aws-cdk-lib 2.164.1__py3-none-any.whl → 2.166.0__py3-none-any.whl

aws_cdk/aws_dynamodb/__init__.py

@@ -12029,7 +12029,7 @@ class TableOptionsV2:
         :param point_in_time_recovery: Whether point-in-time recovery is enabled. Default: false
         :param resource_policy: Resource policy to assign to DynamoDB Table. Default: - No resource policy statements are added to the created table.
         :param table_class: The table class. Default: TableClass.STANDARD
-        :param tags: Tags to be applied to the table or replica table. Default: - no tags
+        :param tags: Tags to be applied to the primary table (default replica table). Default: - no tags
 
         :exampleMetadata: fixture=_generated
 
@@ -12140,7 +12140,7 @@ class TableOptionsV2:
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''Tags to be applied to the table or replica table.
+        '''Tags to be applied to the primary table (default replica table).
 
         :default: - no tags
         '''
@@ -12676,7 +12676,7 @@ class TablePropsV2(TableOptionsV2):
         :param point_in_time_recovery: Whether point-in-time recovery is enabled. Default: false
         :param resource_policy: Resource policy to assign to DynamoDB Table. Default: - No resource policy statements are added to the created table.
         :param table_class: The table class. Default: TableClass.STANDARD
-        :param tags: Tags to be applied to the table or replica table. Default: - no tags
+        :param tags: Tags to be applied to the primary table (default replica table). Default: - no tags
         :param partition_key: Partition key attribute definition.
         :param billing: The billing mode and capacity settings to apply to the table. Default: Billing.onDemand()
         :param dynamo_stream: When an item in the table is modified, StreamViewType determines what information is written to the stream. Default: - streams are disabled if replicas are not configured and this property is not specified. If this property is not specified when replicas are configured, then NEW_AND_OLD_IMAGES will be the StreamViewType for all replicas
@@ -12827,7 +12827,7 @@ class TablePropsV2(TableOptionsV2):
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''Tags to be applied to the table or replica table.
+        '''Tags to be applied to the primary table (default replica table).
 
         :default: - no tags
         '''
@@ -13029,7 +13029,7 @@ class TableV2(
         :param point_in_time_recovery: Whether point-in-time recovery is enabled. Default: false
         :param resource_policy: Resource policy to assign to DynamoDB Table. Default: - No resource policy statements are added to the created table.
         :param table_class: The table class. Default: TableClass.STANDARD
-        :param tags: Tags to be applied to the table or replica table. Default: - no tags
+        :param tags: Tags to be applied to the primary table (default replica table). Default: - no tags
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9ea47b003cdb497ff620f1410260696f97dbb2b00fa8558235f23771f8edcb29)
@@ -13245,7 +13245,7 @@ class TableV2(
         :param point_in_time_recovery: Whether point-in-time recovery is enabled. Default: false
         :param resource_policy: Resource policy to assign to DynamoDB Table. Default: - No resource policy statements are added to the created table.
         :param table_class: The table class. Default: TableClass.STANDARD
-        :param tags: Tags to be applied to the table or replica table. Default: - no tags
+        :param tags: Tags to be applied to the primary table (default replica table). Default: - no tags
         '''
         props = ReplicaTableProps(
             region=region,
@@ -13304,6 +13304,11 @@ class TableV2(
         '''
         return typing.cast(builtins.str, jsii.get(self, "tableName"))
 
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def _tags(self) -> _TagManager_0a598cb3:
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
+
     @builtins.property
     @jsii.member(jsii_name="encryptionKey")
     def encryption_key(self) -> typing.Optional[_IKey_5f11635f]:
@@ -14320,7 +14325,7 @@ class ReplicaTableProps(TableOptionsV2):
         :param point_in_time_recovery: Whether point-in-time recovery is enabled. Default: false
         :param resource_policy: Resource policy to assign to DynamoDB Table. Default: - No resource policy statements are added to the created table.
         :param table_class: The table class. Default: TableClass.STANDARD
-        :param tags: Tags to be applied to the table or replica table. Default: - no tags
+        :param tags: Tags to be applied to the primary table (default replica table). Default: - no tags
         :param region: The region that the replica table will be created in.
         :param global_secondary_index_options: Options used to configure global secondary index properties. Default: - inherited from the primary table
         :param max_read_request_units: The maxium read request units. Note: This can only be configured if the primary table billing is PAY_PER_REQUEST. Default: - inherited from the primary table
@@ -14438,7 +14443,7 @@ class ReplicaTableProps(TableOptionsV2):
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''Tags to be applied to the table or replica table.
+        '''Tags to be applied to the primary table (default replica table).
 
         :default: - no tags
         '''

aws_cdk/aws_ec2/__init__.py

@@ -5668,7 +5668,7 @@ class CfnCapacityReservation(
         :param placement_group_arn: The Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation. For more information, see `Capacity Reservations for cluster placement groups <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-cpg.html>`_ in the *Amazon EC2 User Guide* .
         :param tag_specifications: The tags to apply to the Capacity Reservation during launch.
         :param tenancy: Indicates the tenancy of the Capacity Reservation. A Capacity Reservation can have one of the following tenancy settings:. - ``default`` - The Capacity Reservation is created on hardware that is shared with other AWS accounts . - ``dedicated`` - The Capacity Reservation is created on single-tenant hardware that is dedicated to a single AWS account .
-        :param unused_reservation_billing_owner_id: 
+        :param unused_reservation_billing_owner_id: The ID of the AWS account to which billing of the unused capacity of the Capacity Reservation is assigned.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__96fb3bc559aaa9df971e86ea7cdd3cdc3de550019a2d3bf247d3fb169b5e9f7e)
@@ -5985,6 +5985,7 @@ class CfnCapacityReservation(
     @builtins.property
     @jsii.member(jsii_name="unusedReservationBillingOwnerId")
     def unused_reservation_billing_owner_id(self) -> typing.Optional[builtins.str]:
+        '''The ID of the AWS account to which billing of the unused capacity of the Capacity Reservation is assigned.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "unusedReservationBillingOwnerId"))
 
     @unused_reservation_billing_owner_id.setter
@@ -6886,7 +6887,7 @@ class CfnCapacityReservationProps:
         :param placement_group_arn: The Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation. For more information, see `Capacity Reservations for cluster placement groups <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-cpg.html>`_ in the *Amazon EC2 User Guide* .
         :param tag_specifications: The tags to apply to the Capacity Reservation during launch.
         :param tenancy: Indicates the tenancy of the Capacity Reservation. A Capacity Reservation can have one of the following tenancy settings:. - ``default`` - The Capacity Reservation is created on hardware that is shared with other AWS accounts . - ``dedicated`` - The Capacity Reservation is created on single-tenant hardware that is dedicated to a single AWS account .
-        :param unused_reservation_billing_owner_id: 
+        :param unused_reservation_billing_owner_id: The ID of the AWS account to which billing of the unused capacity of the Capacity Reservation is assigned.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservation.html
         :exampleMetadata: fixture=_generated
@@ -7121,7 +7122,8 @@ class CfnCapacityReservationProps:
 
     @builtins.property
     def unused_reservation_billing_owner_id(self) -> typing.Optional[builtins.str]:
-        '''
+        '''The ID of the AWS account to which billing of the unused capacity of the Capacity Reservation is assigned.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservation.html#cfn-ec2-capacityreservation-unusedreservationbillingownerid
         '''
         result = self._values.get("unused_reservation_billing_owner_id")
@@ -14107,8 +14109,10 @@ class CfnEIP(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
+        address: typing.Optional[builtins.str] = None,
         domain: typing.Optional[builtins.str] = None,
         instance_id: typing.Optional[builtins.str] = None,
+        ipam_pool_id: typing.Optional[builtins.str] = None,
         network_border_group: typing.Optional[builtins.str] = None,
         public_ipv4_pool: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -14117,8 +14121,10 @@ class CfnEIP(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
+        :param address: Describes an Elastic IP address, or a carrier IP address.
         :param domain: The network ( ``vpc`` ). If you define an Elastic IP address and associate it with a VPC that is defined in the same template, you must declare a dependency on the VPC-gateway attachment by using the `DependsOn Attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html>`_ on this resource.
         :param instance_id: The ID of the instance. .. epigraph:: Updates to the ``InstanceId`` property may require *some interruptions* . Updates on an EIP reassociates the address on its associated resource.
+        :param ipam_pool_id: 
         :param network_border_group: A unique set of Availability Zones, Local Zones, or Wavelength Zones from which AWS advertises IP addresses. Use this parameter to limit the IP address to this location. IP addresses cannot move between network border groups. Use `DescribeAvailabilityZones <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeAvailabilityZones.html>`_ to view the network border groups.
         :param public_ipv4_pool: The ID of an address pool that you own. Use this parameter to let Amazon EC2 select an address from the address pool. .. epigraph:: Updates to the ``PublicIpv4Pool`` property may require *some interruptions* . Updates on an EIP reassociates the address on its associated resource.
         :param tags: Any tags assigned to the Elastic IP address. .. epigraph:: Updates to the ``Tags`` property may require *some interruptions* . Updates on an EIP reassociates the address on its associated resource.
@@ -14129,8 +14135,10 @@ class CfnEIP(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnEIPProps(
+            address=address,
             domain=domain,
             instance_id=instance_id,
+            ipam_pool_id=ipam_pool_id,
             network_border_group=network_border_group,
             public_ipv4_pool=public_ipv4_pool,
             tags=tags,
@@ -14200,6 +14208,19 @@ class CfnEIP(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="address")
+    def address(self) -> typing.Optional[builtins.str]:
+        '''Describes an Elastic IP address, or a carrier IP address.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "address"))
+
+    @address.setter
+    def address(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3181fa5c4d75016f17f69f9df76a3499499668e87d593e6609b7dfb341b5b54a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "address", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="domain")
     def domain(self) -> typing.Optional[builtins.str]:
@@ -14226,6 +14247,18 @@ class CfnEIP(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "instanceId", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="ipamPoolId")
+    def ipam_pool_id(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "ipamPoolId"))
+
+    @ipam_pool_id.setter
+    def ipam_pool_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__01687921711d1f3c67e4646d6c469f48798d6ad165b0b5a020b27f122f7abf9e)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "ipamPoolId", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="networkBorderGroup")
     def network_border_group(self) -> typing.Optional[builtins.str]:
@@ -14596,8 +14629,10 @@ class CfnEIPAssociationProps:
     jsii_type="aws-cdk-lib.aws_ec2.CfnEIPProps",
     jsii_struct_bases=[],
     name_mapping={
+        "address": "address",
         "domain": "domain",
         "instance_id": "instanceId",
+        "ipam_pool_id": "ipamPoolId",
         "network_border_group": "networkBorderGroup",
         "public_ipv4_pool": "publicIpv4Pool",
         "tags": "tags",
@@ -14608,8 +14643,10 @@ class CfnEIPProps:
     def __init__(
         self,
         *,
+        address: typing.Optional[builtins.str] = None,
         domain: typing.Optional[builtins.str] = None,
         instance_id: typing.Optional[builtins.str] = None,
+        ipam_pool_id: typing.Optional[builtins.str] = None,
         network_border_group: typing.Optional[builtins.str] = None,
         public_ipv4_pool: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -14617,8 +14654,10 @@ class CfnEIPProps:
     ) -> None:
         '''Properties for defining a ``CfnEIP``.
 
+        :param address: Describes an Elastic IP address, or a carrier IP address.
         :param domain: The network ( ``vpc`` ). If you define an Elastic IP address and associate it with a VPC that is defined in the same template, you must declare a dependency on the VPC-gateway attachment by using the `DependsOn Attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html>`_ on this resource.
         :param instance_id: The ID of the instance. .. epigraph:: Updates to the ``InstanceId`` property may require *some interruptions* . Updates on an EIP reassociates the address on its associated resource.
+        :param ipam_pool_id: 
         :param network_border_group: A unique set of Availability Zones, Local Zones, or Wavelength Zones from which AWS advertises IP addresses. Use this parameter to limit the IP address to this location. IP addresses cannot move between network border groups. Use `DescribeAvailabilityZones <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeAvailabilityZones.html>`_ to view the network border groups.
         :param public_ipv4_pool: The ID of an address pool that you own. Use this parameter to let Amazon EC2 select an address from the address pool. .. epigraph:: Updates to the ``PublicIpv4Pool`` property may require *some interruptions* . Updates on an EIP reassociates the address on its associated resource.
         :param tags: Any tags assigned to the Elastic IP address. .. epigraph:: Updates to the ``Tags`` property may require *some interruptions* . Updates on an EIP reassociates the address on its associated resource.
@@ -14645,17 +14684,23 @@ class CfnEIPProps:
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ff96bcb9544d5ebc6273ac8c518468df0cc1fd7720428f6e4ec85ecddb06fa60)
+            check_type(argname="argument address", value=address, expected_type=type_hints["address"])
             check_type(argname="argument domain", value=domain, expected_type=type_hints["domain"])
             check_type(argname="argument instance_id", value=instance_id, expected_type=type_hints["instance_id"])
+            check_type(argname="argument ipam_pool_id", value=ipam_pool_id, expected_type=type_hints["ipam_pool_id"])
             check_type(argname="argument network_border_group", value=network_border_group, expected_type=type_hints["network_border_group"])
             check_type(argname="argument public_ipv4_pool", value=public_ipv4_pool, expected_type=type_hints["public_ipv4_pool"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
             check_type(argname="argument transfer_address", value=transfer_address, expected_type=type_hints["transfer_address"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if address is not None:
+            self._values["address"] = address
         if domain is not None:
             self._values["domain"] = domain
         if instance_id is not None:
             self._values["instance_id"] = instance_id
+        if ipam_pool_id is not None:
+            self._values["ipam_pool_id"] = ipam_pool_id
         if network_border_group is not None:
             self._values["network_border_group"] = network_border_group
         if public_ipv4_pool is not None:
@@ -14665,6 +14710,15 @@ class CfnEIPProps:
         if transfer_address is not None:
             self._values["transfer_address"] = transfer_address
 
+    @builtins.property
+    def address(self) -> typing.Optional[builtins.str]:
+        '''Describes an Elastic IP address, or a carrier IP address.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-eip.html#cfn-ec2-eip-address
+        '''
+        result = self._values.get("address")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def domain(self) -> typing.Optional[builtins.str]:
         '''The network ( ``vpc`` ).
@@ -14689,6 +14743,14 @@ class CfnEIPProps:
         result = self._values.get("instance_id")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def ipam_pool_id(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-eip.html#cfn-ec2-eip-ipampoolid
+        '''
+        result = self._values.get("ipam_pool_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def network_border_group(self) -> typing.Optional[builtins.str]:
         '''A unique set of Availability Zones, Local Zones, or Wavelength Zones from which AWS advertises IP addresses.
@@ -28160,7 +28222,7 @@ class CfnLaunchTemplate(
             :param device_index: The device index for the network interface attachment. Each network interface requires a device index. If you create a launch template that includes secondary network interfaces but not a primary network interface, then you must add a primary network interface as a launch parameter when you launch an instance from the template.
             :param ena_srd_specification: The ENA Express configuration for the network interface.
             :param groups: The IDs of one or more security groups.
-            :param interface_type: The type of network interface. To create an Elastic Fabric Adapter (EFA), specify ``efa`` . For more information, see `Elastic Fabric Adapter <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html>`_ in the *Amazon EC2 User Guide* . If you are not creating an EFA, specify ``interface`` or omit this parameter. Valid values: ``interface`` | ``efa``
+            :param interface_type: The type of network interface. To create an Elastic Fabric Adapter (EFA), specify ``efa`` or ``efa`` . For more information, see `Elastic Fabric Adapter <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html>`_ in the *Amazon EC2 User Guide* . If you are not creating an EFA, specify ``interface`` or omit this parameter. If you specify ``efa-only`` , do not assign any IP addresses to the network interface. EFA-only network interfaces do not support IP addresses. Valid values: ``interface`` | ``efa`` | ``efa-only``
             :param ipv4_prefix_count: The number of IPv4 prefixes to be automatically assigned to the network interface. You cannot use this option if you use the ``Ipv4Prefix`` option.
             :param ipv4_prefixes: One or more IPv4 prefixes to be assigned to the network interface. You cannot use this option if you use the ``Ipv4PrefixCount`` option.
             :param ipv6_address_count: The number of IPv6 addresses to assign to a network interface. Amazon EC2 automatically selects the IPv6 addresses from the subnet range. You can't use this option if specifying specific IPv6 addresses.
@@ -28389,11 +28451,13 @@ class CfnLaunchTemplate(
         def interface_type(self) -> typing.Optional[builtins.str]:
             '''The type of network interface.
 
-            To create an Elastic Fabric Adapter (EFA), specify ``efa`` . For more information, see `Elastic Fabric Adapter <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html>`_ in the *Amazon EC2 User Guide* .
+            To create an Elastic Fabric Adapter (EFA), specify ``efa`` or ``efa`` . For more information, see `Elastic Fabric Adapter <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html>`_ in the *Amazon EC2 User Guide* .
 
             If you are not creating an EFA, specify ``interface`` or omit this parameter.
 
-            Valid values: ``interface`` | ``efa``
+            If you specify ``efa-only`` , do not assign any IP addresses to the network interface. EFA-only network interfaces do not support IP addresses.
+
+            Valid values: ``interface`` | ``efa`` | ``efa-only``
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html#cfn-ec2-launchtemplate-networkinterface-interfacetype
             '''
@@ -75731,34 +75795,35 @@ class InterfaceVpcEndpointAwsService(
 ):
     '''An AWS service for an interface VPC endpoint.
 
-    :exampleMetadata: lit=aws-ec2/test/integ.vpc-endpoint.lit.ts infused
+    :exampleMetadata: infused
 
     Example::
 
-        # Add gateway endpoints when creating the VPC
-        vpc = ec2.Vpc(self, "MyVpc",
-            gateway_endpoints={
-                "S3": cdk.aws_ec2.GatewayVpcEndpointOptions(
-                    service=ec2.GatewayVpcEndpointAwsService.S3
-                )
-            }
-        )
+        import aws_cdk.aws_ec2 as ec2
         
-        # Alternatively gateway endpoints can be added on the VPC
-        dynamo_db_endpoint = vpc.add_gateway_endpoint("DynamoDbEndpoint",
-            service=ec2.GatewayVpcEndpointAwsService.DYNAMODB
+        # vpc: ec2.Vpc
+        
+        
+        interface_vpc_endpoint = ec2.InterfaceVpcEndpoint(self, "MyVpcEndpoint",
+            vpc=vpc,
+            service=ec2.InterfaceVpcEndpointAwsService.APP_RUNNER_REQUESTS,
+            private_dns_enabled=False
         )
         
-        # This allows to customize the endpoint policy
-        dynamo_db_endpoint.add_to_policy(
-            iam.PolicyStatement( # Restrict to listing and describing tables
-                principals=[iam.AnyPrincipal()],
-                actions=["dynamodb:DescribeTable", "dynamodb:ListTables"],
-                resources=["*"]))
+        service = apprunner.Service(self, "Service",
+            source=apprunner.Source.from_ecr_public(
+                image_configuration=apprunner.ImageConfiguration(
+                    port=8000
+                ),
+                image_identifier="public.ecr.aws/aws-containers/hello-app-runner:latest"
+            ),
+            is_publicly_accessible=False
+        )
         
-        # Add an interface endpoint
-        vpc.add_interface_endpoint("EcrDockerEndpoint",
-            service=ec2.InterfaceVpcEndpointAwsService.ECR_DOCKER
+        apprunner.VpcIngressConnection(self, "VpcIngressConnection",
+            vpc=vpc,
+            interface_vpc_endpoint=interface_vpc_endpoint,
+            service=service
         )
     '''
 
@@ -76260,6 +76325,11 @@ class InterfaceVpcEndpointAwsService(
     def COST_EXPLORER(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "COST_EXPLORER"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="COST_OPTIMIZATION_HUB")
+    def COST_OPTIMIZATION_HUB(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "COST_OPTIMIZATION_HUB"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="DATA_EXCHANGE")
     def DATA_EXCHANGE(cls) -> "InterfaceVpcEndpointAwsService":
@@ -76445,6 +76515,11 @@ class InterfaceVpcEndpointAwsService(
     def EMR_WAL(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "EMR_WAL"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="END_USER_MESSAGING_SOCIAL")
+    def END_USER_MESSAGING_SOCIAL(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "END_USER_MESSAGING_SOCIAL"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="ENTITY_RESOLUTION")
     def ENTITY_RESOLUTION(cls) -> "InterfaceVpcEndpointAwsService":
@@ -77002,6 +77077,11 @@ class InterfaceVpcEndpointAwsService(
     def POLLY(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "POLLY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PRICE_LIST")
+    def PRICE_LIST(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "PRICE_LIST"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="PRIVATE_5G")
     def PRIVATE_5_G(cls) -> "InterfaceVpcEndpointAwsService":
@@ -77431,6 +77511,11 @@ class InterfaceVpcEndpointAwsService(
     def WELL_ARCHITECTED_TOOL(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "WELL_ARCHITECTED_TOOL"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="WORKMAIL")
+    def WORKMAIL(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "WORKMAIL"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="WORKSPACES")
     def WORKSPACES(cls) -> "InterfaceVpcEndpointAwsService":
@@ -77738,9 +77823,8 @@ class InterfaceVpcEndpointProps(InterfaceVpcEndpointOptions):
             ec2.InterfaceVpcEndpoint(self, "VPC Endpoint",
                 vpc=vpc,
                 service=ec2.InterfaceVpcEndpointService("com.amazonaws.vpce.us-east-1.vpce-svc-uuddlrlrbastrtsvc", 443),
-                # Choose which availability zones to place the VPC endpoint in, based on
-                # available AZs
                 subnets=ec2.SubnetSelection(
+                    subnet_type=ec2.SubnetType.PRIVATE_ISOLATED,
                     availability_zones=["us-east-1a", "us-east-1c"]
                 )
             )
@@ -86397,18 +86481,18 @@ class SubnetType(enum.Enum):
 
         # vpc: ec2.Vpc
         
-        
         cluster = docdb.DatabaseCluster(self, "Database",
             master_user=docdb.Login(
-                username="myuser"
+                username="myuser",  # NOTE: 'admin' is reserved by DocumentDB
+                exclude_characters="\"@/:",  # optional, defaults to the set "\"@/" and is also used for eventually created rotations
+                secret_name="/myapp/mydocdb/masteruser"
             ),
             instance_type=ec2.InstanceType.of(ec2.InstanceClass.MEMORY5, ec2.InstanceSize.LARGE),
             vpc_subnets=ec2.SubnetSelection(
                 subnet_type=ec2.SubnetType.PUBLIC
             ),
             vpc=vpc,
-            removal_policy=RemovalPolicy.SNAPSHOT,
-            instance_removal_policy=RemovalPolicy.RETAIN
+            copy_tags_to_snapshot=True
         )
     '''
 
@@ -93828,9 +93912,8 @@ class InterfaceVpcEndpoint(
         ec2.InterfaceVpcEndpoint(self, "VPC Endpoint",
             vpc=vpc,
             service=ec2.InterfaceVpcEndpointService("com.amazonaws.vpce.us-east-1.vpce-svc-uuddlrlrbastrtsvc", 443),
-            # Choose which availability zones to place the VPC endpoint in, based on
-            # available AZs
             subnets=ec2.SubnetSelection(
+                subnet_type=ec2.SubnetType.PRIVATE_ISOLATED,
                 availability_zones=["us-east-1a", "us-east-1c"]
             )
         )
@@ -98170,8 +98253,10 @@ def _typecheckingstub__bccc7dacde749a3ad3c41d116d1f509ffb5b6881668bfa61c205201b1
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
+    address: typing.Optional[builtins.str] = None,
     domain: typing.Optional[builtins.str] = None,
     instance_id: typing.Optional[builtins.str] = None,
+    ipam_pool_id: typing.Optional[builtins.str] = None,
     network_border_group: typing.Optional[builtins.str] = None,
     public_ipv4_pool: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -98192,6 +98277,12 @@ def _typecheckingstub__11eb36186f31c4bea4b03f2dbdc66bc726d4347d12b0636ac6aafbdaf
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__3181fa5c4d75016f17f69f9df76a3499499668e87d593e6609b7dfb341b5b54a(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c49330fba74ade775140567a6ae48812faa62fb21c67fbdd7930ff5cb2189524(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -98204,6 +98295,12 @@ def _typecheckingstub__ca5d5ea7abaea702ac65d5f9e8401058e42e908ac87dfdbb8722dcb03
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__01687921711d1f3c67e4646d6c469f48798d6ad165b0b5a020b27f122f7abf9e(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__ad1782664068283c33182db79bb89a1f93f451785b0dfd4fedeaf0a308110149(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -98296,8 +98393,10 @@ def _typecheckingstub__d7e6118721d9f331f2cfafeff3be65471b4d44c1abf5e5083229fa0bb
 
 def _typecheckingstub__ff96bcb9544d5ebc6273ac8c518468df0cc1fd7720428f6e4ec85ecddb06fa60(
     *,
+    address: typing.Optional[builtins.str] = None,
     domain: typing.Optional[builtins.str] = None,
     instance_id: typing.Optional[builtins.str] = None,
+    ipam_pool_id: typing.Optional[builtins.str] = None,
     network_border_group: typing.Optional[builtins.str] = None,
     public_ipv4_pool: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,