aws-cdk-lib 2.176.0__py3-none-any.whl → 2.178.0__py3-none-any.whl

aws_cdk/aws_cloudfront/__init__.py

@@ -1347,6 +1347,8 @@ class AccessLevel(enum.Enum):
 
     READ = "READ"
     '''Grants read permissions to CloudFront Distribution.'''
+    LIST = "LIST"
+    '''Grants list permissions to CloudFront Distribution.'''
     WRITE = "WRITE"
     '''Grants write permission to CloudFront Distribution.'''
     DELETE = "DELETE"
@@ -2699,6 +2701,8 @@ class CfnAnycastIpList(
 ):
     '''An Anycast static IP list.
 
+    For more information, see `Request Anycast static IPs to use for allowlisting <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/request-static-ips.html>`_ in the *Amazon CloudFront Developer Guide* .
+
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-anycastiplist.html
     :cloudformationResource: AWS::CloudFront::AnycastIpList
     :exampleMetadata: fixture=_generated
@@ -2880,6 +2884,8 @@ class CfnAnycastIpList(
         ) -> None:
             '''An Anycast static IP list.
 
+            For more information, see `Request Anycast static IPs to use for allowlisting <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/request-static-ips.html>`_ in the *Amazon CloudFront Developer Guide* .
+
             :param anycast_ips: The static IP addresses that are allocated to the Anycast static IP list.
             :param arn: The Amazon Resource Name (ARN) of the Anycast static IP list.
             :param id: The ID of the Anycast static IP list.
@@ -7003,6 +7009,13 @@ class CfnDistribution(
                         ),
                         s3_origin_config=cloudfront.CfnDistribution.S3OriginConfigProperty(
                             origin_access_identity="originAccessIdentity"
+                        ),
+                        vpc_origin_config=cloudfront.CfnDistribution.VpcOriginConfigProperty(
+                            vpc_origin_id="vpcOriginId",
+                
+                            # the properties below are optional
+                            origin_keepalive_timeout=123,
+                            origin_read_timeout=123
                         )
                     )],
                     price_class="priceClass",
@@ -8725,6 +8738,7 @@ class CfnDistribution(
             "origin_path": "originPath",
             "origin_shield": "originShield",
             "s3_origin_config": "s3OriginConfig",
+            "vpc_origin_config": "vpcOriginConfig",
         },
     )
     class OriginProperty:
@@ -8741,6 +8755,7 @@ class CfnDistribution(
             origin_path: typing.Optional[builtins.str] = None,
             origin_shield: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDistribution.OriginShieldProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             s3_origin_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDistribution.S3OriginConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            vpc_origin_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDistribution.VpcOriginConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
             '''An origin.
 
@@ -8766,6 +8781,7 @@ class CfnDistribution(
             :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. For more information, see `Origin Path <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginPath>`_ in the *Amazon CloudFront Developer Guide* . Default: - ""
             :param origin_shield: CloudFront Origin Shield. Using Origin Shield can help reduce the load on your origin. For more information, see `Using Origin Shield <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/origin-shield.html>`_ in the *Amazon CloudFront Developer Guide* .
             :param s3_origin_config: Use this type to specify an origin that is an Amazon S3 bucket that is not configured with static website hosting. To specify any other type of origin, including an Amazon S3 bucket that is configured with static website hosting, use the ``CustomOriginConfig`` type instead.
+            :param vpc_origin_config: 
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-origin.html
             :exampleMetadata: fixture=_generated
@@ -8805,6 +8821,13 @@ class CfnDistribution(
                     ),
                     s3_origin_config=cloudfront.CfnDistribution.S3OriginConfigProperty(
                         origin_access_identity="originAccessIdentity"
+                    ),
+                    vpc_origin_config=cloudfront.CfnDistribution.VpcOriginConfigProperty(
+                        vpc_origin_id="vpcOriginId",
+                
+                        # the properties below are optional
+                        origin_keepalive_timeout=123,
+                        origin_read_timeout=123
                     )
                 )
             '''
@@ -8820,6 +8843,7 @@ class CfnDistribution(
                 check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
                 check_type(argname="argument origin_shield", value=origin_shield, expected_type=type_hints["origin_shield"])
                 check_type(argname="argument s3_origin_config", value=s3_origin_config, expected_type=type_hints["s3_origin_config"])
+                check_type(argname="argument vpc_origin_config", value=vpc_origin_config, expected_type=type_hints["vpc_origin_config"])
             self._values: typing.Dict[builtins.str, typing.Any] = {
                 "domain_name": domain_name,
                 "id": id,
@@ -8840,6 +8864,8 @@ class CfnDistribution(
                 self._values["origin_shield"] = origin_shield
             if s3_origin_config is not None:
                 self._values["s3_origin_config"] = s3_origin_config
+            if vpc_origin_config is not None:
+                self._values["vpc_origin_config"] = vpc_origin_config
 
         @builtins.property
         def domain_name(self) -> builtins.str:
@@ -8969,6 +8995,16 @@ class CfnDistribution(
             result = self._values.get("s3_origin_config")
             return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDistribution.S3OriginConfigProperty"]], result)
 
+        @builtins.property
+        def vpc_origin_config(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDistribution.VpcOriginConfigProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-origin.html#cfn-cloudfront-distribution-origin-vpcoriginconfig
+            '''
+            result = self._values.get("vpc_origin_config")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDistribution.VpcOriginConfigProperty"]], result)
+
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -9214,7 +9250,7 @@ class CfnDistribution(
         def __init__(
             self,
             *,
-            items: typing.Union[_IResolvable_da3f097b, typing.Sequence[jsii.Number]],
+            items: typing.Union[typing.Sequence[jsii.Number], _IResolvable_da3f097b],
             quantity: jsii.Number,
         ) -> None:
             '''A complex data type for the status codes that you specify that, when returned by a primary origin, trigger CloudFront to failover to a second origin.
@@ -9248,14 +9284,14 @@ class CfnDistribution(
         @builtins.property
         def items(
             self,
-        ) -> typing.Union[_IResolvable_da3f097b, typing.List[jsii.Number]]:
+        ) -> typing.Union[typing.List[jsii.Number], _IResolvable_da3f097b]:
             '''The items (status codes) for an origin group.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-statuscodes.html#cfn-cloudfront-distribution-statuscodes-items
             '''
             result = self._values.get("items")
             assert result is not None, "Required property 'items' is missing"
-            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[jsii.Number]], result)
+            return typing.cast(typing.Union[typing.List[jsii.Number], _IResolvable_da3f097b], result)
 
         @builtins.property
         def quantity(self) -> jsii.Number:
@@ -9321,7 +9357,7 @@ class CfnDistribution(
             :param cloud_front_default_certificate: If the distribution uses the CloudFront domain name such as ``d111111abcdef8.cloudfront.net`` , set this field to ``true`` . If the distribution uses ``Aliases`` (alternate domain names or CNAMEs), omit this field and specify values for the following fields: - ``AcmCertificateArn`` or ``IamCertificateId`` (specify a value for one, not both) - ``MinimumProtocolVersion`` - ``SslSupportMethod``
             :param iam_certificate_id: .. epigraph:: In CloudFormation, this field name is ``IamCertificateId`` . Note the different capitalization. If the distribution uses ``Aliases`` (alternate domain names or CNAMEs) and the SSL/TLS certificate is stored in `AWS Identity and Access Management (IAM) <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html>`_ , provide the ID of the IAM certificate. If you specify an IAM certificate ID, you must also specify values for ``MinimumProtocolVersion`` and ``SSLSupportMethod`` . (In CloudFormation, the field name is ``SslSupportMethod`` . Note the different capitalization.)
             :param minimum_protocol_version: If the distribution uses ``Aliases`` (alternate domain names or CNAMEs), specify the security policy that you want CloudFront to use for HTTPS connections with viewers. The security policy determines two settings: - The minimum SSL/TLS protocol that CloudFront can use to communicate with viewers. - The ciphers that CloudFront can use to encrypt the content that it returns to viewers. For more information, see `Security Policy <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValues-security-policy>`_ and `Supported Protocols and Ciphers Between Viewers and CloudFront <https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html#secure-connections-supported-ciphers>`_ in the *Amazon CloudFront Developer Guide* . .. epigraph:: On the CloudFront console, this setting is called *Security Policy* . When you're using SNI only (you set ``SSLSupportMethod`` to ``sni-only`` ), you must specify ``TLSv1`` or higher. (In CloudFormation, the field name is ``SslSupportMethod`` . Note the different capitalization.) If the distribution uses the CloudFront domain name such as ``d111111abcdef8.cloudfront.net`` (you set ``CloudFrontDefaultCertificate`` to ``true`` ), CloudFront automatically sets the security policy to ``TLSv1`` regardless of the value that you set here.
-            :param ssl_support_method: .. epigraph:: In CloudFormation, this field name is ``SslSupportMethod`` . Note the different capitalization. If the distribution uses ``Aliases`` (alternate domain names or CNAMEs), specify which viewers the distribution accepts HTTPS connections from. - ``sni-only`` – The distribution accepts HTTPS connections from only viewers that support `server name indication (SNI) <https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Server_Name_Indication>`_ . This is recommended. Most browsers and clients support SNI. - ``vip`` – The distribution accepts HTTPS connections from all viewers including those that don't support SNI. This is not recommended, and results in additional monthly charges from CloudFront. - ``static-ip`` - Do not specify this value unless your distribution has been enabled for this feature by the CloudFront team. If you have a use case that requires static IP addresses for a distribution, contact CloudFront through the `AWS Support Center <https://docs.aws.amazon.com/support/home>`_ . If the distribution uses the CloudFront domain name such as ``d111111abcdef8.cloudfront.net`` , don't set a value for this field.
+            :param ssl_support_method: .. epigraph:: In CloudFormation, this field name is ``SslSupportMethod`` . Note the different capitalization. If the distribution uses ``Aliases`` (alternate domain names or CNAMEs), specify which viewers the distribution accepts HTTPS connections from. - ``sni-only`` – The distribution accepts HTTPS connections from only viewers that support `server name indication (SNI) <https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Server_Name_Indication>`_ . This is recommended. Most browsers and clients support SNI. - ``vip`` – The distribution accepts HTTPS connections from all viewers including those that don't support SNI. This is not recommended, and results in additional monthly charges from CloudFront. - ``static-ip`` - Do not specify this value unless your distribution has been enabled for this feature by the CloudFront team. If you have a use case that requires static IP addresses for a distribution, contact CloudFront through the `Support Center <https://docs.aws.amazon.com/support/home>`_ . If the distribution uses the CloudFront domain name such as ``d111111abcdef8.cloudfront.net`` , don't set a value for this field.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-viewercertificate.html
             :exampleMetadata: fixture=_generated
@@ -9439,7 +9475,7 @@ class CfnDistribution(
 
             - ``sni-only`` – The distribution accepts HTTPS connections from only viewers that support `server name indication (SNI) <https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Server_Name_Indication>`_ . This is recommended. Most browsers and clients support SNI.
             - ``vip`` – The distribution accepts HTTPS connections from all viewers including those that don't support SNI. This is not recommended, and results in additional monthly charges from CloudFront.
-            - ``static-ip`` - Do not specify this value unless your distribution has been enabled for this feature by the CloudFront team. If you have a use case that requires static IP addresses for a distribution, contact CloudFront through the `AWS Support Center <https://docs.aws.amazon.com/support/home>`_ .
+            - ``static-ip`` - Do not specify this value unless your distribution has been enabled for this feature by the CloudFront team. If you have a use case that requires static IP addresses for a distribution, contact CloudFront through the `Support Center <https://docs.aws.amazon.com/support/home>`_ .
 
             If the distribution uses the CloudFront domain name such as ``d111111abcdef8.cloudfront.net`` , don't set a value for this field.
 
@@ -9459,6 +9495,98 @@ class CfnDistribution(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudfront.CfnDistribution.VpcOriginConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "vpc_origin_id": "vpcOriginId",
+            "origin_keepalive_timeout": "originKeepaliveTimeout",
+            "origin_read_timeout": "originReadTimeout",
+        },
+    )
+    class VpcOriginConfigProperty:
+        def __init__(
+            self,
+            *,
+            vpc_origin_id: builtins.str,
+            origin_keepalive_timeout: typing.Optional[jsii.Number] = None,
+            origin_read_timeout: typing.Optional[jsii.Number] = None,
+        ) -> None:
+            '''
+            :param vpc_origin_id: 
+            :param origin_keepalive_timeout: Default: - 5
+            :param origin_read_timeout: Default: - 30
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-vpcoriginconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudfront as cloudfront
+                
+                vpc_origin_config_property = cloudfront.CfnDistribution.VpcOriginConfigProperty(
+                    vpc_origin_id="vpcOriginId",
+                
+                    # the properties below are optional
+                    origin_keepalive_timeout=123,
+                    origin_read_timeout=123
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__f7a2beaed61436754427d5794c11e2b8b3ecac452591d86453fc6b4321c161b0)
+                check_type(argname="argument vpc_origin_id", value=vpc_origin_id, expected_type=type_hints["vpc_origin_id"])
+                check_type(argname="argument origin_keepalive_timeout", value=origin_keepalive_timeout, expected_type=type_hints["origin_keepalive_timeout"])
+                check_type(argname="argument origin_read_timeout", value=origin_read_timeout, expected_type=type_hints["origin_read_timeout"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "vpc_origin_id": vpc_origin_id,
+            }
+            if origin_keepalive_timeout is not None:
+                self._values["origin_keepalive_timeout"] = origin_keepalive_timeout
+            if origin_read_timeout is not None:
+                self._values["origin_read_timeout"] = origin_read_timeout
+
+        @builtins.property
+        def vpc_origin_id(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-vpcoriginconfig.html#cfn-cloudfront-distribution-vpcoriginconfig-vpcoriginid
+            '''
+            result = self._values.get("vpc_origin_id")
+            assert result is not None, "Required property 'vpc_origin_id' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def origin_keepalive_timeout(self) -> typing.Optional[jsii.Number]:
+            '''
+            :default: - 5
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-vpcoriginconfig.html#cfn-cloudfront-distribution-vpcoriginconfig-originkeepalivetimeout
+            '''
+            result = self._values.get("origin_keepalive_timeout")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def origin_read_timeout(self) -> typing.Optional[jsii.Number]:
+            '''
+            :default: - 30
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-vpcoriginconfig.html#cfn-cloudfront-distribution-vpcoriginconfig-originreadtimeout
+            '''
+            result = self._values.get("origin_read_timeout")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "VpcOriginConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_cloudfront.CfnDistributionProps",
@@ -9664,6 +9792,13 @@ class CfnDistributionProps:
                         ),
                         s3_origin_config=cloudfront.CfnDistribution.S3OriginConfigProperty(
                             origin_access_identity="originAccessIdentity"
+                        ),
+                        vpc_origin_config=cloudfront.CfnDistribution.VpcOriginConfigProperty(
+                            vpc_origin_id="vpcOriginId",
+            
+                            # the properties below are optional
+                            origin_keepalive_timeout=123,
+                            origin_read_timeout=123
                         )
                     )],
                     price_class="priceClass",
@@ -15709,6 +15844,422 @@ class CfnStreamingDistributionProps:
         )
 
 
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnVpcOrigin(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_cloudfront.CfnVpcOrigin",
+):
+    '''An Amazon CloudFront VPC origin.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-vpcorigin.html
+    :cloudformationResource: AWS::CloudFront::VpcOrigin
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_cloudfront as cloudfront
+        
+        cfn_vpc_origin = cloudfront.CfnVpcOrigin(self, "MyCfnVpcOrigin",
+            vpc_origin_endpoint_config=cloudfront.CfnVpcOrigin.VpcOriginEndpointConfigProperty(
+                arn="arn",
+                name="name",
+        
+                # the properties below are optional
+                http_port=123,
+                https_port=123,
+                origin_protocol_policy="originProtocolPolicy",
+                origin_ssl_protocols=["originSslProtocols"]
+            ),
+        
+            # the properties below are optional
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        vpc_origin_endpoint_config: typing.Union[_IResolvable_da3f097b, typing.Union["CfnVpcOrigin.VpcOriginEndpointConfigProperty", typing.Dict[builtins.str, typing.Any]]],
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param vpc_origin_endpoint_config: The VPC origin endpoint configuration.
+        :param tags: A complex type that contains zero or more ``Tag`` elements.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f7062f7bb7781a86be4f5d08bb3bb95af09a186c881a9c115d240e93409599a3)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnVpcOriginProps(
+            vpc_origin_endpoint_config=vpc_origin_endpoint_config, tags=tags
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__28f636d13eaee8a7287928cb7df58e76d1def769726a097be97eabfb808c51f8)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__131a454614cc703864083ecdf8cf7d7fe02af623b811d7c123ef1c6f604cfe1e)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrArn")
+    def attr_arn(self) -> builtins.str:
+        '''The VPC origin ARN.
+
+        :cloudformationAttribute: Arn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrCreatedTime")
+    def attr_created_time(self) -> builtins.str:
+        '''The VPC origin created time.
+
+        :cloudformationAttribute: CreatedTime
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrCreatedTime"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrId")
+    def attr_id(self) -> builtins.str:
+        '''The VPC origin ID.
+
+        :cloudformationAttribute: Id
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrLastModifiedTime")
+    def attr_last_modified_time(self) -> builtins.str:
+        '''The VPC origin last modified time.
+
+        :cloudformationAttribute: LastModifiedTime
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrLastModifiedTime"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrStatus")
+    def attr_status(self) -> builtins.str:
+        '''The VPC origin status.
+
+        :cloudformationAttribute: Status
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrStatus"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="vpcOriginEndpointConfig")
+    def vpc_origin_endpoint_config(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnVpcOrigin.VpcOriginEndpointConfigProperty"]:
+        '''The VPC origin endpoint configuration.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnVpcOrigin.VpcOriginEndpointConfigProperty"], jsii.get(self, "vpcOriginEndpointConfig"))
+
+    @vpc_origin_endpoint_config.setter
+    def vpc_origin_endpoint_config(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnVpcOrigin.VpcOriginEndpointConfigProperty"],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9265e1489f928e735dda183f6e028e321fecb788c24bb3ae245d1548533ba74e)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "vpcOriginEndpointConfig", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''A complex type that contains zero or more ``Tag`` elements.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__cc93ea0e93a8ae8f83cf244dcb1cb75eec5e49566a07e24c8943e0e19484ca81)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudfront.CfnVpcOrigin.VpcOriginEndpointConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "arn": "arn",
+            "name": "name",
+            "http_port": "httpPort",
+            "https_port": "httpsPort",
+            "origin_protocol_policy": "originProtocolPolicy",
+            "origin_ssl_protocols": "originSslProtocols",
+        },
+    )
+    class VpcOriginEndpointConfigProperty:
+        def __init__(
+            self,
+            *,
+            arn: builtins.str,
+            name: builtins.str,
+            http_port: typing.Optional[jsii.Number] = None,
+            https_port: typing.Optional[jsii.Number] = None,
+            origin_protocol_policy: typing.Optional[builtins.str] = None,
+            origin_ssl_protocols: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''An Amazon CloudFront VPC origin endpoint configuration.
+
+            :param arn: The ARN of the CloudFront VPC origin endpoint configuration.
+            :param name: The name of the CloudFront VPC origin endpoint configuration.
+            :param http_port: The HTTP port for the CloudFront VPC origin endpoint configuration. Default: - 80
+            :param https_port: The HTTPS port of the CloudFront VPC origin endpoint configuration. Default: - 443
+            :param origin_protocol_policy: The origin protocol policy for the CloudFront VPC origin endpoint configuration. Default: - "match-viewer"
+            :param origin_ssl_protocols: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-vpcorigin-vpcoriginendpointconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudfront as cloudfront
+                
+                vpc_origin_endpoint_config_property = cloudfront.CfnVpcOrigin.VpcOriginEndpointConfigProperty(
+                    arn="arn",
+                    name="name",
+                
+                    # the properties below are optional
+                    http_port=123,
+                    https_port=123,
+                    origin_protocol_policy="originProtocolPolicy",
+                    origin_ssl_protocols=["originSslProtocols"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__005dcbc2d3e8c1b9440d0937d4f4088afc4fb1a0a647692004a2a371311c7428)
+                check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+                check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+                check_type(argname="argument http_port", value=http_port, expected_type=type_hints["http_port"])
+                check_type(argname="argument https_port", value=https_port, expected_type=type_hints["https_port"])
+                check_type(argname="argument origin_protocol_policy", value=origin_protocol_policy, expected_type=type_hints["origin_protocol_policy"])
+                check_type(argname="argument origin_ssl_protocols", value=origin_ssl_protocols, expected_type=type_hints["origin_ssl_protocols"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "arn": arn,
+                "name": name,
+            }
+            if http_port is not None:
+                self._values["http_port"] = http_port
+            if https_port is not None:
+                self._values["https_port"] = https_port
+            if origin_protocol_policy is not None:
+                self._values["origin_protocol_policy"] = origin_protocol_policy
+            if origin_ssl_protocols is not None:
+                self._values["origin_ssl_protocols"] = origin_ssl_protocols
+
+        @builtins.property
+        def arn(self) -> builtins.str:
+            '''The ARN of the CloudFront VPC origin endpoint configuration.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-vpcorigin-vpcoriginendpointconfig.html#cfn-cloudfront-vpcorigin-vpcoriginendpointconfig-arn
+            '''
+            result = self._values.get("arn")
+            assert result is not None, "Required property 'arn' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def name(self) -> builtins.str:
+            '''The name of the CloudFront VPC origin endpoint configuration.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-vpcorigin-vpcoriginendpointconfig.html#cfn-cloudfront-vpcorigin-vpcoriginendpointconfig-name
+            '''
+            result = self._values.get("name")
+            assert result is not None, "Required property 'name' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def http_port(self) -> typing.Optional[jsii.Number]:
+            '''The HTTP port for the CloudFront VPC origin endpoint configuration.
+
+            :default: - 80
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-vpcorigin-vpcoriginendpointconfig.html#cfn-cloudfront-vpcorigin-vpcoriginendpointconfig-httpport
+            '''
+            result = self._values.get("http_port")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def https_port(self) -> typing.Optional[jsii.Number]:
+            '''The HTTPS port of the CloudFront VPC origin endpoint configuration.
+
+            :default: - 443
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-vpcorigin-vpcoriginendpointconfig.html#cfn-cloudfront-vpcorigin-vpcoriginendpointconfig-httpsport
+            '''
+            result = self._values.get("https_port")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def origin_protocol_policy(self) -> typing.Optional[builtins.str]:
+            '''The origin protocol policy for the CloudFront VPC origin endpoint configuration.
+
+            :default: - "match-viewer"
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-vpcorigin-vpcoriginendpointconfig.html#cfn-cloudfront-vpcorigin-vpcoriginendpointconfig-originprotocolpolicy
+            '''
+            result = self._values.get("origin_protocol_policy")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def origin_ssl_protocols(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-vpcorigin-vpcoriginendpointconfig.html#cfn-cloudfront-vpcorigin-vpcoriginendpointconfig-originsslprotocols
+            '''
+            result = self._values.get("origin_ssl_protocols")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "VpcOriginEndpointConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_cloudfront.CfnVpcOriginProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "vpc_origin_endpoint_config": "vpcOriginEndpointConfig",
+        "tags": "tags",
+    },
+)
+class CfnVpcOriginProps:
+    def __init__(
+        self,
+        *,
+        vpc_origin_endpoint_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnVpcOrigin.VpcOriginEndpointConfigProperty, typing.Dict[builtins.str, typing.Any]]],
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnVpcOrigin``.
+
+        :param vpc_origin_endpoint_config: The VPC origin endpoint configuration.
+        :param tags: A complex type that contains zero or more ``Tag`` elements.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-vpcorigin.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_cloudfront as cloudfront
+            
+            cfn_vpc_origin_props = cloudfront.CfnVpcOriginProps(
+                vpc_origin_endpoint_config=cloudfront.CfnVpcOrigin.VpcOriginEndpointConfigProperty(
+                    arn="arn",
+                    name="name",
+            
+                    # the properties below are optional
+                    http_port=123,
+                    https_port=123,
+                    origin_protocol_policy="originProtocolPolicy",
+                    origin_ssl_protocols=["originSslProtocols"]
+                ),
+            
+                # the properties below are optional
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6657c895db0b69fae418a09161e8a96bc69ee82e7f5b764cd772724449c93252)
+            check_type(argname="argument vpc_origin_endpoint_config", value=vpc_origin_endpoint_config, expected_type=type_hints["vpc_origin_endpoint_config"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "vpc_origin_endpoint_config": vpc_origin_endpoint_config,
+        }
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def vpc_origin_endpoint_config(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnVpcOrigin.VpcOriginEndpointConfigProperty]:
+        '''The VPC origin endpoint configuration.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-vpcorigin.html#cfn-cloudfront-vpcorigin-vpcoriginendpointconfig
+        '''
+        result = self._values.get("vpc_origin_endpoint_config")
+        assert result is not None, "Required property 'vpc_origin_endpoint_config' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnVpcOrigin.VpcOriginEndpointConfigProperty], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''A complex type that contains zero or more ``Tag`` elements.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-vpcorigin.html#cfn-cloudfront-vpcorigin-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnVpcOriginProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.enum(jsii_type="aws-cdk-lib.aws_cloudfront.CloudFrontAllowedCachedMethods")
 class CloudFrontAllowedCachedMethods(enum.Enum):
     '''Enums for the methods CloudFront can cache.'''
@@ -19564,6 +20115,7 @@ typing.cast(typing.Any, OriginBase).__jsii_proxy_class__ = lambda : _OriginBaseP
     name_mapping={
         "failover_config": "failoverConfig",
         "origin_property": "originProperty",
+        "selection_criteria": "selectionCriteria",
     },
 )
 class OriginBindConfig:
@@ -19572,11 +20124,13 @@ class OriginBindConfig:
         *,
         failover_config: typing.Optional[typing.Union["OriginFailoverConfig", typing.Dict[builtins.str, typing.Any]]] = None,
         origin_property: typing.Optional[typing.Union[CfnDistribution.OriginProperty, typing.Dict[builtins.str, typing.Any]]] = None,
+        selection_criteria: typing.Optional["OriginSelectionCriteria"] = None,
     ) -> None:
         '''The struct returned from ``IOrigin.bind``.
 
         :param failover_config: The failover configuration for this Origin. Default: - nothing is returned
         :param origin_property: The CloudFormation OriginProperty configuration for this Origin. Default: - nothing is returned
+        :param selection_criteria: The selection criteria for how your origins are selected. Default: - OriginSelectionCriteria.DEFAULT
 
         :exampleMetadata: fixture=_generated
 
@@ -19624,8 +20178,16 @@ class OriginBindConfig:
                     ),
                     s3_origin_config=cloudfront.CfnDistribution.S3OriginConfigProperty(
                         origin_access_identity="originAccessIdentity"
+                    ),
+                    vpc_origin_config=cloudfront.CfnDistribution.VpcOriginConfigProperty(
+                        vpc_origin_id="vpcOriginId",
+            
+                        # the properties below are optional
+                        origin_keepalive_timeout=123,
+                        origin_read_timeout=123
                     )
-                )
+                ),
+                selection_criteria=cloudfront.OriginSelectionCriteria.DEFAULT
             )
         '''
         if isinstance(failover_config, dict):
@@ -19636,11 +20198,14 @@ class OriginBindConfig:
             type_hints = typing.get_type_hints(_typecheckingstub__d3e6a8992dd905a0c0d851cfed62aa0f881803068317a0b59eb84571249e84f1)
             check_type(argname="argument failover_config", value=failover_config, expected_type=type_hints["failover_config"])
             check_type(argname="argument origin_property", value=origin_property, expected_type=type_hints["origin_property"])
+            check_type(argname="argument selection_criteria", value=selection_criteria, expected_type=type_hints["selection_criteria"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if failover_config is not None:
             self._values["failover_config"] = failover_config
         if origin_property is not None:
             self._values["origin_property"] = origin_property
+        if selection_criteria is not None:
+            self._values["selection_criteria"] = selection_criteria
 
     @builtins.property
     def failover_config(self) -> typing.Optional["OriginFailoverConfig"]:
@@ -19660,6 +20225,17 @@ class OriginBindConfig:
         result = self._values.get("origin_property")
         return typing.cast(typing.Optional[CfnDistribution.OriginProperty], result)
 
+    @builtins.property
+    def selection_criteria(self) -> typing.Optional["OriginSelectionCriteria"]:
+        '''The selection criteria for how your origins are selected.
+
+        :default: - OriginSelectionCriteria.DEFAULT
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/high_availability_origin_failover.html#concept_origin_groups.creating
+        '''
+        result = self._values.get("selection_criteria")
+        return typing.cast(typing.Optional["OriginSelectionCriteria"], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -20718,6 +21294,35 @@ class OriginRequestQueryStringBehavior(
         return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "queryStrings"))
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_cloudfront.OriginSelectionCriteria")
+class OriginSelectionCriteria(enum.Enum):
+    '''The selection criteria for the origin group.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        cloudfront.Distribution(self, "myDist",
+            default_behavior=cloudfront.BehaviorOptions(
+                origin=origins.OriginGroup(
+                    primary_origin=origins.HttpOrigin("<AWS Elemental MediaPackageV2 origin 1>"),
+                    fallback_origin=origins.HttpOrigin("<AWS Elemental MediaPackageV2 origin 2>"),
+                    fallback_status_codes=[404],
+                    selection_criteria=cloudfront.OriginSelectionCriteria.MEDIA_QUALITY_BASED
+                )
+            )
+        )
+    '''
+
+    DEFAULT = "DEFAULT"
+    '''Default selection behavior.'''
+    MEDIA_QUALITY_BASED = "MEDIA_QUALITY_BASED"
+    '''Selection based on media quality.
+
+    This option is only valid for AWS Elemental MediaPackage v2 Origins.
+    '''
+
+
 @jsii.enum(jsii_type="aws-cdk-lib.aws_cloudfront.OriginSslPolicy")
 class OriginSslPolicy(enum.Enum):
     SSL_V3 = "SSL_V3"
@@ -21519,7 +22124,7 @@ class ResponseHeadersCorsBehavior:
 
         :param access_control_allow_credentials: A Boolean that CloudFront uses as the value for the Access-Control-Allow-Credentials HTTP response header.
         :param access_control_allow_headers: A list of HTTP header names that CloudFront includes as values for the Access-Control-Allow-Headers HTTP response header. You can specify ``['*']`` to allow all headers.
-        :param access_control_allow_methods: A list of HTTP methods that CloudFront includes as values for the Access-Control-Allow-Methods HTTP response header.
+        :param access_control_allow_methods: A list of HTTP methods that CloudFront includes as values for the Access-Control-Allow-Methods HTTP response header. Allowed methods: ``'GET'``, ``'DELETE'``, ``'HEAD'``, ``'OPTIONS'``, ``'PATCH'``, ``'POST'``, and ``'PUT'``. You can specify ``['ALL']`` to allow all methods.
         :param access_control_allow_origins: A list of origins (domain names) that CloudFront can use as the value for the Access-Control-Allow-Origin HTTP response header. You can specify ``['*']`` to allow all origins.
         :param origin_override: A Boolean that determines whether CloudFront overrides HTTP response headers received from the origin with the ones specified in this response headers policy.
         :param access_control_expose_headers: A list of HTTP headers that CloudFront includes as values for the Access-Control-Expose-Headers HTTP response header. You can specify ``['*']`` to expose all headers. Default: - no headers exposed
@@ -21614,7 +22219,11 @@ class ResponseHeadersCorsBehavior:
 
     @builtins.property
     def access_control_allow_methods(self) -> typing.List[builtins.str]:
-        '''A list of HTTP methods that CloudFront includes as values for the Access-Control-Allow-Methods HTTP response header.'''
+        '''A list of HTTP methods that CloudFront includes as values for the Access-Control-Allow-Methods HTTP response header.
+
+        Allowed methods: ``'GET'``, ``'DELETE'``, ``'HEAD'``, ``'OPTIONS'``, ``'PATCH'``, ``'POST'``, and ``'PUT'``.
+        You can specify ``['ALL']`` to allow all methods.
+        '''
         result = self._values.get("access_control_allow_methods")
         assert result is not None, "Required property 'access_control_allow_methods' is missing"
         return typing.cast(typing.List[builtins.str], result)
@@ -25588,6 +26197,8 @@ __all__ = [
     "CfnResponseHeadersPolicyProps",
     "CfnStreamingDistribution",
     "CfnStreamingDistributionProps",
+    "CfnVpcOrigin",
+    "CfnVpcOriginProps",
     "CloudFrontAllowedCachedMethods",
     "CloudFrontAllowedMethods",
     "CloudFrontWebDistribution",
@@ -25652,6 +26263,7 @@ __all__ = [
     "OriginRequestPolicy",
     "OriginRequestPolicyProps",
     "OriginRequestQueryStringBehavior",
+    "OriginSelectionCriteria",
     "OriginSslPolicy",
     "PriceClass",
     "PublicKey",
@@ -26356,6 +26968,7 @@ def _typecheckingstub__cb4237408749840dbecf9d9aed57975910052da22b994c7e13cc97c98
     origin_path: typing.Optional[builtins.str] = None,
     origin_shield: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDistribution.OriginShieldProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     s3_origin_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDistribution.S3OriginConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    vpc_origin_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDistribution.VpcOriginConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -26384,7 +26997,7 @@ def _typecheckingstub__8d9ff629693eb9bcb66704ce461d05e62e0755b651cbbc7ead2b89151
 
 def _typecheckingstub__7b8b62ce6bf1ec6151566719caf2d665f3f7fea596e402fba7354f19f781f23c(
     *,
-    items: typing.Union[_IResolvable_da3f097b, typing.Sequence[jsii.Number]],
+    items: typing.Union[typing.Sequence[jsii.Number], _IResolvable_da3f097b],
     quantity: jsii.Number,
 ) -> None:
     """Type checking stubs"""
@@ -26401,6 +27014,15 @@ def _typecheckingstub__511560286b35778c69f3d2a23120607f1ab2e58901f0c1ba7acd75a33
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f7a2beaed61436754427d5794c11e2b8b3ecac452591d86453fc6b4321c161b0(
+    *,
+    vpc_origin_id: builtins.str,
+    origin_keepalive_timeout: typing.Optional[jsii.Number] = None,
+    origin_read_timeout: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__f7553d47847912fd83a61da98a84c9c8cb5fdb95cf08048d70723db17c73053a(
     *,
     distribution_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnDistribution.DistributionConfigProperty, typing.Dict[builtins.str, typing.Any]]],
@@ -27156,6 +27778,60 @@ def _typecheckingstub__eb98a63a577b61baa6128a211026a41a13348dc9752d07118d9db5c63
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f7062f7bb7781a86be4f5d08bb3bb95af09a186c881a9c115d240e93409599a3(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    vpc_origin_endpoint_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnVpcOrigin.VpcOriginEndpointConfigProperty, typing.Dict[builtins.str, typing.Any]]],
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__28f636d13eaee8a7287928cb7df58e76d1def769726a097be97eabfb808c51f8(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__131a454614cc703864083ecdf8cf7d7fe02af623b811d7c123ef1c6f604cfe1e(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9265e1489f928e735dda183f6e028e321fecb788c24bb3ae245d1548533ba74e(
+    value: typing.Union[_IResolvable_da3f097b, CfnVpcOrigin.VpcOriginEndpointConfigProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__cc93ea0e93a8ae8f83cf244dcb1cb75eec5e49566a07e24c8943e0e19484ca81(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__005dcbc2d3e8c1b9440d0937d4f4088afc4fb1a0a647692004a2a371311c7428(
+    *,
+    arn: builtins.str,
+    name: builtins.str,
+    http_port: typing.Optional[jsii.Number] = None,
+    https_port: typing.Optional[jsii.Number] = None,
+    origin_protocol_policy: typing.Optional[builtins.str] = None,
+    origin_ssl_protocols: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6657c895db0b69fae418a09161e8a96bc69ee82e7f5b764cd772724449c93252(
+    *,
+    vpc_origin_endpoint_config: typing.Union[_IResolvable_da3f097b, typing.Union[CfnVpcOrigin.VpcOriginEndpointConfigProperty, typing.Dict[builtins.str, typing.Any]]],
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__4066bd6a3cdef7b839e125a6133e4a1d52cc939d9ec9dd0288d2750b135e9452(
     *,
     distribution_id: builtins.str,
@@ -27519,6 +28195,7 @@ def _typecheckingstub__d3e6a8992dd905a0c0d851cfed62aa0f881803068317a0b59eb845712
     *,
     failover_config: typing.Optional[typing.Union[OriginFailoverConfig, typing.Dict[builtins.str, typing.Any]]] = None,
     origin_property: typing.Optional[typing.Union[CfnDistribution.OriginProperty, typing.Dict[builtins.str, typing.Any]]] = None,
+    selection_criteria: typing.Optional[OriginSelectionCriteria] = None,
 ) -> None:
     """Type checking stubs"""
     pass