aws-cdk-lib 2.185.0__py3-none-any.whl → 2.187.0__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -1230,6 +1230,33 @@ ec2.VpcEndpointService(self, "EndpointService",
 )
 ```
 
+You can specify which IP address types (IPv4, IPv6, or both) are supported for your VPC endpoint service:
+
+```python
+# network_load_balancer: elbv2.NetworkLoadBalancer
+
+
+ec2.VpcEndpointService(self, "EndpointService",
+    vpc_endpoint_service_load_balancers=[network_load_balancer],
+    # Support both IPv4 and IPv6 connections to the endpoint service
+    supported_ip_address_types=[ec2.IpAddressType.IPV4, ec2.IpAddressType.IPV6
+    ]
+)
+```
+
+You can restrict access to your endpoint service to specific AWS regions:
+
+```python
+# network_load_balancer: elbv2.NetworkLoadBalancer
+
+
+ec2.VpcEndpointService(self, "EndpointService",
+    vpc_endpoint_service_load_balancers=[network_load_balancer],
+    # Allow service consumers from these regions only
+    allowed_regions=["us-east-1", "eu-west-1"]
+)
+```
+
 Endpoint services support private DNS, which makes it easier for clients to connect to your service by automatically setting up DNS in their VPC.
 You can enable private DNS on an endpoint service like so:
 
@@ -2542,6 +2569,25 @@ launch_template = ec2.LaunchTemplate(self, "LaunchTemplate",
 )
 ```
 
+### Placement Group
+
+Specify `placementGroup` to enable the placement group support:
+
+```python
+# instance_type: ec2.InstanceType
+
+
+pg = ec2.PlacementGroup(self, "test-pg",
+    strategy=ec2.PlacementGroupStrategy.SPREAD
+)
+
+ec2.LaunchTemplate(self, "LaunchTemplate",
+    instance_type=instance_type,
+    machine_image=ec2.MachineImage.latest_amazon_linux2023(),
+    placement_group=pg
+)
+```
+
 Please note this feature does not support Launch Configurations.
 
 ## Detailed Monitoring
@@ -2616,7 +2662,15 @@ ec2.PrefixList(self, "PrefixList",
 )
 ```
 
-For more information see [Work with customer-managed prefix lists](https://docs.aws.amazon.com/vpc/latest/userguide/working-with-managed-prefix-lists.html)
+To import AWS-managed prefix list, you can use `PrefixList.fromLookup()`.
+
+```python
+ec2.PrefixList.from_lookup(self, "PrefixListFromName",
+    prefix_list_name="com.amazonaws.global.cloudfront.origin-facing"
+)
+```
+
+For more information see [Work with customer-managed prefix lists](https://docs.aws.amazon.com/vpc/latest/userguide/working-with-managed-prefix-lists.html).
 
 ### IAM instance profile
 
@@ -5786,6 +5840,62 @@ class CfnCapacityReservation(
         '''
         return typing.cast(jsii.Number, jsii.get(self, "attrAvailableInstanceCount"))
 
+    @builtins.property
+    @jsii.member(jsii_name="attrCapacityAllocationSet")
+    def attr_capacity_allocation_set(self) -> _IResolvable_da3f097b:
+        '''
+        :cloudformationAttribute: CapacityAllocationSet
+        '''
+        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrCapacityAllocationSet"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrCapacityReservationArn")
+    def attr_capacity_reservation_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the Capacity Reservation.
+
+        :cloudformationAttribute: CapacityReservationArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrCapacityReservationArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrCapacityReservationFleetId")
+    def attr_capacity_reservation_fleet_id(self) -> builtins.str:
+        '''The ID of the Capacity Reservation Fleet to which the Capacity Reservation belongs.
+
+        Only valid for Capacity Reservations that were created by a Capacity Reservation Fleet.
+
+        :cloudformationAttribute: CapacityReservationFleetId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrCapacityReservationFleetId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrCommitmentInfo")
+    def attr_commitment_info(self) -> _IResolvable_da3f097b:
+        '''
+        :cloudformationAttribute: CommitmentInfo
+        '''
+        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrCommitmentInfo"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrCreateDate")
+    def attr_create_date(self) -> builtins.str:
+        '''The date and time at which the Capacity Reservation was created.
+
+        :cloudformationAttribute: CreateDate
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrCreateDate"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrDeliveryPreference")
+    def attr_delivery_preference(self) -> builtins.str:
+        '''The delivery method for a future-dated Capacity Reservation.
+
+        ``incremental`` indicates that the requested capacity is delivered in addition to any running instances and reserved capacity that you have in your account at the requested date and time.
+
+        :cloudformationAttribute: DeliveryPreference
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrDeliveryPreference"))
+
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:
@@ -5806,6 +5916,54 @@ class CfnCapacityReservation(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrInstanceType"))
 
+    @builtins.property
+    @jsii.member(jsii_name="attrOwnerId")
+    def attr_owner_id(self) -> builtins.str:
+        '''The ID of the AWS account that owns the Capacity Reservation.
+
+        :cloudformationAttribute: OwnerId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrOwnerId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrReservationType")
+    def attr_reservation_type(self) -> builtins.str:
+        '''The type of Capacity Reservation.
+
+        :cloudformationAttribute: ReservationType
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrReservationType"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrStartDate")
+    def attr_start_date(self) -> builtins.str:
+        '''The date and time at which the Capacity Reservation was started.
+
+        :cloudformationAttribute: StartDate
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrStartDate"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrState")
+    def attr_state(self) -> builtins.str:
+        '''The current state of the Capacity Reservation. A Capacity Reservation can be in one of the following states:.
+
+        - ``active`` - The capacity is available for use.
+        - ``expired`` - The Capacity Reservation expired automatically at the date and time specified in your reservation request. The reserved capacity is no longer available for your use.
+        - ``cancelled`` - The Capacity Reservation was canceled. The reserved capacity is no longer available for your use.
+        - ``pending`` - The Capacity Reservation request was successful but the capacity provisioning is still pending.
+        - ``failed`` - The Capacity Reservation request has failed. A request can fail due to request parameters that are not valid, capacity constraints, or instance limit constraints. You can view a failed request for 60 minutes.
+        - ``scheduled`` - ( *Future-dated Capacity Reservations* ) The future-dated Capacity Reservation request was approved and the Capacity Reservation is scheduled for delivery on the requested start date.
+        - ``payment-pending`` - ( *Capacity Blocks* ) The upfront payment has not been processed yet.
+        - ``payment-failed`` - ( *Capacity Blocks* ) The upfront payment was not processed in the 12-hour time frame. Your Capacity Block was released.
+        - ``assessing`` - ( *Future-dated Capacity Reservations* ) Amazon EC2 is assessing your request for a future-dated Capacity Reservation.
+        - ``delayed`` - ( *Future-dated Capacity Reservations* ) Amazon EC2 encountered a delay in provisioning the requested future-dated Capacity Reservation. Amazon EC2 is unable to deliver the requested capacity by the requested start date and time.
+        - ``unsupported`` - ( *Future-dated Capacity Reservations* ) Amazon EC2 can't support the future-dated Capacity Reservation request due to capacity constraints. You can view unsupported requests for 30 days. The Capacity Reservation will not be delivered.
+
+        :cloudformationAttribute: State
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrState"))
+
     @builtins.property
     @jsii.member(jsii_name="attrTenancy")
     def attr_tenancy(self) -> builtins.str:
@@ -6062,6 +6220,153 @@ class CfnCapacityReservation(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "unusedReservationBillingOwnerId", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_ec2.CfnCapacityReservation.CapacityAllocationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"allocation_type": "allocationType", "count": "count"},
+    )
+    class CapacityAllocationProperty:
+        def __init__(
+            self,
+            *,
+            allocation_type: typing.Optional[builtins.str] = None,
+            count: typing.Optional[jsii.Number] = None,
+        ) -> None:
+            '''Information about instance capacity usage for a Capacity Reservation.
+
+            :param allocation_type: The usage type. ``used`` indicates that the instance capacity is in use by instances that are running in the Capacity Reservation.
+            :param count: The amount of instance capacity associated with the usage. For example a value of ``4`` indicates that instance capacity for 4 instances is currently in use.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-capacityreservation-capacityallocation.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_ec2 as ec2
+                
+                capacity_allocation_property = ec2.CfnCapacityReservation.CapacityAllocationProperty(
+                    allocation_type="allocationType",
+                    count=123
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__bb73541f409f83260eb045bf4e0e3879b1c1c509522736f018397f8ac1cf955c)
+                check_type(argname="argument allocation_type", value=allocation_type, expected_type=type_hints["allocation_type"])
+                check_type(argname="argument count", value=count, expected_type=type_hints["count"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if allocation_type is not None:
+                self._values["allocation_type"] = allocation_type
+            if count is not None:
+                self._values["count"] = count
+
+        @builtins.property
+        def allocation_type(self) -> typing.Optional[builtins.str]:
+            '''The usage type.
+
+            ``used`` indicates that the instance capacity is in use by instances that are running in the Capacity Reservation.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-capacityreservation-capacityallocation.html#cfn-ec2-capacityreservation-capacityallocation-allocationtype
+            '''
+            result = self._values.get("allocation_type")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def count(self) -> typing.Optional[jsii.Number]:
+            '''The amount of instance capacity associated with the usage.
+
+            For example a value of ``4`` indicates that instance capacity for 4 instances is currently in use.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-capacityreservation-capacityallocation.html#cfn-ec2-capacityreservation-capacityallocation-count
+            '''
+            result = self._values.get("count")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CapacityAllocationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_ec2.CfnCapacityReservation.CommitmentInfoProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "commitment_end_date": "commitmentEndDate",
+            "committed_instance_count": "committedInstanceCount",
+        },
+    )
+    class CommitmentInfoProperty:
+        def __init__(
+            self,
+            *,
+            commitment_end_date: typing.Optional[builtins.str] = None,
+            committed_instance_count: typing.Optional[jsii.Number] = None,
+        ) -> None:
+            '''Information about your commitment for a future-dated Capacity Reservation.
+
+            :param commitment_end_date: The date and time at which the commitment duration expires, in the ISO8601 format in the UTC time zone ( ``YYYY-MM-DDThh:mm:ss.sssZ`` ). You can't decrease the instance count or cancel the Capacity Reservation before this date and time.
+            :param committed_instance_count: The instance capacity that you committed to when you requested the future-dated Capacity Reservation.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-capacityreservation-commitmentinfo.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_ec2 as ec2
+                
+                commitment_info_property = ec2.CfnCapacityReservation.CommitmentInfoProperty(
+                    commitment_end_date="commitmentEndDate",
+                    committed_instance_count=123
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__3c56a4c8d14f2a52b13c3cf61a95ca1ca01e35305d2313a0778cf6fad31ac4ef)
+                check_type(argname="argument commitment_end_date", value=commitment_end_date, expected_type=type_hints["commitment_end_date"])
+                check_type(argname="argument committed_instance_count", value=committed_instance_count, expected_type=type_hints["committed_instance_count"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if commitment_end_date is not None:
+                self._values["commitment_end_date"] = commitment_end_date
+            if committed_instance_count is not None:
+                self._values["committed_instance_count"] = committed_instance_count
+
+        @builtins.property
+        def commitment_end_date(self) -> typing.Optional[builtins.str]:
+            '''The date and time at which the commitment duration expires, in the ISO8601 format in the UTC time zone ( ``YYYY-MM-DDThh:mm:ss.sssZ`` ). You can't decrease the instance count or cancel the Capacity Reservation before this date and time.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-capacityreservation-commitmentinfo.html#cfn-ec2-capacityreservation-commitmentinfo-commitmentenddate
+            '''
+            result = self._values.get("commitment_end_date")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def committed_instance_count(self) -> typing.Optional[jsii.Number]:
+            '''The instance capacity that you committed to when you requested the future-dated Capacity Reservation.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-capacityreservation-commitmentinfo.html#cfn-ec2-capacityreservation-commitmentinfo-committedinstancecount
+            '''
+            result = self._values.get("committed_instance_count")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CommitmentInfoProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_ec2.CfnCapacityReservation.TagSpecificationProperty",
         jsii_struct_bases=[],
@@ -12138,7 +12443,7 @@ class CfnEC2Fleet(
             :param accelerator_manufacturers: Indicates whether instance types must have accelerators by specific manufacturers. - For instance types with AWS devices, specify ``amazon-web-services`` . - For instance types with AMD devices, specify ``amd`` . - For instance types with Habana devices, specify ``habana`` . - For instance types with NVIDIA devices, specify ``nvidia`` . - For instance types with Xilinx devices, specify ``xilinx`` . Default: Any manufacturer
             :param accelerator_names: The accelerators that must be on the instance type. - For instance types with NVIDIA A10G GPUs, specify ``a10g`` . - For instance types with NVIDIA A100 GPUs, specify ``a100`` . - For instance types with NVIDIA H100 GPUs, specify ``h100`` . - For instance types with AWS Inferentia chips, specify ``inferentia`` . - For instance types with NVIDIA GRID K520 GPUs, specify ``k520`` . - For instance types with NVIDIA K80 GPUs, specify ``k80`` . - For instance types with NVIDIA M60 GPUs, specify ``m60`` . - For instance types with AMD Radeon Pro V520 GPUs, specify ``radeon-pro-v520`` . - For instance types with NVIDIA T4 GPUs, specify ``t4`` . - For instance types with NVIDIA T4G GPUs, specify ``t4g`` . - For instance types with Xilinx VU9P FPGAs, specify ``vu9p`` . - For instance types with NVIDIA V100 GPUs, specify ``v100`` . Default: Any accelerator
             :param accelerator_total_memory_mib: The minimum and maximum amount of total accelerator memory, in MiB. Default: No minimum or maximum limits
-            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . - For instance types with Inference accelerators, specify ``inference`` . Default: Any accelerator type
+            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . Default: Any accelerator type
             :param allowed_instance_types: The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes. You can use strings with one or more wild cards, represented by an asterisk ( ``*`` ), to allow an instance type, size, or generation. The following are examples: ``m5.8xlarge`` , ``c5*.*`` , ``m5a.*`` , ``r*`` , ``*3*`` . For example, if you specify ``c5*`` ,Amazon EC2 will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*`` , Amazon EC2 will allow all the M5a instance types, but not the M5n instance types. .. epigraph:: If you specify ``AllowedInstanceTypes`` , you can't specify ``ExcludedInstanceTypes`` . Default: All instance types
             :param bare_metal: Indicates whether bare metal instance types must be included, excluded, or required. - To include bare metal instance types, specify ``included`` . - To require only bare metal instance types, specify ``required`` . - To exclude bare metal instance types, specify ``excluded`` . Default: ``excluded``
             :param baseline_ebs_bandwidth_mbps: The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see `Amazon EBS–optimized instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html>`_ in the *Amazon EC2 User Guide* . Default: No minimum or maximum limits
@@ -12386,7 +12691,6 @@ class CfnEC2Fleet(
 
             - For instance types with FPGA accelerators, specify ``fpga`` .
             - For instance types with GPU accelerators, specify ``gpu`` .
-            - For instance types with Inference accelerators, specify ``inference`` .
 
             Default: Any accelerator type
 
@@ -26531,7 +26835,7 @@ class CfnLaunchTemplate(
             :param accelerator_manufacturers: Indicates whether instance types must have accelerators by specific manufacturers. - For instance types with AWS devices, specify ``amazon-web-services`` . - For instance types with AMD devices, specify ``amd`` . - For instance types with Habana devices, specify ``habana`` . - For instance types with NVIDIA devices, specify ``nvidia`` . - For instance types with Xilinx devices, specify ``xilinx`` . Default: Any manufacturer
             :param accelerator_names: The accelerators that must be on the instance type. - For instance types with NVIDIA A10G GPUs, specify ``a10g`` . - For instance types with NVIDIA A100 GPUs, specify ``a100`` . - For instance types with NVIDIA H100 GPUs, specify ``h100`` . - For instance types with AWS Inferentia chips, specify ``inferentia`` . - For instance types with NVIDIA GRID K520 GPUs, specify ``k520`` . - For instance types with NVIDIA K80 GPUs, specify ``k80`` . - For instance types with NVIDIA M60 GPUs, specify ``m60`` . - For instance types with AMD Radeon Pro V520 GPUs, specify ``radeon-pro-v520`` . - For instance types with NVIDIA T4 GPUs, specify ``t4`` . - For instance types with NVIDIA T4G GPUs, specify ``t4g`` . - For instance types with Xilinx VU9P FPGAs, specify ``vu9p`` . - For instance types with NVIDIA V100 GPUs, specify ``v100`` . Default: Any accelerator
             :param accelerator_total_memory_mib: The minimum and maximum amount of total accelerator memory, in MiB. Default: No minimum or maximum limits
-            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . - For instance types with Inference accelerators, specify ``inference`` . Default: Any accelerator type
+            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . Default: Any accelerator type
             :param allowed_instance_types: The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes. You can use strings with one or more wild cards, represented by an asterisk ( ``*`` ), to allow an instance type, size, or generation. The following are examples: ``m5.8xlarge`` , ``c5*.*`` , ``m5a.*`` , ``r*`` , ``*3*`` . For example, if you specify ``c5*`` ,Amazon EC2 will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*`` , Amazon EC2 will allow all the M5a instance types, but not the M5n instance types. .. epigraph:: If you specify ``AllowedInstanceTypes`` , you can't specify ``ExcludedInstanceTypes`` . Default: All instance types
             :param bare_metal: Indicates whether bare metal instance types must be included, excluded, or required. - To include bare metal instance types, specify ``included`` . - To require only bare metal instance types, specify ``required`` . - To exclude bare metal instance types, specify ``excluded`` . Default: ``excluded``
             :param baseline_ebs_bandwidth_mbps: The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see `Amazon EBS–optimized instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html>`_ in the *Amazon EC2 User Guide* . Default: No minimum or maximum limits
@@ -26779,7 +27083,6 @@ class CfnLaunchTemplate(
 
             - For instance types with FPGA accelerators, specify ``fpga`` .
             - For instance types with GPU accelerators, specify ``gpu`` .
-            - For instance types with Inference accelerators, specify ``inference`` .
 
             Default: Any accelerator type
 
@@ -29428,8 +29731,9 @@ class CfnLaunchTemplate(
             *,
             bandwidth_weighting: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''
-            :param bandwidth_weighting: Specifies the performance options of your instance or sets it to default.
+            '''Contains settings for the network performance options for the instance.
+
+            :param bandwidth_weighting: Specify the bandwidth weighting option to boost the associated type of baseline bandwidth, as follows:. - **default** - This option uses the standard bandwidth configuration for your instance type. - **vpc-1** - This option boosts your networking baseline bandwidth and reduces your EBS baseline bandwidth. - **ebs-1** - This option boosts your EBS baseline bandwidth and reduces your networking baseline bandwidth.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkperformanceoptions.html
             :exampleMetadata: fixture=_generated
@@ -29453,7 +29757,11 @@ class CfnLaunchTemplate(
 
         @builtins.property
         def bandwidth_weighting(self) -> typing.Optional[builtins.str]:
-            '''Specifies the performance options of your instance or sets it to default.
+            '''Specify the bandwidth weighting option to boost the associated type of baseline bandwidth, as follows:.
+
+            - **default** - This option uses the standard bandwidth configuration for your instance type.
+            - **vpc-1** - This option boosts your networking baseline bandwidth and reduces your EBS baseline bandwidth.
+            - **ebs-1** - This option boosts your EBS baseline bandwidth and reduces your networking baseline bandwidth.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkperformanceoptions.html#cfn-ec2-launchtemplate-networkperformanceoptions-bandwidthweighting
             '''
@@ -45922,7 +46230,7 @@ class CfnSpotFleet(
             :param accelerator_manufacturers: Indicates whether instance types must have accelerators by specific manufacturers. - For instance types with AWS devices, specify ``amazon-web-services`` . - For instance types with AMD devices, specify ``amd`` . - For instance types with Habana devices, specify ``habana`` . - For instance types with NVIDIA devices, specify ``nvidia`` . - For instance types with Xilinx devices, specify ``xilinx`` . Default: Any manufacturer
             :param accelerator_names: The accelerators that must be on the instance type. - For instance types with NVIDIA A10G GPUs, specify ``a10g`` . - For instance types with NVIDIA A100 GPUs, specify ``a100`` . - For instance types with NVIDIA H100 GPUs, specify ``h100`` . - For instance types with AWS Inferentia chips, specify ``inferentia`` . - For instance types with NVIDIA GRID K520 GPUs, specify ``k520`` . - For instance types with NVIDIA K80 GPUs, specify ``k80`` . - For instance types with NVIDIA M60 GPUs, specify ``m60`` . - For instance types with AMD Radeon Pro V520 GPUs, specify ``radeon-pro-v520`` . - For instance types with NVIDIA T4 GPUs, specify ``t4`` . - For instance types with NVIDIA T4G GPUs, specify ``t4g`` . - For instance types with Xilinx VU9P FPGAs, specify ``vu9p`` . - For instance types with NVIDIA V100 GPUs, specify ``v100`` . Default: Any accelerator
             :param accelerator_total_memory_mib: The minimum and maximum amount of total accelerator memory, in MiB. Default: No minimum or maximum limits
-            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . - For instance types with Inference accelerators, specify ``inference`` . Default: Any accelerator type
+            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . Default: Any accelerator type
             :param allowed_instance_types: The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes. You can use strings with one or more wild cards, represented by an asterisk ( ``*`` ), to allow an instance type, size, or generation. The following are examples: ``m5.8xlarge`` , ``c5*.*`` , ``m5a.*`` , ``r*`` , ``*3*`` . For example, if you specify ``c5*`` ,Amazon EC2 will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*`` , Amazon EC2 will allow all the M5a instance types, but not the M5n instance types. .. epigraph:: If you specify ``AllowedInstanceTypes`` , you can't specify ``ExcludedInstanceTypes`` . Default: All instance types
             :param bare_metal: Indicates whether bare metal instance types must be included, excluded, or required. - To include bare metal instance types, specify ``included`` . - To require only bare metal instance types, specify ``required`` . - To exclude bare metal instance types, specify ``excluded`` . Default: ``excluded``
             :param baseline_ebs_bandwidth_mbps: The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see `Amazon EBS–optimized instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html>`_ in the *Amazon EC2 User Guide* . Default: No minimum or maximum limits
@@ -46170,7 +46478,6 @@ class CfnSpotFleet(
 
             - For instance types with FPGA accelerators, specify ``fpga`` .
             - For instance types with GPU accelerators, specify ``gpu`` .
-            - For instance types with Inference accelerators, specify ``inference`` .
 
             Default: Any accelerator type
 
@@ -59710,6 +60017,7 @@ class CfnVPCEndpointService(
             network_load_balancer_arns=["networkLoadBalancerArns"],
             payer_responsibility="payerResponsibility",
             supported_ip_address_types=["supportedIpAddressTypes"],
+            supported_regions=["supportedRegions"],
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -59728,6 +60036,7 @@ class CfnVPCEndpointService(
         network_load_balancer_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
         payer_responsibility: typing.Optional[builtins.str] = None,
         supported_ip_address_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        supported_regions: typing.Optional[typing.Sequence[builtins.str]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
@@ -59738,7 +60047,8 @@ class CfnVPCEndpointService(
         :param gateway_load_balancer_arns: The Amazon Resource Names (ARNs) of the Gateway Load Balancers.
         :param network_load_balancer_arns: The Amazon Resource Names (ARNs) of the Network Load Balancers.
         :param payer_responsibility: The entity that is responsible for the endpoint costs. The default is the endpoint owner. If you set the payer responsibility to the service owner, you cannot set it back to the endpoint owner.
-        :param supported_ip_address_types: Specify which Ip Address types are supported for VPC endpoint service.
+        :param supported_ip_address_types: The supported IP address types. The possible values are ``ipv4`` and ``ipv6`` .
+        :param supported_regions: The Regions from which service consumers can access the service.
         :param tags: The tags to associate with the service.
         '''
         if __debug__:
@@ -59752,6 +60062,7 @@ class CfnVPCEndpointService(
             network_load_balancer_arns=network_load_balancer_arns,
             payer_responsibility=payer_responsibility,
             supported_ip_address_types=supported_ip_address_types,
+            supported_regions=supported_regions,
             tags=tags,
         )
 
@@ -59891,7 +60202,7 @@ class CfnVPCEndpointService(
     @builtins.property
     @jsii.member(jsii_name="supportedIpAddressTypes")
     def supported_ip_address_types(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''Specify which Ip Address types are supported for VPC endpoint service.'''
+        '''The supported IP address types.'''
         return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "supportedIpAddressTypes"))
 
     @supported_ip_address_types.setter
@@ -59904,6 +60215,22 @@ class CfnVPCEndpointService(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "supportedIpAddressTypes", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="supportedRegions")
+    def supported_regions(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''The Regions from which service consumers can access the service.'''
+        return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "supportedRegions"))
+
+    @supported_regions.setter
+    def supported_regions(
+        self,
+        value: typing.Optional[typing.List[builtins.str]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5c4b6c5e3132a3db9ac1919f84f1acb15ff2a21f1f6ba6d102fb4c3ec4c36bc2)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "supportedRegions", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -60124,6 +60451,7 @@ class CfnVPCEndpointServicePermissionsProps:
         "network_load_balancer_arns": "networkLoadBalancerArns",
         "payer_responsibility": "payerResponsibility",
         "supported_ip_address_types": "supportedIpAddressTypes",
+        "supported_regions": "supportedRegions",
         "tags": "tags",
     },
 )
@@ -60137,6 +60465,7 @@ class CfnVPCEndpointServiceProps:
         network_load_balancer_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
         payer_responsibility: typing.Optional[builtins.str] = None,
         supported_ip_address_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        supported_regions: typing.Optional[typing.Sequence[builtins.str]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnVPCEndpointService``.
@@ -60146,7 +60475,8 @@ class CfnVPCEndpointServiceProps:
         :param gateway_load_balancer_arns: The Amazon Resource Names (ARNs) of the Gateway Load Balancers.
         :param network_load_balancer_arns: The Amazon Resource Names (ARNs) of the Network Load Balancers.
         :param payer_responsibility: The entity that is responsible for the endpoint costs. The default is the endpoint owner. If you set the payer responsibility to the service owner, you cannot set it back to the endpoint owner.
-        :param supported_ip_address_types: Specify which Ip Address types are supported for VPC endpoint service.
+        :param supported_ip_address_types: The supported IP address types. The possible values are ``ipv4`` and ``ipv6`` .
+        :param supported_regions: The Regions from which service consumers can access the service.
         :param tags: The tags to associate with the service.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpointservice.html
@@ -60165,6 +60495,7 @@ class CfnVPCEndpointServiceProps:
                 network_load_balancer_arns=["networkLoadBalancerArns"],
                 payer_responsibility="payerResponsibility",
                 supported_ip_address_types=["supportedIpAddressTypes"],
+                supported_regions=["supportedRegions"],
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -60179,6 +60510,7 @@ class CfnVPCEndpointServiceProps:
             check_type(argname="argument network_load_balancer_arns", value=network_load_balancer_arns, expected_type=type_hints["network_load_balancer_arns"])
             check_type(argname="argument payer_responsibility", value=payer_responsibility, expected_type=type_hints["payer_responsibility"])
             check_type(argname="argument supported_ip_address_types", value=supported_ip_address_types, expected_type=type_hints["supported_ip_address_types"])
+            check_type(argname="argument supported_regions", value=supported_regions, expected_type=type_hints["supported_regions"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if acceptance_required is not None:
@@ -60193,6 +60525,8 @@ class CfnVPCEndpointServiceProps:
             self._values["payer_responsibility"] = payer_responsibility
         if supported_ip_address_types is not None:
             self._values["supported_ip_address_types"] = supported_ip_address_types
+        if supported_regions is not None:
+            self._values["supported_regions"] = supported_regions
         if tags is not None:
             self._values["tags"] = tags
 
@@ -60249,13 +60583,24 @@ class CfnVPCEndpointServiceProps:
 
     @builtins.property
     def supported_ip_address_types(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''Specify which Ip Address types are supported for VPC endpoint service.
+        '''The supported IP address types.
+
+        The possible values are ``ipv4`` and ``ipv6`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpointservice.html#cfn-ec2-vpcendpointservice-supportedipaddresstypes
         '''
         result = self._values.get("supported_ip_address_types")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def supported_regions(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''The Regions from which service consumers can access the service.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpointservice.html#cfn-ec2-vpcendpointservice-supportedregions
+        '''
+        result = self._values.get("supported_regions")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''The tags to associate with the service.
@@ -70687,6 +71032,12 @@ class DefaultInstanceTenancy(enum.Enum):
     '''Instances can be launched with any tenancy.'''
     DEDICATED = "DEDICATED"
     '''Any instance launched into the VPC automatically has dedicated tenancy, unless you launch it with the default tenancy.'''
+    HOST = "HOST"
+    '''Instances must be launched on dedicated hosts.
+
+    This provides additional visibility
+    and control over instance placement at the physical host level.
+    '''
 
 
 @jsii.data_type(
@@ -75329,6 +75680,7 @@ class InitFile(
         owner: typing.Optional[builtins.str] = None,
         service_restart_handles: typing.Optional[typing.Sequence["InitServiceRestartHandle"]] = None,
         deploy_time: typing.Optional[builtins.bool] = None,
+        display_name: typing.Optional[builtins.str] = None,
         readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
         source_kms_key: typing.Optional[_IKey_5f11635f] = None,
         asset_hash: typing.Optional[builtins.str] = None,
@@ -75350,6 +75702,7 @@ class InitFile(
         :param owner: The name of the owning user for this file. Not supported for Windows systems. Default: 'root'
         :param service_restart_handles: Restart the given service after this file has been written. Default: - Do not restart any service
         :param deploy_time: Whether or not the asset needs to exist beyond deployment time; i.e. are copied over to a different location and not needed afterwards. Setting this property to true has an impact on the lifecycle of the asset, because we will assume that it is safe to delete after the CloudFormation deployment succeeds. For example, Lambda Function assets are copied over to Lambda during deployment. Therefore, it is not necessary to store the asset in S3, so we consider those deployTime assets. Default: false
+        :param display_name: A display name for this asset. If supplied, the display name will be used in locations where the asset identifier is printed, like in the CLI progress information. If the same asset is added multiple times, the display name of the first occurrence is used. The default is the construct path of the Asset construct, with respect to the enclosing stack. If the asset is produced by a construct helper function (such as ``lambda.Code.fromAsset()``), this will look like ``MyFunction/Code``. We use the stack-relative construct path so that in the common case where you have multiple stacks with the same asset, we won't show something like ``/MyBetaStack/MyFunction/Code`` when you are actually deploying to production. Default: - Stack-relative construct path
         :param readers: A list of principals that should be able to read this asset from S3. You can use ``asset.grantRead(principal)`` to grant read permissions later. Default: - No principals that can read file asset.
         :param source_kms_key: The ARN of the KMS key used to encrypt the handler code. Default: - the default server-side encryption with Amazon S3 managed keys(SSE-S3) key will be used.
         :param asset_hash: Specify a custom hash for this asset. If ``assetHashType`` is set it must be set to ``AssetHashType.CUSTOM``. For consistency, this custom hash will be SHA256 hashed and encoded as hex. The resulting hash will be the asset hash. NOTE: the hash is used in order to identify a specific revision of the asset, and used for optimizing and caching deployment activities related to this asset such as packaging, uploading to Amazon S3, etc. If you chose to customize the hash, you will need to make sure it is updated every time the asset changes, or otherwise it is possible that some deployments will not be invalidated. Default: - based on ``assetHashType``
@@ -75370,6 +75723,7 @@ class InitFile(
             owner=owner,
             service_restart_handles=service_restart_handles,
             deploy_time=deploy_time,
+            display_name=display_name,
             readers=readers,
             source_kms_key=source_kms_key,
             asset_hash=asset_hash,
@@ -76493,6 +76847,7 @@ class InitSource(
         *,
         service_restart_handles: typing.Optional[typing.Sequence[InitServiceRestartHandle]] = None,
         deploy_time: typing.Optional[builtins.bool] = None,
+        display_name: typing.Optional[builtins.str] = None,
         readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
         source_kms_key: typing.Optional[_IKey_5f11635f] = None,
         asset_hash: typing.Optional[builtins.str] = None,
@@ -76508,6 +76863,7 @@ class InitSource(
         :param path: -
         :param service_restart_handles: Restart the given services after this archive has been extracted. Default: - Do not restart any service
         :param deploy_time: Whether or not the asset needs to exist beyond deployment time; i.e. are copied over to a different location and not needed afterwards. Setting this property to true has an impact on the lifecycle of the asset, because we will assume that it is safe to delete after the CloudFormation deployment succeeds. For example, Lambda Function assets are copied over to Lambda during deployment. Therefore, it is not necessary to store the asset in S3, so we consider those deployTime assets. Default: false
+        :param display_name: A display name for this asset. If supplied, the display name will be used in locations where the asset identifier is printed, like in the CLI progress information. If the same asset is added multiple times, the display name of the first occurrence is used. The default is the construct path of the Asset construct, with respect to the enclosing stack. If the asset is produced by a construct helper function (such as ``lambda.Code.fromAsset()``), this will look like ``MyFunction/Code``. We use the stack-relative construct path so that in the common case where you have multiple stacks with the same asset, we won't show something like ``/MyBetaStack/MyFunction/Code`` when you are actually deploying to production. Default: - Stack-relative construct path
         :param readers: A list of principals that should be able to read this asset from S3. You can use ``asset.grantRead(principal)`` to grant read permissions later. Default: - No principals that can read file asset.
         :param source_kms_key: The ARN of the KMS key used to encrypt the handler code. Default: - the default server-side encryption with Amazon S3 managed keys(SSE-S3) key will be used.
         :param asset_hash: Specify a custom hash for this asset. If ``assetHashType`` is set it must be set to ``AssetHashType.CUSTOM``. For consistency, this custom hash will be SHA256 hashed and encoded as hex. The resulting hash will be the asset hash. NOTE: the hash is used in order to identify a specific revision of the asset, and used for optimizing and caching deployment activities related to this asset such as packaging, uploading to Amazon S3, etc. If you chose to customize the hash, you will need to make sure it is updated every time the asset changes, or otherwise it is possible that some deployments will not be invalidated. Default: - based on ``assetHashType``
@@ -76524,6 +76880,7 @@ class InitSource(
         options = InitSourceAssetOptions(
             service_restart_handles=service_restart_handles,
             deploy_time=deploy_time,
+            display_name=display_name,
             readers=readers,
             source_kms_key=source_kms_key,
             asset_hash=asset_hash,
@@ -81439,6 +81796,31 @@ class InterfaceVpcEndpointService(
         return typing.cast(typing.Optional[builtins.bool], jsii.get(self, "privateDnsDefault"))
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.IpAddressType")
+class IpAddressType(enum.Enum):
+    '''IP address types supported for VPC endpoint service.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # network_load_balancer: elbv2.NetworkLoadBalancer
+        
+        
+        ec2.VpcEndpointService(self, "EndpointService",
+            vpc_endpoint_service_load_balancers=[network_load_balancer],
+            # Support both IPv4 and IPv6 connections to the endpoint service
+            supported_ip_address_types=[ec2.IpAddressType.IPV4, ec2.IpAddressType.IPV6
+            ]
+        )
+    '''
+
+    IPV4 = "IPV4"
+    '''ipv4 address type.'''
+    IPV6 = "IPV6"
+    '''ipv6 address type.'''
+
+
 class IpAddresses(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_ec2.IpAddresses"):
     '''An abstract Provider of IpAddresses.
 
@@ -82146,6 +82528,7 @@ class LaunchTemplate(
         launch_template_name: typing.Optional[builtins.str] = None,
         machine_image: typing.Optional[IMachineImage] = None,
         nitro_enclave_enabled: typing.Optional[builtins.bool] = None,
+        placement_group: typing.Optional[IPlacementGroup] = None,
         require_imdsv2: typing.Optional[builtins.bool] = None,
         role: typing.Optional[_IRole_235f5d8e] = None,
         security_group: typing.Optional[ISecurityGroup] = None,
@@ -82176,6 +82559,7 @@ class LaunchTemplate(
         :param launch_template_name: Name for this launch template. Default: Automatically generated name
         :param machine_image: The AMI that will be used by instances. Default: - This Launch Template does not specify a default AMI.
         :param nitro_enclave_enabled: If this parameter is set to true, the instance is enabled for AWS Nitro Enclaves; otherwise, it is not enabled for AWS Nitro Enclaves. Default: - Enablement of Nitro enclaves is not specified in the launch template; defaulting to false.
+        :param placement_group: The placement group that you want to launch the instance into. Default: - no placement group will be used for this launch template.
         :param require_imdsv2: Whether IMDSv2 should be required on launched instances. Default: - false
         :param role: An IAM role to associate with the instance profile that is used by instances. The role must be assumable by the service principal ``ec2.amazonaws.com``. Note: You can provide an instanceProfile or a role, but not both. Default: - No new role is created.
         :param security_group: Security group to assign to instances created with the launch template. Default: No security group is assigned.
@@ -82208,6 +82592,7 @@ class LaunchTemplate(
             launch_template_name=launch_template_name,
             machine_image=machine_image,
             nitro_enclave_enabled=nitro_enclave_enabled,
+            placement_group=placement_group,
             require_imdsv2=require_imdsv2,
             role=role,
             security_group=security_group,
@@ -82517,6 +82902,7 @@ class LaunchTemplateHttpTokens(enum.Enum):
         "launch_template_name": "launchTemplateName",
         "machine_image": "machineImage",
         "nitro_enclave_enabled": "nitroEnclaveEnabled",
+        "placement_group": "placementGroup",
         "require_imdsv2": "requireImdsv2",
         "role": "role",
         "security_group": "securityGroup",
@@ -82549,6 +82935,7 @@ class LaunchTemplateProps:
         launch_template_name: typing.Optional[builtins.str] = None,
         machine_image: typing.Optional[IMachineImage] = None,
         nitro_enclave_enabled: typing.Optional[builtins.bool] = None,
+        placement_group: typing.Optional[IPlacementGroup] = None,
         require_imdsv2: typing.Optional[builtins.bool] = None,
         role: typing.Optional[_IRole_235f5d8e] = None,
         security_group: typing.Optional[ISecurityGroup] = None,
@@ -82578,6 +82965,7 @@ class LaunchTemplateProps:
         :param launch_template_name: Name for this launch template. Default: Automatically generated name
         :param machine_image: The AMI that will be used by instances. Default: - This Launch Template does not specify a default AMI.
         :param nitro_enclave_enabled: If this parameter is set to true, the instance is enabled for AWS Nitro Enclaves; otherwise, it is not enabled for AWS Nitro Enclaves. Default: - Enablement of Nitro enclaves is not specified in the launch template; defaulting to false.
+        :param placement_group: The placement group that you want to launch the instance into. Default: - no placement group will be used for this launch template.
         :param require_imdsv2: Whether IMDSv2 should be required on launched instances. Default: - false
         :param role: An IAM role to associate with the instance profile that is used by instances. The role must be assumable by the service principal ``ec2.amazonaws.com``. Note: You can provide an instanceProfile or a role, but not both. Default: - No new role is created.
         :param security_group: Security group to assign to instances created with the launch template. Default: No security group is assigned.
@@ -82630,6 +83018,7 @@ class LaunchTemplateProps:
             check_type(argname="argument launch_template_name", value=launch_template_name, expected_type=type_hints["launch_template_name"])
             check_type(argname="argument machine_image", value=machine_image, expected_type=type_hints["machine_image"])
             check_type(argname="argument nitro_enclave_enabled", value=nitro_enclave_enabled, expected_type=type_hints["nitro_enclave_enabled"])
+            check_type(argname="argument placement_group", value=placement_group, expected_type=type_hints["placement_group"])
             check_type(argname="argument require_imdsv2", value=require_imdsv2, expected_type=type_hints["require_imdsv2"])
             check_type(argname="argument role", value=role, expected_type=type_hints["role"])
             check_type(argname="argument security_group", value=security_group, expected_type=type_hints["security_group"])
@@ -82677,6 +83066,8 @@ class LaunchTemplateProps:
             self._values["machine_image"] = machine_image
         if nitro_enclave_enabled is not None:
             self._values["nitro_enclave_enabled"] = nitro_enclave_enabled
+        if placement_group is not None:
+            self._values["placement_group"] = placement_group
         if require_imdsv2 is not None:
             self._values["require_imdsv2"] = require_imdsv2
         if role is not None:
@@ -82916,6 +83307,15 @@ class LaunchTemplateProps:
         result = self._values.get("nitro_enclave_enabled")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def placement_group(self) -> typing.Optional[IPlacementGroup]:
+        '''The placement group that you want to launch the instance into.
+
+        :default: - no placement group will be used for this launch template.
+        '''
+        result = self._values.get("placement_group")
+        return typing.cast(typing.Optional[IPlacementGroup], result)
+
     @builtins.property
     def require_imdsv2(self) -> typing.Optional[builtins.bool]:
         '''Whether IMDSv2 should be required on launched instances.
@@ -85958,17 +86358,20 @@ class Peer(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_ec2.Peer"):
 
     Example::
 
-        # instance_type: ec2.InstanceType
-        
+        # vpc: ec2.Vpc
         
-        provider = ec2.NatProvider.instance_v2(
-            instance_type=instance_type,
-            default_allowed_traffic=ec2.NatTrafficDirection.OUTBOUND_ONLY
-        )
-        ec2.Vpc(self, "TheVPC",
-            nat_gateway_provider=provider
+        cluster = msk.Cluster(self, "Cluster",
+            cluster_name="myCluster",
+            kafka_version=msk.KafkaVersion.V3_8_X,
+            vpc=vpc
         )
-        provider.connections.allow_from(ec2.Peer.ipv4("1.2.3.4/8"), ec2.Port.HTTP)
+        
+        cluster.connections.allow_from(
+            ec2.Peer.ipv4("1.2.3.4/8"),
+            ec2.Port.tcp(2181))
+        cluster.connections.allow_from(
+            ec2.Peer.ipv4("1.2.3.4/8"),
+            ec2.Port.tcp(9094))
     '''
 
     def __init__(self) -> None:
@@ -86752,8 +87155,8 @@ class PrefixList(
 
     Example::
 
-        ec2.PrefixList(self, "EmptyPrefixList",
-            max_entries=100
+        ec2.PrefixList.from_lookup(self, "PrefixListFromName",
+            prefix_list_name="com.amazonaws.global.cloudfront.origin-facing"
         )
     '''
 
@@ -86788,6 +87191,37 @@ class PrefixList(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromLookup")
+    @builtins.classmethod
+    def from_lookup(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        prefix_list_name: builtins.str,
+        address_family: typing.Optional[AddressFamily] = None,
+        owner_id: typing.Optional[builtins.str] = None,
+    ) -> IPrefixList:
+        '''Look up prefix list by name.
+
+        :param scope: -
+        :param id: -
+        :param prefix_list_name: The name of the managed prefix list.
+        :param address_family: The address family of the managed prefix list. Default: - Don't filter on addressFamily
+        :param owner_id: The ID of the AWS account that owns the managed prefix list. Default: - Don't filter on ownerId
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__deb5818afac672a99613bc37d186a04e6a9cd2bae585fd43a7bbbe7b2c4de0e6)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        options = PrefixListLookupOptions(
+            prefix_list_name=prefix_list_name,
+            address_family=address_family,
+            owner_id=owner_id,
+        )
+
+        return typing.cast(IPrefixList, jsii.sinvoke(cls, "fromLookup", [scope, id, options]))
+
     @jsii.member(jsii_name="fromPrefixListId")
     @builtins.classmethod
     def from_prefix_list_id(
@@ -86855,6 +87289,91 @@ class PrefixList(
         return typing.cast(jsii.Number, jsii.get(self, "version"))
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_ec2.PrefixListLookupOptions",
+    jsii_struct_bases=[],
+    name_mapping={
+        "prefix_list_name": "prefixListName",
+        "address_family": "addressFamily",
+        "owner_id": "ownerId",
+    },
+)
+class PrefixListLookupOptions:
+    def __init__(
+        self,
+        *,
+        prefix_list_name: builtins.str,
+        address_family: typing.Optional[AddressFamily] = None,
+        owner_id: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''Properties for looking up an existing managed prefix list.
+
+        :param prefix_list_name: The name of the managed prefix list.
+        :param address_family: The address family of the managed prefix list. Default: - Don't filter on addressFamily
+        :param owner_id: The ID of the AWS account that owns the managed prefix list. Default: - Don't filter on ownerId
+
+        :exampleMetadata: infused
+
+        Example::
+
+            # alb: elbv2.ApplicationLoadBalancer
+            
+            
+            cf_origin_facing = ec2.PrefixList.from_lookup(self, "CloudFrontOriginFacing",
+                prefix_list_name="com.amazonaws.global.cloudfront.origin-facing"
+            )
+            alb.connections.allow_from(ec2.Peer.prefix_list(cf_origin_facing.prefix_list_id), ec2.Port.HTTP)
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4353f67b97f73eaeb1fbd94df299a14d0727dbc31a3319f8619e9b6d60f5c1bb)
+            check_type(argname="argument prefix_list_name", value=prefix_list_name, expected_type=type_hints["prefix_list_name"])
+            check_type(argname="argument address_family", value=address_family, expected_type=type_hints["address_family"])
+            check_type(argname="argument owner_id", value=owner_id, expected_type=type_hints["owner_id"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "prefix_list_name": prefix_list_name,
+        }
+        if address_family is not None:
+            self._values["address_family"] = address_family
+        if owner_id is not None:
+            self._values["owner_id"] = owner_id
+
+    @builtins.property
+    def prefix_list_name(self) -> builtins.str:
+        '''The name of the managed prefix list.'''
+        result = self._values.get("prefix_list_name")
+        assert result is not None, "Required property 'prefix_list_name' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def address_family(self) -> typing.Optional[AddressFamily]:
+        '''The address family of the managed prefix list.
+
+        :default: - Don't filter on addressFamily
+        '''
+        result = self._values.get("address_family")
+        return typing.cast(typing.Optional[AddressFamily], result)
+
+    @builtins.property
+    def owner_id(self) -> typing.Optional[builtins.str]:
+        '''The ID of the AWS account that owns the managed prefix list.
+
+        :default: - Don't filter on ownerId
+        '''
+        result = self._values.get("owner_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "PrefixListLookupOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.PrefixListOptions",
     jsii_struct_bases=[],
@@ -92239,15 +92758,14 @@ class VpcEndpointService(
 
     Example::
 
-        # network_load_balancer1: elbv2.NetworkLoadBalancer
-        # network_load_balancer2: elbv2.NetworkLoadBalancer
+        # network_load_balancer: elbv2.NetworkLoadBalancer
         
         
         ec2.VpcEndpointService(self, "EndpointService",
-            vpc_endpoint_service_load_balancers=[network_load_balancer1, network_load_balancer2],
-            acceptance_required=True,
-            allowed_principals=[iam.ArnPrincipal("arn:aws:iam::123456789012:root")],
-            contributor_insights=True
+            vpc_endpoint_service_load_balancers=[network_load_balancer],
+            # Support both IPv4 and IPv6 connections to the endpoint service
+            supported_ip_address_types=[ec2.IpAddressType.IPV4, ec2.IpAddressType.IPV6
+            ]
         )
     '''
 
@@ -92259,7 +92777,9 @@ class VpcEndpointService(
         vpc_endpoint_service_load_balancers: typing.Sequence[IVpcEndpointServiceLoadBalancer],
         acceptance_required: typing.Optional[builtins.bool] = None,
         allowed_principals: typing.Optional[typing.Sequence[_ArnPrincipal_d31ca6bc]] = None,
+        allowed_regions: typing.Optional[typing.Sequence[builtins.str]] = None,
         contributor_insights: typing.Optional[builtins.bool] = None,
+        supported_ip_address_types: typing.Optional[typing.Sequence[IpAddressType]] = None,
     ) -> None:
         '''
         :param scope: -
@@ -92267,7 +92787,9 @@ class VpcEndpointService(
         :param vpc_endpoint_service_load_balancers: One or more load balancers to host the VPC Endpoint Service.
         :param acceptance_required: Whether requests from service consumers to connect to the service through an endpoint must be accepted. Default: true
         :param allowed_principals: IAM users, IAM roles, or AWS accounts to allow inbound connections from. These principals can connect to your service using VPC endpoints. Takes a list of one or more ArnPrincipal. Default: - no principals
+        :param allowed_regions: The Regions from which service consumers can access the service. Default: - No Region restrictions
         :param contributor_insights: Indicates whether to enable the built-in Contributor Insights rules provided by AWS PrivateLink. Default: false
+        :param supported_ip_address_types: Specify which IP address types are supported for VPC endpoint service. Default: - No specific IP address types configured
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e9a177a308c941d9422cff7194d8a56d967004d3230efd826dc934ef5358129e)
@@ -92277,7 +92799,9 @@ class VpcEndpointService(
             vpc_endpoint_service_load_balancers=vpc_endpoint_service_load_balancers,
             acceptance_required=acceptance_required,
             allowed_principals=allowed_principals,
+            allowed_regions=allowed_regions,
             contributor_insights=contributor_insights,
+            supported_ip_address_types=supported_ip_address_types,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -92343,7 +92867,9 @@ class VpcEndpointService(
         "vpc_endpoint_service_load_balancers": "vpcEndpointServiceLoadBalancers",
         "acceptance_required": "acceptanceRequired",
         "allowed_principals": "allowedPrincipals",
+        "allowed_regions": "allowedRegions",
         "contributor_insights": "contributorInsights",
+        "supported_ip_address_types": "supportedIpAddressTypes",
     },
 )
 class VpcEndpointServiceProps:
@@ -92353,28 +92879,31 @@ class VpcEndpointServiceProps:
         vpc_endpoint_service_load_balancers: typing.Sequence[IVpcEndpointServiceLoadBalancer],
         acceptance_required: typing.Optional[builtins.bool] = None,
         allowed_principals: typing.Optional[typing.Sequence[_ArnPrincipal_d31ca6bc]] = None,
+        allowed_regions: typing.Optional[typing.Sequence[builtins.str]] = None,
         contributor_insights: typing.Optional[builtins.bool] = None,
+        supported_ip_address_types: typing.Optional[typing.Sequence[IpAddressType]] = None,
     ) -> None:
         '''Construction properties for a VpcEndpointService.
 
         :param vpc_endpoint_service_load_balancers: One or more load balancers to host the VPC Endpoint Service.
         :param acceptance_required: Whether requests from service consumers to connect to the service through an endpoint must be accepted. Default: true
         :param allowed_principals: IAM users, IAM roles, or AWS accounts to allow inbound connections from. These principals can connect to your service using VPC endpoints. Takes a list of one or more ArnPrincipal. Default: - no principals
+        :param allowed_regions: The Regions from which service consumers can access the service. Default: - No Region restrictions
         :param contributor_insights: Indicates whether to enable the built-in Contributor Insights rules provided by AWS PrivateLink. Default: false
+        :param supported_ip_address_types: Specify which IP address types are supported for VPC endpoint service. Default: - No specific IP address types configured
 
         :exampleMetadata: infused
 
         Example::
 
-            # network_load_balancer1: elbv2.NetworkLoadBalancer
-            # network_load_balancer2: elbv2.NetworkLoadBalancer
+            # network_load_balancer: elbv2.NetworkLoadBalancer
             
             
             ec2.VpcEndpointService(self, "EndpointService",
-                vpc_endpoint_service_load_balancers=[network_load_balancer1, network_load_balancer2],
-                acceptance_required=True,
-                allowed_principals=[iam.ArnPrincipal("arn:aws:iam::123456789012:root")],
-                contributor_insights=True
+                vpc_endpoint_service_load_balancers=[network_load_balancer],
+                # Support both IPv4 and IPv6 connections to the endpoint service
+                supported_ip_address_types=[ec2.IpAddressType.IPV4, ec2.IpAddressType.IPV6
+                ]
             )
         '''
         if __debug__:
@@ -92382,7 +92911,9 @@ class VpcEndpointServiceProps:
             check_type(argname="argument vpc_endpoint_service_load_balancers", value=vpc_endpoint_service_load_balancers, expected_type=type_hints["vpc_endpoint_service_load_balancers"])
             check_type(argname="argument acceptance_required", value=acceptance_required, expected_type=type_hints["acceptance_required"])
             check_type(argname="argument allowed_principals", value=allowed_principals, expected_type=type_hints["allowed_principals"])
+            check_type(argname="argument allowed_regions", value=allowed_regions, expected_type=type_hints["allowed_regions"])
             check_type(argname="argument contributor_insights", value=contributor_insights, expected_type=type_hints["contributor_insights"])
+            check_type(argname="argument supported_ip_address_types", value=supported_ip_address_types, expected_type=type_hints["supported_ip_address_types"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "vpc_endpoint_service_load_balancers": vpc_endpoint_service_load_balancers,
         }
@@ -92390,8 +92921,12 @@ class VpcEndpointServiceProps:
             self._values["acceptance_required"] = acceptance_required
         if allowed_principals is not None:
             self._values["allowed_principals"] = allowed_principals
+        if allowed_regions is not None:
+            self._values["allowed_regions"] = allowed_regions
         if contributor_insights is not None:
             self._values["contributor_insights"] = contributor_insights
+        if supported_ip_address_types is not None:
+            self._values["supported_ip_address_types"] = supported_ip_address_types
 
     @builtins.property
     def vpc_endpoint_service_load_balancers(
@@ -92425,6 +92960,15 @@ class VpcEndpointServiceProps:
         result = self._values.get("allowed_principals")
         return typing.cast(typing.Optional[typing.List[_ArnPrincipal_d31ca6bc]], result)
 
+    @builtins.property
+    def allowed_regions(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''The Regions from which service consumers can access the service.
+
+        :default: - No Region restrictions
+        '''
+        result = self._values.get("allowed_regions")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
     @builtins.property
     def contributor_insights(self) -> typing.Optional[builtins.bool]:
         '''Indicates whether to enable the built-in Contributor Insights rules provided by AWS PrivateLink.
@@ -92434,6 +92978,15 @@ class VpcEndpointServiceProps:
         result = self._values.get("contributor_insights")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def supported_ip_address_types(self) -> typing.Optional[typing.List[IpAddressType]]:
+        '''Specify which IP address types are supported for VPC endpoint service.
+
+        :default: - No specific IP address types configured
+        '''
+        result = self._values.get("supported_ip_address_types")
+        return typing.cast(typing.Optional[typing.List[IpAddressType]], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -92463,6 +93016,12 @@ class VpcEndpointType(enum.Enum):
     A gateway endpoint is a gateway that is a target for a specified route in
     your route table, used for traffic destined to a supported AWS service.
     '''
+    GATEWAYLOADBALANCER = "GATEWAYLOADBALANCER"
+    '''A Gateway Load Balancer (GWLB) endpoint is an entry/exit point in your VPC that allows traffic to flow between your VPC and Gateway Load Balancer appliances (like firewalls, intrusion detection systems, or other security appliances) deployed in a separate VPC.'''
+    SERVICENETWORK = "SERVICENETWORK"
+    '''A ServiceNetwork VPC endpoint is a feature to connect your VPC to an AWS Cloud WAN (Wide Area Network) or Amazon VPC Lattice service.'''
+    RESOURCE = "RESOURCE"
+    '''A Resource VPC endpoint in AWS is specifically designed to connect to AWS Resource Access Manager (RAM) service privately within your VPC, without requiring access through the public internet.'''
 
 
 @jsii.data_type(
@@ -96790,6 +97349,7 @@ class InitCommand(
         "follow_symlinks": "followSymlinks",
         "ignore_mode": "ignoreMode",
         "deploy_time": "deployTime",
+        "display_name": "displayName",
         "readers": "readers",
         "source_kms_key": "sourceKMSKey",
     },
@@ -96810,6 +97370,7 @@ class InitFileAssetOptions(InitFileOptions, _AssetOptions_2aa69621):
         follow_symlinks: typing.Optional[_SymlinkFollowMode_047ec1f6] = None,
         ignore_mode: typing.Optional[_IgnoreMode_655a98e8] = None,
         deploy_time: typing.Optional[builtins.bool] = None,
+        display_name: typing.Optional[builtins.str] = None,
         readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
         source_kms_key: typing.Optional[_IKey_5f11635f] = None,
     ) -> None:
@@ -96827,6 +97388,7 @@ class InitFileAssetOptions(InitFileOptions, _AssetOptions_2aa69621):
         :param follow_symlinks: A strategy for how to handle symlinks. Default: SymlinkFollowMode.NEVER
         :param ignore_mode: The ignore behavior to use for ``exclude`` patterns. Default: IgnoreMode.GLOB
         :param deploy_time: Whether or not the asset needs to exist beyond deployment time; i.e. are copied over to a different location and not needed afterwards. Setting this property to true has an impact on the lifecycle of the asset, because we will assume that it is safe to delete after the CloudFormation deployment succeeds. For example, Lambda Function assets are copied over to Lambda during deployment. Therefore, it is not necessary to store the asset in S3, so we consider those deployTime assets. Default: false
+        :param display_name: A display name for this asset. If supplied, the display name will be used in locations where the asset identifier is printed, like in the CLI progress information. If the same asset is added multiple times, the display name of the first occurrence is used. The default is the construct path of the Asset construct, with respect to the enclosing stack. If the asset is produced by a construct helper function (such as ``lambda.Code.fromAsset()``), this will look like ``MyFunction/Code``. We use the stack-relative construct path so that in the common case where you have multiple stacks with the same asset, we won't show something like ``/MyBetaStack/MyFunction/Code`` when you are actually deploying to production. Default: - Stack-relative construct path
         :param readers: A list of principals that should be able to read this asset from S3. You can use ``asset.grantRead(principal)`` to grant read permissions later. Default: - No principals that can read file asset.
         :param source_kms_key: The ARN of the KMS key used to encrypt the handler code. Default: - the default server-side encryption with Amazon S3 managed keys(SSE-S3) key will be used.
 
@@ -96878,6 +97440,7 @@ class InitFileAssetOptions(InitFileOptions, _AssetOptions_2aa69621):
                     working_directory="workingDirectory"
                 ),
                 deploy_time=False,
+                display_name="displayName",
                 exclude=["exclude"],
                 follow_symlinks=cdk.SymlinkFollowMode.NEVER,
                 group="group",
@@ -96905,6 +97468,7 @@ class InitFileAssetOptions(InitFileOptions, _AssetOptions_2aa69621):
             check_type(argname="argument follow_symlinks", value=follow_symlinks, expected_type=type_hints["follow_symlinks"])
             check_type(argname="argument ignore_mode", value=ignore_mode, expected_type=type_hints["ignore_mode"])
             check_type(argname="argument deploy_time", value=deploy_time, expected_type=type_hints["deploy_time"])
+            check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
             check_type(argname="argument readers", value=readers, expected_type=type_hints["readers"])
             check_type(argname="argument source_kms_key", value=source_kms_key, expected_type=type_hints["source_kms_key"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -96932,6 +97496,8 @@ class InitFileAssetOptions(InitFileOptions, _AssetOptions_2aa69621):
             self._values["ignore_mode"] = ignore_mode
         if deploy_time is not None:
             self._values["deploy_time"] = deploy_time
+        if display_name is not None:
+            self._values["display_name"] = display_name
         if readers is not None:
             self._values["readers"] = readers
         if source_kms_key is not None:
@@ -97098,6 +97664,30 @@ class InitFileAssetOptions(InitFileOptions, _AssetOptions_2aa69621):
         result = self._values.get("deploy_time")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def display_name(self) -> typing.Optional[builtins.str]:
+        '''A display name for this asset.
+
+        If supplied, the display name will be used in locations where the asset
+        identifier is printed, like in the CLI progress information. If the same
+        asset is added multiple times, the display name of the first occurrence is
+        used.
+
+        The default is the construct path of the Asset construct, with respect to
+        the enclosing stack. If the asset is produced by a construct helper
+        function (such as ``lambda.Code.fromAsset()``), this will look like
+        ``MyFunction/Code``.
+
+        We use the stack-relative construct path so that in the common case where
+        you have multiple stacks with the same asset, we won't show something like
+        ``/MyBetaStack/MyFunction/Code`` when you are actually deploying to
+        production.
+
+        :default: - Stack-relative construct path
+        '''
+        result = self._values.get("display_name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def readers(self) -> typing.Optional[typing.List[_IGrantable_71c4f5de]]:
         '''A list of principals that should be able to read this asset from S3.
@@ -97142,6 +97732,7 @@ class InitFileAssetOptions(InitFileOptions, _AssetOptions_2aa69621):
         "follow_symlinks": "followSymlinks",
         "ignore_mode": "ignoreMode",
         "deploy_time": "deployTime",
+        "display_name": "displayName",
         "readers": "readers",
         "source_kms_key": "sourceKMSKey",
     },
@@ -97158,6 +97749,7 @@ class InitSourceAssetOptions(InitSourceOptions, _AssetOptions_2aa69621):
         follow_symlinks: typing.Optional[_SymlinkFollowMode_047ec1f6] = None,
         ignore_mode: typing.Optional[_IgnoreMode_655a98e8] = None,
         deploy_time: typing.Optional[builtins.bool] = None,
+        display_name: typing.Optional[builtins.str] = None,
         readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
         source_kms_key: typing.Optional[_IKey_5f11635f] = None,
     ) -> None:
@@ -97171,6 +97763,7 @@ class InitSourceAssetOptions(InitSourceOptions, _AssetOptions_2aa69621):
         :param follow_symlinks: A strategy for how to handle symlinks. Default: SymlinkFollowMode.NEVER
         :param ignore_mode: The ignore behavior to use for ``exclude`` patterns. Default: IgnoreMode.GLOB
         :param deploy_time: Whether or not the asset needs to exist beyond deployment time; i.e. are copied over to a different location and not needed afterwards. Setting this property to true has an impact on the lifecycle of the asset, because we will assume that it is safe to delete after the CloudFormation deployment succeeds. For example, Lambda Function assets are copied over to Lambda during deployment. Therefore, it is not necessary to store the asset in S3, so we consider those deployTime assets. Default: false
+        :param display_name: A display name for this asset. If supplied, the display name will be used in locations where the asset identifier is printed, like in the CLI progress information. If the same asset is added multiple times, the display name of the first occurrence is used. The default is the construct path of the Asset construct, with respect to the enclosing stack. If the asset is produced by a construct helper function (such as ``lambda.Code.fromAsset()``), this will look like ``MyFunction/Code``. We use the stack-relative construct path so that in the common case where you have multiple stacks with the same asset, we won't show something like ``/MyBetaStack/MyFunction/Code`` when you are actually deploying to production. Default: - Stack-relative construct path
         :param readers: A list of principals that should be able to read this asset from S3. You can use ``asset.grantRead(principal)`` to grant read permissions later. Default: - No principals that can read file asset.
         :param source_kms_key: The ARN of the KMS key used to encrypt the handler code. Default: - the default server-side encryption with Amazon S3 managed keys(SSE-S3) key will be used.
 
@@ -97221,6 +97814,7 @@ class InitSourceAssetOptions(InitSourceOptions, _AssetOptions_2aa69621):
                     working_directory="workingDirectory"
                 ),
                 deploy_time=False,
+                display_name="displayName",
                 exclude=["exclude"],
                 follow_symlinks=cdk.SymlinkFollowMode.NEVER,
                 ignore_mode=cdk.IgnoreMode.GLOB,
@@ -97241,6 +97835,7 @@ class InitSourceAssetOptions(InitSourceOptions, _AssetOptions_2aa69621):
             check_type(argname="argument follow_symlinks", value=follow_symlinks, expected_type=type_hints["follow_symlinks"])
             check_type(argname="argument ignore_mode", value=ignore_mode, expected_type=type_hints["ignore_mode"])
             check_type(argname="argument deploy_time", value=deploy_time, expected_type=type_hints["deploy_time"])
+            check_type(argname="argument display_name", value=display_name, expected_type=type_hints["display_name"])
             check_type(argname="argument readers", value=readers, expected_type=type_hints["readers"])
             check_type(argname="argument source_kms_key", value=source_kms_key, expected_type=type_hints["source_kms_key"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -97260,6 +97855,8 @@ class InitSourceAssetOptions(InitSourceOptions, _AssetOptions_2aa69621):
             self._values["ignore_mode"] = ignore_mode
         if deploy_time is not None:
             self._values["deploy_time"] = deploy_time
+        if display_name is not None:
+            self._values["display_name"] = display_name
         if readers is not None:
             self._values["readers"] = readers
         if source_kms_key is not None:
@@ -97377,6 +97974,30 @@ class InitSourceAssetOptions(InitSourceOptions, _AssetOptions_2aa69621):
         result = self._values.get("deploy_time")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def display_name(self) -> typing.Optional[builtins.str]:
+        '''A display name for this asset.
+
+        If supplied, the display name will be used in locations where the asset
+        identifier is printed, like in the CLI progress information. If the same
+        asset is added multiple times, the display name of the first occurrence is
+        used.
+
+        The default is the construct path of the Asset construct, with respect to
+        the enclosing stack. If the asset is produced by a construct helper
+        function (such as ``lambda.Code.fromAsset()``), this will look like
+        ``MyFunction/Code``.
+
+        We use the stack-relative construct path so that in the common case where
+        you have multiple stacks with the same asset, we won't show something like
+        ``/MyBetaStack/MyFunction/Code`` when you are actually deploying to
+        production.
+
+        :default: - Stack-relative construct path
+        '''
+        result = self._values.get("display_name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def readers(self) -> typing.Optional[typing.List[_IGrantable_71c4f5de]]:
         '''A list of principals that should be able to read this asset from S3.
@@ -100211,6 +100832,7 @@ __all__ = [
     "InterfaceVpcEndpointOptions",
     "InterfaceVpcEndpointProps",
     "InterfaceVpcEndpointService",
+    "IpAddressType",
     "IpAddresses",
     "IpProtocol",
     "Ipv6Addresses",
@@ -100260,6 +100882,7 @@ __all__ = [
     "Port",
     "PortProps",
     "PrefixList",
+    "PrefixListLookupOptions",
     "PrefixListOptions",
     "PrefixListProps",
     "PrivateSubnet",
@@ -100728,6 +101351,22 @@ def _typecheckingstub__2a09cfe18a64a35ca3513da8b832d14a3961e5101708c3d59880377b4
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__bb73541f409f83260eb045bf4e0e3879b1c1c509522736f018397f8ac1cf955c(
+    *,
+    allocation_type: typing.Optional[builtins.str] = None,
+    count: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3c56a4c8d14f2a52b13c3cf61a95ca1ca01e35305d2313a0778cf6fad31ac4ef(
+    *,
+    commitment_end_date: typing.Optional[builtins.str] = None,
+    committed_instance_count: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__578daf872c6424406c4ac67bfb16e1a373fb40f41078950b64a62c991d0be846(
     *,
     resource_type: typing.Optional[builtins.str] = None,
@@ -108470,6 +109109,7 @@ def _typecheckingstub__bd65bb2d0beb1d62ef8b72a33a352ac48e00600bc2b025bdec06b82cf
     network_load_balancer_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
     payer_responsibility: typing.Optional[builtins.str] = None,
     supported_ip_address_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    supported_regions: typing.Optional[typing.Sequence[builtins.str]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -108523,6 +109163,12 @@ def _typecheckingstub__4f3f2000badada7fa5b32f7a5144ba0ad0a0da831f8211c47464b99d0
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__5c4b6c5e3132a3db9ac1919f84f1acb15ff2a21f1f6ba6d102fb4c3ec4c36bc2(
+    value: typing.Optional[typing.List[builtins.str]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__fb88e38ee31fea753761176490a0c4f49435705e0e51b6d055979684ea151b42(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
@@ -108579,6 +109225,7 @@ def _typecheckingstub__0924bdc7dd965ab8320d62e573fa88bcec434cb586b2ba9e4f2916169
     network_load_balancer_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
     payer_responsibility: typing.Optional[builtins.str] = None,
     supported_ip_address_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    supported_regions: typing.Optional[typing.Sequence[builtins.str]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -110475,6 +111122,7 @@ def _typecheckingstub__164f7ae4723652c2e5c3189a870d0dbd16f8bec14d0e807d648248a60
     owner: typing.Optional[builtins.str] = None,
     service_restart_handles: typing.Optional[typing.Sequence[InitServiceRestartHandle]] = None,
     deploy_time: typing.Optional[builtins.bool] = None,
+    display_name: typing.Optional[builtins.str] = None,
     readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
     source_kms_key: typing.Optional[_IKey_5f11635f] = None,
     asset_hash: typing.Optional[builtins.str] = None,
@@ -110723,6 +111371,7 @@ def _typecheckingstub__28af50587b7c2068b2cb49dbac75ce38a6ffdaf070d2c430abde336ae
     *,
     service_restart_handles: typing.Optional[typing.Sequence[InitServiceRestartHandle]] = None,
     deploy_time: typing.Optional[builtins.bool] = None,
+    display_name: typing.Optional[builtins.str] = None,
     readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
     source_kms_key: typing.Optional[_IKey_5f11635f] = None,
     asset_hash: typing.Optional[builtins.str] = None,
@@ -111108,6 +111757,7 @@ def _typecheckingstub__544aef11081ec87047935491f75a3d5bc9d5075de77f96969bd2ffd1a
     launch_template_name: typing.Optional[builtins.str] = None,
     machine_image: typing.Optional[IMachineImage] = None,
     nitro_enclave_enabled: typing.Optional[builtins.bool] = None,
+    placement_group: typing.Optional[IPlacementGroup] = None,
     require_imdsv2: typing.Optional[builtins.bool] = None,
     role: typing.Optional[_IRole_235f5d8e] = None,
     security_group: typing.Optional[ISecurityGroup] = None,
@@ -111166,6 +111816,7 @@ def _typecheckingstub__e2ebb1bf0fbb2f9e894169a610cd9fb7cc3f827d34d3a10351bd2f517
     launch_template_name: typing.Optional[builtins.str] = None,
     machine_image: typing.Optional[IMachineImage] = None,
     nitro_enclave_enabled: typing.Optional[builtins.bool] = None,
+    placement_group: typing.Optional[IPlacementGroup] = None,
     require_imdsv2: typing.Optional[builtins.bool] = None,
     role: typing.Optional[_IRole_235f5d8e] = None,
     security_group: typing.Optional[ISecurityGroup] = None,
@@ -111569,6 +112220,17 @@ def _typecheckingstub__a8acc7e3b44d925ae96c4cd41872cf18233bdd11aba643610749ed9a4
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__deb5818afac672a99613bc37d186a04e6a9cd2bae585fd43a7bbbe7b2c4de0e6(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    prefix_list_name: builtins.str,
+    address_family: typing.Optional[AddressFamily] = None,
+    owner_id: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__11d084123507c2ab32a82e79ad64d9ff7d0962d3562cc06f04b8e900b3c6622b(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -111577,6 +112239,15 @@ def _typecheckingstub__11d084123507c2ab32a82e79ad64d9ff7d0962d3562cc06f04b8e900b
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__4353f67b97f73eaeb1fbd94df299a14d0727dbc31a3319f8619e9b6d60f5c1bb(
+    *,
+    prefix_list_name: builtins.str,
+    address_family: typing.Optional[AddressFamily] = None,
+    owner_id: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7cc34528909d71054422fc4b6e3439757c430d31f6f33a0af82b4c5b61e57e19(
     *,
     max_entries: typing.Optional[jsii.Number] = None,
@@ -112308,7 +112979,9 @@ def _typecheckingstub__e9a177a308c941d9422cff7194d8a56d967004d3230efd826dc934ef5
     vpc_endpoint_service_load_balancers: typing.Sequence[IVpcEndpointServiceLoadBalancer],
     acceptance_required: typing.Optional[builtins.bool] = None,
     allowed_principals: typing.Optional[typing.Sequence[_ArnPrincipal_d31ca6bc]] = None,
+    allowed_regions: typing.Optional[typing.Sequence[builtins.str]] = None,
     contributor_insights: typing.Optional[builtins.bool] = None,
+    supported_ip_address_types: typing.Optional[typing.Sequence[IpAddressType]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -112318,7 +112991,9 @@ def _typecheckingstub__c8d3e17059165270b27192911c5b63d78564836ce9d6a1d2e41f5d272
     vpc_endpoint_service_load_balancers: typing.Sequence[IVpcEndpointServiceLoadBalancer],
     acceptance_required: typing.Optional[builtins.bool] = None,
     allowed_principals: typing.Optional[typing.Sequence[_ArnPrincipal_d31ca6bc]] = None,
+    allowed_regions: typing.Optional[typing.Sequence[builtins.str]] = None,
     contributor_insights: typing.Optional[builtins.bool] = None,
+    supported_ip_address_types: typing.Optional[typing.Sequence[IpAddressType]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -112776,6 +113451,7 @@ def _typecheckingstub__6ce391dd6a64744f1d308a93bd2b78efee46c104a775f9153a5171d8a
     follow_symlinks: typing.Optional[_SymlinkFollowMode_047ec1f6] = None,
     ignore_mode: typing.Optional[_IgnoreMode_655a98e8] = None,
     deploy_time: typing.Optional[builtins.bool] = None,
+    display_name: typing.Optional[builtins.str] = None,
     readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
     source_kms_key: typing.Optional[_IKey_5f11635f] = None,
 ) -> None:
@@ -112792,6 +113468,7 @@ def _typecheckingstub__f3d9778b6f3d55d750d385b361f8381c51ee484d3c8920175605233fb
     follow_symlinks: typing.Optional[_SymlinkFollowMode_047ec1f6] = None,
     ignore_mode: typing.Optional[_IgnoreMode_655a98e8] = None,
     deploy_time: typing.Optional[builtins.bool] = None,
+    display_name: typing.Optional[builtins.str] = None,
     readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
     source_kms_key: typing.Optional[_IKey_5f11635f] = None,
 ) -> None: