aws-cdk-lib 2.178.2__tar.gz → 2.179.0__tar.gz

{aws_cdk_lib-2.178.2/src/aws_cdk_lib.egg-info → aws_cdk_lib-2.179.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: aws-cdk-lib
-Version: 2.178.2
+Version: 2.179.0
 Summary: Version 2 of the AWS Cloud Development Kit library
 Home-page: https://github.com/aws/aws-cdk
 Author: Amazon Web Services
@@ -22,7 +22,6 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 License-File: NOTICE
 Requires-Dist: aws-cdk.asset-awscli-v1<3.0.0,>=2.2.208
-Requires-Dist: aws-cdk.asset-kubectl-v20<3.0.0,>=2.1.3
 Requires-Dist: aws-cdk.asset-node-proxy-agent-v6<3.0.0,>=2.1.0
 Requires-Dist: aws-cdk.cloud-assembly-schema<40.0.0,>=39.2.0
 Requires-Dist: constructs<11.0.0,>=10.0.0

{aws_cdk_lib-2.178.2 → aws_cdk_lib-2.179.0}/setup.py

@@ -5,7 +5,7 @@ kwargs = json.loads(
     """
 {
     "name": "aws-cdk-lib",
-    "version": "2.178.2",
+    "version": "2.179.0",
     "description": "Version 2 of the AWS Cloud Development Kit library",
     "license": "Apache-2.0",
     "url": "https://github.com/aws/aws-cdk",
@@ -308,7 +308,6 @@ kwargs = json.loads(
         "aws_cdk.custom_resources",
         "aws_cdk.cx_api",
         "aws_cdk.lambda_layer_awscli",
-        "aws_cdk.lambda_layer_kubectl",
         "aws_cdk.lambda_layer_node_proxy_agent",
         "aws_cdk.pipelines",
         "aws_cdk.region_info",
@@ -316,7 +315,7 @@ kwargs = json.loads(
     ],
     "package_data": {
         "aws_cdk._jsii": [
-            "aws-cdk-lib@2.178.2.jsii.tgz"
+            "aws-cdk-lib@2.179.0.jsii.tgz"
         ],
         "aws_cdk": [
             "py.typed"
@@ -325,7 +324,6 @@ kwargs = json.loads(
     "python_requires": "~=3.8",
     "install_requires": [
         "aws-cdk.asset-awscli-v1>=2.2.208, <3.0.0",
-        "aws-cdk.asset-kubectl-v20>=2.1.3, <3.0.0",
         "aws-cdk.asset-node-proxy-agent-v6>=2.1.0, <3.0.0",
         "aws-cdk.cloud-assembly-schema>=39.2.0, <40.0.0",
         "constructs>=10.0.0, <11.0.0",

{aws_cdk_lib-2.178.2 → aws_cdk_lib-2.179.0}/src/aws_cdk/__init__.py

@@ -12975,17 +12975,16 @@ class Duration(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Duration"):
             schedule=events.Schedule.rate(cdk.Duration.hours(1))
         )
         
-        rule.add_target(
-            targets.EcsTask(
-                cluster=cluster,
-                task_definition=task_definition,
-                propagate_tags=ecs.PropagatedTagSource.TASK_DEFINITION,
-                tags=[targets.Tag(
-                    key="my-tag",
-                    value="my-tag-value"
-                )
-                ]
-            ))
+        rule.add_target(targets.EcsTask(
+            cluster=cluster,
+            task_definition=task_definition,
+            task_count=1,
+            container_overrides=[targets.ContainerOverride(
+                container_name="TheContainer",
+                command=["echo", events.EventField.from_path("$.detail.event")]
+            )],
+            enable_execute_command=True
+        ))
     '''
 
     @jsii.member(jsii_name="days")
@@ -13386,6 +13385,34 @@ class Errors(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Errors"):
     def __init__(self) -> None:
         jsii.create(self.__class__, self, [])
 
+    @jsii.member(jsii_name="isAssertionError")
+    @builtins.classmethod
+    def is_assertion_error(cls, x: typing.Any) -> builtins.bool:
+        '''Test whether the given error is a AssertionError.
+
+        An AssertionError is thrown when an assertion fails.
+
+        :param x: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4b06766267738419297aaf93a2368e0c38c274adc14053ce29fd653d61c4cef4)
+            check_type(argname="argument x", value=x, expected_type=type_hints["x"])
+        return typing.cast(builtins.bool, jsii.sinvoke(cls, "isAssertionError", [x]))
+
+    @jsii.member(jsii_name="isCloudAssemblyError")
+    @builtins.classmethod
+    def is_cloud_assembly_error(cls, x: typing.Any) -> builtins.bool:
+        '''Test whether the given error is a CloudAssemblyError.
+
+        A CloudAssemblyError is thrown for unexpected problems with the synthesized assembly.
+
+        :param x: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1cadecf7c75d3f55ff2fcddf8a0d000d9f8e54b48218f1336d97358901d38c0b)
+            check_type(argname="argument x", value=x, expected_type=type_hints["x"])
+        return typing.cast(builtins.bool, jsii.sinvoke(cls, "isCloudAssemblyError", [x]))
+
     @jsii.member(jsii_name="isConstructError")
     @builtins.classmethod
     def is_construct_error(cls, x: typing.Any) -> builtins.bool:
@@ -20389,27 +20416,24 @@ class Size(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Size"):
 
     Example::
 
-        multi_node_job = batch.MultiNodeJobDefinition(self, "JobDefinition",
-            instance_type=ec2.InstanceType.of(ec2.InstanceClass.R4, ec2.InstanceSize.LARGE),  # optional, omit to let Batch choose the type for you
-            containers=[batch.MultiNodeContainer(
-                container=batch.EcsEc2ContainerDefinition(self, "mainMPIContainer",
-                    image=ecs.ContainerImage.from_registry("yourregsitry.com/yourMPIImage:latest"),
-                    cpu=256,
-                    memory=cdk.Size.mebibytes(2048)
-                ),
-                start_node=0,
-                end_node=5
-            )]
+        # bucket: s3.Bucket
+        # Provide a Lambda function that will transform records before delivery, with custom
+        # buffering and retry configuration
+        lambda_function = lambda_.Function(self, "Processor",
+            runtime=lambda_.Runtime.NODEJS_LATEST,
+            handler="index.handler",
+            code=lambda_.Code.from_asset(path.join(__dirname, "process-records"))
         )
-        # convenience method
-        multi_node_job.add_container(
-            start_node=6,
-            end_node=10,
-            container=batch.EcsEc2ContainerDefinition(self, "multiContainer",
-                image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample"),
-                cpu=256,
-                memory=cdk.Size.mebibytes(2048)
-            )
+        lambda_processor = firehose.LambdaFunctionProcessor(lambda_function,
+            buffer_interval=Duration.minutes(5),
+            buffer_size=Size.mebibytes(5),
+            retries=5
+        )
+        s3_destination = firehose.S3Bucket(bucket,
+            processor=lambda_processor
+        )
+        firehose.DeliveryStream(self, "Delivery Stream",
+            destination=s3_destination
         )
     '''
 
@@ -21221,9 +21245,9 @@ class Stack(
         check that it is a concrete value an not an unresolved token. If this
         value is an unresolved token (``Token.isUnresolved(stack.account)`` returns
         ``true``), this implies that the user wishes that this stack will synthesize
-        into a **account-agnostic template**. In this case, your code should either
+        into an **account-agnostic template**. In this case, your code should either
         fail (throw an error, emit a synth error using ``Annotations.of(construct).addError()``) or
-        implement some other region-agnostic behavior.
+        implement some other account-agnostic behavior.
         '''
         return typing.cast(builtins.str, jsii.get(self, "account"))
 
@@ -36548,7 +36572,6 @@ __all__ = [
     "custom_resources",
     "cx_api",
     "lambda_layer_awscli",
-    "lambda_layer_kubectl",
     "lambda_layer_node_proxy_agent",
     "pipelines",
     "region_info",
@@ -36842,7 +36865,6 @@ from . import cloudformation_include
 from . import custom_resources
 from . import cx_api
 from . import lambda_layer_awscli
-from . import lambda_layer_kubectl
 from . import lambda_layer_node_proxy_agent
 from . import pipelines
 from . import region_info
@@ -38174,6 +38196,18 @@ def _typecheckingstub__779551ef0a4b144070fd2c3e88ff076e32ad12d30facdc65a940b7a87
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__4b06766267738419297aaf93a2368e0c38c274adc14053ce29fd653d61c4cef4(
+    x: typing.Any,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1cadecf7c75d3f55ff2fcddf8a0d000d9f8e54b48218f1336d97358901d38c0b(
+    x: typing.Any,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__0c62bc5a6fe032556ae3c32e105ddaad3f4ca89286fd26884af6347d3364c5ae(
     x: typing.Any,
 ) -> None:

{aws_cdk_lib-2.178.2 → aws_cdk_lib-2.179.0}/src/aws_cdk/_jsii/__init__.py

@@ -29,13 +29,12 @@ def check_type(argname: str, value: object, expected_type: typing.Any) -> typing
                 typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 import aws_cdk.asset_awscli_v1._jsii
-import aws_cdk.asset_kubectl_v20._jsii
 import aws_cdk.asset_node_proxy_agent_v6._jsii
 import aws_cdk.cloud_assembly_schema._jsii
 import constructs._jsii
 
 __jsii_assembly__ = jsii.JSIIAssembly.load(
-    "aws-cdk-lib", "2.178.2", __name__[0:-6], "aws-cdk-lib@2.178.2.jsii.tgz"
+    "aws-cdk-lib", "2.179.0", __name__[0:-6], "aws-cdk-lib@2.179.0.jsii.tgz"
 )
 
 __all__ = [

{aws_cdk_lib-2.178.2 → aws_cdk_lib-2.179.0}/src/aws_cdk/aws_apigateway/__init__.py

@@ -591,7 +591,7 @@ The following example shows how to use a rate limited api key :
 
 key = apigateway.RateLimitedApiKey(self, "rate-limited-api-key",
     customer_id="hello-customer",
-    stages=[api.deployment_stage],
+    api_stages=[apigateway.UsagePlanPerApiStage(stage=api.deployment_stage)],
     quota=apigateway.QuotaSettings(
         limit=10000,
         period=apigateway.Period.MONTH
@@ -1684,6 +1684,21 @@ By performing this association, we can invoke the API gateway using the followin
 https://{rest-api-id}-{vpce-id}.execute-api.{region}.amazonaws.com/{stage}
 ```
 
+To restrict access to the API Gateway to only the VPC endpoint, you can use the `grantInvokeFromVpcEndpointsOnly` method to [add resource policies](https://docs.aws.amazon.com/apigateway/latest/developerguide/private-api-tutorial.html#private-api-tutorial-attach-resource-policy) to the API Gateway:
+
+```python
+# api_gw_vpc_endpoint: ec2.IVpcEndpoint
+
+
+api = apigateway.RestApi(self, "PrivateApi",
+    endpoint_configuration=apigateway.EndpointConfiguration(
+        types=[apigateway.EndpointType.PRIVATE],
+        vpc_endpoints=[api_gw_vpc_endpoint]
+    )
+)
+api.grant_invoke_from_vpc_endpoints_only([api_gw_vpc_endpoint])
+```
+
 ## Private Integrations
 
 A private integration makes it simple to expose HTTP/HTTPS resources behind an
@@ -1912,10 +1927,13 @@ from ..aws_elasticloadbalancingv2 import (
     INetworkLoadBalancer as _INetworkLoadBalancer_96e17101
 )
 from ..aws_iam import (
+    AddToResourcePolicyResult as _AddToResourcePolicyResult_1d0a53ad,
     Grant as _Grant_a7ae64f8,
     IGrantable as _IGrantable_71c4f5de,
+    IResourceWithPolicy as _IResourceWithPolicy_720d64fc,
     IRole as _IRole_235f5d8e,
     PolicyDocument as _PolicyDocument_3ac34393,
+    PolicyStatement as _PolicyStatement_0fe33853,
 )
 from ..aws_kinesisfirehose import CfnDeliveryStream as _CfnDeliveryStream_8f3b1735
 from ..aws_kms import IKey as _IKey_5f11635f
@@ -15664,9 +15682,13 @@ class EndpointConfiguration:
 
         Example::
 
+            # some_endpoint: ec2.IVpcEndpoint
+            
+            
             api = apigateway.RestApi(self, "api",
                 endpoint_configuration=apigateway.EndpointConfiguration(
-                    types=[apigateway.EndpointType.EDGE]
+                    types=[apigateway.EndpointType.PRIVATE],
+                    vpc_endpoints=[some_endpoint]
                 )
             )
         '''
@@ -15718,12 +15740,14 @@ class EndpointType(enum.Enum):
 
     Example::
 
-        # api_definition: apigateway.ApiDefinition
+        # some_endpoint: ec2.IVpcEndpoint
         
         
-        api = apigateway.SpecRestApi(self, "ExampleRestApi",
-            api_definition=api_definition,
-            endpoint_types=[apigateway.EndpointType.PRIVATE]
+        api = apigateway.RestApi(self, "api",
+            endpoint_configuration=apigateway.EndpointConfiguration(
+                types=[apigateway.EndpointType.PRIVATE],
+                vpc_endpoints=[some_endpoint]
+            )
         )
     '''
 
@@ -21470,7 +21494,7 @@ class Period(enum.Enum):
         
         key = apigateway.RateLimitedApiKey(self, "rate-limited-api-key",
             customer_id="hello-customer",
-            stages=[api.deployment_stage],
+            api_stages=[apigateway.UsagePlanPerApiStage(stage=api.deployment_stage)],
             quota=apigateway.QuotaSettings(
                 limit=10000,
                 period=apigateway.Period.MONTH
@@ -21511,7 +21535,7 @@ class QuotaSettings:
             
             key = apigateway.RateLimitedApiKey(self, "rate-limited-api-key",
                 customer_id="hello-customer",
-                stages=[api.deployment_stage],
+                api_stages=[apigateway.UsagePlanPerApiStage(stage=api.deployment_stage)],
                 quota=apigateway.QuotaSettings(
                     limit=10000,
                     period=apigateway.Period.MONTH
@@ -21588,7 +21612,7 @@ class RateLimitedApiKey(
         
         key = apigateway.RateLimitedApiKey(self, "rate-limited-api-key",
             customer_id="hello-customer",
-            stages=[api.deployment_stage],
+            api_stages=[apigateway.UsagePlanPerApiStage(stage=api.deployment_stage)],
             quota=apigateway.QuotaSettings(
                 limit=10000,
                 period=apigateway.Period.MONTH
@@ -21619,7 +21643,7 @@ class RateLimitedApiKey(
         '''
         :param scope: -
         :param id: -
-        :param api_stages: API Stages to be associated with the RateLimitedApiKey. Default: none
+        :param api_stages: API Stages to be associated with the RateLimitedApiKey. If you already prepared UsagePlan resource explicitly, you should use ``stages`` property. If you prefer to prepare UsagePlan resource implicitly via RateLimitedApiKey, or you should specify throttle settings at each stage individually, you should use ``apiStages`` property. Default: none
         :param quota: Number of requests clients can make in a given time period. Default: none
         :param throttle: Overall throttle settings for the API. Default: none
         :param customer_id: An AWS Marketplace customer identifier to use when integrating with the AWS SaaS Marketplace. Default: none
@@ -23534,7 +23558,7 @@ class RestApiAttributes:
         )
 
 
-@jsii.implements(IRestApi)
+@jsii.implements(IRestApi, _IResourceWithPolicy_720d64fc)
 class RestApiBase(
     _Resource_45bc6135,
     metaclass=jsii.JSIIAbstractClass,
@@ -23716,6 +23740,18 @@ class RestApiBase(
 
         return typing.cast("GatewayResponse", jsii.invoke(self, "addGatewayResponse", [id, options]))
 
+    @jsii.member(jsii_name="addToResourcePolicy")
+    @abc.abstractmethod
+    def add_to_resource_policy(
+        self,
+        statement: _PolicyStatement_0fe33853,
+    ) -> _AddToResourcePolicyResult_1d0a53ad:
+        '''Add a statement to the resource's resource policy.
+
+        :param statement: -
+        '''
+        ...
+
     @jsii.member(jsii_name="addUsagePlan")
     def add_usage_plan(
         self,
@@ -23769,6 +23805,22 @@ class RestApiBase(
             check_type(argname="argument stage", value=stage, expected_type=type_hints["stage"])
         return typing.cast(builtins.str, jsii.invoke(self, "arnForExecuteApi", [method, path, stage]))
 
+    @jsii.member(jsii_name="grantInvokeFromVpcEndpointsOnly")
+    def grant_invoke_from_vpc_endpoints_only(
+        self,
+        vpc_endpoints: typing.Sequence[_IVpcEndpoint_d8ea9bc3],
+    ) -> None:
+        '''Add a resource policy that only allows API execution from a VPC Endpoint to create a private API.
+
+        :param vpc_endpoints: the interface VPC endpoints to grant access to.
+
+        :see: https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-resource-policies-examples.html#apigateway-resource-policies-source-vpc-example
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d9c72e763e6fd8bee0fdc38b4c6d9a51728ddb7d71c8f2cc4723eeecc90240d6)
+            check_type(argname="argument vpc_endpoints", value=vpc_endpoints, expected_type=type_hints["vpc_endpoints"])
+        return typing.cast(None, jsii.invoke(self, "grantInvokeFromVpcEndpointsOnly", [vpc_endpoints]))
+
     @jsii.member(jsii_name="metric")
     def metric(
         self,
@@ -24236,11 +24288,40 @@ class RestApiBase(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "cloudWatchAccount", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="resourcePolicy")
+    def _resource_policy(self) -> typing.Optional[_PolicyDocument_3ac34393]:
+        return typing.cast(typing.Optional[_PolicyDocument_3ac34393], jsii.get(self, "resourcePolicy"))
+
+    @_resource_policy.setter
+    def _resource_policy(
+        self,
+        value: typing.Optional[_PolicyDocument_3ac34393],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__055b7d6b7f5983f0cbe73bf5302adcab621abc6451932928f4fc669ed6ce3182)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "resourcePolicy", value) # pyright: ignore[reportArgumentType]
+
 
 class _RestApiBaseProxy(
     RestApiBase,
     jsii.proxy_for(_Resource_45bc6135), # type: ignore[misc]
 ):
+    @jsii.member(jsii_name="addToResourcePolicy")
+    def add_to_resource_policy(
+        self,
+        statement: _PolicyStatement_0fe33853,
+    ) -> _AddToResourcePolicyResult_1d0a53ad:
+        '''Add a statement to the resource's resource policy.
+
+        :param statement: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e5b96ed4eaeba0605aea131fd9bd60ab19b56a3504a62607ee5eff63a4b41ae8)
+            check_type(argname="argument statement", value=statement, expected_type=type_hints["statement"])
+        return typing.cast(_AddToResourcePolicyResult_1d0a53ad, jsii.invoke(self, "addToResourcePolicy", [statement]))
+
     @builtins.property
     @jsii.member(jsii_name="restApiId")
     def rest_api_id(self) -> builtins.str:
@@ -24721,25 +24802,15 @@ class RestApiProps(ResourceOptions, RestApiBaseProps):
 
         Example::
 
-            destination_bucket = s3.Bucket(self, "Bucket")
-            delivery_stream_role = iam.Role(self, "Role",
-                assumed_by=iam.ServicePrincipal("firehose.amazonaws.com")
-            )
-            
-            stream = firehose.CfnDeliveryStream(self, "MyStream",
-                delivery_stream_name="amazon-apigateway-delivery-stream",
-                s3_destination_configuration=firehose.CfnDeliveryStream.S3DestinationConfigurationProperty(
-                    bucket_arn=destination_bucket.bucket_arn,
-                    role_arn=delivery_stream_role.role_arn
-                )
+            state_machine = stepfunctions.StateMachine(self, "MyStateMachine",
+                state_machine_type=stepfunctions.StateMachineType.EXPRESS,
+                definition=stepfunctions.Chain.start(stepfunctions.Pass(self, "Pass"))
             )
             
-            api = apigateway.RestApi(self, "books",
-                deploy_options=apigateway.StageOptions(
-                    access_log_destination=apigateway.FirehoseLogDestination(stream),
-                    access_log_format=apigateway.AccessLogFormat.json_with_standard_fields()
-                )
+            api = apigateway.RestApi(self, "Api",
+                rest_api_name="MyApi"
             )
+            api.root.add_method("GET", apigateway.StepFunctionsIntegration.start_execution(state_machine))
         '''
         if isinstance(default_cors_preflight_options, dict):
             default_cors_preflight_options = CorsOptions(**default_cors_preflight_options)
@@ -25565,6 +25636,24 @@ class SpecRestApi(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="addToResourcePolicy")
+    def add_to_resource_policy(
+        self,
+        statement: _PolicyStatement_0fe33853,
+    ) -> _AddToResourcePolicyResult_1d0a53ad:
+        '''Adds a statement to the resource policy associated with this rest api.
+
+        A resource policy will be automatically created upon the first call to ``addToResourcePolicy``.
+
+        Note that this does not work with imported rest api.
+
+        :param statement: The policy statement to add.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a598fa29dde7454edf374298a15d782fc9a7cfb24aea9c673988425532fdfaa8)
+            check_type(argname="argument statement", value=statement, expected_type=type_hints["statement"])
+        return typing.cast(_AddToResourcePolicyResult_1d0a53ad, jsii.invoke(self, "addToResourcePolicy", [statement]))
+
     @builtins.property
     @jsii.member(jsii_name="restApiId")
     def rest_api_id(self) -> builtins.str:
@@ -31391,7 +31480,7 @@ class RateLimitedApiKeyProps(ApiKeyProps):
         :param generate_distinct_id: Specifies whether the key identifier is distinct from the created API key value. Default: false
         :param resources: (deprecated) A list of resources this api key is associated with. Default: none
         :param stages: A list of Stages this api key is associated with. Default: - the api key is not associated with any stages
-        :param api_stages: API Stages to be associated with the RateLimitedApiKey. Default: none
+        :param api_stages: API Stages to be associated with the RateLimitedApiKey. If you already prepared UsagePlan resource explicitly, you should use ``stages`` property. If you prefer to prepare UsagePlan resource implicitly via RateLimitedApiKey, or you should specify throttle settings at each stage individually, you should use ``apiStages`` property. Default: none
         :param quota: Number of requests clients can make in a given time period. Default: none
         :param throttle: Overall throttle settings for the API. Default: none
 
@@ -31404,7 +31493,7 @@ class RateLimitedApiKeyProps(ApiKeyProps):
             
             key = apigateway.RateLimitedApiKey(self, "rate-limited-api-key",
                 customer_id="hello-customer",
-                stages=[api.deployment_stage],
+                api_stages=[apigateway.UsagePlanPerApiStage(stage=api.deployment_stage)],
                 quota=apigateway.QuotaSettings(
                     limit=10000,
                     period=apigateway.Period.MONTH
@@ -31590,6 +31679,10 @@ class RateLimitedApiKeyProps(ApiKeyProps):
     def api_stages(self) -> typing.Optional[typing.List[UsagePlanPerApiStage]]:
         '''API Stages to be associated with the RateLimitedApiKey.
 
+        If you already prepared UsagePlan resource explicitly, you should use ``stages`` property.
+        If you prefer to prepare UsagePlan resource implicitly via RateLimitedApiKey,
+        or you should specify throttle settings at each stage individually, you should use ``apiStages`` property.
+
         :default: none
         '''
         result = self._values.get("api_stages")
@@ -32115,6 +32208,24 @@ class RestApi(
 
         return typing.cast(RequestValidator, jsii.invoke(self, "addRequestValidator", [id, props]))
 
+    @jsii.member(jsii_name="addToResourcePolicy")
+    def add_to_resource_policy(
+        self,
+        statement: _PolicyStatement_0fe33853,
+    ) -> _AddToResourcePolicyResult_1d0a53ad:
+        '''Adds a statement to the resource policy associated with this rest api.
+
+        A resource policy will be automatically created upon the first call to ``addToResourcePolicy``.
+
+        Note that this does not work with imported rest api.
+
+        :param statement: The policy statement to add.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__52663697f28f1fd364df71313e30a1c7fde152016b3381ce552603f8a5dfc54f)
+            check_type(argname="argument statement", value=statement, expected_type=type_hints["statement"])
+        return typing.cast(_AddToResourcePolicyResult_1d0a53ad, jsii.invoke(self, "addToResourcePolicy", [statement]))
+
     @builtins.property
     @jsii.member(jsii_name="methods")
     def methods(self) -> typing.List[Method]:
@@ -36046,6 +36157,12 @@ def _typecheckingstub__8ee391044c8afeacec6635a772559caff651608cf2a1be322b25e001d
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__d9c72e763e6fd8bee0fdc38b4c6d9a51728ddb7d71c8f2cc4723eeecc90240d6(
+    vpc_endpoints: typing.Sequence[_IVpcEndpoint_d8ea9bc3],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__83e0007c5bc1aeac14243c8f05dab576ffb55853642cfe1f4a1352b59dda08cf(
     metric_name: builtins.str,
     *,
@@ -36081,6 +36198,18 @@ def _typecheckingstub__7f2c768d74b0b943c1a251d6140ff29b65485077acf73526ebf83da3d
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__055b7d6b7f5983f0cbe73bf5302adcab621abc6451932928f4fc669ed6ce3182(
+    value: typing.Optional[_PolicyDocument_3ac34393],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__e5b96ed4eaeba0605aea131fd9bd60ab19b56a3504a62607ee5eff63a4b41ae8(
+    statement: _PolicyStatement_0fe33853,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__f8db41d1cbb038cc89af89c87ca398274183966ac93d18298a50a87996e9aab5(
     *,
     cloud_watch_role: typing.Optional[builtins.bool] = None,
@@ -36186,6 +36315,12 @@ def _typecheckingstub__4722b635be09e87466169ef31b6610061f0fa16d1cff99382f0584fde
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a598fa29dde7454edf374298a15d782fc9a7cfb24aea9c673988425532fdfaa8(
+    statement: _PolicyStatement_0fe33853,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__4506705cb637aa3098ad358d76fa29dd7a218f7542020d2e9dbfe8182f9cc797(
     *,
     cloud_watch_role: typing.Optional[builtins.bool] = None,
@@ -36921,6 +37056,12 @@ def _typecheckingstub__c7e66eb05224fabb309270e01184adec5effecc24f4bae236c407a527
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__52663697f28f1fd364df71313e30a1c7fde152016b3381ce552603f8a5dfc54f(
+    statement: _PolicyStatement_0fe33853,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__d2e28fbc4cf23b8af8415c85c3b3fef473c187c8b6a1d16ed48d739acfa4bbed(
     endpoint: _IEndpoint_58fe201a,
     *,