aws-cdk-lib 2.194.0__py3-none-any.whl → 2.196.0__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -621,8 +621,8 @@ instance around:
 #
 class Stack1(cdk.Stack):
 
-    def __init__(self, scope, id, *, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None):
-        super().__init__(scope, id, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation)
+    def __init__(self, scope, id, *, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None, propertyInjectors=None):
+        super().__init__(scope, id, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation, propertyInjectors=propertyInjectors)
 
         self.vpc = ec2.Vpc(self, "VPC")
 
@@ -630,8 +630,8 @@ class Stack1(cdk.Stack):
 # Stack2 consumes the VPC
 #
 class Stack2(cdk.Stack):
-    def __init__(self, scope, id, *, vpc, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None):
-        super().__init__(scope, id, vpc=vpc, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation)
+    def __init__(self, scope, id, *, vpc, description=None, env=None, stackName=None, tags=None, notificationArns=None, synthesizer=None, terminationProtection=None, analyticsReporting=None, crossRegionReferences=None, permissionsBoundary=None, suppressTemplateIndentation=None, propertyInjectors=None):
+        super().__init__(scope, id, vpc=vpc, description=description, env=env, stackName=stackName, tags=tags, notificationArns=notificationArns, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting, crossRegionReferences=crossRegionReferences, permissionsBoundary=permissionsBoundary, suppressTemplateIndentation=suppressTemplateIndentation, propertyInjectors=propertyInjectors)
 
         # Pass the VPC to a construct that needs it
         ConstructThatTakesAVpc(self, "Construct",
@@ -8173,6 +8173,9 @@ class CfnClientVpnEndpoint(
                 # the properties below are optional
                 banner_text="bannerText"
             ),
+            client_route_enforcement_options=ec2.CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty(
+                enforced=False
+            ),
             description="description",
             disconnect_on_session_timeout=False,
             dns_servers=["dnsServers"],
@@ -8204,6 +8207,7 @@ class CfnClientVpnEndpoint(
         server_certificate_arn: builtins.str,
         client_connect_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnClientVpnEndpoint.ClientConnectOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         client_login_banner_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnClientVpnEndpoint.ClientLoginBannerOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        client_route_enforcement_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         description: typing.Optional[builtins.str] = None,
         disconnect_on_session_timeout: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -8225,8 +8229,9 @@ class CfnClientVpnEndpoint(
         :param server_certificate_arn: The ARN of the server certificate. For more information, see the `AWS Certificate Manager User Guide <https://docs.aws.amazon.com/acm/latest/userguide/>`_ .
         :param client_connect_options: The options for managing connection authorization for new client connections.
         :param client_login_banner_options: Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
+        :param client_route_enforcement_options: Client route enforcement is a feature of the Client VPN service that helps enforce administrator defined routes on devices connected through the VPN. T his feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel. Client route enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table, reverting it back to the expected route configurations.
         :param description: A brief description of the Client VPN endpoint.
-        :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeoutHours`` is reached. If ``true`` , users are prompted to reconnect client VPN. If ``false`` , client VPN attempts to reconnect automatically. The default value is ``false`` .
+        :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeoutHours`` is reached. If ``true`` , users are prompted to reconnect client VPN. If ``false`` , client VPN attempts to reconnect automatically. The default value is ``true`` .
         :param dns_servers: Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. If no DNS server is specified, the DNS address configured on the device is used for the DNS server.
         :param security_group_ids: The IDs of one or more security groups to apply to the target network. You must also specify the ID of the VPC that contains the security groups.
         :param self_service_portal: Specify whether to enable the self-service portal for the Client VPN endpoint. Default Value: ``enabled``
@@ -8248,6 +8253,7 @@ class CfnClientVpnEndpoint(
             server_certificate_arn=server_certificate_arn,
             client_connect_options=client_connect_options,
             client_login_banner_options=client_login_banner_options,
+            client_route_enforcement_options=client_route_enforcement_options,
             description=description,
             disconnect_on_session_timeout=disconnect_on_session_timeout,
             dns_servers=dns_servers,
@@ -8404,6 +8410,24 @@ class CfnClientVpnEndpoint(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "clientLoginBannerOptions", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="clientRouteEnforcementOptions")
+    def client_route_enforcement_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty"]]:
+        '''Client route enforcement is a feature of the Client VPN service that helps enforce administrator defined routes on devices connected through the VPN.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty"]], jsii.get(self, "clientRouteEnforcementOptions"))
+
+    @client_route_enforcement_options.setter
+    def client_route_enforcement_options(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b7449176e28b63826ef826a7cc608350858f54ad63967741bedbe6e29e4548e0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "clientRouteEnforcementOptions", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="description")
     def description(self) -> typing.Optional[builtins.str]:
@@ -8909,6 +8933,73 @@ class CfnClientVpnEndpoint(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_ec2.CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty",
+        jsii_struct_bases=[],
+        name_mapping={"enforced": "enforced"},
+    )
+    class ClientRouteEnforcementOptionsProperty:
+        def __init__(
+            self,
+            *,
+            enforced: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        ) -> None:
+            '''Client Route Enforcement is a feature of Client VPN that helps enforce administrator defined routes on devices connected through the VPN.
+
+            This feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel.
+
+            Client Route Enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table, reverting it back to the expected route configurations.
+
+            :param enforced: Enable or disable Client Route Enforcement. The state can either be ``true`` (enabled) or ``false`` (disabled). The default is ``false`` . Valid values: ``true | false`` Default value: ``false``
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-clientvpnendpoint-clientrouteenforcementoptions.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_ec2 as ec2
+                
+                client_route_enforcement_options_property = ec2.CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty(
+                    enforced=False
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__b6a34038d1c5e331979b92a9cd810c8c4993fdf3bdc4b6a567ffbfa48ba19f4e)
+                check_type(argname="argument enforced", value=enforced, expected_type=type_hints["enforced"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if enforced is not None:
+                self._values["enforced"] = enforced
+
+        @builtins.property
+        def enforced(
+            self,
+        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+            '''Enable or disable Client Route Enforcement.
+
+            The state can either be ``true`` (enabled) or ``false`` (disabled). The default is ``false`` .
+
+            Valid values: ``true | false``
+
+            Default value: ``false``
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-clientvpnendpoint-clientrouteenforcementoptions.html#cfn-ec2-clientvpnendpoint-clientrouteenforcementoptions-enforced
+            '''
+            result = self._values.get("enforced")
+            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "ClientRouteEnforcementOptionsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_ec2.CfnClientVpnEndpoint.ConnectionLogOptionsProperty",
         jsii_struct_bases=[],
@@ -9218,6 +9309,7 @@ class CfnClientVpnEndpoint(
         "server_certificate_arn": "serverCertificateArn",
         "client_connect_options": "clientConnectOptions",
         "client_login_banner_options": "clientLoginBannerOptions",
+        "client_route_enforcement_options": "clientRouteEnforcementOptions",
         "description": "description",
         "disconnect_on_session_timeout": "disconnectOnSessionTimeout",
         "dns_servers": "dnsServers",
@@ -9241,6 +9333,7 @@ class CfnClientVpnEndpointProps:
         server_certificate_arn: builtins.str,
         client_connect_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientConnectOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         client_login_banner_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientLoginBannerOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        client_route_enforcement_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         description: typing.Optional[builtins.str] = None,
         disconnect_on_session_timeout: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -9261,8 +9354,9 @@ class CfnClientVpnEndpointProps:
         :param server_certificate_arn: The ARN of the server certificate. For more information, see the `AWS Certificate Manager User Guide <https://docs.aws.amazon.com/acm/latest/userguide/>`_ .
         :param client_connect_options: The options for managing connection authorization for new client connections.
         :param client_login_banner_options: Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
+        :param client_route_enforcement_options: Client route enforcement is a feature of the Client VPN service that helps enforce administrator defined routes on devices connected through the VPN. T his feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel. Client route enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table, reverting it back to the expected route configurations.
         :param description: A brief description of the Client VPN endpoint.
-        :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeoutHours`` is reached. If ``true`` , users are prompted to reconnect client VPN. If ``false`` , client VPN attempts to reconnect automatically. The default value is ``false`` .
+        :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeoutHours`` is reached. If ``true`` , users are prompted to reconnect client VPN. If ``false`` , client VPN attempts to reconnect automatically. The default value is ``true`` .
         :param dns_servers: Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. If no DNS server is specified, the DNS address configured on the device is used for the DNS server.
         :param security_group_ids: The IDs of one or more security groups to apply to the target network. You must also specify the ID of the VPC that contains the security groups.
         :param self_service_portal: Specify whether to enable the self-service portal for the Client VPN endpoint. Default Value: ``enabled``
@@ -9323,6 +9417,9 @@ class CfnClientVpnEndpointProps:
                     # the properties below are optional
                     banner_text="bannerText"
                 ),
+                client_route_enforcement_options=ec2.CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty(
+                    enforced=False
+                ),
                 description="description",
                 disconnect_on_session_timeout=False,
                 dns_servers=["dnsServers"],
@@ -9350,6 +9447,7 @@ class CfnClientVpnEndpointProps:
             check_type(argname="argument server_certificate_arn", value=server_certificate_arn, expected_type=type_hints["server_certificate_arn"])
             check_type(argname="argument client_connect_options", value=client_connect_options, expected_type=type_hints["client_connect_options"])
             check_type(argname="argument client_login_banner_options", value=client_login_banner_options, expected_type=type_hints["client_login_banner_options"])
+            check_type(argname="argument client_route_enforcement_options", value=client_route_enforcement_options, expected_type=type_hints["client_route_enforcement_options"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
             check_type(argname="argument disconnect_on_session_timeout", value=disconnect_on_session_timeout, expected_type=type_hints["disconnect_on_session_timeout"])
             check_type(argname="argument dns_servers", value=dns_servers, expected_type=type_hints["dns_servers"])
@@ -9371,6 +9469,8 @@ class CfnClientVpnEndpointProps:
             self._values["client_connect_options"] = client_connect_options
         if client_login_banner_options is not None:
             self._values["client_login_banner_options"] = client_login_banner_options
+        if client_route_enforcement_options is not None:
+            self._values["client_route_enforcement_options"] = client_route_enforcement_options
         if description is not None:
             self._values["description"] = description
         if disconnect_on_session_timeout is not None:
@@ -9471,6 +9571,21 @@ class CfnClientVpnEndpointProps:
         result = self._values.get("client_login_banner_options")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnClientVpnEndpoint.ClientLoginBannerOptionsProperty]], result)
 
+    @builtins.property
+    def client_route_enforcement_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty]]:
+        '''Client route enforcement is a feature of the Client VPN service that helps enforce administrator defined routes on devices connected through the VPN.
+
+        T his feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel.
+
+        Client route enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table, reverting it back to the expected route configurations.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnendpoint.html#cfn-ec2-clientvpnendpoint-clientrouteenforcementoptions
+        '''
+        result = self._values.get("client_route_enforcement_options")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty]], result)
+
     @builtins.property
     def description(self) -> typing.Optional[builtins.str]:
         '''A brief description of the Client VPN endpoint.
@@ -9486,7 +9601,7 @@ class CfnClientVpnEndpointProps:
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
         '''Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeoutHours`` is reached.
 
-        If ``true`` , users are prompted to reconnect client VPN. If ``false`` , client VPN attempts to reconnect automatically. The default value is ``false`` .
+        If ``true`` , users are prompted to reconnect client VPN. If ``false`` , client VPN attempts to reconnect automatically. The default value is ``true`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnendpoint.html#cfn-ec2-clientvpnendpoint-disconnectonsessiontimeout
         '''
@@ -34623,6 +34738,7 @@ class CfnNetworkInsightsAnalysis(
             # the properties below are optional
             additional_accounts=["additionalAccounts"],
             filter_in_arns=["filterInArns"],
+            filter_out_arns=["filterOutArns"],
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -34638,6 +34754,7 @@ class CfnNetworkInsightsAnalysis(
         network_insights_path_id: builtins.str,
         additional_accounts: typing.Optional[typing.Sequence[builtins.str]] = None,
         filter_in_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
+        filter_out_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
@@ -34646,6 +34763,7 @@ class CfnNetworkInsightsAnalysis(
         :param network_insights_path_id: The ID of the path.
         :param additional_accounts: The member accounts that contain resources that the path can traverse.
         :param filter_in_arns: The Amazon Resource Names (ARN) of the resources that the path must traverse.
+        :param filter_out_arns: 
         :param tags: The tags to apply.
         '''
         if __debug__:
@@ -34656,6 +34774,7 @@ class CfnNetworkInsightsAnalysis(
             network_insights_path_id=network_insights_path_id,
             additional_accounts=additional_accounts,
             filter_in_arns=filter_in_arns,
+            filter_out_arns=filter_out_arns,
             tags=tags,
         )
 
@@ -34845,6 +34964,21 @@ class CfnNetworkInsightsAnalysis(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "filterInArns", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="filterOutArns")
+    def filter_out_arns(self) -> typing.Optional[typing.List[builtins.str]]:
+        return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "filterOutArns"))
+
+    @filter_out_arns.setter
+    def filter_out_arns(
+        self,
+        value: typing.Optional[typing.List[builtins.str]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a3e2782a8511eec581f257080a1a098ac8d87ebc507433291c01b4f61ad401ff)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "filterOutArns", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -37877,6 +38011,7 @@ class CfnNetworkInsightsAnalysis(
         "network_insights_path_id": "networkInsightsPathId",
         "additional_accounts": "additionalAccounts",
         "filter_in_arns": "filterInArns",
+        "filter_out_arns": "filterOutArns",
         "tags": "tags",
     },
 )
@@ -37887,6 +38022,7 @@ class CfnNetworkInsightsAnalysisProps:
         network_insights_path_id: builtins.str,
         additional_accounts: typing.Optional[typing.Sequence[builtins.str]] = None,
         filter_in_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
+        filter_out_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnNetworkInsightsAnalysis``.
@@ -37894,6 +38030,7 @@ class CfnNetworkInsightsAnalysisProps:
         :param network_insights_path_id: The ID of the path.
         :param additional_accounts: The member accounts that contain resources that the path can traverse.
         :param filter_in_arns: The Amazon Resource Names (ARN) of the resources that the path must traverse.
+        :param filter_out_arns: 
         :param tags: The tags to apply.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinsightsanalysis.html
@@ -37911,6 +38048,7 @@ class CfnNetworkInsightsAnalysisProps:
                 # the properties below are optional
                 additional_accounts=["additionalAccounts"],
                 filter_in_arns=["filterInArns"],
+                filter_out_arns=["filterOutArns"],
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -37922,6 +38060,7 @@ class CfnNetworkInsightsAnalysisProps:
             check_type(argname="argument network_insights_path_id", value=network_insights_path_id, expected_type=type_hints["network_insights_path_id"])
             check_type(argname="argument additional_accounts", value=additional_accounts, expected_type=type_hints["additional_accounts"])
             check_type(argname="argument filter_in_arns", value=filter_in_arns, expected_type=type_hints["filter_in_arns"])
+            check_type(argname="argument filter_out_arns", value=filter_out_arns, expected_type=type_hints["filter_out_arns"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "network_insights_path_id": network_insights_path_id,
@@ -37930,6 +38069,8 @@ class CfnNetworkInsightsAnalysisProps:
             self._values["additional_accounts"] = additional_accounts
         if filter_in_arns is not None:
             self._values["filter_in_arns"] = filter_in_arns
+        if filter_out_arns is not None:
+            self._values["filter_out_arns"] = filter_out_arns
         if tags is not None:
             self._values["tags"] = tags
 
@@ -37961,6 +38102,14 @@ class CfnNetworkInsightsAnalysisProps:
         result = self._values.get("filter_in_arns")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def filter_out_arns(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinsightsanalysis.html#cfn-ec2-networkinsightsanalysis-filteroutarns
+        '''
+        result = self._values.get("filter_out_arns")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''The tags to apply.
@@ -54863,8 +55012,8 @@ class CfnTransitGateway(
         :param amazon_side_asn: A private Autonomous System Number (ASN) for the Amazon side of a BGP session. The range is 64512 to 65534 for 16-bit ASNs. The default is 64512.
         :param association_default_route_table_id: The ID of the default association route table.
         :param auto_accept_shared_attachments: Enable or disable automatic acceptance of attachment requests. Disabled by default.
-        :param default_route_table_association: Enable or disable automatic association with the default association route table. Enabled by default.
-        :param default_route_table_propagation: Enable or disable automatic propagation of routes to the default propagation route table. Enabled by default.
+        :param default_route_table_association: Enable or disable automatic association with the default association route table. Enabled by default. If ``DefaultRouteTableAssociation`` is set to enable, AWS Transit Gateway will create the default transit gateway route table.
+        :param default_route_table_propagation: Enable or disable automatic propagation of routes to the default propagation route table. Enabled by default. If ``DefaultRouteTablePropagation`` is set to enable, AWS Transit Gateway will create the default transit gateway route table.
         :param description: The description of the transit gateway.
         :param dns_support: Enable or disable DNS support. Enabled by default.
         :param multicast_support: Indicates whether multicast is enabled on the transit gateway.
@@ -57172,8 +57321,8 @@ class CfnTransitGatewayPeeringAttachment(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param peer_account_id: The ID of the AWS account that owns the transit gateway.
-        :param peer_region: The Region of the transit gateway.
-        :param peer_transit_gateway_id: The ID of the transit gateway.
+        :param peer_region: The Region where the transit gateway that you want to create the peer for is located.
+        :param peer_transit_gateway_id: The ID of the transit gateway in the PeerRegion.
         :param transit_gateway_id: The ID of the transit gateway peering attachment.
         :param tags: The tags for the transit gateway peering attachment.
         '''
@@ -57301,7 +57450,7 @@ class CfnTransitGatewayPeeringAttachment(
     @builtins.property
     @jsii.member(jsii_name="peerRegion")
     def peer_region(self) -> builtins.str:
-        '''The Region of the transit gateway.'''
+        '''The Region where the transit gateway that you want to create the peer for is located.'''
         return typing.cast(builtins.str, jsii.get(self, "peerRegion"))
 
     @peer_region.setter
@@ -57314,7 +57463,7 @@ class CfnTransitGatewayPeeringAttachment(
     @builtins.property
     @jsii.member(jsii_name="peerTransitGatewayId")
     def peer_transit_gateway_id(self) -> builtins.str:
-        '''The ID of the transit gateway.'''
+        '''The ID of the transit gateway in the PeerRegion.'''
         return typing.cast(builtins.str, jsii.get(self, "peerTransitGatewayId"))
 
     @peer_transit_gateway_id.setter
@@ -57445,8 +57594,8 @@ class CfnTransitGatewayPeeringAttachmentProps:
         '''Properties for defining a ``CfnTransitGatewayPeeringAttachment``.
 
         :param peer_account_id: The ID of the AWS account that owns the transit gateway.
-        :param peer_region: The Region of the transit gateway.
-        :param peer_transit_gateway_id: The ID of the transit gateway.
+        :param peer_region: The Region where the transit gateway that you want to create the peer for is located.
+        :param peer_transit_gateway_id: The ID of the transit gateway in the PeerRegion.
         :param transit_gateway_id: The ID of the transit gateway peering attachment.
         :param tags: The tags for the transit gateway peering attachment.
 
@@ -57500,7 +57649,7 @@ class CfnTransitGatewayPeeringAttachmentProps:
 
     @builtins.property
     def peer_region(self) -> builtins.str:
-        '''The Region of the transit gateway.
+        '''The Region where the transit gateway that you want to create the peer for is located.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaypeeringattachment.html#cfn-ec2-transitgatewaypeeringattachment-peerregion
         '''
@@ -57510,7 +57659,7 @@ class CfnTransitGatewayPeeringAttachmentProps:
 
     @builtins.property
     def peer_transit_gateway_id(self) -> builtins.str:
-        '''The ID of the transit gateway.
+        '''The ID of the transit gateway in the PeerRegion.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaypeeringattachment.html#cfn-ec2-transitgatewaypeeringattachment-peertransitgatewayid
         '''
@@ -57591,8 +57740,8 @@ class CfnTransitGatewayProps:
         :param amazon_side_asn: A private Autonomous System Number (ASN) for the Amazon side of a BGP session. The range is 64512 to 65534 for 16-bit ASNs. The default is 64512.
         :param association_default_route_table_id: The ID of the default association route table.
         :param auto_accept_shared_attachments: Enable or disable automatic acceptance of attachment requests. Disabled by default.
-        :param default_route_table_association: Enable or disable automatic association with the default association route table. Enabled by default.
-        :param default_route_table_propagation: Enable or disable automatic propagation of routes to the default propagation route table. Enabled by default.
+        :param default_route_table_association: Enable or disable automatic association with the default association route table. Enabled by default. If ``DefaultRouteTableAssociation`` is set to enable, AWS Transit Gateway will create the default transit gateway route table.
+        :param default_route_table_propagation: Enable or disable automatic propagation of routes to the default propagation route table. Enabled by default. If ``DefaultRouteTablePropagation`` is set to enable, AWS Transit Gateway will create the default transit gateway route table.
         :param description: The description of the transit gateway.
         :param dns_support: Enable or disable DNS support. Enabled by default.
         :param multicast_support: Indicates whether multicast is enabled on the transit gateway.
@@ -57708,7 +57857,7 @@ class CfnTransitGatewayProps:
     def default_route_table_association(self) -> typing.Optional[builtins.str]:
         '''Enable or disable automatic association with the default association route table.
 
-        Enabled by default.
+        Enabled by default. If ``DefaultRouteTableAssociation`` is set to enable, AWS Transit Gateway will create the default transit gateway route table.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgateway.html#cfn-ec2-transitgateway-defaultroutetableassociation
         '''
@@ -57719,7 +57868,7 @@ class CfnTransitGatewayProps:
     def default_route_table_propagation(self) -> typing.Optional[builtins.str]:
         '''Enable or disable automatic propagation of routes to the default propagation route table.
 
-        Enabled by default.
+        Enabled by default. If ``DefaultRouteTablePropagation`` is set to enable, AWS Transit Gateway will create the default transit gateway route table.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgateway.html#cfn-ec2-transitgateway-defaultroutetablepropagation
         '''
@@ -69559,6 +69708,7 @@ class CfnVolume(
                 value="value"
             )],
             throughput=123,
+            volume_initialization_rate=123,
             volume_type="volumeType"
         )
     '''
@@ -69579,6 +69729,7 @@ class CfnVolume(
         snapshot_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         throughput: typing.Optional[jsii.Number] = None,
+        volume_initialization_rate: typing.Optional[jsii.Number] = None,
         volume_type: typing.Optional[builtins.str] = None,
     ) -> None:
         '''
@@ -69595,6 +69746,7 @@ class CfnVolume(
         :param snapshot_id: The snapshot from which to create the volume. You must specify either a snapshot ID or a volume size.
         :param tags: The tags to apply to the volume during creation.
         :param throughput: The throughput to provision for a volume, with a maximum of 1,000 MiB/s. This parameter is valid only for ``gp3`` volumes. The default value is 125. Valid Range: Minimum value of 125. Maximum value of 1000.
+        :param volume_initialization_rate: Specifies the Amazon EBS Provisioned Rate for Volume Initialization (volume initialization rate), in MiB/s, at which to download the snapshot blocks from Amazon S3 to the volume. This is also known as *volume initialization* . Specifying a volume initialization rate ensures that the volume is initialized at a predictable and consistent rate after creation. This parameter is supported only for volumes created from snapshots. Omit this parameter if: - You want to create the volume using fast snapshot restore. You must specify a snapshot that is enabled for fast snapshot restore. In this case, the volume is fully initialized at creation. .. epigraph:: If you specify a snapshot that is enabled for fast snapshot restore and a volume initialization rate, the volume will be initialized at the specified rate instead of fast snapshot restore. - You want to create a volume that is initialized at the default rate. For more information, see `Initialize Amazon EBS volumes <https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html>`_ in the *Amazon EC2 User Guide* . Valid range: 100 - 300 MiB/s
         :param volume_type: The volume type. This parameter can be one of the following values:. - General Purpose SSD: ``gp2`` | ``gp3`` - Provisioned IOPS SSD: ``io1`` | ``io2`` - Throughput Optimized HDD: ``st1`` - Cold HDD: ``sc1`` - Magnetic: ``standard`` For more information, see `Amazon EBS volume types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html>`_ . Default: ``gp2``
         '''
         if __debug__:
@@ -69613,6 +69765,7 @@ class CfnVolume(
             snapshot_id=snapshot_id,
             tags=tags,
             throughput=throughput,
+            volume_initialization_rate=volume_initialization_rate,
             volume_type=volume_type,
         )
 
@@ -69826,6 +69979,19 @@ class CfnVolume(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "throughput", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="volumeInitializationRate")
+    def volume_initialization_rate(self) -> typing.Optional[jsii.Number]:
+        '''Specifies the Amazon EBS Provisioned Rate for Volume Initialization (volume initialization rate), in MiB/s, at which to download the snapshot blocks from Amazon S3 to the volume.'''
+        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "volumeInitializationRate"))
+
+    @volume_initialization_rate.setter
+    def volume_initialization_rate(self, value: typing.Optional[jsii.Number]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0d794c400059825fc6340b04289a28489cba2b85515b159862a7fc5730b4181b)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "volumeInitializationRate", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="volumeType")
     def volume_type(self) -> typing.Optional[builtins.str]:
@@ -70089,6 +70255,7 @@ class CfnVolumeAttachmentProps:
         "snapshot_id": "snapshotId",
         "tags": "tags",
         "throughput": "throughput",
+        "volume_initialization_rate": "volumeInitializationRate",
         "volume_type": "volumeType",
     },
 )
@@ -70107,6 +70274,7 @@ class CfnVolumeProps:
         snapshot_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         throughput: typing.Optional[jsii.Number] = None,
+        volume_initialization_rate: typing.Optional[jsii.Number] = None,
         volume_type: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for defining a ``CfnVolume``.
@@ -70122,6 +70290,7 @@ class CfnVolumeProps:
         :param snapshot_id: The snapshot from which to create the volume. You must specify either a snapshot ID or a volume size.
         :param tags: The tags to apply to the volume during creation.
         :param throughput: The throughput to provision for a volume, with a maximum of 1,000 MiB/s. This parameter is valid only for ``gp3`` volumes. The default value is 125. Valid Range: Minimum value of 125. Maximum value of 1000.
+        :param volume_initialization_rate: Specifies the Amazon EBS Provisioned Rate for Volume Initialization (volume initialization rate), in MiB/s, at which to download the snapshot blocks from Amazon S3 to the volume. This is also known as *volume initialization* . Specifying a volume initialization rate ensures that the volume is initialized at a predictable and consistent rate after creation. This parameter is supported only for volumes created from snapshots. Omit this parameter if: - You want to create the volume using fast snapshot restore. You must specify a snapshot that is enabled for fast snapshot restore. In this case, the volume is fully initialized at creation. .. epigraph:: If you specify a snapshot that is enabled for fast snapshot restore and a volume initialization rate, the volume will be initialized at the specified rate instead of fast snapshot restore. - You want to create a volume that is initialized at the default rate. For more information, see `Initialize Amazon EBS volumes <https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html>`_ in the *Amazon EC2 User Guide* . Valid range: 100 - 300 MiB/s
         :param volume_type: The volume type. This parameter can be one of the following values:. - General Purpose SSD: ``gp2`` | ``gp3`` - Provisioned IOPS SSD: ``io1`` | ``io2`` - Throughput Optimized HDD: ``st1`` - Cold HDD: ``sc1`` - Magnetic: ``standard`` For more information, see `Amazon EBS volume types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html>`_ . Default: ``gp2``
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html
@@ -70150,6 +70319,7 @@ class CfnVolumeProps:
                     value="value"
                 )],
                 throughput=123,
+                volume_initialization_rate=123,
                 volume_type="volumeType"
             )
         '''
@@ -70166,6 +70336,7 @@ class CfnVolumeProps:
             check_type(argname="argument snapshot_id", value=snapshot_id, expected_type=type_hints["snapshot_id"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
             check_type(argname="argument throughput", value=throughput, expected_type=type_hints["throughput"])
+            check_type(argname="argument volume_initialization_rate", value=volume_initialization_rate, expected_type=type_hints["volume_initialization_rate"])
             check_type(argname="argument volume_type", value=volume_type, expected_type=type_hints["volume_type"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "availability_zone": availability_zone,
@@ -70190,6 +70361,8 @@ class CfnVolumeProps:
             self._values["tags"] = tags
         if throughput is not None:
             self._values["throughput"] = throughput
+        if volume_initialization_rate is not None:
+            self._values["volume_initialization_rate"] = volume_initialization_rate
         if volume_type is not None:
             self._values["volume_type"] = volume_type
 
@@ -70348,6 +70521,31 @@ class CfnVolumeProps:
         result = self._values.get("throughput")
         return typing.cast(typing.Optional[jsii.Number], result)
 
+    @builtins.property
+    def volume_initialization_rate(self) -> typing.Optional[jsii.Number]:
+        '''Specifies the Amazon EBS Provisioned Rate for Volume Initialization (volume initialization rate), in MiB/s, at which to download the snapshot blocks from Amazon S3 to the volume.
+
+        This is also known as *volume initialization* . Specifying a volume initialization rate ensures that the volume is initialized at a predictable and consistent rate after creation.
+
+        This parameter is supported only for volumes created from snapshots. Omit this parameter if:
+
+        - You want to create the volume using fast snapshot restore. You must specify a snapshot that is enabled for fast snapshot restore. In this case, the volume is fully initialized at creation.
+
+        .. epigraph::
+
+           If you specify a snapshot that is enabled for fast snapshot restore and a volume initialization rate, the volume will be initialized at the specified rate instead of fast snapshot restore.
+
+        - You want to create a volume that is initialized at the default rate.
+
+        For more information, see `Initialize Amazon EBS volumes <https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html>`_ in the *Amazon EC2 User Guide* .
+
+        Valid range: 100 - 300 MiB/s
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-volumeinitializationrate
+        '''
+        result = self._values.get("volume_initialization_rate")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
     @builtins.property
     def volume_type(self) -> typing.Optional[builtins.str]:
         '''The volume type. This parameter can be one of the following values:.
@@ -70437,6 +70635,12 @@ class ClientVpnAuthorizationRule(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.ClientVpnAuthorizationRuleOptions",
@@ -71514,6 +71718,12 @@ class ClientVpnRoute(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.ClientVpnRouteOptions",
@@ -79230,6 +79440,12 @@ class Instance(
 
         return typing.cast(None, jsii.invoke(self, "applyCloudFormationInit", [init, options]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="connections")
     def connections(self) -> "Connections":
@@ -79552,6 +79768,10 @@ class InstanceClass(enum.Enum):
     '''Memory optimized instances with Graviton4 processors.'''
     R8G = "R8G"
     '''Memory optimized instances with Graviton4 processors.'''
+    MEMORY8_GRAVITON4_NVME_DRIVE = "MEMORY8_GRAVITON4_NVME_DRIVE"
+    '''Memory optimized instances, 8th generation with Graviton4 processors and local NVME drive.'''
+    R8GD = "R8GD"
+    '''Memory optimized instances, 8th generation with Graviton4 processors and local NVME drive.'''
     COMPUTE3 = "COMPUTE3"
     '''Compute optimized instances, 3rd generation.'''
     C3 = "C3"
@@ -79628,6 +79848,10 @@ class InstanceClass(enum.Enum):
 
     This instance class is currently only available in US East (Ohio), US East (N. Virginia), US West (Oregon), and Europe (Ireland).
     '''
+    COMPUTE8_GRAVITON4_NVME_DRIVE = "COMPUTE8_GRAVITON4_NVME_DRIVE"
+    '''Compute optimized instances for high performance computing, 8th generation with Graviton4 processors and local NVME drive.'''
+    C8GD = "C8GD"
+    '''Compute optimized instances for high performance computing, 8th generation with Graviton4 processors and local NVME drive.'''
     COMPUTE6_GRAVITON2_HIGH_NETWORK_BANDWIDTH = "COMPUTE6_GRAVITON2_HIGH_NETWORK_BANDWIDTH"
     '''Compute optimized instances for high performance computing, 6th generation with Graviton2 processors and high network bandwidth capabilities.'''
     C6GN = "C6GN"
@@ -79910,6 +80134,10 @@ class InstanceClass(enum.Enum):
 
     This instance class is currently only available in US East (Ohio), US East (N. Virginia), US West (Oregon), and Europe (Ireland).
     '''
+    STANDARD8_GRAVITON4_NVME_DRIVE = "STANDARD8_GRAVITON4_NVME_DRIVE"
+    '''Standard instances, 8th generation with Graviton4 processors and local NVME drive.'''
+    M8GD = "M8GD"
+    '''Standard instances, 8th generation with Graviton4 processors and local NVME drive.'''
     STANDARD7_INTEL = "STANDARD7_INTEL"
     '''Standard instances with high memory and compute capacity based on Intel Xeon Scalable (Sapphire Rapids) processors, 7th generation.'''
     M7I = "M7I"
@@ -83898,6 +84126,12 @@ class KeyPair(
             check_type(argname="argument key_pair_name", value=key_pair_name, expected_type=type_hints["key_pair_name"])
         return typing.cast(IKeyPair, jsii.sinvoke(cls, "fromKeyPairName", [scope, id, key_pair_name]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="format")
     def format(self) -> "KeyPairFormat":
@@ -84442,6 +84676,12 @@ class LaunchTemplate(
             check_type(argname="argument security_group", value=security_group, expected_type=type_hints["security_group"])
         return typing.cast(None, jsii.invoke(self, "addSecurityGroup", [security_group]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="connections")
     def connections(self) -> "Connections":
@@ -87719,6 +87959,12 @@ class NetworkAcl(
 
         return typing.cast(None, jsii.invoke(self, "associateWithSubnet", [id, selection]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="networkAclId")
     def network_acl_id(self) -> builtins.str:
@@ -87811,6 +88057,12 @@ class NetworkAclEntry(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="networkAcl")
     def network_acl(self) -> INetworkAcl:
@@ -88159,7 +88411,7 @@ class Peer(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_ec2.Peer"):
         
         cluster = msk.Cluster(self, "Cluster",
             cluster_name="myCluster",
-            kafka_version=msk.KafkaVersion.V3_8_X,
+            kafka_version=msk.KafkaVersion.V3_9_X,
             vpc=vpc
         )
         
@@ -88323,6 +88575,12 @@ class PlacementGroup(
             check_type(argname="argument placement_group_name", value=placement_group_name, expected_type=type_hints["placement_group_name"])
         return typing.cast(IPlacementGroup, jsii.sinvoke(cls, "fromPlacementGroupName", [scope, id, placement_group_name]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="placementGroupName")
     def placement_group_name(self) -> builtins.str:
@@ -88559,7 +88817,7 @@ class Port(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_ec2.Port"):
         
         cluster = msk.Cluster(self, "Cluster",
             cluster_name="myCluster",
-            kafka_version=msk.KafkaVersion.V3_8_X,
+            kafka_version=msk.KafkaVersion.V3_9_X,
             vpc=vpc
         )
         
@@ -89043,6 +89301,12 @@ class PrefixList(
             check_type(argname="argument prefix_list_id", value=prefix_list_id, expected_type=type_hints["prefix_list_id"])
         return typing.cast(IPrefixList, jsii.sinvoke(cls, "fromPrefixListId", [scope, id, prefix_list_id]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="addressFamily")
     def address_family(self) -> builtins.str:
@@ -90288,6 +90552,12 @@ class SecurityGroup(
         '''Produce the ingress rule JSON for the given connection.'''
         return typing.cast(typing.Any, jsii.invoke(self, "toIngressRuleConfig", []))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="allowAllIpv6Outbound")
     def allow_all_ipv6_outbound(self) -> builtins.bool:
@@ -91202,6 +91472,12 @@ class Subnet(
             check_type(argname="argument network_acl", value=network_acl, expected_type=type_hints["network_acl"])
         return typing.cast(None, jsii.invoke(self, "associateNetworkAcl", [id, network_acl]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="availabilityZone")
     def availability_zone(self) -> builtins.str:
@@ -91805,6 +92081,12 @@ class SubnetNetworkAclAssociation(
             check_type(argname="argument subnet_network_acl_association_association_id", value=subnet_network_acl_association_association_id, expected_type=type_hints["subnet_network_acl_association_association_id"])
         return typing.cast(ISubnetNetworkAclAssociation, jsii.sinvoke(cls, "fromSubnetNetworkAclAssociationAssociationId", [scope, id, subnet_network_acl_association_association_id]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="networkAcl")
     def network_acl(self) -> INetworkAcl:
@@ -93019,6 +93301,12 @@ class Volume(
 
         return typing.cast(None, jsii.invoke(self, "validateProps", [props]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="availabilityZone")
     def availability_zone(self) -> builtins.str:
@@ -94004,6 +94292,12 @@ class Vpc(
         '''
         return typing.cast(typing.List[SubnetConfiguration], jsii.sget(cls, "DEFAULT_SUBNETS_NO_NAT"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="availabilityZones")
     def availability_zones(self) -> typing.List[builtins.str]:
@@ -94707,6 +95001,12 @@ class VpcEndpointService(
         '''The default value for a VPC Endpoint Service name prefix, useful if you do not have a synthesize-time region literal available (all you have is ``{ "Ref": "AWS::Region" }``).'''
         return typing.cast(builtins.str, jsii.sget(cls, "DEFAULT_PREFIX"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="acceptanceRequired")
     def acceptance_required(self) -> builtins.bool:
@@ -96396,6 +96696,12 @@ class VpnGateway(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="gatewayId")
     def gateway_id(self) -> builtins.str:
@@ -97727,6 +98033,12 @@ class BastionHostLinux(
             check_type(argname="argument peer", value=peer, expected_type=typing.Tuple[type_hints["peer"], ...]) # pyright: ignore [reportGeneralTypeIssues]
         return typing.cast(None, jsii.invoke(self, "allowSshAccessFrom", [*peer]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="connections")
     def connections(self) -> "Connections":
@@ -98712,6 +99024,12 @@ class FlowLog(
             check_type(argname="argument flow_log_id", value=flow_log_id, expected_type=type_hints["flow_log_id"])
         return typing.cast(IFlowLog, jsii.sinvoke(cls, "fromFlowLogId", [scope, id, flow_log_id]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="flowLogId")
     def flow_log_id(self) -> builtins.str:
@@ -100029,6 +100347,12 @@ class InterfaceVpcEndpoint(
 
         return typing.cast(IInterfaceVpcEndpoint, jsii.sinvoke(cls, "fromInterfaceVpcEndpointAttributes", [scope, id, attrs]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="connections")
     def connections(self) -> Connections:
@@ -100695,6 +101019,12 @@ class PrivateSubnet(
 
         return typing.cast(IPrivateSubnet, jsii.sinvoke(cls, "fromPrivateSubnetAttributes", [scope, id, attrs]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.PrivateSubnetAttributes",
@@ -101050,6 +101380,12 @@ class PublicSubnet(
             check_type(argname="argument eip_allocation_id", value=eip_allocation_id, expected_type=type_hints["eip_allocation_id"])
         return typing.cast(CfnNatGateway, jsii.invoke(self, "addNatGateway", [eip_allocation_id]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.PublicSubnetAttributes",
@@ -101566,6 +101902,12 @@ class VpnConnection(
 
         return typing.cast(_Metric_e396a4dc, jsii.sinvoke(cls, "metricAllTunnelState", [props]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="customerGatewayAsn")
     def customer_gateway_asn(self) -> jsii.Number:
@@ -102250,6 +102592,12 @@ class ClientVpnEndpoint(
 
         return typing.cast(ClientVpnRoute, jsii.invoke(self, "addRoute", [id, props]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="connections")
     def connections(self) -> Connections:
@@ -102353,6 +102701,12 @@ class GatewayVpcEndpoint(
             check_type(argname="argument gateway_vpc_endpoint_id", value=gateway_vpc_endpoint_id, expected_type=type_hints["gateway_vpc_endpoint_id"])
         return typing.cast(IGatewayVpcEndpoint, jsii.sinvoke(cls, "fromGatewayVpcEndpointId", [scope, id, gateway_vpc_endpoint_id]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="vpcEndpointCreationTimestamp")
     def vpc_endpoint_creation_timestamp(self) -> builtins.str:
@@ -103550,6 +103904,7 @@ def _typecheckingstub__1880bffa9253aaedfa6af6175da6262a96ea34dadf82dc678a1eef91c
     server_certificate_arn: builtins.str,
     client_connect_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientConnectOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     client_login_banner_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientLoginBannerOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    client_route_enforcement_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     description: typing.Optional[builtins.str] = None,
     disconnect_on_session_timeout: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -103613,6 +103968,12 @@ def _typecheckingstub__497c1bea9e9caa987aeafc2d4334f07cd2d9664a3f3cd38bebd561170
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__b7449176e28b63826ef826a7cc608350858f54ad63967741bedbe6e29e4548e0(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__bb1d5fb0102c1b6de24ad13acfc13837ec5422291e23048395fe03350aea2188(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -103712,6 +104073,13 @@ def _typecheckingstub__907ff3a3bd097ac37a720bbc18cf4e29748beb226ddf13641e4835016
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__b6a34038d1c5e331979b92a9cd810c8c4993fdf3bdc4b6a567ffbfa48ba19f4e(
+    *,
+    enforced: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__2c142e5322bb8bda4ace9616736c0e12d7c7b9b219932b4168a975e68d0d9395(
     *,
     enabled: typing.Union[builtins.bool, _IResolvable_da3f097b],
@@ -103752,6 +104120,7 @@ def _typecheckingstub__05994467e800c33b4a01e884b4b20bef2569d710f5dc323617cd814e5
     server_certificate_arn: builtins.str,
     client_connect_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientConnectOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     client_login_banner_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientLoginBannerOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    client_route_enforcement_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnClientVpnEndpoint.ClientRouteEnforcementOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     description: typing.Optional[builtins.str] = None,
     disconnect_on_session_timeout: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -107215,6 +107584,7 @@ def _typecheckingstub__678aad296e8f8e492a0d5ebb106e185ee0e54a22ad01e148f0ae03d00
     network_insights_path_id: builtins.str,
     additional_accounts: typing.Optional[typing.Sequence[builtins.str]] = None,
     filter_in_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
+    filter_out_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -107250,6 +107620,12 @@ def _typecheckingstub__5fc330fa3d4b736d5224dcb5d8f30fe938109a4316d70b31bac388cd1
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a3e2782a8511eec581f257080a1a098ac8d87ebc507433291c01b4f61ad401ff(
+    value: typing.Optional[typing.List[builtins.str]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__9412010e2d8bad87553154226eb22ca797b6afeb1de0474359133f2783db6f65(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
@@ -107458,6 +107834,7 @@ def _typecheckingstub__a33d492e092024ce4f03ae533f82763ceee950f76808ddc3b6329ed54
     network_insights_path_id: builtins.str,
     additional_accounts: typing.Optional[typing.Sequence[builtins.str]] = None,
     filter_in_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
+    filter_out_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -112544,6 +112921,7 @@ def _typecheckingstub__915a70f35b9237e059cd8fc78c5da31e1d4f2476ed4857c7ac173e559
     snapshot_id: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     throughput: typing.Optional[jsii.Number] = None,
+    volume_initialization_rate: typing.Optional[jsii.Number] = None,
     volume_type: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -112627,6 +113005,12 @@ def _typecheckingstub__52b794f14acdf16af1459720ad364d41f271215d47cf0e4717dd83ce0
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__0d794c400059825fc6340b04289a28489cba2b85515b159862a7fc5730b4181b(
+    value: typing.Optional[jsii.Number],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__45764f3b57b9177d923e13cf91fbc29ed9c80eeebc001d4bd7c1600d28437ee6(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -112696,6 +113080,7 @@ def _typecheckingstub__df1f84bfc2d41a9f2d283d6a706150686c01c8f45a742c92af54cbee7
     snapshot_id: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     throughput: typing.Optional[jsii.Number] = None,
+    volume_initialization_rate: typing.Optional[jsii.Number] = None,
     volume_type: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""