aws-cdk-lib 2.138.0__py3-none-any.whl → 2.139.0__py3-none-any.whl

aws_cdk/aws_efs/__init__.py

@@ -78,6 +78,42 @@ This is to prevent deployment failures due to cross-AZ configurations.
 
 ⚠️ When `oneZone` is enabled, `vpcSubnets` cannot be specified.
 
+### Replicating file systems
+
+You can create a replica of your EFS file system in the AWS Region of your preference.
+
+```python
+# vpc: ec2.Vpc
+
+
+# auto generate a regional replication destination file system
+efs.FileSystem(self, "RegionalReplicationFileSystem",
+    vpc=vpc,
+    replication_configuration=efs.ReplicationConfiguration.regional_file_system("us-west-2")
+)
+
+# auto generate a one zone replication destination file system
+efs.FileSystem(self, "OneZoneReplicationFileSystem",
+    vpc=vpc,
+    replication_configuration=efs.ReplicationConfiguration.one_zone_file_system("us-east-1", "us-east-1a")
+)
+
+destination_file_system = efs.FileSystem(self, "DestinationFileSystem",
+    vpc=vpc,
+    # set as the read-only file system for use as a replication destination
+    replication_overwrite_protection=efs.ReplicationOverwriteProtection.DISABLED
+)
+# specify the replication destination file system
+efs.FileSystem(self, "ReplicationFileSystem",
+    vpc=vpc,
+    replication_configuration=efs.ReplicationConfiguration.existing_file_system(destination_file_system)
+)
+```
+
+**Note**: EFS now supports only one replication destination and thus allows specifying just one `replicationConfiguration` for each file system.
+
+> Visit [Replicating file systems](https://docs.aws.amazon.com/efs/latest/ug/efs-replication.html) for more details.
+
 ### IAM to control file system data access
 
 You can use both IAM identity policies and resource policies to control client access to Amazon EFS resources in a way that is scalable and optimized for cloud environments. Using IAM, you can permit clients to perform specific actions on a file system, including read-only, write, and root access.
@@ -2936,6 +2972,57 @@ class CfnMountTargetProps:
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_efs.ExistingFileSystemProps",
+    jsii_struct_bases=[],
+    name_mapping={"destination_file_system": "destinationFileSystem"},
+)
+class ExistingFileSystemProps:
+    def __init__(self, *, destination_file_system: "IFileSystem") -> None:
+        '''Properties for configuring ReplicationConfiguration to replicate to an existing file system.
+
+        :param destination_file_system: The existing destination file system for the replication.
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_efs as efs
+            
+            # file_system: efs.FileSystem
+            
+            existing_file_system_props = efs.ExistingFileSystemProps(
+                destination_file_system=file_system
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d9c62bc4cd9ae1dbb417e0cd90508616e99886736d2ff0779e0c163618a47ea4)
+            check_type(argname="argument destination_file_system", value=destination_file_system, expected_type=type_hints["destination_file_system"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "destination_file_system": destination_file_system,
+        }
+
+    @builtins.property
+    def destination_file_system(self) -> "IFileSystem":
+        '''The existing destination file system for the replication.'''
+        result = self._values.get("destination_file_system")
+        assert result is not None, "Required property 'destination_file_system' is missing"
+        return typing.cast("IFileSystem", result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "ExistingFileSystemProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_efs.FileSystemAttributes",
     jsii_struct_bases=[],
@@ -3040,6 +3127,7 @@ class FileSystemAttributes:
         "performance_mode": "performanceMode",
         "provisioned_throughput_per_second": "provisionedThroughputPerSecond",
         "removal_policy": "removalPolicy",
+        "replication_configuration": "replicationConfiguration",
         "replication_overwrite_protection": "replicationOverwriteProtection",
         "security_group": "securityGroup",
         "throughput_mode": "throughputMode",
@@ -3064,6 +3152,7 @@ class FileSystemProps:
         performance_mode: typing.Optional["PerformanceMode"] = None,
         provisioned_throughput_per_second: typing.Optional[_Size_7b441c34] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+        replication_configuration: typing.Optional["ReplicationConfiguration"] = None,
         replication_overwrite_protection: typing.Optional["ReplicationOverwriteProtection"] = None,
         security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
         throughput_mode: typing.Optional["ThroughputMode"] = None,
@@ -3085,6 +3174,7 @@ class FileSystemProps:
         :param performance_mode: The performance mode that the file system will operate under. An Amazon EFS file system's performance mode can't be changed after the file system has been created. Updating this property will replace the file system. Default: PerformanceMode.GENERAL_PURPOSE
         :param provisioned_throughput_per_second: Provisioned throughput for the file system. This is a required property if the throughput mode is set to PROVISIONED. Must be at least 1MiB/s. Default: - none, errors out
         :param removal_policy: The removal policy to apply to the file system. Default: RemovalPolicy.RETAIN
+        :param replication_configuration: Replication configuration for the file system. Default: - no replication
         :param replication_overwrite_protection: Whether to enable the filesystem's replication overwrite protection or not. Set false if you want to create a read-only filesystem for use as a replication destination. Default: ReplicationOverwriteProtection.ENABLED
         :param security_group: Security Group to assign to this file system. Default: - creates new security group which allows all outbound traffic
         :param throughput_mode: Enum to mention the throughput mode of the file system. Default: ThroughputMode.BURSTING
@@ -3125,6 +3215,7 @@ class FileSystemProps:
             check_type(argname="argument performance_mode", value=performance_mode, expected_type=type_hints["performance_mode"])
             check_type(argname="argument provisioned_throughput_per_second", value=provisioned_throughput_per_second, expected_type=type_hints["provisioned_throughput_per_second"])
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
+            check_type(argname="argument replication_configuration", value=replication_configuration, expected_type=type_hints["replication_configuration"])
             check_type(argname="argument replication_overwrite_protection", value=replication_overwrite_protection, expected_type=type_hints["replication_overwrite_protection"])
             check_type(argname="argument security_group", value=security_group, expected_type=type_hints["security_group"])
             check_type(argname="argument throughput_mode", value=throughput_mode, expected_type=type_hints["throughput_mode"])
@@ -3157,6 +3248,8 @@ class FileSystemProps:
             self._values["provisioned_throughput_per_second"] = provisioned_throughput_per_second
         if removal_policy is not None:
             self._values["removal_policy"] = removal_policy
+        if replication_configuration is not None:
+            self._values["replication_configuration"] = replication_configuration
         if replication_overwrite_protection is not None:
             self._values["replication_overwrite_protection"] = replication_overwrite_protection
         if security_group is not None:
@@ -3304,6 +3397,15 @@ class FileSystemProps:
         result = self._values.get("removal_policy")
         return typing.cast(typing.Optional[_RemovalPolicy_9f93c814], result)
 
+    @builtins.property
+    def replication_configuration(self) -> typing.Optional["ReplicationConfiguration"]:
+        '''Replication configuration for the file system.
+
+        :default: - no replication
+        '''
+        result = self._values.get("replication_configuration")
+        return typing.cast(typing.Optional["ReplicationConfiguration"], result)
+
     @builtins.property
     def replication_overwrite_protection(
         self,
@@ -3628,6 +3730,98 @@ class LifecyclePolicy(enum.Enum):
     '''After 365 days of not being accessed.'''
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_efs.OneZoneFileSystemProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "availability_zone": "availabilityZone",
+        "region": "region",
+        "kms_key": "kmsKey",
+    },
+)
+class OneZoneFileSystemProps:
+    def __init__(
+        self,
+        *,
+        availability_zone: builtins.str,
+        region: builtins.str,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
+    ) -> None:
+        '''Properties for configuring ReplicationConfiguration to replicate to a new One Zone file system.
+
+        :param availability_zone: The availability zone name of the destination file system. One zone file system is used as the destination file system when this property is set.
+        :param region: The AWS Region in which the destination file system is located.
+        :param kms_key: AWS KMS key used to protect the encrypted file system. Default: - use service-managed KMS key for Amazon EFS
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_efs as efs
+            from aws_cdk import aws_kms as kms
+            
+            # key: kms.Key
+            
+            one_zone_file_system_props = efs.OneZoneFileSystemProps(
+                availability_zone="availabilityZone",
+                region="region",
+            
+                # the properties below are optional
+                kms_key=key
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8f4abdfa3c790e98b7a050abfbb55c767e657780c0e1b97249634ff7b43f00cd)
+            check_type(argname="argument availability_zone", value=availability_zone, expected_type=type_hints["availability_zone"])
+            check_type(argname="argument region", value=region, expected_type=type_hints["region"])
+            check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "availability_zone": availability_zone,
+            "region": region,
+        }
+        if kms_key is not None:
+            self._values["kms_key"] = kms_key
+
+    @builtins.property
+    def availability_zone(self) -> builtins.str:
+        '''The availability zone name of the destination file system.
+
+        One zone file system is used as the destination file system when this property is set.
+        '''
+        result = self._values.get("availability_zone")
+        assert result is not None, "Required property 'availability_zone' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def region(self) -> builtins.str:
+        '''The AWS Region in which the destination file system is located.'''
+        result = self._values.get("region")
+        assert result is not None, "Required property 'region' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''AWS KMS key used to protect the encrypted file system.
+
+        :default: - use service-managed KMS key for Amazon EFS
+        '''
+        result = self._values.get("kms_key")
+        return typing.cast(typing.Optional[_IKey_5f11635f], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "OneZoneFileSystemProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.enum(jsii_type="aws-cdk-lib.aws_efs.OutOfInfrequentAccessPolicy")
 class OutOfInfrequentAccessPolicy(enum.Enum):
     '''EFS Out Of Infrequent Access Policy, if a file is accessed given times, it will move back to primary storage class.
@@ -3791,6 +3985,339 @@ class PosixUser:
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_efs.RegionalFileSystemProps",
+    jsii_struct_bases=[],
+    name_mapping={"kms_key": "kmsKey", "region": "region"},
+)
+class RegionalFileSystemProps:
+    def __init__(
+        self,
+        *,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
+        region: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''Properties for configuring ReplicationConfiguration to replicate to a new Regional file system.
+
+        :param kms_key: AWS KMS key used to protect the encrypted file system. Default: - use service-managed KMS key for Amazon EFS
+        :param region: The AWS Region in which the destination file system is located. Default: - the region of the stack
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_efs as efs
+            from aws_cdk import aws_kms as kms
+            
+            # key: kms.Key
+            
+            regional_file_system_props = efs.RegionalFileSystemProps(
+                kms_key=key,
+                region="region"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8e5f31a5d9e5ce51bef26c5cc20973bf80024b4c7fba6d891072ccaf06a41be5)
+            check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
+            check_type(argname="argument region", value=region, expected_type=type_hints["region"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if kms_key is not None:
+            self._values["kms_key"] = kms_key
+        if region is not None:
+            self._values["region"] = region
+
+    @builtins.property
+    def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''AWS KMS key used to protect the encrypted file system.
+
+        :default: - use service-managed KMS key for Amazon EFS
+        '''
+        result = self._values.get("kms_key")
+        return typing.cast(typing.Optional[_IKey_5f11635f], result)
+
+    @builtins.property
+    def region(self) -> typing.Optional[builtins.str]:
+        '''The AWS Region in which the destination file system is located.
+
+        :default: - the region of the stack
+        '''
+        result = self._values.get("region")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "RegionalFileSystemProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+class ReplicationConfiguration(
+    metaclass=jsii.JSIIAbstractClass,
+    jsii_type="aws-cdk-lib.aws_efs.ReplicationConfiguration",
+):
+    '''EFS Replication Configuration.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # vpc: ec2.Vpc
+        
+        
+        # auto generate a regional replication destination file system
+        efs.FileSystem(self, "RegionalReplicationFileSystem",
+            vpc=vpc,
+            replication_configuration=efs.ReplicationConfiguration.regional_file_system("us-west-2")
+        )
+        
+        # auto generate a one zone replication destination file system
+        efs.FileSystem(self, "OneZoneReplicationFileSystem",
+            vpc=vpc,
+            replication_configuration=efs.ReplicationConfiguration.one_zone_file_system("us-east-1", "us-east-1a")
+        )
+        
+        destination_file_system = efs.FileSystem(self, "DestinationFileSystem",
+            vpc=vpc,
+            # set as the read-only file system for use as a replication destination
+            replication_overwrite_protection=efs.ReplicationOverwriteProtection.DISABLED
+        )
+        # specify the replication destination file system
+        efs.FileSystem(self, "ReplicationFileSystem",
+            vpc=vpc,
+            replication_configuration=efs.ReplicationConfiguration.existing_file_system(destination_file_system)
+        )
+    '''
+
+    def __init__(
+        self,
+        *,
+        availability_zone: typing.Optional[builtins.str] = None,
+        destination_file_system: typing.Optional[IFileSystem] = None,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
+        region: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param availability_zone: The availability zone name of the destination file system. One zone file system is used as the destination file system when this property is set. Default: - no availability zone is set
+        :param destination_file_system: The existing destination file system for the replication. Default: - None
+        :param kms_key: AWS KMS key used to protect the encrypted file system. Default: - use service-managed KMS key for Amazon EFS
+        :param region: The AWS Region in which the destination file system is located. Default: - the region of the stack
+        '''
+        options = ReplicationConfigurationProps(
+            availability_zone=availability_zone,
+            destination_file_system=destination_file_system,
+            kms_key=kms_key,
+            region=region,
+        )
+
+        jsii.create(self.__class__, self, [options])
+
+    @jsii.member(jsii_name="existingFileSystem")
+    @builtins.classmethod
+    def existing_file_system(
+        cls,
+        destination_file_system: IFileSystem,
+    ) -> "ReplicationConfiguration":
+        '''Specify the existing destination file system for the replication.
+
+        :param destination_file_system: The existing destination file system for the replication.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__34d3dea9ddf1aad07fb26f1da53ab80f3f9dd969fdc864369ca638a47d88e7a7)
+            check_type(argname="argument destination_file_system", value=destination_file_system, expected_type=type_hints["destination_file_system"])
+        return typing.cast("ReplicationConfiguration", jsii.sinvoke(cls, "existingFileSystem", [destination_file_system]))
+
+    @jsii.member(jsii_name="oneZoneFileSystem")
+    @builtins.classmethod
+    def one_zone_file_system(
+        cls,
+        region: builtins.str,
+        availability_zone: builtins.str,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
+    ) -> "ReplicationConfiguration":
+        '''Create a new one zone destination file system for the replication.
+
+        :param region: The AWS Region in which the specified availability zone belongs to.
+        :param availability_zone: The availability zone name of the destination file system.
+        :param kms_key: AWS KMS key used to protect the encrypted file system. Default is service-managed KMS key for Amazon EFS.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__03feaa91d7d2a591c01e42c87922247340eaff3051d1d46798e1cee3dd075c33)
+            check_type(argname="argument region", value=region, expected_type=type_hints["region"])
+            check_type(argname="argument availability_zone", value=availability_zone, expected_type=type_hints["availability_zone"])
+            check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
+        return typing.cast("ReplicationConfiguration", jsii.sinvoke(cls, "oneZoneFileSystem", [region, availability_zone, kms_key]))
+
+    @jsii.member(jsii_name="regionalFileSystem")
+    @builtins.classmethod
+    def regional_file_system(
+        cls,
+        region: typing.Optional[builtins.str] = None,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
+    ) -> "ReplicationConfiguration":
+        '''Create a new regional destination file system for the replication.
+
+        :param region: The AWS Region in which the destination file system is located. Default is the region of the stack.
+        :param kms_key: AWS KMS key used to protect the encrypted file system. Default is service-managed KMS key for Amazon EFS.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a8c205c27eb7c267e9a53c283b59ced307f90e800333dea1748fd1901d785236)
+            check_type(argname="argument region", value=region, expected_type=type_hints["region"])
+            check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
+        return typing.cast("ReplicationConfiguration", jsii.sinvoke(cls, "regionalFileSystem", [region, kms_key]))
+
+    @builtins.property
+    @jsii.member(jsii_name="availabilityZone")
+    def availability_zone(self) -> typing.Optional[builtins.str]:
+        '''The availability zone name of the destination file system.
+
+        One zone file system is used as the destination file system when this property is set.
+        '''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "availabilityZone"))
+
+    @builtins.property
+    @jsii.member(jsii_name="destinationFileSystem")
+    def destination_file_system(self) -> typing.Optional[IFileSystem]:
+        '''The existing destination file system for the replication.'''
+        return typing.cast(typing.Optional[IFileSystem], jsii.get(self, "destinationFileSystem"))
+
+    @builtins.property
+    @jsii.member(jsii_name="kmsKey")
+    def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''AWS KMS key used to protect the encrypted file system.'''
+        return typing.cast(typing.Optional[_IKey_5f11635f], jsii.get(self, "kmsKey"))
+
+    @builtins.property
+    @jsii.member(jsii_name="region")
+    def region(self) -> typing.Optional[builtins.str]:
+        '''The AWS Region in which the destination file system is located.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "region"))
+
+
+class _ReplicationConfigurationProxy(ReplicationConfiguration):
+    pass
+
+# Adding a "__jsii_proxy_class__(): typing.Type" function to the abstract class
+typing.cast(typing.Any, ReplicationConfiguration).__jsii_proxy_class__ = lambda : _ReplicationConfigurationProxy
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_efs.ReplicationConfigurationProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "availability_zone": "availabilityZone",
+        "destination_file_system": "destinationFileSystem",
+        "kms_key": "kmsKey",
+        "region": "region",
+    },
+)
+class ReplicationConfigurationProps:
+    def __init__(
+        self,
+        *,
+        availability_zone: typing.Optional[builtins.str] = None,
+        destination_file_system: typing.Optional[IFileSystem] = None,
+        kms_key: typing.Optional[_IKey_5f11635f] = None,
+        region: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''Properties for the ReplicationConfiguration.
+
+        :param availability_zone: The availability zone name of the destination file system. One zone file system is used as the destination file system when this property is set. Default: - no availability zone is set
+        :param destination_file_system: The existing destination file system for the replication. Default: - None
+        :param kms_key: AWS KMS key used to protect the encrypted file system. Default: - use service-managed KMS key for Amazon EFS
+        :param region: The AWS Region in which the destination file system is located. Default: - the region of the stack
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_efs as efs
+            from aws_cdk import aws_kms as kms
+            
+            # file_system: efs.FileSystem
+            # key: kms.Key
+            
+            replication_configuration_props = efs.ReplicationConfigurationProps(
+                availability_zone="availabilityZone",
+                destination_file_system=file_system,
+                kms_key=key,
+                region="region"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f4e59d29e2aee34149bd4bb57cf8b214cfb2a70fe199b76106b163c20aaeaec9)
+            check_type(argname="argument availability_zone", value=availability_zone, expected_type=type_hints["availability_zone"])
+            check_type(argname="argument destination_file_system", value=destination_file_system, expected_type=type_hints["destination_file_system"])
+            check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
+            check_type(argname="argument region", value=region, expected_type=type_hints["region"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if availability_zone is not None:
+            self._values["availability_zone"] = availability_zone
+        if destination_file_system is not None:
+            self._values["destination_file_system"] = destination_file_system
+        if kms_key is not None:
+            self._values["kms_key"] = kms_key
+        if region is not None:
+            self._values["region"] = region
+
+    @builtins.property
+    def availability_zone(self) -> typing.Optional[builtins.str]:
+        '''The availability zone name of the destination file system.
+
+        One zone file system is used as the destination file system when this property is set.
+
+        :default: - no availability zone is set
+        '''
+        result = self._values.get("availability_zone")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def destination_file_system(self) -> typing.Optional[IFileSystem]:
+        '''The existing destination file system for the replication.
+
+        :default: - None
+        '''
+        result = self._values.get("destination_file_system")
+        return typing.cast(typing.Optional[IFileSystem], result)
+
+    @builtins.property
+    def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
+        '''AWS KMS key used to protect the encrypted file system.
+
+        :default: - use service-managed KMS key for Amazon EFS
+        '''
+        result = self._values.get("kms_key")
+        return typing.cast(typing.Optional[_IKey_5f11635f], result)
+
+    @builtins.property
+    def region(self) -> typing.Optional[builtins.str]:
+        '''The AWS Region in which the destination file system is located.
+
+        :default: - the region of the stack
+        '''
+        result = self._values.get("region")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "ReplicationConfigurationProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.enum(jsii_type="aws-cdk-lib.aws_efs.ReplicationOverwriteProtection")
 class ReplicationOverwriteProtection(enum.Enum):
     '''The status of the file system's replication overwrite protection.
@@ -4010,6 +4537,7 @@ class FileSystem(
         performance_mode: typing.Optional[PerformanceMode] = None,
         provisioned_throughput_per_second: typing.Optional[_Size_7b441c34] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+        replication_configuration: typing.Optional[ReplicationConfiguration] = None,
         replication_overwrite_protection: typing.Optional[ReplicationOverwriteProtection] = None,
         security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
         throughput_mode: typing.Optional[ThroughputMode] = None,
@@ -4033,6 +4561,7 @@ class FileSystem(
         :param performance_mode: The performance mode that the file system will operate under. An Amazon EFS file system's performance mode can't be changed after the file system has been created. Updating this property will replace the file system. Default: PerformanceMode.GENERAL_PURPOSE
         :param provisioned_throughput_per_second: Provisioned throughput for the file system. This is a required property if the throughput mode is set to PROVISIONED. Must be at least 1MiB/s. Default: - none, errors out
         :param removal_policy: The removal policy to apply to the file system. Default: RemovalPolicy.RETAIN
+        :param replication_configuration: Replication configuration for the file system. Default: - no replication
         :param replication_overwrite_protection: Whether to enable the filesystem's replication overwrite protection or not. Set false if you want to create a read-only filesystem for use as a replication destination. Default: ReplicationOverwriteProtection.ENABLED
         :param security_group: Security Group to assign to this file system. Default: - creates new security group which allows all outbound traffic
         :param throughput_mode: Enum to mention the throughput mode of the file system. Default: ThroughputMode.BURSTING
@@ -4057,6 +4586,7 @@ class FileSystem(
             performance_mode=performance_mode,
             provisioned_throughput_per_second=provisioned_throughput_per_second,
             removal_policy=removal_policy,
+            replication_configuration=replication_configuration,
             replication_overwrite_protection=replication_overwrite_protection,
             security_group=security_group,
             throughput_mode=throughput_mode,
@@ -4239,15 +4769,20 @@ __all__ = [
     "CfnFileSystemProps",
     "CfnMountTarget",
     "CfnMountTargetProps",
+    "ExistingFileSystemProps",
     "FileSystem",
     "FileSystemAttributes",
     "FileSystemProps",
     "IAccessPoint",
     "IFileSystem",
     "LifecyclePolicy",
+    "OneZoneFileSystemProps",
     "OutOfInfrequentAccessPolicy",
     "PerformanceMode",
     "PosixUser",
+    "RegionalFileSystemProps",
+    "ReplicationConfiguration",
+    "ReplicationConfigurationProps",
     "ReplicationOverwriteProtection",
     "ThroughputMode",
 ]
@@ -4627,6 +5162,13 @@ def _typecheckingstub__f2ad126af1a9797276c238562f8185eb06a56da00a9b12a35504f9d72
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__d9c62bc4cd9ae1dbb417e0cd90508616e99886736d2ff0779e0c163618a47ea4(
+    *,
+    destination_file_system: IFileSystem,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__a7f9028e19d4f85ea9a53bb13e46bb5ac917443add6e7ec5e117fdc6136100b7(
     *,
     security_group: _ISecurityGroup_acf8a799,
@@ -4651,6 +5193,7 @@ def _typecheckingstub__a11d59607a7c01a190b2b0587733658cfcb8eddfb252f3c48abdc988b
     performance_mode: typing.Optional[PerformanceMode] = None,
     provisioned_throughput_per_second: typing.Optional[_Size_7b441c34] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+    replication_configuration: typing.Optional[ReplicationConfiguration] = None,
     replication_overwrite_protection: typing.Optional[ReplicationOverwriteProtection] = None,
     security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
     throughput_mode: typing.Optional[ThroughputMode] = None,
@@ -4685,6 +5228,15 @@ def _typecheckingstub__4057ba12ffe92e9bfbd1c90bf8a78538a6b12163670d7d94114f46441
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__8f4abdfa3c790e98b7a050abfbb55c767e657780c0e1b97249634ff7b43f00cd(
+    *,
+    availability_zone: builtins.str,
+    region: builtins.str,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c952f8c1704201f25c4d7df8b8a5c994569b8513be332681526a695abb83999b(
     *,
     gid: builtins.str,
@@ -4694,6 +5246,45 @@ def _typecheckingstub__c952f8c1704201f25c4d7df8b8a5c994569b8513be332681526a695ab
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__8e5f31a5d9e5ce51bef26c5cc20973bf80024b4c7fba6d891072ccaf06a41be5(
+    *,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
+    region: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__34d3dea9ddf1aad07fb26f1da53ab80f3f9dd969fdc864369ca638a47d88e7a7(
+    destination_file_system: IFileSystem,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__03feaa91d7d2a591c01e42c87922247340eaff3051d1d46798e1cee3dd075c33(
+    region: builtins.str,
+    availability_zone: builtins.str,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a8c205c27eb7c267e9a53c283b59ced307f90e800333dea1748fd1901d785236(
+    region: typing.Optional[builtins.str] = None,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f4e59d29e2aee34149bd4bb57cf8b214cfb2a70fe199b76106b163c20aaeaec9(
+    *,
+    availability_zone: typing.Optional[builtins.str] = None,
+    destination_file_system: typing.Optional[IFileSystem] = None,
+    kms_key: typing.Optional[_IKey_5f11635f] = None,
+    region: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__b4cd5acd3aac2348517085a4188b85a5e2329da4dc443644482b9153e1014bfa(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -4742,6 +5333,7 @@ def _typecheckingstub__fe7547e76a3f3502ef6c67d1cc851b25d13fe1b4b980d3bccee8eae2f
     performance_mode: typing.Optional[PerformanceMode] = None,
     provisioned_throughput_per_second: typing.Optional[_Size_7b441c34] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+    replication_configuration: typing.Optional[ReplicationConfiguration] = None,
     replication_overwrite_protection: typing.Optional[ReplicationOverwriteProtection] = None,
     security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
     throughput_mode: typing.Optional[ThroughputMode] = None,