aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_cloudfront_origins/__init__.py

@@ -573,6 +573,7 @@ origin = origins.LoadBalancerV2Origin(load_balancer,
     connection_attempts=3,
     connection_timeout=Duration.seconds(5),
     read_timeout=Duration.seconds(45),
+    response_completion_timeout=Duration.seconds(120),
     keepalive_timeout=Duration.seconds(45),
     protocol_policy=cloudfront.OriginProtocolPolicy.MATCH_VIEWER
 )
@@ -592,6 +593,36 @@ cloudfront.Distribution(self, "myDist",
 )
 ```
 
+You can specify the IP address type for connecting to the origin:
+
+```python
+origin = origins.HttpOrigin("www.example.com",
+    ip_address_type=cloudfront.OriginIpAddressType.IPV6
+)
+
+cloudfront.Distribution(self, "Distribution",
+    default_behavior=cloudfront.BehaviorOptions(origin=origin)
+)
+```
+
+The `ipAddressType` property allows you to specify whether CloudFront should use IPv4, IPv6, or both (dual-stack) when connecting to your origin.
+
+The origin can be customized with timeout settings to handle different response scenarios:
+
+```python
+cloudfront.Distribution(self, "Distribution",
+    default_behavior=cloudfront.BehaviorOptions(
+        origin=origins.HttpOrigin("api.example.com",
+            read_timeout=Duration.seconds(60),
+            response_completion_timeout=Duration.seconds(120),
+            keepalive_timeout=Duration.seconds(45)
+        )
+    )
+)
+```
+
+The `responseCompletionTimeout` property specifies the time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, and if set, the value must be equal to or greater than the `readTimeout` value.
+
 See the documentation of `aws-cdk-lib/aws-cloudfront` for more information.
 
 ## VPC origins
@@ -800,6 +831,61 @@ cloudfront.Distribution(self, "Distribution",
 )
 ```
 
+You can also configure timeout settings for Lambda Function URL origins:
+
+```python
+import aws_cdk.aws_lambda as lambda_
+
+# fn: lambda.Function
+
+fn_url = fn.add_function_url(auth_type=lambda_.FunctionUrlAuthType.NONE)
+
+cloudfront.Distribution(self, "Distribution",
+    default_behavior=cloudfront.BehaviorOptions(
+        origin=origins.FunctionUrlOrigin(fn_url,
+            read_timeout=Duration.seconds(30),
+            response_completion_timeout=Duration.seconds(90),
+            keepalive_timeout=Duration.seconds(45)
+        )
+    )
+)
+```
+
+### Configuring IP Address Type
+
+You can specify which IP protocol CloudFront uses when connecting to your Lambda Function URL origin. By default, CloudFront uses IPv4 only.
+
+```python
+import aws_cdk.aws_lambda as lambda_
+from aws_cdk.aws_cloudfront import OriginIpAddressType
+
+# fn: lambda.Function
+
+fn_url = fn.add_function_url(auth_type=lambda_.FunctionUrlAuthType.NONE)
+
+# Uses default IPv4 only
+cloudfront.Distribution(self, "Distribution",
+    default_behavior=cloudfront.BehaviorOptions(
+        origin=origins.FunctionUrlOrigin(fn_url)
+    )
+)
+
+# Explicitly specify IP address type
+cloudfront.Distribution(self, "Distribution",
+    default_behavior=cloudfront.BehaviorOptions(
+        origin=origins.FunctionUrlOrigin(fn_url,
+            ip_address_type=OriginIpAddressType.DUALSTACK
+        )
+    )
+)
+```
+
+Supported values for `ipAddressType`:
+
+* `OriginIpAddressType.IPV4` - CloudFront uses IPv4 only to connect to the origin (default)
+* `OriginIpAddressType.IPV6` - CloudFront uses IPv6 only to connect to the origin
+* `OriginIpAddressType.DUALSTACK` - CloudFront uses both IPv4 and IPv6 to connect to the origin
+
 ### Lambda Function URL with Origin Access Control (OAC)
 
 You can configure the Lambda Function URL with Origin Access Control (OAC) for enhanced security. When using OAC with Signing SIGV4_ALWAYS, it is recommended to set the Lambda Function URL authType to AWS_IAM to ensure proper authorization.
@@ -892,6 +978,7 @@ from ..aws_cloudfront import (
     OriginBase as _OriginBase_b8fe5bcc,
     OriginBindConfig as _OriginBindConfig_25a57096,
     OriginBindOptions as _OriginBindOptions_088c2b51,
+    OriginIpAddressType as _OriginIpAddressType_1c01e1a0,
     OriginProps as _OriginProps_0675928d,
     OriginProtocolPolicy as _OriginProtocolPolicy_967ed73c,
     OriginSelectionCriteria as _OriginSelectionCriteria_ba6d3e21,
@@ -920,16 +1007,18 @@ class FunctionUrlOrigin(
     Example::
 
         import aws_cdk.aws_lambda as lambda_
-        # fn: lambda.Function
         
+        # fn: lambda.Function
         
-        fn_url = fn.add_function_url(
-            auth_type=lambda_.FunctionUrlAuthType.AWS_IAM
-        )
+        fn_url = fn.add_function_url(auth_type=lambda_.FunctionUrlAuthType.NONE)
         
-        cloudfront.Distribution(self, "MyDistribution",
+        cloudfront.Distribution(self, "Distribution",
             default_behavior=cloudfront.BehaviorOptions(
-                origin=origins.FunctionUrlOrigin.with_origin_access_control(fn_url)
+                origin=origins.FunctionUrlOrigin(fn_url,
+                    read_timeout=Duration.seconds(30),
+                    response_completion_timeout=Duration.seconds(90),
+                    keepalive_timeout=Duration.seconds(45)
+                )
             )
         )
     '''
@@ -938,6 +1027,7 @@ class FunctionUrlOrigin(
         self,
         lambda_function_url: _IFunctionUrl_1a74cd94,
         *,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         read_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
@@ -948,9 +1038,11 @@ class FunctionUrlOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
         '''
         :param lambda_function_url: -
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: OriginIpAddressType.IPV4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param read_timeout: Specifies how long, in seconds, CloudFront waits for a response from the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(30)
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
@@ -961,11 +1053,13 @@ class FunctionUrlOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__fcda903697b26acfe2149a285d5a64619682b675affb52f4ae2d1aca46c8f1c3)
             check_type(argname="argument lambda_function_url", value=lambda_function_url, expected_type=type_hints["lambda_function_url"])
         props = FunctionUrlOriginProps(
+            ip_address_type=ip_address_type,
             keepalive_timeout=keepalive_timeout,
             read_timeout=read_timeout,
             origin_path=origin_path,
@@ -976,6 +1070,7 @@ class FunctionUrlOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         jsii.create(self.__class__, self, [lambda_function_url, props])
@@ -987,6 +1082,7 @@ class FunctionUrlOrigin(
         lambda_function_url: _IFunctionUrl_1a74cd94,
         *,
         origin_access_control: typing.Optional[_IOriginAccessControl_82a6fe5a] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         read_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
@@ -997,11 +1093,13 @@ class FunctionUrlOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> _IOrigin_83d4c1fa:
         '''Create a Lambda Function URL Origin with Origin Access Control (OAC) configured.
 
         :param lambda_function_url: -
         :param origin_access_control: An optional Origin Access Control. Default: - an Origin Access Control will be created.
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: OriginIpAddressType.IPV4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param read_timeout: Specifies how long, in seconds, CloudFront waits for a response from the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(30)
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
@@ -1012,12 +1110,14 @@ class FunctionUrlOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b4d59b7721f41be7903dbcffeddd34d596392d2c8d2a4110f31a4dacdb532727)
             check_type(argname="argument lambda_function_url", value=lambda_function_url, expected_type=type_hints["lambda_function_url"])
         props = FunctionUrlOriginWithOACProps(
             origin_access_control=origin_access_control,
+            ip_address_type=ip_address_type,
             keepalive_timeout=keepalive_timeout,
             read_timeout=read_timeout,
             origin_path=origin_path,
@@ -1028,6 +1128,7 @@ class FunctionUrlOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         return typing.cast(_IOrigin_83d4c1fa, jsii.sinvoke(cls, "withOriginAccessControl", [lambda_function_url, props]))
@@ -1050,6 +1151,7 @@ class FunctionUrlOrigin(
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
     },
 )
@@ -1064,6 +1166,7 @@ class FunctionUrlOriginBaseProps(_OriginProps_0675928d):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for configuring a origin using a standard Lambda Functions URLs.
@@ -1075,6 +1178,7 @@ class FunctionUrlOriginBaseProps(_OriginProps_0675928d):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
 
         :exampleMetadata: fixture=_generated
@@ -1096,7 +1200,8 @@ class FunctionUrlOriginBaseProps(_OriginProps_0675928d):
                 origin_id="originId",
                 origin_path="originPath",
                 origin_shield_enabled=False,
-                origin_shield_region="originShieldRegion"
+                origin_shield_region="originShieldRegion",
+                response_completion_timeout=cdk.Duration.minutes(30)
             )
         '''
         if __debug__:
@@ -1108,6 +1213,7 @@ class FunctionUrlOriginBaseProps(_OriginProps_0675928d):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if connection_attempts is not None:
@@ -1124,6 +1230,8 @@ class FunctionUrlOriginBaseProps(_OriginProps_0675928d):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
 
@@ -1200,6 +1308,21 @@ class FunctionUrlOriginBaseProps(_OriginProps_0675928d):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -1234,7 +1357,9 @@ class FunctionUrlOriginBaseProps(_OriginProps_0675928d):
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
+        "ip_address_type": "ipAddressType",
         "keepalive_timeout": "keepaliveTimeout",
         "read_timeout": "readTimeout",
     },
@@ -1250,7 +1375,9 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         read_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
@@ -1263,32 +1390,30 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: OriginIpAddressType.IPV4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param read_timeout: Specifies how long, in seconds, CloudFront waits for a response from the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(30)
 
-        :exampleMetadata: fixture=_generated
+        :exampleMetadata: infused
 
         Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            import aws_cdk as cdk
-            from aws_cdk import aws_cloudfront_origins as cloudfront_origins
+            import aws_cdk.aws_lambda as lambda_
             
-            function_url_origin_props = cloudfront_origins.FunctionUrlOriginProps(
-                connection_attempts=123,
-                connection_timeout=cdk.Duration.minutes(30),
-                custom_headers={
-                    "custom_headers_key": "customHeaders"
-                },
-                keepalive_timeout=cdk.Duration.minutes(30),
-                origin_access_control_id="originAccessControlId",
-                origin_id="originId",
-                origin_path="originPath",
-                origin_shield_enabled=False,
-                origin_shield_region="originShieldRegion",
-                read_timeout=cdk.Duration.minutes(30)
+            # fn: lambda.Function
+            
+            fn_url = fn.add_function_url(auth_type=lambda_.FunctionUrlAuthType.NONE)
+            
+            cloudfront.Distribution(self, "Distribution",
+                default_behavior=cloudfront.BehaviorOptions(
+                    origin=origins.FunctionUrlOrigin(fn_url,
+                        read_timeout=Duration.seconds(30),
+                        response_completion_timeout=Duration.seconds(90),
+                        keepalive_timeout=Duration.seconds(45)
+                    )
+                )
             )
         '''
         if __debug__:
@@ -1300,7 +1425,9 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
+            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
             check_type(argname="argument keepalive_timeout", value=keepalive_timeout, expected_type=type_hints["keepalive_timeout"])
             check_type(argname="argument read_timeout", value=read_timeout, expected_type=type_hints["read_timeout"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -1318,8 +1445,12 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
+        if ip_address_type is not None:
+            self._values["ip_address_type"] = ip_address_type
         if keepalive_timeout is not None:
             self._values["keepalive_timeout"] = keepalive_timeout
         if read_timeout is not None:
@@ -1398,6 +1529,21 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -1409,6 +1555,17 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
         result = self._values.get("origin_path")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def ip_address_type(self) -> typing.Optional[_OriginIpAddressType_1c01e1a0]:
+        '''Specifies which IP protocol CloudFront uses when connecting to your origin.
+
+        If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability.
+
+        :default: OriginIpAddressType.IPV4
+        '''
+        result = self._values.get("ip_address_type")
+        return typing.cast(typing.Optional[_OriginIpAddressType_1c01e1a0], result)
+
     @builtins.property
     def keepalive_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
         '''Specifies how long, in seconds, CloudFront persists its connection to the origin.
@@ -1460,7 +1617,9 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
+        "ip_address_type": "ipAddressType",
         "keepalive_timeout": "keepaliveTimeout",
         "read_timeout": "readTimeout",
         "origin_access_control": "originAccessControl",
@@ -1477,7 +1636,9 @@ class FunctionUrlOriginWithOACProps(FunctionUrlOriginProps):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         read_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_access_control: typing.Optional[_IOriginAccessControl_82a6fe5a] = None,
@@ -1491,7 +1652,9 @@ class FunctionUrlOriginWithOACProps(FunctionUrlOriginProps):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: OriginIpAddressType.IPV4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param read_timeout: Specifies how long, in seconds, CloudFront waits for a response from the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(30)
         :param origin_access_control: An optional Origin Access Control. Default: - an Origin Access Control will be created.
@@ -1532,7 +1695,9 @@ class FunctionUrlOriginWithOACProps(FunctionUrlOriginProps):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
+            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
             check_type(argname="argument keepalive_timeout", value=keepalive_timeout, expected_type=type_hints["keepalive_timeout"])
             check_type(argname="argument read_timeout", value=read_timeout, expected_type=type_hints["read_timeout"])
             check_type(argname="argument origin_access_control", value=origin_access_control, expected_type=type_hints["origin_access_control"])
@@ -1551,8 +1716,12 @@ class FunctionUrlOriginWithOACProps(FunctionUrlOriginProps):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
+        if ip_address_type is not None:
+            self._values["ip_address_type"] = ip_address_type
         if keepalive_timeout is not None:
             self._values["keepalive_timeout"] = keepalive_timeout
         if read_timeout is not None:
@@ -1633,6 +1802,21 @@ class FunctionUrlOriginWithOACProps(FunctionUrlOriginProps):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -1644,6 +1828,17 @@ class FunctionUrlOriginWithOACProps(FunctionUrlOriginProps):
         result = self._values.get("origin_path")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def ip_address_type(self) -> typing.Optional[_OriginIpAddressType_1c01e1a0]:
+        '''Specifies which IP protocol CloudFront uses when connecting to your origin.
+
+        If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability.
+
+        :default: OriginIpAddressType.IPV4
+        '''
+        result = self._values.get("ip_address_type")
+        return typing.cast(typing.Optional[_OriginIpAddressType_1c01e1a0], result)
+
     @builtins.property
     def keepalive_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
         '''Specifies how long, in seconds, CloudFront persists its connection to the origin.
@@ -1723,6 +1918,7 @@ class HttpOrigin(
         *,
         http_port: typing.Optional[jsii.Number] = None,
         https_port: typing.Optional[jsii.Number] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
         protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -1735,11 +1931,13 @@ class HttpOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
         '''
         :param domain_name: -
         :param http_port: The HTTP port that CloudFront uses to connect to the origin. Default: 80
         :param https_port: The HTTPS port that CloudFront uses to connect to the origin. Default: 443
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: undefined - AWS Cloudfront default is IPv4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param origin_ssl_protocols: The SSL versions to use when interacting with the origin. Default: OriginSslPolicy.TLS_V1_2
         :param protocol_policy: Specifies the protocol (HTTP or HTTPS) that CloudFront uses to connect to the origin. Default: OriginProtocolPolicy.HTTPS_ONLY
@@ -1752,6 +1950,7 @@ class HttpOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__57d13f69f251622e0723aa73c3eb93e482e0deb7a7b1e8439c7d7ad35cfc0cc5)
@@ -1759,6 +1958,7 @@ class HttpOrigin(
         props = HttpOriginProps(
             http_port=http_port,
             https_port=https_port,
+            ip_address_type=ip_address_type,
             keepalive_timeout=keepalive_timeout,
             origin_ssl_protocols=origin_ssl_protocols,
             protocol_policy=protocol_policy,
@@ -1771,6 +1971,7 @@ class HttpOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         jsii.create(self.__class__, self, [domain_name, props])
@@ -1793,9 +1994,11 @@ class HttpOrigin(
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
         "http_port": "httpPort",
         "https_port": "httpsPort",
+        "ip_address_type": "ipAddressType",
         "keepalive_timeout": "keepaliveTimeout",
         "origin_ssl_protocols": "originSslProtocols",
         "protocol_policy": "protocolPolicy",
@@ -1813,9 +2016,11 @@ class HttpOriginProps(_OriginProps_0675928d):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
         http_port: typing.Optional[jsii.Number] = None,
         https_port: typing.Optional[jsii.Number] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
         protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -1830,41 +2035,26 @@ class HttpOriginProps(_OriginProps_0675928d):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
         :param http_port: The HTTP port that CloudFront uses to connect to the origin. Default: 80
         :param https_port: The HTTPS port that CloudFront uses to connect to the origin. Default: 443
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: undefined - AWS Cloudfront default is IPv4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param origin_ssl_protocols: The SSL versions to use when interacting with the origin. Default: OriginSslPolicy.TLS_V1_2
         :param protocol_policy: Specifies the protocol (HTTP or HTTPS) that CloudFront uses to connect to the origin. Default: OriginProtocolPolicy.HTTPS_ONLY
         :param read_timeout: Specifies how long, in seconds, CloudFront waits for a response from the origin, also known as the origin response timeout. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(30)
 
-        :exampleMetadata: fixture=_generated
+        :exampleMetadata: infused
 
         Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            import aws_cdk as cdk
-            from aws_cdk import aws_cloudfront as cloudfront
-            from aws_cdk import aws_cloudfront_origins as cloudfront_origins
+            origin = origins.HttpOrigin("www.example.com",
+                ip_address_type=cloudfront.OriginIpAddressType.IPV6
+            )
             
-            http_origin_props = cloudfront_origins.HttpOriginProps(
-                connection_attempts=123,
-                connection_timeout=cdk.Duration.minutes(30),
-                custom_headers={
-                    "custom_headers_key": "customHeaders"
-                },
-                http_port=123,
-                https_port=123,
-                keepalive_timeout=cdk.Duration.minutes(30),
-                origin_access_control_id="originAccessControlId",
-                origin_id="originId",
-                origin_path="originPath",
-                origin_shield_enabled=False,
-                origin_shield_region="originShieldRegion",
-                origin_ssl_protocols=[cloudfront.OriginSslPolicy.SSL_V3],
-                protocol_policy=cloudfront.OriginProtocolPolicy.HTTP_ONLY,
-                read_timeout=cdk.Duration.minutes(30)
+            cloudfront.Distribution(self, "Distribution",
+                default_behavior=cloudfront.BehaviorOptions(origin=origin)
             )
         '''
         if __debug__:
@@ -1876,9 +2066,11 @@ class HttpOriginProps(_OriginProps_0675928d):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
             check_type(argname="argument http_port", value=http_port, expected_type=type_hints["http_port"])
             check_type(argname="argument https_port", value=https_port, expected_type=type_hints["https_port"])
+            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
             check_type(argname="argument keepalive_timeout", value=keepalive_timeout, expected_type=type_hints["keepalive_timeout"])
             check_type(argname="argument origin_ssl_protocols", value=origin_ssl_protocols, expected_type=type_hints["origin_ssl_protocols"])
             check_type(argname="argument protocol_policy", value=protocol_policy, expected_type=type_hints["protocol_policy"])
@@ -1898,12 +2090,16 @@ class HttpOriginProps(_OriginProps_0675928d):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
         if http_port is not None:
             self._values["http_port"] = http_port
         if https_port is not None:
             self._values["https_port"] = https_port
+        if ip_address_type is not None:
+            self._values["ip_address_type"] = ip_address_type
         if keepalive_timeout is not None:
             self._values["keepalive_timeout"] = keepalive_timeout
         if origin_ssl_protocols is not None:
@@ -1986,6 +2182,21 @@ class HttpOriginProps(_OriginProps_0675928d):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -2015,6 +2226,17 @@ class HttpOriginProps(_OriginProps_0675928d):
         result = self._values.get("https_port")
         return typing.cast(typing.Optional[jsii.Number], result)
 
+    @builtins.property
+    def ip_address_type(self) -> typing.Optional[_OriginIpAddressType_1c01e1a0]:
+        '''Specifies which IP protocol CloudFront uses when connecting to your origin.
+
+        If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability.
+
+        :default: undefined - AWS Cloudfront default is IPv4
+        '''
+        result = self._values.get("ip_address_type")
+        return typing.cast(typing.Optional[_OriginIpAddressType_1c01e1a0], result)
+
     @builtins.property
     def keepalive_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
         '''Specifies how long, in seconds, CloudFront persists its connection to the origin.
@@ -2106,6 +2328,7 @@ class LoadBalancerV2Origin(
         *,
         http_port: typing.Optional[jsii.Number] = None,
         https_port: typing.Optional[jsii.Number] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
         protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -2118,11 +2341,13 @@ class LoadBalancerV2Origin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
         '''
         :param load_balancer: -
         :param http_port: The HTTP port that CloudFront uses to connect to the origin. Default: 80
         :param https_port: The HTTPS port that CloudFront uses to connect to the origin. Default: 443
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: undefined - AWS Cloudfront default is IPv4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param origin_ssl_protocols: The SSL versions to use when interacting with the origin. Default: OriginSslPolicy.TLS_V1_2
         :param protocol_policy: Specifies the protocol (HTTP or HTTPS) that CloudFront uses to connect to the origin. Default: OriginProtocolPolicy.HTTPS_ONLY
@@ -2135,6 +2360,7 @@ class LoadBalancerV2Origin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2e5124d4f469d6539077a529c09cfba685fe4a7037b9417216b18f6ccdba96c0)
@@ -2142,6 +2368,7 @@ class LoadBalancerV2Origin(
         props = LoadBalancerV2OriginProps(
             http_port=http_port,
             https_port=https_port,
+            ip_address_type=ip_address_type,
             keepalive_timeout=keepalive_timeout,
             origin_ssl_protocols=origin_ssl_protocols,
             protocol_policy=protocol_policy,
@@ -2154,6 +2381,7 @@ class LoadBalancerV2Origin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         jsii.create(self.__class__, self, [load_balancer, props])
@@ -2170,9 +2398,11 @@ class LoadBalancerV2Origin(
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
         "http_port": "httpPort",
         "https_port": "httpsPort",
+        "ip_address_type": "ipAddressType",
         "keepalive_timeout": "keepaliveTimeout",
         "origin_ssl_protocols": "originSslProtocols",
         "protocol_policy": "protocolPolicy",
@@ -2190,9 +2420,11 @@ class LoadBalancerV2OriginProps(HttpOriginProps):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
         http_port: typing.Optional[jsii.Number] = None,
         https_port: typing.Optional[jsii.Number] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
         protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -2207,9 +2439,11 @@ class LoadBalancerV2OriginProps(HttpOriginProps):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
         :param http_port: The HTTP port that CloudFront uses to connect to the origin. Default: 80
         :param https_port: The HTTPS port that CloudFront uses to connect to the origin. Default: 443
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: undefined - AWS Cloudfront default is IPv4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param origin_ssl_protocols: The SSL versions to use when interacting with the origin. Default: OriginSslPolicy.TLS_V1_2
         :param protocol_policy: Specifies the protocol (HTTP or HTTPS) that CloudFront uses to connect to the origin. Default: OriginProtocolPolicy.HTTPS_ONLY
@@ -2225,6 +2459,7 @@ class LoadBalancerV2OriginProps(HttpOriginProps):
                 connection_attempts=3,
                 connection_timeout=Duration.seconds(5),
                 read_timeout=Duration.seconds(45),
+                response_completion_timeout=Duration.seconds(120),
                 keepalive_timeout=Duration.seconds(45),
                 protocol_policy=cloudfront.OriginProtocolPolicy.MATCH_VIEWER
             )
@@ -2238,9 +2473,11 @@ class LoadBalancerV2OriginProps(HttpOriginProps):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
             check_type(argname="argument http_port", value=http_port, expected_type=type_hints["http_port"])
             check_type(argname="argument https_port", value=https_port, expected_type=type_hints["https_port"])
+            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
             check_type(argname="argument keepalive_timeout", value=keepalive_timeout, expected_type=type_hints["keepalive_timeout"])
             check_type(argname="argument origin_ssl_protocols", value=origin_ssl_protocols, expected_type=type_hints["origin_ssl_protocols"])
             check_type(argname="argument protocol_policy", value=protocol_policy, expected_type=type_hints["protocol_policy"])
@@ -2260,12 +2497,16 @@ class LoadBalancerV2OriginProps(HttpOriginProps):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
         if http_port is not None:
             self._values["http_port"] = http_port
         if https_port is not None:
             self._values["https_port"] = https_port
+        if ip_address_type is not None:
+            self._values["ip_address_type"] = ip_address_type
         if keepalive_timeout is not None:
             self._values["keepalive_timeout"] = keepalive_timeout
         if origin_ssl_protocols is not None:
@@ -2348,6 +2589,21 @@ class LoadBalancerV2OriginProps(HttpOriginProps):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -2377,6 +2633,17 @@ class LoadBalancerV2OriginProps(HttpOriginProps):
         result = self._values.get("https_port")
         return typing.cast(typing.Optional[jsii.Number], result)
 
+    @builtins.property
+    def ip_address_type(self) -> typing.Optional[_OriginIpAddressType_1c01e1a0]:
+        '''Specifies which IP protocol CloudFront uses when connecting to your origin.
+
+        If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability.
+
+        :default: undefined - AWS Cloudfront default is IPv4
+        '''
+        result = self._values.get("ip_address_type")
+        return typing.cast(typing.Optional[_OriginIpAddressType_1c01e1a0], result)
+
     @builtins.property
     def keepalive_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
         '''Specifies how long, in seconds, CloudFront persists its connection to the origin.
@@ -2646,6 +2913,7 @@ class RestApiOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
         '''
         :param rest_api: -
@@ -2659,6 +2927,7 @@ class RestApiOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__56b6a9ee9b4e8ac821a25cc86fc2ff9f7490081ff9a35a5c551216af6a6ab722)
@@ -2674,6 +2943,7 @@ class RestApiOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         jsii.create(self.__class__, self, [rest_api, props])
@@ -2696,6 +2966,7 @@ class RestApiOrigin(
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
         "keepalive_timeout": "keepaliveTimeout",
         "read_timeout": "readTimeout",
@@ -2712,6 +2983,7 @@ class RestApiOriginProps(_OriginProps_0675928d):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         read_timeout: typing.Optional[_Duration_4839e8c3] = None,
@@ -2725,6 +2997,7 @@ class RestApiOriginProps(_OriginProps_0675928d):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param read_timeout: Specifies how long, in seconds, CloudFront waits for a response from the origin, also known as the origin response timeout. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(30)
@@ -2748,6 +3021,7 @@ class RestApiOriginProps(_OriginProps_0675928d):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
             check_type(argname="argument keepalive_timeout", value=keepalive_timeout, expected_type=type_hints["keepalive_timeout"])
             check_type(argname="argument read_timeout", value=read_timeout, expected_type=type_hints["read_timeout"])
@@ -2766,6 +3040,8 @@ class RestApiOriginProps(_OriginProps_0675928d):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
         if keepalive_timeout is not None:
@@ -2846,6 +3122,21 @@ class RestApiOriginProps(_OriginProps_0675928d):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -2908,15 +3199,19 @@ class S3BucketOrigin(
 
     Example::
 
-        my_bucket = s3.Bucket(self, "myBucket")
-        s3_origin = origins.S3BucketOrigin.with_origin_access_control(my_bucket,
-            origin_access_levels=[cloudfront.AccessLevel.READ, cloudfront.AccessLevel.LIST]
+        import aws_cdk.aws_kms as kms
+        
+        
+        my_kms_key = kms.Key(self, "myKMSKey")
+        my_bucket = s3.Bucket(self, "mySSEKMSEncryptedBucket",
+            encryption=s3.BucketEncryption.KMS,
+            encryption_key=my_kms_key,
+            object_ownership=s3.ObjectOwnership.BUCKET_OWNER_ENFORCED
         )
-        cloudfront.Distribution(self, "distribution",
+        cloudfront.Distribution(self, "myDist",
             default_behavior=cloudfront.BehaviorOptions(
-                origin=s3_origin
-            ),
-            default_root_object="index.html"
+                origin=origins.S3BucketOrigin.with_origin_access_control(my_bucket)
+            )
         )
     '''
 
@@ -2932,6 +3227,7 @@ class S3BucketOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
         '''
         :param bucket: -
@@ -2943,6 +3239,7 @@ class S3BucketOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3cb1f0b82603224c7fbeb25b954355d9b19c8971c1f19cce6cc99b4579024f0f)
@@ -2956,6 +3253,7 @@ class S3BucketOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         jsii.create(self.__class__, self, [bucket, props])
@@ -2974,6 +3272,7 @@ class S3BucketOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> _IOrigin_83d4c1fa:
         '''Create a S3 Origin with default S3 bucket settings (no origin access control).
 
@@ -2986,6 +3285,7 @@ class S3BucketOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f676436dc530972f0e77d574f148913989a94d38c9af09bff28450e29ace8acb)
@@ -2999,6 +3299,7 @@ class S3BucketOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         return typing.cast(_IOrigin_83d4c1fa, jsii.sinvoke(cls, "withBucketDefaults", [bucket, props]))
@@ -3019,6 +3320,7 @@ class S3BucketOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> _IOrigin_83d4c1fa:
         '''Create a S3 Origin with Origin Access Control (OAC) configured.
 
@@ -3033,6 +3335,7 @@ class S3BucketOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__23afb965139dc34be23cec3ad5506b4c5de509db9c0d653bed7877f463b7a9db)
@@ -3048,6 +3351,7 @@ class S3BucketOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         return typing.cast(_IOrigin_83d4c1fa, jsii.sinvoke(cls, "withOriginAccessControl", [bucket, props]))
@@ -3067,6 +3371,7 @@ class S3BucketOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> _IOrigin_83d4c1fa:
         '''Create a S3 Origin with Origin Access Identity (OAI) configured OAI is a legacy feature and we **strongly** recommend you to use OAC via ``withOriginAccessControl()`` unless it is not supported in your required region (e.g. China regions).
 
@@ -3080,6 +3385,7 @@ class S3BucketOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__13e7421c65d5fbb92fc686fa854daca3e90dc002f3e99da4b4757e32e3c4105d)
@@ -3094,6 +3400,7 @@ class S3BucketOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         return typing.cast(_IOrigin_83d4c1fa, jsii.sinvoke(cls, "withOriginAccessIdentity", [bucket, props]))
@@ -3126,6 +3433,7 @@ typing.cast(typing.Any, S3BucketOrigin).__jsii_proxy_class__ = lambda : _S3Bucke
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
     },
 )
@@ -3140,6 +3448,7 @@ class S3BucketOriginBaseProps(_OriginProps_0675928d):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for configuring a origin using a standard S3 bucket.
@@ -3151,6 +3460,7 @@ class S3BucketOriginBaseProps(_OriginProps_0675928d):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
 
         :exampleMetadata: fixture=_generated
@@ -3172,7 +3482,8 @@ class S3BucketOriginBaseProps(_OriginProps_0675928d):
                 origin_id="originId",
                 origin_path="originPath",
                 origin_shield_enabled=False,
-                origin_shield_region="originShieldRegion"
+                origin_shield_region="originShieldRegion",
+                response_completion_timeout=cdk.Duration.minutes(30)
             )
         '''
         if __debug__:
@@ -3184,6 +3495,7 @@ class S3BucketOriginBaseProps(_OriginProps_0675928d):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if connection_attempts is not None:
@@ -3200,6 +3512,8 @@ class S3BucketOriginBaseProps(_OriginProps_0675928d):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
 
@@ -3276,6 +3590,21 @@ class S3BucketOriginBaseProps(_OriginProps_0675928d):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -3310,6 +3639,7 @@ class S3BucketOriginBaseProps(_OriginProps_0675928d):
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
         "origin_access_control": "originAccessControl",
         "origin_access_levels": "originAccessLevels",
@@ -3326,6 +3656,7 @@ class S3BucketOriginWithOACProps(S3BucketOriginBaseProps):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
         origin_access_control: typing.Optional[_IOriginAccessControl_82a6fe5a] = None,
         origin_access_levels: typing.Optional[typing.Sequence[_AccessLevel_315d9a76]] = None,
@@ -3339,6 +3670,7 @@ class S3BucketOriginWithOACProps(S3BucketOriginBaseProps):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
         :param origin_access_control: An optional Origin Access Control. Default: - an Origin Access Control will be created.
         :param origin_access_levels: The level of permissions granted in the bucket policy and key policy (if applicable) to the CloudFront distribution. Default: [AccessLevel.READ]
@@ -3348,14 +3680,16 @@ class S3BucketOriginWithOACProps(S3BucketOriginBaseProps):
         Example::
 
             my_bucket = s3.Bucket(self, "myBucket")
+            oac = cloudfront.S3OriginAccessControl(self, "MyOAC",
+                signing=cloudfront.Signing.SIGV4_NO_OVERRIDE
+            )
             s3_origin = origins.S3BucketOrigin.with_origin_access_control(my_bucket,
-                origin_access_levels=[cloudfront.AccessLevel.READ, cloudfront.AccessLevel.LIST]
+                origin_access_control=oac
             )
-            cloudfront.Distribution(self, "distribution",
+            cloudfront.Distribution(self, "myDist",
                 default_behavior=cloudfront.BehaviorOptions(
                     origin=s3_origin
-                ),
-                default_root_object="index.html"
+                )
             )
         '''
         if __debug__:
@@ -3367,6 +3701,7 @@ class S3BucketOriginWithOACProps(S3BucketOriginBaseProps):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
             check_type(argname="argument origin_access_control", value=origin_access_control, expected_type=type_hints["origin_access_control"])
             check_type(argname="argument origin_access_levels", value=origin_access_levels, expected_type=type_hints["origin_access_levels"])
@@ -3385,6 +3720,8 @@ class S3BucketOriginWithOACProps(S3BucketOriginBaseProps):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
         if origin_access_control is not None:
@@ -3465,6 +3802,21 @@ class S3BucketOriginWithOACProps(S3BucketOriginBaseProps):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -3519,6 +3871,7 @@ class S3BucketOriginWithOACProps(S3BucketOriginBaseProps):
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
         "origin_access_identity": "originAccessIdentity",
     },
@@ -3534,6 +3887,7 @@ class S3BucketOriginWithOAIProps(S3BucketOriginBaseProps):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
         origin_access_identity: typing.Optional[_IOriginAccessIdentity_a922494c] = None,
     ) -> None:
@@ -3546,6 +3900,7 @@ class S3BucketOriginWithOAIProps(S3BucketOriginBaseProps):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
         :param origin_access_identity: An optional Origin Access Identity. Default: - an Origin Access Identity will be created.
 
@@ -3575,6 +3930,7 @@ class S3BucketOriginWithOAIProps(S3BucketOriginBaseProps):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
             check_type(argname="argument origin_access_identity", value=origin_access_identity, expected_type=type_hints["origin_access_identity"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -3592,6 +3948,8 @@ class S3BucketOriginWithOAIProps(S3BucketOriginBaseProps):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
         if origin_access_identity is not None:
@@ -3670,6 +4028,21 @@ class S3BucketOriginWithOAIProps(S3BucketOriginBaseProps):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -3722,20 +4095,19 @@ class S3Origin(
 
     Example::
 
-        # Adding an existing Lambda@Edge function created in a different stack
-        # to a CloudFront distribution.
         # s3_bucket: s3.Bucket
-        
-        function_version = lambda_.Version.from_version_arn(self, "Version", "arn:aws:lambda:us-east-1:123456789012:function:functionName:1")
-        
+        # Add a cloudfront Function to a Distribution
+        cf_function = cloudfront.Function(self, "Function",
+            code=cloudfront.FunctionCode.from_inline("function handler(event) { return event.request }"),
+            runtime=cloudfront.FunctionRuntime.JS_2_0
+        )
         cloudfront.Distribution(self, "distro",
             default_behavior=cloudfront.BehaviorOptions(
                 origin=origins.S3Origin(s3_bucket),
-                edge_lambdas=[cloudfront.EdgeLambda(
-                    function_version=function_version,
-                    event_type=cloudfront.LambdaEdgeEventType.VIEWER_REQUEST
-                )
-                ]
+                function_associations=[cloudfront.FunctionAssociation(
+                    function=cf_function,
+                    event_type=cloudfront.FunctionEventType.VIEWER_REQUEST
+                )]
             )
         )
     '''
@@ -3753,6 +4125,7 @@ class S3Origin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
         '''
         :param bucket: -
@@ -3765,6 +4138,7 @@ class S3Origin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
 
         :stability: deprecated
         '''
@@ -3781,6 +4155,7 @@ class S3Origin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         jsii.create(self.__class__, self, [bucket, props])
@@ -3822,6 +4197,7 @@ class S3Origin(
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
         "origin_access_identity": "originAccessIdentity",
     },
@@ -3837,6 +4213,7 @@ class S3OriginProps(_OriginProps_0675928d):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
         origin_access_identity: typing.Optional[_IOriginAccessIdentity_a922494c] = None,
     ) -> None:
@@ -3849,6 +4226,7 @@ class S3OriginProps(_OriginProps_0675928d):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
         :param origin_access_identity: An optional Origin Access Identity of the origin identity cloudfront will use when calling your s3 bucket. Default: - An Origin Access Identity will be created.
 
@@ -3875,7 +4253,8 @@ class S3OriginProps(_OriginProps_0675928d):
                 origin_id="originId",
                 origin_path="originPath",
                 origin_shield_enabled=False,
-                origin_shield_region="originShieldRegion"
+                origin_shield_region="originShieldRegion",
+                response_completion_timeout=cdk.Duration.minutes(30)
             )
         '''
         if __debug__:
@@ -3887,6 +4266,7 @@ class S3OriginProps(_OriginProps_0675928d):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
             check_type(argname="argument origin_access_identity", value=origin_access_identity, expected_type=type_hints["origin_access_identity"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -3904,6 +4284,8 @@ class S3OriginProps(_OriginProps_0675928d):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
         if origin_access_identity is not None:
@@ -3982,6 +4364,21 @@ class S3OriginProps(_OriginProps_0675928d):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -4039,6 +4436,7 @@ class S3StaticWebsiteOrigin(
         *,
         http_port: typing.Optional[jsii.Number] = None,
         https_port: typing.Optional[jsii.Number] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
         protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -4051,11 +4449,13 @@ class S3StaticWebsiteOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
         '''
         :param bucket: -
         :param http_port: The HTTP port that CloudFront uses to connect to the origin. Default: 80
         :param https_port: The HTTPS port that CloudFront uses to connect to the origin. Default: 443
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: undefined - AWS Cloudfront default is IPv4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param origin_ssl_protocols: The SSL versions to use when interacting with the origin. Default: OriginSslPolicy.TLS_V1_2
         :param protocol_policy: Specifies the protocol (HTTP or HTTPS) that CloudFront uses to connect to the origin. Default: OriginProtocolPolicy.HTTPS_ONLY
@@ -4068,6 +4468,7 @@ class S3StaticWebsiteOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__f0edd2083352b96faf3ea9eb05136629dff841fa272ecdb6dfb52772a77b9b22)
@@ -4075,6 +4476,7 @@ class S3StaticWebsiteOrigin(
         props = S3StaticWebsiteOriginProps(
             http_port=http_port,
             https_port=https_port,
+            ip_address_type=ip_address_type,
             keepalive_timeout=keepalive_timeout,
             origin_ssl_protocols=origin_ssl_protocols,
             protocol_policy=protocol_policy,
@@ -4087,6 +4489,7 @@ class S3StaticWebsiteOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         jsii.create(self.__class__, self, [bucket, props])
@@ -4103,9 +4506,11 @@ class S3StaticWebsiteOrigin(
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
         "http_port": "httpPort",
         "https_port": "httpsPort",
+        "ip_address_type": "ipAddressType",
         "keepalive_timeout": "keepaliveTimeout",
         "origin_ssl_protocols": "originSslProtocols",
         "protocol_policy": "protocolPolicy",
@@ -4123,9 +4528,11 @@ class S3StaticWebsiteOriginProps(HttpOriginProps):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
         http_port: typing.Optional[jsii.Number] = None,
         https_port: typing.Optional[jsii.Number] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
         protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -4140,9 +4547,11 @@ class S3StaticWebsiteOriginProps(HttpOriginProps):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
         :param http_port: The HTTP port that CloudFront uses to connect to the origin. Default: 80
         :param https_port: The HTTPS port that CloudFront uses to connect to the origin. Default: 443
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: undefined - AWS Cloudfront default is IPv4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param origin_ssl_protocols: The SSL versions to use when interacting with the origin. Default: OriginSslPolicy.TLS_V1_2
         :param protocol_policy: Specifies the protocol (HTTP or HTTPS) that CloudFront uses to connect to the origin. Default: OriginProtocolPolicy.HTTPS_ONLY
@@ -4166,6 +4575,7 @@ class S3StaticWebsiteOriginProps(HttpOriginProps):
                 },
                 http_port=123,
                 https_port=123,
+                ip_address_type=cloudfront.OriginIpAddressType.IPV4,
                 keepalive_timeout=cdk.Duration.minutes(30),
                 origin_access_control_id="originAccessControlId",
                 origin_id="originId",
@@ -4174,7 +4584,8 @@ class S3StaticWebsiteOriginProps(HttpOriginProps):
                 origin_shield_region="originShieldRegion",
                 origin_ssl_protocols=[cloudfront.OriginSslPolicy.SSL_V3],
                 protocol_policy=cloudfront.OriginProtocolPolicy.HTTP_ONLY,
-                read_timeout=cdk.Duration.minutes(30)
+                read_timeout=cdk.Duration.minutes(30),
+                response_completion_timeout=cdk.Duration.minutes(30)
             )
         '''
         if __debug__:
@@ -4186,9 +4597,11 @@ class S3StaticWebsiteOriginProps(HttpOriginProps):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
             check_type(argname="argument http_port", value=http_port, expected_type=type_hints["http_port"])
             check_type(argname="argument https_port", value=https_port, expected_type=type_hints["https_port"])
+            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
             check_type(argname="argument keepalive_timeout", value=keepalive_timeout, expected_type=type_hints["keepalive_timeout"])
             check_type(argname="argument origin_ssl_protocols", value=origin_ssl_protocols, expected_type=type_hints["origin_ssl_protocols"])
             check_type(argname="argument protocol_policy", value=protocol_policy, expected_type=type_hints["protocol_policy"])
@@ -4208,12 +4621,16 @@ class S3StaticWebsiteOriginProps(HttpOriginProps):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
         if http_port is not None:
             self._values["http_port"] = http_port
         if https_port is not None:
             self._values["https_port"] = https_port
+        if ip_address_type is not None:
+            self._values["ip_address_type"] = ip_address_type
         if keepalive_timeout is not None:
             self._values["keepalive_timeout"] = keepalive_timeout
         if origin_ssl_protocols is not None:
@@ -4296,6 +4713,21 @@ class S3StaticWebsiteOriginProps(HttpOriginProps):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -4325,6 +4757,17 @@ class S3StaticWebsiteOriginProps(HttpOriginProps):
         result = self._values.get("https_port")
         return typing.cast(typing.Optional[jsii.Number], result)
 
+    @builtins.property
+    def ip_address_type(self) -> typing.Optional[_OriginIpAddressType_1c01e1a0]:
+        '''Specifies which IP protocol CloudFront uses when connecting to your origin.
+
+        If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability.
+
+        :default: undefined - AWS Cloudfront default is IPv4
+        '''
+        result = self._values.get("ip_address_type")
+        return typing.cast(typing.Optional[_OriginIpAddressType_1c01e1a0], result)
+
     @builtins.property
     def keepalive_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
         '''Specifies how long, in seconds, CloudFront persists its connection to the origin.
@@ -4426,6 +4869,7 @@ class VpcOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
         '''
         :param domain_name_: -
@@ -4440,6 +4884,7 @@ class VpcOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__27d66442a972110883cdde622df199c2db6a7264e19031f1118d7aa01681cef6)
@@ -4456,6 +4901,7 @@ class VpcOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         jsii.create(self.__class__, self, [domain_name_, props])
@@ -4482,6 +4928,7 @@ class VpcOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> "VpcOrigin":
         '''Create a VPC origin with an Application Load Balancer.
 
@@ -4502,6 +4949,7 @@ class VpcOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__8615ead9bb90a8fd2c91dc07371d03b8f4b4192a1500a449646bd8a7be95fa6c)
@@ -4523,6 +4971,7 @@ class VpcOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         return typing.cast("VpcOrigin", jsii.sinvoke(cls, "withApplicationLoadBalancer", [alb, props]))
@@ -4549,6 +4998,7 @@ class VpcOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> "VpcOrigin":
         '''Create a VPC origin with an EC2 instance.
 
@@ -4569,6 +5019,7 @@ class VpcOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1fc3f8db0baa99548845b1733d31d8271fbe2c934c89a6c44958edcb38b35a13)
@@ -4590,6 +5041,7 @@ class VpcOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         return typing.cast("VpcOrigin", jsii.sinvoke(cls, "withEc2Instance", [instance, props]))
@@ -4616,6 +5068,7 @@ class VpcOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> "VpcOrigin":
         '''Create a VPC origin with a Network Load Balancer.
 
@@ -4636,6 +5089,7 @@ class VpcOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__83c5561f2747600ee99b6ee41190dcba45f2a24cc1c9500759e9c382320b83d6)
@@ -4657,6 +5111,7 @@ class VpcOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         return typing.cast("VpcOrigin", jsii.sinvoke(cls, "withNetworkLoadBalancer", [nlb, props]))
@@ -4678,6 +5133,7 @@ class VpcOrigin(
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> "VpcOrigin":
         '''Create a VPC origin with an existing VPC origin resource.
 
@@ -4693,6 +5149,7 @@ class VpcOrigin(
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b7ed2e0f746eab77b2774c1adb0f114f10e786a05b531cd1218f93ad3770e5af)
@@ -4709,6 +5166,7 @@ class VpcOrigin(
             origin_id=origin_id,
             origin_shield_enabled=origin_shield_enabled,
             origin_shield_region=origin_shield_region,
+            response_completion_timeout=response_completion_timeout,
         )
 
         return typing.cast("VpcOrigin", jsii.sinvoke(cls, "withVpcOrigin", [origin, props]))
@@ -4758,6 +5216,7 @@ typing.cast(typing.Any, VpcOrigin).__jsii_proxy_class__ = lambda : _VpcOriginPro
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
         "domain_name": "domainName",
         "keepalive_timeout": "keepaliveTimeout",
@@ -4775,6 +5234,7 @@ class VpcOriginProps(_OriginProps_0675928d):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
         domain_name: typing.Optional[builtins.str] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
@@ -4789,6 +5249,7 @@ class VpcOriginProps(_OriginProps_0675928d):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
         :param domain_name: The domain name associated with your VPC origin. Default: - The default domain name of the endpoint.
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
@@ -4816,7 +5277,8 @@ class VpcOriginProps(_OriginProps_0675928d):
                 origin_path="originPath",
                 origin_shield_enabled=False,
                 origin_shield_region="originShieldRegion",
-                read_timeout=cdk.Duration.minutes(30)
+                read_timeout=cdk.Duration.minutes(30),
+                response_completion_timeout=cdk.Duration.minutes(30)
             )
         '''
         if __debug__:
@@ -4828,6 +5290,7 @@ class VpcOriginProps(_OriginProps_0675928d):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
             check_type(argname="argument domain_name", value=domain_name, expected_type=type_hints["domain_name"])
             check_type(argname="argument keepalive_timeout", value=keepalive_timeout, expected_type=type_hints["keepalive_timeout"])
@@ -4847,6 +5310,8 @@ class VpcOriginProps(_OriginProps_0675928d):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
         if domain_name is not None:
@@ -4929,6 +5394,21 @@ class VpcOriginProps(_OriginProps_0675928d):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -5000,6 +5480,7 @@ class VpcOriginProps(_OriginProps_0675928d):
         "origin_id": "originId",
         "origin_shield_enabled": "originShieldEnabled",
         "origin_shield_region": "originShieldRegion",
+        "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
         "domain_name": "domainName",
         "keepalive_timeout": "keepaliveTimeout",
@@ -5022,6 +5503,7 @@ class VpcOriginWithEndpointProps(VpcOriginProps, _VpcOriginOptions_f9e74bd8):
         origin_id: typing.Optional[builtins.str] = None,
         origin_shield_enabled: typing.Optional[builtins.bool] = None,
         origin_shield_region: typing.Optional[builtins.str] = None,
+        response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
         domain_name: typing.Optional[builtins.str] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
@@ -5041,6 +5523,7 @@ class VpcOriginWithEndpointProps(VpcOriginProps, _VpcOriginOptions_f9e74bd8):
         :param origin_id: A unique identifier for the origin. This value must be unique within the distribution. Default: - an originid will be generated for you
         :param origin_shield_enabled: Origin Shield is enabled by setting originShieldRegion to a valid region, after this to disable Origin Shield again you must set this flag to false. Default: - true
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
+        :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
         :param domain_name: The domain name associated with your VPC origin. Default: - The default domain name of the endpoint.
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
@@ -5079,6 +5562,7 @@ class VpcOriginWithEndpointProps(VpcOriginProps, _VpcOriginOptions_f9e74bd8):
                 origin_ssl_protocols=[cloudfront.OriginSslPolicy.SSL_V3],
                 protocol_policy=cloudfront.OriginProtocolPolicy.HTTP_ONLY,
                 read_timeout=cdk.Duration.minutes(30),
+                response_completion_timeout=cdk.Duration.minutes(30),
                 vpc_origin_name="vpcOriginName"
             )
         '''
@@ -5091,6 +5575,7 @@ class VpcOriginWithEndpointProps(VpcOriginProps, _VpcOriginOptions_f9e74bd8):
             check_type(argname="argument origin_id", value=origin_id, expected_type=type_hints["origin_id"])
             check_type(argname="argument origin_shield_enabled", value=origin_shield_enabled, expected_type=type_hints["origin_shield_enabled"])
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
+            check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
             check_type(argname="argument domain_name", value=domain_name, expected_type=type_hints["domain_name"])
             check_type(argname="argument keepalive_timeout", value=keepalive_timeout, expected_type=type_hints["keepalive_timeout"])
@@ -5115,6 +5600,8 @@ class VpcOriginWithEndpointProps(VpcOriginProps, _VpcOriginOptions_f9e74bd8):
             self._values["origin_shield_enabled"] = origin_shield_enabled
         if origin_shield_region is not None:
             self._values["origin_shield_region"] = origin_shield_region
+        if response_completion_timeout is not None:
+            self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
         if domain_name is not None:
@@ -5207,6 +5694,21 @@ class VpcOriginWithEndpointProps(VpcOriginProps, _VpcOriginOptions_f9e74bd8):
         result = self._values.get("origin_shield_region")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def response_completion_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
+        '''The time that a request from CloudFront to the origin can stay open and wait for a response.
+
+        If the complete response isn't received from the origin by this time, CloudFront ends the connection.
+
+        Valid values are 1-3600 seconds, inclusive.
+
+        :default: undefined -  AWS CloudFront default is not enforcing a maximum value
+
+        :see: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout
+        '''
+        result = self._values.get("response_completion_timeout")
+        return typing.cast(typing.Optional[_Duration_4839e8c3], result)
+
     @builtins.property
     def origin_path(self) -> typing.Optional[builtins.str]:
         '''An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
@@ -5345,6 +5847,7 @@ publication.publish()
 def _typecheckingstub__fcda903697b26acfe2149a285d5a64619682b675affb52f4ae2d1aca46c8f1c3(
     lambda_function_url: _IFunctionUrl_1a74cd94,
     *,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     read_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
@@ -5355,6 +5858,7 @@ def _typecheckingstub__fcda903697b26acfe2149a285d5a64619682b675affb52f4ae2d1aca4
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5363,6 +5867,7 @@ def _typecheckingstub__b4d59b7721f41be7903dbcffeddd34d596392d2c8d2a4110f31a4dacd
     lambda_function_url: _IFunctionUrl_1a74cd94,
     *,
     origin_access_control: typing.Optional[_IOriginAccessControl_82a6fe5a] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     read_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
@@ -5373,6 +5878,7 @@ def _typecheckingstub__b4d59b7721f41be7903dbcffeddd34d596392d2c8d2a4110f31a4dacd
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5386,6 +5892,7 @@ def _typecheckingstub__610b4764a440619f38a9adeb3e13225e58180ee2ee316abd994579fdc
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -5400,7 +5907,9 @@ def _typecheckingstub__56d340a9ac5dd93c6aa22cb98bcbc860fb23f8d247b53c2cd1a51ecd8
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     read_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
@@ -5416,7 +5925,9 @@ def _typecheckingstub__56968af993436ccfcac0aa6a57169f1a033078c10740d435d086816ad
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     read_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_access_control: typing.Optional[_IOriginAccessControl_82a6fe5a] = None,
@@ -5429,6 +5940,7 @@ def _typecheckingstub__57d13f69f251622e0723aa73c3eb93e482e0deb7a7b1e8439c7d7ad35
     *,
     http_port: typing.Optional[jsii.Number] = None,
     https_port: typing.Optional[jsii.Number] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
     protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -5441,6 +5953,7 @@ def _typecheckingstub__57d13f69f251622e0723aa73c3eb93e482e0deb7a7b1e8439c7d7ad35
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5454,9 +5967,11 @@ def _typecheckingstub__13f43bf70f0a97ee8ca0e4f7aca38d43089ed2bc254d5c2b57c73b51c
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
     http_port: typing.Optional[jsii.Number] = None,
     https_port: typing.Optional[jsii.Number] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
     protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -5470,6 +5985,7 @@ def _typecheckingstub__2e5124d4f469d6539077a529c09cfba685fe4a7037b9417216b18f6cc
     *,
     http_port: typing.Optional[jsii.Number] = None,
     https_port: typing.Optional[jsii.Number] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
     protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -5482,6 +5998,7 @@ def _typecheckingstub__2e5124d4f469d6539077a529c09cfba685fe4a7037b9417216b18f6cc
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5495,9 +6012,11 @@ def _typecheckingstub__c72b63200b184ae3f51c9b6a19be2eef9bddae313ee00c7378396c0dc
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
     http_port: typing.Optional[jsii.Number] = None,
     https_port: typing.Optional[jsii.Number] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
     protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -5538,6 +6057,7 @@ def _typecheckingstub__56b6a9ee9b4e8ac821a25cc86fc2ff9f7490081ff9a35a5c551216af6
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5551,6 +6071,7 @@ def _typecheckingstub__0eca8c8f76c90eb80c45563b1a8eb9b9f1868ad621b45412a4cb93529
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     read_timeout: typing.Optional[_Duration_4839e8c3] = None,
@@ -5569,6 +6090,7 @@ def _typecheckingstub__3cb1f0b82603224c7fbeb25b954355d9b19c8971c1f19cce6cc99b457
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5584,6 +6106,7 @@ def _typecheckingstub__f676436dc530972f0e77d574f148913989a94d38c9af09bff28450e29
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5601,6 +6124,7 @@ def _typecheckingstub__23afb965139dc34be23cec3ad5506b4c5de509db9c0d653bed7877f46
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5617,6 +6141,7 @@ def _typecheckingstub__13e7421c65d5fbb92fc686fa854daca3e90dc002f3e99da4b4757e32e
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5630,6 +6155,7 @@ def _typecheckingstub__c5e580c31fe629b713e1ecbf9905ebb4220e152805ab34129f693f2c4
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -5644,6 +6170,7 @@ def _typecheckingstub__1af53a7ded1427e29cc874af45efdfe026a0004a1f2782a5bc936dbfc
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
     origin_access_control: typing.Optional[_IOriginAccessControl_82a6fe5a] = None,
     origin_access_levels: typing.Optional[typing.Sequence[_AccessLevel_315d9a76]] = None,
@@ -5660,6 +6187,7 @@ def _typecheckingstub__4b64c18ef31b660c450eee84b6738d7bbd960797e1788e068be966312
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
     origin_access_identity: typing.Optional[_IOriginAccessIdentity_a922494c] = None,
 ) -> None:
@@ -5678,6 +6206,7 @@ def _typecheckingstub__9ba8623373b0faa9ac55c816167da21a58e0753e0dd032b1f3e6ccd0b
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5700,6 +6229,7 @@ def _typecheckingstub__bbd2a0ca1bf4d32899d90ea633e3ac416a6fa29972ee055a5866ec269
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
     origin_access_identity: typing.Optional[_IOriginAccessIdentity_a922494c] = None,
 ) -> None:
@@ -5711,6 +6241,7 @@ def _typecheckingstub__f0edd2083352b96faf3ea9eb05136629dff841fa272ecdb6dfb52772a
     *,
     http_port: typing.Optional[jsii.Number] = None,
     https_port: typing.Optional[jsii.Number] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
     protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -5723,6 +6254,7 @@ def _typecheckingstub__f0edd2083352b96faf3ea9eb05136629dff841fa272ecdb6dfb52772a
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5736,9 +6268,11 @@ def _typecheckingstub__5bc18cdba7c0e6d7d0a68d2a1cf3c3f91f50a7e3e7384f5f62ebee600
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
     http_port: typing.Optional[jsii.Number] = None,
     https_port: typing.Optional[jsii.Number] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_ssl_protocols: typing.Optional[typing.Sequence[_OriginSslPolicy_d65cede2]] = None,
     protocol_policy: typing.Optional[_OriginProtocolPolicy_967ed73c] = None,
@@ -5761,6 +6295,7 @@ def _typecheckingstub__27d66442a972110883cdde622df199c2db6a7264e19031f1118d7aa01
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5784,6 +6319,7 @@ def _typecheckingstub__8615ead9bb90a8fd2c91dc07371d03b8f4b4192a1500a449646bd8a7b
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5807,6 +6343,7 @@ def _typecheckingstub__1fc3f8db0baa99548845b1733d31d8271fbe2c934c89a6c44958edcb3
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5830,6 +6367,7 @@ def _typecheckingstub__83c5561f2747600ee99b6ee41190dcba45f2a24cc1c9500759e9c3823
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5848,6 +6386,7 @@ def _typecheckingstub__b7ed2e0f746eab77b2774c1adb0f114f10e786a05b531cd1218f93ad3
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -5867,6 +6406,7 @@ def _typecheckingstub__6605ea586b09bdf0ddb88a83b7c4e00626fe891625563cb019777b148
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
     domain_name: typing.Optional[builtins.str] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
@@ -5884,6 +6424,7 @@ def _typecheckingstub__e581b80df977101d74a87a861c6ddf752f3dc8bcbd114f5e12bc33daa
     origin_id: typing.Optional[builtins.str] = None,
     origin_shield_enabled: typing.Optional[builtins.bool] = None,
     origin_shield_region: typing.Optional[builtins.str] = None,
+    response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
     domain_name: typing.Optional[builtins.str] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,