aws-cdk-lib 2.143.1__py3-none-any.whl → 2.145.0__py3-none-any.whl

aws_cdk/aws_config/__init__.py

@@ -202,6 +202,35 @@ tag_rule = config.CustomRule(self, "CostCenterTagRule",
 )
 ```
 
+### Evaluation Mode
+
+You can specify the [evaluation mode](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html) for a rule to determine when AWS Config runs evaluations.
+
+Use the `evaluationModes` property to specify the evaluation mode:
+
+```python
+# fn: lambda.Function
+# sample_policy_text: str
+
+
+config.ManagedRule(self, "ManagedRule",
+    identifier=config.ManagedRuleIdentifiers.API_GW_XRAY_ENABLED,
+    evaluation_modes=config.EvaluationMode.DETECTIVE_AND_PROACTIVE
+)
+
+config.CustomRule(self, "CustomRule",
+    lambda_function=fn,
+    evaluation_modes=config.EvaluationMode.PROACTIVE
+)
+
+config.CustomPolicy(self, "CustomPolicy",
+    policy_text=sample_policy_text,
+    evaluation_modes=config.EvaluationMode.DETECTIVE
+)
+```
+
+**Note**: Proactive evaluation mode is not supported for all rules. See [AWS Config documentation](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html#aws-config-rules-evaluation-modes) for more information.
+
 ### Events
 
 You can define Amazon EventBridge event rules which trigger when a compliance check fails
@@ -6777,6 +6806,70 @@ class CfnStoredQueryProps:
         )
 
 
+class EvaluationMode(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_config.EvaluationMode",
+):
+    '''The mode of evaluation for the rule.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # fn: lambda.Function
+        # sample_policy_text: str
+        
+        
+        config.ManagedRule(self, "ManagedRule",
+            identifier=config.ManagedRuleIdentifiers.API_GW_XRAY_ENABLED,
+            evaluation_modes=config.EvaluationMode.DETECTIVE_AND_PROACTIVE
+        )
+        
+        config.CustomRule(self, "CustomRule",
+            lambda_function=fn,
+            evaluation_modes=config.EvaluationMode.PROACTIVE
+        )
+        
+        config.CustomPolicy(self, "CustomPolicy",
+            policy_text=sample_policy_text,
+            evaluation_modes=config.EvaluationMode.DETECTIVE
+        )
+    '''
+
+    def __init__(self, modes: typing.Sequence[builtins.str]) -> None:
+        '''
+        :param modes: The modes of evaluation for the rule.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__bfe8fcd0763bf83fec0e6291ab8c47dbab6a88574543e4177bd4cff149b6de39)
+            check_type(argname="argument modes", value=modes, expected_type=type_hints["modes"])
+        jsii.create(self.__class__, self, [modes])
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DETECTIVE")
+    def DETECTIVE(cls) -> "EvaluationMode":
+        '''Evaluate resources that have already been deployed.'''
+        return typing.cast("EvaluationMode", jsii.sget(cls, "DETECTIVE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DETECTIVE_AND_PROACTIVE")
+    def DETECTIVE_AND_PROACTIVE(cls) -> "EvaluationMode":
+        '''Evaluate resources that have already been deployed and before they have been deployed.'''
+        return typing.cast("EvaluationMode", jsii.sget(cls, "DETECTIVE_AND_PROACTIVE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROACTIVE")
+    def PROACTIVE(cls) -> "EvaluationMode":
+        '''Evaluate resources before they have been deployed.'''
+        return typing.cast("EvaluationMode", jsii.sget(cls, "PROACTIVE"))
+
+    @builtins.property
+    @jsii.member(jsii_name="modes")
+    def modes(self) -> typing.List[builtins.str]:
+        '''The modes of evaluation for the rule.'''
+        return typing.cast(typing.List[builtins.str], jsii.get(self, "modes"))
+
+
 @jsii.interface(jsii_type="aws-cdk-lib.aws_config.IRule")
 class IRule(_IResource_c80c4260, typing_extensions.Protocol):
     '''Interface representing an AWS Config rule.'''
@@ -6995,15 +7088,23 @@ class ManagedRule(
 
     Example::
 
-        # https://docs.aws.amazon.com/config/latest/developerguide/access-keys-rotated.html
-        config.ManagedRule(self, "AccessKeysRotated",
-            identifier=config.ManagedRuleIdentifiers.ACCESS_KEYS_ROTATED,
-            input_parameters={
-                "max_access_key_age": 60
-            },
+        # fn: lambda.Function
+        # sample_policy_text: str
         
-            # default is 24 hours
-            maximum_execution_frequency=config.MaximumExecutionFrequency.TWELVE_HOURS
+        
+        config.ManagedRule(self, "ManagedRule",
+            identifier=config.ManagedRuleIdentifiers.API_GW_XRAY_ENABLED,
+            evaluation_modes=config.EvaluationMode.DETECTIVE_AND_PROACTIVE
+        )
+        
+        config.CustomRule(self, "CustomRule",
+            lambda_function=fn,
+            evaluation_modes=config.EvaluationMode.PROACTIVE
+        )
+        
+        config.CustomPolicy(self, "CustomPolicy",
+            policy_text=sample_policy_text,
+            evaluation_modes=config.EvaluationMode.DETECTIVE
         )
     '''
 
@@ -7015,6 +7116,7 @@ class ManagedRule(
         identifier: builtins.str,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional["MaximumExecutionFrequency"] = None,
         rule_scope: typing.Optional["RuleScope"] = None,
@@ -7025,6 +7127,7 @@ class ManagedRule(
         :param identifier: The identifier of the AWS managed rule.
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -7037,6 +7140,7 @@ class ManagedRule(
             identifier=identifier,
             config_rule_name=config_rule_name,
             description=description,
+            evaluation_modes=evaluation_modes,
             input_parameters=input_parameters,
             maximum_execution_frequency=maximum_execution_frequency,
             rule_scope=rule_scope,
@@ -7251,15 +7355,23 @@ class ManagedRuleIdentifiers(
 
     Example::
 
-        # https://docs.aws.amazon.com/config/latest/developerguide/access-keys-rotated.html
-        config.ManagedRule(self, "AccessKeysRotated",
-            identifier=config.ManagedRuleIdentifiers.ACCESS_KEYS_ROTATED,
-            input_parameters={
-                "max_access_key_age": 60
-            },
+        # fn: lambda.Function
+        # sample_policy_text: str
         
-            # default is 24 hours
-            maximum_execution_frequency=config.MaximumExecutionFrequency.TWELVE_HOURS
+        
+        config.ManagedRule(self, "ManagedRule",
+            identifier=config.ManagedRuleIdentifiers.API_GW_XRAY_ENABLED,
+            evaluation_modes=config.EvaluationMode.DETECTIVE_AND_PROACTIVE
+        )
+        
+        config.CustomRule(self, "CustomRule",
+            lambda_function=fn,
+            evaluation_modes=config.EvaluationMode.PROACTIVE
+        )
+        
+        config.CustomPolicy(self, "CustomPolicy",
+            policy_text=sample_policy_text,
+            evaluation_modes=config.EvaluationMode.DETECTIVE
         )
     '''
 
@@ -10003,12 +10115,36 @@ class ResourceType(
         '''AWS Certificate manager certificate.'''
         return typing.cast("ResourceType", jsii.sget(cls, "ACM_CERTIFICATE"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ACMPCA_CERTIFICATE_AUTHORITY")
+    def ACMPCA_CERTIFICATE_AUTHORITY(cls) -> "ResourceType":
+        '''AWS Private Certificate Authority CertificateAuthority.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ACMPCA_CERTIFICATE_AUTHORITY"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ACMPCA_CERTIFICATE_AUTHORITY_ACTIVATION")
+    def ACMPCA_CERTIFICATE_AUTHORITY_ACTIVATION(cls) -> "ResourceType":
+        '''AWS Private Certificate Authority CertificateAuthorityActivation.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ACMPCA_CERTIFICATE_AUTHORITY_ACTIVATION"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="AMAZON_MQ_BROKER")
     def AMAZON_MQ_BROKER(cls) -> "ResourceType":
         '''Amazon MQ broker.'''
         return typing.cast("ResourceType", jsii.sget(cls, "AMAZON_MQ_BROKER"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AMPLIFY_APP")
+    def AMPLIFY_APP(cls) -> "ResourceType":
+        '''AWS Amplify App.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "AMPLIFY_APP"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AMPLIFY_BRANCH")
+    def AMPLIFY_BRANCH(cls) -> "ResourceType":
+        '''AWS Amplify Branch.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "AMPLIFY_BRANCH"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="APIGATEWAY_REST_API")
     def APIGATEWAY_REST_API(cls) -> "ResourceType":
@@ -10033,6 +10169,108 @@ class ResourceType(
         '''API Gatewayv2 Stage.'''
         return typing.cast("ResourceType", jsii.sget(cls, "APIGATEWAYV2_STAGE"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_CONFIG_DEPLOYMENT_STRATEGY")
+    def APP_CONFIG_DEPLOYMENT_STRATEGY(cls) -> "ResourceType":
+        '''AWS AppConfig Deployment Strategy.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_CONFIG_DEPLOYMENT_STRATEGY"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_CONFIG_HOSTED_CONFIGURATION_VERSION")
+    def APP_CONFIG_HOSTED_CONFIGURATION_VERSION(cls) -> "ResourceType":
+        '''AWS AppConfig HostedConfigurationVersion.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_CONFIG_HOSTED_CONFIGURATION_VERSION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_FLOW_FLOW")
+    def APP_FLOW_FLOW(cls) -> "ResourceType":
+        '''Amazon AppFlow Flow.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_FLOW_FLOW"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_INTEGRATIONS_EVENT_INTEGRATION")
+    def APP_INTEGRATIONS_EVENT_INTEGRATION(cls) -> "ResourceType":
+        '''Amazon AppIntegrations EventIntegration.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_INTEGRATIONS_EVENT_INTEGRATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_MESH_GATEWAY_ROUTE")
+    def APP_MESH_GATEWAY_ROUTE(cls) -> "ResourceType":
+        '''AWS AppMesh GatewayRoute.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_MESH_GATEWAY_ROUTE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_MESH_MESH")
+    def APP_MESH_MESH(cls) -> "ResourceType":
+        '''AWS AppMesh Mesh.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_MESH_MESH"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_MESH_ROUTE")
+    def APP_MESH_ROUTE(cls) -> "ResourceType":
+        '''AWS AppMesh Route.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_MESH_ROUTE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_MESH_VIRTUAL_GATEWAY")
+    def APP_MESH_VIRTUAL_GATEWAY(cls) -> "ResourceType":
+        '''AWS AppMesh VirtualGateway.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_MESH_VIRTUAL_GATEWAY"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_MESH_VIRTUAL_NODE")
+    def APP_MESH_VIRTUAL_NODE(cls) -> "ResourceType":
+        '''AWS AppMesh VirtualNode.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_MESH_VIRTUAL_NODE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_MESH_VIRTUAL_ROUTER")
+    def APP_MESH_VIRTUAL_ROUTER(cls) -> "ResourceType":
+        '''AWS AppMesh VirtualRouter.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_MESH_VIRTUAL_ROUTER"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_MESH_VIRTUAL_SERVICE")
+    def APP_MESH_VIRTUAL_SERVICE(cls) -> "ResourceType":
+        '''AWS AppMesh VirtualService.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_MESH_VIRTUAL_SERVICE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_RUNNER_SERVICE")
+    def APP_RUNNER_SERVICE(cls) -> "ResourceType":
+        '''AWS AppRunner Service.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_RUNNER_SERVICE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_RUNNER_VPC_CONNECTOR")
+    def APP_RUNNER_VPC_CONNECTOR(cls) -> "ResourceType":
+        '''AWS AppRunner VpcConnector.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_RUNNER_VPC_CONNECTOR"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_STREAM_APPLICATION")
+    def APP_STREAM_APPLICATION(cls) -> "ResourceType":
+        '''Amazon AppStream Application.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_STREAM_APPLICATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_STREAM_DIRECTORY_CONFIG")
+    def APP_STREAM_DIRECTORY_CONFIG(cls) -> "ResourceType":
+        '''Amazon AppStream Directory Config.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_STREAM_DIRECTORY_CONFIG"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_STREAM_FLEET")
+    def APP_STREAM_FLEET(cls) -> "ResourceType":
+        '''Amazon AppStream Fleet.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_STREAM_FLEET"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APP_STREAM_STACK")
+    def APP_STREAM_STACK(cls) -> "ResourceType":
+        '''Amazon AppStream Stack.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APP_STREAM_STACK"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="APPCONFIG_APPLICATION")
     def APPCONFIG_APPLICATION(cls) -> "ResourceType":
@@ -10057,6 +10295,24 @@ class ResourceType(
         '''AWS AppSync GraphQL Api.'''
         return typing.cast("ResourceType", jsii.sget(cls, "APPSYNC_GRAPHQL_API"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="APS_RULE_GROUPS_NAMESPACE")
+    def APS_RULE_GROUPS_NAMESPACE(cls) -> "ResourceType":
+        '''Amazon Managed Service for Prometheus RuleGroupsNamespace.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "APS_RULE_GROUPS_NAMESPACE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ATHENA_PREPARED_STATEMENT")
+    def ATHENA_PREPARED_STATEMENT(cls) -> "ResourceType":
+        '''Amazon Athena PreparedStatement.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ATHENA_PREPARED_STATEMENT"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AUDIT_MANAGER_ASSESSMENT")
+    def AUDIT_MANAGER_ASSESSMENT(cls) -> "ResourceType":
+        '''AWS AuditManager Assessment.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "AUDIT_MANAGER_ASSESSMENT"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="AUTO_SCALING_GROUP")
     def AUTO_SCALING_GROUP(cls) -> "ResourceType":
@@ -10081,6 +10337,12 @@ class ResourceType(
         '''AWS Auto Scaling scheduled action.'''
         return typing.cast("ResourceType", jsii.sget(cls, "AUTO_SCALING_SCHEDULED_ACTION"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="AUTO_SCALING_WARM_POOL")
+    def AUTO_SCALING_WARM_POOL(cls) -> "ResourceType":
+        '''EC2 Auto Scaling Warm Pool.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "AUTO_SCALING_WARM_POOL"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="BACKUP_BACKUP_PLAN")
     def BACKUP_BACKUP_PLAN(cls) -> "ResourceType":
@@ -10123,6 +10385,30 @@ class ResourceType(
         '''AWS Batch job queue.'''
         return typing.cast("ResourceType", jsii.sget(cls, "BATCH_JOB_QUEUE"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="BATCH_SCHEDULING_POLICY")
+    def BATCH_SCHEDULING_POLICY(cls) -> "ResourceType":
+        '''AWS Batch SchedulingPolicy.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "BATCH_SCHEDULING_POLICY"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="BUDGETS_BUDGETS_ACTION")
+    def BUDGETS_BUDGETS_ACTION(cls) -> "ResourceType":
+        '''AWS Budgets Budgets Action.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "BUDGETS_BUDGETS_ACTION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CASSANDRA_KEYSPACE")
+    def CASSANDRA_KEYSPACE(cls) -> "ResourceType":
+        '''Amazon KeySpaces Cassandra Keyspace.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "CASSANDRA_KEYSPACE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CLOUD_WATCH_METRIC_STREAM")
+    def CLOUD_WATCH_METRIC_STREAM(cls) -> "ResourceType":
+        '''Amazon CloudWatch Metric Stream.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "CLOUD_WATCH_METRIC_STREAM"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="CLOUD9_ENVIRONMENT_EC2")
     def CLOUD9_ENVIRONMENT_EC2(cls) -> "ResourceType":
@@ -10165,6 +10451,30 @@ class ResourceType(
         '''Amazon CloudWatch RUM.'''
         return typing.cast("ResourceType", jsii.sget(cls, "CLOUDWATCH_RUM_APP_MONITOR"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CODE_ARTIFACT_REPOSITORY")
+    def CODE_ARTIFACT_REPOSITORY(cls) -> "ResourceType":
+        '''AWS CodeArtifact Repository.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "CODE_ARTIFACT_REPOSITORY"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CODE_BUILD_REPORT_GROUP")
+    def CODE_BUILD_REPORT_GROUP(cls) -> "ResourceType":
+        '''AWS CodeBuild ReportGroup.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "CODE_BUILD_REPORT_GROUP"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CODE_GURU_PROFILER_PROFILING_GROUP")
+    def CODE_GURU_PROFILER_PROFILING_GROUP(cls) -> "ResourceType":
+        '''Amazon CodeGuruP rofiler ProfilingGroup.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "CODE_GURU_PROFILER_PROFILING_GROUP"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CODE_GURU_REVIEWER_REPOSITORY_ASSOCIATION")
+    def CODE_GURU_REVIEWER_REPOSITORY_ASSOCIATION(cls) -> "ResourceType":
+        '''Amazon CodeGuru Reviewer Repository Association.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "CODE_GURU_REVIEWER_REPOSITORY_ASSOCIATION"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="CODEBUILD_PROJECT")
     def CODEBUILD_PROJECT(cls) -> "ResourceType":
@@ -10207,6 +10517,36 @@ class ResourceType(
         '''AWS Config resource compliance.'''
         return typing.cast("ResourceType", jsii.sget(cls, "CONFIG_RESOURCE_COMPLIANCE"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CONNECT_INSTANCE")
+    def CONNECT_INSTANCE(cls) -> "ResourceType":
+        '''Amazon Connect Instance.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "CONNECT_INSTANCE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CONNECT_PHONE_NUMBER")
+    def CONNECT_PHONE_NUMBER(cls) -> "ResourceType":
+        '''Amazon Connect Phone Number.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "CONNECT_PHONE_NUMBER"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CONNECT_QUICK_CONNECT")
+    def CONNECT_QUICK_CONNECT(cls) -> "ResourceType":
+        '''Amazon Connect QuickConnect.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "CONNECT_QUICK_CONNECT"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CUSTOMER_PROFILES_DOMAIN")
+    def CUSTOMER_PROFILES_DOMAIN(cls) -> "ResourceType":
+        '''Amazon Connect Customer Profiles Domain.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "CUSTOMER_PROFILES_DOMAIN"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CUSTOMER_PROFILES_OBJECT_TYPE")
+    def CUSTOMER_PROFILES_OBJECT_TYPE(cls) -> "ResourceType":
+        '''Amazon Connect CustomerProfiles ObjectType.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "CUSTOMER_PROFILES_OBJECT_TYPE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="DATASYNC_LOCATION_EFS")
     def DATASYNC_LOCATION_EFS(cls) -> "ResourceType":
@@ -10261,6 +10601,30 @@ class ResourceType(
         '''AWS DataSync task.'''
         return typing.cast("ResourceType", jsii.sget(cls, "DATASYNC_TASK"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DEVICE_FARM_INSTANCE_PROFILE")
+    def DEVICE_FARM_INSTANCE_PROFILE(cls) -> "ResourceType":
+        '''AWS DeviceFarm Instance Profile.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "DEVICE_FARM_INSTANCE_PROFILE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DEVICE_FARM_PROJECT")
+    def DEVICE_FARM_PROJECT(cls) -> "ResourceType":
+        '''AWS DeviceFarm Project.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "DEVICE_FARM_PROJECT"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DEVICE_FARM_TEST_GRID_PROJECT")
+    def DEVICE_FARM_TEST_GRID_PROJECT(cls) -> "ResourceType":
+        '''AWS Device Farm Test Grid Project.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "DEVICE_FARM_TEST_GRID_PROJECT"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DMS_ENDPOINT")
+    def DMS_ENDPOINT(cls) -> "ResourceType":
+        '''AWS DMS Endpoint.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "DMS_ENDPOINT"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="DMS_EVENT_SUBSCRIPTION")
     def DMS_EVENT_SUBSCRIPTION(cls) -> "ResourceType":
@@ -10285,12 +10649,42 @@ class ResourceType(
         '''Elastic Block Store (EBS) volume.'''
         return typing.cast("ResourceType", jsii.sget(cls, "EBS_VOLUME"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_CAPACITY_RESERVATION")
+    def EC2_CAPACITY_RESERVATION(cls) -> "ResourceType":
+        '''EC2 CapacityReservation.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_CAPACITY_RESERVATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_CARRIER_GATEWAY")
+    def EC2_CARRIER_GATEWAY(cls) -> "ResourceType":
+        '''EC2 CarrierGateway.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_CARRIER_GATEWAY"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_CLIENT_VPN_ENDPOINT")
+    def EC2_CLIENT_VPN_ENDPOINT(cls) -> "ResourceType":
+        '''EC2 ClientVpnEndpoint.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_CLIENT_VPN_ENDPOINT"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="EC2_CUSTOMER_GATEWAY")
     def EC2_CUSTOMER_GATEWAY(cls) -> "ResourceType":
         '''Amazon EC2 customer gateway.'''
         return typing.cast("ResourceType", jsii.sget(cls, "EC2_CUSTOMER_GATEWAY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_DHCP_OPTIONS")
+    def EC2_DHCP_OPTIONS(cls) -> "ResourceType":
+        '''EC2 DHCP Options.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_DHCP_OPTIONS"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_EC2_FLEET")
+    def EC2_EC2_FLEET(cls) -> "ResourceType":
+        '''EC2 EC2 Fleet.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_EC2_FLEET"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="EC2_EGRESS_ONLY_INTERNET_GATEWAY")
     def EC2_EGRESS_ONLY_INTERNET_GATEWAY(cls) -> "ResourceType":
@@ -10327,6 +10721,24 @@ class ResourceType(
         '''Amazon EC2 internet gateway.'''
         return typing.cast("ResourceType", jsii.sget(cls, "EC2_INTERNET_GATEWAY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_IPAM")
+    def EC2_IPAM(cls) -> "ResourceType":
+        '''EC2 IPAM.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_IPAM"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_IPAM_POOL")
+    def EC2_IPAM_POOL(cls) -> "ResourceType":
+        '''EC2 IPAMPool.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_IPAM_POOL"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_IPAM_SCOPE")
+    def EC2_IPAM_SCOPE(cls) -> "ResourceType":
+        '''EC2 IPAMScope.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_IPAM_SCOPE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="EC2_LAUNCH_TEMPLATE")
     def EC2_LAUNCH_TEMPLATE(cls) -> "ResourceType":
@@ -10351,12 +10763,24 @@ class ResourceType(
         '''EC2 Network Insights Access Scope Analysis.'''
         return typing.cast("ResourceType", jsii.sget(cls, "EC2_NETWORK_INSIGHTS_ACCESS_SCOPE_ANALYSIS"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_NETWORK_INSIGHTS_PATH")
+    def EC2_NETWORK_INSIGHTS_PATH(cls) -> "ResourceType":
+        '''EC2 Network Insights Path.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_NETWORK_INSIGHTS_PATH"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="EC2_NETWORK_INTERFACE")
     def EC2_NETWORK_INTERFACE(cls) -> "ResourceType":
         '''EC2 Network Interface.'''
         return typing.cast("ResourceType", jsii.sget(cls, "EC2_NETWORK_INTERFACE"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_PREFIX_LIST")
+    def EC2_PREFIX_LIST(cls) -> "ResourceType":
+        '''EC2 PrefixList.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_PREFIX_LIST"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="EC2_REGISTERED_HA_INSTANCE")
     def EC2_REGISTERED_HA_INSTANCE(cls) -> "ResourceType":
@@ -10375,12 +10799,42 @@ class ResourceType(
         '''EC2 security group.'''
         return typing.cast("ResourceType", jsii.sget(cls, "EC2_SECURITY_GROUP"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_SPOT_FLEET")
+    def EC2_SPOT_FLEET(cls) -> "ResourceType":
+        '''EC2 SpotFleet.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_SPOT_FLEET"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="EC2_SUBNET")
     def EC2_SUBNET(cls) -> "ResourceType":
         '''Amazon EC2 subnet table.'''
         return typing.cast("ResourceType", jsii.sget(cls, "EC2_SUBNET"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_SUBNET_ROUTE_TABLE_ASSOCIATION")
+    def EC2_SUBNET_ROUTE_TABLE_ASSOCIATION(cls) -> "ResourceType":
+        '''EC2 Subnet Route Table Association.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_SUBNET_ROUTE_TABLE_ASSOCIATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_TRAFFIC_MIRROR_FILTER")
+    def EC2_TRAFFIC_MIRROR_FILTER(cls) -> "ResourceType":
+        '''EC2 Traffic Mirror Filter.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_TRAFFIC_MIRROR_FILTER"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_TRAFFIC_MIRROR_SESSION")
+    def EC2_TRAFFIC_MIRROR_SESSION(cls) -> "ResourceType":
+        '''EC2 Traffic Mirror Session.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_TRAFFIC_MIRROR_SESSION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_TRAFFIC_MIRROR_TARGET")
+    def EC2_TRAFFIC_MIRROR_TARGET(cls) -> "ResourceType":
+        '''EC2 Traffic Mirror Target.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_TRAFFIC_MIRROR_TARGET"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="EC2_TRANSIT_GATEWAY")
     def EC2_TRANSIT_GATEWAY(cls) -> "ResourceType":
@@ -10393,6 +10847,18 @@ class ResourceType(
         '''EC2 transit gateway attachment.'''
         return typing.cast("ResourceType", jsii.sget(cls, "EC2_TRANSIT_GATEWAY_ATTACHMENT"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_TRANSIT_GATEWAY_CONNECT")
+    def EC2_TRANSIT_GATEWAY_CONNECT(cls) -> "ResourceType":
+        '''EC2 TransitGatewayConnect.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_TRANSIT_GATEWAY_CONNECT"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EC2_TRANSIT_GATEWAY_MULTICAST_DOMAIN")
+    def EC2_TRANSIT_GATEWAY_MULTICAST_DOMAIN(cls) -> "ResourceType":
+        '''EC2 TransitGatewayMulticastDomain.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EC2_TRANSIT_GATEWAY_MULTICAST_DOMAIN"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="EC2_TRANSIT_GATEWAY_ROUTE_TABLE")
     def EC2_TRANSIT_GATEWAY_ROUTE_TABLE(cls) -> "ResourceType":
@@ -10441,6 +10907,12 @@ class ResourceType(
         '''Amazon ECR public repository.'''
         return typing.cast("ResourceType", jsii.sget(cls, "ECR_PUBLIC_REPOSITORY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECR_PULL_THROUGH_CACHE_RULE")
+    def ECR_PULL_THROUGH_CACHE_RULE(cls) -> "ResourceType":
+        '''Amazon ECR PullThrough Cache Rule.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ECR_PULL_THROUGH_CACHE_RULE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="ECR_REGISTRY_POLICY")
     def ECR_REGISTRY_POLICY(cls) -> "ResourceType":
@@ -10453,6 +10925,12 @@ class ResourceType(
         '''Amazon ECR repository.'''
         return typing.cast("ResourceType", jsii.sget(cls, "ECR_REPOSITORY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_CAPACITY_PROVIDER")
+    def ECS_CAPACITY_PROVIDER(cls) -> "ResourceType":
+        '''Amazon ECS CapacityProvider.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ECS_CAPACITY_PROVIDER"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="ECS_CLUSTER")
     def ECS_CLUSTER(cls) -> "ResourceType":
@@ -10471,6 +10949,12 @@ class ResourceType(
         '''Amazon ECS task definition.'''
         return typing.cast("ResourceType", jsii.sget(cls, "ECS_TASK_DEFINITION"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ECS_TASK_SET")
+    def ECS_TASK_SET(cls) -> "ResourceType":
+        '''Amazon ECS TaskSet.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ECS_TASK_SET"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="EFS_ACCESS_POINT")
     def EFS_ACCESS_POINT(cls) -> "ResourceType":
@@ -10549,6 +11033,12 @@ class ResourceType(
         '''Amazon EMR security configuration.'''
         return typing.cast("ResourceType", jsii.sget(cls, "EMR_SECURITY_CONFIGURATION"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EVENT_SCHEMAS_SCHEMA")
+    def EVENT_SCHEMAS_SCHEMA(cls) -> "ResourceType":
+        '''Amazon EventBridge Schemas Schema.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EVENT_SCHEMAS_SCHEMA"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="EVENTBRIDGE_API_DESTINATION")
     def EVENTBRIDGE_API_DESTINATION(cls) -> "ResourceType":
@@ -10573,6 +11063,18 @@ class ResourceType(
         '''Amazon EventBridge EventBus.'''
         return typing.cast("ResourceType", jsii.sget(cls, "EVENTBRIDGE_EVENTBUS"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EVENTS_CONNECTION")
+    def EVENTS_CONNECTION(cls) -> "ResourceType":
+        '''Amazon EventBridge Connection.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EVENTS_CONNECTION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EVENTS_RULE")
+    def EVENTS_RULE(cls) -> "ResourceType":
+        '''Amazon EventBridge Events Rule.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EVENTS_RULE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="EVENTSCHEMAS_DISCOVERER")
     def EVENTSCHEMAS_DISCOVERER(cls) -> "ResourceType":
@@ -10591,12 +11093,36 @@ class ResourceType(
         '''Amazon EventBridge EventSchemas registry policy.'''
         return typing.cast("ResourceType", jsii.sget(cls, "EVENTSCHEMAS_REGISTRY_POLICY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EVIDENTLY_LAUNCH")
+    def EVIDENTLY_LAUNCH(cls) -> "ResourceType":
+        '''Amazon CloudWatch Evidently Launch.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EVIDENTLY_LAUNCH"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="EVIDENTLY_PROJECT")
+    def EVIDENTLY_PROJECT(cls) -> "ResourceType":
+        '''Amazon CloudWatch Evidently Project.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "EVIDENTLY_PROJECT"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="FIS_EXPERIMENT_TEMPLATE")
     def FIS_EXPERIMENT_TEMPLATE(cls) -> "ResourceType":
         '''AWS Fault Injection Simulator Experiment_Template.'''
         return typing.cast("ResourceType", jsii.sget(cls, "FIS_EXPERIMENT_TEMPLATE"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="FORECAST_DATASET")
+    def FORECAST_DATASET(cls) -> "ResourceType":
+        '''Amazon Forecast Dataset.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "FORECAST_DATASET"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="FORECAST_DATASET_GROUP")
+    def FORECAST_DATASET_GROUP(cls) -> "ResourceType":
+        '''Amazon Forecast DatasetGroup.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "FORECAST_DATASET_GROUP"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="FRAUDDETECTOR_ENTITY_TYPE")
     def FRAUDDETECTOR_ENTITY_TYPE(cls) -> "ResourceType":
@@ -10657,6 +11183,30 @@ class ResourceType(
         '''AWS Glue machine learning transform.'''
         return typing.cast("ResourceType", jsii.sget(cls, "GLUE_ML_TRANSFORM"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="GRAFANA_WORKSPACE")
+    def GRAFANA_WORKSPACE(cls) -> "ResourceType":
+        '''Amazon Managed Grafana Workspace.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "GRAFANA_WORKSPACE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="GREENGRASSV2_COMPONENT_VERSION")
+    def GREENGRASSV2_COMPONENT_VERSION(cls) -> "ResourceType":
+        '''AWS IoT Greengrass Version2 ComponentVersion.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "GREENGRASSV2_COMPONENT_VERSION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="GROUND_STATION_CONFIG")
+    def GROUND_STATION_CONFIG(cls) -> "ResourceType":
+        '''AWS GroundStation Config.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "GROUND_STATION_CONFIG"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="GROUNDSTATION_MISSION_PROFILE")
+    def GROUNDSTATION_MISSION_PROFILE(cls) -> "ResourceType":
+        '''AWS GroundStation MissionProfile.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "GROUNDSTATION_MISSION_PROFILE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="GUARDDUTY_DETECTOR")
     def GUARDDUTY_DETECTOR(cls) -> "ResourceType":
@@ -10681,6 +11231,12 @@ class ResourceType(
         '''Amazon GuardDuty Threat Intel Set.'''
         return typing.cast("ResourceType", jsii.sget(cls, "GUARDDUTY_THREAT_INTEL_SET"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="HEALTH_LAKE_FHIR_DATASTORE")
+    def HEALTH_LAKE_FHIR_DATASTORE(cls) -> "ResourceType":
+        '''AWS HealthLake FHIR Datastore.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "HEALTH_LAKE_FHIR_DATASTORE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IAM_ACCESSANALYZER_ANALYZER")
     def IAM_ACCESSANALYZER_ANALYZER(cls) -> "ResourceType":
@@ -10693,6 +11249,12 @@ class ResourceType(
         '''AWS IAM group.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IAM_GROUP"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IAM_INSTANCE_PROFILE")
+    def IAM_INSTANCE_PROFILE(cls) -> "ResourceType":
+        '''AWS IAM InstanceProfile.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IAM_INSTANCE_PROFILE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IAM_POLICY")
     def IAM_POLICY(cls) -> "ResourceType":
@@ -10705,12 +11267,30 @@ class ResourceType(
         '''AWS IAM role.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IAM_ROLE"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IAM_SAML_PROVIDER")
+    def IAM_SAML_PROVIDER(cls) -> "ResourceType":
+        '''AWS IAM SAMLProvider.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IAM_SAML_PROVIDER"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IAM_SERVER_CERTIFICATE")
+    def IAM_SERVER_CERTIFICATE(cls) -> "ResourceType":
+        '''AWS IAM ServerCertificate.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IAM_SERVER_CERTIFICATE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IAM_USER")
     def IAM_USER(cls) -> "ResourceType":
         '''AWS IAM user.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IAM_USER"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IMAGE_BUILDER_IMAGE_PIPELINE")
+    def IMAGE_BUILDER_IMAGE_PIPELINE(cls) -> "ResourceType":
+        '''EC2 Image Builder Image Pipeline.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IMAGE_BUILDER_IMAGE_PIPELINE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IMAGEBUILDER_CONTAINER_RECIPE")
     def IMAGEBUILDER_CONTAINER_RECIPE(cls) -> "ResourceType":
@@ -10729,6 +11309,18 @@ class ResourceType(
         '''EC2 Image Builder InfrastructureConfiguration.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IMAGEBUILDER_INFRASTRUCTURE_CONFIGURATION"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="INSPECTORV2_FILTER")
+    def INSPECTORV2_FILTER(cls) -> "ResourceType":
+        '''Amazon Inspector Filter.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "INSPECTORV2_FILTER"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_ACCOUNT_AUDIT_CONFIGURATION")
+    def IOT_ACCOUNT_AUDIT_CONFIGURATION(cls) -> "ResourceType":
+        '''AWS IoT Account Audit Configuration.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_ACCOUNT_AUDIT_CONFIGURATION"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IOT_ANALYTICS_CHANNEL")
     def IOT_ANALYTICS_CHANNEL(cls) -> "ResourceType":
@@ -10759,6 +11351,18 @@ class ResourceType(
         '''AWS IoT authorizer.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IOT_AUTHORIZER"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_CA_CERTIFICATE")
+    def IOT_CA_CERTIFICATE(cls) -> "ResourceType":
+        '''AWS IoT CACertificate.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_CA_CERTIFICATE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_CUSTOM_METRIC")
+    def IOT_CUSTOM_METRIC(cls) -> "ResourceType":
+        '''AWS IoT Custom Metric.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_CUSTOM_METRIC"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IOT_DIMENSION")
     def IOT_DIMENSION(cls) -> "ResourceType":
@@ -10783,6 +11387,18 @@ class ResourceType(
         '''AWS IoT Events Input.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IOT_EVENTS_INPUT"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_FLEET_METRIC")
+    def IOT_FLEET_METRIC(cls) -> "ResourceType":
+        '''AWS IoT Fleet Metric.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_FLEET_METRIC"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_JOB_TEMPLATE")
+    def IOT_JOB_TEMPLATE(cls) -> "ResourceType":
+        '''AWS IoT JobTemplate.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_JOB_TEMPLATE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IOT_MITIGATION_ACTION")
     def IOT_MITIGATION_ACTION(cls) -> "ResourceType":
@@ -10795,12 +11411,24 @@ class ResourceType(
         '''AWS IoT policy.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IOT_POLICY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_PROVISIONING_TEMPLATE")
+    def IOT_PROVISIONING_TEMPLATE(cls) -> "ResourceType":
+        '''AWS IoT ProvisioningTemplate.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_PROVISIONING_TEMPLATE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IOT_ROLE_ALIAS")
     def IOT_ROLE_ALIAS(cls) -> "ResourceType":
         '''AWS IoT role alias.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IOT_ROLE_ALIAS"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_SCHEDULED_AUDIT")
+    def IOT_SCHEDULED_AUDIT(cls) -> "ResourceType":
+        '''AWS IoT Scheduled Audit.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_SCHEDULED_AUDIT"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IOT_SECURITY_PROFILE")
     def IOT_SECURITY_PROFILE(cls) -> "ResourceType":
@@ -10819,6 +11447,12 @@ class ResourceType(
         '''AWS IoT SiteWise dashboard.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IOT_SITEWISE_DASHBOARD"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_SITEWISE_GATEWAY")
+    def IOT_SITEWISE_GATEWAY(cls) -> "ResourceType":
+        '''AWS IoT SiteWise Gateway.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_SITEWISE_GATEWAY"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IOT_SITEWISE_PORTAL")
     def IOT_SITEWISE_PORTAL(cls) -> "ResourceType":
@@ -10831,6 +11465,24 @@ class ResourceType(
         '''AWS IoT SiteWise project.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IOT_SITEWISE_PROJECT"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_TWIN_MAKER_COMPONENT_TYPE")
+    def IOT_TWIN_MAKER_COMPONENT_TYPE(cls) -> "ResourceType":
+        '''AWS IoT TwinMaker ComponentType.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_TWIN_MAKER_COMPONENT_TYPE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_TWIN_MAKER_SCENE")
+    def IOT_TWIN_MAKER_SCENE(cls) -> "ResourceType":
+        '''AWS IoT Twin Maker Scene.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_TWIN_MAKER_SCENE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_TWIN_MAKER_SYNC_JOB")
+    def IOT_TWIN_MAKER_SYNC_JOB(cls) -> "ResourceType":
+        '''AWS IoT TwinMaker SyncJob.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_TWIN_MAKER_SYNC_JOB"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IOT_TWINMAKER_ENTITY")
     def IOT_TWINMAKER_ENTITY(cls) -> "ResourceType":
@@ -10844,7 +11496,25 @@ class ResourceType(
         return typing.cast("ResourceType", jsii.sget(cls, "IOT_TWINMAKER_WORKSPACE"))
 
     @jsii.python.classproperty
-    @jsii.member(jsii_name="IVS_CHANNEL")
+    @jsii.member(jsii_name="IOT_WIRELESS_FUOTA_TASK")
+    def IOT_WIRELESS_FUOTA_TASK(cls) -> "ResourceType":
+        '''AWS IoT Wireless FuotaTask.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_WIRELESS_FUOTA_TASK"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_WIRELESS_MULTICAST_GROUP")
+    def IOT_WIRELESS_MULTICAST_GROUP(cls) -> "ResourceType":
+        '''AWS IoT Wireless MulticastGroup.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_WIRELESS_MULTICAST_GROUP"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IOT_WIRELESS_SERVICE_PROFILE")
+    def IOT_WIRELESS_SERVICE_PROFILE(cls) -> "ResourceType":
+        '''AWS IoTWireless Service Profile.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "IOT_WIRELESS_SERVICE_PROFILE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="IVS_CHANNEL")
     def IVS_CHANNEL(cls) -> "ResourceType":
         '''Amazon Interactive Video Service (IVS) channel.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IVS_CHANNEL"))
@@ -10861,12 +11531,30 @@ class ResourceType(
         '''Amazon Interactive Video Service (IVS) recording configuration.'''
         return typing.cast("ResourceType", jsii.sget(cls, "IVS_RECORDING_CONFIGURATION"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="KAFKA_CONNECT_CONNECTOR")
+    def KAFKA_CONNECT_CONNECTOR(cls) -> "ResourceType":
+        '''Amazon Managed Streaming for Apache Kafka Connect Connector.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "KAFKA_CONNECT_CONNECTOR"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="KENDRA_INDEX")
+    def KENDRA_INDEX(cls) -> "ResourceType":
+        '''Amazon Kendra Index.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "KENDRA_INDEX"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="KINESIS_ANALYTICS_V2_APPLICATION")
     def KINESIS_ANALYTICS_V2_APPLICATION(cls) -> "ResourceType":
         '''Amazon Kinesis Analytics V2 application.'''
         return typing.cast("ResourceType", jsii.sget(cls, "KINESIS_ANALYTICS_V2_APPLICATION"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="KINESIS_FIREHOSE_DELIVERY_STREAM")
+    def KINESIS_FIREHOSE_DELIVERY_STREAM(cls) -> "ResourceType":
+        '''Amazon Kinesis Firehose DeliveryStream.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "KINESIS_FIREHOSE_DELIVERY_STREAM"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="KINESIS_STREAM")
     def KINESIS_STREAM(cls) -> "ResourceType":
@@ -10879,18 +11567,54 @@ class ResourceType(
         '''Amazon Kinesis stream consumer.'''
         return typing.cast("ResourceType", jsii.sget(cls, "KINESIS_STREAM_CONSUMER"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="KINESIS_VIDEO_SIGNALING_CHANNEL")
+    def KINESIS_VIDEO_SIGNALING_CHANNEL(cls) -> "ResourceType":
+        '''Amazon Kinesis Video Streams Signaling Channel.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "KINESIS_VIDEO_SIGNALING_CHANNEL"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="KINESIS_VIDEO_STREAM")
+    def KINESIS_VIDEO_STREAM(cls) -> "ResourceType":
+        '''Amazon Kinesis Video Stream.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "KINESIS_VIDEO_STREAM"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="KMS_ALIAS")
+    def KMS_ALIAS(cls) -> "ResourceType":
+        '''AWS KMS Alias.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "KMS_ALIAS"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="KMS_KEY")
     def KMS_KEY(cls) -> "ResourceType":
         '''AWS KMS Key.'''
         return typing.cast("ResourceType", jsii.sget(cls, "KMS_KEY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="LAMBDA_CODE_SIGNING_CONFIG")
+    def LAMBDA_CODE_SIGNING_CONFIG(cls) -> "ResourceType":
+        '''AWS Lambda CodeSigningConfig.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "LAMBDA_CODE_SIGNING_CONFIG"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="LAMBDA_FUNCTION")
     def LAMBDA_FUNCTION(cls) -> "ResourceType":
         '''AWS Lambda function.'''
         return typing.cast("ResourceType", jsii.sget(cls, "LAMBDA_FUNCTION"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="LEX_BOT")
+    def LEX_BOT(cls) -> "ResourceType":
+        '''Amazon Lex Bot.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "LEX_BOT"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="LEX_BOT_ALIAS")
+    def LEX_BOT_ALIAS(cls) -> "ResourceType":
+        '''Amazon Lex Bot Alias.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "LEX_BOT_ALIAS"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="LIGHTSAIL_BUCKET")
     def LIGHTSAIL_BUCKET(cls) -> "ResourceType":
@@ -10915,18 +11639,78 @@ class ResourceType(
         '''AWS Lightsail static IP.'''
         return typing.cast("ResourceType", jsii.sget(cls, "LIGHTSAIL_STATIC_IP"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="LOGS_DESTINATION")
+    def LOGS_DESTINATION(cls) -> "ResourceType":
+        '''Amazon CloudWatch Logs Destination.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "LOGS_DESTINATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="LOOKOUT_METRICS_ALERT")
+    def LOOKOUT_METRICS_ALERT(cls) -> "ResourceType":
+        '''AWS Lookout Metrics Alert.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "LOOKOUT_METRICS_ALERT"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="LOOKOUT_VISION_PROJECT")
+    def LOOKOUT_VISION_PROJECT(cls) -> "ResourceType":
+        '''Amazon Lookout Vision Project.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "LOOKOUT_VISION_PROJECT"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="MEDIA_CONNECT_FLOW_SOURCE")
+    def MEDIA_CONNECT_FLOW_SOURCE(cls) -> "ResourceType":
+        '''AWS Elemental MediaConnect FlowSource.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "MEDIA_CONNECT_FLOW_SOURCE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="MEDIA_PACKAGE_PACKAGING_CONFIGURATION")
+    def MEDIA_PACKAGE_PACKAGING_CONFIGURATION(cls) -> "ResourceType":
+        '''AWS Elemental MediaPackage Packaging Configuration.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "MEDIA_PACKAGE_PACKAGING_CONFIGURATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="MEDIACONNECT_FLOW_ENTITLEMENT")
+    def MEDIACONNECT_FLOW_ENTITLEMENT(cls) -> "ResourceType":
+        '''AWS Elemental MediaConnect FlowEntitlement.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "MEDIACONNECT_FLOW_ENTITLEMENT"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="MEDIACONNECT_FLOW_VPC_INTERFACE")
+    def MEDIACONNECT_FLOW_VPC_INTERFACE(cls) -> "ResourceType":
+        '''AWS Elemental MediaConnect FlowVpcInterface.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "MEDIACONNECT_FLOW_VPC_INTERFACE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="MEDIAPACKAGE_PACKAGING_GROUP")
     def MEDIAPACKAGE_PACKAGING_GROUP(cls) -> "ResourceType":
         '''AWS Elemental MediaPackage packaging group.'''
         return typing.cast("ResourceType", jsii.sget(cls, "MEDIAPACKAGE_PACKAGING_GROUP"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="MEDIATAILOR_PLAYBACK_CONFIGURATION")
+    def MEDIATAILOR_PLAYBACK_CONFIGURATION(cls) -> "ResourceType":
+        '''AWS Elemental MediaTailor PlaybackConfiguration.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "MEDIATAILOR_PLAYBACK_CONFIGURATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="MSK_BATCH_SCRAM_SECRET")
+    def MSK_BATCH_SCRAM_SECRET(cls) -> "ResourceType":
+        '''Amazon MSK BatchScramSecret.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "MSK_BATCH_SCRAM_SECRET"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="MSK_CLUSTER")
     def MSK_CLUSTER(cls) -> "ResourceType":
         '''Amazon MSK cluster.'''
         return typing.cast("ResourceType", jsii.sget(cls, "MSK_CLUSTER"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="MSK_CONFIGURATION")
+    def MSK_CONFIGURATION(cls) -> "ResourceType":
+        '''Amazon MSK Configuration.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "MSK_CONFIGURATION"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="NETWORK_FIREWALL_FIREWALL")
     def NETWORK_FIREWALL_FIREWALL(cls) -> "ResourceType":
@@ -10945,12 +11729,144 @@ class ResourceType(
         '''AWS Network Firewall Rule Group.'''
         return typing.cast("ResourceType", jsii.sget(cls, "NETWORK_FIREWALL_RULE_GROUP"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="NETWORK_FIREWALL_TLS_INSPECTION_CONFIGURATION")
+    def NETWORK_FIREWALL_TLS_INSPECTION_CONFIGURATION(cls) -> "ResourceType":
+        '''AWS NetworkFirewall TLSInspectionConfiguration.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "NETWORK_FIREWALL_TLS_INSPECTION_CONFIGURATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="NETWORK_MANAGER_CONNECT_PEER")
+    def NETWORK_MANAGER_CONNECT_PEER(cls) -> "ResourceType":
+        '''AWS NetworkManager ConnectPeer.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "NETWORK_MANAGER_CONNECT_PEER"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="NETWORK_MANAGER_CUSTOMER_GATEWAY_ASSOCIATION")
+    def NETWORK_MANAGER_CUSTOMER_GATEWAY_ASSOCIATION(cls) -> "ResourceType":
+        '''AWS NetworkManager CustomerGatewayAssociation.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "NETWORK_MANAGER_CUSTOMER_GATEWAY_ASSOCIATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="NETWORK_MANAGER_DEVICE")
+    def NETWORK_MANAGER_DEVICE(cls) -> "ResourceType":
+        '''AWS Network Manager Device.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "NETWORK_MANAGER_DEVICE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="NETWORK_MANAGER_GLOBAL_NETWORK")
+    def NETWORK_MANAGER_GLOBAL_NETWORK(cls) -> "ResourceType":
+        '''AWS Network Manager Global Network.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "NETWORK_MANAGER_GLOBAL_NETWORK"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="NETWORK_MANAGER_LINK")
+    def NETWORK_MANAGER_LINK(cls) -> "ResourceType":
+        '''AWS NetworkManager Link.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "NETWORK_MANAGER_LINK"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="NETWORK_MANAGER_LINK_ASSOCIATION")
+    def NETWORK_MANAGER_LINK_ASSOCIATION(cls) -> "ResourceType":
+        '''AWS NetworkManager LinkAssociation.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "NETWORK_MANAGER_LINK_ASSOCIATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="NETWORK_MANAGER_SITE")
+    def NETWORK_MANAGER_SITE(cls) -> "ResourceType":
+        '''AWS NetworkManager Site.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "NETWORK_MANAGER_SITE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="NETWORK_MANAGER_TRANSIT_GATEWAY_REGISTRATION")
+    def NETWORK_MANAGER_TRANSIT_GATEWAY_REGISTRATION(cls) -> "ResourceType":
+        '''AWS Network Manager Transit Gateway Registration.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "NETWORK_MANAGER_TRANSIT_GATEWAY_REGISTRATION"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="OPENSEARCH_DOMAIN")
     def OPENSEARCH_DOMAIN(cls) -> "ResourceType":
         '''Amazon OpenSearch domain.'''
         return typing.cast("ResourceType", jsii.sget(cls, "OPENSEARCH_DOMAIN"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PANORAMA_PACKAGE")
+    def PANORAMA_PACKAGE(cls) -> "ResourceType":
+        '''AWS Panorama Package.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PANORAMA_PACKAGE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PERSONALIZE_DATASET")
+    def PERSONALIZE_DATASET(cls) -> "ResourceType":
+        '''Amazon Personalize Dataset.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PERSONALIZE_DATASET"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PERSONALIZE_DATASET_GROUP")
+    def PERSONALIZE_DATASET_GROUP(cls) -> "ResourceType":
+        '''Amazon Personalize DatasetGroup.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PERSONALIZE_DATASET_GROUP"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PERSONALIZE_SCHEMA")
+    def PERSONALIZE_SCHEMA(cls) -> "ResourceType":
+        '''Amazon Personalize Schema.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PERSONALIZE_SCHEMA"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PERSONALIZE_SOLUTION")
+    def PERSONALIZE_SOLUTION(cls) -> "ResourceType":
+        '''Amazon Personalize Solution.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PERSONALIZE_SOLUTION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PINPOINT_APP")
+    def PINPOINT_APP(cls) -> "ResourceType":
+        '''Amazon Pinpoint App.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PINPOINT_APP"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PINPOINT_APPLICATION_SETTINGS")
+    def PINPOINT_APPLICATION_SETTINGS(cls) -> "ResourceType":
+        '''Amazon Pinpoint Application Settings.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PINPOINT_APPLICATION_SETTINGS"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PINPOINT_CAMPAIGN")
+    def PINPOINT_CAMPAIGN(cls) -> "ResourceType":
+        '''Amazon Pinpoint Campaign.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PINPOINT_CAMPAIGN"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PINPOINT_EMAIL_CHANNEL")
+    def PINPOINT_EMAIL_CHANNEL(cls) -> "ResourceType":
+        '''Amazon Pinpoint EmailChannel.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PINPOINT_EMAIL_CHANNEL"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PINPOINT_EMAIL_TEMPLATE")
+    def PINPOINT_EMAIL_TEMPLATE(cls) -> "ResourceType":
+        '''Amazon Pinpoint EmailTemplate.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PINPOINT_EMAIL_TEMPLATE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PINPOINT_EVENT_STREAM")
+    def PINPOINT_EVENT_STREAM(cls) -> "ResourceType":
+        '''Amazon Pinpoint EventStream.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PINPOINT_EVENT_STREAM"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PINPOINT_IN_APP_TEMPLATE")
+    def PINPOINT_IN_APP_TEMPLATE(cls) -> "ResourceType":
+        '''Amazon Pinpoint InAppTemplate.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PINPOINT_IN_APP_TEMPLATE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PINPOINT_SEGMENT")
+    def PINPOINT_SEGMENT(cls) -> "ResourceType":
+        '''Amazon Pinpoint Segment.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "PINPOINT_SEGMENT"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="QLDB_LEDGER")
     def QLDB_LEDGER(cls) -> "ResourceType":
@@ -11005,6 +11921,12 @@ class ResourceType(
         '''Amazon RDS global cluster.'''
         return typing.cast("ResourceType", jsii.sget(cls, "RDS_GLOBAL_CLUSTER"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="RDS_OPTION_GROUP")
+    def RDS_OPTION_GROUP(cls) -> "ResourceType":
+        '''Amazon RDS OptionGroup.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "RDS_OPTION_GROUP"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="REDSHIFT_CLUSTER")
     def REDSHIFT_CLUSTER(cls) -> "ResourceType":
@@ -11041,12 +11963,48 @@ class ResourceType(
         '''Amazon Redshift event subscription.'''
         return typing.cast("ResourceType", jsii.sget(cls, "REDSHIFT_EVENT_SUBSCRIPTION"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="REDSHIFT_SCHEDULED_ACTION")
+    def REDSHIFT_SCHEDULED_ACTION(cls) -> "ResourceType":
+        '''Amazon Redshift Scheduled Action.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "REDSHIFT_SCHEDULED_ACTION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="RESILIENCEHUB_APP")
+    def RESILIENCEHUB_APP(cls) -> "ResourceType":
+        '''AWS ResilienceHub App.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "RESILIENCEHUB_APP"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="RESILIENCEHUB_RESILIENCY_POLICY")
     def RESILIENCEHUB_RESILIENCY_POLICY(cls) -> "ResourceType":
         '''AWS ResilienceHub resiliency policy.'''
         return typing.cast("ResourceType", jsii.sget(cls, "RESILIENCEHUB_RESILIENCY_POLICY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="RESOURCE_EXPLORER2_INDEX")
+    def RESOURCE_EXPLORER2_INDEX(cls) -> "ResourceType":
+        '''AWS Resource Explorer Index.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "RESOURCE_EXPLORER2_INDEX"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROBO_MAKER_ROBOT_APPLICATION")
+    def ROBO_MAKER_ROBOT_APPLICATION(cls) -> "ResourceType":
+        '''AWS RoboMaker Robot Application.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROBO_MAKER_ROBOT_APPLICATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROBO_MAKER_ROBOT_APPLICATION_VERSION")
+    def ROBO_MAKER_ROBOT_APPLICATION_VERSION(cls) -> "ResourceType":
+        '''AWS RoboMaker Robot Application Version.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROBO_MAKER_ROBOT_APPLICATION_VERSION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROBO_MAKER_SIMULATION_APPLICATION")
+    def ROBO_MAKER_SIMULATION_APPLICATION(cls) -> "ResourceType":
+        '''AWS RoboMaker Simulation Application.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROBO_MAKER_SIMULATION_APPLICATION"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="ROUTE53_HEALTH_CHECK")
     def ROUTE53_HEALTH_CHECK(cls) -> "ResourceType":
@@ -11059,6 +12017,30 @@ class ResourceType(
         '''Amazon Route53 Hosted Zone.'''
         return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_HOSTED_ZONE"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROUTE53_RECOVERY_CONTROL_CLUSTER")
+    def ROUTE53_RECOVERY_CONTROL_CLUSTER(cls) -> "ResourceType":
+        '''Amazon Route53 Recovery Control Cluster.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RECOVERY_CONTROL_CLUSTER"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROUTE53_RECOVERY_CONTROL_CONTROL_PANEL")
+    def ROUTE53_RECOVERY_CONTROL_CONTROL_PANEL(cls) -> "ResourceType":
+        '''Amazon Route53 Recovery Control Control Panel.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RECOVERY_CONTROL_CONTROL_PANEL"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROUTE53_RECOVERY_CONTROL_ROUTING_CONTROL")
+    def ROUTE53_RECOVERY_CONTROL_ROUTING_CONTROL(cls) -> "ResourceType":
+        '''Amazon Route53 Recovery Control Routing Control.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RECOVERY_CONTROL_ROUTING_CONTROL"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROUTE53_RECOVERY_CONTROL_SAFETY_RULE")
+    def ROUTE53_RECOVERY_CONTROL_SAFETY_RULE(cls) -> "ResourceType":
+        '''Amazon Route53 Recovery Control Safety Rule.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RECOVERY_CONTROL_SAFETY_RULE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="ROUTE53_RECOVERY_READINESS_CELL")
     def ROUTE53_RECOVERY_READINESS_CELL(cls) -> "ResourceType":
@@ -11077,6 +12059,42 @@ class ResourceType(
         '''Amazon Route53 recovery readiness recovery group.'''
         return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RECOVERY_READINESS_RECOVERY_GROUP"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROUTE53_RECOVERY_READINESS_RESOURCE_SET")
+    def ROUTE53_RECOVERY_READINESS_RESOURCE_SET(cls) -> "ResourceType":
+        '''Amazon Route53 Recovery Readiness Resource Set.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RECOVERY_READINESS_RESOURCE_SET"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROUTE53_RESOLVER_FIREWALL_DOMAIN_LIST")
+    def ROUTE53_RESOLVER_FIREWALL_DOMAIN_LIST(cls) -> "ResourceType":
+        '''Amazon Route53 Resolver Firewall Domain List.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RESOLVER_FIREWALL_DOMAIN_LIST"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROUTE53_RESOLVER_FIREWALL_RULE_GROUP")
+    def ROUTE53_RESOLVER_FIREWALL_RULE_GROUP(cls) -> "ResourceType":
+        '''AWS Route53 Resolver FirewallRuleGroup.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RESOLVER_FIREWALL_RULE_GROUP"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROUTE53_RESOLVER_FIREWALL_RULE_GROUP_ASSOCIATION")
+    def ROUTE53_RESOLVER_FIREWALL_RULE_GROUP_ASSOCIATION(cls) -> "ResourceType":
+        '''Amazon Route53 Resolver Firewall Rule Group Association.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RESOLVER_FIREWALL_RULE_GROUP_ASSOCIATION"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROUTE53_RESOLVER_QUERY_LOGGING_CONFIG")
+    def ROUTE53_RESOLVER_QUERY_LOGGING_CONFIG(cls) -> "ResourceType":
+        '''Amazon Route53 Resolver ResolverQueryLoggingConfig.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RESOLVER_QUERY_LOGGING_CONFIG"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="ROUTE53_RESOLVER_QUERY_LOGGING_CONFIG_ASSOCIATION")
+    def ROUTE53_RESOLVER_QUERY_LOGGING_CONFIG_ASSOCIATION(cls) -> "ResourceType":
+        '''Amazon Route53 Resolver ResolverQueryLoggingConfigAssociation.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RESOLVER_QUERY_LOGGING_CONFIG_ASSOCIATION"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="ROUTE53_RESOLVER_RESOLVER_ENDPOINT")
     def ROUTE53_RESOLVER_RESOLVER_ENDPOINT(cls) -> "ResourceType":
@@ -11095,6 +12113,12 @@ class ResourceType(
         '''Amazon Route53 resolver resolver rule association.'''
         return typing.cast("ResourceType", jsii.sget(cls, "ROUTE53_RESOLVER_RESOLVER_RULE_ASSOCIATION"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="S3_ACCESS_POINT")
+    def S3_ACCESS_POINT(cls) -> "ResourceType":
+        '''Amazon S3 AccessPoint.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "S3_ACCESS_POINT"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="S3_ACCOUNT_PUBLIC_ACCESS_BLOCK")
     def S3_ACCOUNT_PUBLIC_ACCESS_BLOCK(cls) -> "ResourceType":
@@ -11113,12 +12137,42 @@ class ResourceType(
         '''Amazon S3 Multi-Region Access Point.'''
         return typing.cast("ResourceType", jsii.sget(cls, "S3_MULTIREGION_ACCESS_POINT"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="S3_STORAGE_LENS")
+    def S3_STORAGE_LENS(cls) -> "ResourceType":
+        '''Amazon S3 Storage Lens.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "S3_STORAGE_LENS"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="SAGE_MAKER_APP_IMAGE_CONFIG")
+    def SAGE_MAKER_APP_IMAGE_CONFIG(cls) -> "ResourceType":
+        '''Amazon SageMaker AppImageConfig.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "SAGE_MAKER_APP_IMAGE_CONFIG"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="SAGE_MAKER_IMAGE")
+    def SAGE_MAKER_IMAGE(cls) -> "ResourceType":
+        '''Amazon SageMaker Image.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "SAGE_MAKER_IMAGE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="SAGEMAKER_CODE_REPOSITORY")
     def SAGEMAKER_CODE_REPOSITORY(cls) -> "ResourceType":
         '''Amazon SageMaker code repository.'''
         return typing.cast("ResourceType", jsii.sget(cls, "SAGEMAKER_CODE_REPOSITORY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="SAGEMAKER_DOMAIN")
+    def SAGEMAKER_DOMAIN(cls) -> "ResourceType":
+        '''Amazon SageMaker Domain.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "SAGEMAKER_DOMAIN"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="SAGEMAKER_FEATURE_GROUP")
+    def SAGEMAKER_FEATURE_GROUP(cls) -> "ResourceType":
+        '''Amazon SageMaker FeatureGroup.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "SAGEMAKER_FEATURE_GROUP"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="SAGEMAKER_MODEL")
     def SAGEMAKER_MODEL(cls) -> "ResourceType":
@@ -11161,6 +12215,12 @@ class ResourceType(
         '''AWS Service Catalog portfolio.'''
         return typing.cast("ResourceType", jsii.sget(cls, "SERVICE_CATALOG_PORTFOLIO"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="SERVICE_DISCOVERY_INSTANCE")
+    def SERVICE_DISCOVERY_INSTANCE(cls) -> "ResourceType":
+        '''AWS Cloud Map Instance.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "SERVICE_DISCOVERY_INSTANCE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="SERVICEDISCOVERY_HTTP_NAMESPACE")
     def SERVICEDISCOVERY_HTTP_NAMESPACE(cls) -> "ResourceType":
@@ -11221,6 +12281,12 @@ class ResourceType(
         '''AWS Shield regional protection.'''
         return typing.cast("ResourceType", jsii.sget(cls, "SHIELD_REGIONAL_PROTECTION"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="SIGNER_SIGNING_PROFILE")
+    def SIGNER_SIGNING_PROFILE(cls) -> "ResourceType":
+        '''AWS Signer SigningProfile.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "SIGNER_SIGNING_PROFILE"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="SNS_TOPIC")
     def SNS_TOPIC(cls) -> "ResourceType":
@@ -11269,6 +12335,24 @@ class ResourceType(
         '''AWS Systems Manager patch compliance.'''
         return typing.cast("ResourceType", jsii.sget(cls, "SYSTEMS_MANAGER_PATCH_COMPLIANCE"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="TRANSFER_AGREEMENT")
+    def TRANSFER_AGREEMENT(cls) -> "ResourceType":
+        '''AWS Transfer Agreement.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "TRANSFER_AGREEMENT"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="TRANSFER_CERTIFICATE")
+    def TRANSFER_CERTIFICATE(cls) -> "ResourceType":
+        '''AWS Transfer Family Certificate.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "TRANSFER_CERTIFICATE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="TRANSFER_CONNECTOR")
+    def TRANSFER_CONNECTOR(cls) -> "ResourceType":
+        '''AWS Transfer Connector.'''
+        return typing.cast("ResourceType", jsii.sget(cls, "TRANSFER_CONNECTOR"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="TRANSFER_WORKFLOW")
     def TRANSFER_WORKFLOW(cls) -> "ResourceType":
@@ -11384,6 +12468,7 @@ class ResourceType(
     name_mapping={
         "config_rule_name": "configRuleName",
         "description": "description",
+        "evaluation_modes": "evaluationModes",
         "input_parameters": "inputParameters",
         "maximum_execution_frequency": "maximumExecutionFrequency",
         "rule_scope": "ruleScope",
@@ -11395,6 +12480,7 @@ class RuleProps:
         *,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional["RuleScope"] = None,
@@ -11403,6 +12489,7 @@ class RuleProps:
 
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -11415,12 +12502,14 @@ class RuleProps:
             # The values are placeholders you should change.
             from aws_cdk import aws_config as config
             
+            # evaluation_mode: config.EvaluationMode
             # input_parameters: Any
             # rule_scope: config.RuleScope
             
             rule_props = config.RuleProps(
                 config_rule_name="configRuleName",
                 description="description",
+                evaluation_modes=evaluation_mode,
                 input_parameters={
                     "input_parameters_key": input_parameters
                 },
@@ -11432,6 +12521,7 @@ class RuleProps:
             type_hints = typing.get_type_hints(_typecheckingstub__789e7d0bc168eb66eb1a98c5813daac930a5d1a0a7544dd838595180eccba39e)
             check_type(argname="argument config_rule_name", value=config_rule_name, expected_type=type_hints["config_rule_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument evaluation_modes", value=evaluation_modes, expected_type=type_hints["evaluation_modes"])
             check_type(argname="argument input_parameters", value=input_parameters, expected_type=type_hints["input_parameters"])
             check_type(argname="argument maximum_execution_frequency", value=maximum_execution_frequency, expected_type=type_hints["maximum_execution_frequency"])
             check_type(argname="argument rule_scope", value=rule_scope, expected_type=type_hints["rule_scope"])
@@ -11440,6 +12530,8 @@ class RuleProps:
             self._values["config_rule_name"] = config_rule_name
         if description is not None:
             self._values["description"] = description
+        if evaluation_modes is not None:
+            self._values["evaluation_modes"] = evaluation_modes
         if input_parameters is not None:
             self._values["input_parameters"] = input_parameters
         if maximum_execution_frequency is not None:
@@ -11465,6 +12557,17 @@ class RuleProps:
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def evaluation_modes(self) -> typing.Optional[EvaluationMode]:
+        '''The modes the AWS Config rule can be evaluated in.
+
+        The valid values are distinct objects.
+
+        :default: - Detective evaluation mode only
+        '''
+        result = self._values.get("evaluation_modes")
+        return typing.cast(typing.Optional[EvaluationMode], result)
+
     @builtins.property
     def input_parameters(
         self,
@@ -11629,6 +12732,7 @@ class AccessKeysRotated(
         max_age: typing.Optional[_Duration_4839e8c3] = None,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional[RuleScope] = None,
@@ -11639,6 +12743,7 @@ class AccessKeysRotated(
         :param max_age: The maximum number of days within which the access keys must be rotated. Default: Duration.days(90)
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -11651,6 +12756,7 @@ class AccessKeysRotated(
             max_age=max_age,
             config_rule_name=config_rule_name,
             description=description,
+            evaluation_modes=evaluation_modes,
             input_parameters=input_parameters,
             maximum_execution_frequency=maximum_execution_frequency,
             rule_scope=rule_scope,
@@ -11665,6 +12771,7 @@ class AccessKeysRotated(
     name_mapping={
         "config_rule_name": "configRuleName",
         "description": "description",
+        "evaluation_modes": "evaluationModes",
         "input_parameters": "inputParameters",
         "maximum_execution_frequency": "maximumExecutionFrequency",
         "rule_scope": "ruleScope",
@@ -11677,6 +12784,7 @@ class AccessKeysRotatedProps(RuleProps):
         *,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional[RuleScope] = None,
@@ -11686,6 +12794,7 @@ class AccessKeysRotatedProps(RuleProps):
 
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -11700,12 +12809,14 @@ class AccessKeysRotatedProps(RuleProps):
             import aws_cdk as cdk
             from aws_cdk import aws_config as config
             
+            # evaluation_mode: config.EvaluationMode
             # input_parameters: Any
             # rule_scope: config.RuleScope
             
             access_keys_rotated_props = config.AccessKeysRotatedProps(
                 config_rule_name="configRuleName",
                 description="description",
+                evaluation_modes=evaluation_mode,
                 input_parameters={
                     "input_parameters_key": input_parameters
                 },
@@ -11718,6 +12829,7 @@ class AccessKeysRotatedProps(RuleProps):
             type_hints = typing.get_type_hints(_typecheckingstub__777e9fc45f9c8a322b98f9c1a5e59fa61b582e46ce2e628d20a703d225da6262)
             check_type(argname="argument config_rule_name", value=config_rule_name, expected_type=type_hints["config_rule_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument evaluation_modes", value=evaluation_modes, expected_type=type_hints["evaluation_modes"])
             check_type(argname="argument input_parameters", value=input_parameters, expected_type=type_hints["input_parameters"])
             check_type(argname="argument maximum_execution_frequency", value=maximum_execution_frequency, expected_type=type_hints["maximum_execution_frequency"])
             check_type(argname="argument rule_scope", value=rule_scope, expected_type=type_hints["rule_scope"])
@@ -11727,6 +12839,8 @@ class AccessKeysRotatedProps(RuleProps):
             self._values["config_rule_name"] = config_rule_name
         if description is not None:
             self._values["description"] = description
+        if evaluation_modes is not None:
+            self._values["evaluation_modes"] = evaluation_modes
         if input_parameters is not None:
             self._values["input_parameters"] = input_parameters
         if maximum_execution_frequency is not None:
@@ -11754,6 +12868,17 @@ class AccessKeysRotatedProps(RuleProps):
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def evaluation_modes(self) -> typing.Optional[EvaluationMode]:
+        '''The modes the AWS Config rule can be evaluated in.
+
+        The valid values are distinct objects.
+
+        :default: - Detective evaluation mode only
+        '''
+        result = self._values.get("evaluation_modes")
+        return typing.cast(typing.Optional[EvaluationMode], result)
+
     @builtins.property
     def input_parameters(
         self,
@@ -11835,6 +12960,7 @@ class CloudFormationStackDriftDetectionCheck(
         role: typing.Optional[_IRole_235f5d8e] = None,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional[RuleScope] = None,
@@ -11846,6 +12972,7 @@ class CloudFormationStackDriftDetectionCheck(
         :param role: The IAM role to use for this rule. It must have permissions to detect drift for AWS CloudFormation stacks. Ensure to attach ``config.amazonaws.com`` trusted permissions and ``ReadOnlyAccess`` policy permissions. For specific policy permissions, refer to https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html. Default: - A role will be created
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -11859,6 +12986,7 @@ class CloudFormationStackDriftDetectionCheck(
             role=role,
             config_rule_name=config_rule_name,
             description=description,
+            evaluation_modes=evaluation_modes,
             input_parameters=input_parameters,
             maximum_execution_frequency=maximum_execution_frequency,
             rule_scope=rule_scope,
@@ -11873,6 +13001,7 @@ class CloudFormationStackDriftDetectionCheck(
     name_mapping={
         "config_rule_name": "configRuleName",
         "description": "description",
+        "evaluation_modes": "evaluationModes",
         "input_parameters": "inputParameters",
         "maximum_execution_frequency": "maximumExecutionFrequency",
         "rule_scope": "ruleScope",
@@ -11886,6 +13015,7 @@ class CloudFormationStackDriftDetectionCheckProps(RuleProps):
         *,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional[RuleScope] = None,
@@ -11896,6 +13026,7 @@ class CloudFormationStackDriftDetectionCheckProps(RuleProps):
 
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -11916,6 +13047,7 @@ class CloudFormationStackDriftDetectionCheckProps(RuleProps):
             type_hints = typing.get_type_hints(_typecheckingstub__a6e3aa47b4b02ba66dc0d2476d22bede4156332edf92696248dc715d6621a4a2)
             check_type(argname="argument config_rule_name", value=config_rule_name, expected_type=type_hints["config_rule_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument evaluation_modes", value=evaluation_modes, expected_type=type_hints["evaluation_modes"])
             check_type(argname="argument input_parameters", value=input_parameters, expected_type=type_hints["input_parameters"])
             check_type(argname="argument maximum_execution_frequency", value=maximum_execution_frequency, expected_type=type_hints["maximum_execution_frequency"])
             check_type(argname="argument rule_scope", value=rule_scope, expected_type=type_hints["rule_scope"])
@@ -11926,6 +13058,8 @@ class CloudFormationStackDriftDetectionCheckProps(RuleProps):
             self._values["config_rule_name"] = config_rule_name
         if description is not None:
             self._values["description"] = description
+        if evaluation_modes is not None:
+            self._values["evaluation_modes"] = evaluation_modes
         if input_parameters is not None:
             self._values["input_parameters"] = input_parameters
         if maximum_execution_frequency is not None:
@@ -11955,6 +13089,17 @@ class CloudFormationStackDriftDetectionCheckProps(RuleProps):
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def evaluation_modes(self) -> typing.Optional[EvaluationMode]:
+        '''The modes the AWS Config rule can be evaluated in.
+
+        The valid values are distinct objects.
+
+        :default: - Detective evaluation mode only
+        '''
+        result = self._values.get("evaluation_modes")
+        return typing.cast(typing.Optional[EvaluationMode], result)
+
     @builtins.property
     def input_parameters(
         self,
@@ -12052,6 +13197,7 @@ class CloudFormationStackNotificationCheck(
         topics: typing.Optional[typing.Sequence[_ITopic_9eca4852]] = None,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional[RuleScope] = None,
@@ -12062,6 +13208,7 @@ class CloudFormationStackNotificationCheck(
         :param topics: A list of allowed topics. At most 5 topics. Default: - No topics.
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -12074,6 +13221,7 @@ class CloudFormationStackNotificationCheck(
             topics=topics,
             config_rule_name=config_rule_name,
             description=description,
+            evaluation_modes=evaluation_modes,
             input_parameters=input_parameters,
             maximum_execution_frequency=maximum_execution_frequency,
             rule_scope=rule_scope,
@@ -12088,6 +13236,7 @@ class CloudFormationStackNotificationCheck(
     name_mapping={
         "config_rule_name": "configRuleName",
         "description": "description",
+        "evaluation_modes": "evaluationModes",
         "input_parameters": "inputParameters",
         "maximum_execution_frequency": "maximumExecutionFrequency",
         "rule_scope": "ruleScope",
@@ -12100,6 +13249,7 @@ class CloudFormationStackNotificationCheckProps(RuleProps):
         *,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional[RuleScope] = None,
@@ -12109,6 +13259,7 @@ class CloudFormationStackNotificationCheckProps(RuleProps):
 
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -12131,6 +13282,7 @@ class CloudFormationStackNotificationCheckProps(RuleProps):
             type_hints = typing.get_type_hints(_typecheckingstub__b4a2e1a2e2112721950f4e16046156e3b9bff53c55c515662c906f895bef67d1)
             check_type(argname="argument config_rule_name", value=config_rule_name, expected_type=type_hints["config_rule_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument evaluation_modes", value=evaluation_modes, expected_type=type_hints["evaluation_modes"])
             check_type(argname="argument input_parameters", value=input_parameters, expected_type=type_hints["input_parameters"])
             check_type(argname="argument maximum_execution_frequency", value=maximum_execution_frequency, expected_type=type_hints["maximum_execution_frequency"])
             check_type(argname="argument rule_scope", value=rule_scope, expected_type=type_hints["rule_scope"])
@@ -12140,6 +13292,8 @@ class CloudFormationStackNotificationCheckProps(RuleProps):
             self._values["config_rule_name"] = config_rule_name
         if description is not None:
             self._values["description"] = description
+        if evaluation_modes is not None:
+            self._values["evaluation_modes"] = evaluation_modes
         if input_parameters is not None:
             self._values["input_parameters"] = input_parameters
         if maximum_execution_frequency is not None:
@@ -12167,6 +13321,17 @@ class CloudFormationStackNotificationCheckProps(RuleProps):
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def evaluation_modes(self) -> typing.Optional[EvaluationMode]:
+        '''The modes the AWS Config rule can be evaluated in.
+
+        The valid values are distinct objects.
+
+        :default: - Detective evaluation mode only
+        '''
+        result = self._values.get("evaluation_modes")
+        return typing.cast(typing.Optional[EvaluationMode], result)
+
     @builtins.property
     def input_parameters(
         self,
@@ -12266,6 +13431,7 @@ class CustomPolicy(
         enable_debug_log: typing.Optional[builtins.bool] = None,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional[RuleScope] = None,
@@ -12277,6 +13443,7 @@ class CustomPolicy(
         :param enable_debug_log: The boolean expression for enabling debug logging for your AWS Config Custom Policy rule. Default: false
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -12290,6 +13457,7 @@ class CustomPolicy(
             enable_debug_log=enable_debug_log,
             config_rule_name=config_rule_name,
             description=description,
+            evaluation_modes=evaluation_modes,
             input_parameters=input_parameters,
             maximum_execution_frequency=maximum_execution_frequency,
             rule_scope=rule_scope,
@@ -12499,6 +13667,7 @@ class CustomPolicy(
     name_mapping={
         "config_rule_name": "configRuleName",
         "description": "description",
+        "evaluation_modes": "evaluationModes",
         "input_parameters": "inputParameters",
         "maximum_execution_frequency": "maximumExecutionFrequency",
         "rule_scope": "ruleScope",
@@ -12512,6 +13681,7 @@ class CustomPolicyProps(RuleProps):
         *,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional[RuleScope] = None,
@@ -12522,6 +13692,7 @@ class CustomPolicyProps(RuleProps):
 
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -12560,6 +13731,7 @@ class CustomPolicyProps(RuleProps):
             type_hints = typing.get_type_hints(_typecheckingstub__3a248d79f961151a1c3a0a4ffba1d7f034b78164fd67cc63e24d802e6fca8c2e)
             check_type(argname="argument config_rule_name", value=config_rule_name, expected_type=type_hints["config_rule_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument evaluation_modes", value=evaluation_modes, expected_type=type_hints["evaluation_modes"])
             check_type(argname="argument input_parameters", value=input_parameters, expected_type=type_hints["input_parameters"])
             check_type(argname="argument maximum_execution_frequency", value=maximum_execution_frequency, expected_type=type_hints["maximum_execution_frequency"])
             check_type(argname="argument rule_scope", value=rule_scope, expected_type=type_hints["rule_scope"])
@@ -12572,6 +13744,8 @@ class CustomPolicyProps(RuleProps):
             self._values["config_rule_name"] = config_rule_name
         if description is not None:
             self._values["description"] = description
+        if evaluation_modes is not None:
+            self._values["evaluation_modes"] = evaluation_modes
         if input_parameters is not None:
             self._values["input_parameters"] = input_parameters
         if maximum_execution_frequency is not None:
@@ -12599,6 +13773,17 @@ class CustomPolicyProps(RuleProps):
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def evaluation_modes(self) -> typing.Optional[EvaluationMode]:
+        '''The modes the AWS Config rule can be evaluated in.
+
+        The valid values are distinct objects.
+
+        :default: - Detective evaluation mode only
+        '''
+        result = self._values.get("evaluation_modes")
+        return typing.cast(typing.Optional[EvaluationMode], result)
+
     @builtins.property
     def input_parameters(
         self,
@@ -12669,18 +13854,23 @@ class CustomRule(
 
     Example::
 
-        # Lambda function containing logic that evaluates compliance with the rule.
-        eval_compliance_fn = lambda_.Function(self, "CustomFunction",
-            code=lambda_.AssetCode.from_inline("exports.handler = (event) => console.log(event);"),
-            handler="index.handler",
-            runtime=lambda_.Runtime.NODEJS_18_X
+        # fn: lambda.Function
+        # sample_policy_text: str
+        
+        
+        config.ManagedRule(self, "ManagedRule",
+            identifier=config.ManagedRuleIdentifiers.API_GW_XRAY_ENABLED,
+            evaluation_modes=config.EvaluationMode.DETECTIVE_AND_PROACTIVE
         )
         
-        # A custom rule that runs on configuration changes of EC2 instances
-        custom_rule = config.CustomRule(self, "Custom",
-            configuration_changes=True,
-            lambda_function=eval_compliance_fn,
-            rule_scope=config.RuleScope.from_resource(config.ResourceType.EC2_INSTANCE)
+        config.CustomRule(self, "CustomRule",
+            lambda_function=fn,
+            evaluation_modes=config.EvaluationMode.PROACTIVE
+        )
+        
+        config.CustomPolicy(self, "CustomPolicy",
+            policy_text=sample_policy_text,
+            evaluation_modes=config.EvaluationMode.DETECTIVE
         )
     '''
 
@@ -12694,6 +13884,7 @@ class CustomRule(
         periodic: typing.Optional[builtins.bool] = None,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional[RuleScope] = None,
@@ -12706,6 +13897,7 @@ class CustomRule(
         :param periodic: Whether to run the rule on a fixed frequency. Default: false
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -12720,6 +13912,7 @@ class CustomRule(
             periodic=periodic,
             config_rule_name=config_rule_name,
             description=description,
+            evaluation_modes=evaluation_modes,
             input_parameters=input_parameters,
             maximum_execution_frequency=maximum_execution_frequency,
             rule_scope=rule_scope,
@@ -12929,6 +14122,7 @@ class CustomRule(
     name_mapping={
         "config_rule_name": "configRuleName",
         "description": "description",
+        "evaluation_modes": "evaluationModes",
         "input_parameters": "inputParameters",
         "maximum_execution_frequency": "maximumExecutionFrequency",
         "rule_scope": "ruleScope",
@@ -12943,6 +14137,7 @@ class CustomRuleProps(RuleProps):
         *,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional[RuleScope] = None,
@@ -12954,6 +14149,7 @@ class CustomRuleProps(RuleProps):
 
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -12965,24 +14161,30 @@ class CustomRuleProps(RuleProps):
 
         Example::
 
-            # Lambda function containing logic that evaluates compliance with the rule.
-            eval_compliance_fn = lambda_.Function(self, "CustomFunction",
-                code=lambda_.AssetCode.from_inline("exports.handler = (event) => console.log(event);"),
-                handler="index.handler",
-                runtime=lambda_.Runtime.NODEJS_18_X
+            # fn: lambda.Function
+            # sample_policy_text: str
+            
+            
+            config.ManagedRule(self, "ManagedRule",
+                identifier=config.ManagedRuleIdentifiers.API_GW_XRAY_ENABLED,
+                evaluation_modes=config.EvaluationMode.DETECTIVE_AND_PROACTIVE
             )
             
-            # A custom rule that runs on configuration changes of EC2 instances
-            custom_rule = config.CustomRule(self, "Custom",
-                configuration_changes=True,
-                lambda_function=eval_compliance_fn,
-                rule_scope=config.RuleScope.from_resource(config.ResourceType.EC2_INSTANCE)
+            config.CustomRule(self, "CustomRule",
+                lambda_function=fn,
+                evaluation_modes=config.EvaluationMode.PROACTIVE
+            )
+            
+            config.CustomPolicy(self, "CustomPolicy",
+                policy_text=sample_policy_text,
+                evaluation_modes=config.EvaluationMode.DETECTIVE
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__218427563a034726fd41356c6d38c7959e2a44897cb1d6d9133bc9254a35c9f0)
             check_type(argname="argument config_rule_name", value=config_rule_name, expected_type=type_hints["config_rule_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument evaluation_modes", value=evaluation_modes, expected_type=type_hints["evaluation_modes"])
             check_type(argname="argument input_parameters", value=input_parameters, expected_type=type_hints["input_parameters"])
             check_type(argname="argument maximum_execution_frequency", value=maximum_execution_frequency, expected_type=type_hints["maximum_execution_frequency"])
             check_type(argname="argument rule_scope", value=rule_scope, expected_type=type_hints["rule_scope"])
@@ -12996,6 +14198,8 @@ class CustomRuleProps(RuleProps):
             self._values["config_rule_name"] = config_rule_name
         if description is not None:
             self._values["description"] = description
+        if evaluation_modes is not None:
+            self._values["evaluation_modes"] = evaluation_modes
         if input_parameters is not None:
             self._values["input_parameters"] = input_parameters
         if maximum_execution_frequency is not None:
@@ -13025,6 +14229,17 @@ class CustomRuleProps(RuleProps):
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def evaluation_modes(self) -> typing.Optional[EvaluationMode]:
+        '''The modes the AWS Config rule can be evaluated in.
+
+        The valid values are distinct objects.
+
+        :default: - Detective evaluation mode only
+        '''
+        result = self._values.get("evaluation_modes")
+        return typing.cast(typing.Optional[EvaluationMode], result)
+
     @builtins.property
     def input_parameters(
         self,
@@ -13097,6 +14312,7 @@ class CustomRuleProps(RuleProps):
     name_mapping={
         "config_rule_name": "configRuleName",
         "description": "description",
+        "evaluation_modes": "evaluationModes",
         "input_parameters": "inputParameters",
         "maximum_execution_frequency": "maximumExecutionFrequency",
         "rule_scope": "ruleScope",
@@ -13109,6 +14325,7 @@ class ManagedRuleProps(RuleProps):
         *,
         config_rule_name: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
+        evaluation_modes: typing.Optional[EvaluationMode] = None,
         input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
         maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
         rule_scope: typing.Optional[RuleScope] = None,
@@ -13118,6 +14335,7 @@ class ManagedRuleProps(RuleProps):
 
         :param config_rule_name: A name for the AWS Config rule. Default: - CloudFormation generated name
         :param description: A description about this AWS Config rule. Default: - No description
+        :param evaluation_modes: The modes the AWS Config rule can be evaluated in. The valid values are distinct objects. Default: - Detective evaluation mode only
         :param input_parameters: Input parameter values that are passed to the AWS Config rule. Default: - No input parameters
         :param maximum_execution_frequency: The maximum frequency at which the AWS Config rule runs evaluations. Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS
         :param rule_scope: Defines which resources trigger an evaluation for an AWS Config rule. Default: - evaluations for the rule are triggered when any resource in the recording group changes.
@@ -13127,21 +14345,30 @@ class ManagedRuleProps(RuleProps):
 
         Example::
 
-            # https://docs.aws.amazon.com/config/latest/developerguide/access-keys-rotated.html
-            config.ManagedRule(self, "AccessKeysRotated",
-                identifier=config.ManagedRuleIdentifiers.ACCESS_KEYS_ROTATED,
-                input_parameters={
-                    "max_access_key_age": 60
-                },
+            # fn: lambda.Function
+            # sample_policy_text: str
+            
+            
+            config.ManagedRule(self, "ManagedRule",
+                identifier=config.ManagedRuleIdentifiers.API_GW_XRAY_ENABLED,
+                evaluation_modes=config.EvaluationMode.DETECTIVE_AND_PROACTIVE
+            )
+            
+            config.CustomRule(self, "CustomRule",
+                lambda_function=fn,
+                evaluation_modes=config.EvaluationMode.PROACTIVE
+            )
             
-                # default is 24 hours
-                maximum_execution_frequency=config.MaximumExecutionFrequency.TWELVE_HOURS
+            config.CustomPolicy(self, "CustomPolicy",
+                policy_text=sample_policy_text,
+                evaluation_modes=config.EvaluationMode.DETECTIVE
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__feaff635e0230e65515841ea744975d751e424acf376b8ed530119931a2ea4ed)
             check_type(argname="argument config_rule_name", value=config_rule_name, expected_type=type_hints["config_rule_name"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument evaluation_modes", value=evaluation_modes, expected_type=type_hints["evaluation_modes"])
             check_type(argname="argument input_parameters", value=input_parameters, expected_type=type_hints["input_parameters"])
             check_type(argname="argument maximum_execution_frequency", value=maximum_execution_frequency, expected_type=type_hints["maximum_execution_frequency"])
             check_type(argname="argument rule_scope", value=rule_scope, expected_type=type_hints["rule_scope"])
@@ -13153,6 +14380,8 @@ class ManagedRuleProps(RuleProps):
             self._values["config_rule_name"] = config_rule_name
         if description is not None:
             self._values["description"] = description
+        if evaluation_modes is not None:
+            self._values["evaluation_modes"] = evaluation_modes
         if input_parameters is not None:
             self._values["input_parameters"] = input_parameters
         if maximum_execution_frequency is not None:
@@ -13178,6 +14407,17 @@ class ManagedRuleProps(RuleProps):
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def evaluation_modes(self) -> typing.Optional[EvaluationMode]:
+        '''The modes the AWS Config rule can be evaluated in.
+
+        The valid values are distinct objects.
+
+        :default: - Detective evaluation mode only
+        '''
+        result = self._values.get("evaluation_modes")
+        return typing.cast(typing.Optional[EvaluationMode], result)
+
     @builtins.property
     def input_parameters(
         self,
@@ -13260,6 +14500,7 @@ __all__ = [
     "CustomPolicyProps",
     "CustomRule",
     "CustomRuleProps",
+    "EvaluationMode",
     "IRule",
     "ManagedRule",
     "ManagedRuleIdentifiers",
@@ -14223,6 +15464,12 @@ def _typecheckingstub__69bfcb3d7c917dfc61f55867cacc3efcb5ef56fa63ad37f8f26635c03
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__bfe8fcd0763bf83fec0e6291ab8c47dbab6a88574543e4177bd4cff149b6de39(
+    modes: typing.Sequence[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__50bd433608bc8223746dfd9182d27a03d33e9feb360d971e5fbe80b64c01bad7(
     id: builtins.str,
     *,
@@ -14266,6 +15513,7 @@ def _typecheckingstub__b04eb11639f1874bbc847a298e884e6c6104bf56bf29a6c68f11ca608
     identifier: builtins.str,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14345,6 +15593,7 @@ def _typecheckingstub__789e7d0bc168eb66eb1a98c5813daac930a5d1a0a7544dd838595180e
     *,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14379,6 +15628,7 @@ def _typecheckingstub__169ed3b4e4a53c1239b7388f8b4f342054686b6693630d0139a3f739c
     max_age: typing.Optional[_Duration_4839e8c3] = None,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14390,6 +15640,7 @@ def _typecheckingstub__777e9fc45f9c8a322b98f9c1a5e59fa61b582e46ce2e628d20a703d22
     *,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14406,6 +15657,7 @@ def _typecheckingstub__0a22b3986125c76fb9e9557349b6727e4d1c0b600ef5e07d36a6ef323
     role: typing.Optional[_IRole_235f5d8e] = None,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14417,6 +15669,7 @@ def _typecheckingstub__a6e3aa47b4b02ba66dc0d2476d22bede4156332edf92696248dc715d6
     *,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14433,6 +15686,7 @@ def _typecheckingstub__e3f2230d810e1b4e21cbed5c1f6dbaae3f6b443915ac3b8148dd5cc54
     topics: typing.Optional[typing.Sequence[_ITopic_9eca4852]] = None,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14444,6 +15698,7 @@ def _typecheckingstub__b4a2e1a2e2112721950f4e16046156e3b9bff53c55c515662c906f895
     *,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14460,6 +15715,7 @@ def _typecheckingstub__49010e8081bbdd3bfbafae78ccebf0b5a42d400543b3dff90687e28d2
     enable_debug_log: typing.Optional[builtins.bool] = None,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14533,6 +15789,7 @@ def _typecheckingstub__3a248d79f961151a1c3a0a4ffba1d7f034b78164fd67cc63e24d802e6
     *,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14551,6 +15808,7 @@ def _typecheckingstub__7c04b50bb256529db27e261da69377598f975841e3cdb477cd74feb70
     periodic: typing.Optional[builtins.bool] = None,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14624,6 +15882,7 @@ def _typecheckingstub__218427563a034726fd41356c6d38c7959e2a44897cb1d6d9133bc9254
     *,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,
@@ -14638,6 +15897,7 @@ def _typecheckingstub__feaff635e0230e65515841ea744975d751e424acf376b8ed530119931
     *,
     config_rule_name: typing.Optional[builtins.str] = None,
     description: typing.Optional[builtins.str] = None,
+    evaluation_modes: typing.Optional[EvaluationMode] = None,
     input_parameters: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
     maximum_execution_frequency: typing.Optional[MaximumExecutionFrequency] = None,
     rule_scope: typing.Optional[RuleScope] = None,