-                {
-                  "primitive": "boolean"
-                },
-                {
-                  "fqn": "cdktf.IResolvable"
-                }
-              ]
-            }
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#tags SqsQueue#tags}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 29
-          },
-          "name": "tags",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "primitive": "string"
-              },
-              "kind": "map"
-            }
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#tags_all SqsQueue#tags_all}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 24
-          },
-          "name": "tagsAll",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "primitive": "string"
-              },
-              "kind": "map"
-            }
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "remarks": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#timeouts SqsQueue#timeouts}",
-            "stability": "stable",
-            "summary": "timeouts block."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 19
-          },
-          "name": "timeouts",
-          "optional": true,
-          "type": {
-            "fqn": "@cdktf/provider-aws.sqsQueue.SqsQueueTimeouts"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "stable",
-            "summary": "Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/6.25.0/docs/resources/sqs_queue#visibility_timeout_seconds SqsQueue#visibility_timeout_seconds}."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/aws/notify/queue-config.generated.ts",
-            "line": 13
-          },
-          "name": "visibilityTimeoutSeconds",
-          "optional": true,
-          "type": {
-            "primitive": "number"
-          }
-        }
-      ],
-      "symbolId": "src/aws/notify/queue-config.generated:SqsQueueConfig"
-    },
     "terraconstructs.aws.notify.Stream": {
       "assembly": "terraconstructs",
       "base": "terraconstructs.aws.AwsConstructBase",
@@ -202085,6 +202753,6 @@
       "symbolId": "src/aws/storage/notification-targets/queue:QueueDestination"
     }
   },
-  "version": "0.1.10",
-  "fingerprint": "8Rq11ecko2tDOu1duNksqwGUWIe880ThfAPQNxSUwuo="
+  "version": "0.2.0",
+  "fingerprint": "RlH5n2c6v/Con4IU2GIw6fyuECHjN9GK075W0NsQcrA="
 }