aws-cdk-lib 2.139.0__py3-none-any.whl → 2.140.0__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -1585,6 +1585,23 @@ ec2.CloudFormationInit.from_elements(
     ))
 ```
 
+You can use the `environmentVariables` or `environmentFiles` parameters to specify environment variables
+for your services:
+
+```python
+ec2.InitConfig([
+    ec2.InitFile.from_string("/myvars.env", "VAR_FROM_FILE=\"VAR_FROM_FILE\""),
+    ec2.InitService.systemd_config_file("myapp",
+        command="/usr/bin/python3 -m http.server 8080",
+        cwd="/var/www/html",
+        environment_variables={
+            "MY_VAR": "MY_VAR"
+        },
+        environment_files=["/myvars.env"]
+    )
+])
+```
+
 ### Bastion Hosts
 
 A bastion host functions as an instance used to access servers and resources in a VPC without open up the complete VPC on a network level.
@@ -1684,6 +1701,30 @@ ec2.Instance(self, "Instance",
 )
 ```
 
+#### EBS Optimized Instances
+
+An Amazon EBS–optimized instance uses an optimized configuration stack and provides additional, dedicated capacity for Amazon EBS I/O. This optimization provides the best performance for your EBS volumes by minimizing contention between Amazon EBS I/O and other traffic from your instance.
+
+Depending on the instance type, this features is enabled by default while others require explicit activation. Please refer to the [documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html) for details.
+
+```python
+# vpc: ec2.Vpc
+# instance_type: ec2.InstanceType
+# machine_image: ec2.IMachineImage
+
+
+ec2.Instance(self, "Instance",
+    vpc=vpc,
+    instance_type=instance_type,
+    machine_image=machine_image,
+    ebs_optimized=True,
+    block_devices=[ec2.BlockDevice(
+        device_name="/dev/xvda",
+        volume=ec2.BlockDeviceVolume.ebs(8)
+    )]
+)
+```
+
 ### Volumes
 
 Whereas a `BlockDeviceVolume` is an EBS volume that is created and destroyed as part of the creation and destruction of a specific instance. A `Volume` is for when you want an EBS volume separate from any particular instance. A `Volume` is an EBS block device that can be attached to, or detached from, any instance at any time. Some types of `Volume`s can also be attached to multiple instances at the same time to allow you to have shared storage between those instances.
@@ -5219,17 +5260,11 @@ class BlockDeviceVolume(
             vpc=vpc,
             instance_type=instance_type,
             machine_image=machine_image,
-        
-            # ...
-        
+            ebs_optimized=True,
             block_devices=[ec2.BlockDevice(
-                device_name="/dev/sda1",
-                volume=ec2.BlockDeviceVolume.ebs(50)
-            ), ec2.BlockDevice(
-                device_name="/dev/sdm",
-                volume=ec2.BlockDeviceVolume.ebs(100)
-            )
-            ]
+                device_name="/dev/xvda",
+                volume=ec2.BlockDeviceVolume.ebs(8)
+            )]
         )
     '''
 
@@ -5267,7 +5302,7 @@ class BlockDeviceVolume(
         :param kms_key: The ARN of the AWS Key Management Service (AWS KMS) CMK used for encryption. You have to ensure that the KMS CMK has the correct permissions to be used by the service launching the ec2 instances. Default: - If encrypted is true, the default aws/ebs KMS key will be used.
         :param delete_on_termination: Indicates whether to delete the volume when the instance is terminated. Default: - true for Amazon EC2 Auto Scaling, false otherwise (e.g. EBS)
         :param iops: The number of I/O operations per second (IOPS) to provision for the volume. Must only be set for ``volumeType``: ``EbsDeviceVolumeType.IO1`` The maximum ratio of IOPS to volume size (in GiB) is 50:1, so for 5,000 provisioned IOPS, you need at least 100 GiB storage on the volume. Default: - none, required for ``EbsDeviceVolumeType.IO1``
-        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GP2``
+        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD`` or ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3`` if ``@aws-cdk/aws-ec2:ebsDefaultGp3Volume`` is enabled.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e34634be08d573bd7d4eca032a2a66e619c889f2b51e62608777ae0db2639e6a)
@@ -5299,7 +5334,7 @@ class BlockDeviceVolume(
         :param volume_size: The volume size, in Gibibytes (GiB). If you specify volumeSize, it must be equal or greater than the size of the snapshot. Default: - The snapshot size
         :param delete_on_termination: Indicates whether to delete the volume when the instance is terminated. Default: - true for Amazon EC2 Auto Scaling, false otherwise (e.g. EBS)
         :param iops: The number of I/O operations per second (IOPS) to provision for the volume. Must only be set for ``volumeType``: ``EbsDeviceVolumeType.IO1`` The maximum ratio of IOPS to volume size (in GiB) is 50:1, so for 5,000 provisioned IOPS, you need at least 100 GiB storage on the volume. Default: - none, required for ``EbsDeviceVolumeType.IO1``
-        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GP2``
+        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD`` or ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3`` if ``@aws-cdk/aws-ec2:ebsDefaultGp3Volume`` is enabled.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ce9e60bc1da1c6f1d133c0cfaad0c5984d2f7a428c12f02640d8f31c6eab041e)
@@ -19261,7 +19296,7 @@ class CfnInstance(
         :param ipv6_addresses: The IPv6 addresses from the range of the subnet to associate with the primary network interface. You cannot specify this option and the option to assign a number of IPv6 addresses in the same request. You cannot specify this option if you've specified a minimum number of instances to launch. You cannot specify this option and the network interfaces option in the same request.
         :param kernel_id: The ID of the kernel. .. epigraph:: We recommend that you use PV-GRUB instead of kernels and RAM disks. For more information, see `PV-GRUB <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/UserProvidedkernels.html>`_ in the *Amazon EC2 User Guide* .
         :param key_name: The name of the key pair. You can create a key pair using `CreateKeyPair <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateKeyPair.html>`_ or `ImportKeyPair <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ImportKeyPair.html>`_ . .. epigraph:: If you do not specify a key pair, you can't connect to the instance unless you choose an AMI that is configured to allow users another way to log in.
-        :param launch_template: The launch template to use to launch the instances. Any parameters that you specify in the AWS CloudFormation template override the same parameters in the launch template. You can specify either the name or ID of a launch template, but not both.
+        :param launch_template: The launch template. Any additional parameters that you specify for the new instance overwrite the corresponding parameters included in the launch template.
         :param license_specifications: The license configurations.
         :param monitoring: Specifies whether detailed monitoring is enabled for the instance. Specify ``true`` to enable detailed monitoring. Otherwise, basic monitoring is enabled. For more information about detailed monitoring, see `Enable or turn off detailed monitoring for your instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-cloudwatch-new.html>`_ in the *Amazon EC2 User Guide* .
         :param network_interfaces: The network interfaces to associate with the instance. .. epigraph:: If you use this property to point to a network interface, you must terminate the original interface before attaching a new one to allow the update of the instance to succeed. If this resource has a public IP address and is also in a VPC that is defined in the same template, you must use the `DependsOn Attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html>`_ to declare a dependency on the VPC-gateway attachment.
@@ -19790,7 +19825,7 @@ class CfnInstance(
     def launch_template(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInstance.LaunchTemplateSpecificationProperty"]]:
-        '''The launch template to use to launch the instances.'''
+        '''The launch template.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInstance.LaunchTemplateSpecificationProperty"]], jsii.get(self, "launchTemplate"))
 
     @launch_template.setter
@@ -21002,13 +21037,11 @@ class CfnInstance(
             - The ID or the name of the launch template, but not both.
             - The version of the launch template.
 
-            For information about creating a launch template, see `AWS::EC2::LaunchTemplate <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html>`_ and `Create a launch template <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html#create-launch-template>`_ in the *Amazon EC2 User Guide* .
+            For information about creating a launch template, see `AWS::EC2::LaunchTemplate <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html>`_ and `Create a launch template <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html#create-launch-template>`_ in the *Amazon EC2 User Guide* . For example launch templates, see the `Examples <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2-launchtemplate--examples>`_ for ``AWS::EC2::LaunchTemplate`` .
 
-            For example launch templates, see the `Examples <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2-launchtemplate--examples>`_ for ``AWS::EC2::LaunchTemplate`` .
-
-            :param version: The version number of the launch template. Specifying ``$Latest`` or ``$Default`` for the template version number is not supported. However, you can specify ``LatestVersionNumber`` or ``DefaultVersionNumber`` using the ``Fn::GetAtt`` intrinsic function. For more information, see `Fn::GetAtt <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2-launchtemplate-return-values-fn--getatt>`_ .
-            :param launch_template_id: The ID of the launch template. You must specify the ``LaunchTemplateId`` or the ``LaunchTemplateName`` , but not both.
-            :param launch_template_name: The name of the launch template. You must specify the ``LaunchTemplateName`` or the ``LaunchTemplateId`` , but not both.
+            :param version: The version number of the launch template. You must specify this property. To specify the default version of the template, use the ``Fn::GetAtt`` intrinsic function to retrieve the ``DefaultVersionNumber`` attribute of the launch template. To specify the latest version of the template, use ``Fn::GetAtt`` to retrieve the ``LatestVersionNumber`` attribute. For more information, see `AWS::EC2:LaunchTemplate return values for Fn::GetAtt <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2-launchtemplate-return-values-fn--getatt>`_ .
+            :param launch_template_id: The ID of the launch template. You must specify either the launch template ID or the launch template name, but not both.
+            :param launch_template_name: The name of the launch template. You must specify either the launch template ID or the launch template name, but not both.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance-launchtemplatespecification.html
             :exampleMetadata: fixture=_generated
@@ -21042,9 +21075,9 @@ class CfnInstance(
 
         @builtins.property
         def version(self) -> builtins.str:
-            '''The version number of the launch template.
+            '''The version number of the launch template. You must specify this property.
 
-            Specifying ``$Latest`` or ``$Default`` for the template version number is not supported. However, you can specify ``LatestVersionNumber`` or ``DefaultVersionNumber`` using the ``Fn::GetAtt`` intrinsic function. For more information, see `Fn::GetAtt <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2-launchtemplate-return-values-fn--getatt>`_ .
+            To specify the default version of the template, use the ``Fn::GetAtt`` intrinsic function to retrieve the ``DefaultVersionNumber`` attribute of the launch template. To specify the latest version of the template, use ``Fn::GetAtt`` to retrieve the ``LatestVersionNumber`` attribute. For more information, see `AWS::EC2:LaunchTemplate return values for Fn::GetAtt <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2-launchtemplate-return-values-fn--getatt>`_ .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance-launchtemplatespecification.html#cfn-ec2-instance-launchtemplatespecification-version
             '''
@@ -21056,7 +21089,7 @@ class CfnInstance(
         def launch_template_id(self) -> typing.Optional[builtins.str]:
             '''The ID of the launch template.
 
-            You must specify the ``LaunchTemplateId`` or the ``LaunchTemplateName`` , but not both.
+            You must specify either the launch template ID or the launch template name, but not both.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance-launchtemplatespecification.html#cfn-ec2-instance-launchtemplatespecification-launchtemplateid
             '''
@@ -21067,7 +21100,7 @@ class CfnInstance(
         def launch_template_name(self) -> typing.Optional[builtins.str]:
             '''The name of the launch template.
 
-            You must specify the ``LaunchTemplateName`` or the ``LaunchTemplateId`` , but not both.
+            You must specify either the launch template ID or the launch template name, but not both.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance-launchtemplatespecification.html#cfn-ec2-instance-launchtemplatespecification-launchtemplatename
             '''
@@ -22243,7 +22276,7 @@ class CfnInstanceProps:
         :param ipv6_addresses: The IPv6 addresses from the range of the subnet to associate with the primary network interface. You cannot specify this option and the option to assign a number of IPv6 addresses in the same request. You cannot specify this option if you've specified a minimum number of instances to launch. You cannot specify this option and the network interfaces option in the same request.
         :param kernel_id: The ID of the kernel. .. epigraph:: We recommend that you use PV-GRUB instead of kernels and RAM disks. For more information, see `PV-GRUB <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/UserProvidedkernels.html>`_ in the *Amazon EC2 User Guide* .
         :param key_name: The name of the key pair. You can create a key pair using `CreateKeyPair <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateKeyPair.html>`_ or `ImportKeyPair <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ImportKeyPair.html>`_ . .. epigraph:: If you do not specify a key pair, you can't connect to the instance unless you choose an AMI that is configured to allow users another way to log in.
-        :param launch_template: The launch template to use to launch the instances. Any parameters that you specify in the AWS CloudFormation template override the same parameters in the launch template. You can specify either the name or ID of a launch template, but not both.
+        :param launch_template: The launch template. Any additional parameters that you specify for the new instance overwrite the corresponding parameters included in the launch template.
         :param license_specifications: The license configurations.
         :param monitoring: Specifies whether detailed monitoring is enabled for the instance. Specify ``true`` to enable detailed monitoring. Otherwise, basic monitoring is enabled. For more information about detailed monitoring, see `Enable or turn off detailed monitoring for your instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-cloudwatch-new.html>`_ in the *Amazon EC2 User Guide* .
         :param network_interfaces: The network interfaces to associate with the instance. .. epigraph:: If you use this property to point to a network interface, you must terminate the original interface before attaching a new one to allow the update of the instance to succeed. If this resource has a public IP address and is also in a VPC that is defined in the same template, you must use the `DependsOn Attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html>`_ to declare a dependency on the VPC-gateway attachment.
@@ -22809,9 +22842,9 @@ class CfnInstanceProps:
     def launch_template(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnInstance.LaunchTemplateSpecificationProperty]]:
-        '''The launch template to use to launch the instances.
+        '''The launch template.
 
-        Any parameters that you specify in the AWS CloudFormation template override the same parameters in the launch template. You can specify either the name or ID of a launch template, but not both.
+        Any additional parameters that you specify for the new instance overwrite the corresponding parameters included in the launch template.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-instance.html#cfn-ec2-instance-launchtemplate
         '''
@@ -23579,7 +23612,7 @@ class CfnLaunchTemplate(
     The minimum required properties for specifying a launch template are as follows:
 
     - You must specify at least one property for the launch template data.
-    - You do not need to specify a name for the launch template. If you do not specify a name, AWS CloudFormation creates the name for you.
+    - You can optionally specify a name for the launch template. If you do not specify a name, AWS CloudFormation creates a name for you.
 
     A launch template can contain some or all of the configuration information to launch an instance. When you launch an instance using a launch template, instance properties that are not specified in the launch template use default values, except the ``ImageId`` property, which has no default value. If you do not specify an AMI ID for the launch template ``ImageId`` property, you must specify an AMI ID for the instance ``ImageId`` property.
 
@@ -54514,14 +54547,6 @@ class CfnTransitGatewayRouteTablePropagation(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
-    @builtins.property
-    @jsii.member(jsii_name="attrId")
-    def attr_id(self) -> builtins.str:
-        '''
-        :cloudformationAttribute: Id
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrId"))
-
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -65791,7 +65816,7 @@ class EbsDeviceOptionsBase:
 
         :param delete_on_termination: Indicates whether to delete the volume when the instance is terminated. Default: - true for Amazon EC2 Auto Scaling, false otherwise (e.g. EBS)
         :param iops: The number of I/O operations per second (IOPS) to provision for the volume. Must only be set for ``volumeType``: ``EbsDeviceVolumeType.IO1`` The maximum ratio of IOPS to volume size (in GiB) is 50:1, so for 5,000 provisioned IOPS, you need at least 100 GiB storage on the volume. Default: - none, required for ``EbsDeviceVolumeType.IO1``
-        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GP2``
+        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD`` or ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3`` if ``@aws-cdk/aws-ec2:ebsDefaultGp3Volume`` is enabled.
 
         :exampleMetadata: fixture=_generated
 
@@ -65849,7 +65874,10 @@ class EbsDeviceOptionsBase:
     def volume_type(self) -> typing.Optional["EbsDeviceVolumeType"]:
         '''The EBS volume type.
 
-        :default: ``EbsDeviceVolumeType.GP2``
+        :default:
+
+        ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD`` or ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3`` if
+        ``@aws-cdk/aws-ec2:ebsDefaultGp3Volume`` is enabled.
 
         :see: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html
         '''
@@ -65891,7 +65919,7 @@ class EbsDeviceSnapshotOptions(EbsDeviceOptionsBase):
 
         :param delete_on_termination: Indicates whether to delete the volume when the instance is terminated. Default: - true for Amazon EC2 Auto Scaling, false otherwise (e.g. EBS)
         :param iops: The number of I/O operations per second (IOPS) to provision for the volume. Must only be set for ``volumeType``: ``EbsDeviceVolumeType.IO1`` The maximum ratio of IOPS to volume size (in GiB) is 50:1, so for 5,000 provisioned IOPS, you need at least 100 GiB storage on the volume. Default: - none, required for ``EbsDeviceVolumeType.IO1``
-        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GP2``
+        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD`` or ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3`` if ``@aws-cdk/aws-ec2:ebsDefaultGp3Volume`` is enabled.
         :param volume_size: The volume size, in Gibibytes (GiB). If you specify volumeSize, it must be equal or greater than the size of the snapshot. Default: - The snapshot size
 
         :exampleMetadata: fixture=_generated
@@ -65954,7 +65982,10 @@ class EbsDeviceSnapshotOptions(EbsDeviceOptionsBase):
     def volume_type(self) -> typing.Optional["EbsDeviceVolumeType"]:
         '''The EBS volume type.
 
-        :default: ``EbsDeviceVolumeType.GP2``
+        :default:
+
+        ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD`` or ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3`` if
+        ``@aws-cdk/aws-ec2:ebsDefaultGp3Volume`` is enabled.
 
         :see: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html
         '''
@@ -71208,6 +71239,8 @@ class InitService(
         after_network: typing.Optional[builtins.bool] = None,
         cwd: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        environment_files: typing.Optional[typing.Sequence[builtins.str]] = None,
+        environment_variables: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         group: typing.Optional[builtins.str] = None,
         keep_running: typing.Optional[builtins.bool] = None,
         user: typing.Optional[builtins.str] = None,
@@ -71227,6 +71260,8 @@ class InitService(
         :param after_network: Start the service after the networking part of the OS comes up. Default: true
         :param cwd: The working directory for the command. Default: Root directory or home directory of specified user
         :param description: A description of this service. Default: - No description
+        :param environment_files: Loads environment variables from files when the process is running. Must use absolute paths. Default: - No environment files
+        :param environment_variables: Environment variables to load when the process is running. Default: - No environment variables set
         :param group: The group to execute the process under. Default: root
         :param keep_running: Keep the process running all the time. Restarts the process when it exits for any reason other than the machine shutting down. Default: true
         :param user: The user to execute the process under. Default: root
@@ -71239,6 +71274,8 @@ class InitService(
             after_network=after_network,
             cwd=cwd,
             description=description,
+            environment_files=environment_files,
+            environment_variables=environment_variables,
             group=group,
             keep_running=keep_running,
             user=user,
@@ -71942,6 +71979,7 @@ class Instance(
         block_devices: typing.Optional[typing.Sequence[typing.Union[BlockDevice, typing.Dict[builtins.str, typing.Any]]]] = None,
         credit_specification: typing.Optional[CpuCredits] = None,
         detailed_monitoring: typing.Optional[builtins.bool] = None,
+        ebs_optimized: typing.Optional[builtins.bool] = None,
         init: typing.Optional[CloudFormationInit] = None,
         init_options: typing.Optional[typing.Union[ApplyCloudFormationInitOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         instance_name: typing.Optional[builtins.str] = None,
@@ -71972,6 +72010,7 @@ class Instance(
         :param block_devices: Specifies how block devices are exposed to the instance. You can specify virtual devices and EBS volumes. Each instance that is launched has an associated root device volume, either an Amazon EBS volume or an instance store volume. You can use block device mappings to specify additional EBS volumes or instance store volumes to attach to an instance when it is launched. Default: - Uses the block device mapping of the AMI
         :param credit_specification: Specifying the CPU credit type for burstable EC2 instance types (T2, T3, T3a, etc). The unlimited CPU credit option is not supported for T3 instances with a dedicated host. Default: - T2 instances are standard, while T3, T4g, and T3a instances are unlimited.
         :param detailed_monitoring: Whether "Detailed Monitoring" is enabled for this instance Keep in mind that Detailed Monitoring results in extra charges. Default: - false
+        :param ebs_optimized: Indicates whether the instance is optimized for Amazon EBS I/O. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal Amazon EBS I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS-optimized instance. Default: false
         :param init: Apply the given CloudFormation Init configuration to the instance at startup. Default: - no CloudFormation init
         :param init_options: Use the given options for applying CloudFormation Init. Describes the configsets to use and the timeout to wait Default: - default options
         :param instance_name: The name of the instance. Default: - CDK generated name
@@ -72004,6 +72043,7 @@ class Instance(
             block_devices=block_devices,
             credit_specification=credit_specification,
             detailed_monitoring=detailed_monitoring,
+            ebs_optimized=ebs_optimized,
             init=init,
             init_options=init_options,
             instance_name=instance_name,
@@ -72735,6 +72775,7 @@ class InstanceInitiatedShutdownBehavior(enum.Enum):
         "block_devices": "blockDevices",
         "credit_specification": "creditSpecification",
         "detailed_monitoring": "detailedMonitoring",
+        "ebs_optimized": "ebsOptimized",
         "init": "init",
         "init_options": "initOptions",
         "instance_name": "instanceName",
@@ -72767,6 +72808,7 @@ class InstanceProps:
         block_devices: typing.Optional[typing.Sequence[typing.Union[BlockDevice, typing.Dict[builtins.str, typing.Any]]]] = None,
         credit_specification: typing.Optional[CpuCredits] = None,
         detailed_monitoring: typing.Optional[builtins.bool] = None,
+        ebs_optimized: typing.Optional[builtins.bool] = None,
         init: typing.Optional[CloudFormationInit] = None,
         init_options: typing.Optional[typing.Union[ApplyCloudFormationInitOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         instance_name: typing.Optional[builtins.str] = None,
@@ -72796,6 +72838,7 @@ class InstanceProps:
         :param block_devices: Specifies how block devices are exposed to the instance. You can specify virtual devices and EBS volumes. Each instance that is launched has an associated root device volume, either an Amazon EBS volume or an instance store volume. You can use block device mappings to specify additional EBS volumes or instance store volumes to attach to an instance when it is launched. Default: - Uses the block device mapping of the AMI
         :param credit_specification: Specifying the CPU credit type for burstable EC2 instance types (T2, T3, T3a, etc). The unlimited CPU credit option is not supported for T3 instances with a dedicated host. Default: - T2 instances are standard, while T3, T4g, and T3a instances are unlimited.
         :param detailed_monitoring: Whether "Detailed Monitoring" is enabled for this instance Keep in mind that Detailed Monitoring results in extra charges. Default: - false
+        :param ebs_optimized: Indicates whether the instance is optimized for Amazon EBS I/O. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal Amazon EBS I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS-optimized instance. Default: false
         :param init: Apply the given CloudFormation Init configuration to the instance at startup. Default: - no CloudFormation init
         :param init_options: Use the given options for applying CloudFormation Init. Describes the configsets to use and the timeout to wait Default: - default options
         :param instance_name: The name of the instance. Default: - CDK generated name
@@ -72848,6 +72891,7 @@ class InstanceProps:
             check_type(argname="argument block_devices", value=block_devices, expected_type=type_hints["block_devices"])
             check_type(argname="argument credit_specification", value=credit_specification, expected_type=type_hints["credit_specification"])
             check_type(argname="argument detailed_monitoring", value=detailed_monitoring, expected_type=type_hints["detailed_monitoring"])
+            check_type(argname="argument ebs_optimized", value=ebs_optimized, expected_type=type_hints["ebs_optimized"])
             check_type(argname="argument init", value=init, expected_type=type_hints["init"])
             check_type(argname="argument init_options", value=init_options, expected_type=type_hints["init_options"])
             check_type(argname="argument instance_name", value=instance_name, expected_type=type_hints["instance_name"])
@@ -72883,6 +72927,8 @@ class InstanceProps:
             self._values["credit_specification"] = credit_specification
         if detailed_monitoring is not None:
             self._values["detailed_monitoring"] = detailed_monitoring
+        if ebs_optimized is not None:
+            self._values["ebs_optimized"] = ebs_optimized
         if init is not None:
             self._values["init"] = init
         if init_options is not None:
@@ -73015,6 +73061,19 @@ class InstanceProps:
         result = self._values.get("detailed_monitoring")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def ebs_optimized(self) -> typing.Optional[builtins.bool]:
+        '''Indicates whether the instance is optimized for Amazon EBS I/O.
+
+        This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal Amazon EBS I/O performance.
+        This optimization isn't available with all instance types.
+        Additional usage charges apply when using an EBS-optimized instance.
+
+        :default: false
+        '''
+        result = self._values.get("ebs_optimized")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def init(self) -> typing.Optional[CloudFormationInit]:
         '''Apply the given CloudFormation Init configuration to the instance at startup.
@@ -83954,6 +84013,8 @@ class SubnetType(enum.Enum):
         "after_network": "afterNetwork",
         "cwd": "cwd",
         "description": "description",
+        "environment_files": "environmentFiles",
+        "environment_variables": "environmentVariables",
         "group": "group",
         "keep_running": "keepRunning",
         "user": "user",
@@ -83967,6 +84028,8 @@ class SystemdConfigFileOptions:
         after_network: typing.Optional[builtins.bool] = None,
         cwd: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        environment_files: typing.Optional[typing.Sequence[builtins.str]] = None,
+        environment_variables: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         group: typing.Optional[builtins.str] = None,
         keep_running: typing.Optional[builtins.bool] = None,
         user: typing.Optional[builtins.str] = None,
@@ -83977,6 +84040,8 @@ class SystemdConfigFileOptions:
         :param after_network: Start the service after the networking part of the OS comes up. Default: true
         :param cwd: The working directory for the command. Default: Root directory or home directory of specified user
         :param description: A description of this service. Default: - No description
+        :param environment_files: Loads environment variables from files when the process is running. Must use absolute paths. Default: - No environment files
+        :param environment_variables: Environment variables to load when the process is running. Default: - No environment variables set
         :param group: The group to execute the process under. Default: root
         :param keep_running: Keep the process running all the time. Restarts the process when it exits for any reason other than the machine shutting down. Default: true
         :param user: The user to execute the process under. Default: root
@@ -84014,6 +84079,8 @@ class SystemdConfigFileOptions:
             check_type(argname="argument after_network", value=after_network, expected_type=type_hints["after_network"])
             check_type(argname="argument cwd", value=cwd, expected_type=type_hints["cwd"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument environment_files", value=environment_files, expected_type=type_hints["environment_files"])
+            check_type(argname="argument environment_variables", value=environment_variables, expected_type=type_hints["environment_variables"])
             check_type(argname="argument group", value=group, expected_type=type_hints["group"])
             check_type(argname="argument keep_running", value=keep_running, expected_type=type_hints["keep_running"])
             check_type(argname="argument user", value=user, expected_type=type_hints["user"])
@@ -84026,6 +84093,10 @@ class SystemdConfigFileOptions:
             self._values["cwd"] = cwd
         if description is not None:
             self._values["description"] = description
+        if environment_files is not None:
+            self._values["environment_files"] = environment_files
+        if environment_variables is not None:
+            self._values["environment_variables"] = environment_variables
         if group is not None:
             self._values["group"] = group
         if keep_running is not None:
@@ -84067,6 +84138,28 @@ class SystemdConfigFileOptions:
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def environment_files(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''Loads environment variables from files when the process is running.
+
+        Must use absolute paths.
+
+        :default: - No environment files
+        '''
+        result = self._values.get("environment_files")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def environment_variables(
+        self,
+    ) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
+        '''Environment variables to load when the process is running.
+
+        :default: - No environment variables set
+        '''
+        result = self._values.get("environment_variables")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
+
     @builtins.property
     def group(self) -> typing.Optional[builtins.str]:
         '''The group to execute the process under.
@@ -89578,7 +89671,7 @@ class EbsDeviceOptions(EbsDeviceOptionsBase):
 
         :param delete_on_termination: Indicates whether to delete the volume when the instance is terminated. Default: - true for Amazon EC2 Auto Scaling, false otherwise (e.g. EBS)
         :param iops: The number of I/O operations per second (IOPS) to provision for the volume. Must only be set for ``volumeType``: ``EbsDeviceVolumeType.IO1`` The maximum ratio of IOPS to volume size (in GiB) is 50:1, so for 5,000 provisioned IOPS, you need at least 100 GiB storage on the volume. Default: - none, required for ``EbsDeviceVolumeType.IO1``
-        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GP2``
+        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD`` or ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3`` if ``@aws-cdk/aws-ec2:ebsDefaultGp3Volume`` is enabled.
         :param encrypted: Specifies whether the EBS volume is encrypted. Encrypted EBS volumes can only be attached to instances that support Amazon EBS encryption Default: false
         :param kms_key: The ARN of the AWS Key Management Service (AWS KMS) CMK used for encryption. You have to ensure that the KMS CMK has the correct permissions to be used by the service launching the ec2 instances. Default: - If encrypted is true, the default aws/ebs KMS key will be used.
 
@@ -89644,7 +89737,10 @@ class EbsDeviceOptions(EbsDeviceOptionsBase):
     def volume_type(self) -> typing.Optional[EbsDeviceVolumeType]:
         '''The EBS volume type.
 
-        :default: ``EbsDeviceVolumeType.GP2``
+        :default:
+
+        ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD`` or ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3`` if
+        ``@aws-cdk/aws-ec2:ebsDefaultGp3Volume`` is enabled.
 
         :see: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html
         '''
@@ -89718,7 +89814,7 @@ class EbsDeviceProps(EbsDeviceSnapshotOptions, EbsDeviceOptions):
 
         :param delete_on_termination: Indicates whether to delete the volume when the instance is terminated. Default: - true for Amazon EC2 Auto Scaling, false otherwise (e.g. EBS)
         :param iops: The number of I/O operations per second (IOPS) to provision for the volume. Must only be set for ``volumeType``: ``EbsDeviceVolumeType.IO1`` The maximum ratio of IOPS to volume size (in GiB) is 50:1, so for 5,000 provisioned IOPS, you need at least 100 GiB storage on the volume. Default: - none, required for ``EbsDeviceVolumeType.IO1``
-        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GP2``
+        :param volume_type: The EBS volume type. Default: ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD`` or ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3`` if ``@aws-cdk/aws-ec2:ebsDefaultGp3Volume`` is enabled.
         :param volume_size: The volume size, in Gibibytes (GiB). If you specify volumeSize, it must be equal or greater than the size of the snapshot. Default: - The snapshot size
         :param encrypted: Specifies whether the EBS volume is encrypted. Encrypted EBS volumes can only be attached to instances that support Amazon EBS encryption Default: false
         :param kms_key: The ARN of the AWS Key Management Service (AWS KMS) CMK used for encryption. You have to ensure that the KMS CMK has the correct permissions to be used by the service launching the ec2 instances. Default: - If encrypted is true, the default aws/ebs KMS key will be used.
@@ -89799,7 +89895,10 @@ class EbsDeviceProps(EbsDeviceSnapshotOptions, EbsDeviceOptions):
     def volume_type(self) -> typing.Optional[EbsDeviceVolumeType]:
         '''The EBS volume type.
 
-        :default: ``EbsDeviceVolumeType.GP2``
+        :default:
+
+        ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD`` or ``EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3`` if
+        ``@aws-cdk/aws-ec2:ebsDefaultGp3Volume`` is enabled.
 
         :see: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html
         '''
@@ -103720,6 +103819,8 @@ def _typecheckingstub__7573da52a8ea62c2b8aa64f8feb7a4a47ba65a4cac431430e05fdcee0
     after_network: typing.Optional[builtins.bool] = None,
     cwd: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    environment_files: typing.Optional[typing.Sequence[builtins.str]] = None,
+    environment_variables: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     group: typing.Optional[builtins.str] = None,
     keep_running: typing.Optional[builtins.bool] = None,
     user: typing.Optional[builtins.str] = None,
@@ -103850,6 +103951,7 @@ def _typecheckingstub__5fdf31f5ae2497c7efcb56df558011698f38dc19cff28ca7a78a08a6d
     block_devices: typing.Optional[typing.Sequence[typing.Union[BlockDevice, typing.Dict[builtins.str, typing.Any]]]] = None,
     credit_specification: typing.Optional[CpuCredits] = None,
     detailed_monitoring: typing.Optional[builtins.bool] = None,
+    ebs_optimized: typing.Optional[builtins.bool] = None,
     init: typing.Optional[CloudFormationInit] = None,
     init_options: typing.Optional[typing.Union[ApplyCloudFormationInitOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     instance_name: typing.Optional[builtins.str] = None,
@@ -103900,6 +104002,7 @@ def _typecheckingstub__2d4dc63c6e6ee3ddc68d5dd204d8ac5ef1f1dec37a7b84d636225df1c
     block_devices: typing.Optional[typing.Sequence[typing.Union[BlockDevice, typing.Dict[builtins.str, typing.Any]]]] = None,
     credit_specification: typing.Optional[CpuCredits] = None,
     detailed_monitoring: typing.Optional[builtins.bool] = None,
+    ebs_optimized: typing.Optional[builtins.bool] = None,
     init: typing.Optional[CloudFormationInit] = None,
     init_options: typing.Optional[typing.Union[ApplyCloudFormationInitOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     instance_name: typing.Optional[builtins.str] = None,
@@ -104972,6 +105075,8 @@ def _typecheckingstub__32d66fb5148d20d001b12c0d2a13afa9f9d62d2ad84dc7e3eccb544d6
     after_network: typing.Optional[builtins.bool] = None,
     cwd: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    environment_files: typing.Optional[typing.Sequence[builtins.str]] = None,
+    environment_variables: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     group: typing.Optional[builtins.str] = None,
     keep_running: typing.Optional[builtins.bool] = None,
     user: typing.Optional[builtins.str] = None,

aws_cdk/aws_ecs/__init__.py

@@ -11964,7 +11964,7 @@ class CfnTaskDefinition(
         :param placement_constraints: An array of placement constraint objects to use for tasks. .. epigraph:: This parameter isn't supported for tasks run on AWS Fargate .
         :param proxy_configuration: The configuration details for the App Mesh proxy. Your Amazon ECS container instances require at least version 1.26.0 of the container agent and at least version 1.26.0-1 of the ``ecs-init`` package to use a proxy configuration. If your container instances are launched from the Amazon ECS optimized AMI version ``20190301`` or later, they contain the required versions of the container agent and ``ecs-init`` . For more information, see `Amazon ECS-optimized Linux AMI <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html>`_ in the *Amazon Elastic Container Service Developer Guide* .
         :param requires_compatibilities: The task launch types the task definition was validated against. The valid values are ``EC2`` , ``FARGATE`` , and ``EXTERNAL`` . For more information, see `Amazon ECS launch types <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html>`_ in the *Amazon Elastic Container Service Developer Guide* .
-        :param runtime_platform: The operating system that your tasks definitions run on. A platform family is specified only for tasks using the Fargate launch type. When you specify a task definition in a service, this value must match the ``runtimePlatform`` value of the service.
+        :param runtime_platform: The operating system that your tasks definitions run on. A platform family is specified only for tasks using the Fargate launch type.
         :param tags: The metadata that you apply to the task definition to help you categorize and organize them. Each tag consists of a key and an optional value. You define both of them. The following basic restrictions apply to tags: - Maximum number of tags per resource - 50 - For each resource, each tag key must be unique, and each tag key can have only one value. - Maximum key length - 128 Unicode characters in UTF-8 - Maximum value length - 256 Unicode characters in UTF-8 - If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : /
         :param task_role_arn: The short name or full Amazon Resource Name (ARN) of the AWS Identity and Access Management role that grants containers in the task permission to call AWS APIs on your behalf. For more information, see `Amazon ECS Task Role <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html>`_ in the *Amazon Elastic Container Service Developer Guide* . IAM roles for tasks on Windows require that the ``-EnableTaskIAMRole`` option is set when you launch the Amazon ECS-optimized Windows AMI. Your containers must also run some configuration code to use the feature. For more information, see `Windows IAM roles for tasks <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/windows_task_IAM_roles.html>`_ in the *Amazon Elastic Container Service Developer Guide* .
         :param volumes: The list of data volume definitions for the task. For more information, see `Using data volumes in tasks <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html>`_ in the *Amazon Elastic Container Service Developer Guide* . .. epigraph:: The ``host`` and ``sourcePath`` parameters aren't supported for tasks run on AWS Fargate .
@@ -16541,7 +16541,7 @@ class CfnTaskDefinitionProps:
         :param placement_constraints: An array of placement constraint objects to use for tasks. .. epigraph:: This parameter isn't supported for tasks run on AWS Fargate .
         :param proxy_configuration: The configuration details for the App Mesh proxy. Your Amazon ECS container instances require at least version 1.26.0 of the container agent and at least version 1.26.0-1 of the ``ecs-init`` package to use a proxy configuration. If your container instances are launched from the Amazon ECS optimized AMI version ``20190301`` or later, they contain the required versions of the container agent and ``ecs-init`` . For more information, see `Amazon ECS-optimized Linux AMI <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html>`_ in the *Amazon Elastic Container Service Developer Guide* .
         :param requires_compatibilities: The task launch types the task definition was validated against. The valid values are ``EC2`` , ``FARGATE`` , and ``EXTERNAL`` . For more information, see `Amazon ECS launch types <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html>`_ in the *Amazon Elastic Container Service Developer Guide* .
-        :param runtime_platform: The operating system that your tasks definitions run on. A platform family is specified only for tasks using the Fargate launch type. When you specify a task definition in a service, this value must match the ``runtimePlatform`` value of the service.
+        :param runtime_platform: The operating system that your tasks definitions run on. A platform family is specified only for tasks using the Fargate launch type.
         :param tags: The metadata that you apply to the task definition to help you categorize and organize them. Each tag consists of a key and an optional value. You define both of them. The following basic restrictions apply to tags: - Maximum number of tags per resource - 50 - For each resource, each tag key must be unique, and each tag key can have only one value. - Maximum key length - 128 Unicode characters in UTF-8 - Maximum value length - 256 Unicode characters in UTF-8 - If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : /
         :param task_role_arn: The short name or full Amazon Resource Name (ARN) of the AWS Identity and Access Management role that grants containers in the task permission to call AWS APIs on your behalf. For more information, see `Amazon ECS Task Role <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html>`_ in the *Amazon Elastic Container Service Developer Guide* . IAM roles for tasks on Windows require that the ``-EnableTaskIAMRole`` option is set when you launch the Amazon ECS-optimized Windows AMI. Your containers must also run some configuration code to use the feature. For more information, see `Windows IAM roles for tasks <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/windows_task_IAM_roles.html>`_ in the *Amazon Elastic Container Service Developer Guide* .
         :param volumes: The list of data volume definitions for the task. For more information, see `Using data volumes in tasks <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html>`_ in the *Amazon Elastic Container Service Developer Guide* . .. epigraph:: The ``host`` and ``sourcePath`` parameters aren't supported for tasks run on AWS Fargate .
@@ -17052,8 +17052,6 @@ class CfnTaskDefinitionProps:
 
         A platform family is specified only for tasks using the Fargate launch type.
 
-        When you specify a task definition in a service, this value must match the ``runtimePlatform`` value of the service.
-
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-taskdefinition.html#cfn-ecs-taskdefinition-runtimeplatform
         '''
         result = self._values.get("runtime_platform")

aws_cdk/aws_efs/__init__.py

@@ -71,12 +71,26 @@ efs.FileSystem(self, "OneZoneFileSystem",
 ⚠️ One Zone file systems are not compatible with the MAX_IO performance mode.
 
 ⚠️ When `oneZone` is enabled, the file system is automatically placed in the first availability zone of the VPC.
-It is not currently possible to specify a different availability zone.
+To specify a different availability zone:
+
+```python
+# vpc: ec2.Vpc
+
+
+efs.FileSystem(self, "OneZoneFileSystem",
+    vpc=vpc,
+    one_zone=True,
+    vpc_subnets=ec2.SubnetSelection(
+        availability_zones=["us-east-1b"]
+    )
+)
+```
 
 ⚠️ When `oneZone` is enabled, mount targets will be created only in the specified availability zone.
 This is to prevent deployment failures due to cross-AZ configurations.
 
-⚠️ When `oneZone` is enabled, `vpcSubnets` cannot be specified.
+⚠️ When `oneZone` is enabled, `vpcSubnets` can be specified with
+`availabilityZones` that contains exactly one single zone.
 
 ### Replicating file systems