aws-cdk-lib 2.165.0__py3-none-any.whl → 2.167.0__py3-none-any.whl

aws_cdk/aws_appsync/__init__.py

@@ -972,6 +972,7 @@ from .. import (
     IResolvable as _IResolvable_da3f097b,
     IResource as _IResource_c80c4260,
     ITaggable as _ITaggable_36806126,
+    ITaggableV2 as _ITaggableV2_4e6798f8,
     IgnoreMode as _IgnoreMode_655a98e8,
     Resource as _Resource_45bc6135,
     ResourceProps as _ResourceProps_15a65b4e,
@@ -991,6 +992,7 @@ from ..aws_iam import (
     IRole as _IRole_235f5d8e,
     Role as _Role_e8c6e11f,
 )
+from ..aws_kms import IKey as _IKey_5f11635f
 from ..aws_lambda import IFunction as _IFunction_6adb0ab8
 from ..aws_logs import (
     ILogGroup as _ILogGroup_3c4fa718, RetentionDays as _RetentionDays_070f99f0
@@ -2445,16 +2447,16 @@ class CachingConfig:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
-class CfnApiCache(
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnApi(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
-    jsii_type="aws-cdk-lib.aws_appsync.CfnApiCache",
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApi",
 ):
-    '''The ``AWS::AppSync::ApiCache`` resource represents the input of a ``CreateApiCache`` operation.
+    '''The ``AWS::AppSync::Api`` resource creates an AWS AppSync API that you can use for an AWS AppSync API with your preferred configuration, such as an Event API that provides real-time message publishing and message subscriptions over WebSockets.
 
-    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html
-    :cloudformationResource: AWS::AppSync::ApiCache
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html
+    :cloudformationResource: AWS::AppSync::Api
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -2463,16 +2465,59 @@ class CfnApiCache(
         # The values are placeholders you should change.
         from aws_cdk import aws_appsync as appsync
         
-        cfn_api_cache = appsync.CfnApiCache(self, "MyCfnApiCache",
-            api_caching_behavior="apiCachingBehavior",
-            api_id="apiId",
-            ttl=123,
-            type="type",
+        cfn_api = appsync.CfnApi(self, "MyCfnApi",
+            name="name",
         
             # the properties below are optional
-            at_rest_encryption_enabled=False,
-            health_metrics_config="healthMetricsConfig",
-            transit_encryption_enabled=False
+            event_config=appsync.CfnApi.EventConfigProperty(
+                auth_providers=[appsync.CfnApi.AuthProviderProperty(
+                    auth_type="authType",
+        
+                    # the properties below are optional
+                    cognito_config=appsync.CfnApi.CognitoConfigProperty(
+                        aws_region="awsRegion",
+                        user_pool_id="userPoolId",
+        
+                        # the properties below are optional
+                        app_id_client_regex="appIdClientRegex"
+                    ),
+                    lambda_authorizer_config=appsync.CfnApi.LambdaAuthorizerConfigProperty(
+                        authorizer_uri="authorizerUri",
+        
+                        # the properties below are optional
+                        authorizer_result_ttl_in_seconds=123,
+                        identity_validation_expression="identityValidationExpression"
+                    ),
+                    open_id_connect_config=appsync.CfnApi.OpenIDConnectConfigProperty(
+                        issuer="issuer",
+        
+                        # the properties below are optional
+                        auth_ttl=123,
+                        client_id="clientId",
+                        iat_ttl=123
+                    )
+                )],
+                connection_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                    auth_type="authType"
+                )],
+                default_publish_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                    auth_type="authType"
+                )],
+                default_subscribe_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                    auth_type="authType"
+                )],
+        
+                # the properties below are optional
+                log_config=appsync.CfnApi.EventLogConfigProperty(
+                    cloud_watch_logs_role_arn="cloudWatchLogsRoleArn",
+                    log_level="logLevel"
+                )
+            ),
+            owner_contact="ownerContact",
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
         )
     '''
 
@@ -2481,37 +2526,28 @@ class CfnApiCache(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        api_caching_behavior: builtins.str,
-        api_id: builtins.str,
-        ttl: jsii.Number,
-        type: builtins.str,
-        at_rest_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-        health_metrics_config: typing.Optional[builtins.str] = None,
-        transit_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        name: builtins.str,
+        event_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.EventConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        owner_contact: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param api_caching_behavior: Caching behavior. - *FULL_REQUEST_CACHING* : All requests are fully cached. - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
-        :param api_id: The GraphQL API ID.
-        :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
-        :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
-        :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
-        :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
-        :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
+        :param name: The name of the ``Api`` .
+        :param event_config: Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API.
+        :param owner_contact: The owner contact information for an API resource. This field accepts any string input with a length of 0 - 256 characters.
+        :param tags: A set of tags (key-value pairs) for this API.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__e9d92b7b2abdac7341eb92f7ac10d2d67dd2700af68eaf42c72c47ffdaacc344)
+            type_hints = typing.get_type_hints(_typecheckingstub__9b24e030284e4cb760e04c0345cc69b457962fa5c53b82f009a5c412ad0fa1e5)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-        props = CfnApiCacheProps(
-            api_caching_behavior=api_caching_behavior,
-            api_id=api_id,
-            ttl=ttl,
-            type=type,
-            at_rest_encryption_enabled=at_rest_encryption_enabled,
-            health_metrics_config=health_metrics_config,
-            transit_encryption_enabled=transit_encryption_enabled,
+        props = CfnApiProps(
+            name=name,
+            event_config=event_config,
+            owner_contact=owner_contact,
+            tags=tags,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -2523,7 +2559,7 @@ class CfnApiCache(
         :param inspector: tree inspector to collect and process attributes.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__142193172b7ee1304f3b8fd949531b4cfa950ea62d0dc10f9ed5a184a603132d)
+            type_hints = typing.get_type_hints(_typecheckingstub__1a34658e511f6fa9562934d95c768fd4b2af2314ddf2dab2969f39073417c21f)
             check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
         return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
 
@@ -2536,7 +2572,7 @@ class CfnApiCache(
         :param props: -
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__1ce863b5f21a86ce886458054cd4de0550269c18eb7c4f3fb37884dc2869845e)
+            type_hints = typing.get_type_hints(_typecheckingstub__80dee192d808ade2b05e0e5eae2e320cb156ff9affe045ecbcaf005a54690f10)
             check_type(argname="argument props", value=props, expected_type=type_hints["props"])
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
 
@@ -2547,309 +2583,1740 @@ class CfnApiCache(
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrId")
-    def attr_id(self) -> builtins.str:
-        '''
-        :cloudformationAttribute: Id
+    @jsii.member(jsii_name="attrApiArn")
+    def attr_api_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the AWS AppSync Api.
+
+        :cloudformationAttribute: ApiArn
         '''
-        return typing.cast(builtins.str, jsii.get(self, "attrId"))
+        return typing.cast(builtins.str, jsii.get(self, "attrApiArn"))
 
     @builtins.property
-    @jsii.member(jsii_name="cfnProperties")
-    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
-        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+    @jsii.member(jsii_name="attrApiId")
+    def attr_api_id(self) -> builtins.str:
+        '''The unique identifier for the AWS AppSync Api generated by the service.
+
+        :cloudformationAttribute: ApiId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrApiId"))
 
     @builtins.property
-    @jsii.member(jsii_name="apiCachingBehavior")
-    def api_caching_behavior(self) -> builtins.str:
-        '''Caching behavior.'''
-        return typing.cast(builtins.str, jsii.get(self, "apiCachingBehavior"))
+    @jsii.member(jsii_name="attrDns")
+    def attr_dns(self) -> _IResolvable_da3f097b:
+        '''A map of DNS names for the AppSync API.
 
-    @api_caching_behavior.setter
-    def api_caching_behavior(self, value: builtins.str) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__aee6b3576fbf654864dae4f55fe292d210bf01534f16f80af0ac225f8fa338c9)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "apiCachingBehavior", value) # pyright: ignore[reportArgumentType]
+        :cloudformationAttribute: Dns
+        '''
+        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrDns"))
 
     @builtins.property
-    @jsii.member(jsii_name="apiId")
-    def api_id(self) -> builtins.str:
-        '''The GraphQL API ID.'''
-        return typing.cast(builtins.str, jsii.get(self, "apiId"))
+    @jsii.member(jsii_name="attrDnsHttp")
+    def attr_dns_http(self) -> builtins.str:
+        '''The domain name of the Api's HTTP endpoint.
 
-    @api_id.setter
-    def api_id(self, value: builtins.str) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__6c2fdac623dbaddb2a0226d75e6f3ca84c058f3f46b9c9a1289820c1cf0827e1)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "apiId", value) # pyright: ignore[reportArgumentType]
+        :cloudformationAttribute: Dns.Http
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrDnsHttp"))
 
     @builtins.property
-    @jsii.member(jsii_name="ttl")
-    def ttl(self) -> jsii.Number:
-        '''TTL in seconds for cache entries.'''
-        return typing.cast(jsii.Number, jsii.get(self, "ttl"))
+    @jsii.member(jsii_name="attrDnsRealtime")
+    def attr_dns_realtime(self) -> builtins.str:
+        '''The domain name of the Api's real-time endpoint.
 
-    @ttl.setter
-    def ttl(self, value: jsii.Number) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__1893b7ba08236941b8e5bb4704e7fe53f8819086085796443b5d68f513e66eaa)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "ttl", value) # pyright: ignore[reportArgumentType]
+        :cloudformationAttribute: Dns.Realtime
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrDnsRealtime"))
 
     @builtins.property
-    @jsii.member(jsii_name="type")
-    def type(self) -> builtins.str:
-        '''The cache instance type.
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
 
-        Valid values are.
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "type"))
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
-    @type.setter
-    def type(self, value: builtins.str) -> None:
+    @builtins.property
+    @jsii.member(jsii_name="name")
+    def name(self) -> builtins.str:
+        '''The name of the ``Api`` .'''
+        return typing.cast(builtins.str, jsii.get(self, "name"))
+
+    @name.setter
+    def name(self, value: builtins.str) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__45dc491e21920c6cd0ddecd9aada80283ac759d9eaca52c45a6ce35197166e9d)
+            type_hints = typing.get_type_hints(_typecheckingstub__2bbcc5e3c150d28701074668c2cc2da51f0ba8e3870f53f61466fcc37a9b9d92)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "type", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="atRestEncryptionEnabled")
-    def at_rest_encryption_enabled(
+    @jsii.member(jsii_name="eventConfig")
+    def event_config(
         self,
-    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''At-rest encryption flag for cache.'''
-        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "atRestEncryptionEnabled"))
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventConfigProperty"]]:
+        '''Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventConfigProperty"]], jsii.get(self, "eventConfig"))
 
-    @at_rest_encryption_enabled.setter
-    def at_rest_encryption_enabled(
+    @event_config.setter
+    def event_config(
         self,
-        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventConfigProperty"]],
     ) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__93a4abe242f634763c1f128b7e17017d1176924c9b032d5536f4caa3b3fc3bd6)
+            type_hints = typing.get_type_hints(_typecheckingstub__9323cec9a000145849866e550b55f0a549087cc444c4fa5706fdbc7c1455d154)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "atRestEncryptionEnabled", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "eventConfig", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="healthMetricsConfig")
-    def health_metrics_config(self) -> typing.Optional[builtins.str]:
-        '''Controls how cache health metrics will be emitted to CloudWatch.
-
-        Cache health metrics include:.
-        '''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "healthMetricsConfig"))
+    @jsii.member(jsii_name="ownerContact")
+    def owner_contact(self) -> typing.Optional[builtins.str]:
+        '''The owner contact information for an API resource.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "ownerContact"))
 
-    @health_metrics_config.setter
-    def health_metrics_config(self, value: typing.Optional[builtins.str]) -> None:
+    @owner_contact.setter
+    def owner_contact(self, value: typing.Optional[builtins.str]) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__55de0a796fc6cc946fccbec8ff82c493648ae16228267a0627a624d4e64e10dd)
+            type_hints = typing.get_type_hints(_typecheckingstub__b829d518b74ad55cbf9233be61a91ddec84af300e750befd18c27d6ec18db38d)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "healthMetricsConfig", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "ownerContact", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="transitEncryptionEnabled")
-    def transit_encryption_enabled(
-        self,
-    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Transit encryption flag when connecting to cache.'''
-        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "transitEncryptionEnabled"))
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''A set of tags (key-value pairs) for this API.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
 
-    @transit_encryption_enabled.setter
-    def transit_encryption_enabled(
-        self,
-        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
-    ) -> None:
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__eb39499095e917401c885f7c77781744d09df071b1ed62c6f2c32cbbc6fbdb33)
+            type_hints = typing.get_type_hints(_typecheckingstub__a8b30f166f8b9fa0fc02ab2eb4ff33b85277e77827ecebf6d7fd569a6667a8ea)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "transitEncryptionEnabled", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.AuthModeProperty",
+        jsii_struct_bases=[],
+        name_mapping={"auth_type": "authType"},
+    )
+    class AuthModeProperty:
+        def __init__(self, *, auth_type: typing.Optional[builtins.str] = None) -> None:
+            '''Describes an authorization configuration.
 
-@jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_appsync.CfnApiCacheProps",
-    jsii_struct_bases=[],
-    name_mapping={
-        "api_caching_behavior": "apiCachingBehavior",
-        "api_id": "apiId",
-        "ttl": "ttl",
-        "type": "type",
-        "at_rest_encryption_enabled": "atRestEncryptionEnabled",
-        "health_metrics_config": "healthMetricsConfig",
-        "transit_encryption_enabled": "transitEncryptionEnabled",
-    },
-)
-class CfnApiCacheProps:
-    def __init__(
-        self,
-        *,
-        api_caching_behavior: builtins.str,
-        api_id: builtins.str,
-        ttl: jsii.Number,
-        type: builtins.str,
-        at_rest_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-        health_metrics_config: typing.Optional[builtins.str] = None,
-        transit_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-    ) -> None:
-        '''Properties for defining a ``CfnApiCache``.
+            Use ``AuthMode`` to specify the publishing and subscription authorization configuration for an Event API.
 
-        :param api_caching_behavior: Caching behavior. - *FULL_REQUEST_CACHING* : All requests are fully cached. - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
-        :param api_id: The GraphQL API ID.
-        :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
-        :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
-        :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
-        :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
-        :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
+            :param auth_type: The authorization type.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html
-        :exampleMetadata: fixture=_generated
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authmode.html
+            :exampleMetadata: fixture=_generated
 
-        Example::
+            Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            from aws_cdk import aws_appsync as appsync
-            
-            cfn_api_cache_props = appsync.CfnApiCacheProps(
-                api_caching_behavior="apiCachingBehavior",
-                api_id="apiId",
-                ttl=123,
-                type="type",
-            
-                # the properties below are optional
-                at_rest_encryption_enabled=False,
-                health_metrics_config="healthMetricsConfig",
-                transit_encryption_enabled=False
-            )
-        '''
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__8f054fa3186eb5f122c20e523bed485713c72511ee3ee94be25733ecad9a348c)
-            check_type(argname="argument api_caching_behavior", value=api_caching_behavior, expected_type=type_hints["api_caching_behavior"])
-            check_type(argname="argument api_id", value=api_id, expected_type=type_hints["api_id"])
-            check_type(argname="argument ttl", value=ttl, expected_type=type_hints["ttl"])
-            check_type(argname="argument type", value=type, expected_type=type_hints["type"])
-            check_type(argname="argument at_rest_encryption_enabled", value=at_rest_encryption_enabled, expected_type=type_hints["at_rest_encryption_enabled"])
-            check_type(argname="argument health_metrics_config", value=health_metrics_config, expected_type=type_hints["health_metrics_config"])
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                auth_mode_property = appsync.CfnApi.AuthModeProperty(
+                    auth_type="authType"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__27b661cb5be7fc793a7469c90adcd7629e723a94b2a389fead69d96cfde5dba2)
+                check_type(argname="argument auth_type", value=auth_type, expected_type=type_hints["auth_type"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if auth_type is not None:
+                self._values["auth_type"] = auth_type
+
+        @builtins.property
+        def auth_type(self) -> typing.Optional[builtins.str]:
+            '''The authorization type.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authmode.html#cfn-appsync-api-authmode-authtype
+            '''
+            result = self._values.get("auth_type")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "AuthModeProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.AuthProviderProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "auth_type": "authType",
+            "cognito_config": "cognitoConfig",
+            "lambda_authorizer_config": "lambdaAuthorizerConfig",
+            "open_id_connect_config": "openIdConnectConfig",
+        },
+    )
+    class AuthProviderProperty:
+        def __init__(
+            self,
+            *,
+            auth_type: builtins.str,
+            cognito_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.CognitoConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            lambda_authorizer_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.LambdaAuthorizerConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            open_id_connect_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.OpenIDConnectConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''Describes an authorization provider.
+
+            :param auth_type: The authorization type.
+            :param cognito_config: Describes an Amazon Cognito user pool configuration.
+            :param lambda_authorizer_config: A ``LambdaAuthorizerConfig`` specifies how to authorize AWS AppSync API access when using the ``AWS_LAMBDA`` authorizer mode. Be aware that an AWS AppSync API can have only one AWS Lambda authorizer configured at a time.
+            :param open_id_connect_config: Describes an OpenID Connect (OIDC) configuration.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                auth_provider_property = appsync.CfnApi.AuthProviderProperty(
+                    auth_type="authType",
+                
+                    # the properties below are optional
+                    cognito_config=appsync.CfnApi.CognitoConfigProperty(
+                        aws_region="awsRegion",
+                        user_pool_id="userPoolId",
+                
+                        # the properties below are optional
+                        app_id_client_regex="appIdClientRegex"
+                    ),
+                    lambda_authorizer_config=appsync.CfnApi.LambdaAuthorizerConfigProperty(
+                        authorizer_uri="authorizerUri",
+                
+                        # the properties below are optional
+                        authorizer_result_ttl_in_seconds=123,
+                        identity_validation_expression="identityValidationExpression"
+                    ),
+                    open_id_connect_config=appsync.CfnApi.OpenIDConnectConfigProperty(
+                        issuer="issuer",
+                
+                        # the properties below are optional
+                        auth_ttl=123,
+                        client_id="clientId",
+                        iat_ttl=123
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__d3b431432784c1151b3b95b1186edc1bcfaa11a3f70614ce43f998df8d1ae46d)
+                check_type(argname="argument auth_type", value=auth_type, expected_type=type_hints["auth_type"])
+                check_type(argname="argument cognito_config", value=cognito_config, expected_type=type_hints["cognito_config"])
+                check_type(argname="argument lambda_authorizer_config", value=lambda_authorizer_config, expected_type=type_hints["lambda_authorizer_config"])
+                check_type(argname="argument open_id_connect_config", value=open_id_connect_config, expected_type=type_hints["open_id_connect_config"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "auth_type": auth_type,
+            }
+            if cognito_config is not None:
+                self._values["cognito_config"] = cognito_config
+            if lambda_authorizer_config is not None:
+                self._values["lambda_authorizer_config"] = lambda_authorizer_config
+            if open_id_connect_config is not None:
+                self._values["open_id_connect_config"] = open_id_connect_config
+
+        @builtins.property
+        def auth_type(self) -> builtins.str:
+            '''The authorization type.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-authtype
+            '''
+            result = self._values.get("auth_type")
+            assert result is not None, "Required property 'auth_type' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def cognito_config(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.CognitoConfigProperty"]]:
+            '''Describes an Amazon Cognito user pool configuration.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-cognitoconfig
+            '''
+            result = self._values.get("cognito_config")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.CognitoConfigProperty"]], result)
+
+        @builtins.property
+        def lambda_authorizer_config(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.LambdaAuthorizerConfigProperty"]]:
+            '''A ``LambdaAuthorizerConfig`` specifies how to authorize AWS AppSync API access when using the ``AWS_LAMBDA`` authorizer mode.
+
+            Be aware that an AWS AppSync API can have only one AWS Lambda authorizer configured at a time.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-lambdaauthorizerconfig
+            '''
+            result = self._values.get("lambda_authorizer_config")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.LambdaAuthorizerConfigProperty"]], result)
+
+        @builtins.property
+        def open_id_connect_config(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.OpenIDConnectConfigProperty"]]:
+            '''Describes an OpenID Connect (OIDC) configuration.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-authprovider.html#cfn-appsync-api-authprovider-openidconnectconfig
+            '''
+            result = self._values.get("open_id_connect_config")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.OpenIDConnectConfigProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "AuthProviderProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.CognitoConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "aws_region": "awsRegion",
+            "user_pool_id": "userPoolId",
+            "app_id_client_regex": "appIdClientRegex",
+        },
+    )
+    class CognitoConfigProperty:
+        def __init__(
+            self,
+            *,
+            aws_region: builtins.str,
+            user_pool_id: builtins.str,
+            app_id_client_regex: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Describes an Amazon Cognito configuration.
+
+            :param aws_region: The AWS Region in which the user pool was created.
+            :param user_pool_id: The user pool ID.
+            :param app_id_client_regex: A regular expression for validating the incoming Amazon Cognito user pool app client ID. If this value isn't set, no filtering is applied.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                cognito_config_property = appsync.CfnApi.CognitoConfigProperty(
+                    aws_region="awsRegion",
+                    user_pool_id="userPoolId",
+                
+                    # the properties below are optional
+                    app_id_client_regex="appIdClientRegex"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__012c8ad0fa2d1afcda68ca532d5e287baa9e170049fe0c4e05e77dab9f8eb753)
+                check_type(argname="argument aws_region", value=aws_region, expected_type=type_hints["aws_region"])
+                check_type(argname="argument user_pool_id", value=user_pool_id, expected_type=type_hints["user_pool_id"])
+                check_type(argname="argument app_id_client_regex", value=app_id_client_regex, expected_type=type_hints["app_id_client_regex"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "aws_region": aws_region,
+                "user_pool_id": user_pool_id,
+            }
+            if app_id_client_regex is not None:
+                self._values["app_id_client_regex"] = app_id_client_regex
+
+        @builtins.property
+        def aws_region(self) -> builtins.str:
+            '''The AWS Region in which the user pool was created.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html#cfn-appsync-api-cognitoconfig-awsregion
+            '''
+            result = self._values.get("aws_region")
+            assert result is not None, "Required property 'aws_region' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def user_pool_id(self) -> builtins.str:
+            '''The user pool ID.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html#cfn-appsync-api-cognitoconfig-userpoolid
+            '''
+            result = self._values.get("user_pool_id")
+            assert result is not None, "Required property 'user_pool_id' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def app_id_client_regex(self) -> typing.Optional[builtins.str]:
+            '''A regular expression for validating the incoming Amazon Cognito user pool app client ID.
+
+            If this value isn't set, no filtering is applied.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-cognitoconfig.html#cfn-appsync-api-cognitoconfig-appidclientregex
+            '''
+            result = self._values.get("app_id_client_regex")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CognitoConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.DnsMapProperty",
+        jsii_struct_bases=[],
+        name_mapping={"http": "http", "realtime": "realtime"},
+    )
+    class DnsMapProperty:
+        def __init__(
+            self,
+            *,
+            http: typing.Optional[builtins.str] = None,
+            realtime: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''A map of DNS names for the Api.
+
+            :param http: The domain name of the Api's HTTP endpoint.
+            :param realtime: The domain name of the Api's real-time endpoint.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-dnsmap.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                dns_map_property = appsync.CfnApi.DnsMapProperty(
+                    http="http",
+                    realtime="realtime"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__312a111f84f5f64be12d3d7c09cc00f4c64e4fe99cd1bf78561ebcfd82084e0c)
+                check_type(argname="argument http", value=http, expected_type=type_hints["http"])
+                check_type(argname="argument realtime", value=realtime, expected_type=type_hints["realtime"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if http is not None:
+                self._values["http"] = http
+            if realtime is not None:
+                self._values["realtime"] = realtime
+
+        @builtins.property
+        def http(self) -> typing.Optional[builtins.str]:
+            '''The domain name of the Api's HTTP endpoint.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-dnsmap.html#cfn-appsync-api-dnsmap-http
+            '''
+            result = self._values.get("http")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def realtime(self) -> typing.Optional[builtins.str]:
+            '''The domain name of the Api's real-time endpoint.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-dnsmap.html#cfn-appsync-api-dnsmap-realtime
+            '''
+            result = self._values.get("realtime")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "DnsMapProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.EventConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "auth_providers": "authProviders",
+            "connection_auth_modes": "connectionAuthModes",
+            "default_publish_auth_modes": "defaultPublishAuthModes",
+            "default_subscribe_auth_modes": "defaultSubscribeAuthModes",
+            "log_config": "logConfig",
+        },
+    )
+    class EventConfigProperty:
+        def __init__(
+            self,
+            *,
+            auth_providers: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.AuthProviderProperty", typing.Dict[builtins.str, typing.Any]]]]],
+            connection_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.AuthModeProperty", typing.Dict[builtins.str, typing.Any]]]]],
+            default_publish_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.AuthModeProperty", typing.Dict[builtins.str, typing.Any]]]]],
+            default_subscribe_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.AuthModeProperty", typing.Dict[builtins.str, typing.Any]]]]],
+            log_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApi.EventLogConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API.
+
+            :param auth_providers: A list of authorization providers.
+            :param connection_auth_modes: A list of valid authorization modes for the Event API connections.
+            :param default_publish_auth_modes: A list of valid authorization modes for the Event API publishing.
+            :param default_subscribe_auth_modes: A list of valid authorization modes for the Event API subscriptions.
+            :param log_config: The CloudWatch Logs configuration for the Event API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                event_config_property = appsync.CfnApi.EventConfigProperty(
+                    auth_providers=[appsync.CfnApi.AuthProviderProperty(
+                        auth_type="authType",
+                
+                        # the properties below are optional
+                        cognito_config=appsync.CfnApi.CognitoConfigProperty(
+                            aws_region="awsRegion",
+                            user_pool_id="userPoolId",
+                
+                            # the properties below are optional
+                            app_id_client_regex="appIdClientRegex"
+                        ),
+                        lambda_authorizer_config=appsync.CfnApi.LambdaAuthorizerConfigProperty(
+                            authorizer_uri="authorizerUri",
+                
+                            # the properties below are optional
+                            authorizer_result_ttl_in_seconds=123,
+                            identity_validation_expression="identityValidationExpression"
+                        ),
+                        open_id_connect_config=appsync.CfnApi.OpenIDConnectConfigProperty(
+                            issuer="issuer",
+                
+                            # the properties below are optional
+                            auth_ttl=123,
+                            client_id="clientId",
+                            iat_ttl=123
+                        )
+                    )],
+                    connection_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+                    default_publish_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+                    default_subscribe_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+                
+                    # the properties below are optional
+                    log_config=appsync.CfnApi.EventLogConfigProperty(
+                        cloud_watch_logs_role_arn="cloudWatchLogsRoleArn",
+                        log_level="logLevel"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__53f8b01a4596f6e890e45a2870f92278e02fc06e912e096c33920157038135cf)
+                check_type(argname="argument auth_providers", value=auth_providers, expected_type=type_hints["auth_providers"])
+                check_type(argname="argument connection_auth_modes", value=connection_auth_modes, expected_type=type_hints["connection_auth_modes"])
+                check_type(argname="argument default_publish_auth_modes", value=default_publish_auth_modes, expected_type=type_hints["default_publish_auth_modes"])
+                check_type(argname="argument default_subscribe_auth_modes", value=default_subscribe_auth_modes, expected_type=type_hints["default_subscribe_auth_modes"])
+                check_type(argname="argument log_config", value=log_config, expected_type=type_hints["log_config"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "auth_providers": auth_providers,
+                "connection_auth_modes": connection_auth_modes,
+                "default_publish_auth_modes": default_publish_auth_modes,
+                "default_subscribe_auth_modes": default_subscribe_auth_modes,
+            }
+            if log_config is not None:
+                self._values["log_config"] = log_config
+
+        @builtins.property
+        def auth_providers(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthProviderProperty"]]]:
+            '''A list of authorization providers.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-authproviders
+            '''
+            result = self._values.get("auth_providers")
+            assert result is not None, "Required property 'auth_providers' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthProviderProperty"]]], result)
+
+        @builtins.property
+        def connection_auth_modes(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]]:
+            '''A list of valid authorization modes for the Event API connections.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-connectionauthmodes
+            '''
+            result = self._values.get("connection_auth_modes")
+            assert result is not None, "Required property 'connection_auth_modes' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]], result)
+
+        @builtins.property
+        def default_publish_auth_modes(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]]:
+            '''A list of valid authorization modes for the Event API publishing.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-defaultpublishauthmodes
+            '''
+            result = self._values.get("default_publish_auth_modes")
+            assert result is not None, "Required property 'default_publish_auth_modes' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]], result)
+
+        @builtins.property
+        def default_subscribe_auth_modes(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]]:
+            '''A list of valid authorization modes for the Event API subscriptions.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-defaultsubscribeauthmodes
+            '''
+            result = self._values.get("default_subscribe_auth_modes")
+            assert result is not None, "Required property 'default_subscribe_auth_modes' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnApi.AuthModeProperty"]]], result)
+
+        @builtins.property
+        def log_config(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventLogConfigProperty"]]:
+            '''The CloudWatch Logs configuration for the Event API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventconfig.html#cfn-appsync-api-eventconfig-logconfig
+            '''
+            result = self._values.get("log_config")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApi.EventLogConfigProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "EventConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.EventLogConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "cloud_watch_logs_role_arn": "cloudWatchLogsRoleArn",
+            "log_level": "logLevel",
+        },
+    )
+    class EventLogConfigProperty:
+        def __init__(
+            self,
+            *,
+            cloud_watch_logs_role_arn: builtins.str,
+            log_level: builtins.str,
+        ) -> None:
+            '''Describes the CloudWatch Logs configuration for the Event API.
+
+            :param cloud_watch_logs_role_arn: The IAM service role that AWS AppSync assumes to publish CloudWatch Logs in your account.
+            :param log_level: The type of information to log for the Event API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventlogconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                event_log_config_property = appsync.CfnApi.EventLogConfigProperty(
+                    cloud_watch_logs_role_arn="cloudWatchLogsRoleArn",
+                    log_level="logLevel"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__5cbb1c5597e58c84a31d8dc10841de6fa70b9c328dacba388a7afdab090b3e6a)
+                check_type(argname="argument cloud_watch_logs_role_arn", value=cloud_watch_logs_role_arn, expected_type=type_hints["cloud_watch_logs_role_arn"])
+                check_type(argname="argument log_level", value=log_level, expected_type=type_hints["log_level"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "cloud_watch_logs_role_arn": cloud_watch_logs_role_arn,
+                "log_level": log_level,
+            }
+
+        @builtins.property
+        def cloud_watch_logs_role_arn(self) -> builtins.str:
+            '''The IAM service role that AWS AppSync assumes to publish CloudWatch Logs in your account.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventlogconfig.html#cfn-appsync-api-eventlogconfig-cloudwatchlogsrolearn
+            '''
+            result = self._values.get("cloud_watch_logs_role_arn")
+            assert result is not None, "Required property 'cloud_watch_logs_role_arn' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def log_level(self) -> builtins.str:
+            '''The type of information to log for the Event API.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-eventlogconfig.html#cfn-appsync-api-eventlogconfig-loglevel
+            '''
+            result = self._values.get("log_level")
+            assert result is not None, "Required property 'log_level' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "EventLogConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.LambdaAuthorizerConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "authorizer_uri": "authorizerUri",
+            "authorizer_result_ttl_in_seconds": "authorizerResultTtlInSeconds",
+            "identity_validation_expression": "identityValidationExpression",
+        },
+    )
+    class LambdaAuthorizerConfigProperty:
+        def __init__(
+            self,
+            *,
+            authorizer_uri: builtins.str,
+            authorizer_result_ttl_in_seconds: typing.Optional[jsii.Number] = None,
+            identity_validation_expression: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''A ``LambdaAuthorizerConfig`` specifies how to authorize AWS AppSync API access when using the ``AWS_LAMBDA`` authorizer mode.
+
+            Be aware that an AWS AppSync API can have only one AWS Lambda authorizer configured at a time.
+
+            :param authorizer_uri: The Amazon Resource Name (ARN) of the Lambda function to be called for authorization. This can be a standard Lambda ARN, a version ARN ( ``.../v3`` ), or an alias ARN. *Note* : This Lambda function must have the following resource-based policy assigned to it. When configuring Lambda authorizers in the console, this is done for you. To use the AWS Command Line Interface ( AWS CLI ), run the following: ``aws lambda add-permission --function-name "arn:aws:lambda:us-east-2:111122223333:function:my-function" --statement-id "appsync" --principal appsync.amazonaws.com --action lambda:InvokeFunction``
+            :param authorizer_result_ttl_in_seconds: The number of seconds a response should be cached for. The default is 0 seconds, which disables caching. If you don't specify a value for ``authorizerResultTtlInSeconds`` , the default value is used. The maximum value is one hour (3600 seconds). The Lambda function can override this by returning a ``ttlOverride`` key in its response.
+            :param identity_validation_expression: A regular expression for validation of tokens before the Lambda function is called.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-lambdaauthorizerconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                lambda_authorizer_config_property = appsync.CfnApi.LambdaAuthorizerConfigProperty(
+                    authorizer_uri="authorizerUri",
+                
+                    # the properties below are optional
+                    authorizer_result_ttl_in_seconds=123,
+                    identity_validation_expression="identityValidationExpression"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__6eb7eaf1ef726d95b558700ffd22e714695a485aed3b5a3ae796f2a03efae22c)
+                check_type(argname="argument authorizer_uri", value=authorizer_uri, expected_type=type_hints["authorizer_uri"])
+                check_type(argname="argument authorizer_result_ttl_in_seconds", value=authorizer_result_ttl_in_seconds, expected_type=type_hints["authorizer_result_ttl_in_seconds"])
+                check_type(argname="argument identity_validation_expression", value=identity_validation_expression, expected_type=type_hints["identity_validation_expression"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "authorizer_uri": authorizer_uri,
+            }
+            if authorizer_result_ttl_in_seconds is not None:
+                self._values["authorizer_result_ttl_in_seconds"] = authorizer_result_ttl_in_seconds
+            if identity_validation_expression is not None:
+                self._values["identity_validation_expression"] = identity_validation_expression
+
+        @builtins.property
+        def authorizer_uri(self) -> builtins.str:
+            '''The Amazon Resource Name (ARN) of the Lambda function to be called for authorization.
+
+            This can be a standard Lambda ARN, a version ARN ( ``.../v3`` ), or an alias ARN.
+
+            *Note* : This Lambda function must have the following resource-based policy assigned to it. When configuring Lambda authorizers in the console, this is done for you. To use the AWS Command Line Interface ( AWS CLI ), run the following:
+
+            ``aws lambda add-permission --function-name "arn:aws:lambda:us-east-2:111122223333:function:my-function" --statement-id "appsync" --principal appsync.amazonaws.com --action lambda:InvokeFunction``
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-lambdaauthorizerconfig.html#cfn-appsync-api-lambdaauthorizerconfig-authorizeruri
+            '''
+            result = self._values.get("authorizer_uri")
+            assert result is not None, "Required property 'authorizer_uri' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def authorizer_result_ttl_in_seconds(self) -> typing.Optional[jsii.Number]:
+            '''The number of seconds a response should be cached for.
+
+            The default is 0 seconds, which disables caching. If you don't specify a value for ``authorizerResultTtlInSeconds`` , the default value is used. The maximum value is one hour (3600 seconds). The Lambda function can override this by returning a ``ttlOverride`` key in its response.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-lambdaauthorizerconfig.html#cfn-appsync-api-lambdaauthorizerconfig-authorizerresultttlinseconds
+            '''
+            result = self._values.get("authorizer_result_ttl_in_seconds")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def identity_validation_expression(self) -> typing.Optional[builtins.str]:
+            '''A regular expression for validation of tokens before the Lambda function is called.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-lambdaauthorizerconfig.html#cfn-appsync-api-lambdaauthorizerconfig-identityvalidationexpression
+            '''
+            result = self._values.get("identity_validation_expression")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "LambdaAuthorizerConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnApi.OpenIDConnectConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "issuer": "issuer",
+            "auth_ttl": "authTtl",
+            "client_id": "clientId",
+            "iat_ttl": "iatTtl",
+        },
+    )
+    class OpenIDConnectConfigProperty:
+        def __init__(
+            self,
+            *,
+            issuer: builtins.str,
+            auth_ttl: typing.Optional[jsii.Number] = None,
+            client_id: typing.Optional[builtins.str] = None,
+            iat_ttl: typing.Optional[jsii.Number] = None,
+        ) -> None:
+            '''Describes an OpenID Connect (OIDC) configuration.
+
+            :param issuer: The issuer for the OIDC configuration. The issuer returned by discovery must exactly match the value of ``iss`` in the ID token.
+            :param auth_ttl: The number of milliseconds that a token is valid after being authenticated.
+            :param client_id: The client identifier of the relying party at the OpenID identity provider. This identifier is typically obtained when the relying party is registered with the OpenID identity provider. You can specify a regular expression so that AWS AppSync can validate against multiple client identifiers at a time.
+            :param iat_ttl: The number of milliseconds that a token is valid after it's issued to a user.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-openidconnectconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                open_iDConnect_config_property = appsync.CfnApi.OpenIDConnectConfigProperty(
+                    issuer="issuer",
+                
+                    # the properties below are optional
+                    auth_ttl=123,
+                    client_id="clientId",
+                    iat_ttl=123
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__560e301b02d9bfc40a0d691fa82c55f336f07c62f130aa6e9464ab1c1b676cf8)
+                check_type(argname="argument issuer", value=issuer, expected_type=type_hints["issuer"])
+                check_type(argname="argument auth_ttl", value=auth_ttl, expected_type=type_hints["auth_ttl"])
+                check_type(argname="argument client_id", value=client_id, expected_type=type_hints["client_id"])
+                check_type(argname="argument iat_ttl", value=iat_ttl, expected_type=type_hints["iat_ttl"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "issuer": issuer,
+            }
+            if auth_ttl is not None:
+                self._values["auth_ttl"] = auth_ttl
+            if client_id is not None:
+                self._values["client_id"] = client_id
+            if iat_ttl is not None:
+                self._values["iat_ttl"] = iat_ttl
+
+        @builtins.property
+        def issuer(self) -> builtins.str:
+            '''The issuer for the OIDC configuration.
+
+            The issuer returned by discovery must exactly match the value of ``iss`` in the ID token.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-openidconnectconfig.html#cfn-appsync-api-openidconnectconfig-issuer
+            '''
+            result = self._values.get("issuer")
+            assert result is not None, "Required property 'issuer' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def auth_ttl(self) -> typing.Optional[jsii.Number]:
+            '''The number of milliseconds that a token is valid after being authenticated.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-openidconnectconfig.html#cfn-appsync-api-openidconnectconfig-authttl
+            '''
+            result = self._values.get("auth_ttl")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def client_id(self) -> typing.Optional[builtins.str]:
+            '''The client identifier of the relying party at the OpenID identity provider.
+
+            This identifier is typically obtained when the relying party is registered with the OpenID identity provider. You can specify a regular expression so that AWS AppSync can validate against multiple client identifiers at a time.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-openidconnectconfig.html#cfn-appsync-api-openidconnectconfig-clientid
+            '''
+            result = self._values.get("client_id")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def iat_ttl(self) -> typing.Optional[jsii.Number]:
+            '''The number of milliseconds that a token is valid after it's issued to a user.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-api-openidconnectconfig.html#cfn-appsync-api-openidconnectconfig-iatttl
+            '''
+            result = self._values.get("iat_ttl")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "OpenIDConnectConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.implements(_IInspectable_c2943556)
+class CfnApiCache(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApiCache",
+):
+    '''The ``AWS::AppSync::ApiCache`` resource represents the input of a ``CreateApiCache`` operation.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html
+    :cloudformationResource: AWS::AppSync::ApiCache
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_appsync as appsync
+        
+        cfn_api_cache = appsync.CfnApiCache(self, "MyCfnApiCache",
+            api_caching_behavior="apiCachingBehavior",
+            api_id="apiId",
+            ttl=123,
+            type="type",
+        
+            # the properties below are optional
+            at_rest_encryption_enabled=False,
+            health_metrics_config="healthMetricsConfig",
+            transit_encryption_enabled=False
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        api_caching_behavior: builtins.str,
+        api_id: builtins.str,
+        ttl: jsii.Number,
+        type: builtins.str,
+        at_rest_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        health_metrics_config: typing.Optional[builtins.str] = None,
+        transit_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param api_caching_behavior: Caching behavior. - *FULL_REQUEST_CACHING* : All requests are fully cached. - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
+        :param api_id: The GraphQL API ID.
+        :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
+        :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
+        :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
+        :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
+        :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e9d92b7b2abdac7341eb92f7ac10d2d67dd2700af68eaf42c72c47ffdaacc344)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnApiCacheProps(
+            api_caching_behavior=api_caching_behavior,
+            api_id=api_id,
+            ttl=ttl,
+            type=type,
+            at_rest_encryption_enabled=at_rest_encryption_enabled,
+            health_metrics_config=health_metrics_config,
+            transit_encryption_enabled=transit_encryption_enabled,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__142193172b7ee1304f3b8fd949531b4cfa950ea62d0dc10f9ed5a184a603132d)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1ce863b5f21a86ce886458054cd4de0550269c18eb7c4f3fb37884dc2869845e)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrId")
+    def attr_id(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: Id
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="apiCachingBehavior")
+    def api_caching_behavior(self) -> builtins.str:
+        '''Caching behavior.'''
+        return typing.cast(builtins.str, jsii.get(self, "apiCachingBehavior"))
+
+    @api_caching_behavior.setter
+    def api_caching_behavior(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__aee6b3576fbf654864dae4f55fe292d210bf01534f16f80af0ac225f8fa338c9)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "apiCachingBehavior", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="apiId")
+    def api_id(self) -> builtins.str:
+        '''The GraphQL API ID.'''
+        return typing.cast(builtins.str, jsii.get(self, "apiId"))
+
+    @api_id.setter
+    def api_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6c2fdac623dbaddb2a0226d75e6f3ca84c058f3f46b9c9a1289820c1cf0827e1)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "apiId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="ttl")
+    def ttl(self) -> jsii.Number:
+        '''TTL in seconds for cache entries.'''
+        return typing.cast(jsii.Number, jsii.get(self, "ttl"))
+
+    @ttl.setter
+    def ttl(self, value: jsii.Number) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1893b7ba08236941b8e5bb4704e7fe53f8819086085796443b5d68f513e66eaa)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "ttl", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="type")
+    def type(self) -> builtins.str:
+        '''The cache instance type.
+
+        Valid values are.
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "type"))
+
+    @type.setter
+    def type(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__45dc491e21920c6cd0ddecd9aada80283ac759d9eaca52c45a6ce35197166e9d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "type", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="atRestEncryptionEnabled")
+    def at_rest_encryption_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''At-rest encryption flag for cache.'''
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "atRestEncryptionEnabled"))
+
+    @at_rest_encryption_enabled.setter
+    def at_rest_encryption_enabled(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__93a4abe242f634763c1f128b7e17017d1176924c9b032d5536f4caa3b3fc3bd6)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "atRestEncryptionEnabled", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="healthMetricsConfig")
+    def health_metrics_config(self) -> typing.Optional[builtins.str]:
+        '''Controls how cache health metrics will be emitted to CloudWatch.
+
+        Cache health metrics include:.
+        '''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "healthMetricsConfig"))
+
+    @health_metrics_config.setter
+    def health_metrics_config(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__55de0a796fc6cc946fccbec8ff82c493648ae16228267a0627a624d4e64e10dd)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "healthMetricsConfig", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="transitEncryptionEnabled")
+    def transit_encryption_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''Transit encryption flag when connecting to cache.'''
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "transitEncryptionEnabled"))
+
+    @transit_encryption_enabled.setter
+    def transit_encryption_enabled(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__eb39499095e917401c885f7c77781744d09df071b1ed62c6f2c32cbbc6fbdb33)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "transitEncryptionEnabled", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApiCacheProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "api_caching_behavior": "apiCachingBehavior",
+        "api_id": "apiId",
+        "ttl": "ttl",
+        "type": "type",
+        "at_rest_encryption_enabled": "atRestEncryptionEnabled",
+        "health_metrics_config": "healthMetricsConfig",
+        "transit_encryption_enabled": "transitEncryptionEnabled",
+    },
+)
+class CfnApiCacheProps:
+    def __init__(
+        self,
+        *,
+        api_caching_behavior: builtins.str,
+        api_id: builtins.str,
+        ttl: jsii.Number,
+        type: builtins.str,
+        at_rest_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        health_metrics_config: typing.Optional[builtins.str] = None,
+        transit_encryption_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnApiCache``.
+
+        :param api_caching_behavior: Caching behavior. - *FULL_REQUEST_CACHING* : All requests are fully cached. - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
+        :param api_id: The GraphQL API ID.
+        :param ttl: TTL in seconds for cache entries. Valid values are 1–3,600 seconds.
+        :param type: The cache instance type. Valid values are. - ``SMALL`` - ``MEDIUM`` - ``LARGE`` - ``XLARGE`` - ``LARGE_2X`` - ``LARGE_4X`` - ``LARGE_8X`` (not available in all regions) - ``LARGE_12X`` Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used. The following legacy instance types are available, but their use is discouraged: - *T2_SMALL* : A t2.small instance type. - *T2_MEDIUM* : A t2.medium instance type. - *R4_LARGE* : A r4.large instance type. - *R4_XLARGE* : A r4.xlarge instance type. - *R4_2XLARGE* : A r4.2xlarge instance type. - *R4_4XLARGE* : A r4.4xlarge instance type. - *R4_8XLARGE* : A r4.8xlarge instance type.
+        :param at_rest_encryption_enabled: At-rest encryption flag for cache. You cannot update this setting after creation.
+        :param health_metrics_config: Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:. - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration. - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration. Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
+        :param transit_encryption_enabled: Transit encryption flag when connecting to cache. You cannot update this setting after creation.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_appsync as appsync
+            
+            cfn_api_cache_props = appsync.CfnApiCacheProps(
+                api_caching_behavior="apiCachingBehavior",
+                api_id="apiId",
+                ttl=123,
+                type="type",
+            
+                # the properties below are optional
+                at_rest_encryption_enabled=False,
+                health_metrics_config="healthMetricsConfig",
+                transit_encryption_enabled=False
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8f054fa3186eb5f122c20e523bed485713c72511ee3ee94be25733ecad9a348c)
+            check_type(argname="argument api_caching_behavior", value=api_caching_behavior, expected_type=type_hints["api_caching_behavior"])
+            check_type(argname="argument api_id", value=api_id, expected_type=type_hints["api_id"])
+            check_type(argname="argument ttl", value=ttl, expected_type=type_hints["ttl"])
+            check_type(argname="argument type", value=type, expected_type=type_hints["type"])
+            check_type(argname="argument at_rest_encryption_enabled", value=at_rest_encryption_enabled, expected_type=type_hints["at_rest_encryption_enabled"])
+            check_type(argname="argument health_metrics_config", value=health_metrics_config, expected_type=type_hints["health_metrics_config"])
             check_type(argname="argument transit_encryption_enabled", value=transit_encryption_enabled, expected_type=type_hints["transit_encryption_enabled"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
-            "api_caching_behavior": api_caching_behavior,
+            "api_caching_behavior": api_caching_behavior,
+            "api_id": api_id,
+            "ttl": ttl,
+            "type": type,
+        }
+        if at_rest_encryption_enabled is not None:
+            self._values["at_rest_encryption_enabled"] = at_rest_encryption_enabled
+        if health_metrics_config is not None:
+            self._values["health_metrics_config"] = health_metrics_config
+        if transit_encryption_enabled is not None:
+            self._values["transit_encryption_enabled"] = transit_encryption_enabled
+
+    @builtins.property
+    def api_caching_behavior(self) -> builtins.str:
+        '''Caching behavior.
+
+        - *FULL_REQUEST_CACHING* : All requests are fully cached.
+        - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-apicachingbehavior
+        '''
+        result = self._values.get("api_caching_behavior")
+        assert result is not None, "Required property 'api_caching_behavior' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def api_id(self) -> builtins.str:
+        '''The GraphQL API ID.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-apiid
+        '''
+        result = self._values.get("api_id")
+        assert result is not None, "Required property 'api_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def ttl(self) -> jsii.Number:
+        '''TTL in seconds for cache entries.
+
+        Valid values are 1–3,600 seconds.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-ttl
+        '''
+        result = self._values.get("ttl")
+        assert result is not None, "Required property 'ttl' is missing"
+        return typing.cast(jsii.Number, result)
+
+    @builtins.property
+    def type(self) -> builtins.str:
+        '''The cache instance type. Valid values are.
+
+        - ``SMALL``
+        - ``MEDIUM``
+        - ``LARGE``
+        - ``XLARGE``
+        - ``LARGE_2X``
+        - ``LARGE_4X``
+        - ``LARGE_8X`` (not available in all regions)
+        - ``LARGE_12X``
+
+        Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used.
+
+        The following legacy instance types are available, but their use is discouraged:
+
+        - *T2_SMALL* : A t2.small instance type.
+        - *T2_MEDIUM* : A t2.medium instance type.
+        - *R4_LARGE* : A r4.large instance type.
+        - *R4_XLARGE* : A r4.xlarge instance type.
+        - *R4_2XLARGE* : A r4.2xlarge instance type.
+        - *R4_4XLARGE* : A r4.4xlarge instance type.
+        - *R4_8XLARGE* : A r4.8xlarge instance type.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-type
+        '''
+        result = self._values.get("type")
+        assert result is not None, "Required property 'type' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def at_rest_encryption_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''At-rest encryption flag for cache.
+
+        You cannot update this setting after creation.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-atrestencryptionenabled
+        '''
+        result = self._values.get("at_rest_encryption_enabled")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+    @builtins.property
+    def health_metrics_config(self) -> typing.Optional[builtins.str]:
+        '''Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:.
+
+        - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration.
+        - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration.
+
+        Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-healthmetricsconfig
+        '''
+        result = self._values.get("health_metrics_config")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def transit_encryption_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''Transit encryption flag when connecting to cache.
+
+        You cannot update this setting after creation.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-transitencryptionenabled
+        '''
+        result = self._values.get("transit_encryption_enabled")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnApiCacheProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_IInspectable_c2943556)
+class CfnApiKey(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApiKey",
+):
+    '''The ``AWS::AppSync::ApiKey`` resource creates a unique key that you can distribute to clients who are executing GraphQL operations with AWS AppSync that require an API key.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html
+    :cloudformationResource: AWS::AppSync::ApiKey
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_appsync as appsync
+        
+        cfn_api_key = appsync.CfnApiKey(self, "MyCfnApiKey",
+            api_id="apiId",
+        
+            # the properties below are optional
+            description="description",
+            expires=123
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        api_id: builtins.str,
+        description: typing.Optional[builtins.str] = None,
+        expires: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param api_id: Unique AWS AppSync GraphQL API ID for this API key.
+        :param description: Unique description of your API key.
+        :param expires: The time after which the API key expires. The date is represented as seconds since the epoch, rounded down to the nearest hour.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e6065dd18c9d420fd4fcd70aced8416006f044f82aecff54150165e832539a8e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnApiKeyProps(api_id=api_id, description=description, expires=expires)
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1f8f02bc91fc0b32c990b8d08a5d7a0ef78a88363920fa69d4196dcc7f2ecfb3)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a844b496712966f29aae49f2f831e6a85c7acf03c2ce61c94162ccf13c5efd6d)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrApiKey")
+    def attr_api_key(self) -> builtins.str:
+        '''The API key.
+
+        :cloudformationAttribute: ApiKey
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrApiKey"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrApiKeyId")
+    def attr_api_key_id(self) -> builtins.str:
+        '''The API key ID.
+
+        :cloudformationAttribute: ApiKeyId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrApiKeyId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrArn")
+    def attr_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the API key, such as ``arn:aws:appsync:us-east-1:123456789012:apis/graphqlapiid/apikey/apikeya1bzhi`` .
+
+        :cloudformationAttribute: Arn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="apiId")
+    def api_id(self) -> builtins.str:
+        '''Unique AWS AppSync GraphQL API ID for this API key.'''
+        return typing.cast(builtins.str, jsii.get(self, "apiId"))
+
+    @api_id.setter
+    def api_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3c1cce5f76a6037620e1cc2e57750c81cc5161ff526ce78123f0cd9f25c8e856)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "apiId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="description")
+    def description(self) -> typing.Optional[builtins.str]:
+        '''Unique description of your API key.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "description"))
+
+    @description.setter
+    def description(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__08afa042939638da41f04c7165f811f5081bd3c8943f787591f098aa4a3b8699)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="expires")
+    def expires(self) -> typing.Optional[jsii.Number]:
+        '''The time after which the API key expires.'''
+        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "expires"))
+
+    @expires.setter
+    def expires(self, value: typing.Optional[jsii.Number]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8b034facb88dea82241969fd1a22a5bbaccf03068403021106e073c92112ab45)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "expires", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApiKeyProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "api_id": "apiId",
+        "description": "description",
+        "expires": "expires",
+    },
+)
+class CfnApiKeyProps:
+    def __init__(
+        self,
+        *,
+        api_id: builtins.str,
+        description: typing.Optional[builtins.str] = None,
+        expires: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnApiKey``.
+
+        :param api_id: Unique AWS AppSync GraphQL API ID for this API key.
+        :param description: Unique description of your API key.
+        :param expires: The time after which the API key expires. The date is represented as seconds since the epoch, rounded down to the nearest hour.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_appsync as appsync
+            
+            cfn_api_key_props = appsync.CfnApiKeyProps(
+                api_id="apiId",
+            
+                # the properties below are optional
+                description="description",
+                expires=123
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1688db2b7835c85b4e2cd69655b5d25321ff2aa2ea9e1b2a0612caff34184549)
+            check_type(argname="argument api_id", value=api_id, expected_type=type_hints["api_id"])
+            check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument expires", value=expires, expected_type=type_hints["expires"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
             "api_id": api_id,
-            "ttl": ttl,
-            "type": type,
         }
-        if at_rest_encryption_enabled is not None:
-            self._values["at_rest_encryption_enabled"] = at_rest_encryption_enabled
-        if health_metrics_config is not None:
-            self._values["health_metrics_config"] = health_metrics_config
-        if transit_encryption_enabled is not None:
-            self._values["transit_encryption_enabled"] = transit_encryption_enabled
+        if description is not None:
+            self._values["description"] = description
+        if expires is not None:
+            self._values["expires"] = expires
 
     @builtins.property
-    def api_caching_behavior(self) -> builtins.str:
-        '''Caching behavior.
-
-        - *FULL_REQUEST_CACHING* : All requests are fully cached.
-        - *PER_RESOLVER_CACHING* : Individual resolvers that you specify are cached.
+    def api_id(self) -> builtins.str:
+        '''Unique AWS AppSync GraphQL API ID for this API key.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-apicachingbehavior
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-apiid
         '''
-        result = self._values.get("api_caching_behavior")
-        assert result is not None, "Required property 'api_caching_behavior' is missing"
+        result = self._values.get("api_id")
+        assert result is not None, "Required property 'api_id' is missing"
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def api_id(self) -> builtins.str:
-        '''The GraphQL API ID.
+    def description(self) -> typing.Optional[builtins.str]:
+        '''Unique description of your API key.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-description
+        '''
+        result = self._values.get("description")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def expires(self) -> typing.Optional[jsii.Number]:
+        '''The time after which the API key expires.
+
+        The date is represented as seconds since the epoch, rounded down to the nearest hour.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-expires
+        '''
+        result = self._values.get("expires")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnApiKeyProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_appsync.CfnApiProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "name": "name",
+        "event_config": "eventConfig",
+        "owner_contact": "ownerContact",
+        "tags": "tags",
+    },
+)
+class CfnApiProps:
+    def __init__(
+        self,
+        *,
+        name: builtins.str,
+        event_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.EventConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        owner_contact: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnApi``.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-apiid
-        '''
-        result = self._values.get("api_id")
-        assert result is not None, "Required property 'api_id' is missing"
-        return typing.cast(builtins.str, result)
+        :param name: The name of the ``Api`` .
+        :param event_config: Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API.
+        :param owner_contact: The owner contact information for an API resource. This field accepts any string input with a length of 0 - 256 characters.
+        :param tags: A set of tags (key-value pairs) for this API.
 
-    @builtins.property
-    def ttl(self) -> jsii.Number:
-        '''TTL in seconds for cache entries.
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html
+        :exampleMetadata: fixture=_generated
 
-        Valid values are 1–3,600 seconds.
+        Example::
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-ttl
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_appsync as appsync
+            
+            cfn_api_props = appsync.CfnApiProps(
+                name="name",
+            
+                # the properties below are optional
+                event_config=appsync.CfnApi.EventConfigProperty(
+                    auth_providers=[appsync.CfnApi.AuthProviderProperty(
+                        auth_type="authType",
+            
+                        # the properties below are optional
+                        cognito_config=appsync.CfnApi.CognitoConfigProperty(
+                            aws_region="awsRegion",
+                            user_pool_id="userPoolId",
+            
+                            # the properties below are optional
+                            app_id_client_regex="appIdClientRegex"
+                        ),
+                        lambda_authorizer_config=appsync.CfnApi.LambdaAuthorizerConfigProperty(
+                            authorizer_uri="authorizerUri",
+            
+                            # the properties below are optional
+                            authorizer_result_ttl_in_seconds=123,
+                            identity_validation_expression="identityValidationExpression"
+                        ),
+                        open_id_connect_config=appsync.CfnApi.OpenIDConnectConfigProperty(
+                            issuer="issuer",
+            
+                            # the properties below are optional
+                            auth_ttl=123,
+                            client_id="clientId",
+                            iat_ttl=123
+                        )
+                    )],
+                    connection_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+                    default_publish_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+                    default_subscribe_auth_modes=[appsync.CfnApi.AuthModeProperty(
+                        auth_type="authType"
+                    )],
+            
+                    # the properties below are optional
+                    log_config=appsync.CfnApi.EventLogConfigProperty(
+                        cloud_watch_logs_role_arn="cloudWatchLogsRoleArn",
+                        log_level="logLevel"
+                    )
+                ),
+                owner_contact="ownerContact",
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
         '''
-        result = self._values.get("ttl")
-        assert result is not None, "Required property 'ttl' is missing"
-        return typing.cast(jsii.Number, result)
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a6f1c28efbfb84e165cbbde9374da4810d0b8c625b2f4460dc4514b583cc8bc1)
+            check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument event_config", value=event_config, expected_type=type_hints["event_config"])
+            check_type(argname="argument owner_contact", value=owner_contact, expected_type=type_hints["owner_contact"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "name": name,
+        }
+        if event_config is not None:
+            self._values["event_config"] = event_config
+        if owner_contact is not None:
+            self._values["owner_contact"] = owner_contact
+        if tags is not None:
+            self._values["tags"] = tags
 
     @builtins.property
-    def type(self) -> builtins.str:
-        '''The cache instance type. Valid values are.
-
-        - ``SMALL``
-        - ``MEDIUM``
-        - ``LARGE``
-        - ``XLARGE``
-        - ``LARGE_2X``
-        - ``LARGE_4X``
-        - ``LARGE_8X`` (not available in all regions)
-        - ``LARGE_12X``
-
-        Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used.
-
-        The following legacy instance types are available, but their use is discouraged:
-
-        - *T2_SMALL* : A t2.small instance type.
-        - *T2_MEDIUM* : A t2.medium instance type.
-        - *R4_LARGE* : A r4.large instance type.
-        - *R4_XLARGE* : A r4.xlarge instance type.
-        - *R4_2XLARGE* : A r4.2xlarge instance type.
-        - *R4_4XLARGE* : A r4.4xlarge instance type.
-        - *R4_8XLARGE* : A r4.8xlarge instance type.
+    def name(self) -> builtins.str:
+        '''The name of the ``Api`` .
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-type
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html#cfn-appsync-api-name
         '''
-        result = self._values.get("type")
-        assert result is not None, "Required property 'type' is missing"
+        result = self._values.get("name")
+        assert result is not None, "Required property 'name' is missing"
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def at_rest_encryption_enabled(
+    def event_config(
         self,
-    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''At-rest encryption flag for cache.
-
-        You cannot update this setting after creation.
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApi.EventConfigProperty]]:
+        '''Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-atrestencryptionenabled
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html#cfn-appsync-api-eventconfig
         '''
-        result = self._values.get("at_rest_encryption_enabled")
-        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+        result = self._values.get("event_config")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApi.EventConfigProperty]], result)
 
     @builtins.property
-    def health_metrics_config(self) -> typing.Optional[builtins.str]:
-        '''Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include:.
-
-        - *NetworkBandwidthOutAllowanceExceeded* : The network packets dropped because the throughput exceeded the aggregated bandwidth limit. This is useful for diagnosing bottlenecks in a cache configuration.
-        - *EngineCPUUtilization* : The CPU utilization (percentage) allocated to the Redis process. This is useful for diagnosing bottlenecks in a cache configuration.
+    def owner_contact(self) -> typing.Optional[builtins.str]:
+        '''The owner contact information for an API resource.
 
-        Metrics will be recorded by API ID. You can set the value to ``ENABLED`` or ``DISABLED`` .
+        This field accepts any string input with a length of 0 - 256 characters.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-healthmetricsconfig
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html#cfn-appsync-api-ownercontact
         '''
-        result = self._values.get("health_metrics_config")
+        result = self._values.get("owner_contact")
         return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def transit_encryption_enabled(
-        self,
-    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''Transit encryption flag when connecting to cache.
-
-        You cannot update this setting after creation.
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''A set of tags (key-value pairs) for this API.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html#cfn-appsync-apicache-transitencryptionenabled
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html#cfn-appsync-api-tags
         '''
-        result = self._values.get("transit_encryption_enabled")
-        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -2858,21 +4325,23 @@ class CfnApiCacheProps:
         return not (rhs == self)
 
     def __repr__(self) -> str:
-        return "CfnApiCacheProps(%s)" % ", ".join(
+        return "CfnApiProps(%s)" % ", ".join(
             k + "=" + repr(v) for k, v in self._values.items()
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
-class CfnApiKey(
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnChannelNamespace(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
-    jsii_type="aws-cdk-lib.aws_appsync.CfnApiKey",
+    jsii_type="aws-cdk-lib.aws_appsync.CfnChannelNamespace",
 ):
-    '''The ``AWS::AppSync::ApiKey`` resource creates a unique key that you can distribute to clients who are executing GraphQL operations with AWS AppSync that require an API key.
+    '''The ``AWS::AppSync::ChannelNamespace`` resource creates a channel namespace associated with an ``Api`` .
 
-    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html
-    :cloudformationResource: AWS::AppSync::ApiKey
+    The ``ChannelNamespace`` contains the definitions for code handlers for the ``Api`` .
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html
+    :cloudformationResource: AWS::AppSync::ChannelNamespace
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -2881,12 +4350,23 @@ class CfnApiKey(
         # The values are placeholders you should change.
         from aws_cdk import aws_appsync as appsync
         
-        cfn_api_key = appsync.CfnApiKey(self, "MyCfnApiKey",
+        cfn_channel_namespace = appsync.CfnChannelNamespace(self, "MyCfnChannelNamespace",
             api_id="apiId",
+            name="name",
         
             # the properties below are optional
-            description="description",
-            expires=123
+            code_handlers="codeHandlers",
+            code_s3_location="codeS3Location",
+            publish_auth_modes=[appsync.CfnChannelNamespace.AuthModeProperty(
+                auth_type="authType"
+            )],
+            subscribe_auth_modes=[appsync.CfnChannelNamespace.AuthModeProperty(
+                auth_type="authType"
+            )],
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
         )
     '''
 
@@ -2896,21 +4376,37 @@ class CfnApiKey(
         id: builtins.str,
         *,
         api_id: builtins.str,
-        description: typing.Optional[builtins.str] = None,
-        expires: typing.Optional[jsii.Number] = None,
+        name: builtins.str,
+        code_handlers: typing.Optional[builtins.str] = None,
+        code_s3_location: typing.Optional[builtins.str] = None,
+        publish_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnChannelNamespace.AuthModeProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        subscribe_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnChannelNamespace.AuthModeProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param api_id: Unique AWS AppSync GraphQL API ID for this API key.
-        :param description: Unique description of your API key.
-        :param expires: The time after which the API key expires. The date is represented as seconds since the epoch, rounded down to the nearest hour.
+        :param api_id: The ``Api`` ID.
+        :param name: The name of the channel namespace. This name must be unique within the ``Api`` .
+        :param code_handlers: The event handler functions that run custom business logic to process published events and subscribe requests.
+        :param code_s3_location: The Amazon S3 endpoint where the code is located.
+        :param publish_auth_modes: The authorization mode to use for publishing messages on the channel namespace. This configuration overrides the default ``Api`` authorization configuration.
+        :param subscribe_auth_modes: The authorization mode to use for subscribing to messages on the channel namespace. This configuration overrides the default ``Api`` authorization configuration.
+        :param tags: A set of tags (key-value pairs) for this channel namespace.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__e6065dd18c9d420fd4fcd70aced8416006f044f82aecff54150165e832539a8e)
+            type_hints = typing.get_type_hints(_typecheckingstub__a093c57f7353830d56f8cde41e8653e333d0f0b91da87dd9ca86d72460c39119)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-        props = CfnApiKeyProps(api_id=api_id, description=description, expires=expires)
+        props = CfnChannelNamespaceProps(
+            api_id=api_id,
+            name=name,
+            code_handlers=code_handlers,
+            code_s3_location=code_s3_location,
+            publish_auth_modes=publish_auth_modes,
+            subscribe_auth_modes=subscribe_auth_modes,
+            tags=tags,
+        )
 
         jsii.create(self.__class__, self, [scope, id, props])
 
@@ -2921,7 +4417,7 @@ class CfnApiKey(
         :param inspector: tree inspector to collect and process attributes.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__1f8f02bc91fc0b32c990b8d08a5d7a0ef78a88363920fa69d4196dcc7f2ecfb3)
+            type_hints = typing.get_type_hints(_typecheckingstub__3ad9494241faa332c831f07b3784d74ff448ddf3fa3baab7ab580ea1404552c3)
             check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
         return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
 
@@ -2934,7 +4430,7 @@ class CfnApiKey(
         :param props: -
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__a844b496712966f29aae49f2f831e6a85c7acf03c2ce61c94162ccf13c5efd6d)
+            type_hints = typing.get_type_hints(_typecheckingstub__f22e76dc0a889c34e986bed6da737321c1aa8a5ae15fc27cbba163171fcdaa23)
             check_type(argname="argument props", value=props, expected_type=type_hints["props"])
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
 
@@ -2945,31 +4441,19 @@ class CfnApiKey(
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrApiKey")
-    def attr_api_key(self) -> builtins.str:
-        '''The API key.
-
-        :cloudformationAttribute: ApiKey
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrApiKey"))
-
-    @builtins.property
-    @jsii.member(jsii_name="attrApiKeyId")
-    def attr_api_key_id(self) -> builtins.str:
-        '''The API key ID.
+    @jsii.member(jsii_name="attrChannelNamespaceArn")
+    def attr_channel_namespace_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the channel namespace.
 
-        :cloudformationAttribute: ApiKeyId
+        :cloudformationAttribute: ChannelNamespaceArn
         '''
-        return typing.cast(builtins.str, jsii.get(self, "attrApiKeyId"))
+        return typing.cast(builtins.str, jsii.get(self, "attrChannelNamespaceArn"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrArn")
-    def attr_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) of the API key, such as ``arn:aws:appsync:us-east-1:123456789012:apis/graphqlapiid/apikey/apikeya1bzhi`` .
-
-        :cloudformationAttribute: Arn
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrArn"))
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
 
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
@@ -2979,67 +4463,194 @@ class CfnApiKey(
     @builtins.property
     @jsii.member(jsii_name="apiId")
     def api_id(self) -> builtins.str:
-        '''Unique AWS AppSync GraphQL API ID for this API key.'''
+        '''The ``Api`` ID.'''
         return typing.cast(builtins.str, jsii.get(self, "apiId"))
 
     @api_id.setter
     def api_id(self, value: builtins.str) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__3c1cce5f76a6037620e1cc2e57750c81cc5161ff526ce78123f0cd9f25c8e856)
+            type_hints = typing.get_type_hints(_typecheckingstub__8201c39b111fb5af50817714169cd23209a7d5463c3149a06b402732f7af580e)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "apiId", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="description")
-    def description(self) -> typing.Optional[builtins.str]:
-        '''Unique description of your API key.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "description"))
+    @jsii.member(jsii_name="name")
+    def name(self) -> builtins.str:
+        '''The name of the channel namespace.'''
+        return typing.cast(builtins.str, jsii.get(self, "name"))
 
-    @description.setter
-    def description(self, value: typing.Optional[builtins.str]) -> None:
+    @name.setter
+    def name(self, value: builtins.str) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__08afa042939638da41f04c7165f811f5081bd3c8943f787591f098aa4a3b8699)
+            type_hints = typing.get_type_hints(_typecheckingstub__cc847adc224bbc3257fda0edc3e1e2ffa88ecece56b3863f1e87260c9d4103f2)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "description", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="expires")
-    def expires(self) -> typing.Optional[jsii.Number]:
-        '''The time after which the API key expires.'''
-        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "expires"))
+    @jsii.member(jsii_name="codeHandlers")
+    def code_handlers(self) -> typing.Optional[builtins.str]:
+        '''The event handler functions that run custom business logic to process published events and subscribe requests.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "codeHandlers"))
+
+    @code_handlers.setter
+    def code_handlers(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__aaac6b0f9e0f2f86d3b90444a82806e153092dec34e803bf21f2a307b6660597)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "codeHandlers", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="codeS3Location")
+    def code_s3_location(self) -> typing.Optional[builtins.str]:
+        '''The Amazon S3 endpoint where the code is located.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "codeS3Location"))
+
+    @code_s3_location.setter
+    def code_s3_location(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0253aa38ea0ac168a1bb603d6239ae0cf4ece50f9019b6a9b531fc609610605a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "codeS3Location", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="publishAuthModes")
+    def publish_auth_modes(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]]:
+        '''The authorization mode to use for publishing messages on the channel namespace.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]], jsii.get(self, "publishAuthModes"))
+
+    @publish_auth_modes.setter
+    def publish_auth_modes(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__58ae5ceea0ea0efa0414e907917c0f46364396fc667a67ea5eb4524ac6fa4d5d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "publishAuthModes", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="subscribeAuthModes")
+    def subscribe_auth_modes(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]]:
+        '''The authorization mode to use for subscribing to messages on the channel namespace.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]], jsii.get(self, "subscribeAuthModes"))
+
+    @subscribe_auth_modes.setter
+    def subscribe_auth_modes(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnChannelNamespace.AuthModeProperty"]]]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__fc62b054d5e5897ab522adeae0e075f829ec43715bace1f3db8e88e5980f2476)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "subscribeAuthModes", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''A set of tags (key-value pairs) for this channel namespace.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3273a2539d741466392c98ae069010c1b8fcca3604cfaf7fc6da4382ae1eecd7)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_appsync.CfnChannelNamespace.AuthModeProperty",
+        jsii_struct_bases=[],
+        name_mapping={"auth_type": "authType"},
+    )
+    class AuthModeProperty:
+        def __init__(self, *, auth_type: typing.Optional[builtins.str] = None) -> None:
+            '''Describes an authorization configuration.
+
+            Use ``AuthMode`` to specify the publishing and subscription authorization configuration for an Event API.
+
+            :param auth_type: The authorization type.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-channelnamespace-authmode.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_appsync as appsync
+                
+                auth_mode_property = appsync.CfnChannelNamespace.AuthModeProperty(
+                    auth_type="authType"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__1f188b8b6c402829b1c2c91be4530734973b0af72e7cec71bb11fffe3160f50f)
+                check_type(argname="argument auth_type", value=auth_type, expected_type=type_hints["auth_type"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if auth_type is not None:
+                self._values["auth_type"] = auth_type
+
+        @builtins.property
+        def auth_type(self) -> typing.Optional[builtins.str]:
+            '''The authorization type.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-channelnamespace-authmode.html#cfn-appsync-channelnamespace-authmode-authtype
+            '''
+            result = self._values.get("auth_type")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
 
-    @expires.setter
-    def expires(self, value: typing.Optional[jsii.Number]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__8b034facb88dea82241969fd1a22a5bbaccf03068403021106e073c92112ab45)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "expires", value) # pyright: ignore[reportArgumentType]
+        def __repr__(self) -> str:
+            return "AuthModeProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
 
 
 @jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_appsync.CfnApiKeyProps",
+    jsii_type="aws-cdk-lib.aws_appsync.CfnChannelNamespaceProps",
     jsii_struct_bases=[],
     name_mapping={
         "api_id": "apiId",
-        "description": "description",
-        "expires": "expires",
+        "name": "name",
+        "code_handlers": "codeHandlers",
+        "code_s3_location": "codeS3Location",
+        "publish_auth_modes": "publishAuthModes",
+        "subscribe_auth_modes": "subscribeAuthModes",
+        "tags": "tags",
     },
 )
-class CfnApiKeyProps:
+class CfnChannelNamespaceProps:
     def __init__(
         self,
         *,
         api_id: builtins.str,
-        description: typing.Optional[builtins.str] = None,
-        expires: typing.Optional[jsii.Number] = None,
+        name: builtins.str,
+        code_handlers: typing.Optional[builtins.str] = None,
+        code_s3_location: typing.Optional[builtins.str] = None,
+        publish_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        subscribe_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''Properties for defining a ``CfnApiKey``.
+        '''Properties for defining a ``CfnChannelNamespace``.
 
-        :param api_id: Unique AWS AppSync GraphQL API ID for this API key.
-        :param description: Unique description of your API key.
-        :param expires: The time after which the API key expires. The date is represented as seconds since the epoch, rounded down to the nearest hour.
+        :param api_id: The ``Api`` ID.
+        :param name: The name of the channel namespace. This name must be unique within the ``Api`` .
+        :param code_handlers: The event handler functions that run custom business logic to process published events and subscribe requests.
+        :param code_s3_location: The Amazon S3 endpoint where the code is located.
+        :param publish_auth_modes: The authorization mode to use for publishing messages on the channel namespace. This configuration overrides the default ``Api`` authorization configuration.
+        :param subscribe_auth_modes: The authorization mode to use for subscribing to messages on the channel namespace. This configuration overrides the default ``Api`` authorization configuration.
+        :param tags: A set of tags (key-value pairs) for this channel namespace.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html
         :exampleMetadata: fixture=_generated
 
         Example::
@@ -3048,56 +4659,123 @@ class CfnApiKeyProps:
             # The values are placeholders you should change.
             from aws_cdk import aws_appsync as appsync
             
-            cfn_api_key_props = appsync.CfnApiKeyProps(
+            cfn_channel_namespace_props = appsync.CfnChannelNamespaceProps(
                 api_id="apiId",
+                name="name",
             
                 # the properties below are optional
-                description="description",
-                expires=123
+                code_handlers="codeHandlers",
+                code_s3_location="codeS3Location",
+                publish_auth_modes=[appsync.CfnChannelNamespace.AuthModeProperty(
+                    auth_type="authType"
+                )],
+                subscribe_auth_modes=[appsync.CfnChannelNamespace.AuthModeProperty(
+                    auth_type="authType"
+                )],
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
             )
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__1688db2b7835c85b4e2cd69655b5d25321ff2aa2ea9e1b2a0612caff34184549)
+            type_hints = typing.get_type_hints(_typecheckingstub__3eedc5c3e1f83f431aa7bafffc93ab91843ace16bf993fccc5f6f8fe7b37f62c)
             check_type(argname="argument api_id", value=api_id, expected_type=type_hints["api_id"])
-            check_type(argname="argument description", value=description, expected_type=type_hints["description"])
-            check_type(argname="argument expires", value=expires, expected_type=type_hints["expires"])
+            check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument code_handlers", value=code_handlers, expected_type=type_hints["code_handlers"])
+            check_type(argname="argument code_s3_location", value=code_s3_location, expected_type=type_hints["code_s3_location"])
+            check_type(argname="argument publish_auth_modes", value=publish_auth_modes, expected_type=type_hints["publish_auth_modes"])
+            check_type(argname="argument subscribe_auth_modes", value=subscribe_auth_modes, expected_type=type_hints["subscribe_auth_modes"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "api_id": api_id,
+            "name": name,
         }
-        if description is not None:
-            self._values["description"] = description
-        if expires is not None:
-            self._values["expires"] = expires
+        if code_handlers is not None:
+            self._values["code_handlers"] = code_handlers
+        if code_s3_location is not None:
+            self._values["code_s3_location"] = code_s3_location
+        if publish_auth_modes is not None:
+            self._values["publish_auth_modes"] = publish_auth_modes
+        if subscribe_auth_modes is not None:
+            self._values["subscribe_auth_modes"] = subscribe_auth_modes
+        if tags is not None:
+            self._values["tags"] = tags
 
     @builtins.property
     def api_id(self) -> builtins.str:
-        '''Unique AWS AppSync GraphQL API ID for this API key.
+        '''The ``Api`` ID.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-apiid
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-apiid
         '''
         result = self._values.get("api_id")
         assert result is not None, "Required property 'api_id' is missing"
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def description(self) -> typing.Optional[builtins.str]:
-        '''Unique description of your API key.
+    def name(self) -> builtins.str:
+        '''The name of the channel namespace.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-description
+        This name must be unique within the ``Api`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-name
         '''
-        result = self._values.get("description")
+        result = self._values.get("name")
+        assert result is not None, "Required property 'name' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def code_handlers(self) -> typing.Optional[builtins.str]:
+        '''The event handler functions that run custom business logic to process published events and subscribe requests.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-codehandlers
+        '''
+        result = self._values.get("code_handlers")
         return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def expires(self) -> typing.Optional[jsii.Number]:
-        '''The time after which the API key expires.
+    def code_s3_location(self) -> typing.Optional[builtins.str]:
+        '''The Amazon S3 endpoint where the code is located.
 
-        The date is represented as seconds since the epoch, rounded down to the nearest hour.
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-codes3location
+        '''
+        result = self._values.get("code_s3_location")
+        return typing.cast(typing.Optional[builtins.str], result)
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html#cfn-appsync-apikey-expires
+    @builtins.property
+    def publish_auth_modes(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]]:
+        '''The authorization mode to use for publishing messages on the channel namespace.
+
+        This configuration overrides the default ``Api`` authorization configuration.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-publishauthmodes
         '''
-        result = self._values.get("expires")
-        return typing.cast(typing.Optional[jsii.Number], result)
+        result = self._values.get("publish_auth_modes")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]], result)
+
+    @builtins.property
+    def subscribe_auth_modes(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]]:
+        '''The authorization mode to use for subscribing to messages on the channel namespace.
+
+        This configuration overrides the default ``Api`` authorization configuration.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-subscribeauthmodes
+        '''
+        result = self._values.get("subscribe_auth_modes")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''A set of tags (key-value pairs) for this channel namespace.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html#cfn-appsync-channelnamespace-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -3106,7 +4784,7 @@ class CfnApiKeyProps:
         return not (rhs == self)
 
     def __repr__(self) -> str:
-        return "CfnApiKeyProps(%s)" % ", ".join(
+        return "CfnChannelNamespaceProps(%s)" % ", ".join(
             k + "=" + repr(v) for k, v in self._values.items()
         )
 
@@ -9778,6 +11456,7 @@ class Code(metaclass=jsii.JSIIAbstractClass, jsii_type="aws-cdk-lib.aws_appsync.
         *,
         deploy_time: typing.Optional[builtins.bool] = None,
         readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+        source_kms_key: typing.Optional[_IKey_5f11635f] = None,
         asset_hash: typing.Optional[builtins.str] = None,
         asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
         bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -9790,6 +11469,7 @@ class Code(metaclass=jsii.JSIIAbstractClass, jsii_type="aws-cdk-lib.aws_appsync.
         :param path: The path to the source code file.
         :param deploy_time: Whether or not the asset needs to exist beyond deployment time; i.e. are copied over to a different location and not needed afterwards. Setting this property to true has an impact on the lifecycle of the asset, because we will assume that it is safe to delete after the CloudFormation deployment succeeds. For example, Lambda Function assets are copied over to Lambda during deployment. Therefore, it is not necessary to store the asset in S3, so we consider those deployTime assets. Default: false
         :param readers: A list of principals that should be able to read this asset from S3. You can use ``asset.grantRead(principal)`` to grant read permissions later. Default: - No principals that can read file asset.
+        :param source_kms_key: The ARN of the KMS key used to encrypt the handler code. Default: - the default server-side encryption with Amazon S3 managed keys(SSE-S3) key will be used.
         :param asset_hash: Specify a custom hash for this asset. If ``assetHashType`` is set it must be set to ``AssetHashType.CUSTOM``. For consistency, this custom hash will be SHA256 hashed and encoded as hex. The resulting hash will be the asset hash. NOTE: the hash is used in order to identify a specific revision of the asset, and used for optimizing and caching deployment activities related to this asset such as packaging, uploading to Amazon S3, etc. If you chose to customize the hash, you will need to make sure it is updated every time the asset changes, or otherwise it is possible that some deployments will not be invalidated. Default: - based on ``assetHashType``
         :param asset_hash_type: Specifies the type of hash to calculate for this asset. If ``assetHash`` is configured, this option must be ``undefined`` or ``AssetHashType.CUSTOM``. Default: - the default is ``AssetHashType.SOURCE``, but if ``assetHash`` is explicitly specified this value defaults to ``AssetHashType.CUSTOM``.
         :param bundling: Bundle the asset by executing a command in a Docker container or a custom bundling provider. The asset path will be mounted at ``/asset-input``. The Docker container is responsible for putting content at ``/asset-output``. The content at ``/asset-output`` will be zipped and used as the final asset. Default: - uploaded as-is to S3 if the asset is a regular file or a .zip file, archived into a .zip file and uploaded to S3 otherwise
@@ -9803,6 +11483,7 @@ class Code(metaclass=jsii.JSIIAbstractClass, jsii_type="aws-cdk-lib.aws_appsync.
         options = _AssetOptions_2aa69621(
             deploy_time=deploy_time,
             readers=readers,
+            source_kms_key=source_kms_key,
             asset_hash=asset_hash,
             asset_hash_type=asset_hash_type,
             bundling=bundling,
@@ -15177,9 +16858,11 @@ class AssetCode(
         import aws_cdk as cdk
         from aws_cdk import aws_appsync as appsync
         from aws_cdk import aws_iam as iam
+        from aws_cdk import aws_kms as kms
         
         # docker_image: cdk.DockerImage
         # grantable: iam.IGrantable
+        # key: kms.Key
         # local_bundling: cdk.ILocalBundling
         
         asset_code = appsync.AssetCode("path",
@@ -15215,7 +16898,8 @@ class AssetCode(
             exclude=["exclude"],
             follow_symlinks=cdk.SymlinkFollowMode.NEVER,
             ignore_mode=cdk.IgnoreMode.GLOB,
-            readers=[grantable]
+            readers=[grantable],
+            source_kMSKey=key
         )
     '''
 
@@ -15225,6 +16909,7 @@ class AssetCode(
         *,
         deploy_time: typing.Optional[builtins.bool] = None,
         readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+        source_kms_key: typing.Optional[_IKey_5f11635f] = None,
         asset_hash: typing.Optional[builtins.str] = None,
         asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
         bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -15236,6 +16921,7 @@ class AssetCode(
         :param path: The path to the asset file.
         :param deploy_time: Whether or not the asset needs to exist beyond deployment time; i.e. are copied over to a different location and not needed afterwards. Setting this property to true has an impact on the lifecycle of the asset, because we will assume that it is safe to delete after the CloudFormation deployment succeeds. For example, Lambda Function assets are copied over to Lambda during deployment. Therefore, it is not necessary to store the asset in S3, so we consider those deployTime assets. Default: false
         :param readers: A list of principals that should be able to read this asset from S3. You can use ``asset.grantRead(principal)`` to grant read permissions later. Default: - No principals that can read file asset.
+        :param source_kms_key: The ARN of the KMS key used to encrypt the handler code. Default: - the default server-side encryption with Amazon S3 managed keys(SSE-S3) key will be used.
         :param asset_hash: Specify a custom hash for this asset. If ``assetHashType`` is set it must be set to ``AssetHashType.CUSTOM``. For consistency, this custom hash will be SHA256 hashed and encoded as hex. The resulting hash will be the asset hash. NOTE: the hash is used in order to identify a specific revision of the asset, and used for optimizing and caching deployment activities related to this asset such as packaging, uploading to Amazon S3, etc. If you chose to customize the hash, you will need to make sure it is updated every time the asset changes, or otherwise it is possible that some deployments will not be invalidated. Default: - based on ``assetHashType``
         :param asset_hash_type: Specifies the type of hash to calculate for this asset. If ``assetHash`` is configured, this option must be ``undefined`` or ``AssetHashType.CUSTOM``. Default: - the default is ``AssetHashType.SOURCE``, but if ``assetHash`` is explicitly specified this value defaults to ``AssetHashType.CUSTOM``.
         :param bundling: Bundle the asset by executing a command in a Docker container or a custom bundling provider. The asset path will be mounted at ``/asset-input``. The Docker container is responsible for putting content at ``/asset-output``. The content at ``/asset-output`` will be zipped and used as the final asset. Default: - uploaded as-is to S3 if the asset is a regular file or a .zip file, archived into a .zip file and uploaded to S3 otherwise
@@ -15249,6 +16935,7 @@ class AssetCode(
         options = _AssetOptions_2aa69621(
             deploy_time=deploy_time,
             readers=readers,
+            source_kms_key=source_kms_key,
             asset_hash=asset_hash,
             asset_hash_type=asset_hash_type,
             bundling=bundling,
@@ -17767,10 +19454,14 @@ __all__ = [
     "BaseDataSourceProps",
     "BaseResolverProps",
     "CachingConfig",
+    "CfnApi",
     "CfnApiCache",
     "CfnApiCacheProps",
     "CfnApiKey",
     "CfnApiKeyProps",
+    "CfnApiProps",
+    "CfnChannelNamespace",
+    "CfnChannelNamespaceProps",
     "CfnDataSource",
     "CfnDataSourceProps",
     "CfnDomainName",
@@ -18043,6 +19734,126 @@ def _typecheckingstub__16c48e7a47c60140291c83d5eea69a6e25ec7462e7a0080eaf553e500
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__9b24e030284e4cb760e04c0345cc69b457962fa5c53b82f009a5c412ad0fa1e5(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    name: builtins.str,
+    event_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.EventConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    owner_contact: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1a34658e511f6fa9562934d95c768fd4b2af2314ddf2dab2969f39073417c21f(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__80dee192d808ade2b05e0e5eae2e320cb156ff9affe045ecbcaf005a54690f10(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__2bbcc5e3c150d28701074668c2cc2da51f0ba8e3870f53f61466fcc37a9b9d92(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9323cec9a000145849866e550b55f0a549087cc444c4fa5706fdbc7c1455d154(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApi.EventConfigProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b829d518b74ad55cbf9233be61a91ddec84af300e750befd18c27d6ec18db38d(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a8b30f166f8b9fa0fc02ab2eb4ff33b85277e77827ecebf6d7fd569a6667a8ea(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__27b661cb5be7fc793a7469c90adcd7629e723a94b2a389fead69d96cfde5dba2(
+    *,
+    auth_type: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d3b431432784c1151b3b95b1186edc1bcfaa11a3f70614ce43f998df8d1ae46d(
+    *,
+    auth_type: builtins.str,
+    cognito_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.CognitoConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    lambda_authorizer_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.LambdaAuthorizerConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    open_id_connect_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.OpenIDConnectConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__012c8ad0fa2d1afcda68ca532d5e287baa9e170049fe0c4e05e77dab9f8eb753(
+    *,
+    aws_region: builtins.str,
+    user_pool_id: builtins.str,
+    app_id_client_regex: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__312a111f84f5f64be12d3d7c09cc00f4c64e4fe99cd1bf78561ebcfd82084e0c(
+    *,
+    http: typing.Optional[builtins.str] = None,
+    realtime: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__53f8b01a4596f6e890e45a2870f92278e02fc06e912e096c33920157038135cf(
+    *,
+    auth_providers: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.AuthProviderProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    connection_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    default_publish_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    default_subscribe_auth_modes: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]],
+    log_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.EventLogConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5cbb1c5597e58c84a31d8dc10841de6fa70b9c328dacba388a7afdab090b3e6a(
+    *,
+    cloud_watch_logs_role_arn: builtins.str,
+    log_level: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6eb7eaf1ef726d95b558700ffd22e714695a485aed3b5a3ae796f2a03efae22c(
+    *,
+    authorizer_uri: builtins.str,
+    authorizer_result_ttl_in_seconds: typing.Optional[jsii.Number] = None,
+    identity_validation_expression: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__560e301b02d9bfc40a0d691fa82c55f336f07c62f130aa6e9464ab1c1b676cf8(
+    *,
+    issuer: builtins.str,
+    auth_ttl: typing.Optional[jsii.Number] = None,
+    client_id: typing.Optional[builtins.str] = None,
+    iat_ttl: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__e9d92b7b2abdac7341eb92f7ac10d2d67dd2700af68eaf42c72c47ffdaacc344(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -18175,6 +19986,105 @@ def _typecheckingstub__1688db2b7835c85b4e2cd69655b5d25321ff2aa2ea9e1b2a0612caff3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a6f1c28efbfb84e165cbbde9374da4810d0b8c625b2f4460dc4514b583cc8bc1(
+    *,
+    name: builtins.str,
+    event_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApi.EventConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    owner_contact: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a093c57f7353830d56f8cde41e8653e333d0f0b91da87dd9ca86d72460c39119(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    api_id: builtins.str,
+    name: builtins.str,
+    code_handlers: typing.Optional[builtins.str] = None,
+    code_s3_location: typing.Optional[builtins.str] = None,
+    publish_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    subscribe_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3ad9494241faa332c831f07b3784d74ff448ddf3fa3baab7ab580ea1404552c3(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f22e76dc0a889c34e986bed6da737321c1aa8a5ae15fc27cbba163171fcdaa23(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__8201c39b111fb5af50817714169cd23209a7d5463c3149a06b402732f7af580e(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__cc847adc224bbc3257fda0edc3e1e2ffa88ecece56b3863f1e87260c9d4103f2(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__aaac6b0f9e0f2f86d3b90444a82806e153092dec34e803bf21f2a307b6660597(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0253aa38ea0ac168a1bb603d6239ae0cf4ece50f9019b6a9b531fc609610605a(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__58ae5ceea0ea0efa0414e907917c0f46364396fc667a67ea5eb4524ac6fa4d5d(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__fc62b054d5e5897ab522adeae0e075f829ec43715bace1f3db8e88e5980f2476(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnChannelNamespace.AuthModeProperty]]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3273a2539d741466392c98ae069010c1b8fcca3604cfaf7fc6da4382ae1eecd7(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1f188b8b6c402829b1c2c91be4530734973b0af72e7cec71bb11fffe3160f50f(
+    *,
+    auth_type: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3eedc5c3e1f83f431aa7bafffc93ab91843ace16bf993fccc5f6f8fe7b37f62c(
+    *,
+    api_id: builtins.str,
+    name: builtins.str,
+    code_handlers: typing.Optional[builtins.str] = None,
+    code_s3_location: typing.Optional[builtins.str] = None,
+    publish_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    subscribe_auth_modes: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnChannelNamespace.AuthModeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__f2dc8968068d09d9cb599cea5efad1a18016c4eca4fcc6c15e6169a0891e2678(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -19209,6 +21119,7 @@ def _typecheckingstub__8eafa9f4fd31cdfcc23e497d115c1733ce980674eb036dad379eb9102
     *,
     deploy_time: typing.Optional[builtins.bool] = None,
     readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+    source_kms_key: typing.Optional[_IKey_5f11635f] = None,
     asset_hash: typing.Optional[builtins.str] = None,
     asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
     bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -19944,6 +21855,7 @@ def _typecheckingstub__f64c3b5b60096d2f072c0237f4540425eb18b7539e311bcd346760100
     *,
     deploy_time: typing.Optional[builtins.bool] = None,
     readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+    source_kms_key: typing.Optional[_IKey_5f11635f] = None,
     asset_hash: typing.Optional[builtins.str] = None,
     asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
     bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,