aws-cdk-lib 2.195.0__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_vpclattice/__init__.py

@@ -68,9 +68,37 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_vpclattice import (
+    AccessLogSubscriptionReference as _AccessLogSubscriptionReference_25905b5c,
+    AuthPolicyReference as _AuthPolicyReference_2a1c0bc7,
+    IAccessLogSubscriptionRef as _IAccessLogSubscriptionRef_3411271a,
+    IAuthPolicyRef as _IAuthPolicyRef_38d3dc32,
+    IListenerRef as _IListenerRef_04c46b6b,
+    IResourceConfigurationRef as _IResourceConfigurationRef_b9c2bd0b,
+    IResourceGatewayRef as _IResourceGatewayRef_f860a76d,
+    IResourcePolicyRef as _IResourcePolicyRef_8fa06c25,
+    IRuleRef as _IRuleRef_b63824ff,
+    IServiceNetworkRef as _IServiceNetworkRef_1e3df588,
+    IServiceNetworkResourceAssociationRef as _IServiceNetworkResourceAssociationRef_82997816,
+    IServiceNetworkServiceAssociationRef as _IServiceNetworkServiceAssociationRef_c2d152c8,
+    IServiceNetworkVpcAssociationRef as _IServiceNetworkVpcAssociationRef_6dc1c638,
+    IServiceRef as _IServiceRef_a78feffa,
+    ITargetGroupRef as _ITargetGroupRef_52994392,
+    ListenerReference as _ListenerReference_c52b20d4,
+    ResourceConfigurationReference as _ResourceConfigurationReference_b8808895,
+    ResourceGatewayReference as _ResourceGatewayReference_8df20c1e,
+    ResourcePolicyReference as _ResourcePolicyReference_0b2635a1,
+    RuleReference as _RuleReference_7f707c6c,
+    ServiceNetworkReference as _ServiceNetworkReference_e27144ae,
+    ServiceNetworkResourceAssociationReference as _ServiceNetworkResourceAssociationReference_02618c82,
+    ServiceNetworkServiceAssociationReference as _ServiceNetworkServiceAssociationReference_4ecaad47,
+    ServiceNetworkVpcAssociationReference as _ServiceNetworkVpcAssociationReference_b2c1552d,
+    ServiceReference as _ServiceReference_d8f4325a,
+    TargetGroupReference as _TargetGroupReference_6c9bb51b,
+)
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IAccessLogSubscriptionRef_3411271a, _ITaggable_36806126)
 class CfnAccessLogSubscription(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -113,7 +141,8 @@ class CfnAccessLogSubscription(
         service_network_log_type: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::AccessLogSubscription``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param destination_arn: The Amazon Resource Name (ARN) of the destination. The supported destination types are CloudWatch Log groups, Kinesis Data Firehose delivery streams, and Amazon S3 buckets.
@@ -164,6 +193,12 @@ class CfnAccessLogSubscription(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="accessLogSubscriptionRef")
+    def access_log_subscription_ref(self) -> _AccessLogSubscriptionReference_25905b5c:
+        '''A reference to a AccessLogSubscription resource.'''
+        return typing.cast(_AccessLogSubscriptionReference_25905b5c, jsii.get(self, "accessLogSubscriptionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="attrArn")
     def attr_arn(self) -> builtins.str:
@@ -378,7 +413,7 @@ class CfnAccessLogSubscriptionProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IAuthPolicyRef_38d3dc32)
 class CfnAuthPolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -414,7 +449,8 @@ class CfnAuthPolicy(
         policy: typing.Any,
         resource_identifier: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::AuthPolicy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param policy: The auth policy.
@@ -471,6 +507,12 @@ class CfnAuthPolicy(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrState"))
 
+    @builtins.property
+    @jsii.member(jsii_name="authPolicyRef")
+    def auth_policy_ref(self) -> _AuthPolicyReference_2a1c0bc7:
+        '''A reference to a AuthPolicy resource.'''
+        return typing.cast(_AuthPolicyReference_2a1c0bc7, jsii.get(self, "authPolicyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -577,7 +619,7 @@ class CfnAuthPolicyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IListenerRef_04c46b6b, _ITaggable_36806126)
 class CfnListener(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -636,7 +678,8 @@ class CfnListener(
         service_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::Listener``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param default_action: The action for the default rule. Each listener has a default rule. The default rule is used if no other rules match.
@@ -732,6 +775,12 @@ class CfnListener(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="listenerRef")
+    def listener_ref(self) -> _ListenerReference_c52b20d4:
+        '''A reference to a Listener resource.'''
+        return typing.cast(_ListenerReference_c52b20d4, jsii.get(self, "listenerRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -1276,7 +1325,7 @@ class CfnListenerProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IResourceConfigurationRef_b9c2bd0b, _ITaggableV2_4e6798f8)
 class CfnResourceConfiguration(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1297,8 +1346,11 @@ class CfnResourceConfiguration(
         from aws_cdk import aws_vpclattice as vpclattice
         
         cfn_resource_configuration = vpclattice.CfnResourceConfiguration(self, "MyCfnResourceConfiguration",
-            allow_association_to_sharable_service_network=False,
             name="name",
+            resource_configuration_type="resourceConfigurationType",
+        
+            # the properties below are optional
+            allow_association_to_sharable_service_network=False,
             port_ranges=["portRanges"],
             protocol_type="protocolType",
             resource_configuration_auth_type="resourceConfigurationAuthType",
@@ -1311,7 +1363,6 @@ class CfnResourceConfiguration(
                 ip_resource="ipResource"
             ),
             resource_configuration_group_id="resourceConfigurationGroupId",
-            resource_configuration_type="resourceConfigurationType",
             resource_gateway_id="resourceGatewayId",
             tags=[CfnTag(
                 key="key",
@@ -1325,28 +1376,29 @@ class CfnResourceConfiguration(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
+        name: builtins.str,
+        resource_configuration_type: builtins.str,
         allow_association_to_sharable_service_network: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-        name: typing.Optional[builtins.str] = None,
         port_ranges: typing.Optional[typing.Sequence[builtins.str]] = None,
         protocol_type: typing.Optional[builtins.str] = None,
         resource_configuration_auth_type: typing.Optional[builtins.str] = None,
         resource_configuration_definition: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnResourceConfiguration.ResourceConfigurationDefinitionProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         resource_configuration_group_id: typing.Optional[builtins.str] = None,
-        resource_configuration_type: typing.Optional[builtins.str] = None,
         resource_gateway_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ResourceConfiguration``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param allow_association_to_sharable_service_network: Specifies whether the resource configuration can be associated with a sharable service network.
         :param name: The name of the resource configuration.
+        :param resource_configuration_type: The type of resource configuration. A resource configuration can be one of the following types:. - *SINGLE* - A single resource. - *GROUP* - A group of resources. You must create a group resource configuration before you create a child resource configuration. - *CHILD* - A single resource that is part of a group resource configuration. - *ARN* - An AWS resource.
+        :param allow_association_to_sharable_service_network: Specifies whether the resource configuration can be associated with a sharable service network.
         :param port_ranges: (SINGLE, GROUP, CHILD) The TCP port ranges that a consumer can use to access a resource configuration (for example: 1-65535). You can separate port ranges using commas (for example: 1,2,22-30).
         :param protocol_type: (SINGLE, GROUP) The protocol accepted by the resource configuration.
         :param resource_configuration_auth_type: The auth type for the resource configuration.
         :param resource_configuration_definition: Identifies the resource configuration in one of the following ways:. - *Amazon Resource Name (ARN)* - Supported resource-types that are provisioned by AWS services, such as RDS databases, can be identified by their ARN. - *Domain name* - Any domain name that is publicly resolvable. - *IP address* - For IPv4 and IPv6, only IP addresses in the VPC are supported.
         :param resource_configuration_group_id: The ID of the group resource configuration.
-        :param resource_configuration_type: The type of resource configuration. A resource configuration can be one of the following types:. - *SINGLE* - A single resource. - *GROUP* - A group of resources. You must create a group resource configuration before you create a child resource configuration. - *CHILD* - A single resource that is part of a group resource configuration. - *ARN* - An AWS resource.
         :param resource_gateway_id: The ID of the resource gateway.
         :param tags: The tags for the resource configuration.
         '''
@@ -1355,14 +1407,14 @@ class CfnResourceConfiguration(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnResourceConfigurationProps(
-            allow_association_to_sharable_service_network=allow_association_to_sharable_service_network,
             name=name,
+            resource_configuration_type=resource_configuration_type,
+            allow_association_to_sharable_service_network=allow_association_to_sharable_service_network,
             port_ranges=port_ranges,
             protocol_type=protocol_type,
             resource_configuration_auth_type=resource_configuration_auth_type,
             resource_configuration_definition=resource_configuration_definition,
             resource_configuration_group_id=resource_configuration_group_id,
-            resource_configuration_type=resource_configuration_type,
             resource_gateway_id=resource_gateway_id,
             tags=tags,
         )
@@ -1428,6 +1480,41 @@ class CfnResourceConfiguration(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="resourceConfigurationRef")
+    def resource_configuration_ref(self) -> _ResourceConfigurationReference_b8808895:
+        '''A reference to a ResourceConfiguration resource.'''
+        return typing.cast(_ResourceConfigurationReference_b8808895, jsii.get(self, "resourceConfigurationRef"))
+
+    @builtins.property
+    @jsii.member(jsii_name="name")
+    def name(self) -> builtins.str:
+        '''The name of the resource configuration.'''
+        return typing.cast(builtins.str, jsii.get(self, "name"))
+
+    @name.setter
+    def name(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__05c6c80cd49033d3aa0afe190c923dcae73156dcab6ce48936861ca4ccc73ef0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="resourceConfigurationType")
+    def resource_configuration_type(self) -> builtins.str:
+        '''The type of resource configuration.
+
+        A resource configuration can be one of the following types:.
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "resourceConfigurationType"))
+
+    @resource_configuration_type.setter
+    def resource_configuration_type(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__78c78698636e3ca61354c53cb8cdfc165b65a1ae7d941087c00f199b89c59f80)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "resourceConfigurationType", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="allowAssociationToSharableServiceNetwork")
     def allow_association_to_sharable_service_network(
@@ -1446,19 +1533,6 @@ class CfnResourceConfiguration(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "allowAssociationToSharableServiceNetwork", value) # pyright: ignore[reportArgumentType]
 
-    @builtins.property
-    @jsii.member(jsii_name="name")
-    def name(self) -> typing.Optional[builtins.str]:
-        '''The name of the resource configuration.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "name"))
-
-    @name.setter
-    def name(self, value: typing.Optional[builtins.str]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__05c6c80cd49033d3aa0afe190c923dcae73156dcab6ce48936861ca4ccc73ef0)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="portRanges")
     def port_ranges(self) -> typing.Optional[typing.List[builtins.str]]:
@@ -1535,22 +1609,6 @@ class CfnResourceConfiguration(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "resourceConfigurationGroupId", value) # pyright: ignore[reportArgumentType]
 
-    @builtins.property
-    @jsii.member(jsii_name="resourceConfigurationType")
-    def resource_configuration_type(self) -> typing.Optional[builtins.str]:
-        '''The type of resource configuration.
-
-        A resource configuration can be one of the following types:.
-        '''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "resourceConfigurationType"))
-
-    @resource_configuration_type.setter
-    def resource_configuration_type(self, value: typing.Optional[builtins.str]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__78c78698636e3ca61354c53cb8cdfc165b65a1ae7d941087c00f199b89c59f80)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "resourceConfigurationType", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="resourceGatewayId")
     def resource_gateway_id(self) -> typing.Optional[builtins.str]:
@@ -1592,7 +1650,7 @@ class CfnResourceConfiguration(
             '''The domain name of the resource configuration.
 
             :param domain_name: The domain name of the resource configuration.
-            :param ip_address_type: The IP address type for the resource configuration.
+            :param ip_address_type: The IP address type for the resource configuration. Dualstack is not currently supported.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-vpclattice-resourceconfiguration-dnsresource.html
             :exampleMetadata: fixture=_generated
@@ -1631,6 +1689,8 @@ class CfnResourceConfiguration(
         def ip_address_type(self) -> builtins.str:
             '''The IP address type for the resource configuration.
 
+            Dualstack is not currently supported.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-vpclattice-resourceconfiguration-dnsresource.html#cfn-vpclattice-resourceconfiguration-dnsresource-ipaddresstype
             '''
             result = self._values.get("ip_address_type")
@@ -1753,14 +1813,14 @@ class CfnResourceConfiguration(
     jsii_type="aws-cdk-lib.aws_vpclattice.CfnResourceConfigurationProps",
     jsii_struct_bases=[],
     name_mapping={
-        "allow_association_to_sharable_service_network": "allowAssociationToSharableServiceNetwork",
         "name": "name",
+        "resource_configuration_type": "resourceConfigurationType",
+        "allow_association_to_sharable_service_network": "allowAssociationToSharableServiceNetwork",
         "port_ranges": "portRanges",
         "protocol_type": "protocolType",
         "resource_configuration_auth_type": "resourceConfigurationAuthType",
         "resource_configuration_definition": "resourceConfigurationDefinition",
         "resource_configuration_group_id": "resourceConfigurationGroupId",
-        "resource_configuration_type": "resourceConfigurationType",
         "resource_gateway_id": "resourceGatewayId",
         "tags": "tags",
     },
@@ -1769,27 +1829,27 @@ class CfnResourceConfigurationProps:
     def __init__(
         self,
         *,
+        name: builtins.str,
+        resource_configuration_type: builtins.str,
         allow_association_to_sharable_service_network: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-        name: typing.Optional[builtins.str] = None,
         port_ranges: typing.Optional[typing.Sequence[builtins.str]] = None,
         protocol_type: typing.Optional[builtins.str] = None,
         resource_configuration_auth_type: typing.Optional[builtins.str] = None,
         resource_configuration_definition: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnResourceConfiguration.ResourceConfigurationDefinitionProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         resource_configuration_group_id: typing.Optional[builtins.str] = None,
-        resource_configuration_type: typing.Optional[builtins.str] = None,
         resource_gateway_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnResourceConfiguration``.
 
-        :param allow_association_to_sharable_service_network: Specifies whether the resource configuration can be associated with a sharable service network.
         :param name: The name of the resource configuration.
+        :param resource_configuration_type: The type of resource configuration. A resource configuration can be one of the following types:. - *SINGLE* - A single resource. - *GROUP* - A group of resources. You must create a group resource configuration before you create a child resource configuration. - *CHILD* - A single resource that is part of a group resource configuration. - *ARN* - An AWS resource.
+        :param allow_association_to_sharable_service_network: Specifies whether the resource configuration can be associated with a sharable service network.
         :param port_ranges: (SINGLE, GROUP, CHILD) The TCP port ranges that a consumer can use to access a resource configuration (for example: 1-65535). You can separate port ranges using commas (for example: 1,2,22-30).
         :param protocol_type: (SINGLE, GROUP) The protocol accepted by the resource configuration.
         :param resource_configuration_auth_type: The auth type for the resource configuration.
         :param resource_configuration_definition: Identifies the resource configuration in one of the following ways:. - *Amazon Resource Name (ARN)* - Supported resource-types that are provisioned by AWS services, such as RDS databases, can be identified by their ARN. - *Domain name* - Any domain name that is publicly resolvable. - *IP address* - For IPv4 and IPv6, only IP addresses in the VPC are supported.
         :param resource_configuration_group_id: The ID of the group resource configuration.
-        :param resource_configuration_type: The type of resource configuration. A resource configuration can be one of the following types:. - *SINGLE* - A single resource. - *GROUP* - A group of resources. You must create a group resource configuration before you create a child resource configuration. - *CHILD* - A single resource that is part of a group resource configuration. - *ARN* - An AWS resource.
         :param resource_gateway_id: The ID of the resource gateway.
         :param tags: The tags for the resource configuration.
 
@@ -1803,8 +1863,11 @@ class CfnResourceConfigurationProps:
             from aws_cdk import aws_vpclattice as vpclattice
             
             cfn_resource_configuration_props = vpclattice.CfnResourceConfigurationProps(
-                allow_association_to_sharable_service_network=False,
                 name="name",
+                resource_configuration_type="resourceConfigurationType",
+            
+                # the properties below are optional
+                allow_association_to_sharable_service_network=False,
                 port_ranges=["portRanges"],
                 protocol_type="protocolType",
                 resource_configuration_auth_type="resourceConfigurationAuthType",
@@ -1817,7 +1880,6 @@ class CfnResourceConfigurationProps:
                     ip_resource="ipResource"
                 ),
                 resource_configuration_group_id="resourceConfigurationGroupId",
-                resource_configuration_type="resourceConfigurationType",
                 resource_gateway_id="resourceGatewayId",
                 tags=[CfnTag(
                     key="key",
@@ -1827,21 +1889,22 @@ class CfnResourceConfigurationProps:
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__797cfcb00db81ec7627009ae5f799c38c09652aee4a602480e341f9e4049b098)
-            check_type(argname="argument allow_association_to_sharable_service_network", value=allow_association_to_sharable_service_network, expected_type=type_hints["allow_association_to_sharable_service_network"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument resource_configuration_type", value=resource_configuration_type, expected_type=type_hints["resource_configuration_type"])
+            check_type(argname="argument allow_association_to_sharable_service_network", value=allow_association_to_sharable_service_network, expected_type=type_hints["allow_association_to_sharable_service_network"])
             check_type(argname="argument port_ranges", value=port_ranges, expected_type=type_hints["port_ranges"])
             check_type(argname="argument protocol_type", value=protocol_type, expected_type=type_hints["protocol_type"])
             check_type(argname="argument resource_configuration_auth_type", value=resource_configuration_auth_type, expected_type=type_hints["resource_configuration_auth_type"])
             check_type(argname="argument resource_configuration_definition", value=resource_configuration_definition, expected_type=type_hints["resource_configuration_definition"])
             check_type(argname="argument resource_configuration_group_id", value=resource_configuration_group_id, expected_type=type_hints["resource_configuration_group_id"])
-            check_type(argname="argument resource_configuration_type", value=resource_configuration_type, expected_type=type_hints["resource_configuration_type"])
             check_type(argname="argument resource_gateway_id", value=resource_gateway_id, expected_type=type_hints["resource_gateway_id"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "name": name,
+            "resource_configuration_type": resource_configuration_type,
+        }
         if allow_association_to_sharable_service_network is not None:
             self._values["allow_association_to_sharable_service_network"] = allow_association_to_sharable_service_network
-        if name is not None:
-            self._values["name"] = name
         if port_ranges is not None:
             self._values["port_ranges"] = port_ranges
         if protocol_type is not None:
@@ -1852,13 +1915,36 @@ class CfnResourceConfigurationProps:
             self._values["resource_configuration_definition"] = resource_configuration_definition
         if resource_configuration_group_id is not None:
             self._values["resource_configuration_group_id"] = resource_configuration_group_id
-        if resource_configuration_type is not None:
-            self._values["resource_configuration_type"] = resource_configuration_type
         if resource_gateway_id is not None:
             self._values["resource_gateway_id"] = resource_gateway_id
         if tags is not None:
             self._values["tags"] = tags
 
+    @builtins.property
+    def name(self) -> builtins.str:
+        '''The name of the resource configuration.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourceconfiguration.html#cfn-vpclattice-resourceconfiguration-name
+        '''
+        result = self._values.get("name")
+        assert result is not None, "Required property 'name' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def resource_configuration_type(self) -> builtins.str:
+        '''The type of resource configuration. A resource configuration can be one of the following types:.
+
+        - *SINGLE* - A single resource.
+        - *GROUP* - A group of resources. You must create a group resource configuration before you create a child resource configuration.
+        - *CHILD* - A single resource that is part of a group resource configuration.
+        - *ARN* - An AWS resource.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourceconfiguration.html#cfn-vpclattice-resourceconfiguration-resourceconfigurationtype
+        '''
+        result = self._values.get("resource_configuration_type")
+        assert result is not None, "Required property 'resource_configuration_type' is missing"
+        return typing.cast(builtins.str, result)
+
     @builtins.property
     def allow_association_to_sharable_service_network(
         self,
@@ -1870,15 +1956,6 @@ class CfnResourceConfigurationProps:
         result = self._values.get("allow_association_to_sharable_service_network")
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
-    @builtins.property
-    def name(self) -> typing.Optional[builtins.str]:
-        '''The name of the resource configuration.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourceconfiguration.html#cfn-vpclattice-resourceconfiguration-name
-        '''
-        result = self._values.get("name")
-        return typing.cast(typing.Optional[builtins.str], result)
-
     @builtins.property
     def port_ranges(self) -> typing.Optional[typing.List[builtins.str]]:
         '''(SINGLE, GROUP, CHILD) The TCP port ranges that a consumer can use to access a resource configuration (for example: 1-65535).
@@ -1932,20 +2009,6 @@ class CfnResourceConfigurationProps:
         result = self._values.get("resource_configuration_group_id")
         return typing.cast(typing.Optional[builtins.str], result)
 
-    @builtins.property
-    def resource_configuration_type(self) -> typing.Optional[builtins.str]:
-        '''The type of resource configuration. A resource configuration can be one of the following types:.
-
-        - *SINGLE* - A single resource.
-        - *GROUP* - A group of resources. You must create a group resource configuration before you create a child resource configuration.
-        - *CHILD* - A single resource that is part of a group resource configuration.
-        - *ARN* - An AWS resource.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourceconfiguration.html#cfn-vpclattice-resourceconfiguration-resourceconfigurationtype
-        '''
-        result = self._values.get("resource_configuration_type")
-        return typing.cast(typing.Optional[builtins.str], result)
-
     @builtins.property
     def resource_gateway_id(self) -> typing.Optional[builtins.str]:
         '''The ID of the resource gateway.
@@ -1976,7 +2039,7 @@ class CfnResourceConfigurationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IResourceGatewayRef_f860a76d, _ITaggableV2_4e6798f8)
 class CfnResourceGateway(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1997,15 +2060,18 @@ class CfnResourceGateway(
         from aws_cdk import aws_vpclattice as vpclattice
         
         cfn_resource_gateway = vpclattice.CfnResourceGateway(self, "MyCfnResourceGateway",
-            ip_address_type="ipAddressType",
             name="name",
-            security_group_ids=["securityGroupIds"],
             subnet_ids=["subnetIds"],
+            vpc_identifier="vpcIdentifier",
+        
+            # the properties below are optional
+            ip_address_type="ipAddressType",
+            ipv4_addresses_per_eni=123,
+            security_group_ids=["securityGroupIds"],
             tags=[CfnTag(
                 key="key",
                 value="value"
-            )],
-            vpc_identifier="vpcIdentifier"
+            )]
         )
     '''
 
@@ -2014,34 +2080,38 @@ class CfnResourceGateway(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
+        name: builtins.str,
+        subnet_ids: typing.Sequence[builtins.str],
+        vpc_identifier: builtins.str,
         ip_address_type: typing.Optional[builtins.str] = None,
-        name: typing.Optional[builtins.str] = None,
+        ipv4_addresses_per_eni: typing.Optional[jsii.Number] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
-        subnet_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
-        vpc_identifier: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ResourceGateway``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param ip_address_type: The type of IP address used by the resource gateway.
         :param name: The name of the resource gateway.
-        :param security_group_ids: The IDs of the security groups applied to the resource gateway.
         :param subnet_ids: The IDs of the VPC subnets for the resource gateway.
-        :param tags: The tags for the resource gateway.
         :param vpc_identifier: The ID of the VPC for the resource gateway.
+        :param ip_address_type: The type of IP address used by the resource gateway.
+        :param ipv4_addresses_per_eni: The number of IPv4 addresses in each ENI for the resource gateway.
+        :param security_group_ids: The IDs of the security groups applied to the resource gateway.
+        :param tags: The tags for the resource gateway.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__c33d35acb93670756de87bb99dc9b48c5bdce217c8b7068ec8d831a66a1b9be2)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnResourceGatewayProps(
-            ip_address_type=ip_address_type,
             name=name,
-            security_group_ids=security_group_ids,
             subnet_ids=subnet_ids,
-            tags=tags,
             vpc_identifier=vpc_identifier,
+            ip_address_type=ip_address_type,
+            ipv4_addresses_per_eni=ipv4_addresses_per_eni,
+            security_group_ids=security_group_ids,
+            tags=tags,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -2105,6 +2175,51 @@ class CfnResourceGateway(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="resourceGatewayRef")
+    def resource_gateway_ref(self) -> _ResourceGatewayReference_8df20c1e:
+        '''A reference to a ResourceGateway resource.'''
+        return typing.cast(_ResourceGatewayReference_8df20c1e, jsii.get(self, "resourceGatewayRef"))
+
+    @builtins.property
+    @jsii.member(jsii_name="name")
+    def name(self) -> builtins.str:
+        '''The name of the resource gateway.'''
+        return typing.cast(builtins.str, jsii.get(self, "name"))
+
+    @name.setter
+    def name(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6348f03faf91ccdea29f2fa6d88ff150ead094ceb4483d7c650b7fcee3937500)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="subnetIds")
+    def subnet_ids(self) -> typing.List[builtins.str]:
+        '''The IDs of the VPC subnets for the resource gateway.'''
+        return typing.cast(typing.List[builtins.str], jsii.get(self, "subnetIds"))
+
+    @subnet_ids.setter
+    def subnet_ids(self, value: typing.List[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b80d0378bcb62c6afdab4c3852b32a936d35964b8dc8a67be99af3f3d016b584)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "subnetIds", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="vpcIdentifier")
+    def vpc_identifier(self) -> builtins.str:
+        '''The ID of the VPC for the resource gateway.'''
+        return typing.cast(builtins.str, jsii.get(self, "vpcIdentifier"))
+
+    @vpc_identifier.setter
+    def vpc_identifier(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9f006ab0220c58f3a982987d77cde2d3d365338eafe9cc6abcd387432475e2c1)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "vpcIdentifier", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="ipAddressType")
     def ip_address_type(self) -> typing.Optional[builtins.str]:
@@ -2119,17 +2234,17 @@ class CfnResourceGateway(
         jsii.set(self, "ipAddressType", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="name")
-    def name(self) -> typing.Optional[builtins.str]:
-        '''The name of the resource gateway.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "name"))
+    @jsii.member(jsii_name="ipv4AddressesPerEni")
+    def ipv4_addresses_per_eni(self) -> typing.Optional[jsii.Number]:
+        '''The number of IPv4 addresses in each ENI for the resource gateway.'''
+        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "ipv4AddressesPerEni"))
 
-    @name.setter
-    def name(self, value: typing.Optional[builtins.str]) -> None:
+    @ipv4_addresses_per_eni.setter
+    def ipv4_addresses_per_eni(self, value: typing.Optional[jsii.Number]) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__6348f03faf91ccdea29f2fa6d88ff150ead094ceb4483d7c650b7fcee3937500)
+            type_hints = typing.get_type_hints(_typecheckingstub__5ebc10ed1c8e6c6821b6b7f4cd71006b4e3ce26c6b201ba4637014b8908140fd)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "ipv4AddressesPerEni", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
     @jsii.member(jsii_name="securityGroupIds")
@@ -2147,19 +2262,6 @@ class CfnResourceGateway(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "securityGroupIds", value) # pyright: ignore[reportArgumentType]
 
-    @builtins.property
-    @jsii.member(jsii_name="subnetIds")
-    def subnet_ids(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''The IDs of the VPC subnets for the resource gateway.'''
-        return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "subnetIds"))
-
-    @subnet_ids.setter
-    def subnet_ids(self, value: typing.Optional[typing.List[builtins.str]]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__b80d0378bcb62c6afdab4c3852b32a936d35964b8dc8a67be99af3f3d016b584)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "subnetIds", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -2173,51 +2275,41 @@ class CfnResourceGateway(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
 
-    @builtins.property
-    @jsii.member(jsii_name="vpcIdentifier")
-    def vpc_identifier(self) -> typing.Optional[builtins.str]:
-        '''The ID of the VPC for the resource gateway.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "vpcIdentifier"))
-
-    @vpc_identifier.setter
-    def vpc_identifier(self, value: typing.Optional[builtins.str]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__9f006ab0220c58f3a982987d77cde2d3d365338eafe9cc6abcd387432475e2c1)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "vpcIdentifier", value) # pyright: ignore[reportArgumentType]
-
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_vpclattice.CfnResourceGatewayProps",
     jsii_struct_bases=[],
     name_mapping={
-        "ip_address_type": "ipAddressType",
         "name": "name",
-        "security_group_ids": "securityGroupIds",
         "subnet_ids": "subnetIds",
-        "tags": "tags",
         "vpc_identifier": "vpcIdentifier",
+        "ip_address_type": "ipAddressType",
+        "ipv4_addresses_per_eni": "ipv4AddressesPerEni",
+        "security_group_ids": "securityGroupIds",
+        "tags": "tags",
     },
 )
 class CfnResourceGatewayProps:
     def __init__(
         self,
         *,
+        name: builtins.str,
+        subnet_ids: typing.Sequence[builtins.str],
+        vpc_identifier: builtins.str,
         ip_address_type: typing.Optional[builtins.str] = None,
-        name: typing.Optional[builtins.str] = None,
+        ipv4_addresses_per_eni: typing.Optional[jsii.Number] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
-        subnet_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
-        vpc_identifier: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for defining a ``CfnResourceGateway``.
 
-        :param ip_address_type: The type of IP address used by the resource gateway.
         :param name: The name of the resource gateway.
-        :param security_group_ids: The IDs of the security groups applied to the resource gateway.
         :param subnet_ids: The IDs of the VPC subnets for the resource gateway.
-        :param tags: The tags for the resource gateway.
         :param vpc_identifier: The ID of the VPC for the resource gateway.
+        :param ip_address_type: The type of IP address used by the resource gateway.
+        :param ipv4_addresses_per_eni: The number of IPv4 addresses in each ENI for the resource gateway.
+        :param security_group_ids: The IDs of the security groups applied to the resource gateway.
+        :param tags: The tags for the resource gateway.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcegateway.html
         :exampleMetadata: fixture=_generated
@@ -2229,38 +2321,72 @@ class CfnResourceGatewayProps:
             from aws_cdk import aws_vpclattice as vpclattice
             
             cfn_resource_gateway_props = vpclattice.CfnResourceGatewayProps(
-                ip_address_type="ipAddressType",
                 name="name",
-                security_group_ids=["securityGroupIds"],
                 subnet_ids=["subnetIds"],
+                vpc_identifier="vpcIdentifier",
+            
+                # the properties below are optional
+                ip_address_type="ipAddressType",
+                ipv4_addresses_per_eni=123,
+                security_group_ids=["securityGroupIds"],
                 tags=[CfnTag(
                     key="key",
                     value="value"
-                )],
-                vpc_identifier="vpcIdentifier"
+                )]
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ed2c643634b9016a56acc1cdf5c3044eaa6f62d982922519a82cdbd49bdae174)
-            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
-            check_type(argname="argument security_group_ids", value=security_group_ids, expected_type=type_hints["security_group_ids"])
             check_type(argname="argument subnet_ids", value=subnet_ids, expected_type=type_hints["subnet_ids"])
-            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
             check_type(argname="argument vpc_identifier", value=vpc_identifier, expected_type=type_hints["vpc_identifier"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {}
+            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
+            check_type(argname="argument ipv4_addresses_per_eni", value=ipv4_addresses_per_eni, expected_type=type_hints["ipv4_addresses_per_eni"])
+            check_type(argname="argument security_group_ids", value=security_group_ids, expected_type=type_hints["security_group_ids"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "name": name,
+            "subnet_ids": subnet_ids,
+            "vpc_identifier": vpc_identifier,
+        }
         if ip_address_type is not None:
             self._values["ip_address_type"] = ip_address_type
-        if name is not None:
-            self._values["name"] = name
+        if ipv4_addresses_per_eni is not None:
+            self._values["ipv4_addresses_per_eni"] = ipv4_addresses_per_eni
         if security_group_ids is not None:
             self._values["security_group_ids"] = security_group_ids
-        if subnet_ids is not None:
-            self._values["subnet_ids"] = subnet_ids
         if tags is not None:
             self._values["tags"] = tags
-        if vpc_identifier is not None:
-            self._values["vpc_identifier"] = vpc_identifier
+
+    @builtins.property
+    def name(self) -> builtins.str:
+        '''The name of the resource gateway.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcegateway.html#cfn-vpclattice-resourcegateway-name
+        '''
+        result = self._values.get("name")
+        assert result is not None, "Required property 'name' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def subnet_ids(self) -> typing.List[builtins.str]:
+        '''The IDs of the VPC subnets for the resource gateway.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcegateway.html#cfn-vpclattice-resourcegateway-subnetids
+        '''
+        result = self._values.get("subnet_ids")
+        assert result is not None, "Required property 'subnet_ids' is missing"
+        return typing.cast(typing.List[builtins.str], result)
+
+    @builtins.property
+    def vpc_identifier(self) -> builtins.str:
+        '''The ID of the VPC for the resource gateway.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcegateway.html#cfn-vpclattice-resourcegateway-vpcidentifier
+        '''
+        result = self._values.get("vpc_identifier")
+        assert result is not None, "Required property 'vpc_identifier' is missing"
+        return typing.cast(builtins.str, result)
 
     @builtins.property
     def ip_address_type(self) -> typing.Optional[builtins.str]:
@@ -2272,13 +2398,13 @@ class CfnResourceGatewayProps:
         return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def name(self) -> typing.Optional[builtins.str]:
-        '''The name of the resource gateway.
+    def ipv4_addresses_per_eni(self) -> typing.Optional[jsii.Number]:
+        '''The number of IPv4 addresses in each ENI for the resource gateway.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcegateway.html#cfn-vpclattice-resourcegateway-name
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcegateway.html#cfn-vpclattice-resourcegateway-ipv4addressespereni
         '''
-        result = self._values.get("name")
-        return typing.cast(typing.Optional[builtins.str], result)
+        result = self._values.get("ipv4_addresses_per_eni")
+        return typing.cast(typing.Optional[jsii.Number], result)
 
     @builtins.property
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
@@ -2289,15 +2415,6 @@ class CfnResourceGatewayProps:
         result = self._values.get("security_group_ids")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
-    @builtins.property
-    def subnet_ids(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''The IDs of the VPC subnets for the resource gateway.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcegateway.html#cfn-vpclattice-resourcegateway-subnetids
-        '''
-        result = self._values.get("subnet_ids")
-        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
-
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''The tags for the resource gateway.
@@ -2307,15 +2424,6 @@ class CfnResourceGatewayProps:
         result = self._values.get("tags")
         return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
 
-    @builtins.property
-    def vpc_identifier(self) -> typing.Optional[builtins.str]:
-        '''The ID of the VPC for the resource gateway.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcegateway.html#cfn-vpclattice-resourcegateway-vpcidentifier
-        '''
-        result = self._values.get("vpc_identifier")
-        return typing.cast(typing.Optional[builtins.str], result)
-
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -2328,7 +2436,7 @@ class CfnResourceGatewayProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IResourcePolicyRef_8fa06c25)
 class CfnResourcePolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2364,7 +2472,8 @@ class CfnResourcePolicy(
         policy: typing.Any,
         resource_arn: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ResourcePolicy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param policy: The Amazon Resource Name (ARN) of the service network or service.
@@ -2413,6 +2522,12 @@ class CfnResourcePolicy(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="resourcePolicyRef")
+    def resource_policy_ref(self) -> _ResourcePolicyReference_0b2635a1:
+        '''A reference to a ResourcePolicy resource.'''
+        return typing.cast(_ResourcePolicyReference_0b2635a1, jsii.get(self, "resourcePolicyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="policy")
     def policy(self) -> typing.Any:
@@ -2509,7 +2624,7 @@ class CfnResourcePolicyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IRuleRef_b63824ff, _ITaggable_36806126)
 class CfnRule(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2594,7 +2709,8 @@ class CfnRule(
         service_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::Rule``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param action: Describes the action for a rule.
@@ -2674,6 +2790,12 @@ class CfnRule(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="ruleRef")
+    def rule_ref(self) -> _RuleReference_7f707c6c:
+        '''A reference to a Rule resource.'''
+        return typing.cast(_RuleReference_7f707c6c, jsii.get(self, "ruleRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -3806,7 +3928,7 @@ class CfnRuleProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IServiceRef_a78feffa, _ITaggable_36806126)
 class CfnService(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3856,13 +3978,14 @@ class CfnService(
         name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::Service``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param auth_type: The type of IAM policy. - ``NONE`` : The resource does not use an IAM policy. This is the default. - ``AWS_IAM`` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required. Default: - "NONE"
         :param certificate_arn: The Amazon Resource Name (ARN) of the certificate.
         :param custom_domain_name: The custom domain name of the service.
-        :param dns_entry: The DNS information of the service.
+        :param dns_entry: Describes the DNS information of the service. This field is read-only.
         :param name: The name of the service. The name must be unique within the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen. If you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name.
         :param tags: The tags for the service.
         '''
@@ -3979,6 +4102,12 @@ class CfnService(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceRef")
+    def service_ref(self) -> _ServiceReference_d8f4325a:
+        '''A reference to a Service resource.'''
+        return typing.cast(_ServiceReference_d8f4325a, jsii.get(self, "serviceRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -4029,7 +4158,7 @@ class CfnService(
     def dns_entry(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnService.DnsEntryProperty"]]:
-        '''The DNS information of the service.'''
+        '''Describes the DNS information of the service.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnService.DnsEntryProperty"]], jsii.get(self, "dnsEntry"))
 
     @dns_entry.setter
@@ -4139,7 +4268,7 @@ class CfnService(
             )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IServiceNetworkRef_1e3df588, _ITaggable_36806126)
 class CfnServiceNetwork(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4184,7 +4313,8 @@ class CfnServiceNetwork(
         sharing_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnServiceNetwork.SharingConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ServiceNetwork``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param auth_type: The type of IAM policy. - ``NONE`` : The resource does not use an IAM policy. This is the default. - ``AWS_IAM`` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required. Default: - "NONE"
@@ -4273,6 +4403,12 @@ class CfnServiceNetwork(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceNetworkRef")
+    def service_network_ref(self) -> _ServiceNetworkReference_e27144ae:
+        '''A reference to a ServiceNetwork resource.'''
+        return typing.cast(_ServiceNetworkReference_e27144ae, jsii.get(self, "serviceNetworkRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -4515,7 +4651,7 @@ class CfnServiceNetworkProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IServiceNetworkResourceAssociationRef_82997816, _ITaggableV2_4e6798f8)
 class CfnServiceNetworkResourceAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4554,7 +4690,8 @@ class CfnServiceNetworkResourceAssociation(
         service_network_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ServiceNetworkResourceAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param resource_configuration_id: The ID of the resource configuration associated with the service network.
@@ -4632,6 +4769,14 @@ class CfnServiceNetworkResourceAssociation(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceNetworkResourceAssociationRef")
+    def service_network_resource_association_ref(
+        self,
+    ) -> _ServiceNetworkResourceAssociationReference_02618c82:
+        '''A reference to a ServiceNetworkResourceAssociation resource.'''
+        return typing.cast(_ServiceNetworkResourceAssociationReference_02618c82, jsii.get(self, "serviceNetworkResourceAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="resourceConfigurationId")
     def resource_configuration_id(self) -> typing.Optional[builtins.str]:
@@ -4765,7 +4910,7 @@ class CfnServiceNetworkResourceAssociationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IServiceNetworkServiceAssociationRef_c2d152c8, _ITaggable_36806126)
 class CfnServiceNetworkServiceAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4815,7 +4960,8 @@ class CfnServiceNetworkServiceAssociation(
         service_network_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ServiceNetworkServiceAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param dns_entry: The DNS information of the service.
@@ -4979,6 +5125,14 @@ class CfnServiceNetworkServiceAssociation(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceNetworkServiceAssociationRef")
+    def service_network_service_association_ref(
+        self,
+    ) -> _ServiceNetworkServiceAssociationReference_4ecaad47:
+        '''A reference to a ServiceNetworkServiceAssociation resource.'''
+        return typing.cast(_ServiceNetworkServiceAssociationReference_4ecaad47, jsii.get(self, "serviceNetworkServiceAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -5229,7 +5383,7 @@ class CfnServiceNetworkServiceAssociationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IServiceNetworkVpcAssociationRef_6dc1c638, _ITaggable_36806126)
 class CfnServiceNetworkVpcAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5256,6 +5410,11 @@ class CfnServiceNetworkVpcAssociation(
         from aws_cdk import aws_vpclattice as vpclattice
         
         cfn_service_network_vpc_association = vpclattice.CfnServiceNetworkVpcAssociation(self, "MyCfnServiceNetworkVpcAssociation",
+            dns_options=vpclattice.CfnServiceNetworkVpcAssociation.DnsOptionsProperty(
+                private_dns_preference="privateDnsPreference",
+                private_dns_specified_domains=["privateDnsSpecifiedDomains"]
+            ),
+            private_dns_enabled=False,
             security_group_ids=["securityGroupIds"],
             service_network_identifier="serviceNetworkIdentifier",
             tags=[CfnTag(
@@ -5271,14 +5430,19 @@ class CfnServiceNetworkVpcAssociation(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
+        dns_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnServiceNetworkVpcAssociation.DnsOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        private_dns_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         service_network_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         vpc_identifier: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ServiceNetworkVpcAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
+        :param dns_options: 
+        :param private_dns_enabled: 
         :param security_group_ids: The IDs of the security groups. Security groups aren't added by default. You can add a security group to apply network level controls to control which resources in a VPC are allowed to access the service network and its services. For more information, see `Control traffic to resources using security groups <https://docs.aws.amazon.com//vpc/latest/userguide/VPC_SecurityGroups.html>`_ in the *Amazon VPC User Guide* .
         :param service_network_identifier: The ID or ARN of the service network. You must use an ARN if the resources are in different accounts.
         :param tags: The tags for the association.
@@ -5289,6 +5453,8 @@ class CfnServiceNetworkVpcAssociation(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnServiceNetworkVpcAssociationProps(
+            dns_options=dns_options,
+            private_dns_enabled=private_dns_enabled,
             security_group_ids=security_group_ids,
             service_network_identifier=service_network_identifier,
             tags=tags,
@@ -5404,12 +5570,54 @@ class CfnServiceNetworkVpcAssociation(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceNetworkVpcAssociationRef")
+    def service_network_vpc_association_ref(
+        self,
+    ) -> _ServiceNetworkVpcAssociationReference_b2c1552d:
+        '''A reference to a ServiceNetworkVpcAssociation resource.'''
+        return typing.cast(_ServiceNetworkVpcAssociationReference_b2c1552d, jsii.get(self, "serviceNetworkVpcAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="dnsOptions")
+    def dns_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnServiceNetworkVpcAssociation.DnsOptionsProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnServiceNetworkVpcAssociation.DnsOptionsProperty"]], jsii.get(self, "dnsOptions"))
+
+    @dns_options.setter
+    def dns_options(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnServiceNetworkVpcAssociation.DnsOptionsProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__638bb9ade5742fe013f48391df59e2f89dad80bd292e3ef34d071293e2571243)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "dnsOptions", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="privateDnsEnabled")
+    def private_dns_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "privateDnsEnabled"))
+
+    @private_dns_enabled.setter
+    def private_dns_enabled(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__400b1487d13484965e883f5258624ffe18e543dde71c79c91ff3084df8a434b7)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "privateDnsEnabled", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="securityGroupIds")
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
@@ -5465,11 +5673,85 @@ class CfnServiceNetworkVpcAssociation(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "vpcIdentifier", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_vpclattice.CfnServiceNetworkVpcAssociation.DnsOptionsProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "private_dns_preference": "privateDnsPreference",
+            "private_dns_specified_domains": "privateDnsSpecifiedDomains",
+        },
+    )
+    class DnsOptionsProperty:
+        def __init__(
+            self,
+            *,
+            private_dns_preference: typing.Optional[builtins.str] = None,
+            private_dns_specified_domains: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''
+            :param private_dns_preference: 
+            :param private_dns_specified_domains: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_vpclattice as vpclattice
+                
+                dns_options_property = vpclattice.CfnServiceNetworkVpcAssociation.DnsOptionsProperty(
+                    private_dns_preference="privateDnsPreference",
+                    private_dns_specified_domains=["privateDnsSpecifiedDomains"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__a891ef3c203472f77ddf17f06c9948ca153fe024b45915ef31b2aa7da3b20730)
+                check_type(argname="argument private_dns_preference", value=private_dns_preference, expected_type=type_hints["private_dns_preference"])
+                check_type(argname="argument private_dns_specified_domains", value=private_dns_specified_domains, expected_type=type_hints["private_dns_specified_domains"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if private_dns_preference is not None:
+                self._values["private_dns_preference"] = private_dns_preference
+            if private_dns_specified_domains is not None:
+                self._values["private_dns_specified_domains"] = private_dns_specified_domains
+
+        @builtins.property
+        def private_dns_preference(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html#cfn-vpclattice-servicenetworkvpcassociation-dnsoptions-privatednspreference
+            '''
+            result = self._values.get("private_dns_preference")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def private_dns_specified_domains(
+            self,
+        ) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html#cfn-vpclattice-servicenetworkvpcassociation-dnsoptions-privatednsspecifieddomains
+            '''
+            result = self._values.get("private_dns_specified_domains")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "DnsOptionsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_vpclattice.CfnServiceNetworkVpcAssociationProps",
     jsii_struct_bases=[],
     name_mapping={
+        "dns_options": "dnsOptions",
+        "private_dns_enabled": "privateDnsEnabled",
         "security_group_ids": "securityGroupIds",
         "service_network_identifier": "serviceNetworkIdentifier",
         "tags": "tags",
@@ -5480,6 +5762,8 @@ class CfnServiceNetworkVpcAssociationProps:
     def __init__(
         self,
         *,
+        dns_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnServiceNetworkVpcAssociation.DnsOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        private_dns_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         service_network_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -5487,6 +5771,8 @@ class CfnServiceNetworkVpcAssociationProps:
     ) -> None:
         '''Properties for defining a ``CfnServiceNetworkVpcAssociation``.
 
+        :param dns_options: 
+        :param private_dns_enabled: 
         :param security_group_ids: The IDs of the security groups. Security groups aren't added by default. You can add a security group to apply network level controls to control which resources in a VPC are allowed to access the service network and its services. For more information, see `Control traffic to resources using security groups <https://docs.aws.amazon.com//vpc/latest/userguide/VPC_SecurityGroups.html>`_ in the *Amazon VPC User Guide* .
         :param service_network_identifier: The ID or ARN of the service network. You must use an ARN if the resources are in different accounts.
         :param tags: The tags for the association.
@@ -5502,6 +5788,11 @@ class CfnServiceNetworkVpcAssociationProps:
             from aws_cdk import aws_vpclattice as vpclattice
             
             cfn_service_network_vpc_association_props = vpclattice.CfnServiceNetworkVpcAssociationProps(
+                dns_options=vpclattice.CfnServiceNetworkVpcAssociation.DnsOptionsProperty(
+                    private_dns_preference="privateDnsPreference",
+                    private_dns_specified_domains=["privateDnsSpecifiedDomains"]
+                ),
+                private_dns_enabled=False,
                 security_group_ids=["securityGroupIds"],
                 service_network_identifier="serviceNetworkIdentifier",
                 tags=[CfnTag(
@@ -5513,11 +5804,17 @@ class CfnServiceNetworkVpcAssociationProps:
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__4f41a8834cfa086c1096ce2ce95d12df58a5d84c6b647b3712e7e34e8d51ad2d)
+            check_type(argname="argument dns_options", value=dns_options, expected_type=type_hints["dns_options"])
+            check_type(argname="argument private_dns_enabled", value=private_dns_enabled, expected_type=type_hints["private_dns_enabled"])
             check_type(argname="argument security_group_ids", value=security_group_ids, expected_type=type_hints["security_group_ids"])
             check_type(argname="argument service_network_identifier", value=service_network_identifier, expected_type=type_hints["service_network_identifier"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
             check_type(argname="argument vpc_identifier", value=vpc_identifier, expected_type=type_hints["vpc_identifier"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if dns_options is not None:
+            self._values["dns_options"] = dns_options
+        if private_dns_enabled is not None:
+            self._values["private_dns_enabled"] = private_dns_enabled
         if security_group_ids is not None:
             self._values["security_group_ids"] = security_group_ids
         if service_network_identifier is not None:
@@ -5527,6 +5824,26 @@ class CfnServiceNetworkVpcAssociationProps:
         if vpc_identifier is not None:
             self._values["vpc_identifier"] = vpc_identifier
 
+    @builtins.property
+    def dns_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnServiceNetworkVpcAssociation.DnsOptionsProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkvpcassociation.html#cfn-vpclattice-servicenetworkvpcassociation-dnsoptions
+        '''
+        result = self._values.get("dns_options")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnServiceNetworkVpcAssociation.DnsOptionsProperty]], result)
+
+    @builtins.property
+    def private_dns_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkvpcassociation.html#cfn-vpclattice-servicenetworkvpcassociation-privatednsenabled
+        '''
+        result = self._values.get("private_dns_enabled")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
     @builtins.property
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
         '''The IDs of the security groups.
@@ -5607,7 +5924,7 @@ class CfnServiceProps:
         :param auth_type: The type of IAM policy. - ``NONE`` : The resource does not use an IAM policy. This is the default. - ``AWS_IAM`` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required. Default: - "NONE"
         :param certificate_arn: The Amazon Resource Name (ARN) of the certificate.
         :param custom_domain_name: The custom domain name of the service.
-        :param dns_entry: The DNS information of the service.
+        :param dns_entry: Describes the DNS information of the service. This field is read-only.
         :param name: The name of the service. The name must be unique within the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen. If you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name.
         :param tags: The tags for the service.
 
@@ -5693,7 +6010,9 @@ class CfnServiceProps:
     def dns_entry(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnService.DnsEntryProperty]]:
-        '''The DNS information of the service.
+        '''Describes the DNS information of the service.
+
+        This field is read-only.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-service.html#cfn-vpclattice-service-dnsentry
         '''
@@ -5734,7 +6053,7 @@ class CfnServiceProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _ITargetGroupRef_52994392, _ITaggable_36806126)
 class CfnTargetGroup(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5807,7 +6126,8 @@ class CfnTargetGroup(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         targets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnTargetGroup.TargetProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::TargetGroup``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param type: The type of target group.
@@ -5914,6 +6234,12 @@ class CfnTargetGroup(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="targetGroupRef")
+    def target_group_ref(self) -> _TargetGroupReference_6c9bb51b:
+        '''A reference to a TargetGroup resource.'''
+        return typing.cast(_TargetGroupReference_6c9bb51b, jsii.get(self, "targetGroupRef"))
+
     @builtins.property
     @jsii.member(jsii_name="type")
     def type(self) -> builtins.str:
@@ -6933,14 +7259,14 @@ def _typecheckingstub__6d403f9161b4d427bd92d4b1a1a263447b680ac47cb5036d62501f7fb
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
+    name: builtins.str,
+    resource_configuration_type: builtins.str,
     allow_association_to_sharable_service_network: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-    name: typing.Optional[builtins.str] = None,
     port_ranges: typing.Optional[typing.Sequence[builtins.str]] = None,
     protocol_type: typing.Optional[builtins.str] = None,
     resource_configuration_auth_type: typing.Optional[builtins.str] = None,
     resource_configuration_definition: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnResourceConfiguration.ResourceConfigurationDefinitionProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     resource_configuration_group_id: typing.Optional[builtins.str] = None,
-    resource_configuration_type: typing.Optional[builtins.str] = None,
     resource_gateway_id: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
@@ -6959,14 +7285,20 @@ def _typecheckingstub__3754b09494f8006d837368599eb7dfc715e33b3e7d30d21f635a62e53
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__d1ef450fae7a40fb3e9c4ee0eb161050d61b06bd98ab10bb1187f14c7b5c9ceb(
-    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+def _typecheckingstub__05c6c80cd49033d3aa0afe190c923dcae73156dcab6ce48936861ca4ccc73ef0(
+    value: builtins.str,
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__05c6c80cd49033d3aa0afe190c923dcae73156dcab6ce48936861ca4ccc73ef0(
-    value: typing.Optional[builtins.str],
+def _typecheckingstub__78c78698636e3ca61354c53cb8cdfc165b65a1ae7d941087c00f199b89c59f80(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d1ef450fae7a40fb3e9c4ee0eb161050d61b06bd98ab10bb1187f14c7b5c9ceb(
+    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
 ) -> None:
     """Type checking stubs"""
     pass
@@ -7001,12 +7333,6 @@ def _typecheckingstub__1121abed475cd3e475b62bd8b47dabfd15e44d41d9771f06cad88fe0c
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__78c78698636e3ca61354c53cb8cdfc165b65a1ae7d941087c00f199b89c59f80(
-    value: typing.Optional[builtins.str],
-) -> None:
-    """Type checking stubs"""
-    pass
-
 def _typecheckingstub__3823c802f0ca61b478a6bc105102ac700a4091dd81e698a0148bcfd91ec5332a(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -7038,14 +7364,14 @@ def _typecheckingstub__9121263d95571010bd6dc19e1c8287b50bf9733de5f1bdf0bc8a14a7f
 
 def _typecheckingstub__797cfcb00db81ec7627009ae5f799c38c09652aee4a602480e341f9e4049b098(
     *,
+    name: builtins.str,
+    resource_configuration_type: builtins.str,
     allow_association_to_sharable_service_network: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-    name: typing.Optional[builtins.str] = None,
     port_ranges: typing.Optional[typing.Sequence[builtins.str]] = None,
     protocol_type: typing.Optional[builtins.str] = None,
     resource_configuration_auth_type: typing.Optional[builtins.str] = None,
     resource_configuration_definition: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnResourceConfiguration.ResourceConfigurationDefinitionProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     resource_configuration_group_id: typing.Optional[builtins.str] = None,
-    resource_configuration_type: typing.Optional[builtins.str] = None,
     resource_gateway_id: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
@@ -7056,12 +7382,13 @@ def _typecheckingstub__c33d35acb93670756de87bb99dc9b48c5bdce217c8b7068ec8d831a66
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
+    name: builtins.str,
+    subnet_ids: typing.Sequence[builtins.str],
+    vpc_identifier: builtins.str,
     ip_address_type: typing.Optional[builtins.str] = None,
-    name: typing.Optional[builtins.str] = None,
+    ipv4_addresses_per_eni: typing.Optional[jsii.Number] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
-    subnet_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
-    vpc_identifier: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -7078,50 +7405,57 @@ def _typecheckingstub__961cdaca88b2adc0c4bd56e6891207c7285b0ef143ebf35c7492768ed
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__da193673158e2d7b463232edae7461c41e04d65f3e9a6058fb5136fae629871c(
-    value: typing.Optional[builtins.str],
+def _typecheckingstub__6348f03faf91ccdea29f2fa6d88ff150ead094ceb4483d7c650b7fcee3937500(
+    value: builtins.str,
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__6348f03faf91ccdea29f2fa6d88ff150ead094ceb4483d7c650b7fcee3937500(
-    value: typing.Optional[builtins.str],
+def _typecheckingstub__b80d0378bcb62c6afdab4c3852b32a936d35964b8dc8a67be99af3f3d016b584(
+    value: typing.List[builtins.str],
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__7e2e4828934d008108e9f5f74e2c02dbd9f159db6f7be2e11295977601d1296b(
-    value: typing.Optional[typing.List[builtins.str]],
+def _typecheckingstub__9f006ab0220c58f3a982987d77cde2d3d365338eafe9cc6abcd387432475e2c1(
+    value: builtins.str,
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__b80d0378bcb62c6afdab4c3852b32a936d35964b8dc8a67be99af3f3d016b584(
-    value: typing.Optional[typing.List[builtins.str]],
+def _typecheckingstub__da193673158e2d7b463232edae7461c41e04d65f3e9a6058fb5136fae629871c(
+    value: typing.Optional[builtins.str],
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__bf6ddd6a110cbcda973426d8df8b1e68b145ff32b0292ba9db84cd36b76d4da5(
-    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+def _typecheckingstub__5ebc10ed1c8e6c6821b6b7f4cd71006b4e3ce26c6b201ba4637014b8908140fd(
+    value: typing.Optional[jsii.Number],
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__9f006ab0220c58f3a982987d77cde2d3d365338eafe9cc6abcd387432475e2c1(
-    value: typing.Optional[builtins.str],
+def _typecheckingstub__7e2e4828934d008108e9f5f74e2c02dbd9f159db6f7be2e11295977601d1296b(
+    value: typing.Optional[typing.List[builtins.str]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__bf6ddd6a110cbcda973426d8df8b1e68b145ff32b0292ba9db84cd36b76d4da5(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
     """Type checking stubs"""
     pass
 
 def _typecheckingstub__ed2c643634b9016a56acc1cdf5c3044eaa6f62d982922519a82cdbd49bdae174(
     *,
+    name: builtins.str,
+    subnet_ids: typing.Sequence[builtins.str],
+    vpc_identifier: builtins.str,
     ip_address_type: typing.Optional[builtins.str] = None,
-    name: typing.Optional[builtins.str] = None,
+    ipv4_addresses_per_eni: typing.Optional[jsii.Number] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
-    subnet_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
-    vpc_identifier: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -7585,6 +7919,8 @@ def _typecheckingstub__51a5a54250d817f615a37a7e170370627b854e32b301763e487856be4
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
+    dns_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnServiceNetworkVpcAssociation.DnsOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    private_dns_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     service_network_identifier: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -7605,6 +7941,18 @@ def _typecheckingstub__b2251a301b298c27c60a8b9cf498a2fffccb3a393af00110a619bdae2
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__638bb9ade5742fe013f48391df59e2f89dad80bd292e3ef34d071293e2571243(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnServiceNetworkVpcAssociation.DnsOptionsProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__400b1487d13484965e883f5258624ffe18e543dde71c79c91ff3084df8a434b7(
+    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7648287c9bb4584c27c2b5afd67f788d009960d3e5e7da18f36497b7f076ccb8(
     value: typing.Optional[typing.List[builtins.str]],
 ) -> None:
@@ -7629,8 +7977,18 @@ def _typecheckingstub__e9b391eb61efda0eb74e9ad1d922235fdde79a86c6fda50bb367d2a7e
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a891ef3c203472f77ddf17f06c9948ca153fe024b45915ef31b2aa7da3b20730(
+    *,
+    private_dns_preference: typing.Optional[builtins.str] = None,
+    private_dns_specified_domains: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__4f41a8834cfa086c1096ce2ce95d12df58a5d84c6b647b3712e7e34e8d51ad2d(
     *,
+    dns_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnServiceNetworkVpcAssociation.DnsOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    private_dns_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     service_network_identifier: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,