aws-cdk-lib 2.165.0__py3-none-any.whl → 2.166.0__py3-none-any.whl

aws_cdk/aws_appsync/__init__.py

@@ -972,6 +972,7 @@ from .. import (
     IResolvable as _IResolvable_da3f097b,
     IResource as _IResource_c80c4260,
     ITaggable as _ITaggable_36806126,
+    ITaggableV2 as _ITaggableV2_4e6798f8,
     IgnoreMode as _IgnoreMode_655a98e8,
     Resource as _Resource_45bc6135,
     ResourceProps as _ResourceProps_15a65b4e,
@@ -2445,16 +2446,16 @@ class CachingConfig:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
-class CfnApiCache(
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnApi(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
-    jsii_type="aws-cdk-lib.aws_appsync.CfnApiCache",
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApi",
 ):
-    '''The ``AWS::AppSync::ApiCache`` resource represents the input of a ``CreateApiCache`` operation.
+    '''Creates a ``GraphqlApi`` object.
 
-    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html
-    :cloudformationResource: AWS::AppSync::ApiCache
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html
+    :cloudformationResource: AWS::AppSync::Api
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -2463,16 +2464,59 @@ class CfnApiCache(
         # The values are placeholders you should change.
         from aws_cdk import aws_appsync as appsync
         
-        cfn_api_cache = appsync.CfnApiCache(self, "MyCfnApiCache",
-            api_caching_behavior="apiCachingBehavior",
-            api_id="apiId",
-            ttl=123,
-            type="type",
+        cfn_api = appsync.CfnApi(self, "MyCfnApi",
+            name="name",
         
             # the properties below are optional
-            at_rest_encryption_enabled=False,
-            health_metrics_config="healthMetricsConfig",
-            transit_encryption_enabled=False
+            event_config=appsync.CfnApi.EventConfigProperty(
+                auth_providers=[appsync.CfnApi.AuthProviderProperty(
+                    auth_type="authType",
+        
+                    # the properties below are optional
+                    cognito_config=appsync.CfnApi.CognitoConfigProperty(
+                        aws_region="awsRegion",
+                        user_pool_id="userPoolId",
+        
+                        # the properties below are optional
+                        app_id_client_regex="appIdClientRegex"
+                    ),
+                    lambda_authorizer_config=appsync.CfnApi.LambdaAuthorizerConfigProperty(
+                        authorizer_uri="authorizerUri",
+        
+                        # the properties below are optional
+                        authorizer_result_ttl_in_seconds=123,
+                        identity_validation_expression="identityValidationExpression"
+                    ),
+                    open_id_connect_config=appsync.CfnApi.OpenIDConnectConfigProperty(
+                        issuer="issuer",
+        
+                        # the properties below are optional
+                        auth_ttl=123,
+                        client_id="clientId",
+                        iat_ttl=123
+                    )
+                )],
+                connection_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                    auth_type="authType"
+                )],
+                default_publish_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                    auth_type="authType"
+                )],
+                default_subscribe_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                    auth_type="authType"
+                )],
+        
+                # the properties below are optional
+                log_config=appsync.CfnApi.EventLogConfigProperty(
+                    cloud_watch_logs_role_arn="cloudWatchLogsRoleArn",
+                    log_level="logLevel"
+                )
+            ),
+            owner_contact="ownerContact",
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
         )
     '''
 
@@ -2481,37 +2525,28 @@ class CfnApiCache(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        api_caching_behavior: builtins.str,
-        api_id: builtins.str,
-        ttl: jsii.Number,
-        type: builtins.str,
-        at_rest_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-        health_metrics_config: typing.Optional[builtins.str] = None,
-        transit_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        name: builtins.str,
+        event_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.EventConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        owner_contact: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param api_caching_behavior: Caching behavior. - *FULL_REQUEST_CACHING* : All requests are fully cached. - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
-        :param api_id: The GraphQL API ID.
-        :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
-        :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
-        :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
-        :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
-        :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
+        :param name: The API name.
+        :param event_config: The configuration for an Event Api.
+        :param owner_contact: The owner contact information for an API resource. This field accepts any string input with a length of 0 - 256 characters.
+        :param tags: The tags.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__e9d92b7b2abdac7341eb92f7ac10d2d67dd2700af68eaf42c72c47ffdaacc344)
+            type_hints = typing.get_type_hints(_typecheckingstub__9b24e030284e4cb760e04c0345cc69b457962fa5c53b82f009a5c412ad0fa1e5)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-        props = CfnApiCacheProps(
-            api_caching_behavior=api_caching_behavior,
-            api_id=api_id,
-            ttl=ttl,
-            type=type,
-            at_rest_encryption_enabled=at_rest_encryption_enabled,
-            health_metrics_config=health_metrics_config,
-            transit_encryption_enabled=transit_encryption_enabled,
+        props = CfnApiProps(
+            name=name,
+            event_config=event_config,
+            owner_contact=owner_contact,
+            tags=tags,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -2523,7 +2558,1333 @@ class CfnApiCache(
         :param inspector: tree inspector to collect and process attributes.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__142193172b7ee1304f3b8fd949531b4cfa950ea62d0dc10f9ed5a184a603132d)
+            type_hints = typing.get_type_hints(_typecheckingstub__1a34658e511f6fa9562934d95c768fd4b2af2314ddf2dab2969f39073417c21f)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__80dee192d808ade2b05e0e5eae2e320cb156ff9affe045ecbcaf005a54690f10)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrApiArn")
+    def attr_api_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the AppSync Api.
+
+        :cloudformationAttribute: ApiArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrApiArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrApiId")
+    def attr_api_id(self) -> builtins.str:
+        '''The API ID.
+
+        :cloudformationAttribute: ApiId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrApiId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrDns")
+    def attr_dns(self) -> _IResolvable_da3f097b:
+        '''A map of DNS names for the AppSync API.
+
+        :cloudformationAttribute: Dns
+        '''
+        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrDns"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="name")
+    def name(self) -> builtins.str:
+        '''The API name.'''
+        return typing.cast(builtins.str, jsii.get(self, "name"))
+
+    @name.setter
+    def name(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2bbcc5e3c150d28701074668c2cc2da51f0ba8e3870f53f61466fcc37a9b9d92)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="eventConfig")
+    def event_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventConfigProperty"]]:
+        '''The configuration for an Event Api.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventConfigProperty"]], jsii.get(self, "eventConfig"))
+
+    @event_config.setter
+    def event_config(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventConfigProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9323cec9a000145849866e550b55f0a549087cc444c4fa5706fdbc7c1455d154)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "eventConfig", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="ownerContact")
+    def owner_contact(self) -> typing.Optional[builtins.str]:
+        '''The owner contact information for an API resource.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "ownerContact"))
+
+    @owner_contact.setter
+    def owner_contact(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b829d518b74ad55cbf9233be61a91ddec84af300e750befd18c27d6ec18db38d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "ownerContact", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a8b30f166f8b9fa0fc02ab2eb4ff33b85277e77827ecebf6d7fd569a6667a8ea)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.AuthModeProperty",
+        jsii_struct_bases=[],
+        name_mapping={"auth_type": "authType"},
+    )
+    class AuthModeProperty:
+        def __init__(self, *, auth_type: typing.Optional[builtins.str] = None) -> None:
+            '''An auth mode.
+
+            :param auth_type: Security configuration for your AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authmode.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                auth_mode_property = appsync.CfnApi.AuthModeProperty(
+                    auth_type="authType"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__27b661cb5be7fc793a7469c90adcd7629e723a94b2a389fead69d96cfde5dba2)
+                check_type(argname="argument auth_type", value=auth_type, expected_type=type_hints["auth_type"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if auth_type is not None:
+                self._values["auth_type"] = auth_type
+
+        @builtins.property
+        def auth_type(self) -> typing.Optional[builtins.str]:
+            '''Security configuration for your AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authmode.html#cfn-appsync-api-authmode-authtype
+            '''
+            result = self._values.get("auth_type")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "AuthModeProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.AuthProviderProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "auth_type": "authType",
+            "cognito_config": "cognitoConfig",
+            "lambda_authorizer_config": "lambdaAuthorizerConfig",
+            "open_id_connect_config": "openIdConnectConfig",
+        },
+    )
+    class AuthProviderProperty:
+        def __init__(
+            self,
+            *,
+            auth_type: builtins.str,
+            cognito_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.CognitoConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            lambda_authorizer_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.LambdaAuthorizerConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            open_id_connect_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.OpenIDConnectConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''An auth provider for the AppSync API.
+
+            :param auth_type: Security configuration for your AppSync API.
+            :param cognito_config: Optional authorization configuration for using Amazon Cognito user pools with your API endpoint.
+            :param lambda_authorizer_config: A LambdaAuthorizerConfig holds configuration on how to authorize AWS AppSync API access when using the AWS_LAMBDA authorizer mode. Be aware that an AWS AppSync API may have only one Lambda authorizer configured at a time.
+            :param open_id_connect_config: The OpenID Connect configuration.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                auth_provider_property = appsync.CfnApi.AuthProviderProperty(
+                    auth_type="authType",
+                
+                    # the properties below are optional
+                    cognito_config=appsync.CfnApi.CognitoConfigProperty(
+                        aws_region="awsRegion",
+                        user_pool_id="userPoolId",
+                
+                        # the properties below are optional
+                        app_id_client_regex="appIdClientRegex"
+                    ),
+                    lambda_authorizer_config=appsync.CfnApi.LambdaAuthorizerConfigProperty(
+                        authorizer_uri="authorizerUri",
+                
+                        # the properties below are optional
+                        authorizer_result_ttl_in_seconds=123,
+                        identity_validation_expression="identityValidationExpression"
+                    ),
+                    open_id_connect_config=appsync.CfnApi.OpenIDConnectConfigProperty(
+                        issuer="issuer",
+                
+                        # the properties below are optional
+                        auth_ttl=123,
+                        client_id="clientId",
+                        iat_ttl=123
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__d3b431432784c1151b3b95b1186edc1bcfaa11a3f70614ce43f998df8d1ae46d)
+                check_type(argname="argument auth_type", value=auth_type, expected_type=type_hints["auth_type"])
+                check_type(argname="argument cognito_config", value=cognito_config, expected_type=type_hints["cognito_config"])
+                check_type(argname="argument lambda_authorizer_config", value=lambda_authorizer_config, expected_type=type_hints["lambda_authorizer_config"])
+                check_type(argname="argument open_id_connect_config", value=open_id_connect_config, expected_type=type_hints["open_id_connect_config"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "auth_type": auth_type,
+            }
+            if cognito_config is not None:
+                self._values["cognito_config"] = cognito_config
+            if lambda_authorizer_config is not None:
+                self._values["lambda_authorizer_config"] = lambda_authorizer_config
+            if open_id_connect_config is not None:
+                self._values["open_id_connect_config"] = open_id_connect_config
+
+        @builtins.property
+        def auth_type(self) -> builtins.str:
+            '''Security configuration for your AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-authtype
+            '''
+            result = self._values.get("auth_type")
+            assert result is not None, "Required property 'auth_type' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def cognito_config(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.CognitoConfigProperty"]]:
+            '''Optional authorization configuration for using Amazon Cognito user pools with your API endpoint.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-cognitoconfig
+            '''
+            result = self._values.get("cognito_config")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.CognitoConfigProperty"]], result)
+
+        @builtins.property
+        def lambda_authorizer_config(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.LambdaAuthorizerConfigProperty"]]:
+            '''A LambdaAuthorizerConfig holds configuration on how to authorize AWS AppSync API access when using the AWS_LAMBDA authorizer mode.
+
+            Be aware that an AWS AppSync API may have only one Lambda authorizer configured at a time.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-lambdaauthorizerconfig
+            '''
+            result = self._values.get("lambda_authorizer_config")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.LambdaAuthorizerConfigProperty"]], result)
+
+        @builtins.property
+        def open_id_connect_config(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.OpenIDConnectConfigProperty"]]:
+            '''The OpenID Connect configuration.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-openidconnectconfig
+            '''
+            result = self._values.get("open_id_connect_config")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.OpenIDConnectConfigProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "AuthProviderProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.CognitoConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "aws_region": "awsRegion",
+            "user_pool_id": "userPoolId",
+            "app_id_client_regex": "appIdClientRegex",
+        },
+    )
+    class CognitoConfigProperty:
+        def __init__(
+            self,
+            *,
+            aws_region: builtins.str,
+            user_pool_id: builtins.str,
+            app_id_client_regex: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Optional authorization configuration for using Amazon Cognito user pools with your API endpoint.
+
+            :param aws_region: 
+            :param user_pool_id: 
+            :param app_id_client_regex: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                cognito_config_property = appsync.CfnApi.CognitoConfigProperty(
+                    aws_region="awsRegion",
+                    user_pool_id="userPoolId",
+                
+                    # the properties below are optional
+                    app_id_client_regex="appIdClientRegex"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__012c8ad0fa2d1afcda68ca532d5e287baa9e170049fe0c4e05e77dab9f8eb753)
+                check_type(argname="argument aws_region", value=aws_region, expected_type=type_hints["aws_region"])
+                check_type(argname="argument user_pool_id", value=user_pool_id, expected_type=type_hints["user_pool_id"])
+                check_type(argname="argument app_id_client_regex", value=app_id_client_regex, expected_type=type_hints["app_id_client_regex"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "aws_region": aws_region,
+                "user_pool_id": user_pool_id,
+            }
+            if app_id_client_regex is not None:
+                self._values["app_id_client_regex"] = app_id_client_regex
+
+        @builtins.property
+        def aws_region(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html#cfn-appsync-api-cognitoconfig-awsregion
+            '''
+            result = self._values.get("aws_region")
+            assert result is not None, "Required property 'aws_region' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def user_pool_id(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html#cfn-appsync-api-cognitoconfig-userpoolid
+            '''
+            result = self._values.get("user_pool_id")
+            assert result is not None, "Required property 'user_pool_id' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def app_id_client_regex(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html#cfn-appsync-api-cognitoconfig-appidclientregex
+            '''
+            result = self._values.get("app_id_client_regex")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CognitoConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.EventConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "auth_providers": "authProviders",
+            "connection_auth_modes": "connectionAuthModes",
+            "default_publish_auth_modes": "defaultPublishAuthModes",
+            "default_subscribe_auth_modes": "defaultSubscribeAuthModes",
+            "log_config": "logConfig",
+        },
+    )
+    class EventConfigProperty:
+        def __init__(
+            self,
+            *,
+            auth_providers: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.AuthProviderProperty", typing.Dict[builtins.str, typing.Any]]]]],
+            connection_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.AuthModeProperty", typing.Dict[builtins.str, typing.Any]]]]],
+            default_publish_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.AuthModeProperty", typing.Dict[builtins.str, typing.Any]]]]],
+            default_subscribe_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.AuthModeProperty", typing.Dict[builtins.str, typing.Any]]]]],
+            log_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.EventLogConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''The configuration for an Event Api.
+
+            :param auth_providers: A list of auth providers for the AppSync API.
+            :param connection_auth_modes: A list of auth modes for the AppSync API.
+            :param default_publish_auth_modes: A list of auth modes for the AppSync API.
+            :param default_subscribe_auth_modes: A list of auth modes for the AppSync API.
+            :param log_config: The log config for the AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                event_config_property = appsync.CfnApi.EventConfigProperty(
+                    auth_providers=[appsync.CfnApi.AuthProviderProperty(
+                        auth_type="authType",
+                
+                        # the properties below are optional
+                        cognito_config=appsync.CfnApi.CognitoConfigProperty(
+                            aws_region="awsRegion",
+                            user_pool_id="userPoolId",
+                
+                            # the properties below are optional
+                            app_id_client_regex="appIdClientRegex"
+                        ),
+                        lambda_authorizer_config=appsync.CfnApi.LambdaAuthorizerConfigProperty(
+                            authorizer_uri="authorizerUri",
+                
+                            # the properties below are optional
+                            authorizer_result_ttl_in_seconds=123,
+                            identity_validation_expression="identityValidationExpression"
+                        ),
+                        open_id_connect_config=appsync.CfnApi.OpenIDConnectConfigProperty(
+                            issuer="issuer",
+                
+                            # the properties below are optional
+                            auth_ttl=123,
+                            client_id="clientId",
+                            iat_ttl=123
+                        )
+                    )],
+                    connection_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+                    default_publish_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+                    default_subscribe_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+                
+                    # the properties below are optional
+                    log_config=appsync.CfnApi.EventLogConfigProperty(
+                        cloud_watch_logs_role_arn="cloudWatchLogsRoleArn",
+                        log_level="logLevel"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__53f8b01a4596f6e890e45a2870f92278e02fc06e912e096c33920157038135cf)
+                check_type(argname="argument auth_providers", value=auth_providers, expected_type=type_hints["auth_providers"])
+                check_type(argname="argument connection_auth_modes", value=connection_auth_modes, expected_type=type_hints["connection_auth_modes"])
+                check_type(argname="argument default_publish_auth_modes", value=default_publish_auth_modes, expected_type=type_hints["default_publish_auth_modes"])
+                check_type(argname="argument default_subscribe_auth_modes", value=default_subscribe_auth_modes, expected_type=type_hints["default_subscribe_auth_modes"])
+                check_type(argname="argument log_config", value=log_config, expected_type=type_hints["log_config"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "auth_providers": auth_providers,
+                "connection_auth_modes": connection_auth_modes,
+                "default_publish_auth_modes": default_publish_auth_modes,
+                "default_subscribe_auth_modes": default_subscribe_auth_modes,
+            }
+            if log_config is not None:
+                self._values["log_config"] = log_config
+
+        @builtins.property
+        def auth_providers(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthProviderProperty"]]]:
+            '''A list of auth providers for the AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-authproviders
+            '''
+            result = self._values.get("auth_providers")
+            assert result is not None, "Required property 'auth_providers' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthProviderProperty"]]], result)
+
+        @builtins.property
+        def connection_auth_modes(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]]:
+            '''A list of auth modes for the AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-connectionauthmodes
+            '''
+            result = self._values.get("connection_auth_modes")
+            assert result is not None, "Required property 'connection_auth_modes' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]], result)
+
+        @builtins.property
+        def default_publish_auth_modes(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]]:
+            '''A list of auth modes for the AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-defaultpublishauthmodes
+            '''
+            result = self._values.get("default_publish_auth_modes")
+            assert result is not None, "Required property 'default_publish_auth_modes' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]], result)
+
+        @builtins.property
+        def default_subscribe_auth_modes(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]]:
+            '''A list of auth modes for the AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-defaultsubscribeauthmodes
+            '''
+            result = self._values.get("default_subscribe_auth_modes")
+            assert result is not None, "Required property 'default_subscribe_auth_modes' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]], result)
+
+        @builtins.property
+        def log_config(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventLogConfigProperty"]]:
+            '''The log config for the AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-logconfig
+            '''
+            result = self._values.get("log_config")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventLogConfigProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "EventConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.EventLogConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "cloud_watch_logs_role_arn": "cloudWatchLogsRoleArn",
+            "log_level": "logLevel",
+        },
+    )
+    class EventLogConfigProperty:
+        def __init__(
+            self,
+            *,
+            cloud_watch_logs_role_arn: builtins.str,
+            log_level: builtins.str,
+        ) -> None:
+            '''The log config for the AppSync API.
+
+            :param cloud_watch_logs_role_arn: 
+            :param log_level: Logging level for the AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventlogconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                event_log_config_property = appsync.CfnApi.EventLogConfigProperty(
+                    cloud_watch_logs_role_arn="cloudWatchLogsRoleArn",
+                    log_level="logLevel"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__5cbb1c5597e58c84a31d8dc10841de6fa70b9c328dacba388a7afdab090b3e6a)
+                check_type(argname="argument cloud_watch_logs_role_arn", value=cloud_watch_logs_role_arn, expected_type=type_hints["cloud_watch_logs_role_arn"])
+                check_type(argname="argument log_level", value=log_level, expected_type=type_hints["log_level"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "cloud_watch_logs_role_arn": cloud_watch_logs_role_arn,
+                "log_level": log_level,
+            }
+
+        @builtins.property
+        def cloud_watch_logs_role_arn(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventlogconfig.html#cfn-appsync-api-eventlogconfig-cloudwatchlogsrolearn
+            '''
+            result = self._values.get("cloud_watch_logs_role_arn")
+            assert result is not None, "Required property 'cloud_watch_logs_role_arn' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def log_level(self) -> builtins.str:
+            '''Logging level for the AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventlogconfig.html#cfn-appsync-api-eventlogconfig-loglevel
+            '''
+            result = self._values.get("log_level")
+            assert result is not None, "Required property 'log_level' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "EventLogConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.LambdaAuthorizerConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "authorizer_uri": "authorizerUri",
+            "authorizer_result_ttl_in_seconds": "authorizerResultTtlInSeconds",
+            "identity_validation_expression": "identityValidationExpression",
+        },
+    )
+    class LambdaAuthorizerConfigProperty:
+        def __init__(
+            self,
+            *,
+            authorizer_uri: builtins.str,
+            authorizer_result_ttl_in_seconds: typing.Optional[jsii.Number] = None,
+            identity_validation_expression: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''A ``LambdaAuthorizerConfig`` specifies how to authorize AWS AppSync API access when using the ``AWS_LAMBDA`` authorizer mode.
+
+            Be aware that an AWS AppSync API can have only one AWS Lambda authorizer configured at a time.
+
+            :param authorizer_uri: The Amazon Resource Name (ARN) of the Lambda function to be called for authorization. This can be a standard Lambda ARN, a version ARN ( ``.../v3`` ), or an alias ARN. *Note* : This Lambda function must have the following resource-based policy assigned to it. When configuring Lambda authorizers in the console, this is done for you. To use the AWS Command Line Interface ( AWS CLI ), run the following: ``aws lambda add-permission --function-name "arn:aws:lambda:us-east-2:111122223333:function:my-function" --statement-id "appsync" --principal appsync.amazonaws.com --action lambda:InvokeFunction``
+            :param authorizer_result_ttl_in_seconds: The number of seconds a response should be cached for. The default is 0 seconds, which disables caching. If you don't specify a value for ``authorizerResultTtlInSeconds`` , the default value is used. The maximum value is one hour (3600 seconds). The Lambda function can override this by returning a ``ttlOverride`` key in its response.
+            :param identity_validation_expression: A regular expression for validation of tokens before the Lambda function is called.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-lambdaauthorizerconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                lambda_authorizer_config_property = appsync.CfnApi.LambdaAuthorizerConfigProperty(
+                    authorizer_uri="authorizerUri",
+                
+                    # the properties below are optional
+                    authorizer_result_ttl_in_seconds=123,
+                    identity_validation_expression="identityValidationExpression"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__6eb7eaf1ef726d95b558700ffd22e714695a485aed3b5a3ae796f2a03efae22c)
+                check_type(argname="argument authorizer_uri", value=authorizer_uri, expected_type=type_hints["authorizer_uri"])
+                check_type(argname="argument authorizer_result_ttl_in_seconds", value=authorizer_result_ttl_in_seconds, expected_type=type_hints["authorizer_result_ttl_in_seconds"])
+                check_type(argname="argument identity_validation_expression", value=identity_validation_expression, expected_type=type_hints["identity_validation_expression"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "authorizer_uri": authorizer_uri,
+            }
+            if authorizer_result_ttl_in_seconds is not None:
+                self._values["authorizer_result_ttl_in_seconds"] = authorizer_result_ttl_in_seconds
+            if identity_validation_expression is not None:
+                self._values["identity_validation_expression"] = identity_validation_expression
+
+        @builtins.property
+        def authorizer_uri(self) -> builtins.str:
+            '''The Amazon Resource Name (ARN) of the Lambda function to be called for authorization.
+
+            This can be a standard Lambda ARN, a version ARN ( ``.../v3`` ), or an alias ARN.
+
+            *Note* : This Lambda function must have the following resource-based policy assigned to it. When configuring Lambda authorizers in the console, this is done for you. To use the AWS Command Line Interface ( AWS CLI ), run the following:
+
+            ``aws lambda add-permission --function-name "arn:aws:lambda:us-east-2:111122223333:function:my-function" --statement-id "appsync" --principal appsync.amazonaws.com --action lambda:InvokeFunction``
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-lambdaauthorizerconfig.html#cfn-appsync-api-lambdaauthorizerconfig-authorizeruri
+            '''
+            result = self._values.get("authorizer_uri")
+            assert result is not None, "Required property 'authorizer_uri' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def authorizer_result_ttl_in_seconds(self) -> typing.Optional[jsii.Number]:
+            '''The number of seconds a response should be cached for.
+
+            The default is 0 seconds, which disables caching. If you don't specify a value for ``authorizerResultTtlInSeconds`` , the default value is used. The maximum value is one hour (3600 seconds). The Lambda function can override this by returning a ``ttlOverride`` key in its response.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-lambdaauthorizerconfig.html#cfn-appsync-api-lambdaauthorizerconfig-authorizerresultttlinseconds
+            '''
+            result = self._values.get("authorizer_result_ttl_in_seconds")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def identity_validation_expression(self) -> typing.Optional[builtins.str]:
+            '''A regular expression for validation of tokens before the Lambda function is called.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-lambdaauthorizerconfig.html#cfn-appsync-api-lambdaauthorizerconfig-identityvalidationexpression
+            '''
+            result = self._values.get("identity_validation_expression")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "LambdaAuthorizerConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.OpenIDConnectConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "issuer": "issuer",
+            "auth_ttl": "authTtl",
+            "client_id": "clientId",
+            "iat_ttl": "iatTtl",
+        },
+    )
+    class OpenIDConnectConfigProperty:
+        def __init__(
+            self,
+            *,
+            issuer: builtins.str,
+            auth_ttl: typing.Optional[jsii.Number] = None,
+            client_id: typing.Optional[builtins.str] = None,
+            iat_ttl: typing.Optional[jsii.Number] = None,
+        ) -> None:
+            '''Describes an OpenID Connect (OIDC) configuration.
+
+            :param issuer: The issuer for the OIDC configuration. The issuer returned by discovery must exactly match the value of ``iss`` in the ID token.
+            :param auth_ttl: The number of milliseconds that a token is valid after being authenticated.
+            :param client_id: The client identifier of the relying party at the OpenID identity provider. This identifier is typically obtained when the relying party is registered with the OpenID identity provider. You can specify a regular expression so that AWS AppSync can validate against multiple client identifiers at a time.
+            :param iat_ttl: The number of milliseconds that a token is valid after it's issued to a user.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-openidconnectconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                open_iDConnect_config_property = appsync.CfnApi.OpenIDConnectConfigProperty(
+                    issuer="issuer",
+                
+                    # the properties below are optional
+                    auth_ttl=123,
+                    client_id="clientId",
+                    iat_ttl=123
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__560e301b02d9bfc40a0d691fa82c55f336f07c62f130aa6e9464ab1c1b676cf8)
+                check_type(argname="argument issuer", value=issuer, expected_type=type_hints["issuer"])
+                check_type(argname="argument auth_ttl", value=auth_ttl, expected_type=type_hints["auth_ttl"])
+                check_type(argname="argument client_id", value=client_id, expected_type=type_hints["client_id"])
+                check_type(argname="argument iat_ttl", value=iat_ttl, expected_type=type_hints["iat_ttl"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "issuer": issuer,
+            }
+            if auth_ttl is not None:
+                self._values["auth_ttl"] = auth_ttl
+            if client_id is not None:
+                self._values["client_id"] = client_id
+            if iat_ttl is not None:
+                self._values["iat_ttl"] = iat_ttl
+
+        @builtins.property
+        def issuer(self) -> builtins.str:
+            '''The issuer for the OIDC configuration.
+
+            The issuer returned by discovery must exactly match the value of ``iss`` in the ID token.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-openidconnectconfig.html#cfn-appsync-api-openidconnectconfig-issuer
+            '''
+            result = self._values.get("issuer")
+            assert result is not None, "Required property 'issuer' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def auth_ttl(self) -> typing.Optional[jsii.Number]:
+            '''The number of milliseconds that a token is valid after being authenticated.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-openidconnectconfig.html#cfn-appsync-api-openidconnectconfig-authttl
+            '''
+            result = self._values.get("auth_ttl")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def client_id(self) -> typing.Optional[builtins.str]:
+            '''The client identifier of the relying party at the OpenID identity provider.
+
+            This identifier is typically obtained when the relying party is registered with the OpenID identity provider. You can specify a regular expression so that AWS AppSync can validate against multiple client identifiers at a time.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-openidconnectconfig.html#cfn-appsync-api-openidconnectconfig-clientid
+            '''
+            result = self._values.get("client_id")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def iat_ttl(self) -> typing.Optional[jsii.Number]:
+            '''The number of milliseconds that a token is valid after it's issued to a user.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-openidconnectconfig.html#cfn-appsync-api-openidconnectconfig-iatttl
+            '''
+            result = self._values.get("iat_ttl")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "OpenIDConnectConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.implements(_IInspectable_c2943556)
+class CfnApiCache(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApiCache",
+):
+    '''The ``AWS::AppSync::ApiCache`` resource represents the input of a ``CreateApiCache`` operation.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html
+    :cloudformationResource: AWS::AppSync::ApiCache
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_appsync as appsync
+        
+        cfn_api_cache = appsync.CfnApiCache(self, "MyCfnApiCache",
+            api_caching_behavior="apiCachingBehavior",
+            api_id="apiId",
+            ttl=123,
+            type="type",
+        
+            # the properties below are optional
+            at_rest_encryption_enabled=False,
+            health_metrics_config="healthMetricsConfig",
+            transit_encryption_enabled=False
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        api_caching_behavior: builtins.str,
+        api_id: builtins.str,
+        ttl: jsii.Number,
+        type: builtins.str,
+        at_rest_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        health_metrics_config: typing.Optional[builtins.str] = None,
+        transit_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param api_caching_behavior: Caching behavior. - *FULL_REQUEST_CACHING* : All requests are fully cached. - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
+        :param api_id: The GraphQL API ID.
+        :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
+        :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
+        :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
+        :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
+        :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e9d92b7b2abdac7341eb92f7ac10d2d67dd2700af68eaf42c72c47ffdaacc344)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnApiCacheProps(
+            api_caching_behavior=api_caching_behavior,
+            api_id=api_id,
+            ttl=ttl,
+            type=type,
+            at_rest_encryption_enabled=at_rest_encryption_enabled,
+            health_metrics_config=health_metrics_config,
+            transit_encryption_enabled=transit_encryption_enabled,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__142193172b7ee1304f3b8fd949531b4cfa950ea62d0dc10f9ed5a184a603132d)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1ce863b5f21a86ce886458054cd4de0550269c18eb7c4f3fb37884dc2869845e)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrId")
+    def attr_id(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: Id
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="apiCachingBehavior")
+    def api_caching_behavior(self) -> builtins.str:
+        '''Caching behavior.'''
+        return typing.cast(builtins.str, jsii.get(self, "apiCachingBehavior"))
+
+    @api_caching_behavior.setter
+    def api_caching_behavior(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__aee6b3576fbf654864dae4f55fe292d210bf01534f16f80af0ac225f8fa338c9)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "apiCachingBehavior", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="apiId")
+    def api_id(self) -> builtins.str:
+        '''The GraphQL API ID.'''
+        return typing.cast(builtins.str, jsii.get(self, "apiId"))
+
+    @api_id.setter
+    def api_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6c2fdac623dbaddb2a0226d75e6f3ca84c058f3f46b9c9a1289820c1cf0827e1)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "apiId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="ttl")
+    def ttl(self) -> jsii.Number:
+        '''TTL in seconds for cache entries.'''
+        return typing.cast(jsii.Number, jsii.get(self, "ttl"))
+
+    @ttl.setter
+    def ttl(self, value: jsii.Number) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1893b7ba08236941b8e5bb4704e7fe53f8819086085796443b5d68f513e66eaa)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "ttl", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="type")
+    def type(self) -> builtins.str:
+        '''The cache instance type.
+
+        Valid values are.
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "type"))
+
+    @type.setter
+    def type(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__45dc491e21920c6cd0ddecd9aada80283ac759d9eaca52c45a6ce35197166e9d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "type", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="atRestEncryptionEnabled")
+    def at_rest_encryption_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''At-rest encryption flag for cache.'''
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "atRestEncryptionEnabled"))
+
+    @at_rest_encryption_enabled.setter
+    def at_rest_encryption_enabled(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__93a4abe242f634763c1f128b7e17017d1176924c9b032d5536f4caa3b3fc3bd6)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "atRestEncryptionEnabled", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="healthMetricsConfig")
+    def health_metrics_config(self) -> typing.Optional[builtins.str]:
+        '''Controls how cache health metrics will be emitted to CloudWatch.
+
+        Cache health metrics include:.
+        '''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "healthMetricsConfig"))
+
+    @health_metrics_config.setter
+    def health_metrics_config(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__55de0a796fc6cc946fccbec8ff82c493648ae16228267a0627a624d4e64e10dd)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "healthMetricsConfig", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="transitEncryptionEnabled")
+    def transit_encryption_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''Transit encryption flag when connecting to cache.'''
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "transitEncryptionEnabled"))
+
+    @transit_encryption_enabled.setter
+    def transit_encryption_enabled(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__eb39499095e917401c885f7c77781744d09df071b1ed62c6f2c32cbbc6fbdb33)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "transitEncryptionEnabled", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApiCacheProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "api_caching_behavior": "apiCachingBehavior",
+        "api_id": "apiId",
+        "ttl": "ttl",
+        "type": "type",
+        "at_rest_encryption_enabled": "atRestEncryptionEnabled",
+        "health_metrics_config": "healthMetricsConfig",
+        "transit_encryption_enabled": "transitEncryptionEnabled",
+    },
+)
+class CfnApiCacheProps:
+    def __init__(
+        self,
+        *,
+        api_caching_behavior: builtins.str,
+        api_id: builtins.str,
+        ttl: jsii.Number,
+        type: builtins.str,
+        at_rest_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        health_metrics_config: typing.Optional[builtins.str] = None,
+        transit_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnApiCache``.
+
+        :param api_caching_behavior: Caching behavior. - *FULL_REQUEST_CACHING* : All requests are fully cached. - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
+        :param api_id: The GraphQL API ID.
+        :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
+        :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
+        :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
+        :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
+        :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_appsync as appsync
+            
+            cfn_api_cache_props = appsync.CfnApiCacheProps(
+                api_caching_behavior="apiCachingBehavior",
+                api_id="apiId",
+                ttl=123,
+                type="type",
+            
+                # the properties below are optional
+                at_rest_encryption_enabled=False,
+                health_metrics_config="healthMetricsConfig",
+                transit_encryption_enabled=False
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8f054fa3186eb5f122c20e523bed485713c72511ee3ee94be25733ecad9a348c)
+            check_type(argname="argument api_caching_behavior", value=api_caching_behavior, expected_type=type_hints["api_caching_behavior"])
+            check_type(argname="argument api_id", value=api_id, expected_type=type_hints["api_id"])
+            check_type(argname="argument ttl", value=ttl, expected_type=type_hints["ttl"])
+            check_type(argname="argument type", value=type, expected_type=type_hints["type"])
+            check_type(argname="argument at_rest_encryption_enabled", value=at_rest_encryption_enabled, expected_type=type_hints["at_rest_encryption_enabled"])
+            check_type(argname="argument health_metrics_config", value=health_metrics_config, expected_type=type_hints["health_metrics_config"])
+            check_type(argname="argument transit_encryption_enabled", value=transit_encryption_enabled, expected_type=type_hints["transit_encryption_enabled"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "api_caching_behavior": api_caching_behavior,
+            "api_id": api_id,
+            "ttl": ttl,
+            "type": type,
+        }
+        if at_rest_encryption_enabled is not None:
+            self._values["at_rest_encryption_enabled"] = at_rest_encryption_enabled
+        if health_metrics_config is not None:
+            self._values["health_metrics_config"] = health_metrics_config
+        if transit_encryption_enabled is not None:
+            self._values["transit_encryption_enabled"] = transit_encryption_enabled
+
+    @builtins.property
+    def api_caching_behavior(self) -> builtins.str:
+        '''Caching behavior.
+
+        - *FULL_REQUEST_CACHING* : All requests are fully cached.
+        - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-apicachingbehavior
+        '''
+        result = self._values.get("api_caching_behavior")
+        assert result is not None, "Required property 'api_caching_behavior' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def api_id(self) -> builtins.str:
+        '''The GraphQL API ID.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-apiid
+        '''
+        result = self._values.get("api_id")
+        assert result is not None, "Required property 'api_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def ttl(self) -> jsii.Number:
+        '''TTL in seconds for cache entries.
+
+        Valid values are 1–3,600 seconds.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-ttl
+        '''
+        result = self._values.get("ttl")
+        assert result is not None, "Required property 'ttl' is missing"
+        return typing.cast(jsii.Number, result)
+
+    @builtins.property
+    def type(self) -> builtins.str:
+        '''The cache instance type. Valid values are.
+
+        - ``SMALL``
+        - ``MEDIUM``
+        - ``LARGE``
+        - ``XLARGE``
+        - ``LARGE_2X``
+        - ``LARGE_4X``
+        - ``LARGE_8X`` (not available in all regions)
+        - ``LARGE_12X``
+
+        Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used.
+
+        The following legacy instance types are available, but their use is discouraged:
+
+        - *T2_SMALL* : A t2.small instance type.
+        - *T2_MEDIUM* : A t2.medium instance type.
+        - *R4_LARGE* : A r4.large instance type.
+        - *R4_XLARGE* : A r4.xlarge instance type.
+        - *R4_2XLARGE* : A r4.2xlarge instance type.
+        - *R4_4XLARGE* : A r4.4xlarge instance type.
+        - *R4_8XLARGE* : A r4.8xlarge instance type.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-type
+        '''
+        result = self._values.get("type")
+        assert result is not None, "Required property 'type' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def at_rest_encryption_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''At-rest encryption flag for cache.
+
+        You cannot update this setting after creation.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-atrestencryptionenabled
+        '''
+        result = self._values.get("at_rest_encryption_enabled")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+    @builtins.property
+    def health_metrics_config(self) -> typing.Optional[builtins.str]:
+        '''Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:.
+
+        - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration.
+        - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration.
+
+        Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-healthmetricsconfig
+        '''
+        result = self._values.get("health_metrics_config")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def transit_encryption_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''Transit encryption flag when connecting to cache.
+
+        You cannot update this setting after creation.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-transitencryptionenabled
+        '''
+        result = self._values.get("transit_encryption_enabled")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnApiCacheProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_IInspectable_c2943556)
+class CfnApiKey(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApiKey",
+):
+    '''The ``AWS::AppSync::ApiKey`` resource creates a unique key that you can distribute to clients who are executing GraphQL operations with AWS AppSync that require an API key.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html
+    :cloudformationResource: AWS::AppSync::ApiKey
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_appsync as appsync
+        
+        cfn_api_key = appsync.CfnApiKey(self, "MyCfnApiKey",
+            api_id="apiId",
+        
+            # the properties below are optional
+            description="description",
+            expires=123
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        api_id: builtins.str,
+        description: typing.Optional[builtins.str] = None,
+        expires: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param api_id: Unique AWS AppSync GraphQL API ID for this API key.
+        :param description: Unique description of your API key.
+        :param expires: The time after which the API key expires. The date is represented as seconds since the epoch, rounded down to the nearest hour.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e6065dd18c9d420fd4fcd70aced8416006f044f82aecff54150165e832539a8e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnApiKeyProps(api_id=api_id, description=description, expires=expires)
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1f8f02bc91fc0b32c990b8d08a5d7a0ef78a88363920fa69d4196dcc7f2ecfb3)
             check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
         return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
 
@@ -2536,7 +3897,7 @@ class CfnApiCache(
         :param props: -
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__1ce863b5f21a86ce886458054cd4de0550269c18eb7c4f3fb37884dc2869845e)
+            type_hints = typing.get_type_hints(_typecheckingstub__a844b496712966f29aae49f2f831e6a85c7acf03c2ce61c94162ccf13c5efd6d)
             check_type(argname="argument props", value=props, expected_type=type_hints["props"])
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
 
@@ -2547,162 +3908,101 @@ class CfnApiCache(
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrId")
-    def attr_id(self) -> builtins.str:
+    @jsii.member(jsii_name="attrApiKey")
+    def attr_api_key(self) -> builtins.str:
+        '''The API key.
+
+        :cloudformationAttribute: ApiKey
         '''
-        :cloudformationAttribute: Id
+        return typing.cast(builtins.str, jsii.get(self, "attrApiKey"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrApiKeyId")
+    def attr_api_key_id(self) -> builtins.str:
+        '''The API key ID.
+
+        :cloudformationAttribute: ApiKeyId
         '''
-        return typing.cast(builtins.str, jsii.get(self, "attrId"))
+        return typing.cast(builtins.str, jsii.get(self, "attrApiKeyId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrArn")
+    def attr_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the API key, such as ``arn:aws:appsync:us-east-1:123456789012:apis/graphqlapiid/apikey/apikeya1bzhi`` .
+
+        :cloudformationAttribute: Arn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrArn"))
 
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
-    @builtins.property
-    @jsii.member(jsii_name="apiCachingBehavior")
-    def api_caching_behavior(self) -> builtins.str:
-        '''Caching behavior.'''
-        return typing.cast(builtins.str, jsii.get(self, "apiCachingBehavior"))
-
-    @api_caching_behavior.setter
-    def api_caching_behavior(self, value: builtins.str) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__aee6b3576fbf654864dae4f55fe292d210bf01534f16f80af0ac225f8fa338c9)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "apiCachingBehavior", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="apiId")
     def api_id(self) -> builtins.str:
-        '''The GraphQL API ID.'''
+        '''Unique AWS AppSync GraphQL API ID for this API key.'''
         return typing.cast(builtins.str, jsii.get(self, "apiId"))
 
     @api_id.setter
     def api_id(self, value: builtins.str) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__6c2fdac623dbaddb2a0226d75e6f3ca84c058f3f46b9c9a1289820c1cf0827e1)
+            type_hints = typing.get_type_hints(_typecheckingstub__3c1cce5f76a6037620e1cc2e57750c81cc5161ff526ce78123f0cd9f25c8e856)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "apiId", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="ttl")
-    def ttl(self) -> jsii.Number:
-        '''TTL in seconds for cache entries.'''
-        return typing.cast(jsii.Number, jsii.get(self, "ttl"))
-
-    @ttl.setter
-    def ttl(self, value: jsii.Number) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__1893b7ba08236941b8e5bb4704e7fe53f8819086085796443b5d68f513e66eaa)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "ttl", value) # pyright: ignore[reportArgumentType]
-
-    @builtins.property
-    @jsii.member(jsii_name="type")
-    def type(self) -> builtins.str:
-        '''The cache instance type.
-
-        Valid values are.
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "type"))
-
-    @type.setter
-    def type(self, value: builtins.str) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__45dc491e21920c6cd0ddecd9aada80283ac759d9eaca52c45a6ce35197166e9d)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "type", value) # pyright: ignore[reportArgumentType]
-
-    @builtins.property
-    @jsii.member(jsii_name="atRestEncryptionEnabled")
-    def at_rest_encryption_enabled(
-        self,
-    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''At-rest encryption flag for cache.'''
-        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "atRestEncryptionEnabled"))
-
-    @at_rest_encryption_enabled.setter
-    def at_rest_encryption_enabled(
-        self,
-        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
-    ) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__93a4abe242f634763c1f128b7e17017d1176924c9b032d5536f4caa3b3fc3bd6)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "atRestEncryptionEnabled", value) # pyright: ignore[reportArgumentType]
-
-    @builtins.property
-    @jsii.member(jsii_name="healthMetricsConfig")
-    def health_metrics_config(self) -> typing.Optional[builtins.str]:
-        '''Controls how cache health metrics will be emitted to CloudWatch.
-
-        Cache health metrics include:.
-        '''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "healthMetricsConfig"))
+    @jsii.member(jsii_name="description")
+    def description(self) -> typing.Optional[builtins.str]:
+        '''Unique description of your API key.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "description"))
 
-    @health_metrics_config.setter
-    def health_metrics_config(self, value: typing.Optional[builtins.str]) -> None:
+    @description.setter
+    def description(self, value: typing.Optional[builtins.str]) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__55de0a796fc6cc946fccbec8ff82c493648ae16228267a0627a624d4e64e10dd)
+            type_hints = typing.get_type_hints(_typecheckingstub__08afa042939638da41f04c7165f811f5081bd3c8943f787591f098aa4a3b8699)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "healthMetricsConfig", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="transitEncryptionEnabled")
-    def transit_encryption_enabled(
-        self,
-    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Transit encryption flag when connecting to cache.'''
-        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "transitEncryptionEnabled"))
+    @jsii.member(jsii_name="expires")
+    def expires(self) -> typing.Optional[jsii.Number]:
+        '''The time after which the API key expires.'''
+        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "expires"))
 
-    @transit_encryption_enabled.setter
-    def transit_encryption_enabled(
-        self,
-        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
-    ) -> None:
+    @expires.setter
+    def expires(self, value: typing.Optional[jsii.Number]) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__eb39499095e917401c885f7c77781744d09df071b1ed62c6f2c32cbbc6fbdb33)
+            type_hints = typing.get_type_hints(_typecheckingstub__8b034facb88dea82241969fd1a22a5bbaccf03068403021106e073c92112ab45)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "transitEncryptionEnabled", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "expires", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_appsync.CfnApiCacheProps",
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApiKeyProps",
     jsii_struct_bases=[],
     name_mapping={
-        "api_caching_behavior": "apiCachingBehavior",
         "api_id": "apiId",
-        "ttl": "ttl",
-        "type": "type",
-        "at_rest_encryption_enabled": "atRestEncryptionEnabled",
-        "health_metrics_config": "healthMetricsConfig",
-        "transit_encryption_enabled": "transitEncryptionEnabled",
+        "description": "description",
+        "expires": "expires",
     },
 )
-class CfnApiCacheProps:
+class CfnApiKeyProps:
     def __init__(
         self,
         *,
-        api_caching_behavior: builtins.str,
         api_id: builtins.str,
-        ttl: jsii.Number,
-        type: builtins.str,
-        at_rest_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-        health_metrics_config: typing.Optional[builtins.str] = None,
-        transit_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        description: typing.Optional[builtins.str] = None,
+        expires: typing.Optional[jsii.Number] = None,
     ) -> None:
-        '''Properties for defining a ``CfnApiCache``.
+        '''Properties for defining a ``CfnApiKey``.
 
-        :param api_caching_behavior: Caching behavior. - *FULL_REQUEST_CACHING* : All requests are fully cached. - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
-        :param api_id: The GraphQL API ID.
-        :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
-        :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
-        :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
-        :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
-        :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
+        :param api_id: Unique AWS AppSync GraphQL API ID for this API key.
+        :param description: Unique description of your API key.
+        :param expires: The time after which the API key expires. The date is represented as seconds since the epoch, rounded down to the nearest hour.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html
         :exampleMetadata: fixture=_generated
 
         Example::
@@ -2711,145 +4011,215 @@ class CfnApiCacheProps:
             # The values are placeholders you should change.
             from aws_cdk import aws_appsync as appsync
             
-            cfn_api_cache_props = appsync.CfnApiCacheProps(
-                api_caching_behavior="apiCachingBehavior",
+            cfn_api_key_props = appsync.CfnApiKeyProps(
                 api_id="apiId",
-                ttl=123,
-                type="type",
             
                 # the properties below are optional
-                at_rest_encryption_enabled=False,
-                health_metrics_config="healthMetricsConfig",
-                transit_encryption_enabled=False
+                description="description",
+                expires=123
             )
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__8f054fa3186eb5f122c20e523bed485713c72511ee3ee94be25733ecad9a348c)
-            check_type(argname="argument api_caching_behavior", value=api_caching_behavior, expected_type=type_hints["api_caching_behavior"])
+            type_hints = typing.get_type_hints(_typecheckingstub__1688db2b7835c85b4e2cd69655b5d25321ff2aa2ea9e1b2a0612caff34184549)
             check_type(argname="argument api_id", value=api_id, expected_type=type_hints["api_id"])
-            check_type(argname="argument ttl", value=ttl, expected_type=type_hints["ttl"])
-            check_type(argname="argument type", value=type, expected_type=type_hints["type"])
-            check_type(argname="argument at_rest_encryption_enabled", value=at_rest_encryption_enabled, expected_type=type_hints["at_rest_encryption_enabled"])
-            check_type(argname="argument health_metrics_config", value=health_metrics_config, expected_type=type_hints["health_metrics_config"])
-            check_type(argname="argument transit_encryption_enabled", value=transit_encryption_enabled, expected_type=type_hints["transit_encryption_enabled"])
+            check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument expires", value=expires, expected_type=type_hints["expires"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
-            "api_caching_behavior": api_caching_behavior,
             "api_id": api_id,
-            "ttl": ttl,
-            "type": type,
         }
-        if at_rest_encryption_enabled is not None:
-            self._values["at_rest_encryption_enabled"] = at_rest_encryption_enabled
-        if health_metrics_config is not None:
-            self._values["health_metrics_config"] = health_metrics_config
-        if transit_encryption_enabled is not None:
-            self._values["transit_encryption_enabled"] = transit_encryption_enabled
+        if description is not None:
+            self._values["description"] = description
+        if expires is not None:
+            self._values["expires"] = expires
 
     @builtins.property
-    def api_caching_behavior(self) -> builtins.str:
-        '''Caching behavior.
-
-        - *FULL_REQUEST_CACHING* : All requests are fully cached.
-        - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
+    def api_id(self) -> builtins.str:
+        '''Unique AWS AppSync GraphQL API ID for this API key.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-apicachingbehavior
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-apiid
         '''
-        result = self._values.get("api_caching_behavior")
-        assert result is not None, "Required property 'api_caching_behavior' is missing"
+        result = self._values.get("api_id")
+        assert result is not None, "Required property 'api_id' is missing"
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def api_id(self) -> builtins.str:
-        '''The GraphQL API ID.
+    def description(self) -> typing.Optional[builtins.str]:
+        '''Unique description of your API key.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-apiid
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-description
         '''
-        result = self._values.get("api_id")
-        assert result is not None, "Required property 'api_id' is missing"
-        return typing.cast(builtins.str, result)
+        result = self._values.get("description")
+        return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def ttl(self) -> jsii.Number:
-        '''TTL in seconds for cache entries.
+    def expires(self) -> typing.Optional[jsii.Number]:
+        '''The time after which the API key expires.
+
+        The date is represented as seconds since the epoch, rounded down to the nearest hour.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-expires
+        '''
+        result = self._values.get("expires")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnApiKeyProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
 
-        Valid values are 1–3,600 seconds.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-ttl
-        '''
-        result = self._values.get("ttl")
-        assert result is not None, "Required property 'ttl' is missing"
-        return typing.cast(jsii.Number, result)
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApiProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "name": "name",
+        "event_config": "eventConfig",
+        "owner_contact": "ownerContact",
+        "tags": "tags",
+    },
+)
+class CfnApiProps:
+    def __init__(
+        self,
+        *,
+        name: builtins.str,
+        event_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.EventConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        owner_contact: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnApi``.
 
-    @builtins.property
-    def type(self) -> builtins.str:
-        '''The cache instance type. Valid values are.
+        :param name: The API name.
+        :param event_config: The configuration for an Event Api.
+        :param owner_contact: The owner contact information for an API resource. This field accepts any string input with a length of 0 - 256 characters.
+        :param tags: The tags.
 
-        - ``SMALL``
-        - ``MEDIUM``
-        - ``LARGE``
-        - ``XLARGE``
-        - ``LARGE_2X``
-        - ``LARGE_4X``
-        - ``LARGE_8X`` (not available in all regions)
-        - ``LARGE_12X``
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html
+        :exampleMetadata: fixture=_generated
 
-        Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used.
+        Example::
 
-        The following legacy instance types are available, but their use is discouraged:
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_appsync as appsync
+            
+            cfn_api_props = appsync.CfnApiProps(
+                name="name",
+            
+                # the properties below are optional
+                event_config=appsync.CfnApi.EventConfigProperty(
+                    auth_providers=[appsync.CfnApi.AuthProviderProperty(
+                        auth_type="authType",
+            
+                        # the properties below are optional
+                        cognito_config=appsync.CfnApi.CognitoConfigProperty(
+                            aws_region="awsRegion",
+                            user_pool_id="userPoolId",
+            
+                            # the properties below are optional
+                            app_id_client_regex="appIdClientRegex"
+                        ),
+                        lambda_authorizer_config=appsync.CfnApi.LambdaAuthorizerConfigProperty(
+                            authorizer_uri="authorizerUri",
+            
+                            # the properties below are optional
+                            authorizer_result_ttl_in_seconds=123,
+                            identity_validation_expression="identityValidationExpression"
+                        ),
+                        open_id_connect_config=appsync.CfnApi.OpenIDConnectConfigProperty(
+                            issuer="issuer",
+            
+                            # the properties below are optional
+                            auth_ttl=123,
+                            client_id="clientId",
+                            iat_ttl=123
+                        )
+                    )],
+                    connection_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+                    default_publish_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+                    default_subscribe_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+            
+                    # the properties below are optional
+                    log_config=appsync.CfnApi.EventLogConfigProperty(
+                        cloud_watch_logs_role_arn="cloudWatchLogsRoleArn",
+                        log_level="logLevel"
+                    )
+                ),
+                owner_contact="ownerContact",
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a6f1c28efbfb84e165cbbde9374da4810d0b8c625b2f4460dc4514b583cc8bc1)
+            check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument event_config", value=event_config, expected_type=type_hints["event_config"])
+            check_type(argname="argument owner_contact", value=owner_contact, expected_type=type_hints["owner_contact"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "name": name,
+        }
+        if event_config is not None:
+            self._values["event_config"] = event_config
+        if owner_contact is not None:
+            self._values["owner_contact"] = owner_contact
+        if tags is not None:
+            self._values["tags"] = tags
 
-        - *T2_SMALL* : A t2.small instance type.
-        - *T2_MEDIUM* : A t2.medium instance type.
-        - *R4_LARGE* : A r4.large instance type.
-        - *R4_XLARGE* : A r4.xlarge instance type.
-        - *R4_2XLARGE* : A r4.2xlarge instance type.
-        - *R4_4XLARGE* : A r4.4xlarge instance type.
-        - *R4_8XLARGE* : A r4.8xlarge instance type.
+    @builtins.property
+    def name(self) -> builtins.str:
+        '''The API name.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-type
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html#cfn-appsync-api-name
         '''
-        result = self._values.get("type")
-        assert result is not None, "Required property 'type' is missing"
+        result = self._values.get("name")
+        assert result is not None, "Required property 'name' is missing"
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def at_rest_encryption_enabled(
+    def event_config(
         self,
-    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''At-rest encryption flag for cache.
-
-        You cannot update this setting after creation.
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApi.EventConfigProperty]]:
+        '''The configuration for an Event Api.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-atrestencryptionenabled
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html#cfn-appsync-api-eventconfig
         '''
-        result = self._values.get("at_rest_encryption_enabled")
-        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+        result = self._values.get("event_config")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApi.EventConfigProperty]], result)
 
     @builtins.property
-    def health_metrics_config(self) -> typing.Optional[builtins.str]:
-        '''Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:.
-
-        - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration.
-        - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration.
+    def owner_contact(self) -> typing.Optional[builtins.str]:
+        '''The owner contact information for an API resource.
 
-        Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
+        This field accepts any string input with a length of 0 - 256 characters.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-healthmetricsconfig
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html#cfn-appsync-api-ownercontact
         '''
-        result = self._values.get("health_metrics_config")
+        result = self._values.get("owner_contact")
         return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def transit_encryption_enabled(
-        self,
-    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Transit encryption flag when connecting to cache.
-
-        You cannot update this setting after creation.
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-transitencryptionenabled
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html#cfn-appsync-api-tags
         '''
-        result = self._values.get("transit_encryption_enabled")
-        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -2858,21 +4228,21 @@ class CfnApiCacheProps:
         return not (rhs == self)
 
     def __repr__(self) -> str:
-        return "CfnApiCacheProps(%s)" % ", ".join(
+        return "CfnApiProps(%s)" % ", ".join(
             k + "=" + repr(v) for k, v in self._values.items()
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
-class CfnApiKey(
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnChannelNamespace(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
-    jsii_type="aws-cdk-lib.aws_appsync.CfnApiKey",
+    jsii_type="aws-cdk-lib.aws_appsync.CfnChannelNamespace",
 ):
-    '''The ``AWS::AppSync::ApiKey`` resource creates a unique key that you can distribute to clients who are executing GraphQL operations with AWS AppSync that require an API key.
+    '''Resource schema for AppSync ChannelNamespace.
 
-    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html
-    :cloudformationResource: AWS::AppSync::ApiKey
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html
+    :cloudformationResource: AWS::AppSync::ChannelNamespace
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -2881,12 +4251,23 @@ class CfnApiKey(
         # The values are placeholders you should change.
         from aws_cdk import aws_appsync as appsync
         
-        cfn_api_key = appsync.CfnApiKey(self, "MyCfnApiKey",
+        cfn_channel_namespace = appsync.CfnChannelNamespace(self, "MyCfnChannelNamespace",
             api_id="apiId",
+            name="name",
         
             # the properties below are optional
-            description="description",
-            expires=123
+            code_handlers="codeHandlers",
+            code_s3_location="codeS3Location",
+            publish_auth_modes=[appsync.CfnChannelNamespace.AuthModeProperty(
+                auth_type="authType"
+            )],
+            subscribe_auth_modes=[appsync.CfnChannelNamespace.AuthModeProperty(
+                auth_type="authType"
+            )],
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
         )
     '''
 
@@ -2896,21 +4277,37 @@ class CfnApiKey(
         id: builtins.str,
         *,
         api_id: builtins.str,
-        description: typing.Optional[builtins.str] = None,
-        expires: typing.Optional[jsii.Number] = None,
+        name: builtins.str,
+        code_handlers: typing.Optional[builtins.str] = None,
+        code_s3_location: typing.Optional[builtins.str] = None,
+        publish_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnChannelNamespace.AuthModeProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        subscribe_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnChannelNamespace.AuthModeProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param api_id: Unique AWS AppSync GraphQL API ID for this API key.
-        :param description: Unique description of your API key.
-        :param expires: The time after which the API key expires. The date is represented as seconds since the epoch, rounded down to the nearest hour.
+        :param api_id: AppSync Api Id that this Channel Namespace belongs to.
+        :param name: Namespace indentifier.
+        :param code_handlers: String of APPSYNC_JS code to be used by the handlers.
+        :param code_s3_location: The Amazon S3 endpoint where the code is located.
+        :param publish_auth_modes: 
+        :param subscribe_auth_modes: 
+        :param tags: An arbitrary set of tags (key-value pairs) for this AppSync API.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__e6065dd18c9d420fd4fcd70aced8416006f044f82aecff54150165e832539a8e)
+            type_hints = typing.get_type_hints(_typecheckingstub__a093c57f7353830d56f8cde41e8653e333d0f0b91da87dd9ca86d72460c39119)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-        props = CfnApiKeyProps(api_id=api_id, description=description, expires=expires)
+        props = CfnChannelNamespaceProps(
+            api_id=api_id,
+            name=name,
+            code_handlers=code_handlers,
+            code_s3_location=code_s3_location,
+            publish_auth_modes=publish_auth_modes,
+            subscribe_auth_modes=subscribe_auth_modes,
+            tags=tags,
+        )
 
         jsii.create(self.__class__, self, [scope, id, props])
 
@@ -2921,7 +4318,7 @@ class CfnApiKey(
         :param inspector: tree inspector to collect and process attributes.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__1f8f02bc91fc0b32c990b8d08a5d7a0ef78a88363920fa69d4196dcc7f2ecfb3)
+            type_hints = typing.get_type_hints(_typecheckingstub__3ad9494241faa332c831f07b3784d74ff448ddf3fa3baab7ab580ea1404552c3)
             check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
         return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
 
@@ -2934,7 +4331,7 @@ class CfnApiKey(
         :param props: -
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__a844b496712966f29aae49f2f831e6a85c7acf03c2ce61c94162ccf13c5efd6d)
+            type_hints = typing.get_type_hints(_typecheckingstub__f22e76dc0a889c34e986bed6da737321c1aa8a5ae15fc27cbba163171fcdaa23)
             check_type(argname="argument props", value=props, expected_type=type_hints["props"])
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
 
@@ -2945,31 +4342,19 @@ class CfnApiKey(
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrApiKey")
-    def attr_api_key(self) -> builtins.str:
-        '''The API key.
-
-        :cloudformationAttribute: ApiKey
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrApiKey"))
-
-    @builtins.property
-    @jsii.member(jsii_name="attrApiKeyId")
-    def attr_api_key_id(self) -> builtins.str:
-        '''The API key ID.
+    @jsii.member(jsii_name="attrChannelNamespaceArn")
+    def attr_channel_namespace_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) for the Channel Namespace.
 
-        :cloudformationAttribute: ApiKeyId
+        :cloudformationAttribute: ChannelNamespaceArn
         '''
-        return typing.cast(builtins.str, jsii.get(self, "attrApiKeyId"))
+        return typing.cast(builtins.str, jsii.get(self, "attrChannelNamespaceArn"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrArn")
-    def attr_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) of the API key, such as ``arn:aws:appsync:us-east-1:123456789012:apis/graphqlapiid/apikey/apikeya1bzhi`` .
-
-        :cloudformationAttribute: Arn
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrArn"))
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
 
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
@@ -2979,67 +4364,190 @@ class CfnApiKey(
     @builtins.property
     @jsii.member(jsii_name="apiId")
     def api_id(self) -> builtins.str:
-        '''Unique AWS AppSync GraphQL API ID for this API key.'''
+        '''AppSync Api Id that this Channel Namespace belongs to.'''
         return typing.cast(builtins.str, jsii.get(self, "apiId"))
 
     @api_id.setter
     def api_id(self, value: builtins.str) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__3c1cce5f76a6037620e1cc2e57750c81cc5161ff526ce78123f0cd9f25c8e856)
+            type_hints = typing.get_type_hints(_typecheckingstub__8201c39b111fb5af50817714169cd23209a7d5463c3149a06b402732f7af580e)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "apiId", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="description")
-    def description(self) -> typing.Optional[builtins.str]:
-        '''Unique description of your API key.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "description"))
+    @jsii.member(jsii_name="name")
+    def name(self) -> builtins.str:
+        '''Namespace indentifier.'''
+        return typing.cast(builtins.str, jsii.get(self, "name"))
 
-    @description.setter
-    def description(self, value: typing.Optional[builtins.str]) -> None:
+    @name.setter
+    def name(self, value: builtins.str) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__08afa042939638da41f04c7165f811f5081bd3c8943f787591f098aa4a3b8699)
+            type_hints = typing.get_type_hints(_typecheckingstub__cc847adc224bbc3257fda0edc3e1e2ffa88ecece56b3863f1e87260c9d4103f2)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="codeHandlers")
+    def code_handlers(self) -> typing.Optional[builtins.str]:
+        '''String of APPSYNC_JS code to be used by the handlers.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "codeHandlers"))
+
+    @code_handlers.setter
+    def code_handlers(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__aaac6b0f9e0f2f86d3b90444a82806e153092dec34e803bf21f2a307b6660597)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "codeHandlers", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="codeS3Location")
+    def code_s3_location(self) -> typing.Optional[builtins.str]:
+        '''The Amazon S3 endpoint where the code is located.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "codeS3Location"))
+
+    @code_s3_location.setter
+    def code_s3_location(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0253aa38ea0ac168a1bb603d6239ae0cf4ece50f9019b6a9b531fc609610605a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "codeS3Location", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="publishAuthModes")
+    def publish_auth_modes(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]], jsii.get(self, "publishAuthModes"))
+
+    @publish_auth_modes.setter
+    def publish_auth_modes(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__58ae5ceea0ea0efa0414e907917c0f46364396fc667a67ea5eb4524ac6fa4d5d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "publishAuthModes", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="subscribeAuthModes")
+    def subscribe_auth_modes(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]], jsii.get(self, "subscribeAuthModes"))
+
+    @subscribe_auth_modes.setter
+    def subscribe_auth_modes(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__fc62b054d5e5897ab522adeae0e075f829ec43715bace1f3db8e88e5980f2476)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "subscribeAuthModes", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''An arbitrary set of tags (key-value pairs) for this AppSync API.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3273a2539d741466392c98ae069010c1b8fcca3604cfaf7fc6da4382ae1eecd7)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnChannelNamespace.AuthModeProperty",
+        jsii_struct_bases=[],
+        name_mapping={"auth_type": "authType"},
+    )
+    class AuthModeProperty:
+        def __init__(self, *, auth_type: typing.Optional[builtins.str] = None) -> None:
+            '''An auth mode.
+
+            :param auth_type: Security configuration for your AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-channelnamespace-authmode.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                auth_mode_property = appsync.CfnChannelNamespace.AuthModeProperty(
+                    auth_type="authType"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__1f188b8b6c402829b1c2c91be4530734973b0af72e7cec71bb11fffe3160f50f)
+                check_type(argname="argument auth_type", value=auth_type, expected_type=type_hints["auth_type"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if auth_type is not None:
+                self._values["auth_type"] = auth_type
+
+        @builtins.property
+        def auth_type(self) -> typing.Optional[builtins.str]:
+            '''Security configuration for your AppSync API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-channelnamespace-authmode.html#cfn-appsync-channelnamespace-authmode-authtype
+            '''
+            result = self._values.get("auth_type")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
 
-    @builtins.property
-    @jsii.member(jsii_name="expires")
-    def expires(self) -> typing.Optional[jsii.Number]:
-        '''The time after which the API key expires.'''
-        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "expires"))
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
 
-    @expires.setter
-    def expires(self, value: typing.Optional[jsii.Number]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__8b034facb88dea82241969fd1a22a5bbaccf03068403021106e073c92112ab45)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "expires", value) # pyright: ignore[reportArgumentType]
+        def __repr__(self) -> str:
+            return "AuthModeProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
 
 
 @jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_appsync.CfnApiKeyProps",
+    jsii_type="aws-cdk-lib.aws_appsync.CfnChannelNamespaceProps",
     jsii_struct_bases=[],
     name_mapping={
         "api_id": "apiId",
-        "description": "description",
-        "expires": "expires",
+        "name": "name",
+        "code_handlers": "codeHandlers",
+        "code_s3_location": "codeS3Location",
+        "publish_auth_modes": "publishAuthModes",
+        "subscribe_auth_modes": "subscribeAuthModes",
+        "tags": "tags",
     },
 )
-class CfnApiKeyProps:
+class CfnChannelNamespaceProps:
     def __init__(
         self,
         *,
         api_id: builtins.str,
-        description: typing.Optional[builtins.str] = None,
-        expires: typing.Optional[jsii.Number] = None,
+        name: builtins.str,
+        code_handlers: typing.Optional[builtins.str] = None,
+        code_s3_location: typing.Optional[builtins.str] = None,
+        publish_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        subscribe_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''Properties for defining a ``CfnApiKey``.
+        '''Properties for defining a ``CfnChannelNamespace``.
 
-        :param api_id: Unique AWS AppSync GraphQL API ID for this API key.
-        :param description: Unique description of your API key.
-        :param expires: The time after which the API key expires. The date is represented as seconds since the epoch, rounded down to the nearest hour.
+        :param api_id: AppSync Api Id that this Channel Namespace belongs to.
+        :param name: Namespace indentifier.
+        :param code_handlers: String of APPSYNC_JS code to be used by the handlers.
+        :param code_s3_location: The Amazon S3 endpoint where the code is located.
+        :param publish_auth_modes: 
+        :param subscribe_auth_modes: 
+        :param tags: An arbitrary set of tags (key-value pairs) for this AppSync API.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html
         :exampleMetadata: fixture=_generated
 
         Example::
@@ -3048,56 +4556,115 @@ class CfnApiKeyProps:
             # The values are placeholders you should change.
             from aws_cdk import aws_appsync as appsync
             
-            cfn_api_key_props = appsync.CfnApiKeyProps(
+            cfn_channel_namespace_props = appsync.CfnChannelNamespaceProps(
                 api_id="apiId",
+                name="name",
             
                 # the properties below are optional
-                description="description",
-                expires=123
+                code_handlers="codeHandlers",
+                code_s3_location="codeS3Location",
+                publish_auth_modes=[appsync.CfnChannelNamespace.AuthModeProperty(
+                    auth_type="authType"
+                )],
+                subscribe_auth_modes=[appsync.CfnChannelNamespace.AuthModeProperty(
+                    auth_type="authType"
+                )],
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
             )
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__1688db2b7835c85b4e2cd69655b5d25321ff2aa2ea9e1b2a0612caff34184549)
+            type_hints = typing.get_type_hints(_typecheckingstub__3eedc5c3e1f83f431aa7bafffc93ab91843ace16bf993fccc5f6f8fe7b37f62c)
             check_type(argname="argument api_id", value=api_id, expected_type=type_hints["api_id"])
-            check_type(argname="argument description", value=description, expected_type=type_hints["description"])
-            check_type(argname="argument expires", value=expires, expected_type=type_hints["expires"])
+            check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument code_handlers", value=code_handlers, expected_type=type_hints["code_handlers"])
+            check_type(argname="argument code_s3_location", value=code_s3_location, expected_type=type_hints["code_s3_location"])
+            check_type(argname="argument publish_auth_modes", value=publish_auth_modes, expected_type=type_hints["publish_auth_modes"])
+            check_type(argname="argument subscribe_auth_modes", value=subscribe_auth_modes, expected_type=type_hints["subscribe_auth_modes"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "api_id": api_id,
+            "name": name,
         }
-        if description is not None:
-            self._values["description"] = description
-        if expires is not None:
-            self._values["expires"] = expires
+        if code_handlers is not None:
+            self._values["code_handlers"] = code_handlers
+        if code_s3_location is not None:
+            self._values["code_s3_location"] = code_s3_location
+        if publish_auth_modes is not None:
+            self._values["publish_auth_modes"] = publish_auth_modes
+        if subscribe_auth_modes is not None:
+            self._values["subscribe_auth_modes"] = subscribe_auth_modes
+        if tags is not None:
+            self._values["tags"] = tags
 
     @builtins.property
     def api_id(self) -> builtins.str:
-        '''Unique AWS AppSync GraphQL API ID for this API key.
+        '''AppSync Api Id that this Channel Namespace belongs to.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-apiid
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-apiid
         '''
         result = self._values.get("api_id")
         assert result is not None, "Required property 'api_id' is missing"
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def description(self) -> typing.Optional[builtins.str]:
-        '''Unique description of your API key.
+    def name(self) -> builtins.str:
+        '''Namespace indentifier.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-description
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-name
         '''
-        result = self._values.get("description")
+        result = self._values.get("name")
+        assert result is not None, "Required property 'name' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def code_handlers(self) -> typing.Optional[builtins.str]:
+        '''String of APPSYNC_JS code to be used by the handlers.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-codehandlers
+        '''
+        result = self._values.get("code_handlers")
         return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def expires(self) -> typing.Optional[jsii.Number]:
-        '''The time after which the API key expires.
+    def code_s3_location(self) -> typing.Optional[builtins.str]:
+        '''The Amazon S3 endpoint where the code is located.
 
-        The date is represented as seconds since the epoch, rounded down to the nearest hour.
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-codes3location
+        '''
+        result = self._values.get("code_s3_location")
+        return typing.cast(typing.Optional[builtins.str], result)
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-expires
+    @builtins.property
+    def publish_auth_modes(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]]:
         '''
-        result = self._values.get("expires")
-        return typing.cast(typing.Optional[jsii.Number], result)
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-publishauthmodes
+        '''
+        result = self._values.get("publish_auth_modes")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]], result)
+
+    @builtins.property
+    def subscribe_auth_modes(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-subscribeauthmodes
+        '''
+        result = self._values.get("subscribe_auth_modes")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''An arbitrary set of tags (key-value pairs) for this AppSync API.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -3106,7 +4673,7 @@ class CfnApiKeyProps:
         return not (rhs == self)
 
     def __repr__(self) -> str:
-        return "CfnApiKeyProps(%s)" % ", ".join(
+        return "CfnChannelNamespaceProps(%s)" % ", ".join(
             k + "=" + repr(v) for k, v in self._values.items()
         )
 
@@ -17767,10 +19334,14 @@ __all__ = [
     "BaseDataSourceProps",
     "BaseResolverProps",
     "CachingConfig",
+    "CfnApi",
     "CfnApiCache",
     "CfnApiCacheProps",
     "CfnApiKey",
     "CfnApiKeyProps",
+    "CfnApiProps",
+    "CfnChannelNamespace",
+    "CfnChannelNamespaceProps",
     "CfnDataSource",
     "CfnDataSourceProps",
     "CfnDomainName",
@@ -18043,6 +19614,118 @@ def _typecheckingstub__16c48e7a47c60140291c83d5eea69a6e25ec7462e7a0080eaf553e500
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__9b24e030284e4cb760e04c0345cc69b457962fa5c53b82f009a5c412ad0fa1e5(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    name: builtins.str,
+    event_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.EventConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    owner_contact: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1a34658e511f6fa9562934d95c768fd4b2af2314ddf2dab2969f39073417c21f(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__80dee192d808ade2b05e0e5eae2e320cb156ff9affe045ecbcaf005a54690f10(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__2bbcc5e3c150d28701074668c2cc2da51f0ba8e3870f53f61466fcc37a9b9d92(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9323cec9a000145849866e550b55f0a549087cc444c4fa5706fdbc7c1455d154(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApi.EventConfigProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b829d518b74ad55cbf9233be61a91ddec84af300e750befd18c27d6ec18db38d(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a8b30f166f8b9fa0fc02ab2eb4ff33b85277e77827ecebf6d7fd569a6667a8ea(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__27b661cb5be7fc793a7469c90adcd7629e723a94b2a389fead69d96cfde5dba2(
+    *,
+    auth_type: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d3b431432784c1151b3b95b1186edc1bcfaa11a3f70614ce43f998df8d1ae46d(
+    *,
+    auth_type: builtins.str,
+    cognito_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.CognitoConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    lambda_authorizer_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.LambdaAuthorizerConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    open_id_connect_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.OpenIDConnectConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__012c8ad0fa2d1afcda68ca532d5e287baa9e170049fe0c4e05e77dab9f8eb753(
+    *,
+    aws_region: builtins.str,
+    user_pool_id: builtins.str,
+    app_id_client_regex: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__53f8b01a4596f6e890e45a2870f92278e02fc06e912e096c33920157038135cf(
+    *,
+    auth_providers: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.AuthProviderProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    connection_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    default_publish_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    default_subscribe_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    log_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.EventLogConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5cbb1c5597e58c84a31d8dc10841de6fa70b9c328dacba388a7afdab090b3e6a(
+    *,
+    cloud_watch_logs_role_arn: builtins.str,
+    log_level: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6eb7eaf1ef726d95b558700ffd22e714695a485aed3b5a3ae796f2a03efae22c(
+    *,
+    authorizer_uri: builtins.str,
+    authorizer_result_ttl_in_seconds: typing.Optional[jsii.Number] = None,
+    identity_validation_expression: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__560e301b02d9bfc40a0d691fa82c55f336f07c62f130aa6e9464ab1c1b676cf8(
+    *,
+    issuer: builtins.str,
+    auth_ttl: typing.Optional[jsii.Number] = None,
+    client_id: typing.Optional[builtins.str] = None,
+    iat_ttl: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__e9d92b7b2abdac7341eb92f7ac10d2d67dd2700af68eaf42c72c47ffdaacc344(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -18175,6 +19858,105 @@ def _typecheckingstub__1688db2b7835c85b4e2cd69655b5d25321ff2aa2ea9e1b2a0612caff3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a6f1c28efbfb84e165cbbde9374da4810d0b8c625b2f4460dc4514b583cc8bc1(
+    *,
+    name: builtins.str,
+    event_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.EventConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    owner_contact: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a093c57f7353830d56f8cde41e8653e333d0f0b91da87dd9ca86d72460c39119(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    api_id: builtins.str,
+    name: builtins.str,
+    code_handlers: typing.Optional[builtins.str] = None,
+    code_s3_location: typing.Optional[builtins.str] = None,
+    publish_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    subscribe_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3ad9494241faa332c831f07b3784d74ff448ddf3fa3baab7ab580ea1404552c3(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f22e76dc0a889c34e986bed6da737321c1aa8a5ae15fc27cbba163171fcdaa23(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__8201c39b111fb5af50817714169cd23209a7d5463c3149a06b402732f7af580e(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__cc847adc224bbc3257fda0edc3e1e2ffa88ecece56b3863f1e87260c9d4103f2(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__aaac6b0f9e0f2f86d3b90444a82806e153092dec34e803bf21f2a307b6660597(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0253aa38ea0ac168a1bb603d6239ae0cf4ece50f9019b6a9b531fc609610605a(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__58ae5ceea0ea0efa0414e907917c0f46364396fc667a67ea5eb4524ac6fa4d5d(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__fc62b054d5e5897ab522adeae0e075f829ec43715bace1f3db8e88e5980f2476(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3273a2539d741466392c98ae069010c1b8fcca3604cfaf7fc6da4382ae1eecd7(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1f188b8b6c402829b1c2c91be4530734973b0af72e7cec71bb11fffe3160f50f(
+    *,
+    auth_type: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3eedc5c3e1f83f431aa7bafffc93ab91843ace16bf993fccc5f6f8fe7b37f62c(
+    *,
+    api_id: builtins.str,
+    name: builtins.str,
+    code_handlers: typing.Optional[builtins.str] = None,
+    code_s3_location: typing.Optional[builtins.str] = None,
+    publish_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    subscribe_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__f2dc8968068d09d9cb599cea5efad1a18016c4eca4fcc6c15e6169a0891e2678(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,