aws-cdk-lib 2.171.1__py3-none-any.whl → 2.173.0__py3-none-any.whl

aws_cdk/aws_apigateway/__init__.py

@@ -1832,10 +1832,13 @@ latency_method_metric = method.metric_latency(stage)
 
 ## APIGateway v2
 
-APIGateway v2 APIs are now moved to its own package named `aws-apigatewayv2`. For backwards compatibility, existing
-APIGateway v2 "CFN resources" (such as `CfnApi`) that were previously exported as part of this package, are still
-exported from here and have been marked deprecated. However, updates to these CloudFormation resources, such as new
-properties and new resource types will not be available.
+APIGateway v2 APIs are now moved to its own package named `aws-apigatewayv2`. Previously, these APIs were marked
+deprecated but retained for backwards compatibility. The deprecated usage of APIGateway v2 APIs within this module
+`aws-apigateway` has now been removed from the codebase.
+
+The reason for the removal of these deprecated Constructs is that CloudFormation team is releasing AWS resources
+like `AWS::APIGateway::DomainNameV2` and this would cause compatibility issue with the deprecated `CfnDomainNameV2`
+resource defined in `apigatewayv2.ts` file during the L1 generation.
 
 Move to using `aws-apigatewayv2` to get the latest APIs and updates.
 
@@ -1887,6 +1890,7 @@ from .. import (
     IResolvable as _IResolvable_da3f097b,
     IResource as _IResource_c80c4260,
     ITaggable as _ITaggable_36806126,
+    ITaggableV2 as _ITaggableV2_4e6798f8,
     IgnoreMode as _IgnoreMode_655a98e8,
     RemovalPolicy as _RemovalPolicy_9f93c814,
     Resource as _Resource_45bc6135,
@@ -4970,6 +4974,8 @@ class CfnBasePathMapping(
 ):
     '''The ``AWS::ApiGateway::BasePathMapping`` resource creates a base path that clients who call your API must use in the invocation URL.
 
+    Supported only for public custom domain names.
+
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-basepathmapping.html
     :cloudformationResource: AWS::ApiGateway::BasePathMapping
     :exampleMetadata: fixture=_generated
@@ -5249,6 +5255,277 @@ class CfnBasePathMappingProps:
         )
 
 
+@jsii.implements(_IInspectable_c2943556)
+class CfnBasePathMappingV2(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_apigateway.CfnBasePathMappingV2",
+):
+    '''The ``AWS::ApiGateway::BasePathMappingV2`` resource creates a base path that clients who call your API must use in the invocation URL.
+
+    Supported only for private custom domain names.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-basepathmappingv2.html
+    :cloudformationResource: AWS::ApiGateway::BasePathMappingV2
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_apigateway as apigateway
+        
+        cfn_base_path_mapping_v2 = apigateway.CfnBasePathMappingV2(self, "MyCfnBasePathMappingV2",
+            domain_name_arn="domainNameArn",
+            rest_api_id="restApiId",
+        
+            # the properties below are optional
+            base_path="basePath",
+            stage="stage"
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        domain_name_arn: builtins.str,
+        rest_api_id: builtins.str,
+        base_path: typing.Optional[builtins.str] = None,
+        stage: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param domain_name_arn: The ARN of the domain name for the BasePathMappingV2 resource to be described.
+        :param rest_api_id: The private API's identifier. This identifier is unique across all of your APIs in API Gateway.
+        :param base_path: The base path name that callers of the private API must provide as part of the URL after the domain name.
+        :param stage: Represents a unique identifier for a version of a deployed private RestApi that is callable by users. The Stage must depend on the ``RestApi`` 's stage. To create a dependency, add a DependsOn attribute to the BasePathMappingV2 resource.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a583f31dead36a23816022dfcb476b0ff18ec097d668a0cf42b19791b749acae)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnBasePathMappingV2Props(
+            domain_name_arn=domain_name_arn,
+            rest_api_id=rest_api_id,
+            base_path=base_path,
+            stage=stage,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6eb0641d050becd18a8a9f284493b10283d6aced001cf16285ba0926b9a2ea21)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ec5be7f34d7d1faa1a122900429e9be29d8ba4ea05ed4525cd221ea65131405b)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrBasePathMappingArn")
+    def attr_base_path_mapping_arn(self) -> builtins.str:
+        '''Amazon Resource Name (ARN) of the resource.
+
+        :cloudformationAttribute: BasePathMappingArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrBasePathMappingArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="domainNameArn")
+    def domain_name_arn(self) -> builtins.str:
+        '''The ARN of the domain name for the BasePathMappingV2 resource to be described.'''
+        return typing.cast(builtins.str, jsii.get(self, "domainNameArn"))
+
+    @domain_name_arn.setter
+    def domain_name_arn(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__23fd4874b172b953d177d1eced6c053907a3207a7d931ea7cebfd59673893321)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "domainNameArn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="restApiId")
+    def rest_api_id(self) -> builtins.str:
+        '''The private API's identifier.'''
+        return typing.cast(builtins.str, jsii.get(self, "restApiId"))
+
+    @rest_api_id.setter
+    def rest_api_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9e920388746332df91cb086b28eb2938d57106b8f772017211c3b2f52cd707b6)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "restApiId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="basePath")
+    def base_path(self) -> typing.Optional[builtins.str]:
+        '''The base path name that callers of the private API must provide as part of the URL after the domain name.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "basePath"))
+
+    @base_path.setter
+    def base_path(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8b3750f1121b177684129c6fc603e6fc5f80e5a7cfbd3ef4c6b8695fcc42c1d6)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "basePath", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="stage")
+    def stage(self) -> typing.Optional[builtins.str]:
+        '''Represents a unique identifier for a version of a deployed private RestApi that is callable by users.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "stage"))
+
+    @stage.setter
+    def stage(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__06763dc8a118854a928d389386d0a3d513848ff9eaaef5bd4ca70a6d09d586e0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "stage", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_apigateway.CfnBasePathMappingV2Props",
+    jsii_struct_bases=[],
+    name_mapping={
+        "domain_name_arn": "domainNameArn",
+        "rest_api_id": "restApiId",
+        "base_path": "basePath",
+        "stage": "stage",
+    },
+)
+class CfnBasePathMappingV2Props:
+    def __init__(
+        self,
+        *,
+        domain_name_arn: builtins.str,
+        rest_api_id: builtins.str,
+        base_path: typing.Optional[builtins.str] = None,
+        stage: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnBasePathMappingV2``.
+
+        :param domain_name_arn: The ARN of the domain name for the BasePathMappingV2 resource to be described.
+        :param rest_api_id: The private API's identifier. This identifier is unique across all of your APIs in API Gateway.
+        :param base_path: The base path name that callers of the private API must provide as part of the URL after the domain name.
+        :param stage: Represents a unique identifier for a version of a deployed private RestApi that is callable by users. The Stage must depend on the ``RestApi`` 's stage. To create a dependency, add a DependsOn attribute to the BasePathMappingV2 resource.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-basepathmappingv2.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_apigateway as apigateway
+            
+            cfn_base_path_mapping_v2_props = apigateway.CfnBasePathMappingV2Props(
+                domain_name_arn="domainNameArn",
+                rest_api_id="restApiId",
+            
+                # the properties below are optional
+                base_path="basePath",
+                stage="stage"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5f193676fc187703a2da6f9b8342bed4af93ab14e1c8f01d93fb4249b4e41ba3)
+            check_type(argname="argument domain_name_arn", value=domain_name_arn, expected_type=type_hints["domain_name_arn"])
+            check_type(argname="argument rest_api_id", value=rest_api_id, expected_type=type_hints["rest_api_id"])
+            check_type(argname="argument base_path", value=base_path, expected_type=type_hints["base_path"])
+            check_type(argname="argument stage", value=stage, expected_type=type_hints["stage"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "domain_name_arn": domain_name_arn,
+            "rest_api_id": rest_api_id,
+        }
+        if base_path is not None:
+            self._values["base_path"] = base_path
+        if stage is not None:
+            self._values["stage"] = stage
+
+    @builtins.property
+    def domain_name_arn(self) -> builtins.str:
+        '''The ARN of the domain name for the BasePathMappingV2 resource to be described.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-basepathmappingv2.html#cfn-apigateway-basepathmappingv2-domainnamearn
+        '''
+        result = self._values.get("domain_name_arn")
+        assert result is not None, "Required property 'domain_name_arn' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def rest_api_id(self) -> builtins.str:
+        '''The private API's identifier.
+
+        This identifier is unique across all of your APIs in API Gateway.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-basepathmappingv2.html#cfn-apigateway-basepathmappingv2-restapiid
+        '''
+        result = self._values.get("rest_api_id")
+        assert result is not None, "Required property 'rest_api_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def base_path(self) -> typing.Optional[builtins.str]:
+        '''The base path name that callers of the private API must provide as part of the URL after the domain name.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-basepathmappingv2.html#cfn-apigateway-basepathmappingv2-basepath
+        '''
+        result = self._values.get("base_path")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def stage(self) -> typing.Optional[builtins.str]:
+        '''Represents a unique identifier for a version of a deployed private RestApi that is callable by users.
+
+        The Stage must depend on the ``RestApi`` 's stage. To create a dependency, add a DependsOn attribute to the BasePathMappingV2 resource.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-basepathmappingv2.html#cfn-apigateway-basepathmappingv2-stage
+        '''
+        result = self._values.get("stage")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnBasePathMappingV2Props(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
 class CfnClientCertificate(
     _CfnResource_9df397a6,
@@ -7390,7 +7667,7 @@ class CfnDomainName(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_apigateway.CfnDomainName",
 ):
-    '''The ``AWS::ApiGateway::DomainName`` resource specifies a custom domain name for your API in API Gateway.
+    '''The ``AWS::ApiGateway::DomainName`` resource specifies a public custom domain name for your API in API Gateway.
 
     You can use a custom domain name to provide a URL that's more intuitive and easier to recall. For more information about using custom domain names, see `Set up Custom Domain Name for an API in API Gateway <https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-custom-domains.html>`_ in the *API Gateway Developer Guide* .
 
@@ -7441,7 +7718,7 @@ class CfnDomainName(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param certificate_arn: The reference to an AWS -managed certificate that will be used by edge-optimized endpoint for this domain name. AWS Certificate Manager is the only supported source.
+        :param certificate_arn: The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name. AWS Certificate Manager is the only supported source.
         :param domain_name: The custom domain name as an API host name, for example, ``my-api.example.com`` .
         :param endpoint_configuration: The endpoint configuration of this DomainName showing the endpoint types of the domain name.
         :param mutual_tls_authentication: The mutual TLS authentication configuration for a custom domain name. If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API.
@@ -7555,7 +7832,7 @@ class CfnDomainName(
     @builtins.property
     @jsii.member(jsii_name="certificateArn")
     def certificate_arn(self) -> typing.Optional[builtins.str]:
-        '''The reference to an AWS -managed certificate that will be used by edge-optimized endpoint for this domain name.'''
+        '''The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "certificateArn"))
 
     @certificate_arn.setter
@@ -7808,45 +8085,816 @@ class CfnDomainName(
             )
 
 
-@jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_apigateway.CfnDomainNameProps",
-    jsii_struct_bases=[],
-    name_mapping={
-        "certificate_arn": "certificateArn",
-        "domain_name": "domainName",
-        "endpoint_configuration": "endpointConfiguration",
-        "mutual_tls_authentication": "mutualTlsAuthentication",
-        "ownership_verification_certificate_arn": "ownershipVerificationCertificateArn",
-        "regional_certificate_arn": "regionalCertificateArn",
-        "security_policy": "securityPolicy",
-        "tags": "tags",
-    },
-)
-class CfnDomainNameProps:
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnDomainNameAccessAssociation(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_apigateway.CfnDomainNameAccessAssociation",
+):
+    '''The ``AWS::ApiGateway::DomainNameAccessAssociation`` resource creates a domain name access association between an access association source and a private custom domain name.
+
+    Use a domain name access association to invoke a private custom domain name while isolated from the public internet.
+
+    You can only create or delete a DomainNameAccessAssociation using CloudFormation. To reject a domain name access association, use the AWS CLI.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnameaccessassociation.html
+    :cloudformationResource: AWS::ApiGateway::DomainNameAccessAssociation
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_apigateway as apigateway
+        
+        cfn_domain_name_access_association = apigateway.CfnDomainNameAccessAssociation(self, "MyCfnDomainNameAccessAssociation",
+            access_association_source="accessAssociationSource",
+            access_association_source_type="accessAssociationSourceType",
+            domain_name_arn="domainNameArn",
+        
+            # the properties below are optional
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
     def __init__(
         self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
         *,
-        certificate_arn: typing.Optional[builtins.str] = None,
-        domain_name: typing.Optional[builtins.str] = None,
-        endpoint_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomainName.EndpointConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
-        mutual_tls_authentication: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomainName.MutualTlsAuthenticationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
-        ownership_verification_certificate_arn: typing.Optional[builtins.str] = None,
-        regional_certificate_arn: typing.Optional[builtins.str] = None,
+        access_association_source: builtins.str,
+        access_association_source_type: builtins.str,
+        domain_name_arn: builtins.str,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param access_association_source: The identifier of the domain name access association source. For a ``VPCE`` , the value is the VPC endpoint ID.
+        :param access_association_source_type: The type of the domain name access association source. Only ``VPCE`` is currently supported.
+        :param domain_name_arn: The ARN of the domain name.
+        :param tags: The collection of tags. Each tag element is associated with a given resource.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__cafcd3b452004fc09063699f5b2263d0f36c2a080b20c7f0d51493646ac87441)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnDomainNameAccessAssociationProps(
+            access_association_source=access_association_source,
+            access_association_source_type=access_association_source_type,
+            domain_name_arn=domain_name_arn,
+            tags=tags,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d4584e14c8cc1eda344bf13cbc96b7ff7cf893e84c7aa3abf7ce385dfd0ebb0b)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__635e79e806ac4eaac4502971d453a0581ed2a8620fc4309d2fa5820e1eea4413)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrDomainNameAccessAssociationArn")
+    def attr_domain_name_access_association_arn(self) -> builtins.str:
+        '''The access association ARN.
+
+        For example: ``arn:aws:apigateway:us-west-2:111122223333:/accessassociations/domainname/private.example.com+abcd1234/vpcesource/vpce-abcd1234efg`` .
+
+        :cloudformationAttribute: DomainNameAccessAssociationArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrDomainNameAccessAssociationArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="accessAssociationSource")
+    def access_association_source(self) -> builtins.str:
+        '''The identifier of the domain name access association source.'''
+        return typing.cast(builtins.str, jsii.get(self, "accessAssociationSource"))
+
+    @access_association_source.setter
+    def access_association_source(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__23c76b51f9a9a8e6cecdd5cb498ecd02cfa61809c66806005dd3fc4f5f33f35c)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "accessAssociationSource", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="accessAssociationSourceType")
+    def access_association_source_type(self) -> builtins.str:
+        '''The type of the domain name access association source.'''
+        return typing.cast(builtins.str, jsii.get(self, "accessAssociationSourceType"))
+
+    @access_association_source_type.setter
+    def access_association_source_type(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__22ceba82da2b5b77979cdbe562907d1ee3c704bfcb564f766864aaff695f3400)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "accessAssociationSourceType", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="domainNameArn")
+    def domain_name_arn(self) -> builtins.str:
+        '''The ARN of the domain name.'''
+        return typing.cast(builtins.str, jsii.get(self, "domainNameArn"))
+
+    @domain_name_arn.setter
+    def domain_name_arn(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5a9c3f25d11f724e7f4c78554b51bc3fc13c83e113087fbbf7d37e9868c51bdb)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "domainNameArn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The collection of tags.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2c58e960117de6ef208f31f47e57fea4a9b3894dc90dde201f0f6f182cab17d8)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_apigateway.CfnDomainNameAccessAssociationProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "access_association_source": "accessAssociationSource",
+        "access_association_source_type": "accessAssociationSourceType",
+        "domain_name_arn": "domainNameArn",
+        "tags": "tags",
+    },
+)
+class CfnDomainNameAccessAssociationProps:
+    def __init__(
+        self,
+        *,
+        access_association_source: builtins.str,
+        access_association_source_type: builtins.str,
+        domain_name_arn: builtins.str,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnDomainNameAccessAssociation``.
+
+        :param access_association_source: The identifier of the domain name access association source. For a ``VPCE`` , the value is the VPC endpoint ID.
+        :param access_association_source_type: The type of the domain name access association source. Only ``VPCE`` is currently supported.
+        :param domain_name_arn: The ARN of the domain name.
+        :param tags: The collection of tags. Each tag element is associated with a given resource.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnameaccessassociation.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_apigateway as apigateway
+            
+            cfn_domain_name_access_association_props = apigateway.CfnDomainNameAccessAssociationProps(
+                access_association_source="accessAssociationSource",
+                access_association_source_type="accessAssociationSourceType",
+                domain_name_arn="domainNameArn",
+            
+                # the properties below are optional
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__519fe3488e579f2ddfc56721bd12d5c2520b9b787080002ce6f4f88bbc90d50a)
+            check_type(argname="argument access_association_source", value=access_association_source, expected_type=type_hints["access_association_source"])
+            check_type(argname="argument access_association_source_type", value=access_association_source_type, expected_type=type_hints["access_association_source_type"])
+            check_type(argname="argument domain_name_arn", value=domain_name_arn, expected_type=type_hints["domain_name_arn"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "access_association_source": access_association_source,
+            "access_association_source_type": access_association_source_type,
+            "domain_name_arn": domain_name_arn,
+        }
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def access_association_source(self) -> builtins.str:
+        '''The identifier of the domain name access association source.
+
+        For a ``VPCE`` , the value is the VPC endpoint ID.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnameaccessassociation.html#cfn-apigateway-domainnameaccessassociation-accessassociationsource
+        '''
+        result = self._values.get("access_association_source")
+        assert result is not None, "Required property 'access_association_source' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def access_association_source_type(self) -> builtins.str:
+        '''The type of the domain name access association source.
+
+        Only ``VPCE`` is currently supported.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnameaccessassociation.html#cfn-apigateway-domainnameaccessassociation-accessassociationsourcetype
+        '''
+        result = self._values.get("access_association_source_type")
+        assert result is not None, "Required property 'access_association_source_type' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def domain_name_arn(self) -> builtins.str:
+        '''The ARN of the domain name.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnameaccessassociation.html#cfn-apigateway-domainnameaccessassociation-domainnamearn
+        '''
+        result = self._values.get("domain_name_arn")
+        assert result is not None, "Required property 'domain_name_arn' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The collection of tags.
+
+        Each tag element is associated with a given resource.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnameaccessassociation.html#cfn-apigateway-domainnameaccessassociation-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnDomainNameAccessAssociationProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_apigateway.CfnDomainNameProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "certificate_arn": "certificateArn",
+        "domain_name": "domainName",
+        "endpoint_configuration": "endpointConfiguration",
+        "mutual_tls_authentication": "mutualTlsAuthentication",
+        "ownership_verification_certificate_arn": "ownershipVerificationCertificateArn",
+        "regional_certificate_arn": "regionalCertificateArn",
+        "security_policy": "securityPolicy",
+        "tags": "tags",
+    },
+)
+class CfnDomainNameProps:
+    def __init__(
+        self,
+        *,
+        certificate_arn: typing.Optional[builtins.str] = None,
+        domain_name: typing.Optional[builtins.str] = None,
+        endpoint_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomainName.EndpointConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        mutual_tls_authentication: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomainName.MutualTlsAuthenticationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        ownership_verification_certificate_arn: typing.Optional[builtins.str] = None,
+        regional_certificate_arn: typing.Optional[builtins.str] = None,
+        security_policy: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnDomainName``.
+
+        :param certificate_arn: The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name. AWS Certificate Manager is the only supported source.
+        :param domain_name: The custom domain name as an API host name, for example, ``my-api.example.com`` .
+        :param endpoint_configuration: The endpoint configuration of this DomainName showing the endpoint types of the domain name.
+        :param mutual_tls_authentication: The mutual TLS authentication configuration for a custom domain name. If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API.
+        :param ownership_verification_certificate_arn: The ARN of the public certificate issued by ACM to validate ownership of your custom domain. Only required when configuring mutual TLS and using an ACM imported or private CA certificate ARN as the RegionalCertificateArn.
+        :param regional_certificate_arn: The reference to an AWS -managed certificate that will be used for validating the regional domain name. AWS Certificate Manager is the only supported source.
+        :param security_policy: The Transport Layer Security (TLS) version + cipher suite for this DomainName. The valid values are ``TLS_1_0`` and ``TLS_1_2`` .
+        :param tags: The collection of tags. Each tag element is associated with a given resource.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_apigateway as apigateway
+            
+            cfn_domain_name_props = apigateway.CfnDomainNameProps(
+                certificate_arn="certificateArn",
+                domain_name="domainName",
+                endpoint_configuration=apigateway.CfnDomainName.EndpointConfigurationProperty(
+                    types=["types"]
+                ),
+                mutual_tls_authentication=apigateway.CfnDomainName.MutualTlsAuthenticationProperty(
+                    truststore_uri="truststoreUri",
+                    truststore_version="truststoreVersion"
+                ),
+                ownership_verification_certificate_arn="ownershipVerificationCertificateArn",
+                regional_certificate_arn="regionalCertificateArn",
+                security_policy="securityPolicy",
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__703d29eb1e26e9742eff449d68ee5c6089daeb58e8544900d248c3a3743347d3)
+            check_type(argname="argument certificate_arn", value=certificate_arn, expected_type=type_hints["certificate_arn"])
+            check_type(argname="argument domain_name", value=domain_name, expected_type=type_hints["domain_name"])
+            check_type(argname="argument endpoint_configuration", value=endpoint_configuration, expected_type=type_hints["endpoint_configuration"])
+            check_type(argname="argument mutual_tls_authentication", value=mutual_tls_authentication, expected_type=type_hints["mutual_tls_authentication"])
+            check_type(argname="argument ownership_verification_certificate_arn", value=ownership_verification_certificate_arn, expected_type=type_hints["ownership_verification_certificate_arn"])
+            check_type(argname="argument regional_certificate_arn", value=regional_certificate_arn, expected_type=type_hints["regional_certificate_arn"])
+            check_type(argname="argument security_policy", value=security_policy, expected_type=type_hints["security_policy"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if certificate_arn is not None:
+            self._values["certificate_arn"] = certificate_arn
+        if domain_name is not None:
+            self._values["domain_name"] = domain_name
+        if endpoint_configuration is not None:
+            self._values["endpoint_configuration"] = endpoint_configuration
+        if mutual_tls_authentication is not None:
+            self._values["mutual_tls_authentication"] = mutual_tls_authentication
+        if ownership_verification_certificate_arn is not None:
+            self._values["ownership_verification_certificate_arn"] = ownership_verification_certificate_arn
+        if regional_certificate_arn is not None:
+            self._values["regional_certificate_arn"] = regional_certificate_arn
+        if security_policy is not None:
+            self._values["security_policy"] = security_policy
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def certificate_arn(self) -> typing.Optional[builtins.str]:
+        '''The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name.
+
+        AWS Certificate Manager is the only supported source.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-certificatearn
+        '''
+        result = self._values.get("certificate_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def domain_name(self) -> typing.Optional[builtins.str]:
+        '''The custom domain name as an API host name, for example, ``my-api.example.com`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-domainname
+        '''
+        result = self._values.get("domain_name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def endpoint_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainName.EndpointConfigurationProperty]]:
+        '''The endpoint configuration of this DomainName showing the endpoint types of the domain name.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-endpointconfiguration
+        '''
+        result = self._values.get("endpoint_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainName.EndpointConfigurationProperty]], result)
+
+    @builtins.property
+    def mutual_tls_authentication(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainName.MutualTlsAuthenticationProperty]]:
+        '''The mutual TLS authentication configuration for a custom domain name.
+
+        If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-mutualtlsauthentication
+        '''
+        result = self._values.get("mutual_tls_authentication")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainName.MutualTlsAuthenticationProperty]], result)
+
+    @builtins.property
+    def ownership_verification_certificate_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the public certificate issued by ACM to validate ownership of your custom domain.
+
+        Only required when configuring mutual TLS and using an ACM imported or private CA certificate ARN as the RegionalCertificateArn.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-ownershipverificationcertificatearn
+        '''
+        result = self._values.get("ownership_verification_certificate_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def regional_certificate_arn(self) -> typing.Optional[builtins.str]:
+        '''The reference to an AWS -managed certificate that will be used for validating the regional domain name.
+
+        AWS Certificate Manager is the only supported source.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-regionalcertificatearn
+        '''
+        result = self._values.get("regional_certificate_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def security_policy(self) -> typing.Optional[builtins.str]:
+        '''The Transport Layer Security (TLS) version + cipher suite for this DomainName.
+
+        The valid values are ``TLS_1_0`` and ``TLS_1_2`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-securitypolicy
+        '''
+        result = self._values.get("security_policy")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The collection of tags.
+
+        Each tag element is associated with a given resource.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnDomainNameProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnDomainNameV2(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_apigateway.CfnDomainNameV2",
+):
+    '''The ``AWS::ApiGateway::DomainNameV2`` resource specifies a custom domain name for your private APIs in API Gateway.
+
+    You can use a private custom domain name to provide a URL for your private API that's more intuitive and easier to recall.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html
+    :cloudformationResource: AWS::ApiGateway::DomainNameV2
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_apigateway as apigateway
+        
+        # management_policy: Any
+        # policy: Any
+        
+        cfn_domain_name_v2 = apigateway.CfnDomainNameV2(self, "MyCfnDomainNameV2",
+            certificate_arn="certificateArn",
+            domain_name="domainName",
+            endpoint_configuration=apigateway.CfnDomainNameV2.EndpointConfigurationProperty(
+                types=["types"]
+            ),
+            management_policy=management_policy,
+            policy=policy,
+            security_policy="securityPolicy",
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        certificate_arn: typing.Optional[builtins.str] = None,
+        domain_name: typing.Optional[builtins.str] = None,
+        endpoint_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDomainNameV2.EndpointConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        management_policy: typing.Any = None,
+        policy: typing.Any = None,
+        security_policy: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param certificate_arn: The reference to an AWS -managed certificate that will be used by the private endpoint for this domain name. AWS Certificate Manager is the only supported source.
+        :param domain_name: Represents a custom domain name as a user-friendly host name of an API (RestApi).
+        :param endpoint_configuration: The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.
+        :param management_policy: 
+        :param policy: A stringified JSON policy document that applies to the ``execute-api`` service for this DomainName regardless of the caller and Method configuration. You can use ``Fn::ToJsonString`` to enter your ``policy`` . For more information, see `Fn::ToJsonString <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html>`_ .
+        :param security_policy: The Transport Layer Security (TLS) version + cipher suite for this DomainName. Only ``TLS_1_2`` is supported.
+        :param tags: The collection of tags. Each tag element is associated with a given resource.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a4f501d10d57d39a48913872efdcb7d389a076fed9b5aabb21034b8e60a1e0bf)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnDomainNameV2Props(
+            certificate_arn=certificate_arn,
+            domain_name=domain_name,
+            endpoint_configuration=endpoint_configuration,
+            management_policy=management_policy,
+            policy=policy,
+            security_policy=security_policy,
+            tags=tags,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__cba990fa84005688ae2a90df64bc7ab39d02ac254f4c8a2fb935da000e626e3b)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__84c84802ec05ba723e240d805b21796f43a8f3cf08c5ef8677460e77d0a2182b)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrDomainNameArn")
+    def attr_domain_name_arn(self) -> builtins.str:
+        '''The ARN of the domain name.
+
+        :cloudformationAttribute: DomainNameArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrDomainNameArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrDomainNameId")
+    def attr_domain_name_id(self) -> builtins.str:
+        '''The domain name ID.
+
+        :cloudformationAttribute: DomainNameId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrDomainNameId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="certificateArn")
+    def certificate_arn(self) -> typing.Optional[builtins.str]:
+        '''The reference to an AWS -managed certificate that will be used by the private endpoint for this domain name.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "certificateArn"))
+
+    @certificate_arn.setter
+    def certificate_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__02e36a521e1f2c0c18cff2c52c016e6370b767eb2b459e2c294bb4288285a448)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "certificateArn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="domainName")
+    def domain_name(self) -> typing.Optional[builtins.str]:
+        '''Represents a custom domain name as a user-friendly host name of an API (RestApi).'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "domainName"))
+
+    @domain_name.setter
+    def domain_name(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c6f92a0eb5f08e654ae978fba555493986c05eed5e088475197fb75aa2780b84)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "domainName", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="endpointConfiguration")
+    def endpoint_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomainNameV2.EndpointConfigurationProperty"]]:
+        '''The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomainNameV2.EndpointConfigurationProperty"]], jsii.get(self, "endpointConfiguration"))
+
+    @endpoint_configuration.setter
+    def endpoint_configuration(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomainNameV2.EndpointConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a1f648b520c9d40bb72a9028880e48540125da8ba68522e25c483400d79142dc)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "endpointConfiguration", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="managementPolicy")
+    def management_policy(self) -> typing.Any:
+        return typing.cast(typing.Any, jsii.get(self, "managementPolicy"))
+
+    @management_policy.setter
+    def management_policy(self, value: typing.Any) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8b6d7f1f638d8720556c9e4d7598ad47d45db07dc328a664195267638644608c)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "managementPolicy", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="policy")
+    def policy(self) -> typing.Any:
+        '''A stringified JSON policy document that applies to the ``execute-api`` service for this DomainName regardless of the caller and Method configuration.'''
+        return typing.cast(typing.Any, jsii.get(self, "policy"))
+
+    @policy.setter
+    def policy(self, value: typing.Any) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a0c6989179a94e32b700994895064456ee57af9eb39330638ade9b7801085b38)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "policy", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="securityPolicy")
+    def security_policy(self) -> typing.Optional[builtins.str]:
+        '''The Transport Layer Security (TLS) version + cipher suite for this DomainName.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "securityPolicy"))
+
+    @security_policy.setter
+    def security_policy(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a85cede5bfb66595d91f3753ac1832695db8f9eb734e73ecbc1600f19d466199)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "securityPolicy", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The collection of tags.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__476074ac17a2d9034c89e6475b463dcb2b5ab63eb68064fdc492d43a910b9470)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_apigateway.CfnDomainNameV2.EndpointConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"types": "types"},
+    )
+    class EndpointConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.
+
+            :param types: A list of endpoint types of an API (RestApi) or its custom domain name (DomainName). For an edge-optimized API and its custom domain name, the endpoint type is ``"EDGE"`` . For a regional API and its custom domain name, the endpoint type is ``REGIONAL`` . For a private API, the endpoint type is ``PRIVATE`` .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-domainnamev2-endpointconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_apigateway as apigateway
+                
+                endpoint_configuration_property = apigateway.CfnDomainNameV2.EndpointConfigurationProperty(
+                    types=["types"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__6b6f3002516ae2cfe5144f016260236185910ca3b84cc4dc018cc660b10716c4)
+                check_type(argname="argument types", value=types, expected_type=type_hints["types"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if types is not None:
+                self._values["types"] = types
+
+        @builtins.property
+        def types(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''A list of endpoint types of an API (RestApi) or its custom domain name (DomainName).
+
+            For an edge-optimized API and its custom domain name, the endpoint type is ``"EDGE"`` . For a regional API and its custom domain name, the endpoint type is ``REGIONAL`` . For a private API, the endpoint type is ``PRIVATE`` .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-domainnamev2-endpointconfiguration.html#cfn-apigateway-domainnamev2-endpointconfiguration-types
+            '''
+            result = self._values.get("types")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "EndpointConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_apigateway.CfnDomainNameV2Props",
+    jsii_struct_bases=[],
+    name_mapping={
+        "certificate_arn": "certificateArn",
+        "domain_name": "domainName",
+        "endpoint_configuration": "endpointConfiguration",
+        "management_policy": "managementPolicy",
+        "policy": "policy",
+        "security_policy": "securityPolicy",
+        "tags": "tags",
+    },
+)
+class CfnDomainNameV2Props:
+    def __init__(
+        self,
+        *,
+        certificate_arn: typing.Optional[builtins.str] = None,
+        domain_name: typing.Optional[builtins.str] = None,
+        endpoint_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomainNameV2.EndpointConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        management_policy: typing.Any = None,
+        policy: typing.Any = None,
         security_policy: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''Properties for defining a ``CfnDomainName``.
-
-        :param certificate_arn: The reference to an AWS -managed certificate that will be used by edge-optimized endpoint for this domain name. AWS Certificate Manager is the only supported source.
-        :param domain_name: The custom domain name as an API host name, for example, ``my-api.example.com`` .
-        :param endpoint_configuration: The endpoint configuration of this DomainName showing the endpoint types of the domain name.
-        :param mutual_tls_authentication: The mutual TLS authentication configuration for a custom domain name. If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API.
-        :param ownership_verification_certificate_arn: The ARN of the public certificate issued by ACM to validate ownership of your custom domain. Only required when configuring mutual TLS and using an ACM imported or private CA certificate ARN as the RegionalCertificateArn.
-        :param regional_certificate_arn: The reference to an AWS -managed certificate that will be used for validating the regional domain name. AWS Certificate Manager is the only supported source.
-        :param security_policy: The Transport Layer Security (TLS) version + cipher suite for this DomainName. The valid values are ``TLS_1_0`` and ``TLS_1_2`` .
+        '''Properties for defining a ``CfnDomainNameV2``.
+
+        :param certificate_arn: The reference to an AWS -managed certificate that will be used by the private endpoint for this domain name. AWS Certificate Manager is the only supported source.
+        :param domain_name: Represents a custom domain name as a user-friendly host name of an API (RestApi).
+        :param endpoint_configuration: The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.
+        :param management_policy: 
+        :param policy: A stringified JSON policy document that applies to the ``execute-api`` service for this DomainName regardless of the caller and Method configuration. You can use ``Fn::ToJsonString`` to enter your ``policy`` . For more information, see `Fn::ToJsonString <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html>`_ .
+        :param security_policy: The Transport Layer Security (TLS) version + cipher suite for this DomainName. Only ``TLS_1_2`` is supported.
         :param tags: The collection of tags. Each tag element is associated with a given resource.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html
         :exampleMetadata: fixture=_generated
 
         Example::
@@ -7855,18 +8903,17 @@ class CfnDomainNameProps:
             # The values are placeholders you should change.
             from aws_cdk import aws_apigateway as apigateway
             
-            cfn_domain_name_props = apigateway.CfnDomainNameProps(
+            # management_policy: Any
+            # policy: Any
+            
+            cfn_domain_name_v2_props = apigateway.CfnDomainNameV2Props(
                 certificate_arn="certificateArn",
                 domain_name="domainName",
-                endpoint_configuration=apigateway.CfnDomainName.EndpointConfigurationProperty(
+                endpoint_configuration=apigateway.CfnDomainNameV2.EndpointConfigurationProperty(
                     types=["types"]
                 ),
-                mutual_tls_authentication=apigateway.CfnDomainName.MutualTlsAuthenticationProperty(
-                    truststore_uri="truststoreUri",
-                    truststore_version="truststoreVersion"
-                ),
-                ownership_verification_certificate_arn="ownershipVerificationCertificateArn",
-                regional_certificate_arn="regionalCertificateArn",
+                management_policy=management_policy,
+                policy=policy,
                 security_policy="securityPolicy",
                 tags=[CfnTag(
                     key="key",
@@ -7875,13 +8922,12 @@ class CfnDomainNameProps:
             )
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__703d29eb1e26e9742eff449d68ee5c6089daeb58e8544900d248c3a3743347d3)
+            type_hints = typing.get_type_hints(_typecheckingstub__dfb97b3f8aa373f21ebe15318ceaaf08a4d4b4b31e9ba1ed8fb04ef598132e15)
             check_type(argname="argument certificate_arn", value=certificate_arn, expected_type=type_hints["certificate_arn"])
             check_type(argname="argument domain_name", value=domain_name, expected_type=type_hints["domain_name"])
             check_type(argname="argument endpoint_configuration", value=endpoint_configuration, expected_type=type_hints["endpoint_configuration"])
-            check_type(argname="argument mutual_tls_authentication", value=mutual_tls_authentication, expected_type=type_hints["mutual_tls_authentication"])
-            check_type(argname="argument ownership_verification_certificate_arn", value=ownership_verification_certificate_arn, expected_type=type_hints["ownership_verification_certificate_arn"])
-            check_type(argname="argument regional_certificate_arn", value=regional_certificate_arn, expected_type=type_hints["regional_certificate_arn"])
+            check_type(argname="argument management_policy", value=management_policy, expected_type=type_hints["management_policy"])
+            check_type(argname="argument policy", value=policy, expected_type=type_hints["policy"])
             check_type(argname="argument security_policy", value=security_policy, expected_type=type_hints["security_policy"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -7891,12 +8937,10 @@ class CfnDomainNameProps:
             self._values["domain_name"] = domain_name
         if endpoint_configuration is not None:
             self._values["endpoint_configuration"] = endpoint_configuration
-        if mutual_tls_authentication is not None:
-            self._values["mutual_tls_authentication"] = mutual_tls_authentication
-        if ownership_verification_certificate_arn is not None:
-            self._values["ownership_verification_certificate_arn"] = ownership_verification_certificate_arn
-        if regional_certificate_arn is not None:
-            self._values["regional_certificate_arn"] = regional_certificate_arn
+        if management_policy is not None:
+            self._values["management_policy"] = management_policy
+        if policy is not None:
+            self._values["policy"] = policy
         if security_policy is not None:
             self._values["security_policy"] = security_policy
         if tags is not None:
@@ -7904,20 +8948,20 @@ class CfnDomainNameProps:
 
     @builtins.property
     def certificate_arn(self) -> typing.Optional[builtins.str]:
-        '''The reference to an AWS -managed certificate that will be used by edge-optimized endpoint for this domain name.
+        '''The reference to an AWS -managed certificate that will be used by the private endpoint for this domain name.
 
         AWS Certificate Manager is the only supported source.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-certificatearn
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html#cfn-apigateway-domainnamev2-certificatearn
         '''
         result = self._values.get("certificate_arn")
         return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
     def domain_name(self) -> typing.Optional[builtins.str]:
-        '''The custom domain name as an API host name, for example, ``my-api.example.com`` .
+        '''Represents a custom domain name as a user-friendly host name of an API (RestApi).
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-domainname
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html#cfn-apigateway-domainnamev2-domainname
         '''
         result = self._values.get("domain_name")
         return typing.cast(typing.Optional[builtins.str], result)
@@ -7925,56 +8969,40 @@ class CfnDomainNameProps:
     @builtins.property
     def endpoint_configuration(
         self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainName.EndpointConfigurationProperty]]:
-        '''The endpoint configuration of this DomainName showing the endpoint types of the domain name.
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainNameV2.EndpointConfigurationProperty]]:
+        '''The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-endpointconfiguration
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html#cfn-apigateway-domainnamev2-endpointconfiguration
         '''
         result = self._values.get("endpoint_configuration")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainName.EndpointConfigurationProperty]], result)
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainNameV2.EndpointConfigurationProperty]], result)
 
     @builtins.property
-    def mutual_tls_authentication(
-        self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainName.MutualTlsAuthenticationProperty]]:
-        '''The mutual TLS authentication configuration for a custom domain name.
-
-        If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-mutualtlsauthentication
+    def management_policy(self) -> typing.Any:
         '''
-        result = self._values.get("mutual_tls_authentication")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainName.MutualTlsAuthenticationProperty]], result)
-
-    @builtins.property
-    def ownership_verification_certificate_arn(self) -> typing.Optional[builtins.str]:
-        '''The ARN of the public certificate issued by ACM to validate ownership of your custom domain.
-
-        Only required when configuring mutual TLS and using an ACM imported or private CA certificate ARN as the RegionalCertificateArn.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-ownershipverificationcertificatearn
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html#cfn-apigateway-domainnamev2-managementpolicy
         '''
-        result = self._values.get("ownership_verification_certificate_arn")
-        return typing.cast(typing.Optional[builtins.str], result)
+        result = self._values.get("management_policy")
+        return typing.cast(typing.Any, result)
 
     @builtins.property
-    def regional_certificate_arn(self) -> typing.Optional[builtins.str]:
-        '''The reference to an AWS -managed certificate that will be used for validating the regional domain name.
+    def policy(self) -> typing.Any:
+        '''A stringified JSON policy document that applies to the ``execute-api`` service for this DomainName regardless of the caller and Method configuration.
 
-        AWS Certificate Manager is the only supported source.
+        You can use ``Fn::ToJsonString`` to enter your ``policy`` . For more information, see `Fn::ToJsonString <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html>`_ .
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-regionalcertificatearn
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html#cfn-apigateway-domainnamev2-policy
         '''
-        result = self._values.get("regional_certificate_arn")
-        return typing.cast(typing.Optional[builtins.str], result)
+        result = self._values.get("policy")
+        return typing.cast(typing.Any, result)
 
     @builtins.property
     def security_policy(self) -> typing.Optional[builtins.str]:
         '''The Transport Layer Security (TLS) version + cipher suite for this DomainName.
 
-        The valid values are ``TLS_1_0`` and ``TLS_1_2`` .
+        Only ``TLS_1_2`` is supported.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-securitypolicy
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html#cfn-apigateway-domainnamev2-securitypolicy
         '''
         result = self._values.get("security_policy")
         return typing.cast(typing.Optional[builtins.str], result)
@@ -7985,7 +9013,7 @@ class CfnDomainNameProps:
 
         Each tag element is associated with a given resource.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-tags
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html#cfn-apigateway-domainnamev2-tags
         '''
         result = self._values.get("tags")
         return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
@@ -7997,7 +9025,7 @@ class CfnDomainNameProps:
         return not (rhs == self)
 
     def __repr__(self) -> str:
-        return "CfnDomainNameProps(%s)" % ", ".join(
+        return "CfnDomainNameV2Props(%s)" % ", ".join(
             k + "=" + repr(v) for k, v in self._values.items()
         )
 
@@ -29492,23 +30520,22 @@ class LambdaRestApiProps(RestApiProps):
 
         Example::
 
-            # backend: lambda.Function
+            # source_queue: sqs.Queue
             
-            api = apigateway.LambdaRestApi(self, "myapi",
-                handler=backend,
-                proxy=False
-            )
             
-            items = api.root.add_resource("items")
-            items.add_method("GET") # GET /items
-            items.add_method("POST") # POST /items
+            fn = lambda_.Function(self, "MyFunc",
+                handler="index.handler",
+                runtime=lambda_.Runtime.NODEJS_LATEST,
+                code=lambda_.Code.from_inline("exports.handler = e => {}")
+            )
             
-            item = items.add_resource("{item}")
-            item.add_method("GET") # GET /items/{item}
+            rest_api = api.LambdaRestApi(self, "MyRestAPI", handler=fn)
+            api_target = targets.ApiGatewayTarget(rest_api)
             
-            # the default integration for methods is "handler", but one can
-            # customize this behavior per method or even a sub path.
-            item.add_method("DELETE", apigateway.HttpIntegration("http://amazon.com"))
+            pipe = pipes.Pipe(self, "Pipe",
+                source=SqsSource(source_queue),
+                target=api_target
+            )
         '''
         if isinstance(default_cors_preflight_options, dict):
             default_cors_preflight_options = CorsOptions(**default_cors_preflight_options)
@@ -31508,23 +32535,22 @@ class LambdaRestApi(
 
     Example::
 
-        # backend: lambda.Function
+        # source_queue: sqs.Queue
         
-        api = apigateway.LambdaRestApi(self, "myapi",
-            handler=backend,
-            proxy=False
-        )
         
-        items = api.root.add_resource("items")
-        items.add_method("GET") # GET /items
-        items.add_method("POST") # POST /items
+        fn = lambda_.Function(self, "MyFunc",
+            handler="index.handler",
+            runtime=lambda_.Runtime.NODEJS_LATEST,
+            code=lambda_.Code.from_inline("exports.handler = e => {}")
+        )
         
-        item = items.add_resource("{item}")
-        item.add_method("GET") # GET /items/{item}
+        rest_api = api.LambdaRestApi(self, "MyRestAPI", handler=fn)
+        api_target = targets.ApiGatewayTarget(rest_api)
         
-        # the default integration for methods is "handler", but one can
-        # customize this behavior per method or even a sub path.
-        item.add_method("DELETE", apigateway.HttpIntegration("http://amazon.com"))
+        pipe = pipes.Pipe(self, "Pipe",
+            source=SqsSource(source_queue),
+            target=api_target
+        )
     '''
 
     def __init__(
@@ -31769,6 +32795,8 @@ __all__ = [
     "CfnAuthorizerProps",
     "CfnBasePathMapping",
     "CfnBasePathMappingProps",
+    "CfnBasePathMappingV2",
+    "CfnBasePathMappingV2Props",
     "CfnClientCertificate",
     "CfnClientCertificateProps",
     "CfnDeployment",
@@ -31778,7 +32806,11 @@ __all__ = [
     "CfnDocumentationVersion",
     "CfnDocumentationVersionProps",
     "CfnDomainName",
+    "CfnDomainNameAccessAssociation",
+    "CfnDomainNameAccessAssociationProps",
     "CfnDomainNameProps",
+    "CfnDomainNameV2",
+    "CfnDomainNameV2Props",
     "CfnGatewayResponse",
     "CfnGatewayResponseProps",
     "CfnMethod",
@@ -32417,6 +33449,64 @@ def _typecheckingstub__7d1bf02dcb15bc3e234f159c18646cccfa570e5c0f1d814a1362edb58
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a583f31dead36a23816022dfcb476b0ff18ec097d668a0cf42b19791b749acae(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    domain_name_arn: builtins.str,
+    rest_api_id: builtins.str,
+    base_path: typing.Optional[builtins.str] = None,
+    stage: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6eb0641d050becd18a8a9f284493b10283d6aced001cf16285ba0926b9a2ea21(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ec5be7f34d7d1faa1a122900429e9be29d8ba4ea05ed4525cd221ea65131405b(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__23fd4874b172b953d177d1eced6c053907a3207a7d931ea7cebfd59673893321(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9e920388746332df91cb086b28eb2938d57106b8f772017211c3b2f52cd707b6(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__8b3750f1121b177684129c6fc603e6fc5f80e5a7cfbd3ef4c6b8695fcc42c1d6(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__06763dc8a118854a928d389386d0a3d513848ff9eaaef5bd4ca70a6d09d586e0(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5f193676fc187703a2da6f9b8342bed4af93ab14e1c8f01d93fb4249b4e41ba3(
+    *,
+    domain_name_arn: builtins.str,
+    rest_api_id: builtins.str,
+    base_path: typing.Optional[builtins.str] = None,
+    stage: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__b04e1c6e6561781583a05d34684fa7f16c7a0f9593b5bdadf17a39aa7adc53ac(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -32794,6 +33884,64 @@ def _typecheckingstub__20d6debf4c14a68aa82e5a1c08dd101632582c4d47645b17413b831ff
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__cafcd3b452004fc09063699f5b2263d0f36c2a080b20c7f0d51493646ac87441(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    access_association_source: builtins.str,
+    access_association_source_type: builtins.str,
+    domain_name_arn: builtins.str,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d4584e14c8cc1eda344bf13cbc96b7ff7cf893e84c7aa3abf7ce385dfd0ebb0b(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__635e79e806ac4eaac4502971d453a0581ed2a8620fc4309d2fa5820e1eea4413(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__23c76b51f9a9a8e6cecdd5cb498ecd02cfa61809c66806005dd3fc4f5f33f35c(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__22ceba82da2b5b77979cdbe562907d1ee3c704bfcb564f766864aaff695f3400(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5a9c3f25d11f724e7f4c78554b51bc3fc13c83e113087fbbf7d37e9868c51bdb(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__2c58e960117de6ef208f31f47e57fea4a9b3894dc90dde201f0f6f182cab17d8(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__519fe3488e579f2ddfc56721bd12d5c2520b9b787080002ce6f4f88bbc90d50a(
+    *,
+    access_association_source: builtins.str,
+    access_association_source_type: builtins.str,
+    domain_name_arn: builtins.str,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__703d29eb1e26e9742eff449d68ee5c6089daeb58e8544900d248c3a3743347d3(
     *,
     certificate_arn: typing.Optional[builtins.str] = None,
@@ -32808,6 +33956,95 @@ def _typecheckingstub__703d29eb1e26e9742eff449d68ee5c6089daeb58e8544900d248c3a37
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a4f501d10d57d39a48913872efdcb7d389a076fed9b5aabb21034b8e60a1e0bf(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    certificate_arn: typing.Optional[builtins.str] = None,
+    domain_name: typing.Optional[builtins.str] = None,
+    endpoint_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomainNameV2.EndpointConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    management_policy: typing.Any = None,
+    policy: typing.Any = None,
+    security_policy: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__cba990fa84005688ae2a90df64bc7ab39d02ac254f4c8a2fb935da000e626e3b(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__84c84802ec05ba723e240d805b21796f43a8f3cf08c5ef8677460e77d0a2182b(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__02e36a521e1f2c0c18cff2c52c016e6370b767eb2b459e2c294bb4288285a448(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c6f92a0eb5f08e654ae978fba555493986c05eed5e088475197fb75aa2780b84(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a1f648b520c9d40bb72a9028880e48540125da8ba68522e25c483400d79142dc(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainNameV2.EndpointConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__8b6d7f1f638d8720556c9e4d7598ad47d45db07dc328a664195267638644608c(
+    value: typing.Any,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a0c6989179a94e32b700994895064456ee57af9eb39330638ade9b7801085b38(
+    value: typing.Any,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a85cede5bfb66595d91f3753ac1832695db8f9eb734e73ecbc1600f19d466199(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__476074ac17a2d9034c89e6475b463dcb2b5ab63eb68064fdc492d43a910b9470(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6b6f3002516ae2cfe5144f016260236185910ca3b84cc4dc018cc660b10716c4(
+    *,
+    types: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__dfb97b3f8aa373f21ebe15318ceaaf08a4d4b4b31e9ba1ed8fb04ef598132e15(
+    *,
+    certificate_arn: typing.Optional[builtins.str] = None,
+    domain_name: typing.Optional[builtins.str] = None,
+    endpoint_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDomainNameV2.EndpointConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    management_policy: typing.Any = None,
+    policy: typing.Any = None,
+    security_policy: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__dfb51ee54cd182788cbab3215f86a2155730ef96e24304891e470a0af6430ec5(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,