aws-cdk-lib 2.172.0__py3-none-any.whl → 2.173.1__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -5693,16 +5693,16 @@ class CfnCapacityReservation(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param availability_zone: The Availability Zone in which to create the Capacity Reservation.
-        :param instance_count: The number of instances for which to reserve capacity. Valid range: 1 - 1000
+        :param instance_count: The number of instances for which to reserve capacity. .. epigraph:: You can request future-dated Capacity Reservations for an instance count with a minimum of 100 VPUs. For example, if you request a future-dated Capacity Reservation for ``m5.xlarge`` instances, you must request at least 25 instances ( *25 * m5.xlarge = 100 vCPUs* ). Valid range: 1 - 1000
         :param instance_platform: The type of operating system for which to reserve capacity.
-        :param instance_type: The instance type for which to reserve capacity. For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* .
+        :param instance_type: The instance type for which to reserve capacity. .. epigraph:: You can request future-dated Capacity Reservations for instance types in the C, M, R, I, and T instance families only. For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* .
         :param ebs_optimized: Indicates whether the Capacity Reservation supports EBS-optimized instances. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS- optimized instance.
-        :param end_date: The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity is released and you can no longer launch instances into it. The Capacity Reservation's state changes to ``expired`` when it reaches its end date and time. You must provide an ``EndDate`` value if ``EndDateType`` is ``limited`` . Omit ``EndDate`` if ``EndDateType`` is ``unlimited`` . If the ``EndDateType`` is ``limited`` , the Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify 5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019.
+        :param end_date: The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity is released and you can no longer launch instances into it. The Capacity Reservation's state changes to ``expired`` when it reaches its end date and time. You must provide an ``EndDate`` value if ``EndDateType`` is ``limited`` . Omit ``EndDate`` if ``EndDateType`` is ``unlimited`` . If the ``EndDateType`` is ``limited`` , the Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify 5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019. If you are requesting a future-dated Capacity Reservation, you can't specify an end date and time that is within the commitment duration.
         :param end_date_type: Indicates the way in which the Capacity Reservation ends. A Capacity Reservation can have one of the following end types: - ``unlimited`` - The Capacity Reservation remains active until you explicitly cancel it. Do not provide an ``EndDate`` if the ``EndDateType`` is ``unlimited`` . - ``limited`` - The Capacity Reservation expires automatically at a specified date and time. You must provide an ``EndDate`` value if the ``EndDateType`` value is ``limited`` .
         :param ephemeral_storage: *Deprecated.*.
-        :param instance_match_criteria: Indicates the type of instance launches that the Capacity Reservation accepts. The options include:. - ``open`` - The Capacity Reservation automatically matches all instances that have matching attributes (instance type, platform, and Availability Zone). Instances that have matching attributes run in the Capacity Reservation automatically without specifying any additional parameters. - ``targeted`` - The Capacity Reservation only accepts instances that have matching attributes (instance type, platform, and Availability Zone), and explicitly target the Capacity Reservation. This ensures that only permitted instances can use the reserved capacity. Default: ``open``
-        :param out_post_arn: The Amazon Resource Name (ARN) of the Outpost on which to create the Capacity Reservation.
-        :param placement_group_arn: The Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation. For more information, see `Capacity Reservations for cluster placement groups <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-cpg.html>`_ in the *Amazon EC2 User Guide* .
+        :param instance_match_criteria: Indicates the type of instance launches that the Capacity Reservation accepts. The options include:. - ``open`` - The Capacity Reservation automatically matches all instances that have matching attributes (instance type, platform, and Availability Zone). Instances that have matching attributes run in the Capacity Reservation automatically without specifying any additional parameters. - ``targeted`` - The Capacity Reservation only accepts instances that have matching attributes (instance type, platform, and Availability Zone), and explicitly target the Capacity Reservation. This ensures that only permitted instances can use the reserved capacity. .. epigraph:: If you are requesting a future-dated Capacity Reservation, you must specify ``targeted`` . Default: ``open``
+        :param out_post_arn: .. epigraph:: Not supported for future-dated Capacity Reservations. The Amazon Resource Name (ARN) of the Outpost on which to create the Capacity Reservation.
+        :param placement_group_arn: .. epigraph:: Not supported for future-dated Capacity Reservations. The Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation. For more information, see `Capacity Reservations for cluster placement groups <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-cpg.html>`_ in the *Amazon EC2 User Guide* .
         :param tag_specifications: The tags to apply to the Capacity Reservation during launch.
         :param tenancy: Indicates the tenancy of the Capacity Reservation. A Capacity Reservation can have one of the following tenancy settings:. - ``default`` - The Capacity Reservation is created on hardware that is shared with other AWS accounts . - ``dedicated`` - The Capacity Reservation is created on single-tenant hardware that is dedicated to a single AWS account .
         :param unused_reservation_billing_owner_id: The ID of the AWS account to which to assign billing of the unused capacity of the Capacity Reservation. A request will be sent to the specified account. That account must accept the request for the billing to be assigned to their account. For more information, see `Billing assignment for shared Amazon EC2 Capacity Reservations <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/assign-billing.html>`_ . You can assign billing only for shared Capacity Reservations. To share a Capacity Reservation, you must add it to a resource share. For more information, see `AWS::RAM::ResourceShare <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ram-resourceshare.html>`_ .
@@ -5962,7 +5962,9 @@ class CfnCapacityReservation(
     @builtins.property
     @jsii.member(jsii_name="outPostArn")
     def out_post_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the Outpost on which to create the Capacity Reservation.'''
+        '''.. epigraph::
+
+   Not supported for future-dated Capacity Reservations.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "outPostArn"))
 
     @out_post_arn.setter
@@ -5975,7 +5977,9 @@ class CfnCapacityReservation(
     @builtins.property
     @jsii.member(jsii_name="placementGroupArn")
     def placement_group_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation.'''
+        '''.. epigraph::
+
+   Not supported for future-dated Capacity Reservations.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "placementGroupArn"))
 
     @placement_group_arn.setter
@@ -6912,16 +6916,16 @@ class CfnCapacityReservationProps:
         '''Properties for defining a ``CfnCapacityReservation``.
 
         :param availability_zone: The Availability Zone in which to create the Capacity Reservation.
-        :param instance_count: The number of instances for which to reserve capacity. Valid range: 1 - 1000
+        :param instance_count: The number of instances for which to reserve capacity. .. epigraph:: You can request future-dated Capacity Reservations for an instance count with a minimum of 100 VPUs. For example, if you request a future-dated Capacity Reservation for ``m5.xlarge`` instances, you must request at least 25 instances ( *25 * m5.xlarge = 100 vCPUs* ). Valid range: 1 - 1000
         :param instance_platform: The type of operating system for which to reserve capacity.
-        :param instance_type: The instance type for which to reserve capacity. For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* .
+        :param instance_type: The instance type for which to reserve capacity. .. epigraph:: You can request future-dated Capacity Reservations for instance types in the C, M, R, I, and T instance families only. For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* .
         :param ebs_optimized: Indicates whether the Capacity Reservation supports EBS-optimized instances. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS- optimized instance.
-        :param end_date: The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity is released and you can no longer launch instances into it. The Capacity Reservation's state changes to ``expired`` when it reaches its end date and time. You must provide an ``EndDate`` value if ``EndDateType`` is ``limited`` . Omit ``EndDate`` if ``EndDateType`` is ``unlimited`` . If the ``EndDateType`` is ``limited`` , the Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify 5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019.
+        :param end_date: The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity is released and you can no longer launch instances into it. The Capacity Reservation's state changes to ``expired`` when it reaches its end date and time. You must provide an ``EndDate`` value if ``EndDateType`` is ``limited`` . Omit ``EndDate`` if ``EndDateType`` is ``unlimited`` . If the ``EndDateType`` is ``limited`` , the Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify 5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019. If you are requesting a future-dated Capacity Reservation, you can't specify an end date and time that is within the commitment duration.
         :param end_date_type: Indicates the way in which the Capacity Reservation ends. A Capacity Reservation can have one of the following end types: - ``unlimited`` - The Capacity Reservation remains active until you explicitly cancel it. Do not provide an ``EndDate`` if the ``EndDateType`` is ``unlimited`` . - ``limited`` - The Capacity Reservation expires automatically at a specified date and time. You must provide an ``EndDate`` value if the ``EndDateType`` value is ``limited`` .
         :param ephemeral_storage: *Deprecated.*.
-        :param instance_match_criteria: Indicates the type of instance launches that the Capacity Reservation accepts. The options include:. - ``open`` - The Capacity Reservation automatically matches all instances that have matching attributes (instance type, platform, and Availability Zone). Instances that have matching attributes run in the Capacity Reservation automatically without specifying any additional parameters. - ``targeted`` - The Capacity Reservation only accepts instances that have matching attributes (instance type, platform, and Availability Zone), and explicitly target the Capacity Reservation. This ensures that only permitted instances can use the reserved capacity. Default: ``open``
-        :param out_post_arn: The Amazon Resource Name (ARN) of the Outpost on which to create the Capacity Reservation.
-        :param placement_group_arn: The Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation. For more information, see `Capacity Reservations for cluster placement groups <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-cpg.html>`_ in the *Amazon EC2 User Guide* .
+        :param instance_match_criteria: Indicates the type of instance launches that the Capacity Reservation accepts. The options include:. - ``open`` - The Capacity Reservation automatically matches all instances that have matching attributes (instance type, platform, and Availability Zone). Instances that have matching attributes run in the Capacity Reservation automatically without specifying any additional parameters. - ``targeted`` - The Capacity Reservation only accepts instances that have matching attributes (instance type, platform, and Availability Zone), and explicitly target the Capacity Reservation. This ensures that only permitted instances can use the reserved capacity. .. epigraph:: If you are requesting a future-dated Capacity Reservation, you must specify ``targeted`` . Default: ``open``
+        :param out_post_arn: .. epigraph:: Not supported for future-dated Capacity Reservations. The Amazon Resource Name (ARN) of the Outpost on which to create the Capacity Reservation.
+        :param placement_group_arn: .. epigraph:: Not supported for future-dated Capacity Reservations. The Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation. For more information, see `Capacity Reservations for cluster placement groups <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-cpg.html>`_ in the *Amazon EC2 User Guide* .
         :param tag_specifications: The tags to apply to the Capacity Reservation during launch.
         :param tenancy: Indicates the tenancy of the Capacity Reservation. A Capacity Reservation can have one of the following tenancy settings:. - ``default`` - The Capacity Reservation is created on hardware that is shared with other AWS accounts . - ``dedicated`` - The Capacity Reservation is created on single-tenant hardware that is dedicated to a single AWS account .
         :param unused_reservation_billing_owner_id: The ID of the AWS account to which to assign billing of the unused capacity of the Capacity Reservation. A request will be sent to the specified account. That account must accept the request for the billing to be assigned to their account. For more information, see `Billing assignment for shared Amazon EC2 Capacity Reservations <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/assign-billing.html>`_ . You can assign billing only for shared Capacity Reservations. To share a Capacity Reservation, you must add it to a resource share. For more information, see `AWS::RAM::ResourceShare <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ram-resourceshare.html>`_ .
@@ -7017,6 +7021,10 @@ class CfnCapacityReservationProps:
     def instance_count(self) -> jsii.Number:
         '''The number of instances for which to reserve capacity.
 
+        .. epigraph::
+
+           You can request future-dated Capacity Reservations for an instance count with a minimum of 100 VPUs. For example, if you request a future-dated Capacity Reservation for ``m5.xlarge`` instances, you must request at least 25 instances ( *25 * m5.xlarge = 100 vCPUs* ).
+
         Valid range: 1 - 1000
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservation.html#cfn-ec2-capacityreservation-instancecount
@@ -7039,6 +7047,10 @@ class CfnCapacityReservationProps:
     def instance_type(self) -> builtins.str:
         '''The instance type for which to reserve capacity.
 
+        .. epigraph::
+
+           You can request future-dated Capacity Reservations for instance types in the C, M, R, I, and T instance families only.
+
         For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservation.html#cfn-ec2-capacityreservation-instancetype
@@ -7070,6 +7082,8 @@ class CfnCapacityReservationProps:
 
         If the ``EndDateType`` is ``limited`` , the Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify 5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019.
 
+        If you are requesting a future-dated Capacity Reservation, you can't specify an end date and time that is within the commitment duration.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservation.html#cfn-ec2-capacityreservation-enddate
         '''
         result = self._values.get("end_date")
@@ -7107,6 +7121,10 @@ class CfnCapacityReservationProps:
         - ``open`` - The Capacity Reservation automatically matches all instances that have matching attributes (instance type, platform, and Availability Zone). Instances that have matching attributes run in the Capacity Reservation automatically without specifying any additional parameters.
         - ``targeted`` - The Capacity Reservation only accepts instances that have matching attributes (instance type, platform, and Availability Zone), and explicitly target the Capacity Reservation. This ensures that only permitted instances can use the reserved capacity.
 
+        .. epigraph::
+
+           If you are requesting a future-dated Capacity Reservation, you must specify ``targeted`` .
+
         Default: ``open``
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservation.html#cfn-ec2-capacityreservation-instancematchcriteria
@@ -7116,7 +7134,11 @@ class CfnCapacityReservationProps:
 
     @builtins.property
     def out_post_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the Outpost on which to create the Capacity Reservation.
+        '''.. epigraph::
+
+   Not supported for future-dated Capacity Reservations.
+
+        The Amazon Resource Name (ARN) of the Outpost on which to create the Capacity Reservation.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservation.html#cfn-ec2-capacityreservation-outpostarn
         '''
@@ -7125,9 +7147,11 @@ class CfnCapacityReservationProps:
 
     @builtins.property
     def placement_group_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation.
+        '''.. epigraph::
 
-        For more information, see `Capacity Reservations for cluster placement groups <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-cpg.html>`_ in the *Amazon EC2 User Guide* .
+   Not supported for future-dated Capacity Reservations.
+
+        The Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation. For more information, see `Capacity Reservations for cluster placement groups <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-cpg.html>`_ in the *Amazon EC2 User Guide* .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservation.html#cfn-ec2-capacityreservation-placementgrouparn
         '''
@@ -11884,7 +11908,7 @@ class CfnEC2Fleet(
             :param bare_metal: Indicates whether bare metal instance types must be included, excluded, or required. - To include bare metal instance types, specify ``included`` . - To require only bare metal instance types, specify ``required`` . - To exclude bare metal instance types, specify ``excluded`` . Default: ``excluded``
             :param baseline_ebs_bandwidth_mbps: The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see `Amazon EBS–optimized instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html>`_ in the *Amazon EC2 User Guide* . Default: No minimum or maximum limits
             :param burstable_performance: Indicates whether burstable performance T instance types are included, excluded, or required. For more information, see `Burstable performance instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html>`_ . - To include burstable performance instance types, specify ``included`` . - To require only burstable performance instance types, specify ``required`` . - To exclude burstable performance instance types, specify ``excluded`` . Default: ``excluded``
-            :param cpu_manufacturers: The CPU manufacturers to include. - For instance types with Intel CPUs, specify ``intel`` . - For instance types with AMD CPUs, specify ``amd`` . - For instance types with AWS CPUs, specify ``amazon-web-services`` . .. epigraph:: Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template. Default: Any manufacturer
+            :param cpu_manufacturers: The CPU manufacturers to include. - For instance types with Intel CPUs, specify ``intel`` . - For instance types with AMD CPUs, specify ``amd`` . - For instance types with AWS CPUs, specify ``amazon-web-services`` . - For instance types with Apple CPUs, specify ``apple`` . .. epigraph:: Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template. Default: Any manufacturer
             :param excluded_instance_types: The instance types to exclude. You can use strings with one or more wild cards, represented by an asterisk ( ``*`` ), to exclude an instance family, type, size, or generation. The following are examples: ``m5.8xlarge`` , ``c5*.*`` , ``m5a.*`` , ``r*`` , ``*3*`` . For example, if you specify ``c5*`` ,Amazon EC2 will exclude the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*`` , Amazon EC2 will exclude all the M5a instance types, but not the M5n instance types. .. epigraph:: If you specify ``ExcludedInstanceTypes`` , you can't specify ``AllowedInstanceTypes`` . Default: No excluded instance types
             :param instance_generations: Indicates whether current or previous generation instance types are included. The current generation instance types are recommended for use. Current generation instance types are typically the latest two to three generations in each instance family. For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* . For current generation instance types, specify ``current`` . For previous generation instance types, specify ``previous`` . Default: Current and previous generation instance types
             :param local_storage: Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, `Amazon EC2 instance store <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html>`_ in the *Amazon EC2 User Guide* . - To include instance types with instance store volumes, specify ``included`` . - To require only instance types with instance store volumes, specify ``required`` . - To exclude instance types with instance store volumes, specify ``excluded`` . Default: ``included``
@@ -12198,6 +12222,7 @@ class CfnEC2Fleet(
             - For instance types with Intel CPUs, specify ``intel`` .
             - For instance types with AMD CPUs, specify ``amd`` .
             - For instance types with AWS CPUs, specify ``amazon-web-services`` .
+            - For instance types with Apple CPUs, specify ``apple`` .
 
             .. epigraph::
 
@@ -24545,8 +24570,13 @@ class CfnLaunchTemplate(
             *,
             cpu: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLaunchTemplate.CpuProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
-            '''
-            :param cpu: 
+            '''The baseline performance to consider, using an instance family as a baseline reference.
+
+            The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application.
+
+            Currently, this parameter only supports CPU performance as a baseline performance factor. For example, specifying ``c6i`` would use the CPU performance of the ``c6i`` family as the baseline reference.
+
+            :param cpu: The CPU performance to consider, using an instance family as the baseline reference.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-baselineperformancefactors.html
             :exampleMetadata: fixture=_generated
@@ -24576,7 +24606,8 @@ class CfnLaunchTemplate(
         def cpu(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLaunchTemplate.CpuProperty"]]:
-            '''
+            '''The CPU performance to consider, using an instance family as the baseline reference.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-baselineperformancefactors.html#cfn-ec2-launchtemplate-baselineperformancefactors-cpu
             '''
             result = self._values.get("cpu")
@@ -24734,7 +24765,7 @@ class CfnLaunchTemplate(
 
             ``CapacityReservationSpecification`` is a property of `AWS::EC2::LaunchTemplate LaunchTemplateData <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html>`_ .
 
-            :param capacity_reservation_preference: Indicates the instance's Capacity Reservation preferences. Possible preferences include:. - ``open`` - The instance can run in any ``open`` Capacity Reservation that has matching attributes (instance type, platform, Availability Zone). - ``none`` - The instance avoids running in a Capacity Reservation even if one is available. The instance runs in On-Demand capacity.
+            :param capacity_reservation_preference: Indicates the instance's Capacity Reservation preferences. Possible preferences include:. - ``capacity-reservations-only`` - The instance will only run in a Capacity Reservation or Capacity Reservation group. If capacity isn't available, the instance will fail to launch. - ``open`` - The instance can run in any ``open`` Capacity Reservation that has matching attributes (instance type, platform, Availability Zone, tenancy). - ``none`` - The instance avoids running in a Capacity Reservation even if one is available. The instance runs in On-Demand capacity.
             :param capacity_reservation_target: Information about the target Capacity Reservation or Capacity Reservation group.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-capacityreservationspecification.html
@@ -24768,7 +24799,8 @@ class CfnLaunchTemplate(
         def capacity_reservation_preference(self) -> typing.Optional[builtins.str]:
             '''Indicates the instance's Capacity Reservation preferences. Possible preferences include:.
 
-            - ``open`` - The instance can run in any ``open`` Capacity Reservation that has matching attributes (instance type, platform, Availability Zone).
+            - ``capacity-reservations-only`` - The instance will only run in a Capacity Reservation or Capacity Reservation group. If capacity isn't available, the instance will fail to launch.
+            - ``open`` - The instance can run in any ``open`` Capacity Reservation that has matching attributes (instance type, platform, Availability Zone, tenancy).
             - ``none`` - The instance avoids running in a Capacity Reservation even if one is available. The instance runs in On-Demand capacity.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-capacityreservationspecification.html#cfn-ec2-launchtemplate-capacityreservationspecification-capacityreservationpreference
@@ -25960,9 +25992,9 @@ class CfnLaunchTemplate(
             :param allowed_instance_types: The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes. You can use strings with one or more wild cards, represented by an asterisk ( ``*`` ), to allow an instance type, size, or generation. The following are examples: ``m5.8xlarge`` , ``c5*.*`` , ``m5a.*`` , ``r*`` , ``*3*`` . For example, if you specify ``c5*`` ,Amazon EC2 will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*`` , Amazon EC2 will allow all the M5a instance types, but not the M5n instance types. .. epigraph:: If you specify ``AllowedInstanceTypes`` , you can't specify ``ExcludedInstanceTypes`` . Default: All instance types
             :param bare_metal: Indicates whether bare metal instance types must be included, excluded, or required. - To include bare metal instance types, specify ``included`` . - To require only bare metal instance types, specify ``required`` . - To exclude bare metal instance types, specify ``excluded`` . Default: ``excluded``
             :param baseline_ebs_bandwidth_mbps: The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see `Amazon EBS–optimized instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html>`_ in the *Amazon EC2 User Guide* . Default: No minimum or maximum limits
-            :param baseline_performance_factors: 
+            :param baseline_performance_factors: The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application. Currently, this parameter only supports CPU performance as a baseline performance factor. For more information, see `Performance protection <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection>`_ in the *Amazon EC2 User Guide* .
             :param burstable_performance: Indicates whether burstable performance T instance types are included, excluded, or required. For more information, see `Burstable performance instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html>`_ . - To include burstable performance instance types, specify ``included`` . - To require only burstable performance instance types, specify ``required`` . - To exclude burstable performance instance types, specify ``excluded`` . Default: ``excluded``
-            :param cpu_manufacturers: The CPU manufacturers to include. - For instance types with Intel CPUs, specify ``intel`` . - For instance types with AMD CPUs, specify ``amd`` . - For instance types with AWS CPUs, specify ``amazon-web-services`` . .. epigraph:: Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template. Default: Any manufacturer
+            :param cpu_manufacturers: The CPU manufacturers to include. - For instance types with Intel CPUs, specify ``intel`` . - For instance types with AMD CPUs, specify ``amd`` . - For instance types with AWS CPUs, specify ``amazon-web-services`` . - For instance types with Apple CPUs, specify ``apple`` . .. epigraph:: Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template. Default: Any manufacturer
             :param excluded_instance_types: The instance types to exclude. You can use strings with one or more wild cards, represented by an asterisk ( ``*`` ), to exclude an instance type, size, or generation. The following are examples: ``m5.8xlarge`` , ``c5*.*`` , ``m5a.*`` , ``r*`` , ``*3*`` . For example, if you specify ``c5*`` ,Amazon EC2 will exclude the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*`` , Amazon EC2 will exclude all the M5a instance types, but not the M5n instance types. .. epigraph:: If you specify ``ExcludedInstanceTypes`` , you can't specify ``AllowedInstanceTypes`` . Default: No excluded instance types
             :param instance_generations: Indicates whether current or previous generation instance types are included. The current generation instance types are recommended for use. Current generation instance types are typically the latest two to three generations in each instance family. For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* . For current generation instance types, specify ``current`` . For previous generation instance types, specify ``previous`` . Default: Current and previous generation instance types
             :param local_storage: Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, `Amazon EC2 instance store <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html>`_ in the *Amazon EC2 User Guide* . - To include instance types with instance store volumes, specify ``included`` . - To require only instance types with instance store volumes, specify ``required`` . - To exclude instance types with instance store volumes, specify ``excluded`` . Default: ``included``
@@ -26266,7 +26298,10 @@ class CfnLaunchTemplate(
         def baseline_performance_factors(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLaunchTemplate.BaselinePerformanceFactorsProperty"]]:
-            '''
+            '''The baseline performance to consider, using an instance family as a baseline reference.
+
+            The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application. Currently, this parameter only supports CPU performance as a baseline performance factor. For more information, see `Performance protection <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection>`_ in the *Amazon EC2 User Guide* .
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-instancerequirements.html#cfn-ec2-launchtemplate-instancerequirements-baselineperformancefactors
             '''
             result = self._values.get("baseline_performance_factors")
@@ -26296,6 +26331,7 @@ class CfnLaunchTemplate(
             - For instance types with Intel CPUs, specify ``intel`` .
             - For instance types with AMD CPUs, specify ``amd`` .
             - For instance types with AWS CPUs, specify ``amazon-web-services`` .
+            - For instance types with Apple CPUs, specify ``apple`` .
 
             .. epigraph::
 
@@ -45106,7 +45142,7 @@ class CfnSpotFleet(
             :param bare_metal: Indicates whether bare metal instance types must be included, excluded, or required. - To include bare metal instance types, specify ``included`` . - To require only bare metal instance types, specify ``required`` . - To exclude bare metal instance types, specify ``excluded`` . Default: ``excluded``
             :param baseline_ebs_bandwidth_mbps: The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see `Amazon EBS–optimized instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html>`_ in the *Amazon EC2 User Guide* . Default: No minimum or maximum limits
             :param burstable_performance: Indicates whether burstable performance T instance types are included, excluded, or required. For more information, see `Burstable performance instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html>`_ . - To include burstable performance instance types, specify ``included`` . - To require only burstable performance instance types, specify ``required`` . - To exclude burstable performance instance types, specify ``excluded`` . Default: ``excluded``
-            :param cpu_manufacturers: The CPU manufacturers to include. - For instance types with Intel CPUs, specify ``intel`` . - For instance types with AMD CPUs, specify ``amd`` . - For instance types with AWS CPUs, specify ``amazon-web-services`` . .. epigraph:: Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template. Default: Any manufacturer
+            :param cpu_manufacturers: The CPU manufacturers to include. - For instance types with Intel CPUs, specify ``intel`` . - For instance types with AMD CPUs, specify ``amd`` . - For instance types with AWS CPUs, specify ``amazon-web-services`` . - For instance types with Apple CPUs, specify ``apple`` . .. epigraph:: Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template. Default: Any manufacturer
             :param excluded_instance_types: The instance types to exclude. You can use strings with one or more wild cards, represented by an asterisk ( ``*`` ), to exclude an instance family, type, size, or generation. The following are examples: ``m5.8xlarge`` , ``c5*.*`` , ``m5a.*`` , ``r*`` , ``*3*`` . For example, if you specify ``c5*`` ,Amazon EC2 will exclude the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*`` , Amazon EC2 will exclude all the M5a instance types, but not the M5n instance types. .. epigraph:: If you specify ``ExcludedInstanceTypes`` , you can't specify ``AllowedInstanceTypes`` . Default: No excluded instance types
             :param instance_generations: Indicates whether current or previous generation instance types are included. The current generation instance types are recommended for use. Current generation instance types are typically the latest two to three generations in each instance family. For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* . For current generation instance types, specify ``current`` . For previous generation instance types, specify ``previous`` . Default: Current and previous generation instance types
             :param local_storage: Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, `Amazon EC2 instance store <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html>`_ in the *Amazon EC2 User Guide* . - To include instance types with instance store volumes, specify ``included`` . - To require only instance types with instance store volumes, specify ``required`` . - To exclude instance types with instance store volumes, specify ``excluded`` . Default: ``included``
@@ -45420,6 +45456,7 @@ class CfnSpotFleet(
             - For instance types with Intel CPUs, specify ``intel`` .
             - For instance types with AMD CPUs, specify ``amd`` .
             - For instance types with AWS CPUs, specify ``amazon-web-services`` .
+            - For instance types with Apple CPUs, specify ``apple`` .
 
             .. epigraph::
 
@@ -56512,7 +56549,9 @@ class CfnVPCBlockPublicAccessExclusion(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_ec2.CfnVPCBlockPublicAccessExclusion",
 ):
-    '''Resource Type definition for AWS::EC2::VPCBlockPublicAccessExclusion.
+    '''Create a VPC Block Public Access (BPA) exclusion.
+
+    A VPC BPA exclusion is a mode that can be applied to a single VPC or subnet that exempts it from the account’s BPA mode and will allow bidirectional or egress-only access. You can create BPA exclusions for VPCs and subnets even when BPA is not enabled on the account to ensure that there is no traffic disruption to the exclusions when VPC BPA is turned on. To learn more about VPC BPA, see `Block public access to VPCs and subnets <https://docs.aws.amazon.com/vpc/latest/userguide/security-vpc-bpa.html>`_ in the *Amazon VPC User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcblockpublicaccessexclusion.html
     :cloudformationResource: AWS::EC2::VPCBlockPublicAccessExclusion
@@ -56550,10 +56589,10 @@ class CfnVPCBlockPublicAccessExclusion(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param internet_gateway_exclusion_mode: The desired Block Public Access Exclusion Mode for a specific VPC/Subnet.
-        :param subnet_id: The ID of the subnet. Required only if you don't specify VpcId
+        :param internet_gateway_exclusion_mode: The desired VPC Block Public Access mode for a specific VPC or subnet exclusion. - ``allow-bidirectional`` : Allow all internet traffic to and from the excluded VPCs and subnets. - ``allow-egress`` : Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to ``block-bidirectional`` .
+        :param subnet_id: The ID of the subnet you want to exclude. Required only if you don't specify VpcId.
         :param tags: An array of key-value pairs to apply to this resource.
-        :param vpc_id: The ID of the vpc. Required only if you don't specify SubnetId.
+        :param vpc_id: The ID of the VPC you want to exclude. Required only if you don't specify SubnetId.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__25326e9b68ca765acd9653308fa5b739c5caacf8774e9af4f184caeb59c1f9bd)
@@ -56621,7 +56660,7 @@ class CfnVPCBlockPublicAccessExclusion(
     @builtins.property
     @jsii.member(jsii_name="internetGatewayExclusionMode")
     def internet_gateway_exclusion_mode(self) -> builtins.str:
-        '''The desired Block Public Access Exclusion Mode for a specific VPC/Subnet.'''
+        '''The desired VPC Block Public Access mode for a specific VPC or subnet exclusion.'''
         return typing.cast(builtins.str, jsii.get(self, "internetGatewayExclusionMode"))
 
     @internet_gateway_exclusion_mode.setter
@@ -56634,7 +56673,7 @@ class CfnVPCBlockPublicAccessExclusion(
     @builtins.property
     @jsii.member(jsii_name="subnetId")
     def subnet_id(self) -> typing.Optional[builtins.str]:
-        '''The ID of the subnet.'''
+        '''The ID of the subnet you want to exclude.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "subnetId"))
 
     @subnet_id.setter
@@ -56660,7 +56699,7 @@ class CfnVPCBlockPublicAccessExclusion(
     @builtins.property
     @jsii.member(jsii_name="vpcId")
     def vpc_id(self) -> typing.Optional[builtins.str]:
-        '''The ID of the vpc.'''
+        '''The ID of the VPC you want to exclude.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "vpcId"))
 
     @vpc_id.setter
@@ -56692,10 +56731,10 @@ class CfnVPCBlockPublicAccessExclusionProps:
     ) -> None:
         '''Properties for defining a ``CfnVPCBlockPublicAccessExclusion``.
 
-        :param internet_gateway_exclusion_mode: The desired Block Public Access Exclusion Mode for a specific VPC/Subnet.
-        :param subnet_id: The ID of the subnet. Required only if you don't specify VpcId
+        :param internet_gateway_exclusion_mode: The desired VPC Block Public Access mode for a specific VPC or subnet exclusion. - ``allow-bidirectional`` : Allow all internet traffic to and from the excluded VPCs and subnets. - ``allow-egress`` : Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to ``block-bidirectional`` .
+        :param subnet_id: The ID of the subnet you want to exclude. Required only if you don't specify VpcId.
         :param tags: An array of key-value pairs to apply to this resource.
-        :param vpc_id: The ID of the vpc. Required only if you don't specify SubnetId.
+        :param vpc_id: The ID of the VPC you want to exclude. Required only if you don't specify SubnetId.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcblockpublicaccessexclusion.html
         :exampleMetadata: fixture=_generated
@@ -56736,7 +56775,10 @@ class CfnVPCBlockPublicAccessExclusionProps:
 
     @builtins.property
     def internet_gateway_exclusion_mode(self) -> builtins.str:
-        '''The desired Block Public Access Exclusion Mode for a specific VPC/Subnet.
+        '''The desired VPC Block Public Access mode for a specific VPC or subnet exclusion.
+
+        - ``allow-bidirectional`` : Allow all internet traffic to and from the excluded VPCs and subnets.
+        - ``allow-egress`` : Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to ``block-bidirectional`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcblockpublicaccessexclusion.html#cfn-ec2-vpcblockpublicaccessexclusion-internetgatewayexclusionmode
         '''
@@ -56746,9 +56788,9 @@ class CfnVPCBlockPublicAccessExclusionProps:
 
     @builtins.property
     def subnet_id(self) -> typing.Optional[builtins.str]:
-        '''The ID of the subnet.
+        '''The ID of the subnet you want to exclude.
 
-        Required only if you don't specify VpcId
+        Required only if you don't specify VpcId.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcblockpublicaccessexclusion.html#cfn-ec2-vpcblockpublicaccessexclusion-subnetid
         '''
@@ -56766,7 +56808,7 @@ class CfnVPCBlockPublicAccessExclusionProps:
 
     @builtins.property
     def vpc_id(self) -> typing.Optional[builtins.str]:
-        '''The ID of the vpc.
+        '''The ID of the VPC you want to exclude.
 
         Required only if you don't specify SubnetId.
 
@@ -56793,7 +56835,9 @@ class CfnVPCBlockPublicAccessOptions(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_ec2.CfnVPCBlockPublicAccessOptions",
 ):
-    '''Resource Type definition for AWS::EC2::VPCBlockPublicAccessOptions.
+    '''VPC Block Public Access (BPA) enables you to block resources in VPCs and subnets that you own in a Region from reaching or being reached from the internet through internet gateways and egress-only internet gateways.
+
+    To learn more about VPC BPA, see `Block public access to VPCs and subnets <https://docs.aws.amazon.com/vpc/latest/userguide/security-vpc-bpa.html>`_ in the *Amazon VPC User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcblockpublicaccessoptions.html
     :cloudformationResource: AWS::EC2::VPCBlockPublicAccessOptions
@@ -56820,7 +56864,7 @@ class CfnVPCBlockPublicAccessOptions(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param internet_gateway_block_mode: The desired Block Public Access mode for Internet Gateways in your account. We do not allow to create in a off mode as this is the default value
+        :param internet_gateway_block_mode: The desired VPC Block Public Access mode for internet gateways in your account. We do not allow you to create this resource type in an "off" mode since off is the default value. - ``block-bidirectional`` : Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets). - ``block-ingress`` : Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__24d31c53909b617dc4fc1905f3c6a7fb631c56e6a160f59064795a8c003a6ea4)
@@ -56865,7 +56909,7 @@ class CfnVPCBlockPublicAccessOptions(
     @builtins.property
     @jsii.member(jsii_name="attrAccountId")
     def attr_account_id(self) -> builtins.str:
-        '''The identifier for the specified AWS account.
+        '''The ID of the AWS account.
 
         :cloudformationAttribute: AccountId
         '''
@@ -56879,7 +56923,7 @@ class CfnVPCBlockPublicAccessOptions(
     @builtins.property
     @jsii.member(jsii_name="internetGatewayBlockMode")
     def internet_gateway_block_mode(self) -> builtins.str:
-        '''The desired Block Public Access mode for Internet Gateways in your account.'''
+        '''The desired VPC Block Public Access mode for internet gateways in your account.'''
         return typing.cast(builtins.str, jsii.get(self, "internetGatewayBlockMode"))
 
     @internet_gateway_block_mode.setter
@@ -56899,7 +56943,7 @@ class CfnVPCBlockPublicAccessOptionsProps:
     def __init__(self, *, internet_gateway_block_mode: builtins.str) -> None:
         '''Properties for defining a ``CfnVPCBlockPublicAccessOptions``.
 
-        :param internet_gateway_block_mode: The desired Block Public Access mode for Internet Gateways in your account. We do not allow to create in a off mode as this is the default value
+        :param internet_gateway_block_mode: The desired VPC Block Public Access mode for internet gateways in your account. We do not allow you to create this resource type in an "off" mode since off is the default value. - ``block-bidirectional`` : Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets). - ``block-ingress`` : Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcblockpublicaccessoptions.html
         :exampleMetadata: fixture=_generated
@@ -56923,9 +56967,12 @@ class CfnVPCBlockPublicAccessOptionsProps:
 
     @builtins.property
     def internet_gateway_block_mode(self) -> builtins.str:
-        '''The desired Block Public Access mode for Internet Gateways in your account.
+        '''The desired VPC Block Public Access mode for internet gateways in your account.
+
+        We do not allow you to create this resource type in an "off" mode since off is the default value.
 
-        We do not allow to create in a off mode as this is the default value
+        - ``block-bidirectional`` : Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets).
+        - ``block-ingress`` : Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcblockpublicaccessoptions.html#cfn-ec2-vpcblockpublicaccessoptions-internetgatewayblockmode
         '''
@@ -77532,6 +77579,11 @@ class InterfaceVpcEndpointAwsService(
     def GLUE(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "GLUE"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="GLUE_DASHBOARD")
+    def GLUE_DASHBOARD(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "GLUE_DASHBOARD"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="GLUE_DATABREW")
     def GLUE_DATABREW(cls) -> "InterfaceVpcEndpointAwsService":
@@ -77622,6 +77674,11 @@ class InterfaceVpcEndpointAwsService(
     def INSPECTOR_SCAN(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "INSPECTOR_SCAN"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="INVOICING")
+    def INVOICING(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "INVOICING"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="IOT_CORE")
     def IOT_CORE(cls) -> "InterfaceVpcEndpointAwsService":
@@ -77879,6 +77936,11 @@ class InterfaceVpcEndpointAwsService(
     def MIGRATIONHUB_STRATEGY(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "MIGRATIONHUB_STRATEGY"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="MQ")
+    def MQ(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "MQ"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="NEPTUNE_ANALYTICS")
     def NEPTUNE_ANALYTICS(cls) -> "InterfaceVpcEndpointAwsService":
@@ -78228,11 +78290,21 @@ class InterfaceVpcEndpointAwsService(
     def S3_OUTPOSTS(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "S3_OUTPOSTS"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="S3_TABLES")
+    def S3_TABLES(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "S3_TABLES"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="SAGEMAKER_API")
     def SAGEMAKER_API(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "SAGEMAKER_API"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="SAGEMAKER_DATA_SCIENCE_ASSISTANT")
+    def SAGEMAKER_DATA_SCIENCE_ASSISTANT(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "SAGEMAKER_DATA_SCIENCE_ASSISTANT"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="SAGEMAKER_EXPERIMENTS")
     def SAGEMAKER_EXPERIMENTS(cls) -> "InterfaceVpcEndpointAwsService":
@@ -78258,6 +78330,11 @@ class InterfaceVpcEndpointAwsService(
     def SAGEMAKER_NOTEBOOK(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "SAGEMAKER_NOTEBOOK"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="SAGEMAKER_PARTNER_APP")
+    def SAGEMAKER_PARTNER_APP(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "SAGEMAKER_PARTNER_APP"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="SAGEMAKER_RUNTIME")
     def SAGEMAKER_RUNTIME(cls) -> "InterfaceVpcEndpointAwsService":
@@ -78273,6 +78350,11 @@ class InterfaceVpcEndpointAwsService(
     def SAGEMAKER_STUDIO(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "SAGEMAKER_STUDIO"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="SAVINGS_PLANS")
+    def SAVINGS_PLANS(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "SAVINGS_PLANS"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="SECRETS_MANAGER")
     def SECRETS_MANAGER(cls) -> "InterfaceVpcEndpointAwsService":