aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_vpclattice/__init__.py

@@ -68,9 +68,37 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_vpclattice import (
+    AccessLogSubscriptionReference as _AccessLogSubscriptionReference_25905b5c,
+    AuthPolicyReference as _AuthPolicyReference_2a1c0bc7,
+    IAccessLogSubscriptionRef as _IAccessLogSubscriptionRef_3411271a,
+    IAuthPolicyRef as _IAuthPolicyRef_38d3dc32,
+    IListenerRef as _IListenerRef_04c46b6b,
+    IResourceConfigurationRef as _IResourceConfigurationRef_b9c2bd0b,
+    IResourceGatewayRef as _IResourceGatewayRef_f860a76d,
+    IResourcePolicyRef as _IResourcePolicyRef_8fa06c25,
+    IRuleRef as _IRuleRef_b63824ff,
+    IServiceNetworkRef as _IServiceNetworkRef_1e3df588,
+    IServiceNetworkResourceAssociationRef as _IServiceNetworkResourceAssociationRef_82997816,
+    IServiceNetworkServiceAssociationRef as _IServiceNetworkServiceAssociationRef_c2d152c8,
+    IServiceNetworkVpcAssociationRef as _IServiceNetworkVpcAssociationRef_6dc1c638,
+    IServiceRef as _IServiceRef_a78feffa,
+    ITargetGroupRef as _ITargetGroupRef_52994392,
+    ListenerReference as _ListenerReference_c52b20d4,
+    ResourceConfigurationReference as _ResourceConfigurationReference_b8808895,
+    ResourceGatewayReference as _ResourceGatewayReference_8df20c1e,
+    ResourcePolicyReference as _ResourcePolicyReference_0b2635a1,
+    RuleReference as _RuleReference_7f707c6c,
+    ServiceNetworkReference as _ServiceNetworkReference_e27144ae,
+    ServiceNetworkResourceAssociationReference as _ServiceNetworkResourceAssociationReference_02618c82,
+    ServiceNetworkServiceAssociationReference as _ServiceNetworkServiceAssociationReference_4ecaad47,
+    ServiceNetworkVpcAssociationReference as _ServiceNetworkVpcAssociationReference_b2c1552d,
+    ServiceReference as _ServiceReference_d8f4325a,
+    TargetGroupReference as _TargetGroupReference_6c9bb51b,
+)
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IAccessLogSubscriptionRef_3411271a, _ITaggable_36806126)
 class CfnAccessLogSubscription(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -113,7 +141,8 @@ class CfnAccessLogSubscription(
         service_network_log_type: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::AccessLogSubscription``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param destination_arn: The Amazon Resource Name (ARN) of the destination. The supported destination types are CloudWatch Log groups, Kinesis Data Firehose delivery streams, and Amazon S3 buckets.
@@ -164,6 +193,12 @@ class CfnAccessLogSubscription(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="accessLogSubscriptionRef")
+    def access_log_subscription_ref(self) -> _AccessLogSubscriptionReference_25905b5c:
+        '''A reference to a AccessLogSubscription resource.'''
+        return typing.cast(_AccessLogSubscriptionReference_25905b5c, jsii.get(self, "accessLogSubscriptionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="attrArn")
     def attr_arn(self) -> builtins.str:
@@ -378,7 +413,7 @@ class CfnAccessLogSubscriptionProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IAuthPolicyRef_38d3dc32)
 class CfnAuthPolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -414,7 +449,8 @@ class CfnAuthPolicy(
         policy: typing.Any,
         resource_identifier: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::AuthPolicy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param policy: The auth policy.
@@ -471,6 +507,12 @@ class CfnAuthPolicy(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrState"))
 
+    @builtins.property
+    @jsii.member(jsii_name="authPolicyRef")
+    def auth_policy_ref(self) -> _AuthPolicyReference_2a1c0bc7:
+        '''A reference to a AuthPolicy resource.'''
+        return typing.cast(_AuthPolicyReference_2a1c0bc7, jsii.get(self, "authPolicyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -577,7 +619,7 @@ class CfnAuthPolicyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IListenerRef_04c46b6b, _ITaggable_36806126)
 class CfnListener(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -636,7 +678,8 @@ class CfnListener(
         service_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::Listener``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param default_action: The action for the default rule. Each listener has a default rule. The default rule is used if no other rules match.
@@ -732,6 +775,12 @@ class CfnListener(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="listenerRef")
+    def listener_ref(self) -> _ListenerReference_c52b20d4:
+        '''A reference to a Listener resource.'''
+        return typing.cast(_ListenerReference_c52b20d4, jsii.get(self, "listenerRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -1276,7 +1325,7 @@ class CfnListenerProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IResourceConfigurationRef_b9c2bd0b, _ITaggableV2_4e6798f8)
 class CfnResourceConfiguration(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1338,7 +1387,8 @@ class CfnResourceConfiguration(
         resource_gateway_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ResourceConfiguration``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the resource configuration.
@@ -1430,6 +1480,12 @@ class CfnResourceConfiguration(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="resourceConfigurationRef")
+    def resource_configuration_ref(self) -> _ResourceConfigurationReference_b8808895:
+        '''A reference to a ResourceConfiguration resource.'''
+        return typing.cast(_ResourceConfigurationReference_b8808895, jsii.get(self, "resourceConfigurationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -1983,7 +2039,7 @@ class CfnResourceConfigurationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IResourceGatewayRef_f860a76d, _ITaggableV2_4e6798f8)
 class CfnResourceGateway(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2010,6 +2066,7 @@ class CfnResourceGateway(
         
             # the properties below are optional
             ip_address_type="ipAddressType",
+            ipv4_addresses_per_eni=123,
             security_group_ids=["securityGroupIds"],
             tags=[CfnTag(
                 key="key",
@@ -2027,16 +2084,19 @@ class CfnResourceGateway(
         subnet_ids: typing.Sequence[builtins.str],
         vpc_identifier: builtins.str,
         ip_address_type: typing.Optional[builtins.str] = None,
+        ipv4_addresses_per_eni: typing.Optional[jsii.Number] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ResourceGateway``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the resource gateway.
         :param subnet_ids: The IDs of the VPC subnets for the resource gateway.
         :param vpc_identifier: The ID of the VPC for the resource gateway.
         :param ip_address_type: The type of IP address used by the resource gateway.
+        :param ipv4_addresses_per_eni: The number of IPv4 addresses in each ENI for the resource gateway.
         :param security_group_ids: The IDs of the security groups applied to the resource gateway.
         :param tags: The tags for the resource gateway.
         '''
@@ -2049,6 +2109,7 @@ class CfnResourceGateway(
             subnet_ids=subnet_ids,
             vpc_identifier=vpc_identifier,
             ip_address_type=ip_address_type,
+            ipv4_addresses_per_eni=ipv4_addresses_per_eni,
             security_group_ids=security_group_ids,
             tags=tags,
         )
@@ -2114,6 +2175,12 @@ class CfnResourceGateway(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="resourceGatewayRef")
+    def resource_gateway_ref(self) -> _ResourceGatewayReference_8df20c1e:
+        '''A reference to a ResourceGateway resource.'''
+        return typing.cast(_ResourceGatewayReference_8df20c1e, jsii.get(self, "resourceGatewayRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -2166,6 +2233,19 @@ class CfnResourceGateway(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "ipAddressType", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="ipv4AddressesPerEni")
+    def ipv4_addresses_per_eni(self) -> typing.Optional[jsii.Number]:
+        '''The number of IPv4 addresses in each ENI for the resource gateway.'''
+        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "ipv4AddressesPerEni"))
+
+    @ipv4_addresses_per_eni.setter
+    def ipv4_addresses_per_eni(self, value: typing.Optional[jsii.Number]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5ebc10ed1c8e6c6821b6b7f4cd71006b4e3ce26c6b201ba4637014b8908140fd)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "ipv4AddressesPerEni", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="securityGroupIds")
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
@@ -2204,6 +2284,7 @@ class CfnResourceGateway(
         "subnet_ids": "subnetIds",
         "vpc_identifier": "vpcIdentifier",
         "ip_address_type": "ipAddressType",
+        "ipv4_addresses_per_eni": "ipv4AddressesPerEni",
         "security_group_ids": "securityGroupIds",
         "tags": "tags",
     },
@@ -2216,6 +2297,7 @@ class CfnResourceGatewayProps:
         subnet_ids: typing.Sequence[builtins.str],
         vpc_identifier: builtins.str,
         ip_address_type: typing.Optional[builtins.str] = None,
+        ipv4_addresses_per_eni: typing.Optional[jsii.Number] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
@@ -2225,6 +2307,7 @@ class CfnResourceGatewayProps:
         :param subnet_ids: The IDs of the VPC subnets for the resource gateway.
         :param vpc_identifier: The ID of the VPC for the resource gateway.
         :param ip_address_type: The type of IP address used by the resource gateway.
+        :param ipv4_addresses_per_eni: The number of IPv4 addresses in each ENI for the resource gateway.
         :param security_group_ids: The IDs of the security groups applied to the resource gateway.
         :param tags: The tags for the resource gateway.
 
@@ -2244,6 +2327,7 @@ class CfnResourceGatewayProps:
             
                 # the properties below are optional
                 ip_address_type="ipAddressType",
+                ipv4_addresses_per_eni=123,
                 security_group_ids=["securityGroupIds"],
                 tags=[CfnTag(
                     key="key",
@@ -2257,6 +2341,7 @@ class CfnResourceGatewayProps:
             check_type(argname="argument subnet_ids", value=subnet_ids, expected_type=type_hints["subnet_ids"])
             check_type(argname="argument vpc_identifier", value=vpc_identifier, expected_type=type_hints["vpc_identifier"])
             check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
+            check_type(argname="argument ipv4_addresses_per_eni", value=ipv4_addresses_per_eni, expected_type=type_hints["ipv4_addresses_per_eni"])
             check_type(argname="argument security_group_ids", value=security_group_ids, expected_type=type_hints["security_group_ids"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -2266,6 +2351,8 @@ class CfnResourceGatewayProps:
         }
         if ip_address_type is not None:
             self._values["ip_address_type"] = ip_address_type
+        if ipv4_addresses_per_eni is not None:
+            self._values["ipv4_addresses_per_eni"] = ipv4_addresses_per_eni
         if security_group_ids is not None:
             self._values["security_group_ids"] = security_group_ids
         if tags is not None:
@@ -2310,6 +2397,15 @@ class CfnResourceGatewayProps:
         result = self._values.get("ip_address_type")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def ipv4_addresses_per_eni(self) -> typing.Optional[jsii.Number]:
+        '''The number of IPv4 addresses in each ENI for the resource gateway.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcegateway.html#cfn-vpclattice-resourcegateway-ipv4addressespereni
+        '''
+        result = self._values.get("ipv4_addresses_per_eni")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
     @builtins.property
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
         '''The IDs of the security groups applied to the resource gateway.
@@ -2340,7 +2436,7 @@ class CfnResourceGatewayProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IResourcePolicyRef_8fa06c25)
 class CfnResourcePolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2376,7 +2472,8 @@ class CfnResourcePolicy(
         policy: typing.Any,
         resource_arn: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ResourcePolicy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param policy: The Amazon Resource Name (ARN) of the service network or service.
@@ -2425,6 +2522,12 @@ class CfnResourcePolicy(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="resourcePolicyRef")
+    def resource_policy_ref(self) -> _ResourcePolicyReference_0b2635a1:
+        '''A reference to a ResourcePolicy resource.'''
+        return typing.cast(_ResourcePolicyReference_0b2635a1, jsii.get(self, "resourcePolicyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="policy")
     def policy(self) -> typing.Any:
@@ -2521,7 +2624,7 @@ class CfnResourcePolicyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IRuleRef_b63824ff, _ITaggable_36806126)
 class CfnRule(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2606,7 +2709,8 @@ class CfnRule(
         service_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::Rule``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param action: Describes the action for a rule.
@@ -2686,6 +2790,12 @@ class CfnRule(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="ruleRef")
+    def rule_ref(self) -> _RuleReference_7f707c6c:
+        '''A reference to a Rule resource.'''
+        return typing.cast(_RuleReference_7f707c6c, jsii.get(self, "ruleRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -3818,7 +3928,7 @@ class CfnRuleProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IServiceRef_a78feffa, _ITaggable_36806126)
 class CfnService(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3868,13 +3978,14 @@ class CfnService(
         name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::Service``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param auth_type: The type of IAM policy. - ``NONE`` : The resource does not use an IAM policy. This is the default. - ``AWS_IAM`` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required. Default: - "NONE"
         :param certificate_arn: The Amazon Resource Name (ARN) of the certificate.
         :param custom_domain_name: The custom domain name of the service.
-        :param dns_entry: The DNS information of the service.
+        :param dns_entry: Describes the DNS information of the service. This field is read-only.
         :param name: The name of the service. The name must be unique within the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen. If you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name.
         :param tags: The tags for the service.
         '''
@@ -3991,6 +4102,12 @@ class CfnService(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceRef")
+    def service_ref(self) -> _ServiceReference_d8f4325a:
+        '''A reference to a Service resource.'''
+        return typing.cast(_ServiceReference_d8f4325a, jsii.get(self, "serviceRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -4041,7 +4158,7 @@ class CfnService(
     def dns_entry(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnService.DnsEntryProperty"]]:
-        '''The DNS information of the service.'''
+        '''Describes the DNS information of the service.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnService.DnsEntryProperty"]], jsii.get(self, "dnsEntry"))
 
     @dns_entry.setter
@@ -4151,7 +4268,7 @@ class CfnService(
             )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IServiceNetworkRef_1e3df588, _ITaggable_36806126)
 class CfnServiceNetwork(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4196,7 +4313,8 @@ class CfnServiceNetwork(
         sharing_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnServiceNetwork.SharingConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ServiceNetwork``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param auth_type: The type of IAM policy. - ``NONE`` : The resource does not use an IAM policy. This is the default. - ``AWS_IAM`` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required. Default: - "NONE"
@@ -4285,6 +4403,12 @@ class CfnServiceNetwork(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceNetworkRef")
+    def service_network_ref(self) -> _ServiceNetworkReference_e27144ae:
+        '''A reference to a ServiceNetwork resource.'''
+        return typing.cast(_ServiceNetworkReference_e27144ae, jsii.get(self, "serviceNetworkRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -4527,7 +4651,7 @@ class CfnServiceNetworkProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IServiceNetworkResourceAssociationRef_82997816, _ITaggableV2_4e6798f8)
 class CfnServiceNetworkResourceAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4566,7 +4690,8 @@ class CfnServiceNetworkResourceAssociation(
         service_network_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ServiceNetworkResourceAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param resource_configuration_id: The ID of the resource configuration associated with the service network.
@@ -4644,6 +4769,14 @@ class CfnServiceNetworkResourceAssociation(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceNetworkResourceAssociationRef")
+    def service_network_resource_association_ref(
+        self,
+    ) -> _ServiceNetworkResourceAssociationReference_02618c82:
+        '''A reference to a ServiceNetworkResourceAssociation resource.'''
+        return typing.cast(_ServiceNetworkResourceAssociationReference_02618c82, jsii.get(self, "serviceNetworkResourceAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="resourceConfigurationId")
     def resource_configuration_id(self) -> typing.Optional[builtins.str]:
@@ -4777,7 +4910,7 @@ class CfnServiceNetworkResourceAssociationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IServiceNetworkServiceAssociationRef_c2d152c8, _ITaggable_36806126)
 class CfnServiceNetworkServiceAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4827,7 +4960,8 @@ class CfnServiceNetworkServiceAssociation(
         service_network_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ServiceNetworkServiceAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param dns_entry: The DNS information of the service.
@@ -4991,6 +5125,14 @@ class CfnServiceNetworkServiceAssociation(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceNetworkServiceAssociationRef")
+    def service_network_service_association_ref(
+        self,
+    ) -> _ServiceNetworkServiceAssociationReference_4ecaad47:
+        '''A reference to a ServiceNetworkServiceAssociation resource.'''
+        return typing.cast(_ServiceNetworkServiceAssociationReference_4ecaad47, jsii.get(self, "serviceNetworkServiceAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -5241,7 +5383,7 @@ class CfnServiceNetworkServiceAssociationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IServiceNetworkVpcAssociationRef_6dc1c638, _ITaggable_36806126)
 class CfnServiceNetworkVpcAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5268,6 +5410,11 @@ class CfnServiceNetworkVpcAssociation(
         from aws_cdk import aws_vpclattice as vpclattice
         
         cfn_service_network_vpc_association = vpclattice.CfnServiceNetworkVpcAssociation(self, "MyCfnServiceNetworkVpcAssociation",
+            dns_options=vpclattice.CfnServiceNetworkVpcAssociation.DnsOptionsProperty(
+                private_dns_preference="privateDnsPreference",
+                private_dns_specified_domains=["privateDnsSpecifiedDomains"]
+            ),
+            private_dns_enabled=False,
             security_group_ids=["securityGroupIds"],
             service_network_identifier="serviceNetworkIdentifier",
             tags=[CfnTag(
@@ -5283,14 +5430,19 @@ class CfnServiceNetworkVpcAssociation(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
+        dns_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnServiceNetworkVpcAssociation.DnsOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        private_dns_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         service_network_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         vpc_identifier: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::ServiceNetworkVpcAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
+        :param dns_options: 
+        :param private_dns_enabled: 
         :param security_group_ids: The IDs of the security groups. Security groups aren't added by default. You can add a security group to apply network level controls to control which resources in a VPC are allowed to access the service network and its services. For more information, see `Control traffic to resources using security groups <https://docs.aws.amazon.com//vpc/latest/userguide/VPC_SecurityGroups.html>`_ in the *Amazon VPC User Guide* .
         :param service_network_identifier: The ID or ARN of the service network. You must use an ARN if the resources are in different accounts.
         :param tags: The tags for the association.
@@ -5301,6 +5453,8 @@ class CfnServiceNetworkVpcAssociation(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnServiceNetworkVpcAssociationProps(
+            dns_options=dns_options,
+            private_dns_enabled=private_dns_enabled,
             security_group_ids=security_group_ids,
             service_network_identifier=service_network_identifier,
             tags=tags,
@@ -5416,12 +5570,54 @@ class CfnServiceNetworkVpcAssociation(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceNetworkVpcAssociationRef")
+    def service_network_vpc_association_ref(
+        self,
+    ) -> _ServiceNetworkVpcAssociationReference_b2c1552d:
+        '''A reference to a ServiceNetworkVpcAssociation resource.'''
+        return typing.cast(_ServiceNetworkVpcAssociationReference_b2c1552d, jsii.get(self, "serviceNetworkVpcAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="dnsOptions")
+    def dns_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnServiceNetworkVpcAssociation.DnsOptionsProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnServiceNetworkVpcAssociation.DnsOptionsProperty"]], jsii.get(self, "dnsOptions"))
+
+    @dns_options.setter
+    def dns_options(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnServiceNetworkVpcAssociation.DnsOptionsProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__638bb9ade5742fe013f48391df59e2f89dad80bd292e3ef34d071293e2571243)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "dnsOptions", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="privateDnsEnabled")
+    def private_dns_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "privateDnsEnabled"))
+
+    @private_dns_enabled.setter
+    def private_dns_enabled(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__400b1487d13484965e883f5258624ffe18e543dde71c79c91ff3084df8a434b7)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "privateDnsEnabled", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="securityGroupIds")
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
@@ -5477,11 +5673,85 @@ class CfnServiceNetworkVpcAssociation(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "vpcIdentifier", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_vpclattice.CfnServiceNetworkVpcAssociation.DnsOptionsProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "private_dns_preference": "privateDnsPreference",
+            "private_dns_specified_domains": "privateDnsSpecifiedDomains",
+        },
+    )
+    class DnsOptionsProperty:
+        def __init__(
+            self,
+            *,
+            private_dns_preference: typing.Optional[builtins.str] = None,
+            private_dns_specified_domains: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''
+            :param private_dns_preference: 
+            :param private_dns_specified_domains: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_vpclattice as vpclattice
+                
+                dns_options_property = vpclattice.CfnServiceNetworkVpcAssociation.DnsOptionsProperty(
+                    private_dns_preference="privateDnsPreference",
+                    private_dns_specified_domains=["privateDnsSpecifiedDomains"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__a891ef3c203472f77ddf17f06c9948ca153fe024b45915ef31b2aa7da3b20730)
+                check_type(argname="argument private_dns_preference", value=private_dns_preference, expected_type=type_hints["private_dns_preference"])
+                check_type(argname="argument private_dns_specified_domains", value=private_dns_specified_domains, expected_type=type_hints["private_dns_specified_domains"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if private_dns_preference is not None:
+                self._values["private_dns_preference"] = private_dns_preference
+            if private_dns_specified_domains is not None:
+                self._values["private_dns_specified_domains"] = private_dns_specified_domains
+
+        @builtins.property
+        def private_dns_preference(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html#cfn-vpclattice-servicenetworkvpcassociation-dnsoptions-privatednspreference
+            '''
+            result = self._values.get("private_dns_preference")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def private_dns_specified_domains(
+            self,
+        ) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html#cfn-vpclattice-servicenetworkvpcassociation-dnsoptions-privatednsspecifieddomains
+            '''
+            result = self._values.get("private_dns_specified_domains")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "DnsOptionsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_vpclattice.CfnServiceNetworkVpcAssociationProps",
     jsii_struct_bases=[],
     name_mapping={
+        "dns_options": "dnsOptions",
+        "private_dns_enabled": "privateDnsEnabled",
         "security_group_ids": "securityGroupIds",
         "service_network_identifier": "serviceNetworkIdentifier",
         "tags": "tags",
@@ -5492,6 +5762,8 @@ class CfnServiceNetworkVpcAssociationProps:
     def __init__(
         self,
         *,
+        dns_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnServiceNetworkVpcAssociation.DnsOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        private_dns_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         service_network_identifier: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -5499,6 +5771,8 @@ class CfnServiceNetworkVpcAssociationProps:
     ) -> None:
         '''Properties for defining a ``CfnServiceNetworkVpcAssociation``.
 
+        :param dns_options: 
+        :param private_dns_enabled: 
         :param security_group_ids: The IDs of the security groups. Security groups aren't added by default. You can add a security group to apply network level controls to control which resources in a VPC are allowed to access the service network and its services. For more information, see `Control traffic to resources using security groups <https://docs.aws.amazon.com//vpc/latest/userguide/VPC_SecurityGroups.html>`_ in the *Amazon VPC User Guide* .
         :param service_network_identifier: The ID or ARN of the service network. You must use an ARN if the resources are in different accounts.
         :param tags: The tags for the association.
@@ -5514,6 +5788,11 @@ class CfnServiceNetworkVpcAssociationProps:
             from aws_cdk import aws_vpclattice as vpclattice
             
             cfn_service_network_vpc_association_props = vpclattice.CfnServiceNetworkVpcAssociationProps(
+                dns_options=vpclattice.CfnServiceNetworkVpcAssociation.DnsOptionsProperty(
+                    private_dns_preference="privateDnsPreference",
+                    private_dns_specified_domains=["privateDnsSpecifiedDomains"]
+                ),
+                private_dns_enabled=False,
                 security_group_ids=["securityGroupIds"],
                 service_network_identifier="serviceNetworkIdentifier",
                 tags=[CfnTag(
@@ -5525,11 +5804,17 @@ class CfnServiceNetworkVpcAssociationProps:
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__4f41a8834cfa086c1096ce2ce95d12df58a5d84c6b647b3712e7e34e8d51ad2d)
+            check_type(argname="argument dns_options", value=dns_options, expected_type=type_hints["dns_options"])
+            check_type(argname="argument private_dns_enabled", value=private_dns_enabled, expected_type=type_hints["private_dns_enabled"])
             check_type(argname="argument security_group_ids", value=security_group_ids, expected_type=type_hints["security_group_ids"])
             check_type(argname="argument service_network_identifier", value=service_network_identifier, expected_type=type_hints["service_network_identifier"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
             check_type(argname="argument vpc_identifier", value=vpc_identifier, expected_type=type_hints["vpc_identifier"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if dns_options is not None:
+            self._values["dns_options"] = dns_options
+        if private_dns_enabled is not None:
+            self._values["private_dns_enabled"] = private_dns_enabled
         if security_group_ids is not None:
             self._values["security_group_ids"] = security_group_ids
         if service_network_identifier is not None:
@@ -5539,6 +5824,26 @@ class CfnServiceNetworkVpcAssociationProps:
         if vpc_identifier is not None:
             self._values["vpc_identifier"] = vpc_identifier
 
+    @builtins.property
+    def dns_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnServiceNetworkVpcAssociation.DnsOptionsProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkvpcassociation.html#cfn-vpclattice-servicenetworkvpcassociation-dnsoptions
+        '''
+        result = self._values.get("dns_options")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnServiceNetworkVpcAssociation.DnsOptionsProperty]], result)
+
+    @builtins.property
+    def private_dns_enabled(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkvpcassociation.html#cfn-vpclattice-servicenetworkvpcassociation-privatednsenabled
+        '''
+        result = self._values.get("private_dns_enabled")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
     @builtins.property
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
         '''The IDs of the security groups.
@@ -5619,7 +5924,7 @@ class CfnServiceProps:
         :param auth_type: The type of IAM policy. - ``NONE`` : The resource does not use an IAM policy. This is the default. - ``AWS_IAM`` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required. Default: - "NONE"
         :param certificate_arn: The Amazon Resource Name (ARN) of the certificate.
         :param custom_domain_name: The custom domain name of the service.
-        :param dns_entry: The DNS information of the service.
+        :param dns_entry: Describes the DNS information of the service. This field is read-only.
         :param name: The name of the service. The name must be unique within the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen. If you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name.
         :param tags: The tags for the service.
 
@@ -5705,7 +6010,9 @@ class CfnServiceProps:
     def dns_entry(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnService.DnsEntryProperty]]:
-        '''The DNS information of the service.
+        '''Describes the DNS information of the service.
+
+        This field is read-only.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-service.html#cfn-vpclattice-service-dnsentry
         '''
@@ -5746,7 +6053,7 @@ class CfnServiceProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _ITargetGroupRef_52994392, _ITaggable_36806126)
 class CfnTargetGroup(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5819,7 +6126,8 @@ class CfnTargetGroup(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         targets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnTargetGroup.TargetProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::VpcLattice::TargetGroup``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param type: The type of target group.
@@ -5926,6 +6234,12 @@ class CfnTargetGroup(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="targetGroupRef")
+    def target_group_ref(self) -> _TargetGroupReference_6c9bb51b:
+        '''A reference to a TargetGroup resource.'''
+        return typing.cast(_TargetGroupReference_6c9bb51b, jsii.get(self, "targetGroupRef"))
+
     @builtins.property
     @jsii.member(jsii_name="type")
     def type(self) -> builtins.str:
@@ -7072,6 +7386,7 @@ def _typecheckingstub__c33d35acb93670756de87bb99dc9b48c5bdce217c8b7068ec8d831a66
     subnet_ids: typing.Sequence[builtins.str],
     vpc_identifier: builtins.str,
     ip_address_type: typing.Optional[builtins.str] = None,
+    ipv4_addresses_per_eni: typing.Optional[jsii.Number] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
@@ -7114,6 +7429,12 @@ def _typecheckingstub__da193673158e2d7b463232edae7461c41e04d65f3e9a6058fb5136fae
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__5ebc10ed1c8e6c6821b6b7f4cd71006b4e3ce26c6b201ba4637014b8908140fd(
+    value: typing.Optional[jsii.Number],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7e2e4828934d008108e9f5f74e2c02dbd9f159db6f7be2e11295977601d1296b(
     value: typing.Optional[typing.List[builtins.str]],
 ) -> None:
@@ -7132,6 +7453,7 @@ def _typecheckingstub__ed2c643634b9016a56acc1cdf5c3044eaa6f62d982922519a82cdbd49
     subnet_ids: typing.Sequence[builtins.str],
     vpc_identifier: builtins.str,
     ip_address_type: typing.Optional[builtins.str] = None,
+    ipv4_addresses_per_eni: typing.Optional[jsii.Number] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
@@ -7597,6 +7919,8 @@ def _typecheckingstub__51a5a54250d817f615a37a7e170370627b854e32b301763e487856be4
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
+    dns_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnServiceNetworkVpcAssociation.DnsOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    private_dns_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     service_network_identifier: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -7617,6 +7941,18 @@ def _typecheckingstub__b2251a301b298c27c60a8b9cf498a2fffccb3a393af00110a619bdae2
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__638bb9ade5742fe013f48391df59e2f89dad80bd292e3ef34d071293e2571243(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnServiceNetworkVpcAssociation.DnsOptionsProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__400b1487d13484965e883f5258624ffe18e543dde71c79c91ff3084df8a434b7(
+    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7648287c9bb4584c27c2b5afd67f788d009960d3e5e7da18f36497b7f076ccb8(
     value: typing.Optional[typing.List[builtins.str]],
 ) -> None:
@@ -7641,8 +7977,18 @@ def _typecheckingstub__e9b391eb61efda0eb74e9ad1d922235fdde79a86c6fda50bb367d2a7e
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a891ef3c203472f77ddf17f06c9948ca153fe024b45915ef31b2aa7da3b20730(
+    *,
+    private_dns_preference: typing.Optional[builtins.str] = None,
+    private_dns_specified_domains: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__4f41a8834cfa086c1096ce2ce95d12df58a5d84c6b647b3712e7e34e8d51ad2d(
     *,
+    dns_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnServiceNetworkVpcAssociation.DnsOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    private_dns_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     service_network_identifier: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,