aws-cdk-lib 2.129.0__py3-none-any.whl → 2.131.0__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -1863,6 +1863,37 @@ Note to set `mapPublicIpOnLaunch` to true in the `subnetConfiguration`.
 
 Additionally, IPv6 support varies by instance type. Most instance types have IPv6 support with exception of m1-m3, c1, g2, and t1.micro. A full list can be found here: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.html#AvailableIpPerENI.
 
+### Credit configuration modes for burstable instances
+
+You can set the [credit configuration mode](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-credits-baseline-concepts.html) for burstable instances (T2, T3, T3a and T4g instance types):
+
+```python
+# vpc: ec2.Vpc
+
+
+instance = ec2.Instance(self, "Instance",
+    instance_type=ec2.InstanceType.of(ec2.InstanceClass.T3, ec2.InstanceSize.MICRO),
+    machine_image=ec2.MachineImage.latest_amazon_linux2(),
+    vpc=vpc,
+    credit_specification=ec2.CpuCredits.STANDARD
+)
+```
+
+It is also possible to set the credit configuration mode for NAT instances.
+
+```python
+nat_instance_provider = ec2.NatProvider.instance(
+    instance_type=ec2.InstanceType.of(ec2.InstanceClass.T4G, ec2.InstanceSize.LARGE),
+    machine_image=ec2.AmazonLinuxImage(),
+    credit_specification=ec2.CpuCredits.UNLIMITED
+)
+ec2.Vpc(self, "VPC",
+    nat_gateway_provider=nat_instance_provider
+)
+```
+
+**Note**: `CpuCredits.UNLIMITED` mode is not supported for T3 instances that are launched on a Dedicated Host.
+
 ## VPC Flow Logs
 
 VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow log data can be published to Amazon CloudWatch Logs and Amazon S3. After you've created a flow log, you can retrieve and view its data in the chosen destination. ([https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html](https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html)).
@@ -2325,6 +2356,7 @@ from .. import (
     IResolvable as _IResolvable_da3f097b,
     IResource as _IResource_c80c4260,
     ITaggable as _ITaggable_36806126,
+    ITaggableV2 as _ITaggableV2_4e6798f8,
     IgnoreMode as _IgnoreMode_655a98e8,
     RemovalPolicy as _RemovalPolicy_9f93c814,
     Resource as _Resource_45bc6135,
@@ -11347,7 +11379,7 @@ class CfnEC2Fleet(
             :param instance_generations: Indicates whether current or previous generation instance types are included. The current generation instance types are recommended for use. Current generation instance types are typically the latest two to three generations in each instance family. For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* . For current generation instance types, specify ``current`` . For previous generation instance types, specify ``previous`` . Default: Current and previous generation instance types
             :param local_storage: Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, `Amazon EC2 instance store <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html>`_ in the *Amazon EC2 User Guide* . - To include instance types with instance store volumes, specify ``included`` . - To require only instance types with instance store volumes, specify ``required`` . - To exclude instance types with instance store volumes, specify ``excluded`` . Default: ``included``
             :param local_storage_types: The type of local storage that is required. - For instance types with hard disk drive (HDD) storage, specify ``hdd`` . - For instance types with solid state drive (SSD) storage, specify ``ssd`` . Default: ``hdd`` and ``ssd``
-            :param max_spot_price_as_percentage_of_optimal_on_demand_price: 
+            :param max_spot_price_as_percentage_of_optimal_on_demand_price: [Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold. The parameter accepts an integer, which Amazon EC2 interprets as a percentage. To indicate no price protection threshold, specify a high value, such as ``999999`` . If you set ``DesiredCapacityType`` to ``vcpu`` or ``memory-mib`` , the price protection threshold is based on the per vCPU or per memory price instead of the per instance price. .. epigraph:: Only one of ``SpotMaxPricePercentageOverLowestPrice`` or ``MaxSpotPriceAsPercentageOfOptimalOnDemandPrice`` can be specified. If you don't specify either, then ``SpotMaxPricePercentageOverLowestPrice`` is used and the value for that parameter defaults to ``100`` .
             :param memory_gib_per_v_cpu: The minimum and maximum amount of memory per vCPU, in GiB. Default: No minimum or maximum limits
             :param memory_mib: The minimum and maximum amount of memory, in MiB.
             :param network_bandwidth_gbps: The minimum and maximum amount of baseline network bandwidth, in gigabits per second (Gbps). For more information, see `Amazon EC2 instance network bandwidth <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-network-bandwidth.html>`_ in the *Amazon EC2 User Guide* . Default: No minimum or maximum limits
@@ -11739,7 +11771,19 @@ class CfnEC2Fleet(
         def max_spot_price_as_percentage_of_optimal_on_demand_price(
             self,
         ) -> typing.Optional[jsii.Number]:
-            '''
+            '''[Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price.
+
+            The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold.
+
+            The parameter accepts an integer, which Amazon EC2 interprets as a percentage.
+
+            To indicate no price protection threshold, specify a high value, such as ``999999`` .
+
+            If you set ``DesiredCapacityType`` to ``vcpu`` or ``memory-mib`` , the price protection threshold is based on the per vCPU or per memory price instead of the per instance price.
+            .. epigraph::
+
+               Only one of ``SpotMaxPricePercentageOverLowestPrice`` or ``MaxSpotPriceAsPercentageOfOptimalOnDemandPrice`` can be specified. If you don't specify either, then ``SpotMaxPricePercentageOverLowestPrice`` is used and the value for that parameter defaults to ``100`` .
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ec2fleet-instancerequirementsrequest.html#cfn-ec2-ec2fleet-instancerequirementsrequest-maxspotpriceaspercentageofoptimalondemandprice
             '''
             result = self._values.get("max_spot_price_as_percentage_of_optimal_on_demand_price")
@@ -21582,7 +21626,7 @@ class CfnInstance(
             )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
 class CfnInstanceConnectEndpoint(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -21689,6 +21733,12 @@ class CfnInstanceConnectEndpoint(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -43761,7 +43811,7 @@ class CfnSpotFleet(
             :param instance_generations: Indicates whether current or previous generation instance types are included. The current generation instance types are recommended for use. Current generation instance types are typically the latest two to three generations in each instance family. For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* . For current generation instance types, specify ``current`` . For previous generation instance types, specify ``previous`` . Default: Current and previous generation instance types
             :param local_storage: Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, `Amazon EC2 instance store <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html>`_ in the *Amazon EC2 User Guide* . - To include instance types with instance store volumes, specify ``included`` . - To require only instance types with instance store volumes, specify ``required`` . - To exclude instance types with instance store volumes, specify ``excluded`` . Default: ``included``
             :param local_storage_types: The type of local storage that is required. - For instance types with hard disk drive (HDD) storage, specify ``hdd`` . - For instance types with solid state drive (SSD) storage, specify ``ssd`` . Default: ``hdd`` and ``ssd``
-            :param max_spot_price_as_percentage_of_optimal_on_demand_price: 
+            :param max_spot_price_as_percentage_of_optimal_on_demand_price: [Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold. The parameter accepts an integer, which Amazon EC2 interprets as a percentage. To indicate no price protection threshold, specify a high value, such as ``999999`` . If you set ``DesiredCapacityType`` to ``vcpu`` or ``memory-mib`` , the price protection threshold is based on the per vCPU or per memory price instead of the per instance price. .. epigraph:: Only one of ``SpotMaxPricePercentageOverLowestPrice`` or ``MaxSpotPriceAsPercentageOfOptimalOnDemandPrice`` can be specified. If you don't specify either, then ``SpotMaxPricePercentageOverLowestPrice`` is used and the value for that parameter defaults to ``100`` .
             :param memory_gib_per_v_cpu: The minimum and maximum amount of memory per vCPU, in GiB. Default: No minimum or maximum limits
             :param memory_mib: The minimum and maximum amount of memory, in MiB.
             :param network_bandwidth_gbps: The minimum and maximum amount of baseline network bandwidth, in gigabits per second (Gbps). For more information, see `Amazon EC2 instance network bandwidth <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-network-bandwidth.html>`_ in the *Amazon EC2 User Guide* . Default: No minimum or maximum limits
@@ -44153,7 +44203,19 @@ class CfnSpotFleet(
         def max_spot_price_as_percentage_of_optimal_on_demand_price(
             self,
         ) -> typing.Optional[jsii.Number]:
-            '''
+            '''[Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price.
+
+            The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold.
+
+            The parameter accepts an integer, which Amazon EC2 interprets as a percentage.
+
+            To indicate no price protection threshold, specify a high value, such as ``999999`` .
+
+            If you set ``DesiredCapacityType`` to ``vcpu`` or ``memory-mib`` , the price protection threshold is based on the per vCPU or per memory price instead of the per instance price.
+            .. epigraph::
+
+               Only one of ``SpotMaxPricePercentageOverLowestPrice`` or ``MaxSpotPriceAsPercentageOfOptimalOnDemandPrice`` can be specified. If you don't specify either, then ``SpotMaxPricePercentageOverLowestPrice`` is used and the value for that parameter defaults to ``100`` .
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-spotfleet-instancerequirementsrequest.html#cfn-ec2-spotfleet-instancerequirementsrequest-maxspotpriceaspercentageofoptimalondemandprice
             '''
             result = self._values.get("max_spot_price_as_percentage_of_optimal_on_demand_price")
@@ -65190,6 +65252,19 @@ class CpuCredits(enum.Enum):
     '''Provides the options for specifying the CPU credit type for burstable EC2 instance types (T2, T3, T3a, etc).
 
     :see: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances-how-to.html
+    :exampleMetadata: infused
+
+    Example::
+
+        # vpc: ec2.Vpc
+        
+        
+        instance = ec2.Instance(self, "Instance",
+            instance_type=ec2.InstanceType.of(ec2.InstanceClass.T3, ec2.InstanceSize.MICRO),
+            machine_image=ec2.MachineImage.latest_amazon_linux2(),
+            vpc=vpc,
+            credit_specification=ec2.CpuCredits.STANDARD
+        )
     '''
 
     STANDARD = "STANDARD"
@@ -71470,6 +71545,7 @@ class Instance(
         associate_public_ip_address: typing.Optional[builtins.bool] = None,
         availability_zone: typing.Optional[builtins.str] = None,
         block_devices: typing.Optional[typing.Sequence[typing.Union[BlockDevice, typing.Dict[builtins.str, typing.Any]]]] = None,
+        credit_specification: typing.Optional[CpuCredits] = None,
         detailed_monitoring: typing.Optional[builtins.bool] = None,
         init: typing.Optional[CloudFormationInit] = None,
         init_options: typing.Optional[typing.Union[ApplyCloudFormationInitOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -71499,6 +71575,7 @@ class Instance(
         :param associate_public_ip_address: Whether to associate a public IP address to the primary network interface attached to this instance. Default: - public IP address is automatically assigned based on default behavior
         :param availability_zone: In which AZ to place the instance within the VPC. Default: - Random zone.
         :param block_devices: Specifies how block devices are exposed to the instance. You can specify virtual devices and EBS volumes. Each instance that is launched has an associated root device volume, either an Amazon EBS volume or an instance store volume. You can use block device mappings to specify additional EBS volumes or instance store volumes to attach to an instance when it is launched. Default: - Uses the block device mapping of the AMI
+        :param credit_specification: Specifying the CPU credit type for burstable EC2 instance types (T2, T3, T3a, etc). The unlimited CPU credit option is not supported for T3 instances with a dedicated host. Default: - T2 instances are standard, while T3, T4g, and T3a instances are unlimited.
         :param detailed_monitoring: Whether "Detailed Monitoring" is enabled for this instance Keep in mind that Detailed Monitoring results in extra charges. Default: - false
         :param init: Apply the given CloudFormation Init configuration to the instance at startup. Default: - no CloudFormation init
         :param init_options: Use the given options for applying CloudFormation Init. Describes the configsets to use and the timeout to wait Default: - default options
@@ -71530,6 +71607,7 @@ class Instance(
             associate_public_ip_address=associate_public_ip_address,
             availability_zone=availability_zone,
             block_devices=block_devices,
+            credit_specification=credit_specification,
             detailed_monitoring=detailed_monitoring,
             init=init,
             init_options=init_options,
@@ -71707,14 +71785,15 @@ class InstanceClass(enum.Enum):
 
         # vpc: ec2.Vpc
         
-        cluster = rds.DatabaseCluster(self, "Database",
-            engine=rds.DatabaseClusterEngine.aurora_mysql(version=rds.AuroraMysqlEngineVersion.VER_3_01_0),
-            writer=rds.ClusterInstance.provisioned("Instance",
-                instance_type=ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE3, ec2.InstanceSize.SMALL)
-            ),
-            readers=[rds.ClusterInstance.provisioned("reader")],
-            instance_update_behaviour=rds.InstanceUpdateBehaviour.ROLLING,  # Optional - defaults to rds.InstanceUpdateBehaviour.BULK
-            vpc=vpc
+        instance = rds.DatabaseInstance(self, "Instance",
+            engine=rds.DatabaseInstanceEngine.oracle_se2(version=rds.OracleEngineVersion.VER_19_0_0_0_2020_04_R1),
+            # optional, defaults to m5.large
+            instance_type=ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE3, ec2.InstanceSize.SMALL),
+            credentials=rds.Credentials.from_generated_secret("syscdk"),  # Optional - will default to 'admin' username and generated password
+            vpc=vpc,
+            vpc_subnets=ec2.SubnetSelection(
+                subnet_type=ec2.SubnetType.PRIVATE_WITH_EGRESS
+            )
         )
     '''
 
@@ -72227,6 +72306,7 @@ class InstanceInitiatedShutdownBehavior(enum.Enum):
         "associate_public_ip_address": "associatePublicIpAddress",
         "availability_zone": "availabilityZone",
         "block_devices": "blockDevices",
+        "credit_specification": "creditSpecification",
         "detailed_monitoring": "detailedMonitoring",
         "init": "init",
         "init_options": "initOptions",
@@ -72258,6 +72338,7 @@ class InstanceProps:
         associate_public_ip_address: typing.Optional[builtins.bool] = None,
         availability_zone: typing.Optional[builtins.str] = None,
         block_devices: typing.Optional[typing.Sequence[typing.Union[BlockDevice, typing.Dict[builtins.str, typing.Any]]]] = None,
+        credit_specification: typing.Optional[CpuCredits] = None,
         detailed_monitoring: typing.Optional[builtins.bool] = None,
         init: typing.Optional[CloudFormationInit] = None,
         init_options: typing.Optional[typing.Union[ApplyCloudFormationInitOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -72286,6 +72367,7 @@ class InstanceProps:
         :param associate_public_ip_address: Whether to associate a public IP address to the primary network interface attached to this instance. Default: - public IP address is automatically assigned based on default behavior
         :param availability_zone: In which AZ to place the instance within the VPC. Default: - Random zone.
         :param block_devices: Specifies how block devices are exposed to the instance. You can specify virtual devices and EBS volumes. Each instance that is launched has an associated root device volume, either an Amazon EBS volume or an instance store volume. You can use block device mappings to specify additional EBS volumes or instance store volumes to attach to an instance when it is launched. Default: - Uses the block device mapping of the AMI
+        :param credit_specification: Specifying the CPU credit type for burstable EC2 instance types (T2, T3, T3a, etc). The unlimited CPU credit option is not supported for T3 instances with a dedicated host. Default: - T2 instances are standard, while T3, T4g, and T3a instances are unlimited.
         :param detailed_monitoring: Whether "Detailed Monitoring" is enabled for this instance Keep in mind that Detailed Monitoring results in extra charges. Default: - false
         :param init: Apply the given CloudFormation Init configuration to the instance at startup. Default: - no CloudFormation init
         :param init_options: Use the given options for applying CloudFormation Init. Describes the configsets to use and the timeout to wait Default: - default options
@@ -72337,6 +72419,7 @@ class InstanceProps:
             check_type(argname="argument associate_public_ip_address", value=associate_public_ip_address, expected_type=type_hints["associate_public_ip_address"])
             check_type(argname="argument availability_zone", value=availability_zone, expected_type=type_hints["availability_zone"])
             check_type(argname="argument block_devices", value=block_devices, expected_type=type_hints["block_devices"])
+            check_type(argname="argument credit_specification", value=credit_specification, expected_type=type_hints["credit_specification"])
             check_type(argname="argument detailed_monitoring", value=detailed_monitoring, expected_type=type_hints["detailed_monitoring"])
             check_type(argname="argument init", value=init, expected_type=type_hints["init"])
             check_type(argname="argument init_options", value=init_options, expected_type=type_hints["init_options"])
@@ -72369,6 +72452,8 @@ class InstanceProps:
             self._values["availability_zone"] = availability_zone
         if block_devices is not None:
             self._values["block_devices"] = block_devices
+        if credit_specification is not None:
+            self._values["credit_specification"] = credit_specification
         if detailed_monitoring is not None:
             self._values["detailed_monitoring"] = detailed_monitoring
         if init is not None:
@@ -72481,6 +72566,17 @@ class InstanceProps:
         result = self._values.get("block_devices")
         return typing.cast(typing.Optional[typing.List[BlockDevice]], result)
 
+    @builtins.property
+    def credit_specification(self) -> typing.Optional[CpuCredits]:
+        '''Specifying the CPU credit type for burstable EC2 instance types (T2, T3, T3a, etc).
+
+        The unlimited CPU credit option is not supported for T3 instances with a dedicated host.
+
+        :default: - T2 instances are standard, while T3, T4g, and T3a instances are unlimited.
+        '''
+        result = self._values.get("credit_specification")
+        return typing.cast(typing.Optional[CpuCredits], result)
+
     @builtins.property
     def detailed_monitoring(self) -> typing.Optional[builtins.bool]:
         '''Whether "Detailed Monitoring" is enabled for this instance Keep in mind that Detailed Monitoring results in extra charges.
@@ -72935,17 +73031,18 @@ class InstanceType(
 
         # vpc: ec2.Vpc
         
+        
         cluster = docdb.DatabaseCluster(self, "Database",
             master_user=docdb.Login(
-                username="myuser",  # NOTE: 'admin' is reserved by DocumentDB
-                exclude_characters="\"@/:",  # optional, defaults to the set "\"@/" and is also used for eventually created rotations
-                secret_name="/myapp/mydocdb/masteruser"
+                username="myuser"
             ),
             instance_type=ec2.InstanceType.of(ec2.InstanceClass.MEMORY5, ec2.InstanceSize.LARGE),
             vpc_subnets=ec2.SubnetSelection(
                 subnet_type=ec2.SubnetType.PUBLIC
             ),
-            vpc=vpc
+            vpc=vpc,
+            removal_policy=RemovalPolicy.SNAPSHOT,
+            instance_removal_policy=RemovalPolicy.RETAIN
         )
     '''
 
@@ -72981,6 +73078,11 @@ class InstanceType(
             check_type(argname="argument instance_size", value=instance_size, expected_type=type_hints["instance_size"])
         return typing.cast("InstanceType", jsii.sinvoke(cls, "of", [instance_class, instance_size]))
 
+    @jsii.member(jsii_name="isBurstable")
+    def is_burstable(self) -> builtins.bool:
+        '''Return whether this instance type is a burstable instance type.'''
+        return typing.cast(builtins.bool, jsii.invoke(self, "isBurstable", []))
+
     @jsii.member(jsii_name="sameInstanceClassAs")
     def same_instance_class_as(self, other: "InstanceType") -> builtins.bool:
         '''
@@ -77945,6 +78047,7 @@ class NatInstanceImage(
     jsii_struct_bases=[],
     name_mapping={
         "instance_type": "instanceType",
+        "credit_specification": "creditSpecification",
         "default_allowed_traffic": "defaultAllowedTraffic",
         "key_name": "keyName",
         "key_pair": "keyPair",
@@ -77957,6 +78060,7 @@ class NatInstanceProps:
         self,
         *,
         instance_type: InstanceType,
+        credit_specification: typing.Optional[CpuCredits] = None,
         default_allowed_traffic: typing.Optional["NatTrafficDirection"] = None,
         key_name: typing.Optional[builtins.str] = None,
         key_pair: typing.Optional[IKeyPair] = None,
@@ -77966,6 +78070,7 @@ class NatInstanceProps:
         '''Properties for a NAT instance.
 
         :param instance_type: Instance type of the NAT instance.
+        :param credit_specification: Specifying the CPU credit type for burstable EC2 instance types (T2, T3, T3a, etc). The unlimited CPU credit option is not supported for T3 instances with dedicated host (``host``) tenancy. Default: - T2 instances are standard, while T3, T4g, and T3a instances are unlimited.
         :param default_allowed_traffic: Direction to allow all traffic through the NAT instance by default. By default, inbound and outbound traffic is allowed. If you set this to another value than INBOUND_AND_OUTBOUND, you must configure the NAT instance's security groups in another way, either by passing in a fully configured Security Group using the ``securityGroup`` property, or by configuring it using the ``.securityGroup`` or ``.connections`` members after passing the NAT Instance Provider to a Vpc. Default: NatTrafficDirection.INBOUND_AND_OUTBOUND
         :param key_name: (deprecated) Name of SSH keypair to grant access to instance. Default: - No SSH access will be possible.
         :param key_pair: The SSH keypair to grant access to the instance. Default: - No SSH access will be possible.
@@ -77991,6 +78096,7 @@ class NatInstanceProps:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__d7c7c717447859e1ccc181bc97f7752cc3f7fa7afaee4c3a4266eeac32c08643)
             check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
+            check_type(argname="argument credit_specification", value=credit_specification, expected_type=type_hints["credit_specification"])
             check_type(argname="argument default_allowed_traffic", value=default_allowed_traffic, expected_type=type_hints["default_allowed_traffic"])
             check_type(argname="argument key_name", value=key_name, expected_type=type_hints["key_name"])
             check_type(argname="argument key_pair", value=key_pair, expected_type=type_hints["key_pair"])
@@ -77999,6 +78105,8 @@ class NatInstanceProps:
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "instance_type": instance_type,
         }
+        if credit_specification is not None:
+            self._values["credit_specification"] = credit_specification
         if default_allowed_traffic is not None:
             self._values["default_allowed_traffic"] = default_allowed_traffic
         if key_name is not None:
@@ -78017,6 +78125,17 @@ class NatInstanceProps:
         assert result is not None, "Required property 'instance_type' is missing"
         return typing.cast(InstanceType, result)
 
+    @builtins.property
+    def credit_specification(self) -> typing.Optional[CpuCredits]:
+        '''Specifying the CPU credit type for burstable EC2 instance types (T2, T3, T3a, etc).
+
+        The unlimited CPU credit option is not supported for T3 instances with dedicated host (``host``) tenancy.
+
+        :default: - T2 instances are standard, while T3, T4g, and T3a instances are unlimited.
+        '''
+        result = self._values.get("credit_specification")
+        return typing.cast(typing.Optional[CpuCredits], result)
+
     @builtins.property
     def default_allowed_traffic(self) -> typing.Optional["NatTrafficDirection"]:
         '''Direction to allow all traffic through the NAT instance by default.
@@ -78110,17 +78229,14 @@ class NatProvider(
 
     Example::
 
-        # instance_type: ec2.InstanceType
-        
-        
-        provider = ec2.NatProvider.instance(
-            instance_type=instance_type,
-            default_allowed_traffic=ec2.NatTrafficDirection.OUTBOUND_ONLY
+        nat_instance_provider = ec2.NatProvider.instance(
+            instance_type=ec2.InstanceType.of(ec2.InstanceClass.T4G, ec2.InstanceSize.LARGE),
+            machine_image=ec2.AmazonLinuxImage(),
+            credit_specification=ec2.CpuCredits.UNLIMITED
         )
-        ec2.Vpc(self, "TheVPC",
-            nat_gateway_provider=provider
+        ec2.Vpc(self, "VPC",
+            nat_gateway_provider=nat_instance_provider
         )
-        provider.connections.allow_from(ec2.Peer.ipv4("1.2.3.4/8"), ec2.Port.tcp(80))
     '''
 
     def __init__(self) -> None:
@@ -78151,6 +78267,7 @@ class NatProvider(
         cls,
         *,
         instance_type: InstanceType,
+        credit_specification: typing.Optional[CpuCredits] = None,
         default_allowed_traffic: typing.Optional["NatTrafficDirection"] = None,
         key_name: typing.Optional[builtins.str] = None,
         key_pair: typing.Optional[IKeyPair] = None,
@@ -78166,6 +78283,7 @@ class NatProvider(
         your own NatProvider based on AutoScaling groups if you need that.
 
         :param instance_type: Instance type of the NAT instance.
+        :param credit_specification: Specifying the CPU credit type for burstable EC2 instance types (T2, T3, T3a, etc). The unlimited CPU credit option is not supported for T3 instances with dedicated host (``host``) tenancy. Default: - T2 instances are standard, while T3, T4g, and T3a instances are unlimited.
         :param default_allowed_traffic: Direction to allow all traffic through the NAT instance by default. By default, inbound and outbound traffic is allowed. If you set this to another value than INBOUND_AND_OUTBOUND, you must configure the NAT instance's security groups in another way, either by passing in a fully configured Security Group using the ``securityGroup`` property, or by configuring it using the ``.securityGroup`` or ``.connections`` members after passing the NAT Instance Provider to a Vpc. Default: NatTrafficDirection.INBOUND_AND_OUTBOUND
         :param key_name: (deprecated) Name of SSH keypair to grant access to instance. Default: - No SSH access will be possible.
         :param key_pair: The SSH keypair to grant access to the instance. Default: - No SSH access will be possible.
@@ -78176,6 +78294,7 @@ class NatProvider(
         '''
         props = NatInstanceProps(
             instance_type=instance_type,
+            credit_specification=credit_specification,
             default_allowed_traffic=default_allowed_traffic,
             key_name=key_name,
             key_pair=key_pair,
@@ -82597,16 +82716,18 @@ class SubnetSelection:
 
             # vpc: ec2.Vpc
             
-            cluster = rds.DatabaseCluster(self, "Database",
-                engine=rds.DatabaseClusterEngine.aurora_mysql(
-                    version=rds.AuroraMysqlEngineVersion.VER_3_03_0
+            
+            cluster = docdb.DatabaseCluster(self, "Database",
+                master_user=docdb.Login(
+                    username="myuser"
                 ),
-                instances=2,
-                instance_props=rds.InstanceProps(
-                    instance_type=ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE3, ec2.InstanceSize.SMALL),
-                    vpc_subnets=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PUBLIC),
-                    vpc=vpc
-                )
+                instance_type=ec2.InstanceType.of(ec2.InstanceClass.MEMORY5, ec2.InstanceSize.LARGE),
+                vpc_subnets=ec2.SubnetSelection(
+                    subnet_type=ec2.SubnetType.PUBLIC
+                ),
+                vpc=vpc,
+                removal_policy=RemovalPolicy.SNAPSHOT,
+                instance_removal_policy=RemovalPolicy.RETAIN
             )
         '''
         if __debug__:
@@ -90322,20 +90443,17 @@ class NatInstanceProvider(
 ):
     '''NAT provider which uses NAT Instances.
 
-    :exampleMetadata: lit=aws-ec2/test/integ.nat-instances.lit.ts infused
+    :exampleMetadata: infused
 
     Example::
 
-        # Configure the `natGatewayProvider` when defining a Vpc
-        nat_gateway_provider = ec2.NatProvider.instance(
-            instance_type=ec2.InstanceType("t3.small")
+        nat_instance_provider = ec2.NatProvider.instance(
+            instance_type=ec2.InstanceType.of(ec2.InstanceClass.T4G, ec2.InstanceSize.LARGE),
+            machine_image=ec2.AmazonLinuxImage(),
+            credit_specification=ec2.CpuCredits.UNLIMITED
         )
-        
-        vpc = ec2.Vpc(self, "MyVpc",
-            nat_gateway_provider=nat_gateway_provider,
-        
-            # The 'natGateways' parameter now controls the number of NAT instances
-            nat_gateways=2
+        ec2.Vpc(self, "VPC",
+            nat_gateway_provider=nat_instance_provider
         )
     '''
 
@@ -90343,6 +90461,7 @@ class NatInstanceProvider(
         self,
         *,
         instance_type: InstanceType,
+        credit_specification: typing.Optional[CpuCredits] = None,
         default_allowed_traffic: typing.Optional[NatTrafficDirection] = None,
         key_name: typing.Optional[builtins.str] = None,
         key_pair: typing.Optional[IKeyPair] = None,
@@ -90351,6 +90470,7 @@ class NatInstanceProvider(
     ) -> None:
         '''
         :param instance_type: Instance type of the NAT instance.
+        :param credit_specification: Specifying the CPU credit type for burstable EC2 instance types (T2, T3, T3a, etc). The unlimited CPU credit option is not supported for T3 instances with dedicated host (``host``) tenancy. Default: - T2 instances are standard, while T3, T4g, and T3a instances are unlimited.
         :param default_allowed_traffic: Direction to allow all traffic through the NAT instance by default. By default, inbound and outbound traffic is allowed. If you set this to another value than INBOUND_AND_OUTBOUND, you must configure the NAT instance's security groups in another way, either by passing in a fully configured Security Group using the ``securityGroup`` property, or by configuring it using the ``.securityGroup`` or ``.connections`` members after passing the NAT Instance Provider to a Vpc. Default: NatTrafficDirection.INBOUND_AND_OUTBOUND
         :param key_name: (deprecated) Name of SSH keypair to grant access to instance. Default: - No SSH access will be possible.
         :param key_pair: The SSH keypair to grant access to the instance. Default: - No SSH access will be possible.
@@ -90359,6 +90479,7 @@ class NatInstanceProvider(
         '''
         props = NatInstanceProps(
             instance_type=instance_type,
+            credit_specification=credit_specification,
             default_allowed_traffic=default_allowed_traffic,
             key_name=key_name,
             key_pair=key_pair,
@@ -91769,31 +91890,20 @@ class AmazonLinuxImage(
 
     Example::
 
-        sg = ec2.SecurityGroup.from_security_group_id(self, "FsxSecurityGroup", "{SECURITY-GROUP-ID}")
-        fs = fsx.LustreFileSystem.from_lustre_file_system_attributes(self, "FsxLustreFileSystem",
-            dns_name="{FILE-SYSTEM-DNS-NAME}",
-            file_system_id="{FILE-SYSTEM-ID}",
-            security_group=sg
-        )
+        # vpc: ec2.IVpc
         
-        vpc = ec2.Vpc.from_vpc_attributes(self, "Vpc",
-            availability_zones=["us-west-2a", "us-west-2b"],
-            public_subnet_ids=["{US-WEST-2A-SUBNET-ID}", "{US-WEST-2B-SUBNET-ID}"],
-            vpc_id="{VPC-ID}"
+        lb = elb.LoadBalancer(self, "LB",
+            vpc=vpc,
+            internet_facing=True
         )
         
-        inst = ec2.Instance(self, "inst",
-            instance_type=ec2.InstanceType.of(ec2.InstanceClass.T2, ec2.InstanceSize.LARGE),
-            machine_image=ec2.AmazonLinuxImage(
-                generation=ec2.AmazonLinuxGeneration.AMAZON_LINUX_2
-            ),
+        # instance to add as the target for load balancer.
+        instance = ec2.Instance(self, "targetInstance",
             vpc=vpc,
-            vpc_subnets=ec2.SubnetSelection(
-                subnet_type=ec2.SubnetType.PUBLIC
-            )
+            instance_type=ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE2, ec2.InstanceSize.MICRO),
+            machine_image=ec2.AmazonLinuxImage(generation=ec2.AmazonLinuxGeneration.AMAZON_LINUX_2)
         )
-        
-        fs.connections.allow_default_port_from(inst)
+        lb.add_target(elb.InstanceTarget(instance))
     '''
 
     def __init__(
@@ -102484,6 +102594,7 @@ def _typecheckingstub__5fdf31f5ae2497c7efcb56df558011698f38dc19cff28ca7a78a08a6d
     associate_public_ip_address: typing.Optional[builtins.bool] = None,
     availability_zone: typing.Optional[builtins.str] = None,
     block_devices: typing.Optional[typing.Sequence[typing.Union[BlockDevice, typing.Dict[builtins.str, typing.Any]]]] = None,
+    credit_specification: typing.Optional[CpuCredits] = None,
     detailed_monitoring: typing.Optional[builtins.bool] = None,
     init: typing.Optional[CloudFormationInit] = None,
     init_options: typing.Optional[typing.Union[ApplyCloudFormationInitOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -102533,6 +102644,7 @@ def _typecheckingstub__2d4dc63c6e6ee3ddc68d5dd204d8ac5ef1f1dec37a7b84d636225df1c
     associate_public_ip_address: typing.Optional[builtins.bool] = None,
     availability_zone: typing.Optional[builtins.str] = None,
     block_devices: typing.Optional[typing.Sequence[typing.Union[BlockDevice, typing.Dict[builtins.str, typing.Any]]]] = None,
+    credit_specification: typing.Optional[CpuCredits] = None,
     detailed_monitoring: typing.Optional[builtins.bool] = None,
     init: typing.Optional[CloudFormationInit] = None,
     init_options: typing.Optional[typing.Union[ApplyCloudFormationInitOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -102972,6 +103084,7 @@ def _typecheckingstub__addd8acc808c4965634311e54a7ffc0e3ebe29f2170d0d62750af3ad0
 def _typecheckingstub__d7c7c717447859e1ccc181bc97f7752cc3f7fa7afaee4c3a4266eeac32c08643(
     *,
     instance_type: InstanceType,
+    credit_specification: typing.Optional[CpuCredits] = None,
     default_allowed_traffic: typing.Optional[NatTrafficDirection] = None,
     key_name: typing.Optional[builtins.str] = None,
     key_pair: typing.Optional[IKeyPair] = None,