aws-cdk-lib 2.187.0__py3-none-any.whl → 2.189.0__py3-none-any.whl

aws_cdk/__init__.py

@@ -3879,6 +3879,7 @@ class CfnAutoScalingReplacingUpdate:
     jsii_struct_bases=[],
     name_mapping={
         "max_batch_size": "maxBatchSize",
+        "min_active_instances_percent": "minActiveInstancesPercent",
         "min_instances_in_service": "minInstancesInService",
         "min_successful_instances_percent": "minSuccessfulInstancesPercent",
         "pause_time": "pauseTime",
@@ -3891,6 +3892,7 @@ class CfnAutoScalingRollingUpdate:
         self,
         *,
         max_batch_size: typing.Optional[jsii.Number] = None,
+        min_active_instances_percent: typing.Optional[jsii.Number] = None,
         min_instances_in_service: typing.Optional[jsii.Number] = None,
         min_successful_instances_percent: typing.Optional[jsii.Number] = None,
         pause_time: typing.Optional[builtins.str] = None,
@@ -3903,6 +3905,7 @@ class CfnAutoScalingRollingUpdate:
         group in batches or all at once.
 
         :param max_batch_size: Specifies the maximum number of instances that AWS CloudFormation updates.
+        :param min_active_instances_percent: Specifies the percentage of instances in an Auto Scaling group that must remain in service while AWS CloudFormation updates old instances. You can specify a value from 0 to 100. AWS CloudFormation rounds to the nearest tenth of a percent. For example, if you update five instances with a minimum active percentage of 50, three instances must remain in service.
         :param min_instances_in_service: Specifies the minimum number of instances that must be in service within the Auto Scaling group while AWS CloudFormation updates old instances.
         :param min_successful_instances_percent: Specifies the percentage of instances in an Auto Scaling rolling update that must signal success for an update to succeed. You can specify a value from 0 to 100. AWS CloudFormation rounds to the nearest tenth of a percent. For example, if you update five instances with a minimum successful percentage of 50, three instances must signal success. If an instance doesn't send a signal within the time specified in the PauseTime property, AWS CloudFormation assumes that the instance wasn't updated. If you specify this property, you must also enable the WaitOnResourceSignals and PauseTime properties.
         :param pause_time: The amount of time that AWS CloudFormation pauses after making a change to a batch of instances to give those instances time to start software applications. For example, you might need to specify PauseTime when scaling up the number of instances in an Auto Scaling group. If you enable the WaitOnResourceSignals property, PauseTime is the amount of time that AWS CloudFormation should wait for the Auto Scaling group to receive the required number of valid signals from added or replaced instances. If the PauseTime is exceeded before the Auto Scaling group receives the required number of signals, the update fails. For best results, specify a time period that gives your applications sufficient time to get started. If the update needs to be rolled back, a short PauseTime can cause the rollback to fail. Specify PauseTime in the ISO8601 duration format (in the format PT#H#M#S, where each # is the number of hours, minutes, and seconds, respectively). The maximum PauseTime is one hour (PT1H).
@@ -3919,6 +3922,7 @@ class CfnAutoScalingRollingUpdate:
             
             cfn_auto_scaling_rolling_update = cdk.CfnAutoScalingRollingUpdate(
                 max_batch_size=123,
+                min_active_instances_percent=123,
                 min_instances_in_service=123,
                 min_successful_instances_percent=123,
                 pause_time="pauseTime",
@@ -3929,6 +3933,7 @@ class CfnAutoScalingRollingUpdate:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__085b6d44b1c6b74e8060adbd78e13b1a188913a88389f19dce989d64cd5d0b7b)
             check_type(argname="argument max_batch_size", value=max_batch_size, expected_type=type_hints["max_batch_size"])
+            check_type(argname="argument min_active_instances_percent", value=min_active_instances_percent, expected_type=type_hints["min_active_instances_percent"])
             check_type(argname="argument min_instances_in_service", value=min_instances_in_service, expected_type=type_hints["min_instances_in_service"])
             check_type(argname="argument min_successful_instances_percent", value=min_successful_instances_percent, expected_type=type_hints["min_successful_instances_percent"])
             check_type(argname="argument pause_time", value=pause_time, expected_type=type_hints["pause_time"])
@@ -3937,6 +3942,8 @@ class CfnAutoScalingRollingUpdate:
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if max_batch_size is not None:
             self._values["max_batch_size"] = max_batch_size
+        if min_active_instances_percent is not None:
+            self._values["min_active_instances_percent"] = min_active_instances_percent
         if min_instances_in_service is not None:
             self._values["min_instances_in_service"] = min_instances_in_service
         if min_successful_instances_percent is not None:
@@ -3954,6 +3961,16 @@ class CfnAutoScalingRollingUpdate:
         result = self._values.get("max_batch_size")
         return typing.cast(typing.Optional[jsii.Number], result)
 
+    @builtins.property
+    def min_active_instances_percent(self) -> typing.Optional[jsii.Number]:
+        '''Specifies the percentage of instances in an Auto Scaling group that must remain in service while AWS CloudFormation updates old instances.
+
+        You can specify a value from 0 to 100. AWS CloudFormation rounds to the nearest tenth of a percent.
+        For example, if you update five instances with a minimum active percentage of 50, three instances must remain in service.
+        '''
+        result = self._values.get("min_active_instances_percent")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
     @builtins.property
     def min_instances_in_service(self) -> typing.Optional[jsii.Number]:
         '''Specifies the minimum number of instances that must be in service within the Auto Scaling group while AWS CloudFormation updates old instances.'''
@@ -10194,6 +10211,7 @@ class CfnUpdatePolicy:
                 ),
                 auto_scaling_rolling_update=cdk.CfnAutoScalingRollingUpdate(
                     max_batch_size=123,
+                    min_active_instances_percent=123,
                     min_instances_in_service=123,
                     min_successful_instances_percent=123,
                     pause_time="pauseTime",
@@ -32659,7 +32677,7 @@ class CfnStack(CfnResource, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.CfnS
     You must acknowledge IAM capabilities for nested stacks that contain IAM resources. Also, verify that you have cancel update stack permissions, which is required if an update rolls back. For more information about IAM and CloudFormation , see `Controlling access with AWS Identity and Access Management <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html>`_ in the *AWS CloudFormation User Guide* .
     .. epigraph::
 
-       A subset of ``AWS::CloudFormation::Stack`` resource type properties listed below are available to customers using CloudFormation , AWS CDK , and AWS Cloud Control API to configure.
+       A subset of ``AWS::CloudFormation::Stack`` resource type properties listed below are available to customers using CloudFormation , AWS CDK , and Cloud Control  to configure.
 
        - ``NotificationARNs``
        - ``Parameters``
@@ -32667,7 +32685,7 @@ class CfnStack(CfnResource, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.CfnS
        - ``TemplateURL``
        - ``TimeoutInMinutes``
 
-       These properties can be configured only when using AWS Cloud Control API . This is because the below properties are set by the parent stack, and thus cannot be configured using CloudFormation or AWS CDK but only AWS Cloud Control API .
+       These properties can be configured only when using Cloud Control  . This is because the below properties are set by the parent stack, and thus cannot be configured using CloudFormation or AWS CDK but only Cloud Control  .
 
        - ``Capabilities``
        - ``Description``
@@ -32682,7 +32700,7 @@ class CfnStack(CfnResource, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.CfnS
 
        Customers that configure ``AWS::CloudFormation::Stack`` using CloudFormation and AWS CDK can do so for nesting a CloudFormation stack as a resource in their top-level template.
 
-       These read-only properties can be accessed only when using AWS Cloud Control API .
+       These read-only properties can be accessed only when using Cloud Control  .
 
        - ``ChangeSetId``
        - ``CreationTime``
@@ -37300,6 +37318,7 @@ __all__ = [
     "aws_dms",
     "aws_docdb",
     "aws_docdbelastic",
+    "aws_dsql",
     "aws_dynamodb",
     "aws_ec2",
     "aws_ecr",
@@ -37596,6 +37615,7 @@ from . import aws_dlm
 from . import aws_dms
 from . import aws_docdb
 from . import aws_docdbelastic
+from . import aws_dsql
 from . import aws_dynamodb
 from . import aws_ec2
 from . import aws_ecr
@@ -38082,6 +38102,7 @@ def _typecheckingstub__64a4624c19dc262f58fbe1c1e7fe44bc86dfef800d569565b2a5f863d
 def _typecheckingstub__085b6d44b1c6b74e8060adbd78e13b1a188913a88389f19dce989d64cd5d0b7b(
     *,
     max_batch_size: typing.Optional[jsii.Number] = None,
+    min_active_instances_percent: typing.Optional[jsii.Number] = None,
     min_instances_in_service: typing.Optional[jsii.Number] = None,
     min_successful_instances_percent: typing.Optional[jsii.Number] = None,
     pause_time: typing.Optional[builtins.str] = None,

aws_cdk/_jsii/__init__.py

@@ -34,7 +34,7 @@ import aws_cdk.cloud_assembly_schema._jsii
 import constructs._jsii
 
 __jsii_assembly__ = jsii.JSIIAssembly.load(
-    "aws-cdk-lib", "2.187.0", __name__[0:-6], "aws-cdk-lib@2.187.0.jsii.tgz"
+    "aws-cdk-lib", "2.189.0", __name__[0:-6], "aws-cdk-lib@2.189.0.jsii.tgz"
 )
 
 __all__ = [

aws_cdk/aws_amplify/__init__.py

@@ -187,7 +187,7 @@ class CfnApp(
         :param basic_auth_config: The credentials for basic authorization for an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for an Amplify app.
         :param cache_config: The cache configuration for the Amplify app. If you don't specify the cache configuration ``type`` , Amplify uses the default ``AMPLIFY_MANAGED`` setting.
-        :param compute_role_arn: 
+        :param compute_role_arn: The Amazon Resource Name (ARN) of the IAM role for an SSR app. The Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
         :param custom_headers: The custom HTTP headers for an Amplify app.
         :param custom_rules: The custom rewrite and redirect rules for an Amplify app.
         :param description: The description of the Amplify app.
@@ -398,6 +398,7 @@ class CfnApp(
     @builtins.property
     @jsii.member(jsii_name="computeRoleArn")
     def compute_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the IAM role for an SSR app.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "computeRoleArn"))
 
     @compute_role_arn.setter
@@ -1192,7 +1193,7 @@ class CfnAppProps:
         :param basic_auth_config: The credentials for basic authorization for an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for an Amplify app.
         :param cache_config: The cache configuration for the Amplify app. If you don't specify the cache configuration ``type`` , Amplify uses the default ``AMPLIFY_MANAGED`` setting.
-        :param compute_role_arn: 
+        :param compute_role_arn: The Amazon Resource Name (ARN) of the IAM role for an SSR app. The Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
         :param custom_headers: The custom HTTP headers for an Amplify app.
         :param custom_rules: The custom rewrite and redirect rules for an Amplify app.
         :param description: The description of the Amplify app.
@@ -1403,7 +1404,10 @@ class CfnAppProps:
 
     @builtins.property
     def compute_role_arn(self) -> typing.Optional[builtins.str]:
-        '''
+        '''The Amazon Resource Name (ARN) of the IAM role for an SSR app.
+
+        The Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-app.html#cfn-amplify-app-computerolearn
         '''
         result = self._values.get("compute_role_arn")
@@ -1615,12 +1619,12 @@ class CfnBranch(
         :param backend: The backend for a ``Branch`` of an Amplify app. Use for a backend created from an AWS CloudFormation stack. This field is available to Amplify Gen 2 apps only. When you deploy an application with Amplify Gen 2, you provision the app's backend infrastructure using Typescript code.
         :param basic_auth_config: The basic authorization credentials for a branch of an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for the branch.
-        :param compute_role_arn: 
+        :param compute_role_arn: The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app. The SSR Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
         :param description: The description for the branch that is part of an Amplify app.
         :param enable_auto_build: Enables auto building for the branch.
         :param enable_performance_mode: Enables performance mode for the branch. Performance mode optimizes for faster hosting performance by keeping content cached at the edge for a longer interval. When performance mode is enabled, hosting configuration or code changes can take up to 10 minutes to roll out.
         :param enable_pull_request_preview: Specifies whether Amplify Hosting creates a preview for each pull request that is made for this branch. If this property is enabled, Amplify deploys your app to a unique preview URL after each pull request is opened. Development and QA teams can use this preview to test the pull request before it's merged into a production or integration branch. To provide backend support for your preview, Amplify automatically provisions a temporary backend environment that it deletes when the pull request is closed. If you want to specify a dedicated backend environment for your previews, use the ``PullRequestEnvironmentName`` property. For more information, see `Web Previews <https://docs.aws.amazon.com/amplify/latest/userguide/pr-previews.html>`_ in the *AWS Amplify Hosting User Guide* .
-        :param enable_skew_protection: 
+        :param enable_skew_protection: Specifies whether the skew protection feature is enabled for the branch. Deployment skew protection is available to Amplify applications to eliminate version skew issues between client and servers in web applications. When you apply skew protection to a branch, you can ensure that your clients always interact with the correct version of server-side assets, regardless of when a deployment occurs. For more information about skew protection, see `Skew protection for Amplify deployments <https://docs.aws.amazon.com/amplify/latest/userguide/skew-protection.html>`_ in the *Amplify User Guide* .
         :param environment_variables: The environment variables for the branch.
         :param framework: The framework for the branch.
         :param pull_request_environment_name: If pull request previews are enabled for this branch, you can use this property to specify a dedicated backend environment for your previews. For example, you could specify an environment named ``prod`` , ``test`` , or ``dev`` that you initialized with the Amplify CLI and mapped to this branch. To enable pull request previews, set the ``EnablePullRequestPreview`` property to ``true`` . If you don't specify an environment, Amplify Hosting provides backend support for each preview by automatically provisioning a temporary backend environment. Amplify Hosting deletes this environment when the pull request is closed. For more information about creating backend environments, see `Feature Branch Deployments and Team Workflows <https://docs.aws.amazon.com/amplify/latest/userguide/multi-environments.html>`_ in the *AWS Amplify Hosting User Guide* .
@@ -1792,6 +1796,7 @@ class CfnBranch(
     @builtins.property
     @jsii.member(jsii_name="computeRoleArn")
     def compute_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "computeRoleArn"))
 
     @compute_role_arn.setter
@@ -1873,6 +1878,7 @@ class CfnBranch(
     def enable_skew_protection(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''Specifies whether the skew protection feature is enabled for the branch.'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "enableSkewProtection"))
 
     @enable_skew_protection.setter
@@ -2223,12 +2229,12 @@ class CfnBranchProps:
         :param backend: The backend for a ``Branch`` of an Amplify app. Use for a backend created from an AWS CloudFormation stack. This field is available to Amplify Gen 2 apps only. When you deploy an application with Amplify Gen 2, you provision the app's backend infrastructure using Typescript code.
         :param basic_auth_config: The basic authorization credentials for a branch of an Amplify app. You must base64-encode the authorization credentials and provide them in the format ``user:password`` .
         :param build_spec: The build specification (build spec) for the branch.
-        :param compute_role_arn: 
+        :param compute_role_arn: The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app. The SSR Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
         :param description: The description for the branch that is part of an Amplify app.
         :param enable_auto_build: Enables auto building for the branch.
         :param enable_performance_mode: Enables performance mode for the branch. Performance mode optimizes for faster hosting performance by keeping content cached at the edge for a longer interval. When performance mode is enabled, hosting configuration or code changes can take up to 10 minutes to roll out.
         :param enable_pull_request_preview: Specifies whether Amplify Hosting creates a preview for each pull request that is made for this branch. If this property is enabled, Amplify deploys your app to a unique preview URL after each pull request is opened. Development and QA teams can use this preview to test the pull request before it's merged into a production or integration branch. To provide backend support for your preview, Amplify automatically provisions a temporary backend environment that it deletes when the pull request is closed. If you want to specify a dedicated backend environment for your previews, use the ``PullRequestEnvironmentName`` property. For more information, see `Web Previews <https://docs.aws.amazon.com/amplify/latest/userguide/pr-previews.html>`_ in the *AWS Amplify Hosting User Guide* .
-        :param enable_skew_protection: 
+        :param enable_skew_protection: Specifies whether the skew protection feature is enabled for the branch. Deployment skew protection is available to Amplify applications to eliminate version skew issues between client and servers in web applications. When you apply skew protection to a branch, you can ensure that your clients always interact with the correct version of server-side assets, regardless of when a deployment occurs. For more information about skew protection, see `Skew protection for Amplify deployments <https://docs.aws.amazon.com/amplify/latest/userguide/skew-protection.html>`_ in the *Amplify User Guide* .
         :param environment_variables: The environment variables for the branch.
         :param framework: The framework for the branch.
         :param pull_request_environment_name: If pull request previews are enabled for this branch, you can use this property to specify a dedicated backend environment for your previews. For example, you could specify an environment named ``prod`` , ``test`` , or ``dev`` that you initialized with the Amplify CLI and mapped to this branch. To enable pull request previews, set the ``EnablePullRequestPreview`` property to ``true`` . If you don't specify an environment, Amplify Hosting provides backend support for each preview by automatically provisioning a temporary backend environment. Amplify Hosting deletes this environment when the pull request is closed. For more information about creating backend environments, see `Feature Branch Deployments and Team Workflows <https://docs.aws.amazon.com/amplify/latest/userguide/multi-environments.html>`_ in the *AWS Amplify Hosting User Guide* .
@@ -2387,7 +2393,10 @@ class CfnBranchProps:
 
     @builtins.property
     def compute_role_arn(self) -> typing.Optional[builtins.str]:
-        '''
+        '''The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app.
+
+        The SSR Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see `Adding an SSR Compute role <https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html>`_ in the *Amplify User Guide* .
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.html#cfn-amplify-branch-computerolearn
         '''
         result = self._values.get("compute_role_arn")
@@ -2447,7 +2456,10 @@ class CfnBranchProps:
     def enable_skew_protection(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''
+        '''Specifies whether the skew protection feature is enabled for the branch.
+
+        Deployment skew protection is available to Amplify applications to eliminate version skew issues between client and servers in web applications. When you apply skew protection to a branch, you can ensure that your clients always interact with the correct version of server-side assets, regardless of when a deployment occurs. For more information about skew protection, see `Skew protection for Amplify deployments <https://docs.aws.amazon.com/amplify/latest/userguide/skew-protection.html>`_ in the *Amplify User Guide* .
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.html#cfn-amplify-branch-enableskewprotection
         '''
         result = self._values.get("enable_skew_protection")

aws_cdk/aws_apigateway/__init__.py

@@ -7693,6 +7693,8 @@ class CfnDomainName(
 ):
     '''The ``AWS::ApiGateway::DomainName`` resource specifies a public custom domain name for your API in API Gateway.
 
+    To create a custom domain name for private APIs, use `AWS::ApiGateway::DomainV2 <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html>`_ .
+
     You can use a custom domain name to provide a URL that's more intuitive and easier to recall. For more information about using custom domain names, see `Set up Custom Domain Name for an API in API Gateway <https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-custom-domains.html>`_ in the *API Gateway Developer Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html
@@ -7745,7 +7747,7 @@ class CfnDomainName(
         :param id: Construct identifier for this resource (unique in its scope).
         :param certificate_arn: The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name. AWS Certificate Manager is the only supported source.
         :param domain_name: The custom domain name as an API host name, for example, ``my-api.example.com`` .
-        :param endpoint_configuration: The endpoint configuration of this DomainName showing the endpoint types of the domain name.
+        :param endpoint_configuration: The endpoint configuration of this DomainName showing the endpoint types and IP address types of the domain name.
         :param mutual_tls_authentication: The mutual TLS authentication configuration for a custom domain name. If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API.
         :param ownership_verification_certificate_arn: The ARN of the public certificate issued by ACM to validate ownership of your custom domain. Only required when configuring mutual TLS and using an ACM imported or private CA certificate ARN as the RegionalCertificateArn.
         :param regional_certificate_arn: The reference to an AWS -managed certificate that will be used for validating the regional domain name. AWS Certificate Manager is the only supported source.
@@ -7885,7 +7887,7 @@ class CfnDomainName(
     def endpoint_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomainName.EndpointConfigurationProperty"]]:
-        '''The endpoint configuration of this DomainName showing the endpoint types of the domain name.'''
+        '''The endpoint configuration of this DomainName showing the endpoint types and IP address types of the domain name.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomainName.EndpointConfigurationProperty"]], jsii.get(self, "endpointConfiguration"))
 
     @endpoint_configuration.setter
@@ -7983,11 +7985,11 @@ class CfnDomainName(
             ip_address_type: typing.Optional[builtins.str] = None,
             types: typing.Optional[typing.Sequence[builtins.str]] = None,
         ) -> None:
-            '''The ``EndpointConfiguration`` property type specifies the endpoint types of an Amazon API Gateway domain name.
+            '''The ``EndpointConfiguration`` property type specifies the endpoint types and IP address types of an Amazon API Gateway domain name.
 
             ``EndpointConfiguration`` is a property of the `AWS::ApiGateway::DomainName <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html>`_ resource.
 
-            :param ip_address_type: 
+            :param ip_address_type: The IP address types that can invoke this DomainName. Use ``ipv4`` to allow only IPv4 addresses to invoke this DomainName, or use ``dualstack`` to allow both IPv4 and IPv6 addresses to invoke this DomainName. For the ``PRIVATE`` endpoint type, only ``dualstack`` is supported.
             :param types: A list of endpoint types of an API (RestApi) or its custom domain name (DomainName). For an edge-optimized API and its custom domain name, the endpoint type is ``"EDGE"`` . For a regional API and its custom domain name, the endpoint type is ``REGIONAL`` . For a private API, the endpoint type is ``PRIVATE`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-domainname-endpointconfiguration.html
@@ -8016,7 +8018,10 @@ class CfnDomainName(
 
         @builtins.property
         def ip_address_type(self) -> typing.Optional[builtins.str]:
-            '''
+            '''The IP address types that can invoke this DomainName.
+
+            Use ``ipv4`` to allow only IPv4 addresses to invoke this DomainName, or use ``dualstack`` to allow both IPv4 and IPv6 addresses to invoke this DomainName. For the ``PRIVATE`` endpoint type, only ``dualstack`` is supported.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-domainname-endpointconfiguration.html#cfn-apigateway-domainname-endpointconfiguration-ipaddresstype
             '''
             result = self._values.get("ip_address_type")
@@ -8444,7 +8449,7 @@ class CfnDomainNameProps:
 
         :param certificate_arn: The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name. AWS Certificate Manager is the only supported source.
         :param domain_name: The custom domain name as an API host name, for example, ``my-api.example.com`` .
-        :param endpoint_configuration: The endpoint configuration of this DomainName showing the endpoint types of the domain name.
+        :param endpoint_configuration: The endpoint configuration of this DomainName showing the endpoint types and IP address types of the domain name.
         :param mutual_tls_authentication: The mutual TLS authentication configuration for a custom domain name. If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API.
         :param ownership_verification_certificate_arn: The ARN of the public certificate issued by ACM to validate ownership of your custom domain. Only required when configuring mutual TLS and using an ACM imported or private CA certificate ARN as the RegionalCertificateArn.
         :param regional_certificate_arn: The reference to an AWS -managed certificate that will be used for validating the regional domain name. AWS Certificate Manager is the only supported source.
@@ -8532,7 +8537,7 @@ class CfnDomainNameProps:
     def endpoint_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainName.EndpointConfigurationProperty]]:
-        '''The endpoint configuration of this DomainName showing the endpoint types of the domain name.
+        '''The endpoint configuration of this DomainName showing the endpoint types and IP address types of the domain name.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-endpointconfiguration
         '''
@@ -8662,7 +8667,7 @@ class CfnDomainNameV2(
         :param id: Construct identifier for this resource (unique in its scope).
         :param certificate_arn: The reference to an AWS -managed certificate that will be used by the private endpoint for this domain name. AWS Certificate Manager is the only supported source.
         :param domain_name: Represents a custom domain name as a user-friendly host name of an API (RestApi).
-        :param endpoint_configuration: The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.
+        :param endpoint_configuration: The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has and the IP address types that can invoke it.
         :param policy: A stringified JSON policy document that applies to the ``execute-api`` service for this DomainName regardless of the caller and Method configuration. You can use ``Fn::ToJsonString`` to enter your ``policy`` . For more information, see `Fn::ToJsonString <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html>`_ .
         :param security_policy: The Transport Layer Security (TLS) version + cipher suite for this DomainName. Only ``TLS_1_2`` is supported.
         :param tags: The collection of tags. Each tag element is associated with a given resource.
@@ -8772,7 +8777,7 @@ class CfnDomainNameV2(
     def endpoint_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomainNameV2.EndpointConfigurationProperty"]]:
-        '''The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.'''
+        '''The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has and the IP address types that can invoke it.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDomainNameV2.EndpointConfigurationProperty"]], jsii.get(self, "endpointConfiguration"))
 
     @endpoint_configuration.setter
@@ -8835,7 +8840,7 @@ class CfnDomainNameV2(
             *,
             types: typing.Optional[typing.Sequence[builtins.str]] = None,
         ) -> None:
-            '''The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.
+            '''The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has and the IP address types that can invoke it.
 
             :param types: A list of endpoint types of an API (RestApi) or its custom domain name (DomainName). For an edge-optimized API and its custom domain name, the endpoint type is ``"EDGE"`` . For a regional API and its custom domain name, the endpoint type is ``REGIONAL`` . For a private API, the endpoint type is ``PRIVATE`` .
 
@@ -8909,7 +8914,7 @@ class CfnDomainNameV2Props:
 
         :param certificate_arn: The reference to an AWS -managed certificate that will be used by the private endpoint for this domain name. AWS Certificate Manager is the only supported source.
         :param domain_name: Represents a custom domain name as a user-friendly host name of an API (RestApi).
-        :param endpoint_configuration: The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.
+        :param endpoint_configuration: The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has and the IP address types that can invoke it.
         :param policy: A stringified JSON policy document that applies to the ``execute-api`` service for this DomainName regardless of the caller and Method configuration. You can use ``Fn::ToJsonString`` to enter your ``policy`` . For more information, see `Fn::ToJsonString <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html>`_ .
         :param security_policy: The Transport Layer Security (TLS) version + cipher suite for this DomainName. Only ``TLS_1_2`` is supported.
         :param tags: The collection of tags. Each tag element is associated with a given resource.
@@ -8985,7 +8990,7 @@ class CfnDomainNameV2Props:
     def endpoint_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDomainNameV2.EndpointConfigurationProperty]]:
-        '''The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.
+        '''The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has and the IP address types that can invoke it.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html#cfn-apigateway-domainnamev2-endpointconfiguration
         '''
@@ -11524,7 +11529,7 @@ class CfnRestApi(
         :param clone_from: The ID of the RestApi that you want to clone from.
         :param description: The description of the RestApi.
         :param disable_execute_api_endpoint: Specifies whether clients can invoke your API by using the default ``execute-api`` endpoint. By default, clients can invoke your API with the default ``https://{api_id}.execute-api.{region}.amazonaws.com`` endpoint. To require that clients use a custom domain name to invoke your API, disable the default endpoint
-        :param endpoint_configuration: A list of the endpoint types of the API. Use this property when creating an API. When importing an existing API, specify the endpoint configuration types using the ``Parameters`` property.
+        :param endpoint_configuration: A list of the endpoint types and IP address types of the API. Use this property when creating an API. When importing an existing API, specify the endpoint configuration types using the ``Parameters`` property.
         :param fail_on_warnings: A query parameter to indicate whether to rollback the API update ( ``true`` ) or not ( ``false`` ) when a warning is encountered. The default value is ``false`` .
         :param minimum_compression_size: A nullable integer that is used to enable compression (with non-negative between 0 and 10485760 (10M) bytes, inclusive) or disable compression (with a null value) on an API. When compression is enabled, compression or decompression is not applied on the payload if the payload size is smaller than this value. Setting it to zero allows compression for any payload size.
         :param mode: This property applies only when you use OpenAPI to define your REST API. The ``Mode`` determines how API Gateway handles resource updates. Valid values are ``overwrite`` or ``merge`` . For ``overwrite`` , the new API definition replaces the existing one. The existing API identifier remains unchanged. For ``merge`` , the new API definition is merged with the existing API. If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite`` . For REST APIs created after March 29, 2021, the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. Use the default mode to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties.
@@ -11725,7 +11730,7 @@ class CfnRestApi(
     def endpoint_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRestApi.EndpointConfigurationProperty"]]:
-        '''A list of the endpoint types of the API.'''
+        '''A list of the endpoint types and IP address types of the API.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnRestApi.EndpointConfigurationProperty"]], jsii.get(self, "endpointConfiguration"))
 
     @endpoint_configuration.setter
@@ -11856,11 +11861,11 @@ class CfnRestApi(
             types: typing.Optional[typing.Sequence[builtins.str]] = None,
             vpc_endpoint_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         ) -> None:
-            '''The ``EndpointConfiguration`` property type specifies the endpoint types of a REST API.
+            '''The ``EndpointConfiguration`` property type specifies the endpoint types and IP address types of a REST API.
 
             ``EndpointConfiguration`` is a property of the `AWS::ApiGateway::RestApi <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html>`_ resource.
 
-            :param ip_address_type: 
+            :param ip_address_type: The IP address types that can invoke an API (RestApi). Use ``ipv4`` to allow only IPv4 addresses to invoke an API, or use ``dualstack`` to allow both IPv4 and IPv6 addresses to invoke an API. For the ``PRIVATE`` endpoint type, only ``dualstack`` is supported.
             :param types: A list of endpoint types of an API (RestApi) or its custom domain name (DomainName). For an edge-optimized API and its custom domain name, the endpoint type is ``"EDGE"`` . For a regional API and its custom domain name, the endpoint type is ``REGIONAL`` . For a private API, the endpoint type is ``PRIVATE`` .
             :param vpc_endpoint_ids: A list of VpcEndpointIds of an API (RestApi) against which to create Route53 ALIASes. It is only supported for ``PRIVATE`` endpoint type.
 
@@ -11894,7 +11899,10 @@ class CfnRestApi(
 
         @builtins.property
         def ip_address_type(self) -> typing.Optional[builtins.str]:
-            '''
+            '''The IP address types that can invoke an API (RestApi).
+
+            Use ``ipv4`` to allow only IPv4 addresses to invoke an API, or use ``dualstack`` to allow both IPv4 and IPv6 addresses to invoke an API. For the ``PRIVATE`` endpoint type, only ``dualstack`` is supported.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-restapi-endpointconfiguration.html#cfn-apigateway-restapi-endpointconfiguration-ipaddresstype
             '''
             result = self._values.get("ip_address_type")
@@ -12095,7 +12103,7 @@ class CfnRestApiProps:
         :param clone_from: The ID of the RestApi that you want to clone from.
         :param description: The description of the RestApi.
         :param disable_execute_api_endpoint: Specifies whether clients can invoke your API by using the default ``execute-api`` endpoint. By default, clients can invoke your API with the default ``https://{api_id}.execute-api.{region}.amazonaws.com`` endpoint. To require that clients use a custom domain name to invoke your API, disable the default endpoint
-        :param endpoint_configuration: A list of the endpoint types of the API. Use this property when creating an API. When importing an existing API, specify the endpoint configuration types using the ``Parameters`` property.
+        :param endpoint_configuration: A list of the endpoint types and IP address types of the API. Use this property when creating an API. When importing an existing API, specify the endpoint configuration types using the ``Parameters`` property.
         :param fail_on_warnings: A query parameter to indicate whether to rollback the API update ( ``true`` ) or not ( ``false`` ) when a warning is encountered. The default value is ``false`` .
         :param minimum_compression_size: A nullable integer that is used to enable compression (with non-negative between 0 and 10485760 (10M) bytes, inclusive) or disable compression (with a null value) on an API. When compression is enabled, compression or decompression is not applied on the payload if the payload size is smaller than this value. Setting it to zero allows compression for any payload size.
         :param mode: This property applies only when you use OpenAPI to define your REST API. The ``Mode`` determines how API Gateway handles resource updates. Valid values are ``overwrite`` or ``merge`` . For ``overwrite`` , the new API definition replaces the existing one. The existing API identifier remains unchanged. For ``merge`` , the new API definition is merged with the existing API. If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite`` . For REST APIs created after March 29, 2021, the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. Use the default mode to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties.
@@ -12276,7 +12284,7 @@ class CfnRestApiProps:
     def endpoint_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnRestApi.EndpointConfigurationProperty]]:
-        '''A list of the endpoint types of the API.
+        '''A list of the endpoint types and IP address types of the API.
 
         Use this property when creating an API. When importing an existing API, specify the endpoint configuration types using the ``Parameters`` property.