aws-cdk-lib 2.193.0__py3-none-any.whl → 2.195.0__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -8173,6 +8173,9 @@ class CfnClientVpnEndpoint(
                 # the properties below are optional
                 banner_text="bannerText"
             ),
+            client_route_enforcement_options=ec2.CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty(
+                enforced=False
+            ),
             description="description",
             disconnect_on_session_timeout=False,
             dns_servers=["dnsServers"],
@@ -8204,6 +8207,7 @@ class CfnClientVpnEndpoint(
         server_certificate_arn: builtins.str,
         client_connect_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnClientVpnEndpoint.ClientConnectOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         client_login_banner_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnClientVpnEndpoint.ClientLoginBannerOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        client_route_enforcement_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         description: typing.Optional[builtins.str] = None,
         disconnect_on_session_timeout: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -8225,6 +8229,7 @@ class CfnClientVpnEndpoint(
         :param server_certificate_arn: The ARN of the server certificate. For more information, see the `AWS Certificate Manager User Guide <https://docs.aws.amazon.com/acm/latest/userguide/>`_ .
         :param client_connect_options: The options for managing connection authorization for new client connections.
         :param client_login_banner_options: Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
+        :param client_route_enforcement_options: 
         :param description: A brief description of the Client VPN endpoint.
         :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeoutHours`` is reached. If ``true`` , users are prompted to reconnect client VPN. If ``false`` , client VPN attempts to reconnect automatically. The default value is ``false`` .
         :param dns_servers: Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. If no DNS server is specified, the DNS address configured on the device is used for the DNS server.
@@ -8248,6 +8253,7 @@ class CfnClientVpnEndpoint(
             server_certificate_arn=server_certificate_arn,
             client_connect_options=client_connect_options,
             client_login_banner_options=client_login_banner_options,
+            client_route_enforcement_options=client_route_enforcement_options,
             description=description,
             disconnect_on_session_timeout=disconnect_on_session_timeout,
             dns_servers=dns_servers,
@@ -8404,6 +8410,23 @@ class CfnClientVpnEndpoint(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "clientLoginBannerOptions", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="clientRouteEnforcementOptions")
+    def client_route_enforcement_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty"]], jsii.get(self, "clientRouteEnforcementOptions"))
+
+    @client_route_enforcement_options.setter
+    def client_route_enforcement_options(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b7449176e28b63826ef826a7cc608350858f54ad63967741bedbe6e29e4548e0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "clientRouteEnforcementOptions", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="description")
     def description(self) -> typing.Optional[builtins.str]:
@@ -8909,6 +8932,61 @@ class CfnClientVpnEndpoint(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_ec2.CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty",
+        jsii_struct_bases=[],
+        name_mapping={"enforced": "enforced"},
+    )
+    class ClientRouteEnforcementOptionsProperty:
+        def __init__(
+            self,
+            *,
+            enforced: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        ) -> None:
+            '''
+            :param enforced: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-clientvpnendpoint-clientrouteenforcementoptions.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_ec2 as ec2
+                
+                client_route_enforcement_options_property = ec2.CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty(
+                    enforced=False
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__b6a34038d1c5e331979b92a9cd810c8c4993fdf3bdc4b6a567ffbfa48ba19f4e)
+                check_type(argname="argument enforced", value=enforced, expected_type=type_hints["enforced"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if enforced is not None:
+                self._values["enforced"] = enforced
+
+        @builtins.property
+        def enforced(
+            self,
+        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-clientvpnendpoint-clientrouteenforcementoptions.html#cfn-ec2-clientvpnendpoint-clientrouteenforcementoptions-enforced
+            '''
+            result = self._values.get("enforced")
+            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "ClientRouteEnforcementOptionsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_ec2.CfnClientVpnEndpoint.ConnectionLogOptionsProperty",
         jsii_struct_bases=[],
@@ -9218,6 +9296,7 @@ class CfnClientVpnEndpoint(
         "server_certificate_arn": "serverCertificateArn",
         "client_connect_options": "clientConnectOptions",
         "client_login_banner_options": "clientLoginBannerOptions",
+        "client_route_enforcement_options": "clientRouteEnforcementOptions",
         "description": "description",
         "disconnect_on_session_timeout": "disconnectOnSessionTimeout",
         "dns_servers": "dnsServers",
@@ -9241,6 +9320,7 @@ class CfnClientVpnEndpointProps:
         server_certificate_arn: builtins.str,
         client_connect_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientConnectOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         client_login_banner_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientLoginBannerOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        client_route_enforcement_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         description: typing.Optional[builtins.str] = None,
         disconnect_on_session_timeout: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -9261,6 +9341,7 @@ class CfnClientVpnEndpointProps:
         :param server_certificate_arn: The ARN of the server certificate. For more information, see the `AWS Certificate Manager User Guide <https://docs.aws.amazon.com/acm/latest/userguide/>`_ .
         :param client_connect_options: The options for managing connection authorization for new client connections.
         :param client_login_banner_options: Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
+        :param client_route_enforcement_options: 
         :param description: A brief description of the Client VPN endpoint.
         :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeoutHours`` is reached. If ``true`` , users are prompted to reconnect client VPN. If ``false`` , client VPN attempts to reconnect automatically. The default value is ``false`` .
         :param dns_servers: Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. If no DNS server is specified, the DNS address configured on the device is used for the DNS server.
@@ -9323,6 +9404,9 @@ class CfnClientVpnEndpointProps:
                     # the properties below are optional
                     banner_text="bannerText"
                 ),
+                client_route_enforcement_options=ec2.CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty(
+                    enforced=False
+                ),
                 description="description",
                 disconnect_on_session_timeout=False,
                 dns_servers=["dnsServers"],
@@ -9350,6 +9434,7 @@ class CfnClientVpnEndpointProps:
             check_type(argname="argument server_certificate_arn", value=server_certificate_arn, expected_type=type_hints["server_certificate_arn"])
             check_type(argname="argument client_connect_options", value=client_connect_options, expected_type=type_hints["client_connect_options"])
             check_type(argname="argument client_login_banner_options", value=client_login_banner_options, expected_type=type_hints["client_login_banner_options"])
+            check_type(argname="argument client_route_enforcement_options", value=client_route_enforcement_options, expected_type=type_hints["client_route_enforcement_options"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
             check_type(argname="argument disconnect_on_session_timeout", value=disconnect_on_session_timeout, expected_type=type_hints["disconnect_on_session_timeout"])
             check_type(argname="argument dns_servers", value=dns_servers, expected_type=type_hints["dns_servers"])
@@ -9371,6 +9456,8 @@ class CfnClientVpnEndpointProps:
             self._values["client_connect_options"] = client_connect_options
         if client_login_banner_options is not None:
             self._values["client_login_banner_options"] = client_login_banner_options
+        if client_route_enforcement_options is not None:
+            self._values["client_route_enforcement_options"] = client_route_enforcement_options
         if description is not None:
             self._values["description"] = description
         if disconnect_on_session_timeout is not None:
@@ -9471,6 +9558,16 @@ class CfnClientVpnEndpointProps:
         result = self._values.get("client_login_banner_options")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnClientVpnEndpoint.ClientLoginBannerOptionsProperty]], result)
 
+    @builtins.property
+    def client_route_enforcement_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnendpoint.html#cfn-ec2-clientvpnendpoint-clientrouteenforcementoptions
+        '''
+        result = self._values.get("client_route_enforcement_options")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty]], result)
+
     @builtins.property
     def description(self) -> typing.Optional[builtins.str]:
         '''A brief description of the Client VPN endpoint.
@@ -12470,7 +12567,7 @@ class CfnEC2Fleet(
             :param accelerator_manufacturers: Indicates whether instance types must have accelerators by specific manufacturers. - For instance types with AWS devices, specify ``amazon-web-services`` . - For instance types with AMD devices, specify ``amd`` . - For instance types with Habana devices, specify ``habana`` . - For instance types with NVIDIA devices, specify ``nvidia`` . - For instance types with Xilinx devices, specify ``xilinx`` . Default: Any manufacturer
             :param accelerator_names: The accelerators that must be on the instance type. - For instance types with NVIDIA A10G GPUs, specify ``a10g`` . - For instance types with NVIDIA A100 GPUs, specify ``a100`` . - For instance types with NVIDIA H100 GPUs, specify ``h100`` . - For instance types with AWS Inferentia chips, specify ``inferentia`` . - For instance types with NVIDIA GRID K520 GPUs, specify ``k520`` . - For instance types with NVIDIA K80 GPUs, specify ``k80`` . - For instance types with NVIDIA M60 GPUs, specify ``m60`` . - For instance types with AMD Radeon Pro V520 GPUs, specify ``radeon-pro-v520`` . - For instance types with NVIDIA T4 GPUs, specify ``t4`` . - For instance types with NVIDIA T4G GPUs, specify ``t4g`` . - For instance types with Xilinx VU9P FPGAs, specify ``vu9p`` . - For instance types with NVIDIA V100 GPUs, specify ``v100`` . Default: Any accelerator
             :param accelerator_total_memory_mib: The minimum and maximum amount of total accelerator memory, in MiB. Default: No minimum or maximum limits
-            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . Default: Any accelerator type
+            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . - For instance types with Inference accelerators, specify ``inference`` . Default: Any accelerator type
             :param allowed_instance_types: The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes. You can use strings with one or more wild cards, represented by an asterisk ( ``*`` ), to allow an instance type, size, or generation. The following are examples: ``m5.8xlarge`` , ``c5*.*`` , ``m5a.*`` , ``r*`` , ``*3*`` . For example, if you specify ``c5*`` ,Amazon EC2 will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*`` , Amazon EC2 will allow all the M5a instance types, but not the M5n instance types. .. epigraph:: If you specify ``AllowedInstanceTypes`` , you can't specify ``ExcludedInstanceTypes`` . Default: All instance types
             :param bare_metal: Indicates whether bare metal instance types must be included, excluded, or required. - To include bare metal instance types, specify ``included`` . - To require only bare metal instance types, specify ``required`` . - To exclude bare metal instance types, specify ``excluded`` . Default: ``excluded``
             :param baseline_ebs_bandwidth_mbps: The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see `Amazon EBS–optimized instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html>`_ in the *Amazon EC2 User Guide* . Default: No minimum or maximum limits
@@ -12718,6 +12815,7 @@ class CfnEC2Fleet(
 
             - For instance types with FPGA accelerators, specify ``fpga`` .
             - For instance types with GPU accelerators, specify ``gpu`` .
+            - For instance types with Inference accelerators, specify ``inference`` .
 
             Default: Any accelerator type
 
@@ -27086,7 +27184,7 @@ class CfnLaunchTemplate(
             :param accelerator_manufacturers: Indicates whether instance types must have accelerators by specific manufacturers. - For instance types with AWS devices, specify ``amazon-web-services`` . - For instance types with AMD devices, specify ``amd`` . - For instance types with Habana devices, specify ``habana`` . - For instance types with NVIDIA devices, specify ``nvidia`` . - For instance types with Xilinx devices, specify ``xilinx`` . Default: Any manufacturer
             :param accelerator_names: The accelerators that must be on the instance type. - For instance types with NVIDIA A10G GPUs, specify ``a10g`` . - For instance types with NVIDIA A100 GPUs, specify ``a100`` . - For instance types with NVIDIA H100 GPUs, specify ``h100`` . - For instance types with AWS Inferentia chips, specify ``inferentia`` . - For instance types with NVIDIA GRID K520 GPUs, specify ``k520`` . - For instance types with NVIDIA K80 GPUs, specify ``k80`` . - For instance types with NVIDIA M60 GPUs, specify ``m60`` . - For instance types with AMD Radeon Pro V520 GPUs, specify ``radeon-pro-v520`` . - For instance types with NVIDIA T4 GPUs, specify ``t4`` . - For instance types with NVIDIA T4G GPUs, specify ``t4g`` . - For instance types with Xilinx VU9P FPGAs, specify ``vu9p`` . - For instance types with NVIDIA V100 GPUs, specify ``v100`` . Default: Any accelerator
             :param accelerator_total_memory_mib: The minimum and maximum amount of total accelerator memory, in MiB. Default: No minimum or maximum limits
-            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . Default: Any accelerator type
+            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . - For instance types with Inference accelerators, specify ``inference`` . Default: Any accelerator type
             :param allowed_instance_types: The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes. You can use strings with one or more wild cards, represented by an asterisk ( ``*`` ), to allow an instance type, size, or generation. The following are examples: ``m5.8xlarge`` , ``c5*.*`` , ``m5a.*`` , ``r*`` , ``*3*`` . For example, if you specify ``c5*`` ,Amazon EC2 will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*`` , Amazon EC2 will allow all the M5a instance types, but not the M5n instance types. .. epigraph:: If you specify ``AllowedInstanceTypes`` , you can't specify ``ExcludedInstanceTypes`` . Default: All instance types
             :param bare_metal: Indicates whether bare metal instance types must be included, excluded, or required. - To include bare metal instance types, specify ``included`` . - To require only bare metal instance types, specify ``required`` . - To exclude bare metal instance types, specify ``excluded`` . Default: ``excluded``
             :param baseline_ebs_bandwidth_mbps: The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see `Amazon EBS–optimized instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html>`_ in the *Amazon EC2 User Guide* . Default: No minimum or maximum limits
@@ -27334,6 +27432,7 @@ class CfnLaunchTemplate(
 
             - For instance types with FPGA accelerators, specify ``fpga`` .
             - For instance types with GPU accelerators, specify ``gpu`` .
+            - For instance types with Inference accelerators, specify ``inference`` .
 
             Default: Any accelerator type
 
@@ -47893,7 +47992,7 @@ class CfnSpotFleet(
             :param accelerator_manufacturers: Indicates whether instance types must have accelerators by specific manufacturers. - For instance types with AWS devices, specify ``amazon-web-services`` . - For instance types with AMD devices, specify ``amd`` . - For instance types with Habana devices, specify ``habana`` . - For instance types with NVIDIA devices, specify ``nvidia`` . - For instance types with Xilinx devices, specify ``xilinx`` . Default: Any manufacturer
             :param accelerator_names: The accelerators that must be on the instance type. - For instance types with NVIDIA A10G GPUs, specify ``a10g`` . - For instance types with NVIDIA A100 GPUs, specify ``a100`` . - For instance types with NVIDIA H100 GPUs, specify ``h100`` . - For instance types with AWS Inferentia chips, specify ``inferentia`` . - For instance types with NVIDIA GRID K520 GPUs, specify ``k520`` . - For instance types with NVIDIA K80 GPUs, specify ``k80`` . - For instance types with NVIDIA M60 GPUs, specify ``m60`` . - For instance types with AMD Radeon Pro V520 GPUs, specify ``radeon-pro-v520`` . - For instance types with NVIDIA T4 GPUs, specify ``t4`` . - For instance types with NVIDIA T4G GPUs, specify ``t4g`` . - For instance types with Xilinx VU9P FPGAs, specify ``vu9p`` . - For instance types with NVIDIA V100 GPUs, specify ``v100`` . Default: Any accelerator
             :param accelerator_total_memory_mib: The minimum and maximum amount of total accelerator memory, in MiB. Default: No minimum or maximum limits
-            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . Default: Any accelerator type
+            :param accelerator_types: The accelerator types that must be on the instance type. - For instance types with FPGA accelerators, specify ``fpga`` . - For instance types with GPU accelerators, specify ``gpu`` . - For instance types with Inference accelerators, specify ``inference`` . Default: Any accelerator type
             :param allowed_instance_types: The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes. You can use strings with one or more wild cards, represented by an asterisk ( ``*`` ), to allow an instance type, size, or generation. The following are examples: ``m5.8xlarge`` , ``c5*.*`` , ``m5a.*`` , ``r*`` , ``*3*`` . For example, if you specify ``c5*`` ,Amazon EC2 will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*`` , Amazon EC2 will allow all the M5a instance types, but not the M5n instance types. .. epigraph:: If you specify ``AllowedInstanceTypes`` , you can't specify ``ExcludedInstanceTypes`` . Default: All instance types
             :param bare_metal: Indicates whether bare metal instance types must be included, excluded, or required. - To include bare metal instance types, specify ``included`` . - To require only bare metal instance types, specify ``required`` . - To exclude bare metal instance types, specify ``excluded`` . Default: ``excluded``
             :param baseline_ebs_bandwidth_mbps: The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see `Amazon EBS–optimized instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html>`_ in the *Amazon EC2 User Guide* . Default: No minimum or maximum limits
@@ -48141,6 +48240,7 @@ class CfnSpotFleet(
 
             - For instance types with FPGA accelerators, specify ``fpga`` .
             - For instance types with GPU accelerators, specify ``gpu`` .
+            - For instance types with Inference accelerators, specify ``inference`` .
 
             Default: Any accelerator type
 
@@ -57169,8 +57269,8 @@ class CfnTransitGatewayPeeringAttachment(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param peer_account_id: The ID of the AWS account that owns the transit gateway.
-        :param peer_region: The Region of the transit gateway.
-        :param peer_transit_gateway_id: The ID of the transit gateway.
+        :param peer_region: The Region where the transit gateway that you want to create the peer for is located.
+        :param peer_transit_gateway_id: The ID of the transit gateway in the PeerRegion.
         :param transit_gateway_id: The ID of the transit gateway peering attachment.
         :param tags: The tags for the transit gateway peering attachment.
         '''
@@ -57298,7 +57398,7 @@ class CfnTransitGatewayPeeringAttachment(
     @builtins.property
     @jsii.member(jsii_name="peerRegion")
     def peer_region(self) -> builtins.str:
-        '''The Region of the transit gateway.'''
+        '''The Region where the transit gateway that you want to create the peer for is located.'''
         return typing.cast(builtins.str, jsii.get(self, "peerRegion"))
 
     @peer_region.setter
@@ -57311,7 +57411,7 @@ class CfnTransitGatewayPeeringAttachment(
     @builtins.property
     @jsii.member(jsii_name="peerTransitGatewayId")
     def peer_transit_gateway_id(self) -> builtins.str:
-        '''The ID of the transit gateway.'''
+        '''The ID of the transit gateway in the PeerRegion.'''
         return typing.cast(builtins.str, jsii.get(self, "peerTransitGatewayId"))
 
     @peer_transit_gateway_id.setter
@@ -57442,8 +57542,8 @@ class CfnTransitGatewayPeeringAttachmentProps:
         '''Properties for defining a ``CfnTransitGatewayPeeringAttachment``.
 
         :param peer_account_id: The ID of the AWS account that owns the transit gateway.
-        :param peer_region: The Region of the transit gateway.
-        :param peer_transit_gateway_id: The ID of the transit gateway.
+        :param peer_region: The Region where the transit gateway that you want to create the peer for is located.
+        :param peer_transit_gateway_id: The ID of the transit gateway in the PeerRegion.
         :param transit_gateway_id: The ID of the transit gateway peering attachment.
         :param tags: The tags for the transit gateway peering attachment.
 
@@ -57497,7 +57597,7 @@ class CfnTransitGatewayPeeringAttachmentProps:
 
     @builtins.property
     def peer_region(self) -> builtins.str:
-        '''The Region of the transit gateway.
+        '''The Region where the transit gateway that you want to create the peer for is located.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaypeeringattachment.html#cfn-ec2-transitgatewaypeeringattachment-peerregion
         '''
@@ -57507,7 +57607,7 @@ class CfnTransitGatewayPeeringAttachmentProps:
 
     @builtins.property
     def peer_transit_gateway_id(self) -> builtins.str:
-        '''The ID of the transit gateway.
+        '''The ID of the transit gateway in the PeerRegion.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaypeeringattachment.html#cfn-ec2-transitgatewaypeeringattachment-peertransitgatewayid
         '''
@@ -79549,6 +79649,10 @@ class InstanceClass(enum.Enum):
     '''Memory optimized instances with Graviton4 processors.'''
     R8G = "R8G"
     '''Memory optimized instances with Graviton4 processors.'''
+    MEMORY8_GRAVITON4_NVME_DRIVE = "MEMORY8_GRAVITON4_NVME_DRIVE"
+    '''Memory optimized instances, 8th generation with Graviton4 processors and local NVME drive.'''
+    R8GD = "R8GD"
+    '''Memory optimized instances, 8th generation with Graviton4 processors and local NVME drive.'''
     COMPUTE3 = "COMPUTE3"
     '''Compute optimized instances, 3rd generation.'''
     C3 = "C3"
@@ -79625,6 +79729,10 @@ class InstanceClass(enum.Enum):
 
     This instance class is currently only available in US East (Ohio), US East (N. Virginia), US West (Oregon), and Europe (Ireland).
     '''
+    COMPUTE8_GRAVITON4_NVME_DRIVE = "COMPUTE8_GRAVITON4_NVME_DRIVE"
+    '''Compute optimized instances for high performance computing, 8th generation with Graviton4 processors and local NVME drive.'''
+    C8GD = "C8GD"
+    '''Compute optimized instances for high performance computing, 8th generation with Graviton4 processors and local NVME drive.'''
     COMPUTE6_GRAVITON2_HIGH_NETWORK_BANDWIDTH = "COMPUTE6_GRAVITON2_HIGH_NETWORK_BANDWIDTH"
     '''Compute optimized instances for high performance computing, 6th generation with Graviton2 processors and high network bandwidth capabilities.'''
     C6GN = "C6GN"
@@ -79907,6 +80015,10 @@ class InstanceClass(enum.Enum):
 
     This instance class is currently only available in US East (Ohio), US East (N. Virginia), US West (Oregon), and Europe (Ireland).
     '''
+    STANDARD8_GRAVITON4_NVME_DRIVE = "STANDARD8_GRAVITON4_NVME_DRIVE"
+    '''Standard instances, 8th generation with Graviton4 processors and local NVME drive.'''
+    M8GD = "M8GD"
+    '''Standard instances, 8th generation with Graviton4 processors and local NVME drive.'''
     STANDARD7_INTEL = "STANDARD7_INTEL"
     '''Standard instances with high memory and compute capacity based on Intel Xeon Scalable (Sapphire Rapids) processors, 7th generation.'''
     M7I = "M7I"
@@ -103547,6 +103659,7 @@ def _typecheckingstub__1880bffa9253aaedfa6af6175da6262a96ea34dadf82dc678a1eef91c
     server_certificate_arn: builtins.str,
     client_connect_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientConnectOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     client_login_banner_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientLoginBannerOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    client_route_enforcement_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     description: typing.Optional[builtins.str] = None,
     disconnect_on_session_timeout: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -103610,6 +103723,12 @@ def _typecheckingstub__497c1bea9e9caa987aeafc2d4334f07cd2d9664a3f3cd38bebd561170
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__b7449176e28b63826ef826a7cc608350858f54ad63967741bedbe6e29e4548e0(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__bb1d5fb0102c1b6de24ad13acfc13837ec5422291e23048395fe03350aea2188(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -103709,6 +103828,13 @@ def _typecheckingstub__907ff3a3bd097ac37a720bbc18cf4e29748beb226ddf13641e4835016
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__b6a34038d1c5e331979b92a9cd810c8c4993fdf3bdc4b6a567ffbfa48ba19f4e(
+    *,
+    enforced: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__2c142e5322bb8bda4ace9616736c0e12d7c7b9b219932b4168a975e68d0d9395(
     *,
     enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
@@ -103749,6 +103875,7 @@ def _typecheckingstub__05994467e800c33b4a01e884b4b20bef2569d710f5dc323617cd814e5
     server_certificate_arn: builtins.str,
     client_connect_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientConnectOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     client_login_banner_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientLoginBannerOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    client_route_enforcement_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     description: typing.Optional[builtins.str] = None,
     disconnect_on_session_timeout: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,